Information processing system

Abstract

To achieve safer and more efficient information processing in information processing systems that transmit data. [Solution] The information processing system includes a first type electronic device having at least a transmission function and a second type electronic device having at least a reception function, wherein the first type electronic device includes a target data acquisition processing means for acquiring raw data to be transmitted and generating the target data based on a reception notification described later, and a transmission data transmission control means for executing control to transmit the transmission data to the second type electronic device, wherein the second type electronic device includes a transmission data reception control means for executing control to receive the transmission data, a verification means for confirming the validity of the received transmission data, and a reception notification means for giving the reception notification to the first type electronic device when the verification is made, and a storage control means for executing control to store the transmission data whose validity has been confirmed in the storage medium.

Description

Technical Field

[0001] The present invention relates to an information processing system.

Background Art

[0002] Conventionally, when transmitting and receiving information, countermeasures against the risk of data destruction are important. In this regard, technologies for reducing the risk of data destruction during information transmission have been proposed (see, for example, Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] Here, in only the conventional technologies including the above-mentioned Patent Document 1, for example, when constructing a system for transmitting data from a sensor via a communication line, it was normal for all the output information from the sensor to be centrally managed by one or a small number of CPUs (Central Processing Units). However, in recent years, the number and types of sensors have been increasing, and the load on the CPUs for managing the output information has been increasing more and more. In contrast, when a situation such as data corruption of transmitted data due to lightning, electrostatic discharge phenomena, electromagnetic wave noise from other electronic devices, or even data loss occurs, if it takes time for the CPU to perform data validity check processing, the CPU side cannot take prompt action. Therefore, in a situation where the importance of being able to immediately detect an abnormality in transmitted data that causes the system to malfunction while reducing the load on the CPU and further being able to instantly normalize the abnormality in transmitted data is increasing.

[0005] This invention has been made in view of these circumstances, and aims to realize safer and more efficient information processing in information processing systems that transmit data. [Means for solving the problem]

[0006] To achieve the above objective, an information processing system according to one aspect of the present invention is: It includes at least a transmission function that transmits transmission data in accordance with a predetermined wireless communication method, and a first storage medium for storing said transmission data. Class 1 electronic equipment and, A second type of electronic device having at least a receiving function for receiving the transmission data in accordance with the predetermined wireless communication method and including a second storage medium for storing the transmission data, An information processing system including, The aforementioned Type 1 electronic device is, A target data acquisition and processing means that acquires target data to be transmitted, or acquires the source data of said target data and processes said source data to generate said target data, A transmission data generation means that generates the transmission data for each predetermined unit based on the target data, A transmission data transmission control means that performs control to transmit the transmission data to the second type electronic device in accordance with the predetermined wireless communication method, Equipped with, The aforementioned Type 2 electronic equipment is, A transmission data reception control means that performs control to receive the transmission data in accordance with the predetermined wireless communication method, A verification means for verifying the received transmission data, A storage control means that executes control to store the confirmed transmission data in the second storage medium, Equipped with, The transmission data generation means of the first type electronic device is A generation means that repeatedly performs a process to generate data for each predetermined unit based on the target data, The generation means generates the data of the predetermined unit to be processed this time as first unit data, The system further includes a first type electronic device storage control means that records the hash value associated with the transmission data received as notification from the second type electronic device onto the first storage medium. A first processing means that generates a hash value based on the latest hash value among the hash values ​​recorded in the first storage medium, generates information including the hash value as first associated information, and adds the first associated information to the first unit data to be processed, A second processing means generates information including at least the hash value obtained from the first unit data as second association information, and adds the second association information to the first unit data to be processed. Includes, At the p-th time (where p is an integer value of 2 or more), the data to which the first association information and the second association information have been added to the first unit data generated by the generation means is output as the p-th transmission data. The transmission data transmission control means of the first type electronic device executes control to transmit the p-th transmission data to the second type electronic device, The verification means of the second type electronic device, upon receiving transmission data from the first type electronic device, confirms that the hash value obtained from the first association information of the received transmission data matches one of the hash values ​​stored in the second storage medium, The hash value is recalculated based on the hash value obtained from the first association information in the transmitted data and the first unit data of the transmitted data, and the aforementioned verification of the transmitted data is performed by confirming that the recalculated hash value matches the hash value obtained from the second association information in the transmitted data. The second type electronic device further includes a reception notification means that, when the confirmation of the transmitted data is performed by the confirmation means, it notifies the first type electronic device of the reception. The storage control means of the second type electronic device executes control to store the p-th transmission data, which has been confirmed, in the second storage medium together with the p-th hash value obtained from the second association information of the p-th transmission data and the reception notification. [Effects of the Invention]

[0007] According to the present invention, it is possible to achieve safer and more efficient information processing in an information processing system that transmits data. [Brief explanation of the drawing]

[0008] [Figure 1] This is a schematic diagram showing the overall outline of an information processing system according to one embodiment of the present invention. [Figure 2] This block diagram shows the functional configuration of a slave chip HCCS and a master chip HCCM that constitute an information processing system according to one embodiment of the present invention. [Figure 3] This is a schematic diagram illustrating the structure of transmitted data and how that data is transmitted and verified within a hash chain network. [Figure 4] This diagram shows the challenges of conventional hash chain technology. [Figure 5] This is a block diagram showing how data is transmitted normally in an information processing system according to one embodiment of the present invention. [Figure 6] This block diagram shows how, in an information processing system according to one embodiment of the present invention, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data and then transmits a reception notification to the slave chip HCCS. [Figure 7] This block diagram shows how a slave chip HCCS receives a reception notification sent from a master chip HCCM in an information processing system according to one embodiment of the present invention. [Figure 8]In an information processing system according to an embodiment of the present invention, it is a block diagram showing a state where a slave chip HCCS and a master chip HCCM transmit and receive data X+1 which is the following data. [Figure 9] In an information processing system according to an embodiment of the present invention, it is a block diagram showing a state where a slave chip HCCS and a master chip HCCM transmit and receive data X+2 which is the following data. [Figure 10] In an information processing system according to an embodiment of the present invention, it is a block diagram showing a processing flow when the slave chip HCCS transmits data X+1 which is the following data but the master chip HCCM fails to receive it. [Figure 11] In an information processing system according to an embodiment of the present invention, it is a block diagram showing a processing flow when, after the transmission error shown in FIG. 10 occurs, the slave chip HCCS newly transmits data X+1α. [Figure 12] In an information processing system according to an embodiment of the present invention, it is a block diagram showing a processing flow when the slave chip HCCS transmits data X+1 which is the following data and the master chip HCCM receives it, but the reception notification transmitted from the master chip HCCM fails to be delivered to the slave chip HCCS. [Figure 13] In an information processing system according to an embodiment of the present invention, it is a block diagram showing a processing flow when, after the transmission error shown in FIG. 12 occurs, the slave chip HCCS newly transmits data X+1α. [Figure 14] In an information processing system according to an embodiment of the present invention, it is a diagram showing a process of setting a base value corresponding to time information by a slave chip HCCS and a master chip HCCM. [Figure 15] In an information processing system according to an embodiment of the present invention, it is a schematic diagram showing a state where a smart key and a control unit of an automobile are controlled. [Figure 16] In an information processing system according to an embodiment of the present invention, it is a block diagram showing a system configuration in which a smart key and a control unit of an automobile are controlled. [Modes for carrying out the invention]

[0009] Embodiments of the present invention will be described below with reference to the drawings.

[0010] This invention relates to an information processing system. This invention relates to a technology that enables efficient data transmission while ensuring data reliability. First, the receiving side sends an acknowledgment signal, and the transmitting side always refers to the most recent of these acknowledgments when transmitting. The receiving side verifies that the transmission is based on a valid acknowledgment signal and receives only the data that has been verified. Based on this acknowledgment mechanism, the transmitting side acquires the raw data to be transmitted and processes it by adding a base value. This processed data is divided into predetermined units and processed sequentially. In processing each unit of data, the relationship between the data currently being processed and the data processed immediately before it is established using a hash value. Furthermore, a hash value is also generated for the data being processed itself and this is also added as association information. This double association makes it possible to detect data tampering and unauthorized insertion. The transmission data generated through these processes is sent via wireless communication. On the receiving side, in addition to verifying the legitimacy of the aforementioned acknowledgment signals, the legitimacy of the received data itself is also verified, and only the verified data is stored on the storage medium. Thus, the present invention ensures data reliability in multiple layers and achieves efficient data transmission by combining strict management of the reception confirmation signal with multiple safety assurance mechanisms. Figure 1 is a schematic diagram showing the overall outline of an information processing system according to one embodiment of the present invention. This system is, for example, a system located in a factory, and is composed of a slave hash chain chip (hereinafter referred to as "slave chip") and a master hash chain chip (hereinafter referred to as "master chip") that are interconnected via a predetermined wireless communication network (hereinafter referred to as "hash chain network"). Here, wireless communication includes wireless communication using radio waves, voice communication using sound waves, or communication using light, but the present invention is not limited to wireless communication and is also effective for wired communication.

[0011] Hereafter, when it is not necessary to distinguish between slave chips, they will be referred to as "Slave Chip HCCS," and when it is necessary to distinguish between them, they will be described as "Slave Chip HCCS-1," "Slave Chip HCCS-2," and so on.

[0012] The slave chip HCCS has, for example, a sensor and a transmission function that transmits data according to a predetermined wireless communication method. The master chip HCCM has, for example, an actuator and a receiving function that receives the transmitted data. Both hash chain chips each include a recording medium for storing the transmitted data.

[0013] Specifically, the slave chip HCCS acquires, for example, a detection signal from a connected sensor as target data to be transmitted. The slave chip HCCS generates block-level transmission data, as described later, from this target data. The generated transmission data is broadcast to the hash chain network.

[0014] Meanwhile, the master chip HCCM receives the transmitted data in block units, which will be described later. The master chip HCCM verifies the validity of the received transmission data and, based on the transmission data, executes control, for example, on an actuator.

[0015] In this system, the slave chip HCCS and the master chip HCCM are connected via a network, enabling safe and efficient transmission of control data, for example, from sensors to actuators.

[0016] The slave chip HCCS, master chip HCCM, and the control devices described later are information processing devices equipped with a CPU (Central Processing Unit), memory-related units such as ROM (Read Only Memory) and RAM (Random Access Memory), input / output interfaces, and communication units. Through the cooperation of these various hardware components and software, various processes can be executed. As a result, the aforementioned information processing system can be provided.

[0017] Figure 2 is a block diagram showing the functional configuration of the slave chip HCCS and the master chip HCCM that constitute the information processing system according to one embodiment of the present invention. In the CPU of the slave chip HCCS, the target data acquisition and processing unit 51, the transmission data generation unit 52, the generation unit 53, the first processing unit 54, the second processing unit 55, the transmission data transmission control unit 56, and the base value and other information acquisition unit 57 are functional. In the CPU of the master chip HCCM, the transmission data reception control unit 61, the verification unit 62, the storage control unit 63, the base value generation unit 64, the time synchronization unit 65, and the information transmission control unit 66 are functional.

[0018] The target data acquisition and processing unit 51 has the function of acquiring the raw data of the target data to be transmitted and generating the target data by processing it at a predetermined timing, for example, by adding predetermined base values, time information, electronic keys, etc., as described later. The transmission data generation unit 52 has the function of generating transmission data for predetermined units based on the target data. The generation unit 53 has the function of repeatedly generating data in predetermined units based on the target data. The first processing unit 54 has the function of using the data of a predetermined unit to be processed, generated by the generation unit this time as first unit data, and the data of a predetermined unit generated last time as second unit data, generating information that includes at least the hash value obtained from the second unit data as first associated information, and adding this information to the first unit data to be processed. The second processing unit 55 has the function of generating information that includes at least a hash value obtained from the first unit data as second associated information, and attaching the second associated information to the first unit data to be processed. The transmission data transmission control unit 56 has the function of executing control to transmit transmission data to the master chip HCCM according to a predetermined wireless communication method. The base value information acquisition unit 57 has the function of acquiring base values ​​and information such as reception notifications, which will be described later, that are necessary when generating transmission data, and the function of storing the acquired information in the storage medium 18.

[0019] The transmission data reception control unit 61 has the function of performing control to receive transmission data according to a predetermined wireless communication method. The verification unit 62 has the function of verifying the validity of the received transmission data. The memory control unit 63 has the function of executing control to store the verified transmission data in the storage medium. The base value generation unit 64 has the function of generating base values. The time synchronization unit 65 has the function of synchronizing the time with the group of recording devices. The information transmission control unit 66 has the function of transmitting information such as reception notifications and time information based on the synchronized time to the slave chip HCCS.

[0020] Figure 3 is a schematic diagram showing the structure of transmitted data and how that data is transmitted and verified within the hash chain network.

[0021] The transmitted data consists of block X, block X+1, block X+2, and the hash value appended to each data block. For example, block X+1 has data X+1, a previous hash value X which includes the hash value of the previous block X, and a current hash value X+1 which includes the hash value based on data X+1.

[0022] The validity of the transmitted data is verified using the following procedure. First, it is checked whether the previous (N-1) hash value obtained from the previous hash value X of block X+1 matches the previous hash value recorded on the storage medium. Next, the current hash value is recalculated based on the previous hash value obtained from the previous hash value X in block X+1 and data X+1, and it is checked whether the recalculated current hash value matches the current hash value obtained from the current hash value X+1 of block X+1.

[0023] These verifications ensure the continuity and legitimacy of the transmitted data, preventing data tampering and unauthorized insertion. The verified transmitted data is recorded on the storage medium along with its hash value.

[0024] The setting of baseline values ​​from the master chip HCCM to the slave chip HCCS is performed at the following timings.

[0025] First, the base value information acquisition unit 57 of the slave chip HCCS requests a base value from the master chip HCCM when the slave chip HCCS is started up. Similarly, the base value request is also executed when the slave chip HCCS is reset or reconfigured.

[0026] Meanwhile, the base value generation unit 64 of the master chip HCCM sends a request to the slave chip HCCS to reset the base value when it is time for periodic base value updates or when emergency resetting is required. At these times, the aforementioned base value request and authentication processing flow is executed.

[0027] Figure 4 illustrates the challenges of conventional hash chain technology. In conventional hash chains, if a block of transmitted data is missing, the hash values ​​held by the transmitting slave and receiving master will differ, making it impossible to perform the intended, proper verification. Furthermore, it is based on the assumption of continuous data transmission and does not consider intermittent transmission. As shown in Figure 4, if a block is missing, the continuity of the data cannot be determined. This is because the current hash value X and the previous hash value X+1 will not match.

[0028] Therefore, an information processing system that can intermittently determine the continuity of data will be described as an embodiment of the present invention with reference to Figures 5 to 13.

[0029] Figure 5 is a block diagram showing how data is transmitted normally. In step S101, the target data acquisition and processing unit 51 of the slave chip HCCS generates transmission data consisting of the previous hash value, data X, and the current hash value X, and the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM. In step S102, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data.

[0030] Figure 6 is a block diagram showing how the transmission data reception control unit 61 of the master chip HCCM receives the transmission data and then transmits a reception notification to the slave chip HCCS. In step S201, the transmission data transmission control unit 56 transmits the reception notification X to the slave chip. In step S202, the storage control unit 63 stores the current hash value X and the reception notification X in association in the storage medium 18.

[0031] Figure 7 is a block diagram showing how the slave chip HCCS receives a reception notification sent from the master chip HCCM. In step S301, the transmission data reception control unit 61 receives the reception notification X from the master chip HCCM. In step S302, the base value information acquisition unit 57 of the slave chip HCCS stores the current hash value X and the reception notification X in the storage medium 18, associating them.

[0032] Figure 8 is a block diagram showing how the slave chip HCCS and the master chip HCCM send and receive data X+1, which is the next data. In step S401, the target data acquisition and processing unit 51 uses a hash value for which a reception notification exists when transmitting data X+1. In this case, the reception notification X is used. In step S402, the target data acquisition and processing unit 51 generates transmission data consisting of the previous hash value X, data X+1, and the current hash value X+1. In step S403, the base value and other information acquisition unit 57 stores the current hash value X+1 in the storage medium 18. In step S404, the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM.

[0033] In step S405, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data. In step S406, the verification unit 62 confirms that the previous hash value X of the received transmission data matches the current hash value X stored in the storage medium 18, and confirms its continuity and legitimacy. In step S407, the storage control unit 63 stores the current hash value X+1 of the data whose legitimacy has been confirmed in the storage medium 18. In step S408, the information transmission control unit 66 of the master chip HCCM sends a reception notification X+1 corresponding to the data X+1 to the slave chip HCCS. In step S409, the storage control unit 63 stores the reception notification X+1 corresponding to the data X+1 in the storage medium 18, associating it with the current hash value X+1. In step S410, the base value information acquisition unit 57 of the slave chip HCCS receives the reception notification X+1. In step S411, the base value information acquisition unit 57 stores the received notification X+1 in the storage medium 18, associating it with the current hash value X+1.

[0034] Figure 9 is a block diagram showing how the slave chip HCCS and the master chip HCCM send and receive data X+2. In step S501, the target data acquisition and processing unit 51 uses a hash value for which a reception notification exists when transmitting data X+2. In this case, reception notification X+1 is used. In step S502, the target data acquisition and processing unit 51 generates transmission data consisting of the previous hash value X+1, data X+2, and the current hash value X+2. In step S503, the base value and other information acquisition unit 57 stores the current hash value X+2 in the storage medium 18. In step S504, the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM.

[0035] In step S505, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data. In step S506, the verification unit 62 confirms that the previous hash value X+1 of the received transmission data matches the current hash value X+1 stored in the storage medium 18, and confirms continuity and legitimacy. Here, since the previous hash value X+1 has been sent, the reception notification X corresponding to the current hash value X stored based on the previous hash value X will not be referenced thereafter. For this reason, the reception notification X corresponding to this current hash value X may be deleted. In other words, if the current hash value that is the same as the current hash value stored as corresponding to a certain previous hash value is sent from the slave chip HCCS, the current hash value corresponding to the previous hash value received before that current hash value may be deleted. To put it another way, if the current hash value that is the same as the current hash value stored as corresponding to a certain previous hash value is sent from the slave chip HCCS, the current hash value corresponding to the previous hash value received before that current hash value may be overwritten with the current hash value stored as corresponding to the previous hash value sent from the slave chip. In step S507, the memory control unit 63 stores the current hash value X+2 of the verified data in the storage medium 18. In step S508, the information transmission control unit 66 of the master chip HCCM transmits a reception notification X+2 corresponding to the data X+2 to the slave chip HCCS. In step S509, the memory control unit 63 stores the reception notification X+2 corresponding to the data X+2 in the storage medium 18, associating it with the current hash value X+2. In step S510, the base value information acquisition unit 57 of the slave chip HCCS receives the reception notification X+2. In step S511, the base value information acquisition unit 57 stores the reception notification X+2 in the storage medium 18, associating it with the current hash value X+2.

[0036] Figure 10 is a block diagram showing the processing flow when the slave chip HCCS sends data X+1, which is the next data, but the master chip HCCM is unable to receive it.

[0037] In step S601, the target data acquisition and processing unit 51 uses a hash value for which a reception notification exists when transmitting data X+1. In this case, the reception notification X is used. In step S602, the target data acquisition and processing unit 51 creates transmission data consisting of the previous hash value X, data X+1, and the current hash value X+1. In step S603, the base value information acquisition unit 57 stores the current hash value X+1 in the storage medium 18. In step S604, the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM.

[0038] In step S605, the transmission data reception control unit 61 of the master chip HCCM should normally receive the transmission data, but the master chip HCCM is unable to receive the transmission data due to a communication failure in the communication line, a reception error in the master chip HCCM, or other reasons. Compared with Figure 8, steps S605 to S611, which correspond to steps S405 to S411 that should be executed by the master chip HCCM in the process shown in Figure 8, are not executed in the process shown in Figure 10. Furthermore, because the reception notification X+1 is not received, the base value information acquisition unit 57 of the slave chip HCCS is unable to execute step S611, which should be executed, namely the step of associating the current hash value X+1 with the reception notification X+1 and storing it in the storage medium 18.

[0039] Figure 11 is a block diagram showing the processing flow when the slave chip HCCS sends new data X+1α after the transmission error shown in Figure 10 occurs. However, the same applies when retransmitting data X+1.

[0040] In step S701, the target data acquisition and processing unit 51 uses the hash value associated with the corresponding received notification. Ideally, the target data acquisition and processing unit 51 would like to use the current hash value X+1 as the previous hash value, but there is no current hash value X+1 associated with the received notification. Therefore, the target data acquisition and processing unit 51 uses the current hash value X associated with the received notification X.

[0041] In step S702, the target data acquisition and processing unit 51 creates transmission data consisting of the previous hash value X, data X+1α, and the current hash value X+1α. In step S703, the base value and other information acquisition unit 57 stores the current hash value X+1α in the storage medium 18. In step S704, the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM.

[0042] In step S705, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data. In step S706, the verification unit 62 confirms that the previous hash value X of the received transmission data matches the current hash value X stored in the storage medium 18, and verifies its validity. That is, even if one block is missing, the verification of validity can be performed without any problems. In step S707, the storage control unit 63 stores the current hash value X+1α of the data whose validity has been proven in the storage medium 18. In step S708, the information transmission control unit 66 of the master chip HCCM sends a reception notification X+1α corresponding to the data X+1α to the slave chip HCCS. In step S709, the storage control unit 63 stores the reception notification X+1α corresponding to the data X+1α in the storage medium 18, associating it with the current hash value X+1α. In step S710, the base value information acquisition unit 57 of the slave chip HCCS receives the reception notification X+1α. In step S711, the base value information acquisition unit 57 records the received notification X+1α in the storage medium 18, associating it with the current hash value X+1α. Here, the base value information acquisition unit 57 overwrites the current hash value X+1, which does not have a corresponding received notification, with the current hash value X+1α associated with the received notification X+1α.

[0043] Figure 12 is a block diagram showing the processing flow when the slave chip HCCS sends data X+1, which is the next data, and the master chip HCCM receives it, but the reception notification sent from the master chip HCCM is not delivered to the slave chip HCCS.

[0044] In step S801, the target data acquisition and processing unit 51 uses a hash value for which a reception notification exists when transmitting data X+1. In this case, the reception notification X is used. In step S802, the target data acquisition and processing unit 51 creates transmission data consisting of the previous hash value X, data X+1, and the current hash value X+1. In step S803, the base value information acquisition unit 57 stores the current hash value X+1 in the storage medium 18. In step S804, the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM.

[0045] In step S805, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data. In step S806, the verification unit 62 confirms that the previous hash value X of the received transmission data matches the current hash value X stored in the storage medium 18, and confirms its continuity and legitimacy. In step S807, the storage control unit 63 stores the current hash value X+1 of the data whose legitimacy has been proven in the storage medium 18. In step S808, the information transmission control unit 66 of the master chip HCCM sends a reception notification X+1 corresponding to the data X+1 to the slave chip HCCS. In step S809, the storage control unit 63 stores the reception notification X+1 corresponding to the data X+1 in the storage medium 18, associating it with the current hash value X+1.

[0046] However, due to communication failures or reception errors, the base value information acquisition unit 57 of the slave chip HCCS is unable to receive the reception notification X+1 in step S810. Therefore, the base value information acquisition unit 57 is unable to perform the steps of acquiring the reception notification and storing the reception notification in the storage medium 18 in association with the current hash value.

[0047] Figure 13 is a block diagram showing the processing flow when the slave chip HCCS sends new data X+1α after the transmission error shown in Figure 12 occurs. However, the same applies when retransmitting data X+1.

[0048] In step S901, the target data acquisition and processing unit 51 uses the hash value that has the corresponding received notification. Ideally, the target data acquisition and processing unit 51 would like to use the current hash value X+1 as the previous hash value, but there is no current hash value X+1 that has a received notification. Therefore, the target data acquisition and processing unit 51 uses the current hash value X that has the received notification X.

[0049] In step S902, the target data acquisition and processing unit 51 creates transmission data consisting of the previous hash value X, data X+1α, and the current hash value X+1α. In step S903, the base value and other information acquisition unit 57 stores the current hash value X+1α in the storage medium 18. In step S904, the transmission data transmission control unit 56 transmits the transmission data to the master chip HCCM.

[0050] In step S905, the transmission data reception control unit 61 of the master chip HCCM receives the transmission data. In step S906, the verification unit 62 confirms that the previous hash value X of the received transmission data matches the current hash value X stored in the storage medium 18, and verifies its validity. This ensures that verification can be performed without problems even if one block is missing from the transmission data. In step S907, the storage control unit 63 stores the current hash value X+1α of the data whose validity has been proven in the storage medium 18. In step S908, the information transmission control unit 66 of HCCM sends a reception notification X+1α corresponding to the data X+1α to the slave chip HCCS. In step S909, the storage control unit 63 stores the reception notification X+1α corresponding to the data X+1α in the storage medium 18, associating it with the current hash value X+1α.

[0051] In step S910, the base value information acquisition unit 57 of the slave chip HCCS receives a reception notification X+1α. In step S911, the base value information acquisition unit 57 records the reception notification X+1α in the storage medium 18, associating it with the current hash value X+1α. Here, the base value information acquisition unit 57 overwrites the current hash value X+1, which does not have a corresponding reception notification, with the current hash value X+1α associated with the reception notification X+1α.

[0052] Incidentally, the transmission error shown in Figure 12 may occur multiple times in a row. For this reason, the memory control unit 63 of the master chip HCCM needs to store the associated pairs of the current hash value and the received notification as a history in multiple storage media 18.

[0053] Then, in order to verify the legitimacy of the transmission data accompanied by the current hash value backed by the reception notification shown in Figure 13, the verification unit 62 confirms the legitimacy of the received transmission data based on whether one of the current hash values ​​stored in the storage medium 18 as history and paired with the reception notification matches the previous hash value associated with the received transmission data.

[0054] Then, the memory control unit 63 overwrites the previously stored current hash value X+1 and the corresponding received notification X+1 with the confirmed valid current hash value X+1α and the corresponding received notification X+1α.

[0055] Figure 14 shows the process by which the slave chip HCCS and the master chip HCCM set a base value corresponding to the time information. By deriving the current hash value based on the base value corresponding to the time information and the data, the above information processing system becomes an information processing system with improved security.

[0056] In step S1000, the public key of the base value generation unit 64 of the slave chip HCCS is recorded, for example, in the recording device group BNC shown in Figure 1 at a predetermined timing. Then, in step S1001, the information transmission control unit 66 of the master chip HCCM transmits time information to the slave chip HCCS.

[0057] In step S1002, the target data acquisition and processing unit 51 of the slave chip HCCS transmits the unique information of the slave chip HCCS to the master chip HCCM. In step S1003, the base value generation unit 64 of the master chip HCCM obtains the public key of the slave chip HCCS from the blockchain based on the unique information of the slave chip HCCS.

[0058] In step S1004, the base value generation unit 64 of the master chip HCCM encrypts the initial base value with the public key of the slave chip HCCS, and the information transmission control unit 66 transmits the encrypted public key to the slave chip HCCS. In step S1005, the base value information acquisition unit 57 of the slave chip HCCS decrypts the public key encrypted with the secret key and shares the time information with the master chip HCCM. In this case, the base value is accompanied by time information and functions as a one-time base value.

[0059] (Second Embodiment) In the first embodiment described above, an embodiment was described in which data transmission from the slave chip HCCS to the master chip HCCM within the local hash chain network becomes intermittent due to a communication failure or a communication error between the slave chip and the master chip, and how this ensures safe and reliable data transmission.

[0060] In the second embodiment, an embodiment for securely and reliably transmitting data in one-to-one communication will be described. For example, a control unit of an automobile and a smart key will be used as an example.

[0061] Automotive smart key systems, which allow for features such as unlocking doors and starting the engine, have become widely popular. However, in recent years, vulnerabilities to malicious attack methods such as relay attacks and replay attacks have been pointed out, and damage is particularly frequent in luxury cars.

[0062] Here, a relay attack is an attack method that allows the vehicle to be unlocked illegally even when the smart key is not nearby, by relaying the signals communicated between the vehicle's control unit and the smart key. A replay attack, on the other hand, is an attack method that allows the vehicle to be unlocked illegally by intercepting previously transmitted signals and retransmitting them.

[0063] Therefore, in this embodiment, the above problem is solved by applying the data transmission method using the reception confirmation signal described in the first embodiment to an automotive smart key system. The details will be explained below with reference to the drawings. The smart key has the functional components of the slave chip HCCS shown in Figure 2, and the vehicle's control unit has the functional components of the master chip HCCM shown in Figure 2. Furthermore, the setting device shown in Figure 5 has the functional components shown in Figure 2 and appropriately combines the functions of both the slave chip HCCS and the master chip HCCM.

[0064] Referring to Figures 15 and 16, a control method using a hash chain that securely and reliably controls a master chip HCCM, such as one found in an automobile, and a slave chip HCCS, such as one found in a smart key, by establishing a one-to-one correspondence. Figure 15 is a schematic diagram showing an information processing system comprising a smart key HCCS-K, an automobile control unit HCCM-C, a setting device 1B, and a group of memory devices BCN. Figure 16 is a block diagram showing the system configuration in which the smart key and the automobile control unit are controlled. The smart key, which is one of the slave chips HCCS, and the HCCM-C, the vehicle control unit, which is one of the master chips HCCM, are connected wirelessly and are also connected to a setting device. Furthermore, the setting device is connected to the memory device group BCN.

[0065] In this embodiment, the setting device 1B is used to perform the initial setup between the smart key HCCS-K and the vehicle's control unit HCCM-C.

[0066] First, during the manufacturing stage of the smart key HCCS-K, the target data acquisition and processing unit 51 of the setting device 1B acquires unique information contained within the smart key HCCS-K. This unique information may be a public key for signing or a public key provided by a secure element. The first type unique information recording control unit executes control to register the acquired unique information in an information recording device such as a blockchain.

[0067] Similarly, during the automobile manufacturing process, the target data acquisition and processing unit 51 of the setting device 1B acquires unique information (such as the vehicle ID and the public key for encryption) of the automobile's control unit HCCM-C. The storage control unit 63 of the setting device 1B executes control to record the acquired unique information in the storage device group BCN. The control unit of the automobile may function as a setting device.

[0068] Next, the base value information acquisition unit 57 of the setting device 1B connects to the smart key HCCS-K to acquire unique information (key ID, etc.), and from that unique information, it acquires information registered in the storage device group BCN (signature public key, etc.). In addition, the base value information acquisition unit 57 of the setting device 1B also connects to the vehicle's control unit HCCM-C to acquire time information and unique information (vehicle ID, etc.), and from that unique information, it acquires information registered in the storage device group BCN (encryption public key, etc.).

[0069] The base value generation unit 64 of the setting device 1B generates a base value (Seed) and executes control to record it in the respective storage media 18 of the smart key HCCS-K and the automobile control unit HCCM-C. The storage control unit 63 of the automobile control unit HCCM-C records the unique information of the smart key HCCS-K (such as key ID and signature public key) in the storage media 18 of the automobile control unit HCCM-C. The base value information acquisition unit 57 of the smart key HCCS-K executes control to record time information and unique information (such as encryption public key) in the storage media 18 of the smart key HCCS-K. Instead of recording the information in an information recording device, it may be recorded directly in the vehicle's control unit. If the information is recorded in the vehicle's control unit, when it receives a unique ID from the smart key, it compares it with the information it has recorded, authenticates that it is a legitimate smart key if there is a match for the unique ID, retrieves the public key recorded in association with that unique ID, and encrypts the seed.

[0070] In the actual authentication process, the target data acquisition and processing unit 51 of the smart key HCCS-K calculates the current hash value from a value calculated based on a base value and time information, the desired operation information (such as unlocking or locking), and the previously transmitted hash value (unique information in the case of the first transmission), triggered by a button press or approach to the vehicle, as shown below in Figure 16. The transmission data generation unit 52 generates transmission data that includes the previously transmitted hash value, the value calculated based on time information, the desired operation information, and the current hash value. The transmission data transmission control unit 56 then executes control to either encrypt the generated transmission data with the vehicle's public key and transmit it, or to add a digital signature with the smart key HCCS-K's private key and transmit it.

[0071] On the vehicle side, the verification unit 62 of the control unit HCCM-C calculates the current hash value using a value calculated based on the previously received hash value and time information, the desired operation information, and the base value it holds, and verifies whether it is equal to the received current hash value. If the verification is successful, the control unit HCCM-C executes control to perform the operation requested by the smart key HCCS-K. If the received data is encrypted, it is decrypted, and if a digital signature is attached, the signature is also verified.

[0072] In this case, if the vehicle's control unit HCCM-C and the smart key HCCS-K are far apart or have obstacles between them, communication failures may occur. For this reason, in the authentication operation described above, it is effective to apply the hash chain technology that utilizes the received notification described in the first embodiment.

[0073] Although one embodiment of the present invention has been described above, the present invention is not limited to the embodiments described above, and any modifications, improvements, etc. that can achieve the objectives of the present invention are considered to be included in the present invention.

[0074] For example, the system configuration shown in Figure 1 and the hardware configuration described above are merely illustrative examples for achieving the objectives of the present invention and are not particularly limited.

[0075] Furthermore, the functional block diagram shown in Figure 2 is merely illustrative and not particularly limiting. In other words, it is sufficient that the information processing system in Figure 1 has the functionality to execute the series of processes described above as a whole, and the functional blocks and databases used to realize this functionality are not particularly limited to the example in Figure 2.

[0076] Furthermore, the location of the functional blocks is not limited to Figure 2, but can be arbitrary. For example, at least a portion of the functional blocks may be provided by another information processing device.

[0077] Furthermore, the series of processes described above can be executed by hardware or by software. Furthermore, a single functional block may consist of hardware alone, software alone, or a combination of both.

[0078] When a series of processes are executed by software, the programs that make up that software are installed on a computer or other device from a network or storage medium. The computer may be a computer that is built into dedicated hardware. Furthermore, a computer can be any computer capable of performing various functions by installing various programs, such as a server, a general-purpose smartphone, or a personal computer.

[0079] Such recording media containing programs may consist not only of removable media (not shown) distributed separately from the main unit of the device to provide the program to the user, but also of recording media provided to the user in a state where they are pre-installed in the main unit of the device.

[0080] In this specification, the step of describing a program to be recorded on a recording medium includes not only processes that are performed chronologically in that order, but also processes that are not necessarily performed chronologically, but are executed in parallel or individually.

[0081] In summary, the information processing system to which the present invention applies only needs to have the following configuration, and can take various forms.

[0082] Information processing systems are A first type electronic device (e.g., "slave chip HCCS" as shown in Figure 2) includes at least a transmission function that transmits transmission data according to a predetermined wireless communication method and a first storage medium (e.g., "storage medium 18" as shown in Figure 2) for storing said transmission data, A second type of electronic device (e.g., "master chip HCCM" as shown in Figure 2) includes at least a receiving function for receiving the transmission data in accordance with the predetermined wireless communication method and a second storage medium (e.g., "storage medium 18" as shown in Figure 2) for storing the transmission data, Includes, The aforementioned Type 1 electronic device is, A target data acquisition and processing means (for example, the "target data acquisition and processing unit 51" shown in Figure 2) that acquires target data to be transmitted, or acquires the source data of the target data and processes the source data to generate the target data, A transmission data generation means (for example, the "transmission data generation unit 52" shown in Figure 2) generates the transmission data for each predetermined unit based on the target data, A transmission data transmission control means (for example, the "transmission data transmission control unit 56" shown in Figure 2) that performs control to transmit the transmission data to the second type electronic device in accordance with the predetermined wireless communication method, Equipped with, The aforementioned Type 2 electronic equipment is, A transmission data reception control means (for example, the "transmission data reception control unit 61" shown in Figure 2) that performs control to receive the transmission data in accordance with the predetermined wireless communication method, A verification means for verifying the received transmission data (for example, the "verification unit 62" shown in Figure 2), A storage control means (for example, the "storage control unit 63" shown in Figure 2) that executes control to store the confirmed transmission data in the second storage medium, Equipped with, The transmission data generation means of the first type electronic device is A generation means (for example, the "generation unit 53" shown in Figure 2) that repeatedly processes to generate data for each predetermined unit based on the target data, The generation means generates the data of the predetermined unit to be processed this time as first unit data, The system further includes a first type electronic device storage control means (for example, the "base value information acquisition unit 57" in Figure 2) that records the hash value associated with the transmission data received as notification from the second type electronic device onto the first storage medium, A first processing means (for example, the "first processing unit 54" shown in Figure 2) generates a hash value based on the latest hash value among the hash values ​​recorded in the first storage medium, generates information including the hash value as first associated information, and adds the first associated information to the first unit data to be processed, A second processing means (for example, the "second processing unit 55" shown in Figure 2) generates information including at least the hash value obtained from the first unit data as second association information, and adds the second association information to the first unit data to be processed, Includes, At the p-th time (where p is an integer value of 2 or more), the data to which the first association information and the second association information have been added to the first unit data generated by the generation means is output as the p-th transmission data. The transmission data transmission control means of the first type electronic device executes control to transmit the p-th transmission data to the second type electronic device, The verification means of the second type electronic device, upon receiving transmission data from the first type electronic device, confirms that the hash value obtained from the first association information of the received transmission data matches one of the hash values ​​stored in the second storage medium, The hash value is recalculated based on the hash value obtained from the first association information in the transmitted data and the first unit data of the transmitted data, and the aforementioned verification of the transmitted data is performed by confirming that the recalculated hash value matches the hash value obtained from the second association information in the transmitted data. The second type electronic device further includes a reception notification means that, when the confirmation of the transmitted data is performed by the confirmation means, it notifies the first type electronic device of the reception. The memory control means of the second type electronic device is characterized by performing control to store the p-th transmission data, which has been confirmed, in the second storage medium together with the p-th hash value obtained from the second association information of the p-th transmission data and the reception notification.

[0083] This enables reliable detection of data tampering and unauthorized insertion during data transmission from Type 1 electronic equipment to Type 2 electronic equipment through reception notifications and verification using dual hash values. Furthermore, even if data continuity is interrupted due to communication failures, secure and efficient data transmission can be achieved by using reception notifications and hash value history.

[0084] The information processing system disclosed as the second embodiment is A first type electronic device (for example, a "smart key" as described in the second embodiment) includes at least a transmission function that transmits transmission data according to a predetermined wireless communication method and a first storage medium (for example, a "storage medium 18" as described in Figure 2) for storing said transmission data, A second type of electronic device (for example, the "automobile control unit" described in the second embodiment) includes a second storage medium (for example, the "storage medium 18" described in Figure 2) that has at least a receiving function to receive the transmission data in accordance with the predetermined wireless communication method and stores the said transmission data, A group of recording devices consisting of one or more recording devices (for example, the "blockchain" described in the second embodiment), An information processing device (for example, "setting device 1B" described in the second embodiment) that communicates with the first type electronic device and the second type electronic device, respectively, An information processing system including, The aforementioned Type 1 electronic device is, A target data acquisition and processing means (for example, the "target data acquisition and processing unit 51" shown in Figure 2) that acquires target data to be transmitted, or acquires the source data of the target data and processes the source data to generate the target data, A transmission data generation means (for example, the "transmission data generation unit 52" shown in Figure 2) generates the transmission data for each predetermined unit based on the target data, A transmission data transmission control means (for example, the "transmission data transmission control unit 56" shown in Figure 2) that performs control to transmit the transmission data to the second type electronic device in accordance with the predetermined wireless communication method, A first-type unique information recording control means that performs control to record first-type unique information, which is unique information associated with the first-type electronic device, in the group of recording devices, Equipped with, The aforementioned Type 2 electronic equipment is, A transmission data reception control means (for example, the "transmission data reception control unit 61" shown in Figure 2) that performs control to receive the transmission data in accordance with the predetermined wireless communication method, A verification means for verifying the received transmission data (for example, the "verification unit 62" shown in Figure 2), A storage control means (for example, the "storage control unit 63" shown in Figure 2) that executes control to store the confirmed transmission data in the second storage medium, A Type 2 unique information recording control means that executes control to record Type 2 unique information, which is unique information associated with the Type 2 electronic device, on the recording device, Equipped with, The aforementioned other information processing device is A means for acquiring unique time information (for example, the "unique time information acquisition unit" described in the second embodiment) that acquires unique information of type 1 from the first electronic device and acquires unique information of type 2 and time information from the second electronic device, A base value providing means (for example, the "base value providing unit" described in the second embodiment) that generates a base value and provides it to the first type electronic device and the second type electronic device, The device has a unique time information providing means that provides the first type unique information acquired from the first type electronic device to the second type electronic device, and provides the second type unique information acquired from the second type electronic device and the time information to the first type electronic device. The transmission data generation means of the first type electronic device is A generation means (for example, the "generation unit 53" shown in Figure 2) that repeatedly processes to generate data for each predetermined unit based on the target data, The generation means generates the base value, the time information, the second type unique information, and the data of the predetermined unit of the processing target generated this time as first unit data at a predetermined timing, The first electronic device storage control means further includes recording in the first storage medium the hash value associated with the transmission data received as notification from the second electronic device, among the hash values ​​recorded in the first storage medium. A first processing means (for example, the "first processing unit 54" shown in Figure 2) generates a hash value based on the latest hash value among the hash values ​​recorded in the first storage medium, generates information including the hash value as first associated information, and adds the first associated information to the first unit data to be processed, A second processing means (for example, the "second processing unit 55" shown in Figure 2) generates information including at least the hash value obtained from the first unit data as second association information, and adds the second association information to the first unit data to be processed, Includes, At the p-th time (where p is an integer value of 2 or more), the data to which the first association information and the second association information have been added to the first unit data generated by the generation means is output as the p-th transmission data. The transmission data transmission control means of the first type electronic device executes control to transmit the p-th transmission data to the second type electronic device, The verification means for the second type of electronic device, upon receiving transmission data from the first type of electronic device, confirms that the hash value obtained from the first association information of the received transmission data matches one of the hash values ​​stored in the second storage medium, The hash value is recalculated based on the hash value obtained from the first association information in the transmitted data and the first unit data of the transmitted data, and the verification of the transmitted data is performed by confirming that the recalculated hash value matches the hash value obtained from the second association information in the transmitted data. The second type electronic device further includes a reception notification means that notifies the first type electronic device of receipt when the confirmation means has performed the confirmation of the transmitted data, The memory control means of the second type electronic device is characterized by performing control to store the p-th transmission data, which has been confirmed, in the second storage medium together with the p-th hash value obtained from the second association information of the p-th transmission data and the reception notification. This allows for secure sharing of unique information between the smart key and the vehicle's control unit via a configuration device during data transmission. Furthermore, by combining base values ​​and time information, it is possible to prevent malicious attacks such as relay attacks and replay attacks. In addition, even if data continuity is interrupted due to communication failures, secure and efficient data transmission can be achieved by using reception notifications and hash value history.

[0085] Furthermore, in an information processing system, the unique information of a Type II electronic device (for example, the "automobile control unit HCCM-C" described in the second embodiment) may include public key information. This allows data transmitted from the smart key to be securely sent and received using public-key cryptography.

[0086] Furthermore, in the information processing system, a Type 2 electronic device (for example, the "automobile control unit HCCM-C" described in the second embodiment) can decrypt transmitted data using a secret key. This ensures that encrypted transmission data can only be decrypted and processed by legitimate recipients, preventing interception and tampering by unauthorized third parties.

[0087] Furthermore, in the information processing system, the first type of electronic device may be a car key (for example, the "smart key HCCS-K" described in the second embodiment), and the second type of electronic device may be a control device that controls the locking and unlocking of the car key (for example, the "car control unit HCCM-C" described in the second embodiment). This enables secure and efficient authentication processing in smart key systems.

[0088] Furthermore, in an information processing system, the data of a predetermined unit to be processed may include data indicating an instruction to unlock a vehicle. This enables secure transmission of door unlocking instructions, ensuring legitimacy and continuity. [Explanation of Symbols]

[0089] S... Information processing system, 51... Target data acquisition and processing unit, 52... Transmission data generation unit, 53... Generation unit, 54... First processing unit, 55... Second processing unit, 56... Transmission data transmission control unit, 57... Base value and other information acquisition unit, 61... Transmission data reception control unit, 62... Verification unit, 63... Storage control unit, 64... Base value generation unit, 65... Time synchronization unit, 66... ​​Information transmission control unit, HCCS... Slave chip (slave hash chain chip), HCCS-K... Smart key, HCCM... Master chip (master hash chain chip), HCCM-A... Second type electronic device for storage, HCCM-C... Automobile control unit, BCN... Recording device group (blockchain network), 18... Storage medium

Claims

[Claim 1] A first type electronic device having at least a transmission function for transmitting transmission data in accordance with a predetermined wireless communication method and including a first storage medium for storing said transmission data, A second type of electronic device having at least a receiving function for receiving the transmission data in accordance with the predetermined wireless communication method and including a second storage medium for storing the transmission data, An information processing system including, The aforementioned Type 1 electronic equipment is, A target data acquisition and processing means that acquires target data to be transmitted, or acquires the source data of said target data and processes said source data to generate said target data, A transmission data generation means that generates the transmission data for each predetermined unit based on the target data, A transmission data transmission control means that performs control to transmit the transmission data to the second type electronic device in accordance with the predetermined wireless communication method, Equipped with, The aforementioned Type 2 electronic device is, A transmission data reception control means that performs control to receive the transmission data in accordance with the predetermined wireless communication method, A verification means for verifying the received transmission data, A storage control means that executes control to store the confirmed transmission data in the second storage medium, Equipped with, The transmission data generation means of the first type electronic device is A generation means that repeatedly performs a process to generate data for each predetermined unit based on the target data, The generation means generates the data of the predetermined unit to be processed this time as first unit data, The system further includes a first type electronic device storage control means that records the hash value associated with the transmission data received as notification from the second type electronic device onto the first storage medium. A first processing means that generates a hash value based on the latest hash value among the hash values ​​recorded in the first storage medium, generates information including the hash value as first associated information, and adds the first associated information to the first unit data to be processed, A second processing means generates information including at least the hash value obtained from the first unit data as second association information, and adds the second association information to the first unit data to be processed. Includes, At the p-th time (where p is an integer value of 2 or more), the data to which the first association information and the second association information have been added to the first unit data generated by the generation means is output as the p-th transmission data. The transmission data transmission control means of the first type electronic device executes control to transmit the p-th transmission data to the second type electronic device. The verification means of the second type electronic device, upon receiving transmission data from the first type electronic device, confirms that the hash value obtained from the first association information of the received transmission data matches one of the hash values ​​stored in the second storage medium, The hash value is recalculated based on the hash value obtained from the first association information in the transmitted data and the first unit data of the transmitted data, and the aforementioned verification of the transmitted data is performed by confirming that the recalculated hash value matches the hash value obtained from the second association information in the transmitted data. The second type electronic device further includes a reception notification means that, when the confirmation of the transmitted data is performed by the confirmation means, it notifies the first type electronic device of the reception. The storage control means of the second type of electronic device executes control to store the p-th transmission data, which has been confirmed, in the second storage medium together with the p-th hash value obtained from the second association information of the p-th transmission data and the reception notification. Information processing system.

Images