Communication systems, communication devices, methods, and programs

Abstract

A communication system according to one aspect of the present disclosure includes a plurality of communication devices, wherein: the communication devices each have an application program that is configured to perform encrypted communication with the other communication devices, and a switching unit that is configured to switch a key sharing scheme for generating a shared key that is used in the encrypted communication; and the switching unit is configured to switch to other key sharing schemes when the shared key cannot be generated by the key sharing scheme that is currently being used.

Description

Technical Field

[0001] The present disclosure relates to a communication system, a communication device, a method, and a program.

Background Art

[0002] A key sharing protocol called Quantum Key Distribution (QKD) is known (see, for example, Non-Patent Documents 1 and 2). QKD is a technology that shares a key for securing communication between two parties by quantum teleportation and uses the key (hereinafter also referred to as a shared key) to transmit and receive encrypted data.

[0003] In QKD, an entity (KME: Key Management Entity) that performs key sharing and an entity (SAE: Secure Application Entity) that performs data transmission and reception exist on different devices, and a key is shared between KEMs using an optical communication network realized by an optical fiber cable or the like.

Prior Art Documents

Non-Patent Documents

[0004]

Non-Patent Document 1

Non-Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, QKD has a problem where key sharing becomes impossible if the fiber optic cable is tapped continuously. Therefore, from the perspective of service continuity, it is necessary to be able to switch to another key sharing method if one method becomes unavailable for any reason.

[0006] This disclosure is made in view of the above points and provides a technology that can switch between multiple key sharing methods. [Means for solving the problem]

[0007] A communication system according to one aspect of the present disclosure is a communication system comprising a plurality of communication devices, wherein each communication device includes an application program configured to perform encrypted communication with other communication devices, and a switching unit configured to switch key sharing schemes for generating a shared key used for the encrypted communication, wherein the switching unit is configured to switch to another key sharing scheme if the shared key cannot be generated using the currently used key sharing scheme. [Effects of the Invention]

[0008] A technology is provided that allows switching between multiple key sharing methods. [Brief explanation of the drawing]

[0009] [Figure 1] This figure shows an example of the overall configuration of the communication system according to this embodiment. [Figure 2] This figure shows an example of the detailed functional configuration of the protocol conversion unit according to this embodiment. [Figure 3] This sequence diagram shows an example of the key acquisition process according to this embodiment. [Figure 4] This sequence diagram shows an example of the switching process according to this embodiment. [Figure 5] This figure shows a modified example of the overall configuration of the communication system according to this embodiment. [Figure 6] This figure shows an example of a computer hardware configuration. [Modes for carrying out the invention]

[0010] The following describes one embodiment of the present invention. The following describes a communication system 1 that can switch between multiple key sharing schemes, including QKD. With this communication system 1, even if a certain key sharing scheme becomes unavailable for some reason (e.g., an error), it is possible to switch to another key sharing scheme, thereby ensuring the continuity of services that require encrypted communication (in other words, increasing the availability of services). A key sharing scheme may also be called a key sharing protocol or key exchange protocol, and refers to a technology for generating the same shared key between two parties. Examples of key sharing schemes include QKD, as well as post-quantum cryptography-based key distribution (PQKD) using post-quantum cryptography (PQC). Examples of post-quantum cryptography-based key exchanges include key exchanges that apply post-quantum cryptography (e.g., lattice cryptography) to KEM (Key Encapsulation Mechanism).

[0011] In the communication system 1 according to this embodiment, the communication channel between SAE and KME is encrypted using TLS with PQC, and mutual authentication using a public key certificate compatible with PQC is performed between SAE and KME in the TLS using PQC, and it is assumed that the communication between SAE and KME is secure enough to withstand attacks using post-quantum computers.

[0012] <Example of overall configuration of communication system 1> Figure 1 shows an example of the overall configuration of the communication system 1 according to this embodiment. As an example, Figure 1 shows the communication system 1 when encrypted communication is performed between base station 1 and base station 2. In the communication system 1 shown in Figure 1, communication device 10-1 is located at base station 1 and communication device 10-2 is located at base station 2. In addition, the communication system 1 shown in Figure 1 also shows key sharing systems 20A-1, 20B-1, and 20C-1, which correspond to the key sharing methods that communication device 10-1 can use. Similarly, key sharing systems 20A-2, 20B-2, and 20C-2, which correspond to the key sharing methods that communication device 10-2 can use, are also shown.

[0013] Here, key sharing systems 20A-1 and 20A-2 are assumed to be able to generate shared keys with each other through a certain key sharing scheme (e.g., QKD) in which the KME and SAE reside on separate devices. On the other hand, key sharing systems 20B-1 and 20B-2 are assumed to be able to generate shared keys with each other through a certain key sharing scheme (e.g., PQKD) in which the KME and SAE reside on the same device. Similarly, key sharing systems 20C-1 and 20C-2 are assumed to be able to generate shared keys with each other through a certain key sharing scheme in which the KME and SAE reside on the same device. Therefore, in the example shown in Figure 1, key sharing system 20A-1 exists separately from the communication device 10-1, while key sharing systems 20B-1 and 20C-1 are included in the communication device 10-1. The same applies to key sharing systems 20A-2 to 20C-2. Furthermore, the communication device 10-1 and the key sharing system 20A-1 are connected in a way that enables communication, for example, via an internal network within the base. Similarly, the communication device 10-2 and the key sharing system 20A-2 are connected in a way that enables communication, for example, via an internal network within the base.

[0014] Hereafter, when key sharing systems 20A-1 to 20C-1 are not distinguished, they will be referred to as "key sharing system 20-1". Similarly, when key sharing systems 20A-2 to 20C-2 are not distinguished, they will be referred to as "key sharing system 20-2".

[0015] The communication device 10-1 performs encrypted communication with the communication device 10-2 using a key (shared key) shared between the key sharing systems 20-1 and 20-2 that use the same key sharing method. Here, the communication device 10-1 includes an application program (hereinafter referred to as AP) 110-1, a protocol conversion unit 120-1, and key output units 130-1 corresponding to the respective key sharing systems 20-1. In the example shown in FIG. 1, the key output unit 130-1 corresponding to the key sharing system 20A-1 is the key output unit 130A-1. Similarly, the key output unit 130-1 corresponding to the key sharing system 20B-1 is the key output unit 130B-1, and the key output unit 130-1 corresponding to the key sharing system 20C-1 is the key output unit 130C-1.

[0016] Similarly, the communication device 10-2 performs encrypted communication with the communication device 10-1 using a key (shared key) shared between the key sharing systems 20-2 and 20-1 that use the same key sharing method. Here, the communication device 10-2 includes an AP 110-2, a protocol conversion unit 120-2, and key output units 130-2 corresponding to the respective key sharing systems 20-2. In the example shown in FIG. 1, the key output units 130-2 corresponding to the key sharing systems 20A-2 to 20C-2 are the key output units 130A-2 to 130C-2.

[0017] Hereinafter, when the communication device 10-1 and the communication device 10-2 are not distinguished, they are denoted as "communication device 10", and when the key sharing system 20-1 and the key sharing system 20-2 are not distinguished, they are denoted as "key sharing system 20". Similarly, for others, they are denoted as "AP110", "protocol conversion unit 120", "key output unit 130", etc.

[0018] Also, when the key sharing system 20A-1 and the key sharing system 20A-2 are not distinguished, they are denoted as "key sharing system 20A". Similarly, for others, they are denoted as "key sharing system 20B", "key sharing system 20C", etc.

[0019] AP110 is an application program that performs encrypted communication with other communication devices 10's AP110 using a shared key.

[0020] The protocol conversion unit 120 receives a key request (message representing it) from AP110 and transmits a key notification (message representing it) to AP110. Also, when an error or the like occurs in the key sharing system 20, the protocol conversion unit 120 switches to another key sharing system 20. Details of the functional configuration example of the protocol conversion unit 120 will be described later.

[0021] The key output unit 130 has a function of concealing the specific mechanism of the key sharing method executed by the key sharing system 20 corresponding to the key output unit 130, and when receiving a key request, returns the shared key generated by the key sharing system 20 corresponding to itself. That is, when the key output unit 130 receives a key request from the protocol conversion unit 120, it returns a key output including the shared key generated by the key sharing system 20 corresponding to itself to the protocol conversion unit 120. Note that the key output unit 130 may be called a protocol driver or the like.

[0022] As a result, the specific mechanism of the key sharing method is concealed from AP110, and AP110 can obtain the shared key simply by making a key request to the protocol conversion unit 120 and receiving a key notification for the key request.

[0023] Also, when an error or the like occurs in the key sharing system 20 corresponding to the key output unit 130, the key output unit 130 receives an error notification from the key sharing system 20 and transmits the error notification to the protocol conversion unit 120.

[0024] Here, a detailed functional configuration example of the protocol conversion unit 12 is shown in FIG. 2. As shown in FIG. 2, the protocol conversion unit 120 includes a key request reception unit 121, a key notification unit 122, an error notification unit 123, a switching unit 124, and a key storage unit 125.

[0025] The key request receiving unit 121 receives a key request from AP110 and transmits the key request to the key output unit 130, which corresponds to the currently used key sharing method (key sharing system 20).

[0026] Furthermore, the key request receiving unit 121 receives a switching notification from the switching unit 124 and sets the key sharing method included in the switching notification as the currently used key sharing method. In addition, the key request receiving unit 121 transmits the switching notification to another communication device 10.

[0027] The key notification unit 122 receives the key output from the key output unit 130, extracts the shared key contained in the key output, and then sends a key notification containing that shared key to the AP110.

[0028] The error notification unit 123 receives an error notification from the key output unit 130 and transmits the error notification to the switching unit 124.

[0029] The switching unit 124 receives an error notification from the key output unit 130, determines the target key sharing method, and then sends a switching notification containing information indicating the determined key sharing method to the key request reception unit 121.

[0030] The key storage unit 125 stores the shared key generated by a key sharing scheme in a storage device if a key sharing scheme capable of storing keys is being used. Hereinafter, the key (shared key) stored in the storage device will also be referred to as the stored key. Note that the key storage unit 125 is not an essential component, and the protocol conversion unit 120 does not necessarily need to include the key storage unit 125.

[0031] Note that the overall configuration of communication system 1 shown in Figure 1 is just an example and is not limited to it. For example, in the example shown in Figure 1, it is assumed that the communication device 10 can use three key sharing schemes, and key sharing systems 20A to 20C corresponding to those schemes are shown. In general, however, there are as many key sharing systems 20 as there are key sharing schemes that the communication device 10 can use. Specifically, for example, if the communication device 10 can use N key sharing schemes, there are N key sharing systems 20 corresponding to each of those N key sharing schemes.

[0032] Furthermore, the communication network between the communication devices 10 and the communication network between the key sharing systems 20 may be the same, or they may be different depending on the key sharing method implemented by the key sharing system 20. For example, if the key sharing method implemented by the key sharing system 20A is QKD, the communication network between the communication devices 10 (AP110) is the internet, etc., and the communication network between the key sharing systems 20A is an optical communication network, etc. On the other hand, for example, if the key sharing method implemented by the key sharing system 20B is PQKD, etc., then both the communication network between the communication devices 10 (AP110) and the communication network between the key sharing systems 20B are the internet, etc.

[0033] <Key sharing process> The following explanation, using Figure 3 as an example, describes the key acquisition process for AP110-1 and AP110-2 to obtain a shared key, assuming that AP110-1 performs encrypted communication with AP110-2. AP110-1 is the initiator and AP110-2 is the responder.

[0034] First, AP110-1 sends a key request to protocol conversion unit 120-1 (step S101).

[0035] When the key request receiving unit 121-1 of the protocol conversion unit 120-1 receives a key request, it transmits the key request to the key output unit 130 corresponding to the key sharing method currently set as the key sharing method in use (step S102). For example, if QKD is set as the key sharing method currently in use, the key request receiving unit 121-1 transmits the key request to the key output unit 130A-1 corresponding to the key sharing system 20A-1 that performs key sharing using QKD. On the other hand, for example, if PQKD is set as the key sharing method currently in use, the key request receiving unit 121-1 transmits the key request to the key output unit 130B-1 corresponding to the key sharing system 20B-1 that performs key sharing using PQKD.

[0036] When the key output unit 130-1 receives a key request from the key request receiving unit 121-1, it transmits the key request to the key sharing system 20-1 corresponding to itself (step S103). For example, if the key output unit 130A-1 receives a key request, it transmits the key request to the key sharing system 20A-1. On the other hand, for example, if the key output unit 130B-1 receives a key request, it transmits the key request to the key sharing system 20B-1.

[0037] When key sharing system 20-1 receives a key request from key output unit 130-1, it executes the same key sharing method with key sharing system 20-2, which executes the same key sharing method as itself, and generates a shared key (step S104). For example, if key sharing system 20A-1, which executes QKD, receives a key request, key sharing system 20A-1 executes QKD with key sharing system 20A-2 and generates a shared key. On the other hand, for example, if key sharing system 20B-1, which executes PQKD, receives a key request, key sharing system 20B-1 executes PQKD with key sharing system 20B-2 and generates a shared key.

[0038] The key sharing system 20-1 transmits the key (shared key) generated in step S104 to its corresponding key output unit 130-1 (step S105).

[0039] When the key output unit 130-1 receives a shared key from the key sharing system 20-1, it transmits the key output containing this shared key to the protocol conversion unit 120-1 (step S106).

[0040] When the key notification unit 122-1 of the protocol conversion unit 120-1 receives a key output from the key output unit 130-1, it extracts the shared key contained in the key output and then sends a key notification containing that shared key to AP110-1 (step S107).

[0041] When AP110-1 receives a key notification from the protocol conversion unit 120-1, it obtains the shared key from this key notification (step S108).

[0042] On the other hand, the key sharing system 20-2 transmits the key (shared key) generated in step S104 to its corresponding key output unit 130-2 (step S109).

[0043] When the key output unit 130-2 receives a shared key from the key sharing system 20-2, it transmits the key output containing this shared key to the protocol conversion unit 120-2 (step S110).

[0044] When the key notification unit 122-2 of the protocol conversion unit 120-2 receives a key output from the key output unit 130-2, it extracts the shared key contained in the key output and then sends a key notification containing that shared key to AP110-2 (step S111).

[0045] When AP110-2 receives a key notification from the protocol conversion unit 120-2, it obtains the shared key from this key notification (step S112).

[0046] As a result, the same key (shared key) is shared between AP110-1 and AP110-2, and this shared key can be used as the encryption key to perform encrypted communication.

[0047] In the example shown in Figure 3, the case of generating a new shared key was explained. However, for example, if the key storage unit 125 has stored a shared key, AP110 may acquire the stored key as the shared key (especially if a new shared key cannot be generated for some reason, such as an error, AP110 may acquire the stored key as the shared key). In this case, the key request receiving unit 121, which received the key request in step S101 above, transmits the key request to the key storage unit 125-1. As a result, the shared key stored by the key storage unit 125 is passed to the key notification unit 122-1, and that shared key is notified to AP110-1. In this case, the key notification unit 122-1 also notifies the protocol conversion unit 120-2 of the key ID of that shared key. As a result, the protocol conversion unit 120-2 similarly passes the shared key with that key ID from the stored keys to the key notification unit 122-2, and that shared key is notified to AP110-2.

[0048] <Switching process> The following describes, as an example, the switching process when an error occurs in a key sharing system 20-1 currently using a certain key sharing method, and it is necessary to switch to another key sharing method, with reference to Figure 4.

[0049] The key sharing system 20-1 detects the occurrence of an error (step S201). Here, various errors can occur in the key sharing system 20-1, and this embodiment can target any error, but for example, it can target the following errors. Note that the error may also be called, for example, a failure or anomaly.

[0050] (1) Errors during key request (for example, communication errors when sharing keys with key sharing system 20-2, internal errors in key sharing system 20-1 during key sharing, etc.) (2) Key depletion (including depletion of keys stored by the key storage unit 125). (3) Exhaustion of computing power (4) System error (5) Tamper abnormalities For example, an issue where key sharing becomes impossible due to tapping on an optical fiber cable can be detected as a tamper anomaly.

[0051] The key sharing system 20-1 sends an error notification regarding the error detected in step S201 to its corresponding key output unit 130-1 (step S202).

[0052] When the key output unit 130-1 receives an error notification from the key sharing system 20-1, it transmits this error notification to the protocol conversion unit 120-1 (step S203).

[0053] When the error notification unit 123-1 of the protocol conversion unit 120-1 receives an error notification from the key output unit 130-1, it transmits this error notification to the switching unit 124-1 (step S204).

[0054] When the switching unit 124-1 of the protocol conversion unit 120-1 receives an error notification from the error notification unit 123-1, it determines the key sharing method of the switching destination (step S205). Here, the switching unit 124 can determine the key sharing method of the switching destination by various methods, but for example, it can be determined by the following method.

[0055] (a) Determine the target key sharing method based on the error content or cause of the error included in the error notification. This is a method in which, for example, an association is made in advance between the error content or cause of the error and the target key sharing method, and the target key sharing method is determined based on that association.

[0056] (b) Select one key sharing method from among the key sharing methods other than the one currently in use, either randomly or in a predetermined order (predetermined priority order).

[0057] (c) The AP110 or the user is notified of the error details or cause of the error included in the error notification, and the key sharing method is determined according to the instructions from the AP110 or the user. In this case, the AP110 or the user can check the error details or cause of the error, and can determine an appropriate key sharing method according to the error details or cause of the error.

[0058] The above determination methods are merely examples, and the key sharing method may be determined in various other ways. Furthermore, for example, if the key storage unit 125 stores a shared key, the system may decide to switch the source of the shared key to the stored key. This allows the stored key to be used as the shared key until the stored key is depleted, after which the key sharing method can be switched. The following explanation assumes that the target key sharing method has been determined.

[0059] The switching unit 124-1 of the protocol conversion unit 120-1 sends a switching notification to the key request receiving unit 121-1 that includes information indicating the key sharing method (the key sharing method of the switching destination) determined in step S205 above (step S206).

[0060] When the key request receiving unit 121-1 of the protocol conversion unit 120-1 receives a switching notification from the switching unit 124-1, it sets the key sharing method indicated by the information contained in this switching notification as the key sharing method currently in use (step S207).

[0061] Furthermore, the switching unit 124-1 of the protocol conversion unit 120-1 transmits a switching notification to the protocol conversion unit 120-2 that includes information indicating the key sharing method (the key sharing method of the switching destination) determined in step S205 (step S208).

[0062] When the switching unit 124-2 of the protocol conversion unit 120-2 receives a switching notification from the protocol conversion unit 120-2, it transmits this switching notification to the key request receiving unit 121-2 (step S209).

[0063] When the key request receiving unit 121-2 of the protocol conversion unit 120-2 receives a switching notification from the switching unit 124-2, it sets the key sharing method indicated by the information contained in this switching notification as the key sharing method currently in use (step S210).

[0064] As described above, if an error occurs in a certain key sharing system 20 and it becomes impossible to generate a shared key in that system, it is possible to switch to generating the shared key in another key sharing system 20. Furthermore, if a stored key exists, it is possible to switch to using the stored key as the shared key. Therefore, even if a key sharing system 20 becomes unavailable, it is possible to continue providing services that require encrypted communication from AP110.

[0065] <Variation> Figure 5 shows a modified example of the overall configuration of the communication system 1 according to this embodiment. In Figure 1, the communication system 1 is shown in which server 30-1 is further included in base 1, and server 30-2 is further included in base 2. Hereafter, when server 30-1 and server 30-2 are not distinguished, they will be referred to as "server 30".

[0066] Server 30 includes a protocol conversion unit 120 and a key output unit 130. Furthermore, Server 30 is equipped with a key sharing system 20 corresponding to its own key output unit 130, or is connected to a key sharing system 20 corresponding to its own key output unit 130 in a communicative manner.

[0067] In the example shown in Figure 5, server 30-1 includes a protocol conversion unit 120-11, a key output unit 130D-1, and a key output unit 130E-1. Additionally, there is a key sharing system 20D-1 corresponding to key output unit 130D-1 and a key sharing system 20E-1 corresponding to key output unit 130E-1.

[0068] Similarly, server 30-2 includes a protocol conversion unit 120-21, a key output unit 130D-2, and a key output unit 130E-2. Additionally, there is a key sharing system 20D-2 corresponding to key output unit 130D-2 and a key sharing system 20E-2 corresponding to key output unit 130E-2.

[0069] The modified communication system 1 has the configuration shown in Figure 5, which allows the server 30 to provide a shared key to the communication device 10. That is, for example, server 30-1 can provide a shared key generated by key sharing system 20D-1 or key sharing system 20E-1 to AP110-1 of communication device 10-1. Similarly, for example, server 30-2 can provide a shared key generated by key sharing system 20D-2 or key sharing system 20E-2 to AP110-2 of communication device 10-2.

[0070] At this time, the choice of which key sharing system 20 to use to generate the shared key (i.e., which key sharing method to use to generate the shared key) is shared and coordinated among all communication devices 10 and servers 30. That is, for example, if an error occurs in a key sharing system 20 and a key sharing method switch occurs (or a switch to using a stored key as the shared key), the switching unit 124 that determined the destination of the switch sends a switching notification to the protocol conversion units 120 of all other communication devices 10 and servers 30. In this way, the key sharing method used throughout the entire communication system 1 is shared and coordinated.

[0071] In this modified example, when the switching unit 124 determines the key sharing method for the switching destination, it can consider which of the key sharing system 20 on the communication device 10 side or the key sharing system 20 on the server 30 side should be prioritized. That is, for example, when determining the key sharing method for the switching destination according to (b) above, it is possible to set which of the key sharing system 20 on the communication device 10 side (the key sharing method it implements) or the key sharing system 20 on the server 30 side (the key sharing method it implements) should be prioritized. This makes it possible, for example, to generate a shared key preferentially using the key sharing system 20 on the server 30 side, and if the key sharing system 20 on the server 30 side becomes unable to generate a shared key, to generate a shared key using the key sharing system 20 on the communication device 10 side.

[0072] Furthermore, in this modified example, when the switching unit 124 determines the target key sharing system, it can consider whether to switch to the key sharing system 20 (the key sharing system implemented by) on the communication device 10 side or the server 30 side, depending on the service quality level, the nature of the error, its cause, and its location. This allows for operations such as switching to the key sharing system 20 on the communication device 10 side if an error occurs in the key sharing system 20 on the server 30 side, and conversely, switching to the key sharing system 20 on the server 30 side if an error occurs in the key sharing system 20 on the communication device 10 side.

[0073] <Example Hardware Configuration> The communication device 10, key sharing system 20, and server 30 included in the communication system 1 according to this embodiment can be realized, for example, by the hardware configuration of the computer 500 shown in Figure 6. The computer 500 shown in Figure 6 has an input device 501, a display device 502, an external I / F 503, a communication I / F 504, a processor 505, and a memory device 506. Each of these hardware components is connected to communicate via a bus 507.

[0074] The input device 501 is, for example, a keyboard, mouse, touch panel, various physical buttons, etc. The display device 502 is, for example, a display, display panel, etc. Note that the computer 500 does not necessarily have to have at least one of the input device 501 and the display device 502.

[0075] External I / F 503 is an interface with external devices such as recording media 503a. Examples of recording media 503a include CD-ROMs, DVD-ROMs, SD memory cards, USB memory cards, etc.

[0076] The communication interface 504 is an interface for connecting the computer 500 to a communication network. The processor 505 is, for example, a CPU (Central Processing Unit) or other type of arithmetic unit. The memory device 506 is, for example, a hard disk drive (HDD), solid state drive (SSD), random access memory (RAM), read-only memory (ROM), flash memory, or other type of storage device.

[0077] However, the hardware configuration of the computer 500 shown in Figure 6 is just one example and is not limited to it. For example, the computer 500 may have multiple processors 505 and multiple memory devices 506, or it may have various hardware other than the hardware shown in the figure.

[0078] Furthermore, one or more programs that implement the AP110, protocol conversion unit 120, and key output unit 130 shown in Figure 1 are stored in the memory device 506, and various functions are realized by the processor 505 executing various processes based on these one or more programs.

[0079] <Summary> As described above, in the communication system 1 according to this embodiment, if a certain key sharing method becomes unavailable for any reason, it is possible to switch to another key sharing method. Therefore, it is possible to increase the availability of services provided by application programs that utilize encrypted communication, and to improve the quality of service.

[0080] The present invention is not limited to the embodiments specifically disclosed above, and various modifications, changes, and combinations with known technologies are possible without departing from the scope of the claims. [Explanation of Symbols]

[0081] 1. Communication System 10. Communication equipment 20 Key Sharing System 30 servers 110 AP 120 Protocol Conversion Unit 121 Key Request Reception Department 122 Key notification section 123 Error Notification Section 124 Switching section 125 Key storage unit 130 Key Output Section 500 Computers 501 Input device 502 Display device 503 External I / F 503a Recording medium 504 Communication I / F 505 Processor 506 Memory Device 507 Bus

Claims

1. A communication system that includes multiple communication devices, The aforementioned communication device is An application program configured to perform encrypted communication with other communication devices, It includes a switching unit configured to switch the key sharing method used to generate the shared key used for the encrypted communication, The aforementioned switching unit is A communication system configured to, in the event of an error occurring in the key sharing system that generates the shared key using the currently used key sharing system, determine from among multiple key sharing systems another key sharing system or key storage function to switch to, depending on the content of the error, the cause of the error, and at least one of the location where the error occurred, and then switch to the determined other key sharing system or key storage function.

2. The aforementioned error includes: The communication system according to claim 1, comprising at least one of the following: a communication error or internal error when generating the shared key; depletion of the shared key; depletion of the computing power of the key sharing system; a system error in the key sharing system; and a tamper abnormality relating to the communication path of the key sharing system.

3. The communication system according to claim 1 or 2, wherein the plurality of key sharing methods include at least quantum key distribution and post-quantum computer key exchange.

4. An application program configured to perform encrypted communication with other communication devices, It includes a switching unit configured to switch the key sharing method used to generate the shared key used for the encrypted communication, The aforementioned switching unit is A communication device configured to, in the event of an error occurring in the key sharing system that generates the shared key using the currently used key sharing system, determine from among a plurality of key sharing systems another key sharing system or key storage function to switch to, according to the content of the error, the cause of the error, and at least one of the location where the error occurred, and switch to the determined other key sharing system or key storage function.

5. A method used in communication devices, The application program performs encrypted communication with other communication devices. The switching unit performs the step of switching the key sharing method used to generate the shared key used for encrypted communication, The switching unit, in the event of an error occurring in the key sharing system that generates the shared key using the currently used key sharing system, determines from among a plurality of key sharing systems another key sharing system or key storage function to be switched to, according to the content of the error, the cause of the error, and at least one of the location where the error occurred, and executes the step of switching to the determined other key sharing system or key storage function.

6. A program that causes a computer to function as a communication device included in the communication system described in claim 1.

Images