Panasonic Intellectual Property Management Co., Ltd.

Panasonic Corporation

Panasonic Intellectual Property Corporation of America

Kabushiki Kaisha Toshiba

Nec Corporation

Sharp Kabushiki Kaisha Corporation

Mitsubishi Electric Corporation

Yoichi Masuda

Tomoki Takazoe

Yuji Unagami

Hideki Matsushima

Manabu Maeda

Hironori Nakae

Kenji Yasu

Yuji Yamada

Hiroshi Masuda

Masaki Ikeda

Takashi Matsumoto

Hiroshi Hayashino

Yosuke Ukita

Naohiro Fukuda

Naotake Yamamoto

Naoki Endo

Toshihiro Yasuda

Hirotatsu Shinomiya

Keiji Sakaguchi

Tohru Ishikawa

Yuichi Motora

Seiji Nimura

Haruo Hinode

Morio Hirahara

Masao Akimoto

Kenji Kuramae

Tomoya Watanabe

Takayuki Amatsu

Tetsuya Hishikawa

Takeshi Suetsugu

Shoji Mochizuki

The communication system is a communication system including a management communication apparatus, a first communication apparatus, and a second communication apparatus. The first communication apparatus is capable of communicating using a plurality of Internet Protocol (IP) addresses in different versions from each other, and includes a first communication unit configured to notify the management communication apparatus of a first IP address among the plurality of IP addresses in a first authentication process for entering the communication system, and to notify the management communication apparatus of a second IP address among the plurality of IP addresses after the first authentication process, the first authentication process being performed between the first communication apparatus and the management communication apparatus.

Communication system, cryptographic key distribution method, management communication apparatus, and communication apparatus

An identification code (referred to as 'original identification code') in a predetermined application is preset in each of one or more devices not compliant to a predetermined security protocol. A GW determines a new identification code of each of the one or more devices and notifies an HEMS controller of the new identification code. The GW receives a message including the new identification code of a particular device (referred to as 'destination device') and encrypted according to the security protocol. The GW decodes a received message according to the security protocol, converts the new identification code of the destination device included in a decoded message into the original identification code of the destination device, and transfers a converted message to the destination device.

Gateway apparatus, communication method, and recording medium

A GM acquires a first certificate revocation list designating revoked public key certificates and distributed from a certificate authority server. The GM generates a second certificate revocation list produced by extracting information on a plurality of home electric appliances from the first certificate revocation list. The GM restricts communication with a device for which the public key certificate is revoked, by distributing the second certificate revocation list generated to the plurality of home electric appliances.

Communication apparatus, communication system, and communication method

In an authentication method, a first controller generates a first group key, executes first mutual authentication with devices within a group, and shares the first group key with devices that have succeeded in the first mutual authentication. When a second controller joins the group, the first controller decides which coordinator manages a group key used in common. The first controller executes second mutual authentication with the coordinator, and shares the first group key with the coordinator when the second mutual authentication is successful. The coordinator performs encrypted communication within the group using the first group key, generates a second group key when the first group key valid time runs out and before updating the first group key, executes third mutual authentication with the devices and a third controller, and updates the first group key of the devices and the third controller that have succeeded in the third authentication.

Authentication method, authentication system, and controller

A home energy management system (HEMS) controller certifies a plurality of devices participating in an HEMS network. When a request for re-certification is issued to a given device among the plurality of devices and when a response is not available from the device, the HEMS controller suspends a re-certification process for the device and performs a re-certification process for another device first.

Communication device, certification method, and computer readable recording medium for recertification of devices

A HEMS controller receives, from each of a plurality of devices requesting registration in a HEMS, an electronic certificate of the device in a continuous registration mode in which a plurality of devices can be continuously registered in the HEMS. The HEMS controllerdetermines whether or not to permit registration in the HEMS for each device based on an attribute indicated by the electronic certificate of each of the plurality of devices.

Communication device, communication method, and computer program

A first controller generates a first group key, executes first mutual authentication with devices within a group, and shares the first group key with the devices that have succeeded in first mutual authentication. When a second controller joins the group, the first controller decides a coordinator that manages a group key used in common in the group. The first controller executes second mutual authentication with the coordinator, and shares the first group key with the coordinator when the second mutual authentication is successful. The coordinator performs encrypted communication within the group using the first group key, generates a second group key when valid time of the first group key is equal to or smaller than a predetermined value, executes third mutual authentication with the devices and a third controller, and updates the first group key of the devices and the third controller that have succeeded in the third authentication.

An authentication method for a group of devices connected to a network includes selecting the first controller as a coordinator, the coordinator being configured to manage a group key to be used in common in the group. The method includes generating the group key, and performing first mutual authentication and second mutual authentication. The method also includes sharing the group key with each device for which the first mutual authentication has been successful, and sharing the group key with each second controller for which the second mutual authentication has been successful. The method further includes encrypting transmission data by using the group key to generate encrypted data, generating, authentication data by using the group key, and simultaneously broadcasting a message to each device for which the first mutual authentication has been successful and each second controller for which the second mutual authentication has been successful.

An HEMS controller receives a certificate revocation list distributed from a certificate authority server and listing serial numbers of revoked electronic certificates. The serial number of the electronic certificate includes a first identifying part that indicates a value for identifying a type of a participation node maintaining the electronic certificate and a second identifying part that indicates a value for identifying an individual participation node. In the case the certificate revocation list includes a serial number in which the second identifying part is a predetermined value, the HEMS controller determines that the electronic certificate of a participation node that meets the type indicated by the first identifying part of the serial number is invalid.

Communication device, certificate authority device, and recording medium

A new controller (supporting device authentication) is a controller which performs encrypted communication with a device which has succeeded in mutual authentication using an electronic certificate, and the controller includes: a determining unit that determines whether or not a communication target device with which communication is to be performed is an authentication support device that supports the mutual authentication; a functional restriction unit that, when the communication target device is determined not to be the authentication support device by the determining unit, imposes a functional restriction on one or more functions of the communication target device which are operable by the new controller (supporting device authentication); and a communication unit which performs communication in plain text with the communication target device with the functional restriction imposed by the functional restriction unit.

Controller, communication method, and communication system

A communication system, including: a NW management device which (i) forms a network together with an authenticated target device, and (ii) manages the network by delivering a session key for use in communication in the network to the authenticated target device; and a device authenticated by the NW management device, wherein the NW management device: determines whether or not to permit the device to be an alternative management device which manages the network in replace of the NW management device when communication is impossible in the network; shares, with the device, authentication information about the authenticated target device, when permitting the device to be the alternative management device; and the device shares the authentication information with the NW management device, and starts managing the network using the authentication information as the alternative management device when determining that the NW management device cannot communicate in the network.

Communication system, communication method, and management device

A first controller generates a first group key, executes first mutual authentication with devices within a group, and shares a first group key with devices that have succeeded in authentication. At least one controller within the group decides a coordinator that manages a group key used in common in the group, from controllers including a second controller newly joined in the group. The first controller executes second mutual authentication with the coordinator, and shares the first group key with the coordinator. The coordinator performs encrypted communication within the group using the first group key. The coordinator generates a second group key when valid time of the first group key is equal to or smaller than a predetermined value, executes third mutual authentication with the devices and controllers within the group, and updates the group key of the devices and controllers that have succeeded in authentication to the second group key.

At least one controller in a group selects a coordinator that manages a group key to be used in common in the group from among controllers in the group in accordance with an attribute of the controllers. The selected coordinator generates a group key, performs mutual authentication with devices and the controllers in the group, and shares the generated group key with devices and controllers that have been successfully authenticated. The coordinator then generates encrypted data and authentication data by using the group key and simultaneously broadcasts a message including the encrypted data and the authentication data.

A first device according to one embodiment includes, but is not limited to, receiver circuitry, determinator circuitry, and transmitter circuitry. The receiver circuitry is configured and/or programmed to receive from a second device, first information for controlling a third device. The determinator circuitry is configured and/or programmed to determine whether or not the first information is to be transmitted to the third device, based on whether or not the first information is associated with second information stored in the first device. The second information includes at least a first operation command for controlling a first operation of the third device. The transmitter circuitry is configured and/or programmed to, in a case that the first information is determined to be transmitted to the third device, transmit the first information to the third device.

Device, method, and system for managing device control

In a communication system including: a control apparatus which controls pairing for communication according to kinds of pairing methods; and devices each of which performs pairing for communication according to one or more predetermined kinds of pairing methods, and performs encryption communication with the control apparatus by pairing with the control apparatus, wherein the control apparatus includes: a kind obtaining unit which obtains, from each device, the predetermined kinds of pairing methods for the device; a combination determining unit which determines, for each device, a combination of a same kind of pairing methods included in both the plurality of kinds of pairing methods for the control apparatus and the predetermined kinds of pairing methods obtained by the kind obtaining unit; and a display unit which displays, to a user, the combination of the same kind of pairing methods determined by the combination determining unit according to a predetermined condition.

Growing community of inventors

Tokyo, Japan

Yoichi Masuda