Title of Invention

COMMUNICATION SYSTEM AND COMMUNICATION METHOD

Abstract A communication system including two communication apparatuses is improved such that the possibility that a third party decrypts the communication is reduced. A communication system includes first and second communication apparatuses, one of which encrypts data to be transmitted and transmits the encrypted data to the other communication apparatus, which receives and decrypts the encrypted data. Prior to the encryption, each communication apparatus divides the to-be-transmitted data every predetermined number of bits to generate to-be-transmitted divided data. At this moment, each communication apparatus varies the number of bits of the to-be-transmitted divided data, and mixes, into the to-be-transmitted divided data other than the one having the largest number of bits, dummy data having the same number of bits as the to-be-transmitted divided data having the largest number of bits.
Full Text FORM
THE PATENTS ACT, 1970
(39 of 1970)
&
THE PATENTS RULES, 2003
COMPLETE SPECIFICATION
(See section 10, rule 13)
'COMMUNICATION SYSTEM AND COMMUNICATION METHOD'
N-CRYPT, INC., 2293-1, Nakamura-cho, Yokkaichi-shi, Mie, 5128044, Japan
The following specification particularly describes the invention and the
manner in which it is to be performed.


COMMUNICATION SYSTEM AND COMMUNICATION METHOD
5 Technical Field
The present invention relates to a communication system including two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission
10 subject data.
Background of the Invention
The above-mentioned communication system is used in a situation where it is necessary to keep transmission subject data transmitted between two communication
15 apparatuses confidential to a third party. Although various encryption techniques are
proposed and used in order to keep the transmission subject data confidential, it is difficult to completely prevent decryption of a code.
In general, communication performed by encrypting the transmission subject data is performed by using a procedure of cutting the transmission subject data by a predetermined
20 number of bits on a transmitting and receiving apparatus on a transmitter side, encrypting
each piece of the cut data and transmitting it to the communication apparatus at the other end and decrypting received data on the transmitting and receiving apparatus on a receiver side.
In this case, the transmitting and receiving apparatus on the transmitter side and the transmitting and receiving apparatus on the receiver side perform encryption or decryption
25 processing in fixed units, such as 8 bits or 16 bits.
Therefore, in the case where the size of such units are known to a third party, there is a higher possibility that an algorithm used for the encryption is broken and the contents of the communication are consequently broken.

An existing apparatus performs the encryption or decryption in standardized units,
such as 8 bits or 16 bits. Therefore, in the case where the transmitting and receiving
apparatus performs the encryption or decryption in the same units as such standardized units,
it becomes easier to break the algorithm used for the encryption.
5 An object of the present invention is to improve the communication system including
two communication apparatuses capable of encrypting the transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data so as to reduce the possibility of being broken by a third party.
10
Disclosure of the Invention
To achieve the object, the inventors hereof propose a first invention and a second invention described below.
A communication system according to the first invention includes a first
15 communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data.
Both the first communication apparatus and the second communication apparatus of
20 the communication system comprise: cutting means for cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data and also cutting the encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; encrypting and decrypting means for encrypting the transmission subject cut data with the algorithm common between the first
25 communication apparatus and the second communication apparatus to render it as the encrypted data and decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data; connecting means for connecting the decrypted transmission subject cut data to render it as the


transmission subject data; and transmitting and receiving means for transmitting and receiving the encrypted data.
And the cutting means of the communication system cuts the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits
5 from the other pieces of the transmission subject cut data.
When cutting the transmission subject data and generating the transmission subject cut data, the communication system cuts the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data. Therefore, even if an algorithm used for the encryption is
10 known, a third party cannot decrypt the encrypted data unless the units in which the
encrypted data is encrypted are known. The communication system can have at least one piece of the transmission subject cut data or the encrypted cut data of a different number of bits from the other pieces of the transmission subject cut data or the encrypted cut data. Therefore, when decrypting a code, processing in different units from 8 bits and 16 bits
15 which are general units of data processing is necessary for at least one piece of the
transmission subject cut data or the encrypted cut data so that there is a difficulty in analyzing it with a general computer.
Therefore, it is difficult for the third party to break encrypted communication of this
communication system.
20 A communication system according to the first invention can be as follows.
The communication system includes a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data
25 and rendering it as the transmission subject data.
Both the first communication apparatus and the second communication apparatus comprise: cutting means for cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data and also cutting the encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the

encrypted data is cut when encrypted; common data generating means for sequentially generating common data which is common between the first communication apparatus and the second communication apparatus; encrypting and decrypting means for encrypting the transmission subject cut data with the algorithm common between the first communication
5 apparatus and the second communication apparatus generated based on the common data received from the common data generating means to render it as the encrypted data and decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data; connecting means for connecting the decrypted transmission subject cut data to render it as the transmission subject data; and
10 transmitting and receiving means for transmitting and receiving the encrypted data, and the common data generating means generates the common data on an opportunity of having the transmission subject cut data or the encrypted cut data received by the encrypting and decrypting means.
The cutting means of this communication system cuts the transmission subject data so
15 that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
The communication system updates the algorithm in such timing as to perform the encryption and decryption by using the same algorithm for the first communication apparatus and the second communication apparatus, and so there is a lower possibility that the code
20 may be broken.
Both the first communication apparatus and second communication apparatus of the first invention may comprise mixing means for including dummy data irrelevant to the transmission subject data in the transmission subject cut data except a piece of the largest number of bits thereof and thus matching the number of bits of every piece of the
25 transmission subject cut data with the number of bits of the piece of the largest number of bits of the transmission subject cut data. Thus, there is a match of the number of bits of every piece of the transmission subject cut data or the encrypted cut data as the unit of the encryption or decryption on the first communication apparatus or the second communication apparatus so as to facilitate the processing of the encryption and decryption. On the other

hand, the third party cannot determine which data is original transmission subject cut data or encrypted cut data and which data is the dummy data, and so the possibility that the code may be broken remains low.
A communication system according to the second invention includes a first
5 communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data.
Both the first communication apparatus and second communication apparatus of this
10 communication system comprise: cutting means for cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data and also cutting the encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; encrypting and decrypting means for encrypting the transmission subject cut data with the algorithm common between the first
15 communication apparatus and the second communication apparatus to render it as the encrypted data and decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data so as to perform the encryption or the decryption by a reference number of bits as a reference; connecting means for connecting the decrypted transmission subject cut data to render it as
20 the transmission subject data; and transmitting and receiving means for transmitting and receiving the encrypted data.
The cutting means of this communication system cuts the transmission subject data by the number of bits shorter than the reference number of bits; and both the first communication apparatus and the second communication apparatus comprise mixing means
25 for including dummy data irrelevant to the transmission subject data in the transmission
subject cut data and thereby matching the number of bits of the transmission subject cut data with the reference number of bits.
The cutting means of this communication system cuts the transmission subject data by the number of bits shorter than the reference number of bits. The reference number of bits


can be 8 bits or 16 bits which is the same as a general data processing unit for instance. Thus, when decrypting a code, at least one piece of the transmission subject cut data or the encrypted cut data requires the processing in a processing unit different from 8 bits or 16 bits which is the same as a general data processing unit so that there is a difficulty in performing
5 an analysis with a general computer. The first communication apparatus and the second communication apparatus included in this communication system comprise the mixing means for including the dummy data irrelevant to the transmission subject data in the transmission subject cut data and thereby matching the number of bits of the transmission subject cut data with the reference number of bits. Therefore, the first communication apparatus and the
10 second communication apparatus included in this communication system consequently allow the encryption and decryption processing to be performed in the processing unit as with the general computer. For this reason, it is not necessary to change a hardware configuration thereof from a conventional one. On the other hand, the third party cannot determine which data is the transmission subject cut data or the encrypted cut data and which data is the
15 dummy data, and so the possibility that the encryption may be broken remains low. A communication system of the second invention can be as follows. The communication system of the second invention includes a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then
20 transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data.
Both the first communication apparatus and the second communication apparatus comprise: cutting means for cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data and also cutting the encrypted
25 data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; common data generating means for sequentially generating common data which is common between the first communication apparatus and the second communication apparatus; encrypting and decrypting means for encrypting the transmission subject cut data with the algorithm common between the first communication


apparatus and the second communication apparatus generated based on the common data received from the common data generating means to render it as the encrypted data and decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data so as to perform the encryption or the
5 decryption by a reference number of bits as a reference; connecting means for connecting the decrypted transmission subject cut data to render it as the transmission subject data; and transmitting and receiving means for transmitting and receiving the encrypted data, and the common data generating means generates the common data on an opportunity of having the transmission subject cut data or the encrypted cut data received by the encrypting and
10 decrypting means.
The cutting means of this communication system cuts the transmission subject data by the number of bits shorter than the reference number of bits; and both the first communication apparatus and the second communication apparatus comprise mixing means for including dummy data irrelevant to the transmission subject data in the transmission
15 subject cut data and thereby matching the number of bits of the transmission subject cut data with the reference number of bits.
The communication system updates the algorithm used for the encryption and decryption in such timing as to perform the encryption and decryption by using the same algorithm for the first communication apparatus and the second communication apparatus,
20 and so there is a lower possibility that the code may be broken.
In the case of cutting the transmission subject data shorter than the reference number of bits, the cutting means may cut it either by a predetermined number of bits or by a different number of bits. While the processing is easier in the former case, the possibility of having the code broken is lower in the latter case.
25 In the case where the cutting means cuts the transmission subject data by a
predetermined number of bits shorter than the reference number of bits, the mixing means may either include the dummy data at a specific position of the transmission subject data or include the dummy data at a different position as to each piece of the transmission subject


data. While the processing is easier in the former case, the possibility of having the code broken is lower in the latter case.
The following contents are common between the first invention and the second
invention.
5 The common data generating means may generate pseudo-random numbers as the
common data. As a matter of course, the common data generating means may generate any other data.
As for the algorithm used for the encryption and decryption, the common data generating means should generate the above-mentioned common data in such timing as to
10 generate it by using the same algorithm for the encryption and decryption on the first communication apparatus and the second communication apparatus. For instance, the common data generating means may generate the common data each time the transmission subject data is encrypted or the encrypted data is decrypted. The common data generating means may also generate the common data each time the transmission subject cut data is
15 encrypted or the encrypted cut data is decrypted.
The mixing means may decide the predetermined position for including the dummy data based on the common data. In the case where the dummy data is included at a different position of the transmission subject cut data (including the case where at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the
20 transmission subject cut data when the transmission subject data is cut), the first
communication apparatus and the second communication apparatus cannot decrypt the received encrypted cut data without knowing the position of the transmission subject cut data at which the dummy data is included by the communication apparatus on the transmitter side. If the mixing means is set up to decide the predetermined position for including the dummy
25 data based on the common data, the communication apparatus on the receiver side can know the position of the dummy data thus included in the transmission subject cut data by means of the data it has (this data is common between the first communication apparatus and the second communication apparatus). In this case, there is no exchange of information whatsoever as to the position of the dummy data included in the transmission subject cut data


between the first communication apparatus and the second communication apparatus. Therefore, it is almost impossible for the third party to break the encryption of this communication system.
In the case of cutting the transmission subject data so that at least one piece of the 5 transmission subject cut data has a different number of bits from the other pieces of the
transmission subject cut data, the cutting means may cut the transmission subject data based on the common data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data. In the case where at least one piece of the transmission subject cut data has a different number of
10 bits from the other pieces of the transmission subject cut data, the decryption cannot be
performed unless the communication apparatus on the transmitter side knows what number of bits the transmission subject cut data was cut by. If the cutting means is set up to cut the transmission subject data based on the common data, the communication apparatus on the receiver side can know what number of bits the transmission subject data was cut by by
15 means of the data it has (this data is common between the first communication apparatus and the second communication apparatus). In this case, there is no exchange of information whatsoever as to where the transmission subject cut data was cut between the first communication apparatus and the second communication apparatus. Therefore, it is almost impossible for the third party to defeat the encryption of this communication system.
2 0 The first invention can also be implemented by the following method.
An example of the method is the one implemented in a communication system including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the
25 other end and also decrypting received encrypted data and rendering it as the transmission subject data.
This method includes the steps for one of the first communication apparatus and the second communication apparatus of: cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data; encrypting the


transmission subject cut data with a predetermined algorithm to render it as the encrypted data; and transmitting the encrypted data to the other one of the first communication apparatus and the second communication apparatus, and the steps for the other one of the first communication apparatus and the second communication apparatus of: cutting the received
5 encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data; and connecting the decrypted transmission subject cut data to render it as the transmission subject data.
10 According to this method, the first communication apparatus and the second
communication apparatus cut the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
Another example of the method is the one implemented in a communication system
15 including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data.
20 This method includes the steps for one of the first communication apparatus and the
second communication apparatus of: cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data; encrypting the transmission subject cut data with a predetermined algorithm to render it as the encrypted data; and transmitting the encrypted data to the other one of the first communication
25 apparatus and the second communication apparatus, and the steps for the other one of the first communication apparatus and the second communication apparatus of: cutting the received encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject


cut data; and connecting the decrypted transmission subject cut data to render it as the transmission subject data, and the first communication apparatus and the second communication apparatus generate the common data on an opportunity of receiving the transmission subject cut data or the encrypted cut data; and perform the encryption or
5 decryption by a reference number of bits as a reference, and the one of the first
communication apparatus and the second communication apparatus cuts the transmission subject data by the number of bits shorter than the reference number of bits; and includes dummy data irrelevant to the transmission subject data in the transmission subject cut data and thereby matching the number of bits of the transmission subject cut data with the
10 reference number of bits.
The second invention can also be implemented by the following method. An example of the second invention is the method implemented in a communication system including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text
15 to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data.
This method includes the steps for one of the first communication apparatus and the second communication apparatus of: cutting the transmission subject data by a predetermined
20 number of bits into multiple pieces of transmission subject cut data; sequentially generating predetermined common data; encrypting the transmission subject cut data with the algorithm generated based on the common data to render it as the encrypted data; and transmitting the encrypted data to the other one of the first communication apparatus and the second communication apparatus, and the steps for the other one of the first communication
25 apparatus and the second communication apparatus of: cutting the received encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; sequentially generating the common data common with the one of the first communication apparatus and the second communication apparatus; decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data


generated based on the generated common data to render it as the transmission subject cut data; and connecting the decrypted transmission subject cut data to render it as the transmission subject data.
The first communication apparatus and the second communication apparatus of this
5 method generate the common data on an opportunity of receiving the transmission subject cut data or the encrypted cut data; and cut the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
Another example of the method is the one implemented in a communication system
10 including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data.
15 This method includes the steps for one of the first communication apparatus and the
second communication apparatus of: cutting the transmission subject data by a predetermined number of bits into multiple pieces of transmission subject cut data; sequentially generating predetermined common data; encrypting the transmission subject cut data with the algorithm generated based on the common data to render it as the encrypted data; and transmitting the
20 encrypted data to the other one of the first communication apparatus and the second communication apparatus, and the steps for the other one of the first communication apparatus and the second communication apparatus of: cutting the received encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted; sequentially generating the common data common with the one
25 of the first communication apparatus and the second communication apparatus; decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data generated based on the generated common data to render it as the transmission subject cut data; and connecting the decrypted transmission subject cut data to render it as the transmission subject data.


The first communication apparatus and the second communication apparatus of this method generate the common data on an opportunity of receiving the transmission subject cut data or the encrypted cut data; and perform the encryption or the decryption by a reference number of bits as a reference; the one of the first communication apparatus and the second
5 communication apparatus cuts the transmission subject data by the number of bits shorter than the reference number of bits; and includes dummy data irrelevant to the transmission subject data in the transmission subject cut data and thereby matches the number of bits of the transmission subject cut data with the reference number of bits.
10 Brief Description of the Drawings
FIG. 1 is a diagram showing an overall configuration of a communication system according to an embodiment;
FIG. 2 is a diagram showing a hardware configuration of a first communication apparatus and a second communication apparatus included in the communication system
15 shown in FIG. 1;
FIG. 3 is a block diagram showing a configuration of a communication apparatus of the first communication apparatus and second communication apparatus included in the communication system shown in FIG. 1;
FIG. 4 is a flowchart showing a flow of a process executed in the communication 20 system shown in FIG. 1;
FIG. 5 is a flowchart showing a flow of a process of encryption executed in the first communication apparatus of the communication system shown in FIG. 1; and
FIG. 6 is a flowchart showing a process of decryption executed in the second communication apparatus of the communication system shown in FIG. 1.
25
Detailed Description of the Preferred Embodiments
Hereunder, a preferred embodiment of the present invention will be described in detail by referring to the drawings.


A communication system according to this embodiment is roughly configured as shown in FIG. 1. The communication system includes a first communication apparatus 11 and a second communication apparatus 12 mutually connected via a network 13. The first communication apparatus 11 and the second communication apparatus 12 mutually perform
5 encrypted communication.
The network 13 connecting the first communication apparatus 11 with the second communication apparatus 12 is the Internet for instance. Instead, it is also possible to configure the network 13 with another means, such as an intranet or a private line.
A description will be given as to configuration of the first communication apparatus
10 11 and the second communication apparatus 12. As the first communication apparatus 11 and the second communication apparatus 12 have the same configuration according to this embodiment, only the configuration of the first communication apparatus 11 will be described as a representative.
FIG. 2 shows hardware configuration of the first communication apparatus 11.
15 According to this embodiment, the first communication apparatus 11 comprises a
CPU (central processing unit) 21, an ROM (read only memory) 22, an HDD (hard disk drive) 23, an RAM (random access memory) 24, an input apparatus 25, a display apparatus 26, a communication apparatus 27 and a bus 28. The CPU 21, ROM 22, HDD 23, RAM 24, input apparatus 25, display apparatus 26 and communication apparatus 27 can exchange data
20 via the bus 28.
The ROM 22 or the HDD 23 has a predetermined program and predetermined data (this may include data to be transmission subject data as in this embodiment, and the predetermined data includes the data necessary to execute the program) recorded therein. The CPU 21 controls the entire first communication apparatus 11, and performs a process
25 described later based on the program and data stored in the ROM 22 or the HDD 23. The RAM 24 is used as a work storage area on performing the process on the CPU 21.
The input apparatus 25 is configured by a keyboard, a mouse and so on, and is used to input commands and data. The display apparatus 26 may be configured by an LCD (liquid


crystal display), CRT (cathode ray tube), and is used to display the commands, inputted data, a status of the process described later and so on.
The communication apparatus 27 performs communication with the second communication apparatus 12 via the network 13. The communication apparatus 27 of the
5 second communication apparatus 12 performs communication with the first communication apparatus 11 via the network 13.
Next, a description will be given as to the configuration of the communication apparatus 27. FIG. 3 shows a block diagram of the communication apparatus 27. The communication apparatus 27 is configured by an interface portion 31, a
10 preprocessing portion 32, an encrypting and decrypting portion 33, a common data
generating portion 34, an algorithm generating portion 35, a key generating portion 36, a communication portion 37 and a connecting portion 38.
The interface portion 31 exchanges the data between the bus 28 and the encrypting and decrypting portion 33. The interface portion 31 also has a function of transmitting the
15 data from the bus 28 to the common data generating portion 34 and the data from the connecting portion 38 to the bus 28.
The preprocessing portion 32 has a function of cutting the transmission subject data or the encrypted data received from the bus 28 via the interface portion 31 by a predetermined number of bits and generating transmission subject cut data or encrypted cut data to send it to
20 the encrypting and decrypting portion 33. How to cut the transmission subject data and the encrypted data will be described later. According to this embodiment, the preprocessing portion 32 has a function of including dummy data having no relation with the transmission subject data in the transmission subject data by a method described later.
The encrypting and decrypting portion 33 has a function of receiving the transmission
25 subject cut data or the encrypted cut data from the preprocessing portion 32, encrypting it in the case of receiving the transmission subject cut data or decrypting it in the case of receiving the encrypted cut data. The encrypting and decrypting portion 33 of this embodiment has a fixed reference number of bits as a processing unit in the case of performing the process of encryption and decryption. The reference number of bits in this embodiment is 8 bits


although it is not limited thereto. Details of the encryption and decryption will be described later.
The common data generating portion 34 sequentially generates common data which is the data common between the first communication apparatus 11 and the second
5 communication apparatus 12. The common data generating portion 34 of the first communication apparatus 11 and the second communication apparatus 12 of this embodiment sequentially generates the common data so that the common data in the same order becomes the same. The common data of this embodiment is the pseudo-random numbers though it does not always have to be the case. The generated common data is
10 transmitted to the preprocessing portion 32, algorithm generating portion 35 and key generating portion 36.
The algorithm generating portion 35 generates the algorithms based on the common data received from the common data generating portion 34. The algorithms are used when the encrypting and decrypting portion 33 performs the encryption process and the decryption
15 process.
The key generating portion 36 generates the keys based on the common data received from the common data generating portion 34. The keys are used when the encrypting and decrypting portion 33 performs the encryption process and decryption process.
The communication portion 37 exchanges the data with the network 13. The
20 encrypted cut data generated by encrypting the transmission subject cut data in the encrypting and decrypting portion 33 is connected by the connecting portion 38, and is transmitted to the communication apparatus at the other end via the communication portion 37. The communication portion 37 receives the encrypted data from the communication apparatus at the other end. The encrypted data is transmitted from the communication portion 37 to the
25 preprocessing portion 32.
The connecting portion 38 has a function of connecting the transmission subject cut data generated by decrypting the encrypted cut data in the encrypting and decrypting portion 33 in original order to render it as a set of the transmission subject data. The transmission subject data is transmitted to the interface portion 31, and is transmitted as necessary to the



HDD 23 or the CPU 21 via the bus 28. The connecting portion 38 also has a function of
connecting the encrypted cut data generated by encrypting the transmission subject cut data
in the encrypting and decrypting portion 33 in original order to render it as a set of the
encrypted data. The encrypted data is transmitted to the communication portion 37, and is
5 transmitted from the communication portion 37 to the communication apparatus at the other end. The connecting portion 38 does not need to have a function of connecting the encrypted cut data generated by encrypting the transmission subject cut data in the encrypting and decrypting portion 33. In this case, the encrypted cut data is sequentially transmitted to the communication apparatus at the other end in order in which it is encrypted. In the case
10 where the connecting portion 38 is as described above, the encrypted cut data can be directly transmitted to the communication portion 37 without going through the connecting portion 38.
Next, a description will be given as to a flow of the processing performed in the communication system.
15 To describe an outline by using FIG. 4, the flow of the processing performed in the
communication system is as follows.
First, the first communication apparatus 11 encrypts the transmission subject data to generate the encrypted data (S110). Next, the first communication apparatus 11 transmits the encrypted data to the second communication apparatus 12 (S120). Next, the second
20 communication apparatus 12 having received the encrypted data decrypts the encrypted data to change it back to the transmission subject data (S130).
Thus, the encrypted data is transmitted from the first communication apparatus 11 to the second communication apparatus 12 in the following description. As is obvious, there is no difference in the contents of the processing even if it is reverse to the above-mentioned
25 case where the encrypted data is transmitted from the second communication apparatus 12 to the first communication apparatus 11.
First, a detailed description will be given by referring to FIG. 5 as to the above-mentioned step SI 10 in which the first communication apparatus 11 encrypts the transmission subject data to generate the encrypted data.


First, the transmission subject data is read. The transmission subject data may be any data required to be transmitted from the first communication apparatus 11 to the second communication apparatus 12. According to this embodiment, the transmission subject data is recorded on the HDD 23. In the case where a command for transmitting the transmission
5 subject data to the second communication apparatus 12 is inputted from the input apparatus 25 for instance, the CPU 21 reads out the transmission subject data from the HDD 23 and has it recorded temporarily in the RAM 24. The transmission subject data is transmitted from the RAM 24 to the preprocessing portion 32 via the bus 28 and the interface portion 31 in the communication apparatus 27 (SI 101).
10 In the preprocessing portion 32, the transmission subject data is cut by a
predetermined number of bits to be rendered as the transmission subject cut data (SI 102). The preprocessing portion 32 includes the dummy data in the transmission subject cut data as necessary.
There may be just one method of generating the transmission subject cut data from the
15 transmission subject data. According to this embodiment, however, the transmission subject cut data is generated from the transmission subject data by one of the following three methods.
A) The case of cutting the transmission subject data into the transmission subject cut data
by a predetermined number of bits shorter than the reference number of bits, and including
20 the dummy data at respective fixed positions of pieces of the transmission subject cut data all of which have the number of bits shorter than the reference number of bits
B) The case of cutting the transmission subject data into the transmission subject cut data
by a predetermined number of bits shorter than the reference number of bits, and including
the dummy data at different positions of pieces of the transmission subject cut data all of
25 which have the number of bits shorter than the reference number of bits
C) The case of cutting the transmission subject data into the transmission subject cut data
by the number of bits the same as or shorter than the reference number of bits, and including
the dummy data in respective pieces of the transmission subject cut data having the number
of bits shorter than the reference number of bits


It is decided by the common data generated by the common data generating portion 34 as to which of the above-mentioned three methods should be used to generate the transmission subject cut data from the transmission subject data.
A description will be given first as to how the common data generating portion 34
5 generates the common data.
In the case where the interface portion 31 receives the transmission subject data from the bus 28, the common data generating portion 34 receives that information from the interface portion 31.
The common data generating portion 34 takes this opportunity to start generating the
10 common data. According to this embodiment, the common data generating portion 34 generates the common data each time the transmission subject data is received by the interface portion 31. The common data of this embodiment is a matrix (X) with 8 rows and 8 columns although it is not limited thereto.
According to this embodiment, the common data generating portion 34 generates the
15 common data successively as if in nonlinear transition though it does not always have to be
the case.
To generate the common data successively as if in nonlinear transition, there are thinkable techniques, such as (1) including exponential calculation of past common data in the process of generating the common data, (2) including multiplication of two or more
20 pieces of the past common data in the process of generating the common data, or a combination of (1) and (2).
According to this embodiment, the common data generating portion 34 has a 01st
solution (X01) and a 02nd solution (X02) predetermined as initial matrixes (for instance, the
01st solution and a 02nd solution are recorded in a predetermined memory).
25 The common data generating portion 34 assigns the initial matrixes to the solution
generating algorithm and generates a 1st solution (X,) as follows.
1st solution (X^ = X02 X01 + a (a = matrix with 8 rows and 8 columns)
This is the common data generated first.


Next, in the case where the interface portion 31 receives the transmission subject data from the bus 28, the common data generating portion 34 generates a 2nd solution (X2) as follows.
2nd solution (X2) = X{X02 + a
5 Similarly, each time the interface portion 31 receives the transmission subject data
from the bus 28, the common data generating portion 34 generates 3rd, 4th,... Nth solutions as follows.
3rd solution (X3) = X2 X1 + a
4th solution (X4) = X3 X2 + a
10
Nth solution (XN) = XN. ,XN. 2 + a
The common data thus generated (that is, the solutions) are transmitted to the preprocessing portion 32 and the algorithm generating portion 35, and are also held in the
common data generating portion 34. To generate the Nth solution (XN), this embodiment
15 uses an N - 1st solution (XN_,) and an N - 2nd solution (XN_ 2), that is, the two solutions
generated immediately before then. Therefore, to generate the new solution, the common
data generating portion 34 must hold the nearest preceding two solutions generated in the
past (or else, the two solutions must be held by something else). Inversely, the solutions
older than the nearest preceding two solutions generated in the past are not to be used to
20 generate the new solution from now on. Thus, this embodiment always holds the two past
solutions in the common data generating portion 34. However, this embodiment erases the
solution which is now the third nearest preceding solution due to the generation of the new
solution but was the second nearest preceding solution till then from the predetermined
memory or the like in which it was recorded.
25 The solutions thus generated are chaotic in nonlinear transition, and are also the
pseudo-random numbers.
To cause the nonlinear transition, it is thinkable to use the following formulas other than the above-mentioned formula: Nth solution (XN) = XN., XN„2 + a.
For instance:


(a) Nth solution (XN) = (X N. ,)p
(b) Nth solution (XN) = (X N. ,)p (XN. 2) (c) Nth solution (XN) = (X N. ,)p + (XN. 2)Q
P, Q, R and S are predetermined constants respectively. The common data
5 generating portion 34 has two initial matrixes in the case of using the formula (a) or (c), and has four initial matrixes in the case of using the formula (b).
The above-mentioned a is a constant. However, it may also be specific changing environmental information. The environmental information is the information naturally generated in sequence as time elapses and commonly obtainable at distant places, such as the
10 information determined based on weather of a specific region, information determined based on the contents of a TV broadcast of a TV station broadcasted at a specific time and information determined based on a result of a specific sport.
It is possible to further improve confidentiality of the communication by creating the above-mentioned a in series and generating the common data.
15 It is also possible, as a matter of course, to add a (may be generated from the
environmental information) to right sides of the formulas (a) to (c).
As described above, the preprocessing portion 32 having received the common data (that is, the above-mentioned solutions) decides which of the above-mentioned methods of A), B) and C) should be used to generate the transmission subject cut data. According to
20 this embodiment, the transmission subject cut data is generated by the method A) in the case where, in dividing the sum of adding up the numbers configuring the matrix with 8 rows and 8 columns by 3, a remainder thereof is 0, by the method B) in the case where the remainder is 1, and by the method C) in the case where the remainder is 2, though it does not always have to be the case.
25 In the case of generating the transmission subject cut data by the method A), the
preprocessing portion 32 cuts the transmission subject data received from the interface portion 31 by the predetermined number (7 bits in this embodiment) of bits shorter than the reference number of bits in order from the head to generate the transmission subject cut data. The preprocessing portion 32 embeds the dummy data at a fixed position of the transmission


subject cut data. The positions of the transmission subject cut data for embedding the dummy data may be either variable or fixed. In the latter case, the positions at which the dummy data is embedded may be the head or the end of the transmission subject cut data or a predetermined intermediate position such as a second bit or a third bit. The dummy data
5 may be any data as long as it is irrelevant data to the transmission subject data. For instance, there are thinkable processes, such as constantly embedding the data of 0 or the data of 1, or embedding the data of 1, or alternately embedding the data of 1 and 0. As another example, it is possible to decide what dummy data is to be embedded based on the above-mentioned common data. For instance, if the sum of the numbers configuring the matrix with 8 rows
10 and 8 columns as the common data added up is divided by 9 and the remainder thereof is 0, it is possible to continue 0, such as 0, 0, 0, 0 ... If the remainder is 1, it is possible to put in 1 alternately, such as 0, 1,0, 1 ... If the remainder is 2, it is possible to put in 1 at every third place, such as 0, 0, 1, 0, 0, 1 ... Likewise, it is possible to put in 1 at every fourth place if the remainder is 3, put in 1 at every fifth place if the remainder is 4, and put in 1 at every
15 tenth place if the remainder is 9.
In the case of generating the transmission subject cut data by the method B), the preprocessing portion 32 cuts the transmission subject data by the predetermined number (7 bits for instance) of bits shorter than the reference number of bits to render it as the transmission subject cut data, and includes the dummy data at different positions of pieces of
20 the transmission subject cut data all of which have the number of bits shorter than the
reference number of bits. In this case, the positions at which the dummy data is embedded may be fixed or regularly changing, such as moving in order of the first bit, second bit, third bit... eighth bit, first bit, second bit,... eighth bit, or randomly changing as to each piece of the transmission subject cut data. In the case where the positions at which the dummy data
25 is embedded randomly change, the positions may be decided based on the common data for instance.
As for the method of deciding the reference number of bits for embedding the dummy data by using the common data, it is possible to perform the following processes for instance. If the sum of the numbers configuring the matrix with 8 rows and 8 columns as the common


data added up is divided by 8 and the remainder thereof is 0, the dummy data is embedded alternately at the head and the end of the pieces of the transmission subject cut data. If the remainder is 1, the transmission subject cut data having the dummy data embedded at the head and the transmission subject cut data having the dummy data embedded at the end are
5 arranged to be at every third place. If the remainder is 2, the transmission subject cut data having the dummy data embedded at the head and the transmission subject cut data having the dummy data embedded at the end are arranged to be at every fourth place. If the remainder is 7, the transmission subject cut data having the dummy data embedded at the head and the transmission subject cut data having the dummy data embedded at the end are
10 arranged to be at every ninth place. It is also possible to further move the positions at which the dummy data is embedded such as the head and end rather than fixing the positions. In the case of generating the transmission subject cut data by the method C), the transmission subject data is cut to be the reference number of bits or the number of bits shorter than the reference number of bits. This cutting can be performed by cutting the
15 transmission subject data to a random length shorter than 8 bits. For instance, if the sum of the numbers configuring the matrix with 8 rows and 8 columns as the common data added up is divided by 8 and the remainder thereof is 0, the head of the transmission subject data at that point in time can be cut by 8 bits. If the remainder is 1, the head of the transmission subject data at that point in time can be cut by 1 bit. If the remainder is 2, the head of the
20 transmission subject data at that point in time can be cut by 2 bits.... If the remainder is 7, the head of the transmission subject data at that point in time can be cut by 7 bits. Of the transmission subject cut data thus generated, the preprocessing portion 32 embeds the dummy data in each piece of the transmission subject cut data of which number of bits is shorter than the reference number of bits. In this case, an embedding position of the dummy
25 data may be a specific position such as the head or the end or a predetermined changing position specified by the common data for instance.
In any case, the transmission subject cut data thus generated is transmitted to the encrypting and decrypting portion 33 as a stream in order of generation.


In parallel with the generation of the transmission subject cut data, the algorithm generating portion 35 generates an algorithm used on encrypting the transmission subject cut data.
The algorithm generating portion 35 generates the algorithm based on the common
5 data.
According to this embodiment, the algorithm generating portion 35 generates the algorithm as follows.
The algorithm of this embodiment is defined as "in the case where the transmission subject cut data as 8-bit data is a matrix Y with 1 row and 8 columns, it is acquired by
10 multiplying by Y the matrix X with 8 rows and 8 columns as the common data raised to the a-th power and turned clockwise by n x 90°."
Here, there are the cases where a is a predetermined constant. According to this embodiment, however, it is a number changing based on the common data. To be more specific, the algorithm of this embodiment changes based on the common data. For instance,
15 a can be defined as the remainder in the case of dividing by 5 the number acquired by adding up all the numbers as elements of the matrix included in the common data which is the matrix with 8 rows and 8 columns (provided that it is a = 1 in the case where the remainder is 0).
The above-mentioned n is a predetermined number defined by the key. If the key is a constant number, n is fixed. As described below, however, the key changes based on the
20 common data. To be more specific, this n also changes based on the common data according to this embodiment.
It is also possible to decide on another algorithm.
According to this embodiment, the algorithm generating portion 35 generates the algorithm each time it receives the common data from the common data generating portion
25 34, and transmits it to the encrypting and decrypting portion 33.
In parallel with the generation of the transmission subject cut data, the key generating portion 36 generates the key used on encrypting the transmission subject cut data.
The key generating portion 36 generates the key based on the common data.



According to this embodiment, the key generating portion 36 generates the key as the
following.
The key of this embodiment is the number acquired by adding up all the numbers as elements of the matrix included in the common data which is the matrix with 8 rows and 8
5 columns. Therefore, the key changes based on the common data according to this embodiment.
It is also possible to decide on another key.
According to this embodiment, the key generating portion 36 generates the key each time it receives the common data from the common data generating portion 34, and transmits
10 it to the encrypting and decrypting portion 33.
The encrypting and decrypting portion 33 encrypts the transmission subject cut data
received from the preprocessing portion 32 based on the algorithm received from the
algorithm generating portion 35 and the key received from the key generating portion 36
(S1 103).
15 As described above, the algorithm is defined as "in the case where the transmission
subject cut data as 8-bit data is a matrix Y with 1 row and 8 columns, it is acquired by
multiplying by Y the matrix X with 8 rows and 8 columns as the common data raised to the
a-th power and turned clockwise by n x 90°," and n as the key is the above-mentioned
number.
20 In the case where a is 3 and n is 6, the encryption is performed by multiplying by the
transmission subject cut data the matrix with 8 rows and 8 columns acquired by turning the matrix with 8 rows and 8 columns acquired by cubing X clockwise by 6 x 90° = 540°.
The data thus generated is the encrypted cut data.
The encrypted cut data is transmitted to the connecting portion 38. The connecting
25 portion 38 connects the encrypted cut data as one, and generates the encrypted data (SI 104). Sorting order of the encrypted cut data in this case is corresponding to the original sorting order of the encrypted cut data.
Thus, the step of SI 10 in which the first communication apparatus 11 encrypts the transmission subject data to generate the encrypted data is finished.


The encrypted data is transmitted to the communication portion 37 and then transmitted to the second communication apparatus 12 via the network 13.
The second communication apparatus 12 having received the encrypted data performs the step S130 of decrypting the encrypted data and changing it back to the transmission
5 subject data.
Hereunder, this step of decryption will be described in detail.
The encrypted data transmitted to the second communication apparatus 12 is received by the communication portion 37 of the second communication apparatus 12 (S1201).
The communication portion 37 transmits the encrypted data to the preprocessing 10 portion 32.
The preprocessing portion 32 cuts the received encrypted data by a predetermined number of bits, and generates the encrypted cut data (S1202).
In the case of cutting the encrypted data and generating the encrypted cut data, the preprocessing portion 32 performs a process reverse to the process performed by the
15 connecting portion 38 of the first communication apparatus 11. To be more specific, the encrypted data is cut by 8 bits from the head to be divided into multiple pieces of the encrypted cut data.
Next, the encrypted cut data is transmitted to the encrypting and decrypting portion 33,
where it is decrypted and rendered as the transmission subject cut data (S1203).
2 0 The decryption is performed as a process reverse to the process performed by the
encrypting and decrypting portion 33 of the first communication apparatus 11. For that reason, the second communication apparatus 12 requires the algorithm and key required on performing the encryption on the first communication apparatus 11.
The algorithm and key used for the decryption are generated inside the second
25 communication apparatus 12. Working thereof will be described.
The information that the communication portion 37 of the second communication apparatus 12 received the encrypted data is transmitted from the communication portion 37 to the common data generating portion 34. The common data generating portion 34 having


received this information takes this opportunity to generate the common data each time it receives this information.
The generation of the common data by the common data generating portion 34 of the second communication apparatus 12 is performed through the same step as the step
5 performed by the common data generating portion 34 of the first communication apparatus 11. The common data generating portion 34 of the second communication apparatus 12 has the same initial matrix and solution generating algorithm as the common data generating portion 34 of the first communication apparatus 11. Therefore, the common data generated by the second communication apparatus 12 is the same as the common data generated by the
10 first communication apparatus 11 if the data in the same order of generation is compared.
The generated common data is transmitted from the common data generating portion 34 to the preprocessing portion 32, algorithm generating portion 35 and key generating portion 36.
The algorithm generating portion 35 generates the algorithm based on the received
15 common data each time it receives the common data. The step in which the algorithm
generating portion 35 of the second communication apparatus 12 generates the algorithm is the same as the step in which the algorithm generating portion 35 of the first communication apparatus 11 generates the algorithm. The generated algorithm is transmitted from the algorithm generating portion 35 to the encrypting and decrypting portion 33.
2 0 The key generating portion 36 generates the key based on the received common data
each time it receives the common data. The step in which the key generating portion 36 of the second communication apparatus 12 generates the key is the same as the step in which the key generating portion 36 of the first communication apparatus 11 generates the key. The generated key is transmitted from the key generating portion 36 to the encrypting and
25 decrypting portion 33.
As for this communication system, new common data is generated on the first communication apparatus 11 each time the encryption is performed on the first communication apparatus 11, and new common data is also generated on the second communication apparatus 12 each time the decryption is performed on the second


communication apparatus 12. As described above, the common data generated by the second communication apparatus 12 is the same as the common data generated by the first communication apparatus 11 if the data in the same order of generation is compared. Therefore, all the common data generated when encrypting certain transmission subject data
5 on the first communication apparatus 11 and the algorithms and keys generated based on that common data constantly match with the common data generated on the second communication apparatus 12 and the algorithms and keys generated based on that common data when decrypting the encrypted data generated by using that common data and the algorithms and keys generated based on the common data. These circumstances are the
10 same even when the encryption is performed on the second communication apparatus 12 and the decryption is performed on the first communication apparatus 11.
As described above, the encrypting and decrypting portion 33 performs the decryption process by using the algorithm received from the algorithm generating portion 35. To put it in more detail, the encrypting and decrypting portion 33 performs the decryption process by
15 generating the algorithm for performing the decryption process (defined as "in the case where the encrypted cut data is a matrix Z with 1 row and 8 columns, the transmission subject cut data is acquired by multiplying by Y an inverse matrix of the matrix X with 8 rows and 8 columns as the common data raised to the a-th power and turned clockwise by n x 90°") based on the algorithm received from the algorithm generating portion 35 (defined as "in the
20 case where the transmission subject cut data as 8-bit data is a matrix Y with 1 row and 8 columns, the encrypted cut data is acquired by multiplying by Y the matrix X with 8 rows and 8 columns as the common data raised to the a-th power and turned clockwise by n x 90°") and performing calculation according to the above-mentioned definition by using the key. Thus, the encrypting and decrypting portion 33 decrypts the encrypted cut data
25 provided as a stream from the preprocessing portion 32 one after another so as to generate the transmission subject cut data.
Next, the encrypting and decrypting portion 33 removes the dummy data from the transmission subject cut data as required (S1204). As described above, the common data generated by the common data generating portion 34 is transmitted to the preprocessing


portion 32. This common data was used when determining how the dummy data was embedded in the transmission subject cut data in the preprocessing portion 32 of the first communication apparatus 11. To be more specific, the common data held by the preprocessing portion 32 of the second communication apparatus 12 at that point in time
5 indicates how the dummy data was embedded in the encrypted cut data (to be more precise, the transmission subject cut data before having the encrypted cut data encrypted) completely decrypted (or being decrypted or just to be decrypted) by the encrypting and decrypting portion 33 of the second communication apparatus 12.
The preprocessing portion 32 transmits to the encrypting and decrypting portion 33
10 the information on where in the transmission subject cut data decrypted by the encrypting and decrypting portion 33 the dummy data is embedded.
The encrypting and decrypting portion 33 removes the dummy data from the transmission subject cut data by using the information.
The transmission subject cut data thus generated is transmitted to the connecting
15 portion 38. The connecting portion 38 connects the received transmission subject cut data as one and changes it back to the transmission subject data in the original state before being encrypted on the first communication apparatus 11 (S1205).
Thus, the step 130 in which the second communication apparatus 12 decrypts the
encrypted data and changes it back to the transmission subject data is finished.
2 0 The generated transmission subject data is transmitted from the connecting portion 38
to the interface portion 31, and is then transmitted to the HDD 23 for instance via the bus 28 to be stored therein. «Deformed Example»
In the communication system described above, the common data generating portion
25 34 generates the common data each time the transmission subject data is received by the
interface portion 31 or each time the encrypted data is received by the communication portion 37. In this case, all the pieces of the transmission subject cut data generated from one piece of the transmission subject data are encrypted by the same algorithm.


Instead of this, the common data generating portion 34 may generate the common data each time the transmission subject cut data is received by the encrypting and decrypting portion 33 or each time the encrypted cut data is received by the encrypting and decrypting portion 33. In this case, the encryption is performed by different algorithm and key for each
5 piece of the transmission subject cut data generated from one piece of the transmission subject data.
In such a deformed example, the common data, algorithm and key are generated as follows in the case of performing the encryption.
First, the case of performing the encryption will be described.
10 If the interface portion 31 receives the transmission subject data, the information to
that effect is transmitted from the interface portion 31 to the common data generating portion 34. On receiving it, the common data generating portion 34 generates the common data as in the case of the above-mentioned embodiment. The common data is transmitted to the preprocessing portion 32, algorithm generating portion 35 and key generating portion 36.
15 On receiving the common data, the preprocessing portion 32 starts generating the
transmission subject cut data by cutting the transmission subject data as in the case of the above-mentioned embodiment. The algorithm generating portion 35 generates the algorithm based on the received common data, and transmits the generated algorithm to the encrypting and decrypting portion 33. The key generating portion 36 generates the key
20 based on the received common data, and transmits the generated key to the encrypting and decrypting portion 33.
The encrypting and decrypting portion 33 encrypts the received transmission subject cut data with the received algorithm and key to generate a first piece of the encrypted cut data.
25 Next, the common data generating portion 34 generates the common data before a
second piece of the transmission subject cut data is transmitted from the preprocessing portion 32 to the encrypting and decrypting portion 33 so as to transmit it to the algorithm generating portion 35 and key generating portion 36. On receiving it, the algorithm generating portion 35 generates an algorithm different from the one used to generate the first


piece of the encrypted cut data, and transmits it to the encrypting and decrypting portion 33. The key generating portion 36 similarly generates a key different from the first one, and transmits it to the encrypting and decrypting portion 33. The encrypting and decrypting portion 33 uses the algorithm and key to generate the second piece of the encrypted cut data
5 by using the second piece of the transmission subject cut data.
This is repeated to perform different encryption to each piece of the encrypted cut data.
In this deformed example, the second piece onward of the common data are only transmitted to the algorithm generating portion 35 and key generating portion 36. However,
10 the second piece onward of the common data may also be transmitted to the preprocessing portion 32. In this case, it is possible to change the method of generating the transmission subject cut data as to each piece of the transmission subject cut data.
Next, the cases where the decryption is performed will be described.
If the communication portion 37 receives the encrypted data, the information to that
15 effect is transmitted from the communication portion 37 to the common data generating
portion 34. On receiving it, the common data generating portion 34 generates the common data as in the case of the above-mentioned embodiment. The common data is transmitted to the preprocessing portion 32, algorithm generating portion 35 and key generating portion 36. On receiving the common data, the preprocessing portion 32 generates the information on
20 how the transmission subject cut data was generated as in the case of the above-mentioned embodiment and transmits it to the encrypting and decrypting portion 33. The algorithm generating portion 35 generates the algorithm based on the received common data, and transmits the generated algorithm to the encrypting and decrypting portion 33. The key generating portion 36 generates the key based on the received common data, and transmits
25 the generated key to the encrypting and decrypting portion 33. The algorithm and key are equal to the algorithm and key used when encrypting that transmission subject cut data respectively. The preprocessing portion 32 transmits the encrypted cut data generated by cutting the encrypted data to the encrypting and decrypting portion 33 as in the case of the above-mentioned embodiment.


The encrypting and decrypting portion 33 decrypts the received encrypted cut data with the algorithm for decryption generated by using the received algorithm so as to generate the first piece of the transmission subject cut data. The encrypting and decrypting portion 33 removes the dummy data from the generated transmission subject cut data according to
5 the received above-mentioned information on how the transmission subject cut data was generated.
Next, the common data generating portion 34 generates a next piece of the common data before the second piece of the transmission subject cut data is transmitted from the preprocessing portion 32 to the encrypting and decrypting portion 33 so as to transmit it to
10 the algorithm generating portion 35. On receiving it, the algorithm generating portion 35 generates an algorithm different from the one used to generate the first piece of the transmission subject cut data, and transmits it to the encrypting and decrypting portion 33. This algorithm is the same as the algorithm used to encrypt that transmission subject cut data. On receiving the common data, the key generating portion 36 generates a key different from
15 the key used to generate the first piece of the transmission subject cut data, and transmits it to the encrypting and decrypting portion 33. This key is the same as the key used to encrypt that transmission subject cut data.
The encrypting and decrypting portion 33 decrypts the second piece of the encrypted cut data by using these algorithm and key to generate the second piece of transmission
20 subject cut data. It also removes the dummy data as in the case of the above-mentioned embodiment.
This is repeated to decrypt each piece of the encrypted cut data with the different algorithm and key so as to generate the transmission subject cut data one after another. In the case where, in performing the encryption, the method of generating the
25 transmission subject cut data is changed as to each piece of the transmission subject cut data by also transmitting the second piece onward of the common data to the preprocessing portion 32, the second piece onward of the common data are also transmitted to the preprocessing portion 32 when performing the decryption. Thus, the preprocessing portion 32 generates the information on how the transmission subject cut data was generated as to


each piece of the encrypted cut data. The thus generated above-mentioned information on how the transmission subject cut data was generated is transmitted to the encrypting and decrypting portion 33 each time the encrypted cut data is decrypted by the encrypting and decrypting portion 33. The encrypting and decrypting portion 33 uses this information to
5 securely remove the dummy data embedded in each piece of the transmission subject cut data by a different method.




WE CLAIM :-
1. A communication system including a first communication apparatus and a second
communication apparatus as two communication apparatuses capable of encrypting
5 transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data, wherein:
both the first communication apparatus and the second communication apparatus
comprise:
10 cutting means for cutting the transmission subject data by a predetermined number of
bits into multiple pieces of transmission subject cut data and also cutting the encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted;
encrypting and decrypting means for encrypting the transmission subject cut data with 15 the algorithm common between the first communication apparatus and the second
communication apparatus to render it as the encrypted data and decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data;
connecting means for connecting the decrypted transmission subject cut data to render 20 it as the transmission subject data; and
transmitting and receiving means for transmitting and receiving the encrypted data, and
the cutting means cuts the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the
25 transmission subject cut data.
2. A communication system including a first communication apparatus and a second
communication apparatus as two communication apparatuses capable of encrypting
transmission subject data in plain text to render it as encrypted data and then transmitting it to


the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data, wherein:
both the first communication apparatus and the second communication apparatus
comprise:
5 cutting means for cutting the transmission subject data by a predetermined number of
bits into multiple pieces of transmission subject cut data and also cutting the encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted;
encrypting and decrypting means for encrypting the transmission subject cut data with 10 the algorithm common between the first communication apparatus and the second
communication apparatus to render it as the encrypted data and decrypting the encrypted cut
data with the algorithm used when encrypting the encrypted cut data to render it as the
transmission subject cut data so as to perform the encryption or the decryption by a reference
number of bits as a reference;
15 connecting means for connecting the decrypted transmission subject cut data to render
it as the transmission subject data; and
transmitting and receiving means for transmitting and receiving the encrypted data, and
the cutting means cuts the transmission subject data by the number of bits shorter than 20 the reference number of bits; and
both the first communication apparatus and the second communication apparatus comprise mixing means for including dummy data irrelevant to the transmission subject data in the transmission subject cut data and thereby matching the number of bits of the transmission subject cut data with the reference number of bits.
25
3. A communication system including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to


the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data, wherein:
both the first communication apparatus and the second communication apparatus
comprise:
5 cutting means for cutting the transmission subject data by a predetermined number of
bits into multiple pieces of transmission subject cut data and also cutting the encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted;
common data generating means for sequentially generating common data which is
10 common between the first communication apparatus and the second communication apparatus;
encrypting and decrypting means for encrypting the transmission subject cut data with the algorithm common between the first communication apparatus and the second communication apparatus generated based on the common data received from the common
15 data generating means to render it as the encrypted data and decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data to render it as the transmission subject cut data;
connecting means for connecting the decrypted transmission subject cut data to render
it as the transmission subject data; and
2 0 transmitting and receiving means for transmitting and receiving the encrypted data,
and
the common data generating means generates the common data on an opportunity of
having the transmission subject cut data or the encrypted cut data received by the encrypting
and decrypting means, and
2 5 the cutting means cuts the transmission subject data so that at least one piece of the
transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
4. The communication system according to claim 3, wherein:


both the first communication apparatus and the second communication apparatus comprise
mixing means for including dummy data irrelevant to the transmission subject data in the transmission subject cut data except a piece of the largest number of bits thereof and thus
5 matching the number of bits of every piece of the transmission subject cut data with the number of bits of the piece of the largest number of bits of the transmission subject cut data.
5. A communication system including a first communication apparatus and a second
communication apparatus as two communication apparatuses capable of encrypting
10 transmission subject data in plain text to render it as encrypted data and then transmitting it to
the communication apparatus at the other end and also decrypting received encrypted data
and rendering it as the transmission subject data, wherein:
both the first communication apparatus and the second communication apparatus
comprise:
15 cutting means for cutting the transmission subject data by a predetermined number of
bits into multiple pieces of transmission subject cut data and also cutting the encrypted data
into multiple pieces of encrypted cut data by the same number of bits by which the encrypted
data is cut when encrypted;
common data generating means for sequentially generating common data which is
20 common between the first communication apparatus and the second communication
apparatus;
encrypting and decrypting means for encrypting the transmission subject cut data with
the algorithm common between the first communication apparatus and the second
communication apparatus generated based on the common data received from the common
25 data generating means to render it as the encrypted data and decrypting the encrypted cut data
with the algorithm used when encrypting the encrypted cut data to render it as the
transmission subject cut data so as to perform the encryption or the decryption by a reference
number of bits as a reference;


connecting means for connecting the decrypted transmission subject cut data to render it as the transmission subject data; and
transmitting and receiving means for transmitting and receiving the encrypted data,
and
5 the common data generating means generates the common data on an opportunity of
having the transmission subject cut data or the encrypted cut data received by the encrypting and decrypting means, and
the cutting means cuts the transmission subject data by the number of bits shorter than
the reference number of bits; and
10 both the first communication apparatus and the second communication apparatus
comprise mixing means for including dummy data irrelevant to the transmission subject data in the transmission subject cut data and thereby matching the number of bits of the transmission subject cut data with the reference number of bits.
15 6. The communication system according to claim 5, wherein:
the cutting means cuts the transmission subject data by a predetermined number of bits shorter than the reference number of bits.
7. The communication system according to claim 6, wherein:
20 the mixing means includes the dummy data at a specific position of the transmission
subject data.
8. The communication system according to claim 6, wherein:
the mixing means includes the dummy data at a predetermined position different for
25 each piece of the transmission subject data.
9. The communication system according to claim 6, wherein:


the cutting means cuts the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
5 10. The communication system according to claim 3 or 5, wherein:
the common data generating means generates pseudo-random numbers as the common
11. The communication system according to claim 10, wherein:
10 the common data generating means generates the common data each time the
transmission subject data is encrypted or the encrypted data is decrypted.
12. The communication system according to claim 10, wherein:
the common data generating means generates the common data each time the
15 transmission subject cut data is encrypted or the encrypted cut data is decrypted.
13. The communication system according to claim 8, wherein:
the mixing means decides the predetermined position for including the dummy data based on the common data.
20
14. The communication system according to claim 9, wherein:
the cutting means cuts the transmission subject data based on the common data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
25
15. A communication method implemented in a communication system including a first
communication apparatus and a second communication apparatus as two communication
apparatuses capable of encrypting transmission subject data in plain text to render it as
encrypted data and then transmitting it to the communication apparatus at the other end and


also decrypting received encrypted data and rendering it as the transmission subject data, including:
the steps for one of the first communication apparatus and the second communication
apparatus of:
5 cutting the transmission subject data by a predetermined number of bits into multiple
pieces of transmission subject cut data;
encrypting the transmission subject cut data with a predetermined algorithm to render it as the encrypted data; and
transmitting the encrypted data to the other one of the first communication apparatus 10 and the second communication apparatus, and
the steps for the other one of the first communication apparatus and the second communication apparatus of:
cutting the received encrypted data into multiple pieces of encrypted cut data by the
same number of bits by which the encrypted data is cut when encrypted;
15 decrypting the encrypted cut data with the algorithm used when encrypting the
encrypted cut data to render it as the transmission subject cut data; and
connecting the decrypted transmission subject cut data to render it as the transmission subject data, and
the one of the first communication apparatus and the second communication apparatus
2 0 cuts the transmission subject data so that at least one piece of the transmission subject
cut data has a different number of bits from the other pieces of the transmission subject cut data.
16. A communication method implemented in a communication system including a first
25 communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data, including:


the steps for one of the first communication apparatus and the second communication apparatus of:
cutting the transmission subject data by a predetermined number of bits into multiple
pieces of transmission subject cut data;
5 encrypting the transmission subject cut data with a predetermined algorithm to render
it as the encrypted data; and
transmitting the encrypted data to the other one of the first communication apparatus and the second communication apparatus, and
the steps for the other one of the first communication apparatus and the second
10 communication apparatus of:
cutting the received encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted;
decrypting the encrypted cut data with the algorithm used when encrypting the
encrypted cut data to render it as the transmission subject cut data; and
15 connecting the decrypted transmission subject cut data to render it as the transmission
subject data, and
the first communication apparatus and the second communication apparatus
generate the common data on an opportunity of receiving the transmission subject cut
data or the encrypted cut data; and
2 0 perform the encryption or the decryption by a reference number of bits as a reference,
and
the one of the first communication apparatus and the second communication apparatus
cuts the transmission subject data by the number of bits shorter than the reference
number of bits; and
2 5 includes dummy data irrelevant to the transmission subject data in the transmission
subject cut data and thereby matching the number of bits of the transmission subject cut data with the reference number of bits.


17. A communication method implemented in a communication system including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and
5 also decrypting received encrypted data and rendering it as the transmission subject data, including:
the steps for one of the first communication apparatus and the second communication apparatus of:
cutting the transmission subject data by a predetermined number of bits into multiple 10 pieces of transmission subject cut data;
sequentially generating predetermined common data;
encrypting the transmission subject cut data with the algorithm generated based on the common data to render it as the encrypted data; and
transmitting the encrypted data to the other one of the first communication apparatus 15 and the second communication apparatus, and
the steps for the other one of the first communication apparatus and the second communication apparatus of:
cutting the received encrypted data into multiple pieces of encrypted cut data by the
same number of bits by which the encrypted data is cut when encrypted;
2 0 sequentially generating the common data common with the one of the first
communication apparatus and the second communication apparatus;
decrypting the encrypted cut data with the algorithm used when encrypting the
encrypted cut data generated based on the generated common data to render it as the
transmission subject cut data; and
2 5 connecting the decrypted transmission subject cut data to render it as the transmission
subject data, and
the first communication apparatus and the second communication apparatus
generate the common data on an opportunity of receiving the transmission subject cut data or the encrypted cut data; and


cut the transmission subject data so that at least one piece of the transmission subject cut data has a different number of bits from the other pieces of the transmission subject cut data.
5 18. A communication method implemented in a communication system including a first communication apparatus and a second communication apparatus as two communication apparatuses capable of encrypting transmission subject data in plain text to render it as encrypted data and then transmitting it to the communication apparatus at the other end and also decrypting received encrypted data and rendering it as the transmission subject data,
10 including:
the steps for one of the first communication apparatus and the second communication apparatus of:
cutting the transmission subject data by a predetermined number of bits into multiple
pieces of transmission subject cut data;
15 sequentially generating predetermined common data;
encrypting the transmission subject cut data with the algorithm generated based on the common data to render it as the encrypted data; and
transmitting the encrypted data to the other one of the first communication apparatus
and the second communication apparatus, and
20 the steps for the other one of the first communication apparatus and the second
communication apparatus of:
cutting the received encrypted data into multiple pieces of encrypted cut data by the same number of bits by which the encrypted data is cut when encrypted;
sequentially generating the common data common with the one of the first
25 communication apparatus and the second communication apparatus;
decrypting the encrypted cut data with the algorithm used when encrypting the encrypted cut data generated based on the generated common data to render it as the transmission subject cut data; and


connecting the decrypted transmission subject cut data to render it as the transmission
subject data, and
the first communication apparatus and the second communication apparatus generate the common data on an opportunity of receiving the transmission subject cut
5 data or the encrypted cut data; and
perform the encryption or the decryption by a reference number of bits as a reference; the one of the first communication apparatus and the second communication apparatus cuts the transmission subject data by the number of bits shorter than the reference
number of bits; and
10 includes dummy data irrelevant to the transmission subject data in the transmission
subject cut data and thereby matches the number of bits of the transmission subject cut data
with the reference number of bits.
19. A communication apparatus included in the communication system according to claim 15 1,2, 3 or 5.








ABSTRACT
‘COMMUNICATION SYSTEM AND COMMUNICATION METHOD’
This invention relates to a communication system including two communication
apparatuses is improved such that the possibility that a third party decrypts the
communication is reduced. A communication system includes first and second
communication apparatuses, one of which encrypts data to be transmitted and
transmits the encrypted data. To the other communication apparatus which receives
and decrypts the encrypted date Prior to the encryption, each communication apparatus
divides the to-be- transmitted data At this moment each communication apparatus varies
the number of bits of the to-be- transmitted divided data .And mixes, into to-be-transmitted
divided data other than the one having the largest number of bits. Dummy data Having the
same number of bits as the to-be-transmitted divided data having the largest number of bits.


Documents:

1085-MUMNP-2007-ABSTRACT(8-2-2011).pdf

1085-mumnp-2007-abstract(complete)-(20-7-2007).pdf

1085-mumnp-2007-abstract(granted)-(28-3-2011).pdf

1085-mumnp-2007-abstract.doc

1085-mumnp-2007-abstract.pdf

1085-mumnp-2007-cancelled pages(21-3-2011).pdf

1085-MUMNP-2007-CLAIMS(AMENDED)-(21-3-2011).pdf

1085-MUMNP-2007-CLAIMS(AMENDED)-(8-2-2011).pdf

1085-mumnp-2007-claims(complete)-(20-7-2007).pdf

1085-mumnp-2007-claims(granted)-(28-3-2011).pdf

1085-mumnp-2007-claims.doc

1085-mumnp-2007-claims.pdf

1085-MUMNP-2007-CORRESPONDENCE(12-1-2009).pdf

1085-mumnp-2007-correspondence(20-7-2007).pdf

1085-mumnp-2007-correspondence(25-1-2008).pdf

1085-mumnp-2007-correspondence(ipo)-(29-3-2011).pdf

1085-mumnp-2007-correspondence(ipo)-(8-2-2010).pdf

1085-mumnp-2007-correspondence-received.pdf

1085-mumnp-2007-description (complete).pdf

1085-mumnp-2007-description(complete)-(20-7-2007).pdf

1085-mumnp-2007-description(granted)-(28-3-2011).pdf

1085-MUMNP-2007-DRAWING(8-2-2011).pdf

1085-mumnp-2007-drawing(granted)-(28-3-2011).pdf

1085-mumnp-2007-drawings.pdf

1085-MUMNP-2007-ENGLISH TRANSLATION(8-2-2011).pdf

1085-mumnp-2007-form 1(13-8-2007).pdf

1085-MUMNP-2007-FORM 1(8-2-2011).pdf

1085-mumnp-2007-form 2(complete)-(20-7-2007).pdf

1085-mumnp-2007-form 2(granted)-(28-3-2011).pdf

1085-mumnp-2007-form 2(title page)-(20-7-2007).pdf

1085-mumnp-2007-form 2(title page)-(granted)-(28-3-2011).pdf

1085-mumnp-2007-form 26(13-8-2007).pdf

1085-MUMNP-2007-FORM 26(8-2-2011).pdf

1085-MUMNP-2007-FORM 3(12-1-2009).pdf

1085-mumnp-2007-form 3(20-7-2007).pdf

1085-mumnp-2007-form 3(25-1-2008).pdf

1085-MUMNP-2007-FORM 3(8-2-2011).pdf

1085-mumnp-2007-form-1.pdf

1085-mumnp-2007-form-18.pdf

1085-mumnp-2007-form-2.doc

1085-mumnp-2007-form-2.pdf

1085-mumnp-2007-form-3.pdf

1085-mumnp-2007-form-5.pdf

1085-MUMNP-2007-PETITION UNDER RULE 137(8-2-2011).pdf

1085-MUMNP-2007-REPLY TO EXAMINATION REPORT(8-2-2011).pdf

1085-MUMNP-2007-REPLY TO HEARING(21-3-2011).pdf

1085-MUMNP-2007-VERIFICATION(8-2-2011).pdf

abstract1.jpg


Patent Number 247118
Indian Patent Application Number 1085/MUMNP/2007
PG Journal Number 13/2011
Publication Date 01-Apr-2011
Grant Date 28-Mar-2011
Date of Filing 20-Jul-2007
Name of Patentee N-CRYPT, INC.
Applicant Address 2293-1, NAKAMURA-CHO, YOKKAICHI-SHI, MIE, 5128044,
Inventors:
# Inventor's Name Inventor's Address
1 NAKAMURA TAKATOSHI C/O. N - CRYPT INC., 2293-1, NAKAMURA-CHO, YOKKAICHI-SHI, MIE, 5128044,
PCT International Classification Number H04L9/28,H04L9/08
PCT International Application Number PCT/JP2006/300159
PCT International Filing date 2006-01-04
PCT Conventions:
# PCT Application Number Date of Convention Priority Country
1 2005-003260 2005-01-07 Japan