Legitimacy confirmation equipment

Abstract

The present invention relates to a software legitimacy confirmation device. The present invention is directed to a computer assembled by an assembly device, and confirms whether the assembly status is legitimate. A legitimacy confirmation device, which is directed to a computer assembled by an assembly device, confirms whether the assembly status is legitimate, and comprises: a storage unit, which stores legitimacy confirmation data and a legitimacy confirmation program, wherein the legitimacy confirmation data is pre-set in correspondence with the assembly device, and the legitimacy confirmation program is used to confirm the legitimacy of the assembly operation according to the legitimacy confirmation data, and after being connected to the computer, when the computer is powered on, the computer is started by the legitimacy confirmation program, thereby causing the computer to determine whether the assembly status is legitimate according to the legitimacy confirmation data.

Description

Technical Field

[0001] The present invention relates to a software legitimacy confirmation device. Background Art

[0002] When using a computer, network security countermeasures are very important. For example, by accessing a malicious website via the Internet or using a contaminated USB memory, there is a risk of allowing malware to be mixed into the computer. The leakage of hidden data, the seizure of computers, and the malfunction of computers caused by the mixing of malware have become social problems. In the past, countermeasures such as malware detection and deletion based on blacklists and prohibition of malware execution based on whitelists were carried out for malware. In contrast, there are no special countermeasures for malware countermeasures during assembly operations when importing computers.

[0003] When introducing a computer for personal use, in most cases, the user of the computer purchases the computer, installs the OS, middleware, application software, etc., or configures the computer so that it can be used, which is called assembly work. In addition, even computers for personal use may be pre-installed with necessary software before purchase so that the user can use it immediately after purchase, but in this case, the pre-installation is often performed by the manufacturer that provides the computer.

[0004] On the other hand, when computers are used for business purposes or when a computer system composed of a plurality of computers is introduced, assembly work is often performed by assembly service providers or workers with specialized knowledge such as system integrators.

[0005] If the user of the computer does not perform the installation himself, a malicious operator can install malware on the computer during the installation. In addition, even if the operator does not have malicious intent, the equipment used by the operator may be infected with malware, thereby indirectly installing malware on the computer to be installed. Therefore, even if malware countermeasure software using a blacklist or whitelist is imported into the computer, if the malware countermeasure software itself is replaced by malware, the network security countermeasure will not be effective.

[0006] In the field of manufacturing equipment, edge servers have recently been installed at manufacturing sites. After the edge servers are assembled, server application software (hereinafter simply referred to as "application software" or "application") with various functions or purposes is downloaded from a specific secure download website, and a business model using the application is started through the edge servers.

[0007] Here, the so-called edge server is a server connected in a communicative manner to various edge devices installed at a manufacturing site such as a factory, including manufacturing devices such as CNC machine tools, industrial equipment, and industrial equipment, as well as devices attached to manufacturing devices such as image sensors and PLCs (programmable logic controllers). Thus, the edge server, for example, executes functions related to the edge device and / or accesses the processing data of the edge device to perform prescribed information processing related to the application software. The so-called processing data of the edge device refers to, for example, data indicating the action status related to the edge device, data indicating the production status, data indicating the quality status of the product, data indicating the operation status, etc.

[0008] In the operation of edge servers in the field of manufacturing devices, if the assembly operation when purchasing the edge server is performed normally, then all application software running through the edge server is operated in a manner of being installed only from a specific safe download website, so after the assembly operation is completed, it is impossible to install malware. However, if malware is installed by a malicious operator during the assembly operation when purchasing the edge server, even if the installed application is installed only from a specific safe download website, the possibility of leakage of hidden data, computer seizure, and computer malfunction will increase. In addition, when the edge server is operated in a state where malware is mixed, improper processing may be performed even for a specific safe download website, and as a result, great damage may be caused to other edge servers connected to the download server.

[0009] In this regard, for example, Patent Document 1 discloses a technology that, when a client device (eg, ECU) is started, after verifying the legitimacy of a main program, an update program, and a program for external communication, the client device (eg, ECU) is started if it is legitimate.

[0010] However, Patent Document 1 does not disclose any countermeasures for the case where a malicious operator installs malware in basic software such as OS and middleware during the assembly of the client device. It is presumed that the technology described in Patent Document 1 is based on the premise that normal assembly work is performed. For example, if malware is installed in the client device by a malicious assembly operator, there is no method for the user of the client device to confirm that the software installed in the client device is legitimate.

[0011] Prior art literature

[0012] Patent Document 1: Japanese Patent Application Publication No. 2011-108167 Summary of the invention

[0013] Thus, it is desired that when an external operator performs installation work performed when a computer is introduced so as to enable the use of the computer, the user of the computer can easily confirm that the software installed in the computer is legitimate.

[0014] Technical solution (1): One method disclosed in the present invention provides a legitimacy confirmation device. In order to confirm whether the assembly status of a computer assembled by a pre-set assembly equipment is legitimate, the legitimacy confirmation device comprises: a storage unit, which stores legitimacy confirmation data and a legitimacy confirmation program, the legitimacy confirmation data is pre-set in correspondence with the assembly equipment, and the legitimacy confirmation program is used to confirm the legitimacy of the assembly operation based on the legitimacy confirmation data. After being connected to the computer, when the computer is powered on, the computer is started by the legitimacy confirmation program stored in the storage unit, thereby making the computer determine whether the assembly status is legitimate based on the legitimacy confirmation data. When the legitimacy is determined, the computer is registered for use with a management system that manages the computer.

[0015] Effects of the Invention

[0016] According to one aspect, when an external worker performs a setup operation performed when a computer is introduced so as to enable the use of the computer, a user of the computer can easily confirm that the software installed in the computer is legitimate. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a schematic diagram showing the basic structure of the legitimacy management system in this embodiment.

[0018] Figure 2 This is a functional block diagram of the legitimacy management system in this embodiment.

[0019] Figure 3A This is a flowchart showing the processing related to the assembly work of the computer performed by the assembly equipment in this embodiment.

[0020] Figure 3B This is a flowchart showing a process related to a task of verifying the legitimacy of a computer performed by the legitimacy verification device in the present embodiment.

[0021] Figure 3C This is a flowchart showing processing related to registration of a computer whose legitimacy has been confirmed in the management system in the present embodiment.

[0022] Description of Reference Numerals

[0023] 1 Legitimacy confirmation system; 10 Computer; 11 Control unit, legitimacy confirmation control unit; 12 Storage unit; 15 Communication unit; 20 Assembly equipment; 22 Storage unit; 30 Legitimacy confirmation equipment; 32 Storage unit; 40 Management system; 41 Control unit; 42 Storage unit; 45 Communication unit. DETAILED DESCRIPTION

[0024] (Implementation Method)

[0025] Below, while referring to the attached Figure 1 Hereinafter, an example of a preferred embodiment of the legitimacy confirmation system of the present invention will be described.

[0026] Figure 1 The overall structure of the legitimacy confirmation system 1 is shown.

[0027] In addition, in this embodiment, when the legitimacy of the software installed on the computer is confirmed, the computer is registered in the upper management system. As described above, by registering in the management system, the computer can obtain application software required for the business from the management system. On the other hand, when the legitimacy of the software installed on the computer is not confirmed (for example, when software of unknown origin is installed), the computer is not allowed to be registered in the management system, and therefore, the application software required for the business cannot be imported.

[0028] like Figure 1 As shown, the legitimacy confirmation system 1 is composed of the following devices: a computer 10 as an assembled computer, an assembly device 20 (also called "assembly device") as an assembly equipment, a legitimacy confirmation device 30 (also called "legitimacy confirmation device") as a legitimacy confirmation device, a management system 40 as a management system, and a network 60.

[0029] In addition, the figure also illustrates information exchanged between these devices and apparatuses, but this information is only an example.

[0030] The computer 10 is a computer to be assembled, and is configured so that after assembly, if the legitimacy of the computer 10 is not confirmed by the legitimacy confirmation device 30, the business using the computer 10 cannot be performed.

[0031] The assembly equipment 20 is a device (apparatus) used by the operator when performing assembly work on the computer 10. That is, the computer 10 is assembled via the assembly equipment 20. In addition, in the present embodiment, the assembly equipment 20 is prepared by a trustworthy person such as an operation manager of the operation management system 40 or a computer manufacturer that provides the computer 10, and provided to the assembly operator.

[0032] The legitimacy confirmation device 30 does not start the OS installed in the computer 10 assembled by the assembly device 20 to confirm the legitimacy of the installed software. In addition, when the legitimacy of the computer 10 is confirmed, the computer 10 can be registered with the management system 40. In addition, in this embodiment, the legitimacy confirmation device 30 is also prepared by a trustworthy person such as an operation manager who operates the management system 40 or a computer manufacturer that provides the computer 10, similar to the assembly device 20, and is provided to the user of the computer 10.

[0033] As described above, the management system 40 registers the computer 10 whose legitimacy has been confirmed, thereby providing application software required for business only to the registered computer 10 .

[0034] Next, these devices and apparatuses are described in detail.

[0035] <Computer 10>

[0036] The computer 10 is exemplified by an edge server introduced into a manufacturing site such as a factory, but is not limited to an edge server and can be applied to any computer. Figure 2 A functional block diagram of the legitimacy confirmation system 1 is shown.

[0037] The computer 10 includes, for example, a CPU, a memory, a hard disk drive, and a communication device. Before assembly, the computer 10 is in a state where no software such as an OS is introduced. Here, the CPU is also referred to as a control unit 11. In addition, the memory, the hard disk drive, etc. are also referred to as a storage unit 12. The communication device is also referred to as a communication unit 15.

[0038] The computer 10 has a system BIOS. The system BIOS checks the devices in a predetermined order (also referred to as a "boot order"), for example, for devices that may store boot software that can boot the computer 10, to check whether the boot software is stored. Therefore, when the boot software is stored in the device, the computer 10 is booted using the boot software stored in the device.

[0039] As a device storing such startup software, for example, a hard disk drive, a floppy disk drive, a CD or DVD optical drive, a USB storage device, or a device on a network, etc. The computer 10 checks these devices in order according to the startup sequence.

[0040] The computer 10 may preset a startup sequence when the power is turned on. For example, the startup sequence when the power is turned on may be initialized by a trustworthy person such as an operations manager of the operations management system 40 or a supplier (manufacturer) of the computer 10.

[0041] Thus, for example, during assembly work, after the assembly device 20 is connected to the computer 10, when the computer 10 is powered on, the computer 10 can be started by the startup software stored in the assembly device 20. The startup software includes a program for assembly, and the assembly work is performed. Similarly, during legitimacy confirmation work, after the legitimacy confirmation device 30 is connected to the computer 10, if the computer 10 is powered on, the computer 10 can be started by the startup software stored in the legitimacy confirmation device 30. The startup software includes a program for legitimacy confirmation, and legitimacy confirmation is performed. Details will be described later.

[0042] <Assembly equipment 20>

[0043] As described above, the assembly equipment 20 is set to the initialization of the boot sequence as the boot sequence during assembly work. Specifically, the system BIOS is configured to boot the computer 10 by performing an initial check on the devices constituting the assembly equipment 20 using the boot software stored in the assembly equipment 20 .

[0044] For example, a USB storage device may be used as the mounting device 20. In addition, a CD or DVD optical drive pre-installed with a CD or DVD storing startup software may be used as the mounting device 20. In addition, a second computer (guaranteed to be a legitimate computer) may be used as the mounting device 20.

[0045] In this case, the second computer can be started up using startup software (eg, OS image) stored in the second computer (network startup).

[0046] like Figure 2 As shown, the assembly equipment 20 has a storage unit 22, and the storage unit 22 stores the installation program required for the assembly work of the operator. In addition, the software installed in the computer 10 is stored as a group of files such as pre-compiled programs or scripts (hereinafter also referred to as "installed programs"). In addition, it is necessary to give information such as a network address such as an IP address, a proper name of the computer 10, a virtual network address used inside the computer 10, and the type of collaborative cloud function for the program installed on the computer 10. Therefore, a parameter setting support program that provides an input interface for inputting this information can also be stored in the assembly equipment 20 (storage unit 22).

[0047] The assembly worker can perform assembly work by activating the computer 10 using the assembly equipment 20 provided by the operation manager, for example.

[0048] Specifically, after the assembly device 20 is connected to the computer 10, when the computer 10 is powered on, the startup software (including the installation program) stored in the assembly device 20 starts the computer 10. When the computer 10 is started by the startup software stored in the assembly device 20, an action is performed to copy the program installed in the computer 10 to the storage device (storage unit 12) of the computer 10 as a program storage unit.

[0049] Furthermore, as described above, the parameter setting support program may be started in order to input information such as a network address such as an IP address, a proper name of the computer 10, a virtual network address used inside the computer 10, and the type of the cloud function to be coordinated, to the program installed in the computer 10. In addition, such information depends on the environment in which the computer 10 is installed, and therefore, it is preferably input by the user of the computer.

[0050] <Legitimacy confirmation device 30>

[0051] As described above, as the boot sequence during the legitimacy confirmation operation, the legitimacy confirmation device 30 is set as the initial boot sequence. Specifically, the system BIOS is configured to boot the computer 10 by performing an initial check on the devices constituting the legitimacy confirmation device 30 and using the boot software stored in the legitimacy confirmation device 30.

[0052] For example, a USB storage device may be used as the legitimacy confirmation device 30. In addition, a CD or DVD optical drive pre-installed with a CD or DVD storing startup software may be used as the legitimacy confirmation device 30. In addition, a second computer (not shown) (guaranteed to be a legitimate computer) may be used as the legitimacy confirmation device 30.

[0053] In this case, the second computer can be started up using startup software (eg, OS image) stored in the second computer (network startup).

[0054] As described above, the legitimacy confirmation tool is similar to the assembly equipment 20, for example, it is set to be produced by a trustworthy person such as an operation manager of the operation management system 40 or a computer manufacturer that provides the computer 10, corresponding to the assembly equipment 10 used when assembling the computer 10, and provided to the user of the computer 10.

[0055] like Figure 2 As shown, the legitimacy confirmation device 30 has a storage unit 32 that stores a program required for legitimacy confirmation work by the user of the computer 10 (also referred to as a "legality confirmation program") and data required for legitimacy confirmation (also referred to as "legality confirmation data").

[0056] Specifically, the storage unit 32 stores a program (legitimacy confirmation program) required for the legitimacy confirmation operation of the user of the computer 10. In addition, the storage unit 32 can store legitimacy confirmation data, which at least includes a list of program files that should be stored when the computer 10 is assembled (also called a "legitimate program file list") and a hash value of each program file (also called a "hash value of the legitimate program file"). Here, the hash value of the legitimate program file is calculated, for example, by a pre-set hash function. In addition, any hash function such as MD5, SHA256, HMAC, etc. can be applied as the hash function.

[0057] In this way, the user of the computer 10 can perform the legitimacy confirmation operation via the legitimacy confirmation device 30 provided by the operation manager or the like.

[0058] After the legitimacy confirmation device 30 is connected to the computer 10, when the computer 10 is powered on, the startup software stored in the legitimacy confirmation device 30 starts the computer 10. In this way, the control unit 11 of the computer 10 can function as a legitimacy confirmation control unit without starting the OS installed in the computer 10.

[0059] The control unit 11 as the legitimacy confirmation control unit (hereinafter referred to as "legitimacy confirmation control unit 11") scans the storage unit 12 of the computer 10 and creates a list of program files actually installed by the operator in the computer 10 (also referred to as "installed program file list"). In addition, the legitimacy confirmation control unit 11 calculates the hash value of each program file installed in the computer 10 (referred to as "the hash value of the installed program file") by the above-mentioned hash function.

[0060] Next, the legitimacy confirmation control unit 11 compares the legitimate program file list with the installed program file list to determine whether they are consistent. If the legitimate program file list is inconsistent with the installed program file list, the legitimacy confirmation control unit 11 can determine that the computer 10 is not legitimate, for example, outputting an alarm.

[0061] When the legitimate program file list and the installed program file list are consistent, the legitimacy confirmation control unit 11 compares the hash value of the legitimate program file with the hash value of the installed program file according to the program file to determine whether they are consistent. If there is an inconsistent program file, the legitimacy confirmation control unit 11 can also determine that the computer 10 is not legitimate, for example, output an alarm.

[0062] In addition, the legitimacy confirmation control unit 11 may provide an output interface for information such as network addresses such as IP addresses, the proper name of the computer 10, virtual network addresses used inside the computer 10, and types of cooperating cloud functions, so that users of the computer 10 can confirm them. In addition, if there are any discrepancies, an input interface may be provided so that users of the computer 10 can correct them.

[0063] The legitimacy confirmation control unit 11 can register the computer 10 with the management system 40 when confirming the legitimacy of software installed in the computer 10. When the computer 10 is installed, it is physically connected to the management system 40 via a network.

[0064] Specifically, the legitimacy confirmation control unit 11 generates a key pair (public key, private key), and can register the serial number and public key inherent to the computer 10 in the management system 40. After the computer 10 is registered in the management system 40, the management system 40 receives the serial number encrypted with the private key from the computer 10, thereby confirming the authenticity of the computer 10 and allowing access from the computer 10, for example, allowing the release of application software for the computer 10.

[0065] Furthermore, if the legitimacy of the computer 10 is not confirmed, it cannot be registered in the management system 40 , and therefore, as described above, application software required for work cannot be installed.

[0066] In the above, the legitimacy confirmation device 30 has been described.

[0067] <Management System 40>

[0068] like Figure 2 As shown, the management system 40 includes a control unit 41 , a storage unit 42 , and a communication unit 45 . The management system 40 is a higher-level system of the computer 10 , and can be connected to the computer 10 via the communication unit 45 so as to be communicable.

[0069] The management system 40 registers and manages the computers 10 whose legitimacy has been verified by the legitimacy verification device 30. In addition, the management system 40 can distribute application software to the registered computers 10 in response to application requests from the computers 10.

[0070] Specifically, the control unit 41 includes a registration unit 411 , an authentication unit 412 , and an issuance unit 413 .

[0071] When the authenticity of the installed computer 10 is confirmed by the authenticity verification device 30 , the registration unit 411 receives the serial number and public key unique to the computer 10 sent from the computer 10 and stores them in the storage unit 42 .

[0072] For example, when receiving the serial number of the computer 10 encrypted with a private key from the registered computer 10 as an identification ID or password for logging in, the authentication unit 412 deciphers the serial number encrypted with the private key based on the public key stored in the storage unit 42 when the computer 10 was registered. When the deciphered number is consistent with the serial number of the computer 10 stored in the storage unit 42 when the computer 10 was registered, the authenticity of the computer 10 is confirmed and access is allowed.

[0073] The distribution unit 413 distributes the requested application software to the computer 10 according to the request of the application software.

[0074] In addition, the management system 40 may be composed of a plurality of management systems 40-n (n is a suffix). In this case, the registration information of the computer 10 registered in the management system 40-n can be shared with other management systems 40-m. That is, when the computer 10 is registered in a certain management system 40-n, it can also access other management systems 40-m and receive the distribution of application software.

[0075] In the above, one embodiment of the legitimacy confirmation system has been described based on the configurations of the computer 10 , the assembly equipment 20 , the legitimacy confirmation equipment 30 , and the management system 40 .

[0076] <Operation of this embodiment>

[0077] Next, refer to Figure 3A to Figure 3C The following operation is described: the assembly machine 20 performs assembly work on the computer 10 , then the legitimacy of the computer 10 is confirmed by the legitimacy confirmation machine 30 , and then the legitimacy-confirmed computer 10 is registered in the management system 40 .

[0078] here, Figure 3A 1 is a flowchart showing a process related to the assembly work of the computer 10 performed by the assembly equipment 20. Figure 3B 1 is a flowchart showing a process related to a task of verifying the legitimacy of the computer 10 performed by the legitimacy verification device 30 . Figure 3C This is a flowchart showing the processing related to registration of the computer 10 whose legitimacy has been confirmed into the management system 40 .

[0079] The assembly equipment 20 and the legitimacy verification equipment 30 are prepared in advance by a manager of the management system 40 or the like, and are provided to assembly workers and users of the computer 10 , respectively.

[0080] Reference Figure 3A In step S11, after the assembly equipment 20 is connected to the computer 10, the computer 10 is powered on.

[0081] In step S12 , the computer 10 is started up by the startup software (including the installation program) stored in the assembly device 20 .

[0082] In step S13, the assembly work is executed in the computer 10 by starting the software (including the installation program) and using the file group of the program stored in the assembly equipment 20.

[0083] In step S14, when the installation work performed by the startup software (including the installation program) is completed, the power supply of the computer 10 is turned off.

[0084] Reference Figure 3B In step S21, after the legitimacy confirmation device 30 is connected to the computer 10, the computer 10 is powered on.

[0085] In step S22 , the computer 10 is started up by the startup software (including the legitimacy confirmation program) stored in the legitimacy confirmation device 30 .

[0086] In step S23 , the legitimacy of the computer 10 is verified by referring to the legitimacy data stored in the legitimacy verification device 30 through the startup software (including the legitimacy verification program).

[0087] In step S24, the startup software (including the legitimacy confirmation program) determines whether the computer 10 is installed legitimately. If it is legitimate (if "yes"), the process proceeds to step S31. If it is not legitimate, the process proceeds to step S25.

[0088] In step S25, the user is notified that the computer 10 is not installed properly by starting the software (including the legitimacy confirmation program).

[0089] Reference Figure 3C In step S31, a key pair (public key, private key) is generated by starting the software (including the legitimacy confirmation procedure).

[0090] In step S32 , the serial number and public key inherent to the computer 10 are registered in the management system 40 by starting up the software (including the legitimacy confirmation program).

[0091] Thereafter, when the legitimacy confirmation device 30 is removed from the computer 10 and the computer 10 is started (through the installed OS), the serial number encrypted with the private key is sent to the management system 40. Thus, the authenticity of the computer 10 is authenticated by the management system 40, and the computer 10 can accept the release of application software from the management system 40.

[0092] The above describes the following actions: the assembly device 20 performs assembly work on the computer 10 , then the legitimacy of the computer 10 is confirmed by the legitimacy confirmation device 30 , and then the computer 10 whose legitimacy has been confirmed is registered in the management system 40 .

[0093] The above-described embodiment is a preferred embodiment of the present invention. However, the scope of the present invention is not limited to the above-described embodiment, and the present invention can be implemented in various modified forms without departing from the spirit of the present invention.

[0094] In the above embodiment, the management system 40 is exemplified as a host system of the computer 10 , but the management system 40 may be, for example, a virtual server on a cloud.

[0095] Various types of non-transitory computer readable media (non-transitory computer readable medium) can be used to store programs headed by the application software used in the present invention and provide them to the computer. Non-transitory computer readable media include various types of tangible storage media (tangible storage medium). Examples of non-transitory computer readable media include: magnetic storage media (e.g., floppy disks, magnetic tapes, hard disk drives), magneto-optical storage media (e.g., optical magnetic disks), CD-ROM (Read Only Memory), CD-R, CD-R / W, semiconductor memories (e.g., mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (random access memory)). In addition, the program can be supplied to the computer via various types of transient computer readable media (transitory computer readable medium). Examples of transient computer readable media include electrical signals, optical signals, and electromagnetic waves. Transient computer readable media can supply the program to the computer via wired communication paths such as wires and optical fibers or wireless communication paths.

[0096] <Effects of the present embodiment>

[0097] Hereinafter, embodiments of the present disclosure will be described.

[0098] Technical solution (1): According to this embodiment, as for the legitimacy confirmation device 30,

[0099] In order to confirm whether the assembly status of the computer 10 assembled by the preset assembly equipment 20 is proper, the following is provided:

[0100] A storage unit storing legitimacy confirmation data (e.g., a list of files, a hash value of a file, etc.) and a legitimacy confirmation program, wherein the legitimacy confirmation data is set in advance in correspondence with the assembly equipment 20, and the legitimacy confirmation program is used to confirm the legitimacy of the assembly work based on the legitimacy confirmation data,

[0101] After the connection to the computer 10 is completed and the computer 10 is powered on, the computer 10 is started up by the legitimacy confirmation program stored in the storage unit 32.

[0102] The computer 10 determines whether the assembled state is legitimate based on the legitimacy confirmation data.

[0103] When the judgment is legitimate, the computer 10 may be caused to register the use of the computer 10 with the management system 40 that manages the computer 10 .

[0104] Thus, when the computer 10 is introduced, when the operator performs installation work to set various parameters so that the computer 10 can be used, the user of the computer 10 can easily confirm that the software installed in the computer is legitimate.

[0105] Thus, after the user completes the confirmation of the legitimacy of the assembled computer, the use registration of the computer is performed. Therefore, even if a malicious worker mixes malware into the computer during assembly, the use registration of the computer cannot be performed before the legitimacy is confirmed. Therefore, there is essentially no method to make the computer 10 function without being damaged by the malware.

[0106] Technical solution (2): Alternatively, with respect to the legitimacy confirmation device 30 described in technical solution (1),

[0107] By using the legitimacy confirmation program to start the computer 10, the computer 10 determines whether the assembled state is legitimate based on the legitimacy confirmation data.

[0108] If it is determined that the computer 10 is not authorized, an alarm indicating that the computer 10 is not authorized is output.

[0109] This allows the user to easily confirm that the assembly work of the computer 10 is improper before using the computer 10 .

[0110] Technical solution (3): It is also possible that the management system 40 described in the technical solution (1) or the technical solution (2) allows the release of application software to the computer 10 after the use registration of the computer 10 is completed.

[0111] Therefore, even if malicious software is introduced into the computer 10 during installation by a malicious worker, the computer 10 cannot accept the distribution of the application software until the legitimacy is confirmed, and thus cannot substantially operate the application software.

[0112] According to the technical solution (4), the legitimacy verification device 30 described in any one of the technical solutions (1) to (3) may function as a startup device of the computer 10.

[0113] This makes it possible to execute the legitimacy confirmation without starting the OS installed in the computer 10 .

[0114] Technical solution (5): The legitimacy confirmation device 30 described in any one of technical solutions (1) to (3) may be a second computer 50 different from the computer 10, and the computer 10 may be started using the OS image of the second computer 50.

[0115] This makes it possible to execute the legitimacy confirmation without starting the OS installed in the computer 10 .

[0116] Technical solution (6): Alternatively, the computer 10 described in technical solutions (1) to (5) may be an edge server connected to a manufacturing device including an industrial machine and equipment attached to the manufacturing device.

[0117] The management system 40 is a higher-level system that manages the distribution of application software executed by the edge server.

[0118] Thus, for example, when an external worker assembles an edge server, after the assembly work is completed and the legitimacy of the edge server is confirmed, the use registration of the management system is performed. Therefore, even if a malicious worker mixes malware into the edge server during assembly, the edge server will not function substantially until the legitimacy is confirmed, and will not be harmed by the malware.

Claims

1. A legitimacy confirmation device, which confirms whether the assembly status of a computer assembled by a preset assembly equipment is legitimate, characterized in that: The legitimacy confirmation device comprises: a storage unit storing legitimacy confirmation data and a legitimacy confirmation program, wherein the legitimacy confirmation data is set in advance in correspondence with the assembly equipment, and the legitimacy confirmation program is used to confirm the legitimacy of the assembly work according to the legitimacy confirmation data. After the legitimacy confirmation device is connected to the computer, when the computer is powered on, the computer is started up by the startup software stored in the storage unit, thereby causing the computer to determine whether the state of the assembly is legitimate based on the legitimacy confirmation data, When the computer determines the legitimacy of the state of the assembly, the computer is caused to register the use of the computer with respect to a management system that manages the computer. The startup software stored in the storage unit includes the legitimacy confirmation program.

2. The legitimacy confirmation device according to claim 1, characterized in that: By using the legitimacy confirmation program to start the computer, the computer determines whether the state of the assembly is legitimate based on the legitimacy confirmation data. If it is determined to be unauthorized, an alarm indicating that the computer is unauthorized is output.

3. The legitimacy confirmation device according to claim 1 or 2, characterized in that: After the use registration of the computer is performed, the management system allows the distribution of application software to the computer.

4. The legitimacy confirmation device according to claim 1 or 2, characterized in that: The legitimacy confirmation device functions as a startup device of the computer.

5. The legitimacy confirmation device according to claim 1 or 2, characterized in that: The legitimacy confirmation device is a second computer different from the computer, and the computer is booted using an OS image of the second computer.

6. The legitimacy confirmation device according to claim 1 or 2, characterized in that: The computer is an edge server connected to a manufacturing device including an industrial machine and equipment attached to the manufacturing device. The management system is a higher-level system that manages the distribution of application software executed by the edge server.

Images