Information processing apparatus, information processing method, and computer readable recording medium

Abstract

The invention relates to an information processing apparatus, an information processing method, and a computer-readable recording medium, which effectively implement engineering of an automation system. A control device (10) transmits a self-signed certificate to a management server (20), receives a certification authority signature certificate generated by the management server (20) from the self-signed certificate, and performs data communication in a control system that performs control of the system on the basis of the certification authority signature certificate.

Description

Technical Field

[0001] The present invention relates to an information processing device, an information processing method, and a computer-readable recording medium. Background Art

[0002] Automation systems are introduced into workshops to automate processes for manufacturing various products. When implementing projects related to such automation systems, projects such as design, construction, and inspection are implemented based on design information received from customers.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2022-046438

[0004] However, currently, it is difficult to effectively implement the engineering of automation systems in workshops. For example, currently, in the automation systems of workshops, it is difficult to effectively implement the construction of secure network topologies. Summary of the invention

[0005] The present invention has been made in view of the above circumstances, and an object of the present invention is to efficiently carry out works related to a communication network of an automation system.

[0006] The present invention provides an information management device, which comprises: a sending unit, which sends a self-signed certificate to a management server; a receiving unit, which receives a certification body signed certificate generated by the management server based on the self-signed certificate; and an execution unit, which executes data communication in a control system based on the certification body signed certificate, and the control system executes system control.

[0007] In addition, the present invention provides an information management method, in which a computer performs the following processing: sending a self-signed certificate to a management server, receiving a certification authority signed certificate generated by the management server based on the self-signed certificate, and executing data communication in a control system based on the certification authority signed certificate, which controls the system.

[0008] In addition, the present invention provides a computer-readable recording medium, which stores an information management program, and the information management program enables a computer to perform the following processing: sending a self-signed certificate to a management server, receiving a certification authority signed certificate generated by the management server based on the self-signed certificate, and executing data communication in a control system based on the certification authority signed certificate, and the control system executes system control. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Figure 1 It is a diagram showing a configuration example of an automation system according to an embodiment.

[0010] Figure 2It is a block diagram showing a configuration example of each device in the automation system according to the embodiment.

[0011] Figure 3 It is a diagram showing an example of a registration information storage unit of the control device according to the embodiment.

[0012] Figure 4 It is a diagram showing an example of a self-signed certificate storage unit of a control device according to an embodiment.

[0013] Figure 5 It is a diagram showing an example of a certificate storage unit for a certificate signed by a certification authority of a control device according to an embodiment.

[0014] Figure 6 It is a diagram showing an example of an individual information storage unit of a management server according to the embodiment.

[0015] Figure 7 This is a sequence diagram showing an example of the flow of the entire automation system according to the embodiment.

[0016] Figure 8 It is a diagram showing a hardware configuration example according to an embodiment of the present invention. DETAILED DESCRIPTION

[0017] Hereinafter, an information processing device, an information processing method, and a computer-readable recording medium according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings. In addition, the present invention is not limited to the embodiment described below.

[0018] Next, the configuration and processing of the automation system 100 according to the embodiment, the configuration and processing of each device of the automation system 100 , and the processing flow of the automation system 100 will be described in order, and finally, the effects of the embodiment will be described.

[0019] [1. Structure and processing of automation system 100]

[0020] use Figure 1 The configuration and processing of the automation system 100 according to the embodiment will be described in detail. Figure 1 1 is a diagram showing a configuration example of the automation system 100 according to the embodiment. Hereinafter, a configuration example of the entire automation system 100, a processing example of the automation system 100, and an effect of the automation system 100 will be described. In addition, in the embodiment, the factory production monitoring using the workshop instrument which is the equipment installed in the workshop is described as an example, but the equipment and the field of use are not limited, and it can also be applied to environmental measurement monitoring such as power monitoring, wind power generation, water supply and drainage monitoring, and river monitoring.

[0021] (1-1. Configuration Example of the Entire Automation System 100)

[0022] The automation system 100 includes a control device 10 (10A, 10B, ...), a management server 20, and field devices 30 (30A, 30B, ...) as an information processing device. Here, the control device 10, the management server 20, and the field devices 30 are connected to each other via a predetermined communication network (not shown) so as to be able to communicate in a wired or wireless manner. In addition, various communication networks such as the Internet and a dedicated line can be used for the predetermined communication network.

[0023] (1-1-1. Control device 10)

[0024] The control device 10 is a workshop device that controls a plurality of field devices 30 constituting a workshop. For example, the control device 10 is implemented by a controller. In addition, the control device 10 is managed by an engineer E (EA, EB, ...) who performs maintenance and inspection of the control system of the workshop. Figure 1 In the example of FIG. 1 , the control device 10A constituting the control system A is managed by the engineer EA. In addition, the control device 10B constituting the control system B is managed by the engineer EB.

[0025] Here, the control system refers to a system for controlling the process of the workshop, which is composed of field instruments 30 controlled by the control instrument 10 in addition to the control instrument 10. For example, the control system is implemented by a DCN (Distributed Control Node) as a controller, an instrument group that manages the DCN, and an instrument group controlled by the DCN. Figure 1 In the example, there are multiple control systems including control system A for controlling the process of workshop A, control system B for controlling the process of workshop B, ... In addition, the workshops are, for example, production facilities for petroleum / petrochemical, gas, iron / non-iron, chemical, electric power, food and medicine, etc.

[0026] (1-1-2. Management Server 20)

[0027] The management server 20 is an information processing device that manages at least one control system. For example, the management server 20 is implemented by a GDS (Global Discovery Server) that manages a control system in accordance with OPC UA (Open Platform Communications Unified Architecture). Figure 1 The automation system 100 shown may include multiple management servers 20. In addition, the management server 20 may be implemented by a cloud environment, an internal environment of a company, an edge environment, etc.

[0028] (1-1-3. Field instrument 30)

[0029] The field instrument 30 is a plant instrument constituting a plant. For example, the field instrument 30 is implemented by measuring instruments such as a temperature sensor, a pressure sensor, and a flow sensor, and operating instruments such as an actuator. Figure 1 In the example, the field device 30A constituting the plant A includes the field device 30A-1, the field device 30A-2, the field device 30A-3, ... In addition, the field device 30B constituting the plant B includes the field device 30B-1, the field device 30B-2, the field device 30B-3, ... .

[0030] (1-2. Processing Example of the Entire Automation System 100)

[0031] The processing of the entire automation system 100 as described above will be described. In addition, the processing of the following steps S1 to S5 can also be performed in a different order. In addition, some of the processing of the following steps S1 to S5 may be omitted.

[0032] (1-2-1. Individual information registration process)

[0033] First, the management server 20 registers the individual information (step S1 ). For example, the management server 20 receives and stores the individual information of the control device 10A transmitted by the control device 10A based on the self-registration information.

[0034] Here, the self-registered information refers to address information of the management server 20 registered in advance in the control device 10 , and is information including, for example, an IP (Internet Protocol) address and a host name of the management server 20 .

[0035] In addition, individual information refers to the individual identification information and address information of the control instrument set for each control system in the workshop, such as information including the supplier name of the control system, the control instrument 10 that constitutes the control system, the instrument name of the control instrument 10, the IP address, the host name, etc.

[0036] (1-2-2. Self-signed certificate sending process)

[0037] Second, the control device 10 sends the self-signed certificate C s The certificate is sent to the management server 20 (step S2). For example, the control device 10A generates a self-signed certificate C s (A), self-signed certificate C s(A) The self-signed certificate C is sent to the management server 20 where the individual information of the control device 10A is registered. At this time, the control device 10A sends the self-signed certificate C to the management server 20 when the control device 10A is connected for the first time or when the structure of the control system A is changed, such as when the control device 10A is replaced or added. s (A) is sent to the management server 20. In addition, the control device 10A, for example, sends the certificate C signed by the certification authority sent from the management server 20 in the past. c (A) One day before the expiration date, the self-signed certificate C s (A) Sent to the management server 20.

[0038] At this time, the control device 10A uses, for example, the public key K of the control device 10A. p (SA) and generate the secret key K s (SA), generates a digest D that enables the object identification information i(A) of the control device 10A to be hashed i (A) Using the secret key K of the control device 10A s (SA) and generates a self-signed S as the electronic signature of the control device 10A based on the digest Di(A) s (A), contains the object identification information i(A), self-signature S s (A) and public key K p (SA) including self-signed certificate C s (A) Sent to the management server 20.

[0039] Here, the object identification information i refers to the information used to generate the self-signed certificate C s The information for identifying the target device is, for example, the device name of the control device 10.

[0040] (1-2-3. Generation of a certificate signed by a certification authority)

[0041] Third, the management server 20 sends the self-signed certificate C s The electronic signature of the certification authority (CA) is given to the certificate authority. c , generate the certification authority signed certificate C c (Step S3) For example, the management server 20 refers to the individual information held by the management server 20 and registers the self-signed certificate C s In the case of the IP address of the control device 10A (A), the self-signed certificate C s (A) Assign the certification authority a signature S c (A) Generate a certificate signed by a certification authority C c (A).

[0042] At this time, the management server 20 generates, for example, a digest D that hashes the object identification information i(A) of the control device 10A. i (A), using self-signed certificate C s (A) contains the public key K p (SA) will self-sign S s (A) is transformed into summary D i '(A), for D as 2 abstracts i (A) and D i '(A) to check whether the data of the object identification information i(A) has been tampered with. In addition, the management server 20 generates a public key K p (SA) implements hashed summary D k (A) Using the secret key K of the management server 20 s (C) and according to Abstract D k (A) Generate a certificate authority signature S as the electronic signature of the management server 20 c (A), generate a public key K p (SA) and the signature of the certification authority S c (A) Certification authority signature certificate C c (A).

[0043] (1-2-4. Processing of sending the certificate signed by the certification authority)

[0044] Fourth, the management server 20 sends the certificate signed by the certification authority C c For example, the management server 20 sends the generated certificate authority signed certificate C to the control device 10 based on the individual information of the control device 10A held by the management server 20. c (A) is sent to the control device 10A. In addition, the management server 20 sends the public key K p (C) Sent to the control device 10A.

[0045] (1-2-5. Data communication encryption processing)

[0046] Fifth, the control device 10 encrypts the data communication of the control system (step S5). For example, the control device 10A encrypts the data communication of the control system with the management server 20, other control devices 10A' (not shown) constituting the control system A, and the operation terminal of the operator who manages the control system A, etc., using the certificate C signed by the certification body. c (A) by performing data communication that can detect data tampering or data communication that can prevent "masquerading" and the like.

[0047] Here, the encrypted information is the certificate signed by the certification authority C cThe information contained in (A) is used, for example, to verify whether the data d(A) has been tampered with, or to verify the existence of a certificate signed by another person's certification authority. c The public key K of the control device 10 for the presence or absence of "disguise" etc. p (S), used to verify the public key K p (S) The signature of the certification authority that indicates whether the data has been tampered with c .

[0048] At this time, the control device 10A generates a digest D such that the transmitted data d(A) is hashed, for example. d (A), using the secret key K s (SA) and according to Abstract D d (A) and generate a self-signed S d (A), send data d(A), self-signed S d (A) and the certificate signed by the certification authority C c (A) is sent to the management server 20, other control devices 10A', operation terminals, etc. In addition, the control device 10A sends the public key K p (C) Sent to the management server 20, other control devices 10A', operation terminals, etc.

[0049] On the other hand, the management server 20, other control devices 10A', operation terminals, etc. generate a digest D that hashes the transmitted data d(A). d (A), using the certificate C signed by the certification authority c (A) contains the public key K p (SA) will self-sign S d (A) is transformed into summary D d '(A), by using D as 2 abstracts d (A) and D d '(A) to compare and verify the data d(A) for data tampering, or to use the signature certificate C of another person's certification authority c In addition, the management server 20, other control devices 10A', operation terminals, etc. generate a certificate C signed by a certification authority. c (A) contains the public key K p (SA) implements hashed summary D k (A) Using the public key K of the management server 20 p (C) The certification body's signature S c (A) is transformed into summary D k '(A), by using D as 2 abstracts k (A) and D k '(A) Compare and verify the public key K p(SA) Whether the data has been tampered with.

[0050] (1-3. Effects of Automation System 100)

[0051] Next, the effects of the automation system 100 will be described after describing the problems of the automation system 100P according to the reference technology.

[0052] (1-3-1. Problems with Automation System 100P)

[0053] In the automation system 100P, the self-signed certificates C are exchanged between the workshop instruments. s In addition, in the automation system 100P, a certificate C signed by a certification authority is requested via the certificate management client device. c The issuance of the certificate is done by exchanging the issued certificate signed by the certification authority C c And perform data communication.

[0054] However, by exchanging the self-signed certificate C s The security of the data communication performed is low. In addition, the more workshop instruments the control system has, the more likely it is that the certificate C signed by the certification authority of the client instrument will be used. c For example, in the automation system 100P, when the control system's workshop equipment is disconnected from the communication network, the engineer E needs to confirm whether the certification authority-signed certificate C is issued to the workshop equipment. c In addition, in the automation system 100P, if the engineer E has not confirmed the signature certificate C issued by the certification authority for the workshop equipment, c If the validity period of the license is exceeded, the communication network may be cut off.

[0055] (1-3-2. Overview of Automation System 100)

[0056] The automation system 100 performs the following processes. First, the management server 20 registers the individual information of each control device 10. Second, the control device 10 sends the self-signed certificate C s The management server 20 sends the self-signed certificate C s Give the certification authority signature S c And generate a certificate signed by the certification authority C c . Fourth, the management server 20 sends the certificate signed by the certification authority C c Sent to the control device 10. Step 5, the control device 10 uses the certificate C signed by the certification authority c Encrypt data communications with the control system.

[0057] At this time, in the automation system 100, the control device 10 is connected for the first time, or when the control system structure is changed such as when the control device 10 is replaced or added, or when the certification body signed certificate C c Before the expiration date, the self-signed certificate C s Sent to the management server 20.

[0058] (1-3-3. Effects of Automation System 100)

[0059] In the automation system 100, when joining the network, it is possible to automatically determine whether the control device 10 itself has a certificate signed by a certification authority. c For example, in the automation system 100, when a new control device 10 is installed in the control system, the control device 10 included in the control system can check the electronic certificate of the control device 10 and perform a certification body signature certificate C. c Issuance procedures to replace the issued certification authority signature certificate C c Therefore, in the automation system 100, when the control device 10 is temporarily disconnected from the network or the location is changed, the network can be automatically constructed even if the engineer E who manages the control device 10 is changed. In addition, in the automation system 100, it is also possible to check the signature certificate C of the certification authority. c The validity period can be automatically updated, for example, one day before the expiration of the validity period.

[0060] That is, the automation system 100 has the following effects. First, the automation system 100 can automate the electronic signature process for electronic certificates used for data communication in a control system that complies with standard specifications such as OPC UA. Second, the automation system 100 can reduce the engineering work for managing electronic certificates and building a secure network. Third, the automation system 100 can prevent data communication between plant equipment that has an invalid electronic certificate, that is, an electronic certificate that has not been electronically signed by the management server 20.

[0061] As described above, the automation system 100 can effectively implement engineering related to the communication network of the automation system.

[0062] [2. Configuration and processing of each device of the automation system 100]

[0063] use Figure 2 right Figure 1 The configuration and processing of each device included in the automation system 100 shown will be described. Figure 2This is a block diagram showing a configuration example of each device of the automation system 100 according to the embodiment. Next, after describing a configuration example of the entire automation system 100 according to the embodiment, a configuration example and a processing example of the control device 10, a configuration example and a processing example of the management server 20, and a configuration example and a processing example of the field device 30 will be described in detail.

[0064] (2-1. Configuration Example of the Entire Automation System 100)

[0065] use Figure 2 right Figure 1 The structure example of the entire automation system 100 shown in FIG. Figure 2 As shown, the automation system 100 includes a control device 10, a management server 20, and field devices 30. The control device 10, the management server 20, and the field devices 30 are communicatively connected via a communication network N such as the Internet or a dedicated line.

[0066] At this time, the management server 20 can be implemented by a cloud environment, an internal environment of a company, an edge environment, etc. In addition, the control instrument 10 and the field instrument 30 constitute a control system for controlling the system. Here, the system refers to a workshop, for example. In addition, the control system performs control of the workshop, for example. In addition, the field instrument 30 is set in the workshop.

[0067] The control system or the control device 10 may be in accordance with, for example, OPA (Open Process Automation), MTP (Module Type Package), or NOA (NAMUR Open Architecture), which are standard specifications.

[0068] In addition, the control system or the control device 10 may conform to OPC UA (OPC Unified Architecture), which is a standard specification, for example.

[0069] (2-2. Configuration Example and Processing Example of Control Device 10)

[0070] use Figure 2 The following describes a configuration example and a processing example of the control device 10 . The control device 10 is a device that controls a plurality of devices constituting a control system, and includes a communication unit 11 , a storage unit 12 , and a control unit 13 .

[0071] (2-2-1. Communications Department 11)

[0072] The communication unit 11 manages data communication with other devices. For example, the communication unit 11 performs data communication with each communication device via a router, etc. In addition, the communication unit 11 can perform data communication with a terminal of an operator (not shown).

[0073] (2-2-2. Storage Unit 12)

[0074] The storage unit 12 stores various information that is referenced when the control unit 13 performs an action, and various information that is obtained when the control unit 13 performs an action. The storage unit 12 has a self-registration information storage unit 12a, a self-signed certificate storage unit 12b, and a certification authority signed certificate storage unit 12c. Here, the storage unit 12 can be implemented by, for example, a semiconductor memory element such as RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk. In addition, Figure 2 In the example shown in FIG. 1 , the storage unit 12 is provided inside the control device 10 , but may be provided outside the control device 10 , or a plurality of storage units may be provided.

[0075] (2-2-2-1. Self-registration information storage unit 12a)

[0076] The self-registration information storage unit 12a stores the self-registration information. For example, the self-registration information storage unit 12a stores the self-registration information including the IP address or host name that specifies the address of the management server 20, which is input by the engineer E who manages the control system. Figure 3 An example of data stored in the self-registration information storage unit 12 a will be described. Figure 3 FIG. 2 is a diagram showing an example of the self-registration information storage unit 12a of the control device 10 according to the embodiment. Figure 3 In the example of , the self-registration information storage unit 12a has items such as "management server" and "IP address".

[0077] “Management server” indicates identification information for identifying the management server 20 that manages the control system, such as an identification number or identification mark of the management server 20. “IP address” indicates identification information for identifying the management server 20 on a communication network, such as an identification number or identification mark assigned to the management server 20.

[0078] That is, in Figure 3 , an example is shown in which data such as {management server: "management server GDS001", IP address "XXX.XXX.XXX.001", ...}, {management server: "management server GDS002", IP address "YYY.YYY.YYY.002", ...} is stored in the self-registration information storage unit 12a. Figure 3In the example of FIG. 1 , the “management server GDS001” executes processing as an active device that manages a plurality of control devices 10 , and the “management server GDS002” executes processing as a backup or standby device for the active device.

[0079] (2-2-2-2. Self-signed certificate storage unit 12b)

[0080] The self-signed certificate storage unit 12b stores the self-signed certificate C s For example, the self-signed certificate storage unit 12b stores the self-signed certificate C generated by the transmission unit 13b of the control unit 13 described later. s Here, use Figure 4 An example of data stored in the self-signed certificate storage unit 12 b will be described. Figure 4 FIG. 4 is a diagram showing an example of the self-signed certificate storage unit 12b of the control device 10 according to the embodiment. Figure 4 In the example of FIG. 1 , the self-signed certificate storage unit 12 b has items such as “control device” and “self-signed certificate”.

[0081] The "control device" indicates identification information for identifying the control device 10 constituting the control system, such as an identification number or identification mark of the control device 10. The "self-signed certificate" is an electronic certificate generated by the control device 10, such as a certificate signed by the control device 10 using the secret key K of the paired control device 10. s (S) Public key K of the control device 10 p (S) Certificate of electronic signature.

[0082] That is, in Figure 4 In FIG. 1 , an example is shown in which data such as “self-signed certificate #1”, “self-signed certificate #2”, . . . are stored in the self-signed certificate storage unit 12 b regarding the control device 10A identified by “control device DCN-A001”.

[0083] (2-2-2-3. Certification Authority Signature Certificate Storage Unit 12c)

[0084] The certificate storage unit 12c stores the certificate C signed by the certificate authority. c For example, the certificate storage unit 12c stores the certificate C signed by the certification authority, which is generated by the management server 20 having the function of the certification authority and received by the receiving unit 13c of the control unit 13 described later. c Here, use Figure 5 An example of data stored in the certification authority signed certificate storage unit 12c will be described. Figure 5 FIG. 4 is a diagram showing an example of the certificate storage unit 12c of the control device 10 according to the embodiment. Figure 5In the example of FIG. 1 , the certificate storage unit 12 c has items such as “control device” and “certificate”.

[0085] The “control device” indicates identification information for identifying the control device 10 constituting the control system, such as an identification number or identification mark of the control device 10. The “certificate signed by a certification authority” is an electronic certificate generated by the management server 20, such as a certificate signed by the management server 20 using the secret key K s (C) The self-signed certificate C sent from the control device 10 s The public key K of the control device 10 contained in p (S) Certificate of electronic signature.

[0086] That is, in Figure 4 In FIG. 1 , an example is shown in which data such as “certificate signed by a certification authority #1”, “certificate signed by a certification authority #2”, . . . are stored in the certificate signed by a certification authority storage unit 12 c regarding the control device 10A identified by “control device DCN-A001”.

[0087] (2-2-3. Control unit 13)

[0088] The control unit 13 is in charge of the overall control of the control device 10. The control unit 13 includes a registering unit 13a, a transmitting unit 13b, a receiving unit 13c, and an executing unit 13d. Here, the control unit 13 can be implemented by, for example, electronic circuits such as a CPU (Central Processing Unit) and an MPU (Micro Processing Unit), or integrated circuits such as an ASIC (Application Specific Integrated Circuit) and an FPGA (Field Programmable Gate Array). In addition, the control unit 13 is implemented via an application having a standard interface in accordance with OPA, which is a standard specification group.

[0089] (2-2-3-1. Registration Unit 13a)

[0090] The registration unit 13 a registers various information. For example, the registration unit 13 a registers individual information including the IP address or host name of the control device 10 in the management server 20 using the IP address or host name of the management server 20 .

[0091] To illustrate a specific example, the registration unit 13a receives the self-registration information {management server: "management server GDS001", IP address "XXX.XXX.XXX.001", ...} input by the engineer EA of the management control system A and stored in the self-registration information storage unit 12a, and refers to the IP address "XXX.XXX.XXX.001" of the management server 20A which is the currently used device, and sends the individual information including the identification information "control instrument DCN-A001" of the control instrument 10A, the IP address "XXX.XXX.AAA.001" of the control instrument 10A, etc. to the management server 20A, and stores it in the individual information storage unit 23a of the management server 20A.

[0092] On the other hand, when the management server 20A as the current device cannot be accessed, the registration unit 13a refers to the IP address "YYY.YYY.YYY.002" of the management server 20B as the backup device from {management server: "management server GDS002", IP address: "YYY.YYY.YYY.002", ...} as the self-registration information, and transmits the individual information of the control device 10A to the management server 20B, and stores it in the individual information storage unit 23a of the management server 20B. Similarly, when the management server 20B cannot be accessed, the registration unit 13a can refer to the IP address in the order of the list of the management servers 20 stored in the self-registration information storage unit 12a and transmit the individual information of the control device 10A.

[0093] (2-2-3-2. Transmitting unit 13b)

[0094] The sending unit 13b sends various information. For example, the sending unit 13b sends the self-signed certificate C s The sending unit 13b sends the self-signed certificate C to the management server 20 using the registered IP address or host name of the management server 20. s Sent to the management server 20.

[0095] To explain a specific example, the sending unit 13b uses the public key K of the control device 10 p (S) Generate secret key K s (S) Generate a hashed summary D of the object identification information i of the control device 10 i , using the secret key K of the control device 10 s (S), and according to Summary D i The self-signed S is generated as the electronic signature of the control device 10. s , generate a self-signature S containing object identification information i s and the public key K p (S) including the self-signed certificate Cs In addition, the sending unit 13b refers to the IP address "XXX.XXX.XXX.001" of the management server 20 which is the self-registration information stored in the self-registration information storage unit 12a, and sends the generated self-signed certificate C s Sent to the management server 20.

[0096] When the control device 10 is connected to the communication network including the management server 20 for the first time, or when the control device 10 is connected to the communication network including the management server 20 after the system configuration is changed, the transmission unit 13b sends the self-signed certificate C s The sending unit 13b sends the certificate C signed by the certification authority to the management server 20. c Before the expiration date of the self-signed certificate C s Sent to the management server 20.

[0097] To explain a specific example, the transmission unit 13b generates a self-signed certificate C when the control device 10 is connected for the first time. s , generate the self-signed certificate C s The sending unit 13b sends the electronic certificate to the management server 20. In addition, when the control device 10 is replaced, added, or the like, the sending unit 13b requests the electronic certificate held by the control device 10. If the electronic certificate held by the control device 10 is not a valid certificate signed by a certification authority, c In the case of generating a self-signed certificate C s , generate the self-signed certificate C s The sending unit 13b also refers to the certificate C signed by the certification authority sent to the control device 10. c The resume information of the certification body is signed in the certificate C c Generate a self-signed certificate C 1 day before the expiration date s , generate the self-signed certificate C s Sent to the management server 20.

[0098] (2-2-3-3. Receiving Unit 13c)

[0099] The receiving unit 13c receives various information. For example, the receiving unit 13c receives the information from the management server 20 based on the self-signed certificate C s The generated certification authority signature certificate C c At this time, the receiving unit 13c receives the self-signed certificate C s Give the certification authority signature S c The generated certification authority signature certificate C cIn addition, the receiving unit 13c receives the certificate C signed by the certification authority generated by the management server 20 when the individual information including the IP address or host name of the control device 10 is registered. c .

[0100] To explain a specific example, the receiving unit 13c receives a public key K including the public key K of the control device 10 from the management server 20. p (S) and an electronic signature generated by the management server 20 using the secret key K of the management server 20 s (C) and based on the public key K p Summary of (S)D k The generated certification authority signature S c Certification authority signature certificate C c In addition, the receiving unit 13c receives the public key K of the management server 20 from the management server 20. p (C) In addition, the receiving unit 13c can also receive the public key K of the management server 20 from a management server 20′ different from the management server 20. p (C).

[0101] (2-2-3-4. Execution unit 13d)

[0102] The execution unit 13d executes data communication. For example, the execution unit 13d executes data communication based on the certificate C signed by the certification authority. c The data communication is performed in the control system of the execution system. In addition, the execution unit 13d uses the certificate C signed by the certification authority. c The encrypted information contained in the control system can be verified by tampering, or the signature certificate of the certification authority C c Here, tampering refers to data tampering of the sent data d, the public key K p (S) data tampering, etc. In addition, the certification authority signed certificate C c The validity of the certificate is determined by the use of another person's certificate authority signature certificate C c "Disguise", the certification authority signed certificate C c The validity related to the validity period.

[0103] To explain a specific example, the execution unit 13d generates a digest D that hashes the transmitted data d. d , using the secret key K of the control device 10 s (S) and according to the summary D d And generate a self-signed S d , will send data d, self-signed S d And the certification authority signed certificate C cThe execution unit 13d sends the public key K of the management server 20 to the management server 20, other control devices 10', operation terminals, etc. p (C) Sent to the management server 20, other control devices 10', operation terminals, etc.

[0104] On the other hand, the execution unit 13d receives the transmission data d and the self-signed S sent from the management server 20, other control devices 10', operation terminals, etc. d And the certification authority signed certificate C c In addition, the execution unit 13d receives the public key K of the management server 20 sent from the management server 20, other control devices 10', the operation terminal, etc. p (C) At this time, the execution unit 13d generates a digest D that hashes the transmitted data d. d , using the certificate signed by the certification authority C c The public key K contained in p (S) will self-sign S d Transformed into Abstract D d ', by using D as 2 abstracts d and D d 'Compare and verify whether the data sent by d has been tampered with, or use the signature certificate C of another person's certification authority c In addition, the execution unit 13d generates a certificate signed by the certification authority C c The public key K contained in p (S) Implement hashed summary D k , using the public key K of the management server 20 p (C) The certification body's signature S c Transformed into Abstract D k ', by using D as 2 abstracts k and D k 'Compare and verify the public key K p (S) Whether the data has been tampered with.

[0105] The execution unit 13d collects measurement values ​​from the field devices 30 constituting the control system. The execution unit 13d may calculate a calculated value based on the measurement values ​​collected from the field devices 30. The execution unit 13d controls the field devices 30 by transmitting a control signal.

[0106] (2-3. Configuration Example and Processing Example of Management Server 20)

[0107] use Figure 2The following describes a configuration example and a processing example of the management server 20. The management server 20 is an information processing device, and includes a control unit 21, a communication unit 22, and a storage unit 23. In addition, the management server 20 may include an input unit (e.g., a keyboard, a mouse, etc.) for accepting various operations from the administrator of the management server 20, and a display unit (e.g., a liquid crystal display, etc.) for displaying various information.

[0108] (2-3-1. Control Unit 21)

[0109] The control unit 21 is responsible for overall control of the management server 20. Here, the control unit 21 can be realized by, for example, an electronic circuit such as a CPU or an MPU, or an integrated circuit such as an ASIC or an FPGA.

[0110] The control unit 21 receives individual information. For example, the control unit 21 receives individual information including the IP address or host name of the control device 10 transmitted from the control device 10 and stores the information in the storage unit 23 .

[0111] To explain a specific example, the control unit 21 receives individual information including identification information “control device DCN-A001” of the control device 10A and IP address “XXX.XXX.AAA.001” of the control device 10A sent from the control device 10A, and stores it in the individual information storage unit 23 a of the storage unit 23 described later.

[0112] The control unit 21 receives the self-signed certificate. In addition, for example, the control unit 21 receives the self-signed certificate transmitted from the control device 10 using the IP address or host name of the management server 20 .

[0113] To explain a specific example, the control unit 21 receives a message including the object identification information i(A) of the control device 10A and the self-signature S s (A) and public key K p (SA) including self-signed certificate C s (A).

[0114] The control unit 21 generates a certificate signed by a certification authority. For example, the control unit 21 refers to the individual information held by the management server 20 and registers the self-signed certificate C s In the case of the IP address of the control device 10A (A), the self-signed certificate C s (A) Assign the certification authority a signature S c (A) Generate a certificate signed by a certification authority C c (A).

[0115] To explain a specific example, the control unit 21 generates a digest D such that the object identification information i(A) of the control device 10A is hashed.i (A), using self-signed certificate C s (A) contains the public key K p (SA) will self-sign S s (A) is transformed into summary D i '(A), by using D as 2 abstracts i (A) and D i '(A) to check whether the data of the object identification information i(A) has been tampered with. In addition, the control unit 21 generates a public key K that controls the device 10A. p (SA) implements hashed summary D k (A) Using the secret key K of the management server 20 s (C) and according to Abstract D k (A) Generate a certificate authority signature S as the electronic signature of the management server 20 c (A), generate a public key K p (SA) and the signature of the certification authority S c (A) Certification authority signature certificate C c (A).

[0116] The control unit 21 sends the certificate signed by the certification authority C c For example, the control unit 21 sends the generated certificate authority signed certificate C to the management server 20 based on the individual information of the control device 10A held by the management server 20. c (A) is sent to the control device 10A. In addition, the control unit 21 sends the public key K of the management server 20 p (C) Sent to the control device 10A.

[0117] To explain a specific example, the control unit 21 sends a URL including the public key K to the control device 10A based on the IP address "XXX.XXX.AAA.001". p (SA) and the signature of the certification authority S c (A) Certification authority signature certificate C c (A) Send to the control device 10A, and the public key K of the management server 20 p (C) Sent to the control device 10A.

[0118] (2-3-2. Communications Department 22)

[0119] The communication unit 22 manages data communication with other devices. For example, the communication unit 22 performs data communication with each communication device via a router, etc. In addition, the communication unit 22 can perform data communication with a terminal of an operator (not shown).

[0120] (2-3-3. Storage unit 23)

[0121] The storage unit 23 stores various information that the control unit 21 refers to when executing an action and various information that the control unit 21 obtains when executing an action. The storage unit 23 has an individual information storage unit 23a. Here, the storage unit 23 can be implemented by, for example, a semiconductor memory element such as a RAM or a flash memory, or a storage device such as a hard disk or an optical disk. Figure 2 In the example of FIG. 2 , the storage unit 23 is provided inside the management server 20 , but may be provided outside the management server 20 , or a plurality of storage units may be provided.

[0122] (2-3-3-1. Individual Information Storage Unit 23a)

[0123] The individual information storage unit 23a stores individual information. For example, the individual information storage unit 23a stores individual information including an IP address or a host name that specifies the address of the control device 10 registered by the control device 10. Figure 6 An example of data stored in the individual information storage unit 23 a will be described. Figure 6 FIG. 2 is a diagram showing an example of the individual information storage unit 23a of the management server 20 according to the embodiment. Figure 6 In the example of , the individual information storage unit 23a has items such as "DCN provider", "control device", and "IP address".

[0124] “DCN provider” indicates identification information for identifying a system provider that provides a control system, such as the company name of the system provider. “Control device” indicates identification information for identifying a control device 10 that constitutes the control system, such as an identification number or identification mark of the control device 10. “IP address” indicates identification information for identifying the control device 10 on a communication network, such as an identification number or identification mark assigned to the control device 10.

[0125] That is, in Figure 6 The following example is shown, that is, data about the DCN supplier identified by "Company A" as {control instrument: "Control instrument DCN-A001", IP address "XXX.XXX.AAA.001", ...}, and data about the DCN supplier identified by "Company B" as {control instrument: "Control instrument DCN-B001", IP address "XXX.XXX.BBB.001", ...}, etc. are stored in the individual information storage unit 23a.

[0126] (2-4. Field instrument 30)

[0127] The field instrument 30 is a measuring instrument such as a sensor instrument constituting a control system, and measures a sensor value and a process value. At this time, the field instrument 30 sends the measured sensor value and process value to the control instrument 10 constituting the control system as a measured value. In addition, the field instrument 30 is an action instrument such as an actuator constituting a control system, and performs process control such as opening and closing of a valve according to a control signal received from the control instrument 10 constituting the control system.

[0128] [3. Flow of Each Process of the Automation System 100]

[0129] use Figure 7 The processing flow of the entire automation system 100 according to the embodiment will be described. Figure 7 This is a sequence diagram showing an example of the flow of the entire automation system 100 according to the embodiment. The individual information management process, the certificate management process, and the data communication management process will be described in order below.

[0130] (3-1. Flow of individual information management processing)

[0131] Next, the flow of the individual information management process of the automation system 100 according to the embodiment will be described. In addition, the processes of the following steps S101 to S108 may be executed in a different order. In addition, some of the processes of the following steps S101 to S108 may be omitted.

[0132] First, the engineer EA performs a self-registration information input process (step S101). For example, the engineer EA inputs the self-registration information including the IP address of the management server 20 that manages the control system A into the control device 10A. Second, the control device 10A performs a self-registration information storage process (step S102). For example, the control device 10A stores the self-registration information including the IP address of the management server 20 in the self-registration information storage unit 12a of the control device 10A. Third, the control device 10A performs an individual information transmission process (step S103). For example, the control device 10A refers to the IP address of the management server 20 and sends the individual information of the control device 10A including the object identification information i(A) and the IP address of the control device 10A to the management server 20. Fourth, the management server 20 performs an individual information storage process (step S104). For example, the management server 20 receives the individual information of the control device 10A sent from the control device 10A and stores it in the individual information storage unit 23a of the control device 10A.

[0133] Fifth, the engineer EB performs a self-registration information input process (step S105). For example, the engineer EB inputs the self-registration information including the IP address of the management server 20 that manages the control system B into the control device 10B. Sixth, the control device 10B performs a self-registration information storage process (step S106). For example, the control device 10B stores the self-registration information including the IP address of the management server 20 in the self-registration information storage unit 12a of the control device 10B. Seventh, the control device 10B performs an individual information transmission process (step S107). For example, the control device 10B refers to the IP address of the management server 20 and transmits the individual information of the control device 10B including the object identification information i(B) and the IP address of the control device 10B to the management server 20. Eighth, the management server 20 performs an individual information storage process (step S108). For example, the management server 20 receives the individual information of the control device 10B sent from the control device 10B and stores it in the individual information storage unit 23a of the control device 10B.

[0134] (3-2. Flow of Certificate Management Process)

[0135] Next, the flow of the certificate management process of the automation system 100 according to the embodiment will be described. In addition, the processes of the following steps S201 to S212 may be performed in a different order. In addition, some of the processes of the following steps S201 to S212 may be omitted.

[0136] First, the control device 10A performs a self-registration information reference process (step S201). For example, when the control device 10A is initially configured to control the system A, the control device 10A searches the self-registration information storage unit 12a of the control device 10A and obtains the IP address of the management server 20. Second, the control device 10A performs a self-signed certificate generation process (step S202). For example, the control device 10A generates a self-signed certificate containing the object identification information i(A), the self-signed certificate S s (A) and the public key K of the control device 10A p (SA) including self-signed certificate C s (A) Third, the control device 10A executes a self-signed certificate transmission process (step S203). For example, the control device 10A transmits the generated self-signed certificate C to the management server 20 based on the IP address of the management server 20. s (A) Send to the management server 20. Fourth, the management server 20 executes the certification authority signed certificate generation process (step S204). For example, the management server 20 generates a certificate containing the public key K p (SA) and the signature of the certification authority S c Certification authority signature certificate C c(A) Fifth, the management server 20 executes the certification authority signed certificate sending process (step S205). For example, the management server 20 sends the generated certification authority signed certificate C c (A) is sent to the control device 10A. Sixth, the control device 10A executes the certificate storage process of the certificate signed by the certification authority (step S206). For example, the control device 10A stores the received certificate signed by the certification authority C c (A) Stored in the certificate storage unit 12c of the control device 10A.

[0137] 7. The control device 10B performs a self-registration information reference process (step S207). For example, when the control device 10B is initially configured to control the system B, the control device 10B searches the self-registration information storage unit 12a of the control device 10B and obtains the IP address of the management server 20. 8. The control device 10B performs a self-signed certificate generation process (step S208). For example, the control device 10B generates a self-signed certificate containing the object identification information i(B), the self-signed certificate S s (B) and the public key K of the control device 10B p (SB) including the self-signed certificate C s (B) Ninth, the control device 10B executes a self-signed certificate transmission process (step S209). For example, the control device 10B transmits the generated self-signed certificate C to the management server 20 based on the IP address of the management server 20. s (B) Send to the management server 20. 10. The management server 20 executes the certification authority signed certificate generation process (step S210). For example, the management server 20 generates a certificate containing the public key K p (SB) and the signature of the certification body S c (B) Certification authority signature certificate C c (B) Step 11: The management server 20 executes the certificate signing process (step S211). For example, the management server 20 sends the generated certificate signing certificate C c (B) is sent to the control device 10B. Twelve, the control device 10B executes the certificate storage process of the certificate signed by the certification authority (step S212). For example, the control device 10B stores the received certificate signed by the certification authority C c (B) Stored in the certificate storage unit 12c of the control device 10B.

[0138] (3-3. Flow of data communication management processing)

[0139] Next, the flow of the data communication management process of the automation system 100 according to the embodiment will be described. In addition, the processes of the following steps S301 to S306 may be performed in a different order. In addition, some of the processes of the following steps S301 to S306 may be omitted.

[0140] First, the control device 10A performs a certificate signing reference process (step S301). For example, when data communication of the control device 10A starts, the control device 10A searches the certificate signing storage unit 12c of the control device 10A and obtains the certificate signing certificate C c (A). Second, the control device 10A performs data communication encryption processing (step S302). For example, the control device 10A generates a digest D that hashes the transmission data d(A). d (A) Using the secret key K of the control device 10A s (SA) and according to Abstract D d (A) and generate a self-signed S d (A). Third, the control device 10A executes data communication processing (step S303). For example, the control device 10A sends the transmission data d(A), the self-signature S d (A) and the certificate signed by the certification authority C c (A) Public key K of management server 20 p (C) is sent to the management server 20, other control devices 10A' constituting the control system A, the operation terminal of the operator who manages the control system A, etc. On the other hand, the management server 20, other control devices 10A', the operation terminal, etc. use the received transmission data d(A) and the self-signed S d (A) Certification authority signature certificate C c (A) and public key K p (C) The public key K of the verification control device 10A p (SA), whether the transmitted data d(A) has been tampered with.

[0141] Fourth, the control device 10B performs a certification authority signature reference process (step S304). For example, when the data communication of the control device 10B starts, the control device 10B searches the certification authority signature storage unit 12c of the control device 10B and obtains the certification authority signature certificate C c (B). Fifth, the control device 10B performs data communication encryption processing (step S305). For example, the control device 10B generates a digest D that hashes the transmission data d(B). d (B) using the secret key K of the control device 10B s (SB) and according to Abstract D d (B) and generate a self-signed S d (B). Sixth, the control device 10B executes data communication processing (step S306). For example, the control device 10B sends the transmission data d(B), the self-signature S d (B) and the certificate signed by the certification authority Cc (B) Public key K of management server 20 p (C) is sent to the management server 20, other control devices 10B' constituting the control system B, the operation terminal of the operator who manages the control system B, etc. On the other hand, the management server 20, other control devices 10B', the operation terminal, etc. use the received transmission data d(B) and the self-signed S d (B) Certification authority signature certificate C c (B) and public key K p (C) The public key K of the verification control device 10B p (SB), whether the transmitted data d(B) has been tampered with.

[0142] [4. Effects of implementation]

[0143] Finally, the effects of the embodiment will be described. Next, effects 1 to 9 corresponding to the processing according to the embodiment will be described.

[0144] (4-1. Effect 1)

[0145] First, in the process involved in the above embodiment, the control device 10 sends the self-signed certificate C s Sent to the management server 20, based on the self-signed certificate C s The management server 20 receives the certificate C signed by the certification authority. c , based on the certificate signed by the certification authority C c Data communication is performed in the control system that performs control of the system. Therefore, in this process, the engineering related to the communication network of the automation system can be efficiently implemented.

[0146] (4-2. Effect 2)

[0147] Second, in the process according to the above embodiment, the control device 10 uses the IP address or host name of the registered management server 20 to send the self-signed certificate C s The self-signed certificate C is sent to the management server 20, and the receiving management server 20 s Give the certification authority signature S c The generated certification authority signature certificate C c , using the certificate signed by the certification authority C c The encrypted information contained in the control system can be verified by tampering, or the signature certificate of the certification authority C c Therefore, in this process, the self-signed certificate C is automatically sent to the management server 20 that manages the control system. s , thus enabling efficient implementation of engineering related to the communication network of automation systems.

[0148] (4-3. Effect 3)

[0149] Third, in the process according to the above-mentioned embodiment, the control device 10 registers individual information including the IP address or host name of the control device 10 in the management server 20 using the IP address or host name of the management server 20. Therefore, in this process, by performing self-registration on the management server 20 that manages the control system, it is possible to efficiently implement the project related to the communication network of the automation system.

[0150] (4-4. Effect 4)

[0151] Fourth, in the process according to the above embodiment, the control device 10 receives the certificate C signed by the certification authority generated by the management server 20 when the individual information including the IP address or host name of the control device 10 is registered. c Therefore, in this process, the certificate C signed by the certification authority is sent only to the control device 10 registered in the management server 20. c , thus enabling efficient implementation of engineering related to the communication network of automation systems.

[0152] (4-5. Effect 5)

[0153] Fifth, in the process according to the above embodiment, when the control device 10 is connected to the communication network including the management server 20 for the first time, or when the control device 10 is connected to the communication network after the system configuration is changed, the self-signed certificate C s Therefore, in this process, the self-signed certificate C is automatically sent when the communication network of the control system is connected for the first time or after the connection is changed. s , thus enabling efficient implementation of engineering related to the communication network of automation systems.

[0154] (4-6. Effect 6)

[0155] Sixth, in the process involved in the above embodiment, the control device 10 signs the certificate C in the certification authority. c Before the expiration date of the self-signed certificate C s is sent to the management server 20. Therefore, in this process, even if the engineer E does not always confirm the certificate signed by the certification authority C c The validity period of the self-signed certificate C is also automatically sent s , thus enabling efficient implementation of engineering related to the communication network of automation systems.

[0156] (4-7. Effect 7)

[0157] Seventh, in the process according to the above embodiment, the control system or the control device 10 complies with OPA, MTP or NOA. Therefore, in this process, it is possible to efficiently carry out works related to the communication network of the automation system that is being unified as an international standard.

[0158] (4-8. Effect 8)

[0159] Eighth, in the process according to the above embodiment, the control system or the control device 10 complies with OPC UA. Therefore, in this process, the works related to the communication network of the automation system compliant with OPC UA can be efficiently implemented.

[0160] (4-9. Effect 9)

[0161] Ninth, in the process according to the above-mentioned embodiment, the control system or the control device 10 performs control of the plant. Therefore, in this process, the works related to the communication network of the plant automation system requiring safety can be efficiently implemented.

[0162] [system]

[0163] The information including the processing sequence, control sequence, specific names, various data, and parameters described above and shown in the drawings can be arbitrarily changed except for cases where special description is given.

[0164] In addition, the components of each device shown in the figure are functional concepts and may not be physically configured as shown in the figure. That is, the specific way of distributing and integrating each device is not limited to the way shown in the figure. That is, all or part of them can be functionally or physically distributed / integrated in arbitrary units according to various loads, usage conditions, etc.

[0165] Furthermore, all or any part of each processing function performed by each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware based on wired logic.

[0166] [hardware]

[0167] Next, a hardware configuration example of the management server 10 as the information management device will be described. In addition, other devices may also be configured with the same hardware configuration. Figure 8 2 is a diagram for explaining an example of a hardware configuration involved in the implementation scheme. Figure 8 As shown, the control device 10 includes a communication device 10a, a HDD (Hard Disk Drive) 10b, a memory 10c, and a processor 10d. Figure 8 The various parts shown are connected to each other by a bus or the like.

[0168] The communication device 10a is a network interface card, etc., and performs communication with other servers. Figure 2 The functions shown are stored in programs and databases that execute actions.

[0169] The processor 10d reads and executes data from the HDD 10b or the like. Figure 2 The same processing program is developed in the memory 10c for each processing unit as shown in FIG. Figure 2 The process of each function described in the above etc. executes the action. For example, this process executes the same function as each processing unit of the management server 10. Specifically, the processor 10d reads a program having the same function as the registration unit 13a, the transmission unit 13b, the reception unit 13c, the execution unit 13d, etc. from the HDD 10b, etc. Then, the processor 10d executes the following process, that is, executing the same processing as the registration unit 13a, the transmission unit 13b, the reception unit 13c, the execution unit 13d, etc.

[0170] In this way, the control device 10 performs operations as a device that executes various processing methods by reading and executing programs. In addition, the control device 10 can also realize the same functions as the above-mentioned embodiment by reading the above-mentioned program from the recording medium using a medium reading device and executing the above-mentioned program. In addition, the program mentioned in other embodiments is not limited to being executed by the management server 20. For example, when other computers or servers execute the program, or when they cooperate to execute the program, the present invention can also be applied in the same way.

[0171] The program can be distributed via a network such as the Internet. In addition, the program can be recorded on a computer-readable recording medium such as a hard disk, a floppy disk (FD), a CD-ROM, an MO (Magneto-Optical disk), or a DVD (Digital Versatile Disc), and executed by reading from the recording medium using a computer.

Claims

1. An information processing device, wherein: The information processing device comprises: A sending unit, which sends the self-signed certificate to the management server; a receiving unit configured to receive a certificate signed by a certification authority generated by the management server based on the self-signed certificate; as well as An execution unit executes data communication in a control system that executes control of the system based on the certificate signed by the certification authority.

2. The information processing device according to claim 1, wherein: The sending unit sends the self-signed certificate to the management server using the registered Internet Protocol address or host name of the management server, The receiving unit receives the certificate signed by the certification body generated by the management server by giving the certificate signed by the certification body to the self-signed certificate. The execution unit executes data communication capable of verifying tampering or verifying validity of the certificate signed by the certificate in the control system using encrypted information included in the certificate signed by the certificate.

3. The information processing device according to claim 2, wherein: The information processing device further includes a registration unit that registers individual information including the Internet protocol address or the host name of the information processing device in the management server using the Internet protocol address or the host name of the management server.

4. The information processing device according to claim 2, wherein: The receiving unit receives the certificate signed by the certification authority generated by the management server when individual information including the Internet Protocol address or the host name of the information processing device is registered.

5. The information processing device according to claim 1, wherein: The transmitting unit transmits the self-signed certificate to the management server when the information processing device is connected to the communication network including the management server for the first time or when the information processing device is connected to the communication network after a system configuration change.

6. The information processing device according to claim 1, wherein: The sending unit sends the self-signed certificate to the management server before a predetermined time of the validity period of the certificate signed by the certification authority.

7. The information processing device according to any one of claims 1 to 6, wherein: The control system or the information processing device is in accordance with OPA, MTP or NOA, the OPA is Open Process Automation, the MTP is Module Type Package, and the NOA is NAMUR Open Architecture.

8. The information processing device according to any one of claims 1 to 6, wherein: The control system or the information processing device complies with OPC UA, which is Open Platform Communications Unified Architecture.

9. The information processing device according to any one of claims 1 to 6, wherein: The control system or the information processing device performs control of a plant.

10. An information processing method, wherein: The following processing is performed by the computer: Send the self-signed certificate to the management server, receiving a certificate signed by a certification authority generated by the management server according to the self-signed certificate, Data communication in a control system that performs control of the system is performed based on the certification authority signed certificate.

11. A computer-readable recording medium, wherein: The computer-readable recording medium records an information processing program, which causes a computer to execute the following processing: Send the self-signed certificate to the management server, receiving a certificate signed by a certification authority generated by the management server according to the self-signed certificate, Data communication in a control system that performs control of the system is performed based on the certification authority signed certificate.

Images