Authentication device, authentication system, sensor, authentication method, and program

Abstract

An authentication system can have a sensor that measures a physical quantity related to an environment of an object space, and an authentication device that is disposed at a position remote from the sensor. The authentication device can have an acquisition unit that acquires sensor information related to the sensor. The authentication device can have an authentication unit that performs authentication based on the sensor information, according to whether the sensor satisfies a predetermined criterion. The authentication device can have a notification unit that notifies the sensor of an authentication result obtained by the authentication unit. The sensor can have a reporting unit that issues a warning signal based on the authentication result notified by the notification unit.

Description

Technical Field

[0001] This invention relates to authentication devices, authentication systems, sensors, authentication methods, and procedures. Background Technology

[0002] Patent document 1 describes an authentication server having an authentication department and an issuance department. The authentication department authenticates the space based on statistical information from sensors, and the issuance department issues an electronic approval certificate for the space when the space is authenticated by the authentication department.

[0003] Existing technical documents

[0004] Patent documents

[0005] Patent Document 1: Japanese Patent No. 7209121 Summary of the Invention

[0006] (The problem to be solved)

[0007] When the measurement information is not obtained from a normal sensor, the measurement results may contain errors exceeding the permissible value, thus reducing the accuracy of the analysis performed using this measurement information. Here, "normal" can mean that the sensor's condition meets specifications or benchmarks, its deviation from the accuracy standard is below the benchmark (e.g., it has been calibrated), and it is properly maintained / managed (e.g., it is regularly inspected / maintained).

[0008] (Methods used to solve problems)

[0009] One aspect of the present invention relates to an authentication system that may include a sensor and an authentication device. The sensor measures physical quantities related to the environment of an object space, and the authentication device is configured at a location remote from the sensor. The authentication device may have an acquisition unit that acquires sensor information related to the sensor. The authentication device may have an authentication unit that performs authentication based on the sensor information and whether the sensor meets a predetermined criterion. The authentication device may have a notification unit that notifies the sensor of the authentication result obtained by the authentication unit. The sensor may have a reporting unit that issues a warning signal based on the authentication result notified by the notification unit.

[0010] In the authentication system, the acquisition unit can acquire first measurement information based on physical quantities related to the environment measured by the sensor. The authentication unit can also perform authentication based on the first measurement information, according to whether the sensor meets the predetermined benchmark.

[0011] In any of the authentication systems described, the first measurement information may be first statistical information obtained by statistically processing the measurement data measured by the sensor.

[0012] In any of the authentication systems described above, the acquisition unit can acquire first measurement information based on physical quantities related to the environment measured by the sensor. The authentication unit can then associate the authentication result with the first measurement information and store it in a storage unit.

[0013] In any of the authentication systems described above, for a specific physical quantity x, let the average value of the measurement data measured by the sensor over a certain period be μ, let the standard deviation of the measurement data measured by the sensor over a certain period be σ, and let the anomaly degree α be (x-μ). 2 / σ 2 When the anomaly degree α is below a specific value, the authentication unit can authenticate the sensor.

[0014] In any of the authentication systems described, the acquisition unit may also acquire second measurement information, which is based on physical quantities related to the environment of the surrounding space of the object space as measured by other sensors.

[0015] In any of the authentication systems, the authentication unit may also perform authentication based on the second measurement information, according to whether the sensor meets the predetermined benchmark.

[0016] In any of the authentication systems, the authentication unit can perform authentication based on the sensor information and the comparison result between the first measurement information and the second measurement information, according to whether the sensor meets the predetermined benchmark.

[0017] In any of the authentication systems described, the first measurement information may be first statistical information obtained by statistically processing the measurement data measured by the sensor.

[0018] In any of the authentication systems described, the second measurement information may be second statistical information obtained by statistically processing the measurement data measured by the other sensors.

[0019] In any of the authentication systems, the other sensors can be authenticated by the authentication department as sensors capable of performing measurements under conditions that meet the predetermined benchmarks.

[0020] In any of the authentication systems described above, the sensor information may include calibration information, which includes at least one of the following: the calibration period during which calibration of the sensor should be performed, the date and time of calibration performed by the sensor, the calibration method, and information about the calibrator.

[0021] In any of the aforementioned authentication systems, the sensor information may include management information, which includes at least one of the following: sensor location information, manufacturing date, manufacturing number, device model, manufacturer, operating time, embedded software version, and sensor specifications.

[0022] In any of the authentication systems described above, the sensor information may include environmental information, which includes at least one of the temperature, humidity, and air pressure of the object space.

[0023] In any of the authentication systems described above, there may also be a notification unit that notifies the sensor of the authentication result obtained by the authentication unit.

[0024] In any of the aforementioned authentication systems, there may also be an issuing department that issues an electronic certificate proving that the sensor has been authenticated by the authentication department. The notification department may then notify the sensor of the electronic certificate as the authentication result.

[0025] In any of the authentication systems described above, the sensor may include a communication control unit that sends sensor information related to the sensor to the authentication device and receives the authentication result of the sensor from the authentication device. The sensor may also include an exception handling unit that performs predetermined exception handling if the authentication result indicates that the sensor has not been authenticated by the authentication device.

[0026] In one aspect of the present invention, the authentication device can be configured at a location remote from a sensor that measures physical quantities related to the environment of an object space. The authentication device may include an acquisition unit that acquires sensor information related to the sensor. The authentication device may also include an authentication unit that performs authentication based on the sensor information and whether the sensor meets a predetermined criterion. Finally, the authentication device may include a notification unit that notifies the sensor of the authentication result obtained by the authentication unit.

[0027] One aspect of the present invention relates to a sensor that measures physical quantities related to the environment of an object space. The sensor may include a communication control unit that sends sensor information related to the sensor to an authentication device and receives authentication results from the authentication device, which authenticates the sensor based on whether it meets predetermined criteria. The sensor may also include a reporting unit that reports a warning signal based on the authentication results.

[0028] The sensor described in any one of the claims may further include: a calibration unit for performing calibration of the sensor; and an anomaly handling unit for performing predetermined anomaly handling if the authentication result indicates that the sensor has not been authenticated by the authentication device. If the authentication result indicates that the sensor has not been authenticated by the authentication device, the anomaly handling unit may cause the calibration unit to perform calibration of the sensor as the predetermined anomaly handling.

[0029] In any of the aforementioned sensors, after the calibration unit performs calibration on the sensor, the communication control unit sends calibration information as sensor information to the authentication device in order to re-request authentication from the authentication device. The calibration information includes at least one of the following: the calibration period during which the calibration of the sensor should be performed, the date and time of calibration performed by the sensor, the calibration method, and the information of the calibrator.

[0030] One aspect of the present invention relates to an authentication method that may include the following stages: an acquisition unit acquires sensor information related to a sensor from a sensor, the sensor measuring physical quantities related to the environment of an object space. The authentication method may include the following stage: an authentication unit performs authentication based on the sensor information, determining whether the sensor meets a predetermined benchmark. The authentication method may include the following stage: a notification unit notifies the sensor of the authentication result obtained by the authentication unit.

[0031] One aspect of the present invention involves a program, when executed by a computer, that functions as an acquisition unit, acquiring sensor information related to sensors that measure physical quantities related to the environment of an object space. The program also functions the computer as an authentication unit, which authenticates the sensors based on the sensor information and whether the sensors meet predetermined criteria. Finally, the program functions the computer as a reporting control unit, which, based on the authentication result obtained by the authentication unit, causes a reporting unit to report a warning signal.

[0032] It should be noted that the above summary of the invention does not list all the features of the invention. Furthermore, sub-combinations of these feature groups can also constitute an invention. Attached Figure Description

[0033] Figure 1 This is a diagram illustrating an example of the overall structure of an authentication system.

[0034] Figure 2 This is a diagram representing an example of a sensor's functional block.

[0035] Figure 3 This is a diagram representing an example of a functional block of an authentication server.

[0036] Figure 4 This is a flowchart illustrating an example of the measurement processing steps for a sensor of an object being authenticated.

[0037] Figure 5 This is a flowchart illustrating an example of the steps involved in the authentication process of a sensor for an object being authenticated, performed by an authentication server.

[0038] Figure 6 This is another example of a flowchart illustrating the steps involved in the authentication process of a sensor for an object being authenticated, performed by an authentication server.

[0039] Figure 7 This is a diagram illustrating an example of a hardware structure. Detailed Implementation

[0040] The present invention will now be described through embodiments thereof, but these embodiments do not limit the invention as defined in the claims. Furthermore, not all combinations of the features described in the embodiments are necessarily necessary for the solution of the invention.

[0041] Figure 1 This diagram illustrates an example of the overall structure of the authentication system 10 according to this embodiment. The authentication system 10 includes multiple sensors 100 and an authentication server 200. The authentication server 200 may be a computer equipped with a CPU and memory, and the CPU performs various functions by executing various programs stored in the memory. The sensors 100 and the authentication server 200 communicate with each other via a network 50.

[0042] Multiple sensors 100 are each configured in each of multiple spaces 20 of the monitored object. The multiple spaces 20 are, for example, areas where the objects to be measured by the sensors 100 may be located. The multiple spaces 20 may also partially overlap.

[0043] Sensor 100 measures physical quantities related to the environment or biological aspects of space 20. Sensor 100 can measure at least one of the following: gas concentration, dust concentration, temperature, humidity, noise, illuminance, vibration, electromagnetic waves, X-ray dose, radiation dose, and ozone concentration of the object to be measured in space 20.

[0044] Multiple spaces 20, such as spaces containing pipes, can be used. Sensor 100 can be a gas sensor that detects gas leaks in the pipes. When sensor 100 is a gas sensor, the concentration of the target gas can be measured using non-dispersive infrared absorption, photoacoustic, solid electrolyte, thermal conduction, acoustic wave, tunable diode laser absorption spectroscopy (TDLAS), DIAL (Differential Absorption LiDAR), TCSPC (Time Correlated Single Photon Counting), or electrostatic capacitance methods. The target gas can be carbon dioxide or oxygen. The target gas can be flammable gases such as methane, propane, ethanol, hydrogen, ethylene, and MCH (methylcyclohexane). The target gas can be toxic gases such as carbon monoxide, hydrogen sulfide, formaldehyde, and ammonia. The target gas can be greenhouse gases such as carbon dioxide, nitrous oxide, and refrigerant gases.

[0045] Biologically relevant physical quantities could be, for example, the concentration of alcohol in a person's breath or blood, or a person's blood sugar level.

[0046] Sensor 100 can also be a dust sensor, temperature and humidity sensor, noise sensor, illuminance sensor, vibration sensor, electromagnetic wave detector, X-ray detector, radiation detector, or airflow detector, etc.

[0047] The authentication server 200 collects measurement information based on measurement data from multiple sensors 100. The authentication server 200 can detect any anomalies in each space 20 based on the measurement information collected from each of the multiple sensors 100. The authentication server 200 is an example of an authentication device.

[0048] Even if the detection of anomalies in space 20 is based on measurement information provided by a malfunctioning sensor 100, the reliability of the detection results is low. Therefore, in this embodiment, the authentication server 200 authenticates whether the sensor 100 providing the measurement information is in a normal state. This allows it to determine whether the measurement information provided by the sensor 100 is from a normal sensor 100. That is, the reliability of the measurement information provided by the sensor 100 can be ensured. Here, "normal" can mean that the sensor's state meets specifications or benchmarks, the deviation from the accuracy standard is below the benchmark (e.g., it has been calibrated), and it is properly maintained / managed (e.g., it is regularly inspected / maintained).

[0049] Figure 2This is a diagram representing an example of a functional block of sensor 100.

[0050] The sensor 100 includes a control unit 110, a storage unit 120, a communication unit 130, a measurement unit 140, a display unit 150, and a reporting unit 160.

[0051] The control unit 110 may be composed of a microprocessor such as a CPU or MPU, or a microcontroller such as an MCU. The measurement unit 140 measures physical quantities related to the environment in space 20. The storage unit 120 stores programs for performing processes executed by the control unit 110 to measure physical quantities and send measurement information to the authentication server 200. The storage unit 120 stores measurement data measured by the measurement unit 140 or measurement information based on the measurement data. The communication unit 130 includes a communication interface and communicates with the authentication server 200 via network 50.

[0052] The measuring unit 140 measures physical quantities related to the environment in space 20 at predetermined intervals, such as once every 60 seconds or more. The measuring unit 140 may include a light-emitting unit that emits infrared light and a light-receiving unit that receives infrared light transmitted through the gas being measured, and measures the gas concentration using the infrared absorption characteristics of the gas being measured. The measuring unit 140 can measure the gas concentration in space 20 as a physical quantity related to the environment. The measuring unit 140 can also measure measurement data representing the gas concentration of gas leaking from pipes in space 20.

[0053] The control unit 110 includes a measurement information processing unit 112, a communication control unit 114, a calibration unit 116, and an anomaly handling unit 118.

[0054] The measurement information processing unit 112 generates first measurement information by performing statistical processing on the measurement data measured by the measurement unit 140. The measurement information processing unit 112 can generate statistical information including at least one of the following: average value, maximum value, minimum value, variance, moments, and histogram, as the first measurement information.

[0055] The communication control unit 114 sends the first measurement information to the authentication server 200 by controlling the communication unit 130.

[0056] The calibration unit 116 performs calibration on the sensor 100. The characteristics of the sensor 100 may change over time. For example, in the case of a gas sensor such as a CO2 (carbon dioxide) sensor, where the sensor 100 is an optical element and uses a non-dispersive infrared absorption method to determine gas concentration using infrared light, the characteristics of the optical element, etc., may change over time. Therefore, the sensor 100 performs calibration to correct measurement accuracy.

[0057] The calibration unit 116 can perform calibration based on its own calculated gas concentration and a predetermined reference gas concentration in space 20. If the gas concentration in space 20 meets the conditions for becoming the reference gas concentration, the calibration unit 116 can correct the coefficient used to calculate the gas concentration in such a way that its own calculated gas concentration matches the reference gas concentration. The sensor 100 can correct the coefficient in such a way that the minimum gas concentration it calculates within a predetermined period matches the reference gas concentration. The predetermined period can be a period during which the gas concentration of the target gas is most likely to be at its lowest. For example, it could be a period during which equipment that may generate gas is not operating.

[0058] Storage unit 120 can store calibration information, which includes at least one of the following: the calibration period during which calibration unit 116 should perform calibration, the date and time of calibration performed by calibration unit 116, calibration method, and calibrator information. The calibration method is the method of calibration performed by calibration unit 116. For example, the calibration method may indicate that calibration is performed during a period when the gas concentration of the target gas is most likely to be at its lowest. The calibration method may also indicate a period considering weather conditions, etc., during which sensor 100 can stably measure gas concentration. The calibration method may also indicate at least one of the following: gas type, concentration, number of concentration points, traceability system, concentration accuracy, gas composition, gas purchase date / calibration certificate issuance date, container symbol number, gas expiration date, type of adjustment parameters (e.g., zero point, range, offset, sensitivity), environmental information at the time of calibration (temperature, humidity, air pressure, and date and time), and residual pressure of the calibration gas.

[0059] In order to request the authentication server 200 to authenticate whether the sensor 100 can perform measurements under predetermined benchmark conditions, the communication control unit 114 sends sensor information related to the sensor 100 via the communication unit 130 to the authentication server 200. The sensor information can be pre-stored in the storage unit 120. The sensor information may be information that enables the authentication server 200 to determine whether the sensor 100 can perform measurements with guaranteed reliability. The sensor information may also be information that enables the authentication server 200 to determine whether the sensor 100 can perform normal measurements. Specifically, the sensor information may be information that allows a third party to compare / confirm that the sensor 100 can perform measurements with high reliability or normally based on specifications or benchmark-based judgment items.

[0060] The sensor information may include calibration information, such as the date and time of calibration performed by the calibration unit 116. This calibration information may include at least one of the following: the calibration period during which the calibration unit 116 should perform calibration of the sensor 100, the date and time of calibration performed by the calibration unit 116, the calibration method, and the calibrator information. Here, the calibrator information may be information that enables the certification server 200 to determine whether the calibrator is qualified to perform calibration. Specifically, it may be a calibration certificate, a standard instrument inspection report, or a metrological traceability system. The certification server 200 can determine whether the calibrator is qualified based on the calibrator information. For example, the certification server 200 can determine this by reading or searching specific information shown in the calibration certificate, standard instrument inspection report, or metrological traceability system. If the determined information meets the conditions for determining qualification, the calibrator can be determined to be qualified. The sensor information may include management information, which includes at least one of the following: sensor 100 location information, manufacturing date, manufacturing serial number, device model, manufacturer, operating time, embedded software version, and sensor 100 specifications. The sensor information may include status information, including the remaining battery level of sensor 100. The sensor information may include the location information of sensor 100. The sensor information may include environmental information, including at least one of the following: temperature, humidity, and air pressure of space 20. The sensor information may include historical data, including at least one of the following: sensor 100 operating time, sensor 100 communication history, sensor 100 repair history, and sensor 100 maintenance history.

[0061] The communication control unit 114 can send the sensor information along with the first measurement information to the authentication server 200. The authentication server 200 uses the sensor information to authenticate whether the sensor 100 is capable of performing measurements under predetermined benchmark conditions.

[0062] The communication control unit 114 stores the authentication result received from the authentication server 200 via the communication unit 130 in the storage unit 120. The exception handling unit 118 performs predetermined exception handling if the authentication result indicates that the sensor 100 has not been authenticated by the authentication server 200.

[0063] When the authentication server 200 receives calibration information as sensor information, it can authenticate the sensor 100 based on whether the calibration of the sensor 100 is performed according to a predetermined standard. In this case, if the authentication result indicates that the sensor 100 has not been authenticated by the authentication server 200, the exception handling unit 118 can cause the calibration unit 116 to perform calibration of the sensor 100 as a predetermined exception handling. After the calibration unit 116 performs calibration of the sensor 100, the communication control unit 114 can send the calibration information as sensor information to the authentication server 200 in order to re-request authentication from the authentication server 200.

[0064] The anomaly handling unit 118 can cause the reporting unit 160 to issue a warning signal based on the authentication result notified by the authentication server 200. The anomaly handling unit 118 is an example of a reporting control unit. The reporting unit 160 issues a warning signal based on the authentication result. For example, if the anomaly handling unit 118 determines that the sensor 100 is malfunctioning based on the authentication result, it causes the reporting unit 160 to output an alarm indicating the sensor 100 is malfunctioning via a warning light or a warning sound. If the sensor 100 is functioning normally, the reporting unit 160 can illuminate a light indicating normal operation. For example, if the anomaly handling unit 118 determines that the sensor 100 is malfunctioning based on the authentication result, it can output an alarm by turning off the light indicating normal operation. The form of the alarm issued by the reporting unit 160 is not limited to visual or auditory information. Thus, by having the reporting unit 160 of the sensor 100 output an alarm indicating that the sensor 100 is malfunctioning, it is possible to quickly identify the sensor 100 that does not meet a predetermined benchmark from among multiple sensors 100. This ensures the reliability of the measurement information provided by the sensor 100.

[0065] If the number of times the sensor 100 is not certified by the certification server 200 reaches a predetermined number, the anomaly handling unit 118 may stop measuring physical quantities related to the environment of the space 20.

[0066] If the authentication result indicates that the sensor 100 has not been authenticated by the authentication server 200, the anomaly handling unit 118 may display a message indicating that the sensor 100 has not been authenticated by the authentication server 200 on the display unit 150. The anomaly handling unit 118 may also display a message on the display unit 150 prompting the sensor 100 to be replaced, repaired, or inspected. It should be noted that the display unit 150 may not be provided by the sensor 100, but by other devices. For example, the display unit 150 may be provided by a portable terminal, smartphone, head-mounted display (VR glasses, MR glasses, SR glasses), or wearable terminal (smartwatch) of the person in charge of managing the sensor 100. The display unit 150 may be a display for displaying messages, an indicator light, or a speaker for issuing alarms. Furthermore, if the authentication result indicates that the sensor 100 has not been authenticated by the authentication server 200, the anomaly handling unit 118 may, in order to inspect or replace the sensor 100, instruct the takeoff of UAVs or other drones or the dispatch of personnel, or analyze past measurement results to determine when the anomaly began.

[0067] If the authentication result indicates that the sensor 100 has not been authenticated by the authentication server 200, the anomaly handling unit 118 may stop measuring physical quantities related to the environment of the space 20.

[0068] Figure 3 This diagram illustrates an example of the functional blocks of the authentication server 200. The authentication server 200 includes a control unit 210, a storage unit 220, and a communication unit 230. The control unit 210 can be configured as a microprocessor such as a CPU or MPU, or a microcontroller such as an MCU. The storage unit 220 is a database storing various measurement information collected from each sensor 100. The communication unit 230 includes a communication interface for communicating with the sensors 100 via a network 50.

[0069] The control unit 210 includes an acquisition unit 212, an authentication unit 214, a notification unit 216, and an issuance unit 218.

[0070] The acquisition unit 212 acquires sensor information related to the sensor 100, which measures physical quantities related to the environment of space 20. As described above, the sensor information can be information that enables the authentication server 200 to objectively determine whether the sensor 100 can perform measurements that can be ensured to be reliable. The sensor information can be information that enables the authentication server 200 to objectively determine whether the sensor 100 can perform normal measurements.

[0071] As described above, the sensor information may include at least one of calibration information, management information, location information, status information, environmental information, and historical data. The certification unit 214 certifies whether the sensor 100 can perform measurements while meeting predetermined benchmarks based on the sensor information.

[0072] The acquisition unit 212 can also acquire first measurement information based on environmentally related physical quantities measured by the sensor 100. In addition to the sensor information, the authentication unit 214 also authenticates whether the sensor 100 is capable of performing measurements that meet predetermined benchmarks based on the first measurement information.

[0073] The certification unit 214 can perform certification based on sensor information and whether predetermined benchmarks are met. The certification unit 214 can certify that the sensor 100 can perform measurements that meet predetermined benchmarks if the information shown in the calibration information meets predetermined conditions. For example, the certification unit 214 can determine the calibration date and time of the sensor 100 by referring to the calibration information; if the calibration date and time is within a predetermined period from now (e.g., within one month), then the sensor 100 is certified. Alternatively, the certification unit 214 can determine the calibration method of the sensor 100 by referring to the calibration information; if the calibration method meets predetermined benchmark methods, then the sensor 100 is certified.

[0074] The certification unit 214 can certify that the sensor 100 can perform measurements that meet predetermined standards if the information shown in the management information meets predetermined conditions. For example, the certification unit 214 can certify the sensor 100 by referring to the management information if the sensor 100's manufacturing date is within a predetermined period (e.g., 5 or 10 years) or if the sensor 100's specifications meet predetermined specifications. The certification unit 214 can also certify the sensor 100 by referring to the management information if at least one of the sensor 100's manufacturing date, manufacturing number, device model, manufacturer, operating time, embedded software version, and sensor specifications matches pre-registered information.

[0075] The authentication unit 214 can authenticate that the sensor 100 can perform measurements that meet predetermined criteria if the information shown in the location information meets predetermined conditions. For example, the authentication unit 214 can authenticate the sensor 100 if the sensor 100's location is within a predetermined location range by referring to the location information. The location information can be the latitude and longitude of the sensor 100. The location information can be the location of the device on which the sensor 100 is installed. The authentication unit 214 can also authenticate the sensor 100 if it is installed at a predetermined location.

[0076] The authentication unit 214 can authenticate the sensor 100 to perform measurements that meet predetermined criteria if the information shown in the status information meets predetermined conditions. For example, if the remaining battery level of the sensor 100 shown in the status information is above a predetermined lower limit, the authentication unit 214 will authenticate the sensor 100.

[0077] The certification unit 214 can certify that the sensor 100 can perform measurements that meet predetermined criteria when the information shown in the environmental information meets predetermined conditions. For example, the certification unit 214 can certify the sensor 100 by referring to the environmental information and when the temperature, humidity, or air pressure of the space 20 meets a predetermined temperature range, humidity range, or air pressure range suitable for the sensor 100 to measure.

[0078] The authentication unit 214 can authenticate the sensor 100 to perform measurements that meet predetermined criteria if the information shown in the historical records meets predetermined conditions. For example, the authentication unit 214 can authenticate the sensor 100 by referring to historical records if it confirms that the sensor 100's operating time meets a predetermined operating time, that the sensor 100's repair has been completed, or that maintenance has been performed regularly. The authentication unit 214 can also authenticate the sensor 100 by referring to historical records if the sensor 100 regularly communicates with a specific device such as the authentication server 200. Alternatively, the authentication unit 214 can authenticate the sensor 100 by referring to historical records if the sensor 100 is not communicating with a device other than an authorized device. Or, the authentication unit 214 can authenticate the sensor 100 by referring to historical records if the sensor 100's communication frequency is below a certain reference.

[0079] The authentication unit 214 can authenticate the sensor 100 to perform measurements that meet predetermined criteria when the information shown in the first measurement information meets predetermined conditions. For example, the authentication unit 214 can authenticate the sensor 100 if the physical quantity shown in the first measurement information is within a predetermined range of physical quantities. The authentication unit 214 can also authenticate the sensor 100 if each physical quantity in the time sequence shown in the first measurement information is within a predetermined range of physical quantities. Furthermore, the predetermined range of physical quantities can be a range of physical quantities that is updated at any time using predetermined means.

[0080] When the first measurement information is obtained by statistically processing the measurement data measured by sensor 100, for example, the authentication unit 214 can determine whether the physical quantity is included within a predetermined range of physical quantities by referring to the histogram or variance of the physical quantity determined based on the first statistical information. The authentication unit 214 can authenticate sensor 100 if the variance of the physical quantity determined based on the first statistical information is within a predetermined variance range. Alternatively, the authentication unit 214 can use Hotelling's theory to determine the range of physical quantities and determine whether the physical quantity is included within a predetermined range of physical quantities. Hotelling's theory specifically states that for a specific physical quantity x, let the average value of the measurement data measured by sensor 100 within a certain period be μ, let the standard deviation of the measurement data measured by sensor 100 within a certain period be σ, and let the anomaly α be (x-μ). 2 / σ 2 When the anomaly degree α is below a specific value, the authentication unit 214 can authenticate the sensor 100. In this case, the specific value can be 9 or 36. Furthermore, the authentication unit 214 can use a mathematical distance representing the deviation from the typicality of the data based on the first statistical information to determine whether the physical quantity is included within a predetermined range. Here, the mathematical distance is a function that measures the difference between distributions and generates real numbers from two elements of a set X that satisfies all or part of a distance axiom. For example, it can be the Kullback-Leibler distance, Pearson distance, or L... 2 distance.

[0081] In addition to the first measurement information of the sensor 100 of the object to be certified, the certification unit 214 can also certify whether the sensor 100 of the object to be certified can perform measurements that meet a predetermined benchmark based on a second measurement information. The second measurement information is the measurement information of other sensors 100 that measure physical quantities related to the environment of the space 20 surrounding the space 20 of the sensor 100 of the object to be certified. The surrounding space 20 can be a space adjacent to or partially overlapping the space 20 of the object to be certified. The surrounding space 20 can be a space 20 existing within a predetermined distance range centered on the space 20 where the sensor 100 of the object to be certified exists. Furthermore, the certification unit 214 can use Hotelling's theory to determine the range of physical quantities and determine whether the physical quantity is included within the predetermined range. More specifically, for a specific physical quantity x of the sensor 100 of the object to be certified, let the average value of the measurement data measured by other sensors 100 measuring physical quantities related to the environment of the space 20 surrounding the space 20 of the sensor 100 of the object to be certified during a certain period be μ, the standard deviation be σ, and the anomaly α be (x-μ). 2 / σ 2When the anomaly degree α is below a specific value, the authentication unit 214 can authenticate the sensor 100. This specific value can be 9 or 36. A specific value of 9 means that the measurement data was observed with a randomness of 3σ (=√9×σ) or more relative to the average value μ, indicating anomaly under a certain reference. Similarly, a specific value of 36 means that the measurement data was observed with a randomness of 6σ (=√36×σ) or more relative to the average value μ, indicating anomaly under a certain reference. Furthermore, the authentication unit 214 can use the mathematical distance representing the deviation from the typicality of the data, based on the first statistical information and the second measurement information, to determine whether the physical quantity is included within a predetermined range of physical quantities.

[0082] The authentication unit 214 can authenticate whether the sensor 100 can perform measurements that meet a predetermined benchmark based on the comparison result between the first measurement information and the second measurement information. The authentication unit 214 can also authenticate whether the sensor 100 can perform measurements that meet a predetermined benchmark based on sensor information and the comparison result between the first and second measurement information. The authentication unit 214 can authenticate the sensor 100 if the sensor information meets predetermined conditions and the comparison result between the first and second measurement information meets predetermined conditions. Similar to the first measurement information, the second measurement information can be second statistical information obtained by statistically processing measurement data measured by other sensors 100.

[0083] The authentication unit 214 can authenticate the sensor 100 if the difference between the average value of the physical quantity derived from the second measurement information of other sensors 100 and the average value of the physical quantity derived from the first measurement information of the sensor 100 to be authenticated is within a predetermined difference range. The authentication unit 214 can also authenticate the sensor 100 if the difference between the variance of the physical quantity derived from the second measurement information of other sensors 100 and the variance of the physical quantity derived from the first measurement information of the sensor 100 to be authenticated is within a predetermined variance range. Other sensors 100 can be sensors that have already been authenticated by the authentication unit 214. That is, other sensors 100 can be sensors that have been authenticated by the authentication unit 214 as capable of performing measurements under predetermined reference conditions. The authentication unit 214 can authenticate the sensor 100 to be authenticated based at least on the comparison results between the second measurement information of the sensors 100 already authenticated by the authentication unit 214 and the first measurement information of the sensor 100 to be authenticated.

[0084] The notification unit 216 notifies the sensor 100 of the authentication result obtained by the authentication unit 214. The notification unit 216 can also send a message indicating the authentication result obtained by the authentication unit 214 to the sensor 100 via the communication unit 230.

[0085] The notification unit 216 can send a message indicating the authentication result obtained by the authentication unit 214 to the owner, user, or manager of the sensor 100 via the communication unit 230.

[0086] Issuance Department 218 issues an electronic certificate proving that sensor 100 has been certified by Certification Department 214. Notification Department 216 may notify sensor 100 of the electronic certificate as a certification result. Notification Department 216 may send the electronic certificate to sensor 100 via Communication Department 230.

[0087] Figure 4 This is a flowchart illustrating an example of the measurement processing steps for sensor 100 of the object being authenticated.

[0088] The measurement information processing unit 112 generates first measurement information by performing statistical processing on the measurement data measured by the measurement unit 140 (S100). The communication control unit 114 sends the sensor information and the first measurement information to the authentication server 200 (S102). After receiving the first measurement information and the sensor information, the authentication server 200 performs authentication processing on the sensor 100 of the authentication target and sends the authentication result to the sensor 100 of the authentication target.

[0089] The communication control unit 114 receives the authentication result from the authentication server 200 (S104). The exception handling unit 118 determines whether the sensor 100 of the authentication target has been authenticated based on the authentication result (S106). If the sensor 100 of the authentication target has been authenticated, the sensor 100 of the authentication target continues to measure physical quantities related to the environment of the space 20 (S108).

[0090] If the sensor 100 to be certified is not certified, the anomaly handling unit 118 performs anomaly handling (S110). For example, the anomaly handling unit 118 may cause the calibration unit 116 to perform calibration. The anomaly handling unit 118 may stop measuring physical quantities related to the environment of space 20. If the number of times the sensor 100 is not certified by the certification server 200 consecutively reaches a predetermined number, the anomaly handling unit 118 may stop measuring physical quantities related to the environment of space 20. The anomaly handling unit 118 may display a message indicating that the sensor 100 has not been certified by the certification server 200 on the display unit 150, or display a message prompting the sensor 100 to be replaced, repaired, or inspected on the sensor 100 or the user terminal. In addition, the anomaly handling unit 118 may instruct the take-off of UAVs or other unmanned aerial vehicles or the dispatch of personnel in order to inspect or replace the sensor 100, or analyze past measurement results to determine when the anomaly began.

[0091] Figure 5This is a flowchart illustrating an example of the authentication process steps performed by the authentication server 200 on the sensor 100 of the authentication object.

[0092] The acquisition unit 212 acquires first measurement information based on environmentally related physical quantities measured by the sensor 100 of the object to be certified, and sensor information of the sensor 100 of the object to be certified (S200). The certification unit 214 performs certification processing of the sensor 100 of the object to be certified based on the first measurement information and sensor information of the sensor 100 of the object to be certified (S202). The certification unit 214 may perform certification processing of the sensor 100 of the object to be certified based on the first measurement information, and at least one of calibration information, management information, status information, environmental information, and historical record information.

[0093] After the authentication process is completed by the authentication unit 214, the notification unit 216 notifies the sensor 100 of the object being authenticated of the authentication result obtained by the authentication unit 214 (S204). In addition, the authentication unit 214 stores the authentication result in association with the first measurement information in the storage unit 220 (S206).

[0094] Figure 6 This is a flowchart illustrating another example of the authentication process steps for the sensor 100 of the object being authenticated, performed by the authentication server 200.

[0095] The acquisition unit 212 acquires first measurement information based on environmentally related physical quantities measured by the sensor 100 of the authentication object, and sensor information of the sensor 100 of the authentication object (S300). Further, the acquisition unit 212 also acquires second measurement information based on environmentally related physical quantities measured by other sensors 100 present around the sensor 100 of the authentication object, and sensor information of the other sensors 100 (S302). The other sensors 100 present around the sensor 100 of the authentication object may be sensors that measure environmentally related physical quantities in a space 20 that overlaps with or partially overlaps with the space 20 adjacent to the sensor 100 of the authentication object. The other sensors 100 may be sensors existing within a predetermined distance range centered on the space 20 where the sensor 100 of the authentication object is located.

[0096] The authentication unit 214 determines, by referring to the storage unit 220, whether other sensors 100 have been authenticated (S304). If other sensors 100 have been authenticated, the authentication unit 214 performs authentication processing on the sensor 100 to be authenticated based on the first measurement information, the second measurement information, and the information of each sensor (S304). The authentication unit 214 can authenticate the sensor 100 if the difference between the variance of the physical quantity derived from the second measurement information of other sensors 100 and the variance of the physical quantity derived from the first measurement information of the sensor 100 to be authenticated is within a predetermined variance range.

[0097] On the other hand, if other sensors 100 have not been certified, the certification process ends. If the second measurement information has been obtained from multiple other sensors 100, the certification unit 214 may use only the second measurement information of the other certified sensors 100 for the certification process of the sensor 100 to be certified.

[0098] After the authentication process is completed by the authentication unit 214, the notification unit 216 notifies the sensor 100 of the object being authenticated of the authentication result obtained by the authentication unit 214 (S308). In addition, the authentication unit 214 stores the authentication result in association with the first measurement information in the storage unit 220 (S310).

[0099] According to the authentication system 10 of this embodiment, the authentication server 200 authenticates whether the sensor 100 is capable of performing measurements that meet a predetermined benchmark. Therefore, the measurement information provided by the sensor 100 authenticated by the authentication server 200 is proven to be information provided by a normal sensor 100. Thus, it is possible to prevent the determination of whether the space 20 is abnormal based on measurement information provided by a malfunctioning sensor 100. Therefore, the reliability of determining abnormalities in the space 20 based on the measurement information of the sensor 100 can be improved.

[0100] Figure 7 This is an example of a computer 1200 that illustrates how various aspects of the present invention can be implemented wholly or partially. A program installed in the computer 1200 can cause the computer 1200 to function as an operation associated with a device according to embodiments of the present invention, or as one or more "parts" of that device. Alternatively, the program can cause the computer 1200 to perform that operation or the one or more "parts". The program can cause the computer 1200 to execute a process or a stage of that process according to embodiments of the present invention. Such a program can be executed by the CPU 1212 to cause the computer 1200 to perform specific operations associated with some or all of the frames in the flowcharts and block diagrams described in this specification.

[0101] The computer 1200 involved in this embodiment includes a CPU 1212 and RAM 1214, which are interconnected by a host controller 1210. The computer 1200 also includes a communication interface 1222 and an input / output unit, which are connected to the host controller 1210 via an input / output controller 1220. The computer 1200 also includes a ROM 1230. The CPU 1212 operates according to programs stored in the ROM 1230 and RAM 1214, thereby controlling the various units.

[0102] Communication interface 1222 communicates with other electronic devices via a network. The hard disk drive can store programs and data used by the CPU 1212 within the computer 1200. ROM 1230 stores boot programs and / or programs dependent on the hardware of the computer 1200, which are executed by the computer 1200 upon activation. Programs are provided via computer-readable recording media such as CD-ROMs, USB storage, or IC cards, or via networks. Programs are installed in RAM 1214 or ROM 1230, which are also examples of computer-readable recording media, and are executed by the CPU 1212. The information processing described in these programs is read by the computer 1200, resulting in cooperation between the programs and the various types of hardware resources described above. The apparatus or method can be configured to perform information manipulation or processing according to the use of the computer 1200.

[0103] For example, when communication is performed between the computer 1200 and an external device, the CPU 1212 can execute a communication program loaded into the RAM 1214 and instruct the communication interface 1222 to perform communication processing based on the processing described in the communication program. Under the control of the CPU 1212, the communication interface 1222 reads transmission data stored in the transmission buffer area provided in the recording medium such as the RAM 1214 or USB memory, sends the read transmission data to the network, or writes received data received from the network into the receive buffer area provided on the recording medium.

[0104] In addition, CPU 1212 can read all or necessary portions of files or databases stored on external recording media such as USB memory into RAM 1214, and perform various types of processing on the data in RAM 1214. CPU 1212 can then write the processed data back to the external recording medium.

[0105] Various types of information, such as programs, data, tables, and databases, can be stored in recording media and processed. CPU 1212 can perform various types of processing on data read from RAM 1214, including operations specified by program instruction sequences, information processing, conditional judgments, conditional branches, unconditional branches, information retrieval / replacement, etc., as described throughout this disclosure, and write the results back to RAM 1214. Furthermore, CPU 1212 can retrieve information from files, databases, etc., in the recording medium. For example, if the recording medium stores multiple entries, each with an attribute value associated with a first attribute value that is related to a second attribute value, CPU 1212 can retrieve from the multiple entries the entry whose first attribute value matches a condition, read the attribute value of the second attribute stored in that entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0106] The aforementioned program or software module may be stored on or near the computer 1200 in a computer-readable storage medium. Alternatively, a recording medium such as a hard disk or RAM provided in a server system connected to a dedicated communication network or the Internet may also be used as a computer-readable storage medium, thereby providing the program to the computer 1200 via the network.

[0107] Computer-readable media can include any tangible device capable of storing instructions executable by a suitable device. As a result, a computer-readable medium having instructions stored therein comprises instructions executable for creating a unit for performing operations specified in a flowchart or block diagram. Examples of computer-readable media can include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, etc. More specific examples of computer-readable media can include floppy disks, magnetic disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), optical disc read-only memory (CD-ROM), digital versatile disc (DVD), Blu-ray (RTM) disc, memory stick, integrated circuit card, etc.

[0108] Computer-readable instructions may include any of the source code or object code described in any combination of one or more programming languages. The source code or object code may include conventional procedural programming languages. Conventional procedural programming languages ​​may be assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or object-oriented programming languages ​​such as Smalltalk (registered trademark), JAVA (registered trademark), C++, and the "C" programming language or similar programming languages. Computer-readable instructions may be provided to a processor or programmable circuit of a programmable data processing device, or via a local area network (LAN) or a wide area network (WAN) such as the Internet. The processor or programmable circuit can execute the computer-readable instructions to create means for performing the operations specified in a flowchart or block diagram.

[0109] Here, "computer" can refer to a PC (personal computer), tablet computer, smartphone, workstation, server computer, or general-purpose computer, or it can be a computer system that connects multiple computers. Such a computer system with multiple connected computers is also called a distributed computing system, which is a computer in a broad sense. In a distributed computing system, each computer executes a part of the program and transfers data between the computers as needed, thus enabling multiple computers to jointly execute the program.

[0110] Examples of processors include computer processors, central processing units (CPUs), processing units, microprocessors, digital signal processors, controllers, microcontrollers, etc. A computer can have one or more processors. In a multiprocessor system with multiple processors, each processor executes a portion of a program and transfers data between processors as needed during program execution, thus enabling multiple processors to jointly execute the program. For example, in multitasking, each of the multiple processors can execute a portion of a task by switching tasks in each time slice. In this case, which part of a program each processor executes is dynamically changing. Alternatively, which part of the program each processor executes can be statically determined by considering the programming of the multiprocessor system.

[0111] The present invention has been described above using embodiments, but the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various modifications or improvements can be made to the above embodiments. As will be clear from the claims, such modifications or improvements may also be included within the technical scope of the present invention.

[0112] It should be noted that the execution order of actions, processes, steps, and stages in the apparatus, system, program, and method shown in the claims, specification, and drawings can be implemented in any order, as long as it is not specifically stated as "before" or "prior to," and the output of an earlier process is not used in a later process. Even if terms such as "firstly" or "next" are used to describe the flow of actions in the claims, specification, and drawings for convenience, this does not mean that they must be implemented in that order.

[0113] Label Explanation

[0114] 10 Authentication System

[0115] 20 spaces

[0116] 50 Networks

[0117] 100 sensors

[0118] 110 Control Department

[0119] 112 Measurement Information Processing Department

[0120] 114 Communications Control Department

[0121] 116 Correction Department

[0122] 118 Exception Handling Department

[0123] 120 Storage Department

[0124] 130 Ministry of Communications

[0125] 140 Measurement Department

[0126] 150 Display Unit

[0127] 160 Reporting Department

[0128] 200 Authentication Server

[0129] 210 Control Department

[0130] 212 Acquisition Department

[0131] 214 Certification Department

[0132] 216 Notification Department

[0133] 218 Distribution Department

[0134] 220 Storage Department

[0135] 230 Ministry of Communications

[0136] 1200 computers

[0137] 1210 Host Controller

[0138] 1212 CPU

[0139] 1214 RAM

[0140] 1220 Input / Output Controller

[0141] 1222 Communication Interface

[0142] 1230 ROM

Claims

1. An authentication system comprising a sensor and an authentication device, wherein the sensor measures physical quantities related to the environment of an object space, and the authentication device is disposed at a location remote from the sensor, wherein, The authentication device has: The acquisition unit acquires sensor information related to the sensor. The certification department performs certification based on the sensor information and whether the sensor meets predetermined criteria. as well as The notification department notifies the sensor of the authentication result obtained by the authentication department. The sensor has a reporting unit that issues a warning signal based on the authentication result notified by the notification unit.

2. The authentication system according to claim 1, wherein, The acquisition unit acquires first measurement information, which is based on physical quantities related to the environment measured by the sensor. The authentication department also performs authentication based on the first measurement information, according to whether the sensor meets the predetermined benchmark.

3. The authentication system according to claim 2, wherein, The first measurement information is the first statistical information obtained by statistically processing the measurement data measured by the sensor.

4. The authentication system according to claim 1, wherein, The acquisition unit acquires first measurement information, which is based on physical quantities related to the environment measured by the sensor. The authentication department stores the authentication result in association with the first measurement information in the storage department.

5. The authentication system according to claim 2, wherein, For a specific physical quantity x, let μ be the average value of the measurement data measured by the sensor over a certain period, let σ be the standard deviation of the measurement data measured by the sensor over a certain period, and let the anomaly α be (x-μ). 2 / σ 2 When the anomaly degree α is below a specific value, the authentication department authenticates the sensor.

6. The authentication system according to claim 2, wherein, The acquisition unit also acquires second measurement information, which is based on physical quantities related to the environment of the surrounding space of the object space, as measured by other sensors. The authentication department also performs authentication based on the second measurement information, according to whether the sensor meets the predetermined benchmark.

7. The authentication system according to claim 6, wherein, The authentication department performs authentication based on the sensor information and the comparison result between the first measurement information and the second measurement information, depending on whether the sensor meets the predetermined benchmark.

8. The authentication system according to claim 6, wherein, The first measurement information is first statistical information obtained by statistically processing the measurement data measured by the sensor. The second measurement information is obtained by statistically processing the measurement data measured by the other sensors.

9. The authentication system according to claim 6, wherein, The other sensors are certified by the certification department as sensors capable of performing measurements under conditions that meet the predetermined benchmarks.

10. The authentication system according to claim 1, wherein, The sensor information includes calibration information, which includes at least one of the following: the calibration period during which calibration of the sensor should be performed, the date and time of calibration performed by the sensor, the calibration method, and the information of the calibrator.

11. The authentication system according to claim 1, wherein, The sensor information includes management information, which includes at least one of the following: sensor location information, owner, manufacturing date, manufacturing number, device model, manufacturer, purchase date, embedded software version, and sensor specifications.

12. The authentication system according to claim 1, wherein, The sensor information includes environmental information, which includes at least one of the temperature, humidity, and air pressure of the object space.

13. The authentication system according to claim 1, wherein, The authentication system also includes an issuance department that issues electronic certificates, which prove that the sensor has been authenticated by the authentication department. The notification department will notify the sensor of the electronic certificate as the authentication result.

14. The authentication system according to claim 1, wherein, The sensor includes: The communication control unit sends sensor information related to the sensor to the authentication device and receives the authentication result of the sensor from the authentication device; as well as The anomaly handling unit performs predetermined anomaly handling if the authentication result indicates that the sensor has not been authenticated by the authentication device.

15. An authentication device configured at a location remote from a sensor that measures physical quantities relating to the environment of an object space, wherein, The authentication device includes: The acquisition unit acquires sensor information related to the sensor. The certification department performs certification based on the sensor information and whether the sensor meets predetermined criteria. as well as The notification department notifies the sensor of the authentication result obtained by the authentication department.

16. A sensor for measuring physical quantities related to the environment of an object space, wherein, The sensor includes: The communication control unit sends sensor information related to the sensor to the authentication device and receives the authentication result of the sensor from the authentication device, which performs authentication based on whether the sensor meets a predetermined benchmark. as well as The reporting department, based on the authentication results, issues a warning signal.

17. The sensor according to claim 16, wherein, The sensor also features: The calibration unit performs calibration of the sensor; and The anomaly handling unit performs predetermined anomaly handling if the authentication result indicates that the sensor has not been authenticated by the authentication device. If the authentication result indicates that the sensor has not been authenticated by the authentication device, the anomaly handling unit causes the correction unit to perform calibration of the sensor as the predetermined anomaly handling.

18. The sensor according to claim 17, wherein, After the calibration unit performs calibration on the sensor, the communication control unit sends calibration information as sensor information to the authentication device in order to re-request authentication from the authentication device. The calibration information includes at least one of the following: the calibration period during which the calibration of the sensor should be performed, the date and time of the calibration performed by the sensor, the calibration method, and the information of the calibrator.

19. An authentication method, wherein, The authentication method includes the following stages: The acquisition unit acquires sensor information related to the sensor from the sensor, which measures physical quantities related to the environment of the object space; The certification department performs certification based on the sensor information and whether the sensor meets predetermined criteria. as well as The notification department notifies the sensor of the authentication result obtained by the authentication department.

20. A program, when executed by a computer, causes the computer to function as a component: The acquisition unit acquires sensor information related to the sensor from the sensor, which measures physical quantities related to the environment of the object space; The certification department, based on the sensor information, performs certification according to whether the sensor meets predetermined criteria; and The exception handling unit, based on the authentication result obtained by the authentication unit, causes the reporting unit to report a warning signal.

Images