Device management apparatus, device management method, and device management program

Abstract

A device management apparatus used in a system in which a plurality of groups including a plurality of devices exist, wherein the device management apparatus includes: a communication section that receives first authentication information common to two or more of the groups and second authentication information unique to each of a plurality of the groups from a transmission source device that is a transmission source of the first authentication information and the second authentication information; a determination section that determines whether the transmission source device is a normal device based on the first authentication information and the second authentication information received by the communication section; and a right setting section that performs right setting processing of granting the transmission source device a right to an operation on a prescribed resource in a case where the transmission source device is determined by the determination section to be a normal device.

Description

Technical Field

[0001] This disclosure relates to equipment management apparatus, equipment management method, and equipment management procedure. This application claims priority based on Japanese Application No. 2024-034483, filed on March 7, 2024, the entire disclosure of which is incorporated herein by reference. Background Technology

[0002] Previously, a technology for improving network security has been developed. For example, Patent Document 1 (Japanese Patent Application Publication No. 2014-174560) discloses the following technology: An information processing device accesses a server via a network, wherein the information processing device includes: a sending unit that sends a certificate issuance request containing information inherent to the information processing device to a certification authority; a receiving unit that receives a certificate sent from the certification authority in response to the issuance request; a determining unit that, when connecting to the server, compares the information inherent to the information processing device with the inherent information contained in the certificate to determine whether the information processing device can access the server; and a blocking unit that, when the determining unit determines that access to the server is not possible, blocks the issuance of connection requests to the server.

[0003] Existing technical documents Patent documents Patent Document 1: Japanese Patent Application Publication No. 2014-174560 Patent Document 2: Japanese Patent Application Publication No. 2020-187746 Summary of the Invention

[0004] The device management apparatus disclosed herein is used in a system with multiple groups, the groups including multiple devices. The device management apparatus comprises: a communication unit that receives, from a source device that serves as a source of first authentication information and second authentication information, common to two or more groups and specific to each of the multiple groups; a determination unit that determines whether the source device is a legitimate device based on the first authentication information and the second authentication information received by the communication unit; and a permission setting unit that, if the determination unit determines that the source device is a legitimate device, performs permission setting processing to grant the source device permission to operate on specified resources.

[0005] One solution disclosed herein can be implemented not only as a device management device with such characteristic processing unit, but also as a semiconductor integrated circuit that implements part or all of the device management device, or as a system including the device management device. Attached Figure Description

[0006] Figure 1 This is a diagram illustrating an example of the configuration of a communication system according to an embodiment of the present disclosure.

[0007] Figure 2 This is a diagram illustrating an example of common authentication information stored in a device according to an embodiment of this disclosure.

[0008] Figure 3 This is a diagram illustrating an example of operator authentication information and device authentication information stored in the device used in embodiments of this disclosure.

[0009] Figure 4 This is a diagram illustrating an example of the configuration of a device management apparatus according to an embodiment of the present disclosure.

[0010] Figure 5 This is a diagram illustrating an example of a mapping table stored by a device management apparatus according to an embodiment of the present disclosure.

[0011] Figure 6 This is a diagram illustrating an example of an authentication list stored by a device management device according to an embodiment of this disclosure.

[0012] Figure 7 This is a diagram illustrating an example of the judgment processing performed by the device management apparatus according to embodiments of the present disclosure.

[0013] Figure 8 This is a diagram illustrating the granting of access permissions to devices by the device management device according to embodiments of the present disclosure.

[0014] Figure 9 This is a diagram illustrating an example of permission setting processing performed by the device management apparatus according to embodiments of the present disclosure.

[0015] Figure 10 This is a diagram illustrating an example of authentication processing performed by a device management apparatus according to an embodiment of this disclosure.

[0016] Figure 11 This is a diagram illustrating an example of a region confirmation process performed by the device management apparatus according to an embodiment of the present disclosure.

[0017] Figure 12 This is a diagram illustrating an example of notification processing implemented by the device management apparatus according to embodiments of the present disclosure.

[0018] Figure 13 This is a flowchart illustrating an example of the operation process of the device management device performing permission setting processing according to an embodiment of the present disclosure.

[0019] Figure 14 This is a flowchart illustrating an example of the operation process of a device management device sending access permission information according to an embodiment of this disclosure.

[0020] Figure 15 This is a diagram illustrating an example of a correspondence table stored in a variant of the device management apparatus according to an embodiment of the present disclosure.

[0021] Figure 16 This is a diagram illustrating an example of a judgment process performed on a variant of the device management apparatus according to an embodiment of the present disclosure.

[0022] Figure 17 This is a diagram illustrating an example of permission setting processing implemented for a variant of the device management apparatus according to embodiments of the present disclosure. Detailed Implementation

[0023] <Problems this disclosure seeks to solve> The desired technology is one that surpasses the technology described in Patent Document 1 and can achieve superior functionality related to security in the network.

[0024] This disclosure was made to solve the above-mentioned problems, and its purpose is to provide a device management apparatus, device management method and device management program that can achieve excellent functions related to security in a network.

[0025] <The Effects of This Disclosure> According to this disclosure, excellent functions related to network security can be achieved.

[0026] First, the contents of the embodiments of this disclosure will be listed for explanation.

[0027] (1) The device management apparatus of the present disclosure is used in a system with multiple groups, the groups including multiple devices, wherein the device management apparatus comprises: a communication unit that receives first authentication information common to two or more groups and second authentication information specific to each of the multiple groups from a sending source device of the device that serves as a sending source of first authentication information and second authentication information; a determination unit that determines whether the sending source device is a legitimate device based on the first authentication information and the second authentication information received by the communication unit; and a permission setting unit that, when the determination unit determines that the sending source device is a legitimate device, performs permission setting processing to grant the sending source device permission to operate on specified resources.

[0028] Thus, in addition to using the first authentication information, second authentication information inherent to each of the multiple groups to which the device belongs is used to determine whether the sending source device is legitimate, and permissions are granted to the device determined to be legitimate. With this configuration, even if the first authentication information is leaked, the possibility of unintentional devices accessing resources can be reduced by using the second authentication information, thereby suppressing attacks carried out by that device. Therefore, excellent functionality related to network security can be achieved.

[0029] (2) In (1) above, the permission setting unit may grant the permissions corresponding to the multiple groups to the sending source device in the permission setting process.

[0030] This configuration allows the sending device to be granted the appropriate permissions corresponding to the group to which that device belongs.

[0031] (3) In (1) or (2) above, the communication unit may also receive from the device the third authentication information inherent to each of the sending source devices in the group, and the judgment unit performs a judgment process to determine whether the sending source device is a legitimate device based on the first authentication information, the second authentication information and the third authentication information received by the communication unit.

[0032] Thus, by using the device's inherent third authentication information in addition to the first and second authentication information for the judgment process, the accuracy of determining whether a device is legitimate can be improved.

[0033] (4) In (3) above, the determination unit may also obtain an authentication list that represents the third authentication information received by the communication unit in correspondence with the multiple groups respectively. In the determination process, if the third authentication information received by the communication unit has been registered in the obtained authentication list, the determination unit determines that the sending source device is not a legitimate device.

[0034] This structure allows for a more easy and reliable determination of whether the sending source device is legitimate, using a certification list.

[0035] (5) In (3) or (4) above, the device management device may also include a notification unit, wherein the notification unit performs a prescribed notification process when the first authentication information, the second authentication information and the third authentication information received by the communication unit are the same as the first authentication information, the second authentication information and the third authentication information that the communication unit has received from other devices.

[0036] With such a configuration, for example, it can detect attacks such as unauthorized access to the device management device by an illegitimate device impersonating the sending source, and thus can implement countermeasures against such attacks.

[0037] (6) In (1) or (2) above, the communication unit may also receive the inherent third authentication information of each of the sending source devices in the group, the judgment unit determines whether the sending source device is a legitimate device based on the first authentication information, the second authentication information and the third authentication information received by the communication unit, at least the first authentication information and the second authentication information, and the permission setting unit performs the permission setting process for each of the sending source devices based on at least the third authentication information.

[0038] With this configuration, each device identified as a legitimate source can suppress unauthorized access to resources by illegitimate devices impersonating that source.

[0039] (7) The device management method of the present disclosure is a device management method of a device management device used in a system with multiple groups, wherein the groups include multiple devices, and the device management method includes the following steps: receiving first authentication information common to two or more groups and second authentication information specific to each of the multiple groups from a sending source device of the device that serves as the sending source of first authentication information and second authentication information; determining whether the sending source device is a legitimate device based on the received first authentication information and second authentication information; and, if the sending source device is determined to be a legitimate device, performing permission setting processing to grant the sending source device permission to operate on specified resources.

[0040] Thus, in addition to using the first authentication information, second authentication information inherent to each of the multiple groups to which the device belongs is used to determine whether the sending device is legitimate, and permissions are granted to the device determined to be legitimate. By using this method, even if the first authentication information is leaked, the possibility of unintentional devices accessing resources can be reduced by using the second authentication information, thereby suppressing attacks carried out by that device. Therefore, excellent functionality related to network security can be achieved.

[0041] (8) The device management program of the present disclosure is used in a device management device in a system having multiple groups, the groups including multiple devices. The device management program is a program for enabling a computer to function as a communication unit, a judgment unit, and a permission setting unit. The communication unit receives first authentication information common to two or more groups and second authentication information specific to each of the multiple groups from a sending source device of the device that is the source of first authentication information and second authentication information. The judgment unit determines whether the sending source device is a legitimate device based on the first authentication information and the second authentication information received by the communication unit. If the judgment unit determines that the sending source device is a legitimate device, the permission setting unit performs permission setting processing to grant the sending source device permission to operate on specified resources.

[0042] Thus, in addition to using the first authentication information, second authentication information inherent to each of the multiple groups to which the device belongs is used to determine whether the sending source device is legitimate, and permissions are granted to the device determined to be legitimate. With this configuration, even if the first authentication information is leaked, the possibility of unintentional devices accessing resources can be reduced by using the second authentication information, thereby suppressing attacks carried out by that device. Therefore, excellent functionality related to network security can be achieved.

[0043] Hereinafter, embodiments of the present disclosure will be described using the accompanying drawings. It should be noted that the same or equivalent parts in the drawings are labeled with the same reference numerals, and their description will not be repeated. At least some of the embodiments described below may be arbitrarily combined.

[0044] [Communication System] Figure 1 This is a diagram illustrating an example of the configuration of a communication system according to an embodiment of the present disclosure. (Refer to...) Figure 1 The communication system 501 includes a device management device 101 and multiple devices 201. The device management device 101 sends and receives information with each device 201, for example, via an external network 151 such as the Internet. The device management device 101 is, for example, a server.

[0045] Equipment 201 includes vehicles, cameras, sensors, actuators, robots, and ECUs (Electronic Control Units).

[0046] exist Figure 1In the example shown, the communication system 501 includes devices 201A, 201B, 201C, 201D, 201E, 201F, 201G, 201H, 201J, 201K, 201L, and 201M as devices 201.

[0047] The device management device 101 collects device information related to each device 201. Then, based on the collected device information, the device management device 101 provides services related to the device 201 that sent the device information. The device information includes various data acquired by the device 201 and measurement results from sensors connected to the device 201. The device management device 101 is managed, for example, by an operator providing the service. The devices 201 are managed, for example, by an operator or individual receiving the service (hereinafter collectively referred to as a user).

[0048] In the communication system 501, there are multiple groups G, which include multiple devices 201. More specifically, for example, in the communication system 501, there are multiple groups G1, group G2, group G3, group G4, and group G5.

[0049] Group G1 belongs to devices 201A and 201B. Group G2 belongs to devices 201C, 201D, and 201E. Group G3 belongs to devices 201F and 201G. Group G4 belongs to devices 201H, 201J, and 201K. Group G5 belongs to devices 201L and 201M.

[0050] Group G may be set up for each manufacturer of equipment 201, for example. It should be noted that group G is not limited to being set up for each manufacturer of equipment 201, but may also be set up for each department set up within that manufacturer.

[0051] [Problem Description] The device management device 101 uses authentication information such as certificates to perform authentication processing for establishing a communication connection with the device 201. Here, in order to minimize the impact of authentication information leakage, it is considered to prepare unique authentication information for each device 201. In this case, when manufacturing each device 201, authentication information needs to be prepared separately and registered in each device 201, thus increasing costs.

[0052] Considering the possibility of preparing shared authentication information across multiple devices 201, after each device 201 sends a connection request containing this authentication information to the device management device 101, individual authentication information is sent from the device management device 101 to each device 201. In this case, the impact of a leak of the shared authentication information is widespread. Furthermore, when using shared authentication information for authentication processing, it is difficult to grant specific permissions to each device 201 within the device management device 101.

[0053] Therefore, in the communication system 501 of the embodiments of this disclosure, the above-mentioned problems are solved by the following configuration and operation.

[0054] [Communication System] Refer again Figure 1 The device 201 sends a connection request message to the device management device 101 to request a communication connection with the device management device 101.

[0055] More specifically, the connection request information may include, for example, authentication information common to two or more groups G (hereinafter also referred to as "common authentication information set P"), authentication information specific to each group G (hereinafter also referred to as "operator authentication information set Q"), and authentication information specific to each device 201 within a group G (hereinafter also referred to as "device authentication information set S"). The common authentication information set P is an example of the first authentication information, the operator authentication information set Q is an example of the second authentication information, and the device authentication information set S is an example of the third authentication information.

[0056] Figure 2 This is a diagram illustrating an example of common authentication information stored in a device according to an embodiment of this disclosure.

[0057] Reference Figure 2 The common authentication information set P1, which is a common authentication information set P, is stored in each device 201 belonging to group G1 and each device 201 belonging to group G2. The common authentication information set P2, which is a common authentication information set P, is stored in each device 201 belonging to group G3 and each device 201 belonging to group G4. The common authentication information set P3, which is a common authentication information set P, is stored in each device 201 belonging to group G5. The common authentication information set P includes certificates and private keys, etc. Thus, by registering the common authentication information set P, which is shared authentication information in two or more groups, in device 201, the manufacturing cost of device 201 can be reduced.

[0058] Figure 3 This is a diagram illustrating an example of operator authentication information and device authentication information stored in the device used in embodiments of this disclosure.

[0059] Reference Figure 3 The operator authentication information set Q, for example, contains identification information and a password used to identify the manufacturer and operator of equipment 201. Figure 3 In the example shown, the operator authentication information sets Q of groups G1, G2, G3, G4 and G5 are operator authentication information Q1, Q2, Q3, Q4 and Q5 respectively.

[0060] The device authentication information set S includes, for example, identification information used to identify device 201. This identification information is, for example, the serial number of device 201.

[0061] Hereinafter, the device authentication information sets S of devices 201A, 201B, 201C, 201D, 201E, 201F, 201G, 201H, 201J, 201K, 201L, and 201M will also be referred to as device authentication information S1, S2, S3, S4, S5, S6, S7, S8, S9, S10, S11, and S12, respectively.

[0062] When the device management device 101 receives a connection request information from the device 201, it performs authentication processing to establish a communication connection with the device 201 based on the common authentication information set P, the operator authentication information set Q, and the device authentication information set S contained in the received connection request information.

[0063] [Equipment Management Device] Figure 4 This is a diagram illustrating an example of the configuration of a device management apparatus according to an embodiment of this disclosure. (Refer to...) Figure 4 The device management device 101 includes a communication unit 11, a processing unit 12, and a storage unit 13. The processing unit 12 includes a judgment unit 21, a permission setting unit 22, a list management unit 23, and a notification unit 24. One or both of the communication unit 11 and the processing unit 12 are implemented, for example, by a processing circuit including one or more processors. The storage unit 13 is, for example, a non-volatile memory included in the aforementioned processing circuit. The list management unit 23 is an example of an acquisition unit.

[0064] (Ministry of Communications) The communication unit 11 receives a common authentication information set P, an operator authentication information set Q, and a device authentication information set S. More specifically, for example, the communication unit 11 receives connection request information from the device 201 that includes the common authentication information set P, the operator authentication information set Q, and the device authentication information set S. Then, the communication unit 11 outputs the received connection request information to the determination unit 21.

[0065] (Correspondence Table) Figure 5 This is a diagram illustrating an example of a mapping table stored by a device management apparatus according to an embodiment of the present disclosure.

[0066] Reference Figure 5 For example, storage unit 13 stores a table Tb1 representing the correspondence between the common authentication information set P, the operator authentication information set Q, and the device authentication information set S, E1. Regarding... Figure 5 The "access permissions" shown will be described later.

[0067] exist Figure 5 In the correspondence table Tb1 shown, the operator authentication information set Q corresponding to the common authentication information P1 is operator authentication information Q1 and operator authentication information Q2. The operator authentication information set Q corresponding to the common authentication information P2 is operator authentication information Q3 and operator authentication information Q4. The operator authentication information set Q corresponding to the common authentication information P3 is operator authentication information Q5.

[0068] The equipment certification information set S corresponding to operator certification information Q1 consists of equipment certification information S1 and equipment certification information S2. The equipment certification information set S corresponding to operator certification information Q2 consists of equipment certification information S3, equipment certification information S4, and equipment certification information S5. The equipment certification information set S corresponding to operator certification information Q3 consists of equipment certification information S6 and equipment certification information S7. The equipment certification information set S corresponding to operator certification information Q4 consists of equipment certification information S8, equipment certification information S9, and equipment certification information S10. The equipment certification information set S corresponding to operator certification information Q5 consists of equipment certification information S11 and equipment certification information S12.

[0069] (List of Certifications) Figure 6 This is a diagram illustrating an example of an authentication list stored by a device management device according to an embodiment of this disclosure.

[0070] Reference Figure 6 For example, storage unit 13 stores an authentication list L that represents the device authentication information set S received by communication unit 11 in correspondence with multiple groups G. Specifically, for example, authentication list L represents a group W of common authentication information set P, operator authentication information set Q, and device authentication information set S received by communication unit 11.

[0071] exist Figure 6 In the authentication list L shown, the group W that the communication unit 11 has received is the group of common authentication information P2, operator authentication information Q3 and device authentication information S7, and the group of common authentication information P3, operator authentication information Q5 and device authentication information S12.

[0072] (Judgment Section) Refer again Figure 4 For example, the judgment unit 21 performs a judgment process based on the common authentication information set P, the operator authentication information set Q, and the device authentication information set S received by the communication unit 11 to determine whether the device 201 (hereinafter also referred to as the "sending source device") that is the source of the common authentication information set P, the operator authentication information set Q, and the device authentication information set S is a legitimate device.

[0073] More specifically, for example, when the determination unit 21 receives a connection request information from the communication unit 11, it reads the correspondence table Tb1 in the storage unit 13. Then, the determination unit 21 confirms whether the group W of the common authentication information set P, the operator authentication information set Q, and the device authentication information set S contained in the connection request information has been registered in the correspondence table Tb1.

[0074] For example, if group W is not registered in the corresponding table Tb1, the judgment unit 21 determines that the sending source device is not a legitimate device.

[0075] For example, if group W is already registered in the corresponding table Tb1, the determination unit 21 obtains the authentication list L.

[0076] Specifically, for example, if group W is already registered in the corresponding table Tb1, the determination unit 21 reads the authentication list L from the storage unit 13. Then, the determination unit 21 confirms whether group W has been registered in the authentication list L.

[0077] If group W is already registered in the authentication list L, the determination unit 21 determines that the sending source device is not a legitimate device. Then, the determination unit 21 outputs the connection request information received from the communication unit 11 to the notification unit 24.

[0078] If group W is not registered in the authentication list L, the determination unit 21 determines that the sending source device is a legitimate device. Then, the determination unit 21 outputs the connection request information received from the communication unit 11 to the permission setting unit 22 and the list management unit 23.

[0079] Figure 7 This is a diagram illustrating an example of a judgment process performed by the device management apparatus according to an embodiment of the present disclosure. Figure 7The diagram illustrates the judgment process of the device management device 101 when it receives connection request information C1 containing common authentication information P1, operator authentication information Q1, and device authentication information S1 from the device 201A.

[0080] Reference Figure 4 , Figure 5 as well as Figure 7 In the device management device 101, when the communication unit 11 receives the connection request information C1 from the device 201A, it outputs the received connection request information C1 to the judgment unit 21.

[0081] When the determination unit 21 receives the connection request information C1 from the communication unit 11, it reads the correspondence table Tb1 from the storage unit 13. Then, the determination unit 21 confirms whether the group W1 of the common authentication information P1, operator authentication information Q1 and device authentication information S1 contained in the connection request information C1 has been registered in the correspondence table Tb1.

[0082] exist Figure 5 In the corresponding table Tb1 shown, group W1 is registered. In this case, the determination unit 21 reads the authentication list L from the storage unit 13. Then, the determination unit 21 confirms whether group W1 has been registered in the authentication list L.

[0083] exist Figure 6 In the certification list L shown, group W1 is not registered. In this case, the judgment unit 21 determines that device 201A is a legitimate device.

[0084] (Permissions Setting Department) Refer again Figure 4 If the determination unit 21 determines that the sending source device is a legitimate device, the permission setting unit 22, based on the operator authentication information set Q received by the communication unit 11, performs permission setting processing to grant the sending source device permission to operate on the specified resources (hereinafter also referred to as "access permission"). The following example illustrates this: In the permission setting process, the permission setting unit 22 grants the sending source device access permission as permission to operate on the storage unit 13 in its own device management device 101.

[0085] For example, in the permission setting process, the permission setting unit 22 grants the sending source device the access permissions corresponding to the multiple groups G, that is, the multiple operator authentication information sets Q.

[0086] For example, Figure 5 The corresponding table Tb1 shown not only represents the above-mentioned corresponding relationship E1, but also represents the corresponding relationship E2 between the operator authentication information set Q and the access permissions.

[0087] In the corresponding table Tb1, the access permission corresponding to operator authentication information Q1 is access permission K1. The access permission corresponding to operator authentication information Q2 is access permission K2. The access permission corresponding to operator authentication information Q3 is access permission K3. The access permission corresponding to operator authentication information Q4 is access permission K4. The access permission corresponding to operator authentication information Q5 is access permission K5.

[0088] Figure 8 This is a diagram illustrating the granting of access permissions to devices by the device management device according to embodiments of the present disclosure.

[0089] Reference Figure 8 For example, the storage unit 13 of the device management device 101 has storage area R1, storage area R2, storage area R3, storage area R4, and storage area R5.

[0090] Access permissions K1, K2, K3, K4, and K5 are the permissions for storage areas R1, R2, R3, R4, and R5 in the storage unit 13 of the device management device 101, respectively.

[0091] It should be noted that the permission setting unit 22 may also be configured such that, in the permission setting process, it is not limited to granting access permissions to the sending source device for operations on the storage unit 13 in its own device management device 101, but also granting access permissions to the sending source device for operations on other resources different from the storage unit 13. These other resources may include the processor in the device management device 101 and services provided by the device management device 101.

[0092] Refer again Figure 4 For example, when the permission setting unit 22 receives a connection request message from the judgment unit 21, it reads the correspondence table Tb1 from the storage unit 13. Then, the permission setting unit 22 determines the access permissions corresponding to the operator authentication information set Q contained in the connection request message by referring to the correspondence table Tb1.

[0093] Then, the permission setting unit 22 generates separate authentication information for authenticating access to the storage area corresponding to the determined access permissions. The permission setting unit 22 then sends the generated separate authentication information to the sending source device via the communication unit 11 and the external network 151. The separate authentication information includes certificates and private keys, etc.

[0094] For example, when the sending source device receives individual authentication information from the device management device 101, it saves the received individual authentication information in a storage unit (not shown).

[0095] Figure 9This is a diagram illustrating an example of permission setting processing performed by the device management apparatus according to embodiments of the present disclosure. Figure 9 This illustrates that the device management device 101 receives data from the device 201A. Figure 7 The connection request information C1 shown shows the permission setting process when device 201A is determined to be a legitimate device.

[0096] Reference Figure 4 , Figure 5 as well as Figure 9 When the permission setting unit 22 receives the connection request information C1 from the judgment unit 21, it determines the access permission K1 to be the access permission corresponding to the operator authentication information Q1 contained in the connection request information C1 by referring to the correspondence table Tb1 in the storage unit 13.

[0097] Then, the permission setting unit 22 generates a separate authentication information Da for authenticating access to the storage area R1 corresponding to the determined access permission K1. Then, the permission setting unit 22 sends the generated separate authentication information Da to the device 201A via the communication unit 11 and the external network 151.

[0098] When device 201A receives individual authentication information Da from device management device 101, it saves the received individual authentication information Da in its own storage unit.

[0099] [Creating and Sending Temporary Authentication Information] Refer again Figure 1 and Figure 4 When the source device wants to access the device management device 101, it sends a first access request to the device management device 101, which includes its own unique authentication information stored in its own storage and its own device authentication information set S.

[0100] In the device management device 101, when the permission setting unit 22 receives a first access request information from the device 201 via the external network 151 and the communication unit 11, it uses the separate authentication information contained in the received first access request information to authenticate the device 201.

[0101] When device 201 is successfully authenticated, device management device 101 refers to... Figure 5 The corresponding table Tb1 shown is used to confirm the access permissions corresponding to the device authentication information set S contained in the first access request information received from device 201. Then, the device management device 101 performs the following creation process: creating temporary authentication information for temporarily granting access to the storage area of ​​the storage unit 13 corresponding to the access permission.

[0102] Specifically, for example, storage unit 13 stores a permission list that represents the correspondence between storage areas and access permissions.

[0103] When the permission setting unit 22 confirms the access permission corresponding to the device authentication information set S contained in the first access request information received from the device 201, it determines the storage area of ​​the storage unit 13 corresponding to the access permission by referring to the permission list in the storage unit 13.

[0104] Then, the permission setting unit 22 creates temporary authentication information for temporarily granting access to the determined storage area, and sends the created temporary authentication information to the device 201, the source of the first access request information.

[0105] When device 201 fails to authenticate, device management device 101 does not perform any processing, but instead sends an authentication failure message to device 201 indicating that authentication has failed.

[0106] Figure 10 This is a diagram illustrating an example of a manufacturing process performed by a device management apparatus according to an embodiment of the present disclosure. Figure 10 The process of creating the device management device 101 when it receives a first access request information A containing individual authentication information Da and device authentication information S1 from the device 201A is shown.

[0107] Reference Figure 4 and Figure 10 In the device management device 101, when the communication unit 11 receives the first access request information A from the device 201 via the external network 151, it outputs the received first access request information A to the permission setting unit 22.

[0108] When the permission setting unit 22 receives the first access request information A from the communication unit 11, it uses the separate authentication information Da contained in the first access request information A to perform authentication processing of the device 201A.

[0109] When device 201A is successfully certified, device management device 101 refers to... Figure 5 The corresponding table Tb1 shown confirms that the access permission corresponding to the device authentication information S1 contained in the first access request information A is access permission K1.

[0110] Then, the device management device 101 determines the storage area R1 of the storage unit 13 corresponding to the access permission K1 by referring to the permission list in the storage unit 13, and creates temporary authentication information Wa for temporarily granting access to the storage area R1.

[0111] When temporary authentication information Wa is created, the permission setting unit 22 sends the temporary authentication information Wa to the device 201A via the communication unit 11 and the external network 151.

[0112] [Second Access Request Information] When device 201 receives temporary authentication information from device management device 101, it sends a second access request to device management device 101, which includes the temporary authentication information and storage area information E representing the storage area (hereinafter also referred to as "requested storage area") that device 201 requests to access.

[0113] Here, device 201 may erroneously request access to a storage region different from the storage region corresponding to the temporary authentication information received from device management device 101. That is, device 201 may erroneously send a second access request message B containing storage region information E representing that other storage region. Therefore, device management device 101 performs a region confirmation process to verify whether the requested storage region represented by the storage region information E contained in the second access request message received from device 201 is the storage region corresponding to the temporary authentication information.

[0114] Figure 11 This is a diagram illustrating an example of a region confirmation process performed by the device management apparatus according to an embodiment of the present disclosure. Figure 11 The diagram illustrates the area confirmation process when the device management device 101 receives the second access request information B from the device 201A.

[0115] Reference Figure 11 When device 201A receives temporary authentication information Wa from device management device 101, it sends a second access request information B, containing temporary authentication information Wa and storage area information E, to device management device 101 via external network 151. Here, the requested storage area represented by storage area information E is assumed to be storage area R1.

[0116] In the device management device 101, when the communication unit 11 receives the second access request information B from the device 201A via the external network 151, it outputs the received second access request information B to the permission setting unit 22.

[0117] When the permission setting unit 22 receives the second access request information B from the communication unit 11, it confirms that the access permission corresponding to the temporary authentication information Wa contained in the second access request information B is the access permission K1.

[0118] Then, the permission setting unit 22 determines the storage area (hereinafter also referred to as "corresponding storage area") corresponding to the access permission K1 by referring to the permission list in the storage unit 13, and confirms whether the determined corresponding storage area is the same as the requested storage area, i.e., storage area R1, represented by the storage area information E contained in the second access request information B.

[0119] Here, it is assumed that the determined corresponding storage area is the same as the storage area R1 represented by the storage area information E contained in the second access request information B. In this case, the permission setting unit 22 sends access permission information to the device 201A via the communication unit 11 and the external network 151, indicating that the device 201A is permitted to access the storage area R1.

[0120] If the determined corresponding storage area is different from the storage area R1 represented by the storage area information E contained in the second access request information B, the permission setting unit 22 sends an access denial message to the device 201A via the communication unit 11 and the external network 151, indicating that the device 201A is not permitted to access the storage area R1.

[0121] [Equipment Management Device] (List Management Department) Refer again Figure 4 For example, in the device management unit 101, the list management unit 23 performs list update processing to update the authentication list L.

[0122] More specifically, for example, when the list management unit 23 receives a connection request information from the judgment unit 21, it reads the authentication list L from the storage unit 13. Then, the list management unit 23 registers the common authentication information set P, the operator authentication information set Q, and the device authentication information contained in the connection request information into the authentication list L.

[0123] (Notification Department) For example, if the common authentication information, operator authentication information, and equipment authentication information received by the communications department 11 are the same as the common authentication information, operator authentication information, and equipment authentication information already received from other equipment 201, the notification department 24 shall perform the prescribed notification processing.

[0124] For example, the storage unit 13 stores a device table that represents the correspondence between device 201 and device authentication information set S.

[0125] For example, when the notification unit 24 receives a connection request message from the communication unit 11, it determines the device 201 corresponding to the device authentication information set S contained in the connection request message by referring to the device table in the storage unit 13.

[0126] Then, the notification unit 24, for example, notifies the user of device 201 of a connection rejection message indicating that the communication connection between device 201 and its own device management device 101 is refused. Specifically, for example, the notification unit 24 sends the connection rejection message to a terminal device (not shown) held by the user via the communication unit 11 and the external network 151.

[0127] Figure 12 This is a diagram illustrating an example of notification processing implemented by the device management apparatus according to embodiments of the present disclosure. Figure 12 The device management device 101 demonstrates the notification processing when it receives a connection request message C2 containing common authentication information P2, operator authentication information Q3, and device authentication information S7 from an illegal device masquerading as device 201G.

[0128] Reference Figure 4 , Figure 6 as well as Figure 12 In the device management device 101, when the communication unit 11 receives the connection request information C2 from the illegal device, it outputs the received connection request information C2 to the judgment unit 21.

[0129] When the judgment unit 21 receives the connection request information C2 from the communication unit 11, it confirms by referring to the correspondence table Tb1 in the storage unit 13 that the group W2 of the common authentication information P2, operator authentication information Q3 and device authentication information S7 contained in the connection request information C2 has been registered in the correspondence table Tb1.

[0130] Then, the determination unit 21 checks whether group W2 is registered in the authentication list L by referring to the authentication list L in the storage unit 13. Here, group W2 is registered in the authentication list L. In this case, the determination unit 21 determines that the sending source device of the connection request information C2 is not a legitimate device. Then, the determination unit 21 outputs the connection request information C2 received from the communication unit 11 to the notification unit 24.

[0131] When the notification unit 24 receives the connection request information C2 from the judgment unit 21, it refers to the device 201G in the device table in the storage unit 13 and determines that the device 201G is the device 201 corresponding to the device authentication information S7 contained in the connection request information C2. Then, the notification unit 24 notifies the user of the device 201G of the connection rejection information.

[0132] [Action Flow] Next, the operation flow of the device management device 101 in the communication system 501 of the present disclosure embodiment will be described using the accompanying drawings.

[0133] Figure 13This is a flowchart illustrating an example of the operation process of the device management device performing permission setting processing according to an embodiment of the present disclosure.

[0134] Reference Figure 13 First, the device management device 101 waits to receive a connection request message from the device 201 (in step ST101, this is "No").

[0135] Then, when the device management device 101 receives a connection request message from the device 201 ("Yes" in step ST101), it checks whether the group W of the common authentication information set P, the operator authentication information set Q and the device authentication information set S contained in the received connection request message has been registered in the correspondence table Tb1 in the storage unit 13 (step ST102).

[0136] Next, if group W has been registered in the corresponding table Tb1 ("Yes" in step ST102), the device management device 101 confirms whether group W has been registered in the authentication list L in the storage unit 13 (step ST103).

[0137] Then, if group W is not registered in the authentication list L ("No" in step ST103), the device management device 101 determines that the sending device of device 201, which is the sending source of the connection request information containing group W, is a legitimate device (step ST104).

[0138] Next, the device management device 101 performs permission setting processing to grant access permissions to the sending source device that is determined to be a legitimate device. For example, as described above, the device management device 101 determines the access permissions corresponding to the device authentication information set S contained in the connection request information received from the sending source device by referring to the correspondence table Tb1 in the storage unit 13 (step ST105).

[0139] Next, the device management device 101 sends permission information indicating the determined access permissions to the sending source device (step ST106).

[0140] Next, the device management device 101 performs a list update process to update the authentication list L. For example, as described above, the device management device 101 registers the group W contained in the connection request information received from the sending source device that is determined to be a legitimate device into the authentication list L (step ST107), and waits for the reception of new connection request information ("No" in step ST101).

[0141] If the group W contained in the connection request information received from device 201 is not registered in the corresponding table Tb1 (No in step ST102), device management device 101 determines that device 201 is not a legitimate device (step ST108) and waits for the reception of new connection request information (No in step ST101).

[0142] If the group W contained in the connection request information received from device 201 is registered in the authentication list L (yes in step ST103), device management device 101 determines that device 201 is not a legitimate device (step ST109), performs connection rejection notification processing to notify the user of device 201 of the refusal to communicate with device 201 (step ST110), and waits for the reception of new connection request information (no in step ST101).

[0143] Figure 14 This is a flowchart illustrating an example of the operation process of a device management device sending access permission information according to an embodiment of this disclosure.

[0144] Reference Figure 14 First, the device management device 101 waits to receive the first access request information from the device 201 (in step ST201, this is "No").

[0145] Then, when the device management device 101 receives the first access request information from the device 201 ("Yes" in step ST201), it uses the separate authentication information contained in the received first access request information to authenticate the device 201 (step ST202).

[0146] Next, if the authentication of device 201 is successful ("Yes" in step ST202), device management device 101 confirms the access permission corresponding to the device authentication information set S contained in the first access request information received from device 201 by referring to the correspondence table Tb1 in storage unit 13 (step ST203).

[0147] Next, the device management device 101 creates and sends temporary authentication information. For example, as described above, the device management device 101 determines the storage area corresponding to the confirmed access permission by referring to the permission list in the storage unit 13. Then, the device management device 101 creates temporary authentication information to temporarily grant access to the determined storage area and sends the created temporary authentication information to the device 201 (step ST204).

[0148] Next, the device management device 101 waits to receive the second access request information from the device 201 (in step ST205, it is "No").

[0149] Then, when the device management device 101 receives the second access request information from the device 201 ("Yes" in step ST205), it confirms the access rights corresponding to the temporary authentication information contained in the received second access request information (step ST206).

[0150] Next, the device management device 101 confirms the corresponding storage area that corresponds to the confirmed access permission by referring to the permission list in the storage unit 13 (step ST207).

[0151] Next, the device management device 101 confirms whether the identified corresponding storage area is the same as the requested storage area represented by the storage area information contained in the second access request information received from the device 201 (step ST208).

[0152] Then, if the corresponding storage area is the same as the requested storage area ("Yes" in step ST208), the device management device 101 sends access permission information indicating permission to access the requested storage area to the device 201 that sent the second access request information (step ST209), and waits for the receipt of a new first access request information ("No" in step ST201).

[0153] If the corresponding storage area is different from the requested storage area (No in step ST208), the device management device 101 sends an access denial message to the device 201 indicating that access to the requested storage area is not permitted (step ST210), and waits for the receipt of a new first access request message (No in step ST201).

[0154] In the event that the authentication of device 201 fails (in step ST202), device management device 101 sends an authentication failure message to device 201 indicating that the authentication failed (in step ST211), and waits for the receipt of a new first access request message (in step ST201, this is "No").

[0155] It should be noted that in the communication system 501 of the embodiments of this disclosure, the device management device 101 is configured to grant access permissions corresponding to multiple groups G to the transmitting source device, but it is not limited to this. The device management device 101 may also be configured to grant the same access permissions as devices 201 belonging to other groups G to the transmitting source device, regardless of group G.

[0156] In the communication system 501 of this disclosure, the device management device 101 is configured to receive a device authentication information set S from the slave device 201, in addition to receiving a common authentication information set P and an operator authentication information set Q. Based on the common authentication information set P, the operator authentication information set Q, and the device authentication information set S, the device management device 101 performs a judgment process to determine whether the sending source device is a legitimate device. However, this is not a limitation. Alternatively, each device 201 may not register the device authentication information set S. In this case, each device 201 sends a connection request message to the device management device 101 containing the common authentication information set P and the operator authentication information set Q, but not the device authentication information set S. The device management device 101 determines whether the sending source device is a legitimate device based on the common authentication information set P and the operator authentication information set Q contained in the connection request message.

[0157] In the communication system 501 of the embodiments of this disclosure, the device management device 101 is configured to determine that the sending source device is not a legitimate device when, during the determination process, the device authentication information set S received from the device 201 is already registered in the authentication list L indicating that the device authentication information set S has been received. However, this is not a limitation. For example, the device management device 101 may also be configured to determine that the sending source device is not a legitimate device when the specified device authentication information set S is received, without using the authentication list L.

[0158] In the communication system 501 of the embodiments of this disclosure, the device management device 101 is configured to perform notification processing when the received common authentication information set P, operator authentication information set Q, and device authentication information set S are the same as the previously received common authentication information set P, operator authentication information set Q, and device authentication information set S, respectively, but it is not limited to this. The device management device 101 may also be configured not to perform notification processing.

[0159] The device management device 101 of the embodiments of this disclosure may provide some or all of its functions through cloud computing. That is, the device management device 101 of the embodiments of this disclosure may be a cloud server composed of multiple servers.

[0160] [Variation Example] The device management device 101 may also be configured as follows: upon receiving a connection request information from the device 201A, it performs the following processing as a judgment process and permission setting process.

[0161] Figure 15 This is a diagram illustrating an example of a correspondence table stored in a variant of the device management apparatus according to an embodiment of the present disclosure.

[0162] Reference Figure 15In a modified example, storage unit 13 stores a corresponding table Tb2 to replace it. Figure 5 The corresponding table Tb1 is shown. The corresponding table Tb2 shows the correspondence E1 between the common authentication information set P, the operator authentication information set Q, and the device authentication information set S, and the correspondence E2 between the device authentication information set S and the access permissions.

[0163] exist Figure 15 In the corresponding table Tb2 shown, with Figure 5 The correspondence E2 differs from that in the correspondence table Tb1 shown. Details about the correspondence E2 in the correspondence table Tb2 will be described later.

[0164] Figure 16 This is a diagram illustrating an example of a judgment process performed on a variant of the device management apparatus according to an embodiment of the present disclosure. Figure 16 The diagram illustrates the decision-making process of the device management device 101 when it receives connection request information C1 from device 201A.

[0165] Reference Figure 16 In a modified example, the judgment unit 21 in the device management device 101 determines whether the sending source device is a legitimate device based on at least the common authentication information set P and the operator authentication information set Q from the common authentication information set P, the operator authentication information set Q, and the device authentication information set S received by the communication unit 11.

[0166] exist Figure 16 In the example shown, the judgment unit 21 does not use the device authentication information S1 contained in the connection request information C1 from the device 201A, but instead judges whether the device 201A is a legitimate device based on the common authentication information P1 and the operator authentication information Q1 contained in the connection request information C1.

[0167] Specifically, for example, when the determination unit 21 receives the connection request information C1 from the device 201A via the communication unit 11, it reads the correspondence table Tb2 in the storage unit 13. Then, the determination unit 21 confirms whether the group W20 of the common authentication information P1 and the operator authentication information Q1 contained in the connection request information C1 has been registered in the correspondence table Tb2.

[0168] exist Figure 15 In the corresponding table Tb2 shown, group W20 is registered. In this case, the determination unit 21 reads the authentication list L from the storage unit 13. Then, the determination unit 21 confirms whether group W20 has been registered in the authentication list L.

[0169] exist Figure 6In the authentication list L shown, group W20 is not registered. In this case, the determination unit 21 determines that device 201A is a legitimate device. Then, the determination unit 21 outputs connection request information C1 to the permission setting unit 22 and the list management unit 23.

[0170] It should be noted that, in Figure 16 In the example shown, the judgment unit 21 can also be configured as follows: in addition to the common authentication information P1 and operator authentication information Q1 contained in the connection request information C1, it also judges whether the device 201A is a legitimate device based on the device authentication information S1.

[0171] Figure 17 This is a diagram illustrating an example of permission setting processing implemented for a variant of the device management apparatus according to embodiments of the present disclosure. Figure 17 This illustrates that the device management device 101 receives data from the device 201A. Figure 16 The connection request information C1 shown shows the permission setting process when device 201A is determined to be a legitimate device.

[0172] Reference Figure 15 and Figure 17 For example, the permission setting unit 22 performs permission setting processing on each sending source device based on at least the device authentication information set S from the operator authentication information set Q and the device authentication information set S received by the communication unit 11. Hereinafter, an example will be described where the permission setting unit 22 performs permission setting processing using the device authentication information set S instead of the operator authentication information set Q.

[0173] More specifically, for example, the permission setting unit 22 grants different access permissions to multiple devices 201 belonging to the same group G.

[0174] For example, in Figure 15 In the correspondence table Tb2 shown, device authentication information S1 and S2 correspond to access permissions K2 and K1, respectively. Device authentication information S3, S4, and S5 correspond to access permissions K2, K1, and K3, respectively. Device authentication information S6 and S7 correspond to access permissions K3 and K1, respectively. Device authentication information S8, S9, and S10 correspond to access permissions K4, K1, and K2, respectively. Device authentication information S11 and S12 correspond to access permissions K5 and K3, respectively.

[0175] When the permission setting unit 22 receives the connection request information C1 from the judgment unit 21, it determines the access permission K2 to be the access permission corresponding to the device authentication information S1 contained in the connection request information C1 by referring to the correspondence table Tb2 in the storage unit 13.

[0176] Then, the permission setting unit 22 sends permission information indicating the determined access permission K2 to the device 201A via the external network 151.

[0177] It should be noted that there may be duplicate device authentication information sets S among the manufacturers and operators of device 201. In this case, the permission setting unit 22 in the device management device 101 performs permission setting processing for each sending source device based on the operator authentication information set Q and device authentication information set S received by the communication unit 11.

[0178] It should be considered that the above embodiments are exemplary in all respects and not restrictive. The scope of the invention is not shown by the foregoing description but by the claims, and is intended to include all modifications within the meaning and scope equivalent to the claims.

[0179] Each process (function) in the above-described embodiments is implemented by a processing circuit including one or more processors. Alternatively, the processing circuit may be composed not only of the one or more processors, but also of an integrated circuit combining one or more memories, various analog circuits, and various digital circuits. The one or more memories store programs (instructions) that cause the one or more processors to execute the above processes. The one or more processors may execute the above processes according to the programs read from the one or more memories, or they may execute the above processes according to logic circuits pre-designed to execute the above processes. The processors may be various processors suitable for computer control, such as CPUs (Central Processing Units), GPUs (Graphics Processing Units), DSPs (Digital Signal Processors), FPGAs (Field Programmable Gate Arrays), and ASICs (Application Specific Integrated Circuits). It should be noted that multiple physically separate processors may also cooperate to execute the above processes. For example, the processors of each of several physically separate computers may collaborate to execute the aforementioned processes via networks such as LANs (Local Area Networks), WANs (Wide Area Networks), and the Internet. The programs may be installed in the memory from external server devices via the aforementioned network, or they may be stored on recording media such as CD-ROMs (Compact Disc Read Only Memory), DVD-ROMs (Digital Versatile Disk Read Only Memory), and semiconductor memory, and installed from those recording media into the memory.

[0180] The above description includes the following features.

[0181] [Appendix 1] A device management apparatus is used in a system with multiple groups, each group comprising multiple devices. The device management apparatus includes: a communication unit that receives, from a source device (which is a source of both first and second authentication information) common to two or more groups; a determination unit that determines whether the source device is a legitimate device based on the first and second authentication information received by the communication unit; and a permission setting unit that, if the determination unit determines that the source device is a legitimate device, performs permission setting processing to grant the source device permission to operate on specified resources. The groups are set up for each manufacturer or operator of the devices, or for each department of the manufacturers or operators.

[0182] [Appendix 2] A device management apparatus is used in a system with multiple groups, each group comprising multiple devices. The device management apparatus includes a processing circuit configured to: receive, from a source device that is a source of first authentication information shared by two or more groups and second authentication information specific to each of the multiple groups; determine, based on the received first authentication information and second authentication information, whether the source device is a legitimate device; and, if the source device is determined to be a legitimate device, perform permission setting processing to grant the source device permission to operate on specified resources.

[0183] Explanation of reference numerals in the attached figures 11: Communication Department; 12: Processing Department; 13: Storage Department; 21: Judgment Department; 22: Permission Setting Department; 23: List Management Department; 24: Notification Department; 101: Device Management Device; 151: External Network; 201: Device; 501: Communication System; G: Group; L: Authentication List; P: Common Authentication Information Set; P1, P2, P3: Common Authentication Information; Q: Operator Authentication Information Set; Q1, Q2, Q3, Q4, Q5: Operator Authentication Information; S: Device Authentication Information Set; S1, S2, S3, S4, S5, S6, S7, S8, S9, S10, S11, S12: Device Authentication Information; Tb1, Tb2: Correspondence Table.

Claims

1. A device management apparatus for use in a system with multiple groups, said groups comprising multiple devices, wherein, The device management unit includes: The communication unit receives, from the sending source device of the device that serves as the sending source of the first authentication information and the second authentication information that is common to two or more of the groups and inherent to each of the multiple groups; The judgment unit determines whether the sending source device is a legitimate device based on the first authentication information and the second authentication information received by the communication unit. as well as The permission setting unit, when the determination unit determines that the sending source device is a legitimate device, performs permission setting processing to grant the sending source device permission to operate on the specified resources.

2. The equipment management device according to claim 1, wherein, The permission setting unit grants the permissions corresponding to the multiple groups to the sending source device during the permission setting process.

3. The equipment management device according to claim 1 or 2, wherein, The communication unit also receives from the device the inherent third authentication information of each of the sending source devices in the group. The judgment unit performs a judgment process to determine whether the sending source device is a legitimate device based on the first authentication information, the second authentication information, and the third authentication information received by the communication unit.

4. The equipment management device according to claim 3, wherein, The determination unit also acquires an authentication list that represents the third authentication information received by the communication unit in correspondence with the plurality of groups respectively. In the determination process, if the third authentication information received by the communication unit is already registered in the acquired authentication list, the determination unit determines that the sending source device is not a legitimate device.

5. The equipment management device according to claim 3 or 4, wherein, The device management device further includes a notification unit, wherein the notification unit performs a prescribed notification process when the first authentication information, the second authentication information, and the third authentication information received by the communication unit are the same as the first authentication information, the second authentication information, and the third authentication information that the communication unit has received from other devices.

6. The equipment management device according to claim 1 or 2, wherein, The communication unit also receives third authentication information inherent to each of the sending source devices in the group. The determination unit determines whether the sending source device is a legitimate device based on at least the first authentication information and the second authentication information received by the communication unit, as well as the third authentication information. The permission setting unit performs the permission setting process for each of the sending source devices based on at least the third authentication information.

7. A device management method, which is a device management method for use in a system with multiple groups, wherein, The device management method includes the following steps: The device receiving the first authentication information common to two or more of the groups and the second authentication information inherent to each of the multiple groups is received from the sending source device of the device that serves as the source of sending the first authentication information and the second authentication information. Based on the received first authentication information and second authentication information, a determination is made as to whether the sending source device is a legitimate device; and If the sending source device is determined to be a legitimate device, permission setting processing is performed to grant the sending source device the permission to operate on the specified resources.

8. A device management program used in a device management device used in a system having multiple groups, the groups comprising multiple devices, wherein, The device management program enables the computer to function as a communication unit, a decision-making unit, and a permission setting unit. The communication unit receives, from the sending device that serves as the source of the first authentication information and the second authentication information, common to two or more of the groups and unique to each of the multiple groups, the first authentication information shared by the sending device and the second authentication information. The determination unit determines whether the sending source device is a legitimate device based on the first authentication information and the second authentication information received by the communication unit. When the determination unit determines that the sending source device is a legitimate device, the permission setting unit performs permission setting processing to grant the sending source device the permission to operate on the specified resources.

Images