Remote operation method

Abstract

To provide a remote operation method capable of achieving safer remote operation.SOLUTION: A remote operation method includes recording authentication information held by a line connection apparatus on a remote operation terminal when the remote operation terminal exists within a limited communication area of the line connection apparatus. When receiving a remote operation for a remote operation target device from the remote operation terminal to be authenticated, the line connection apparatus determines whether authentication is possible depending on whether the remote operation terminal has recorded the authentication information.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a remote control method. [Background technology]

[0002] With the development of the Internet, systems and services using remote control are increasing. Remote control allows a terminal device located in a physically distant location to operate a remote control target device located in a remote location.

[0003] Patent document 1 discloses a remote control system which includes a client terminal used by a user, a support conversation operator terminal, and a technical operator terminal, and which, when remote control is performed by the technical operator terminal, sets a range within which the client terminal will accept remote control from the technical operator terminal depending on the content of the request from the user, thereby reducing malicious operations by technical operators. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2016-213753 A Summary of the Invention [Problem to be solved by the invention]

[0005] In a remote control system, it is common to log in to the system using a user ID and password. However, with the spread of the Internet, systems and services that use remote control can be used anytime and anywhere, which improves convenience, but at the same time, it makes it difficult or expensive to take measures against hacking. For this reason, various security problems may occur, such as unexpected behavior of the remotely controlled device or the theft of internal data, if an attacker performs unauthorized remote control.

[0006] Furthermore, with the advancement of computer technology, it is now widely known that password attacks can be successful in a very short time. For example, an article has been published stating that a six-digit password can be broken in less than one second. Biometric authentication has once again been put in the spotlight as one of the concrete defense measures against password attacks. However, it is a well-known fact that not only can it be applied to remotely operable terminal devices in remote control, but also that even if biometric authentication can ensure that the correct terminal device is being used and that the person authorized to operate it is operating it, it cannot protect against data tampering on the communication path or man-in-the-middle attacks.

[0007] The present invention has been made in consideration of the above circumstances, and has an object to provide a remote control method that can realize safer remote control. [Means for solving the problem]

[0008] The present application includes multiple means for solving the above problems. One example is a remote control method in which, when a remote control terminal is present within a limited communication area of ​​a line connection device, authentication information held by the line connection device is recorded in the remote control terminal, and when the line connection device accepts remote control of a remote control target device from the remote control terminal to be authenticated, the line connection device determines whether or not authentication is possible depending on whether the remote control terminal has recorded the authentication information. Effect of the Invention

[0009] According to the present invention, safer remote operation can be achieved. [Brief description of the drawings]

[0010] [Figure 1] 1 is a diagram illustrating an example of a configuration of a remote control system according to an embodiment of the present invention. [Diagram 2] FIG. 2 illustrates an example of a configuration of a line connection device. [Diagram 3] FIG. 2 illustrates an example of a configuration of a remote control terminal. [Figure 4]FIG. 11 is a diagram illustrating an example of registration of authentication information in a remote control terminal. [Diagram 5] FIG. 11 is a flow chart showing a first example of a process for registering authentication information. [Figure 6] FIG. 11 is a flow chart showing a second example of a process for registering authentication information. [Figure 7] FIG. 11 is a diagram illustrating a first example of a determination as to whether or not a remote control terminal can be authenticated. [Figure 8] FIG. 11 is a diagram illustrating a second example of a determination as to whether or not a remote control terminal can be authenticated. [Figure 9] FIG. 11 is a flow diagram of a process for establishing a secret communication path using a common key. [Figure 10] 11 is a flow chart showing a process of determining whether or not a line connection device is authorized. FIG. [Figure 11] FIG. 11 is a diagram illustrating an example of an authentication condition. [Figure 12] FIG. 11 is a diagram illustrating a third example of a determination as to whether or not a remote control terminal can be authenticated. [Figure 13] FIG. 4 is a diagram illustrating an example of a database for managing remote control terminals. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an embodiment of the present invention will be described. FIG. 1 is a diagram showing an example of the configuration of a remote control system according to the present embodiment. The remote control system includes a line connection device 50 and one or more control devices 30 as remote control target devices. The remote control terminal 10 is a terminal for remotely controlling the control device 30 via the line connection device 50. The remote control terminal 10 is, for example, a communication terminal such as a smartphone, tablet, or personal computer carried by a user, and one or more remote control terminals 10 may exist for the line connection device 50. The management server 100 can manage remote operations by recording a remote operation log by the remote control terminal 10, the processing contents of the line connection device 50, and the like. The line connection device 50, the remote control terminal 10, and the management server 100 are connected via a communication network such as the Internet.

[0012] In the remote control system of this embodiment, information collected by the control device 30 can be transmitted to the remote control terminal 10 through the line connection device 50. When a user who operates the remote control terminal 10 needs to remotely control the control device 30, only the remote control terminal 10 that is permitted to remotely control the control device 30 can remotely control the control device 30.

[0013] The line connection device 50 includes, for example, a router (including not only fixed routers but also managed mobile routers), which is a type of end connection device, a gateway device, a terminal device, and the like. The line connection device 50 may be any device having a line connection function, and may be a device (having a line connection function) that is divided into the same network as the line connection device 50 and subnetted. The location where the line connection device 50 is installed is usually managed by a line carrier or a service provider. A line carrier is a business that provides a line (such as a telephone line or optical fiber) for a user to connect to the Internet. A service provider includes a business that provides various services on the Internet.

[0014] The installation location of the line connection device 50 may be managed by the line carrier, or may be managed by a service provider or a company that a resident has applied to register with the service provider. That is, the line carrier or service provider delivers the line connection device 50 to an individual's home, a company's office, a factory, or the like, based on a contract with a subscriber such as an individual or a company. The delivered line connection device 50 is (fixedly) installed in the subscriber's home, office, factory, or the like, which is an installation location managed by the line carrier or service provider. The line connection device 50 is installed at a location with a specified address. In this way, the line connection device 50 can function as a "thing" that can determine user information specified by the contents of the contract, including the user's name and address.

[0015] In this specification, the line connection device 50 means not only one line connection device 50 but also a group of line connection devices. In other words, it includes not only a group of devices in which the line connection device 50 is divided into a plurality of devices, but also line connectors connected under the line connection device 50, such as a fixed router, a mobile router, a gateway device, and a terminal device. The line connection device 50 may be mounted on a moving object such as a vehicle and have a communication function of relaying between an in-vehicle communication network and an outside-vehicle communication network.

[0016] The control device 30 is connected to the line connection device 50. The control device 30 and the line connection device 50 are in a state where they can communicate with each other using a private IP address or the like by direct connection, wired communication, wireless communication, or other communication technology. The limited communication area S of the line connection device 50 expresses a limited communication area in the sense of distinguishing it from a state where a communication network 1 such as the Internet can communicate without restrictions in the communication area from anywhere in the world. The control device 30 includes devices and equipment operated by remote control in all industries such as smart homes, smart factories, smart farms, and medical sites in order to reduce manpower, reduce labor, respond in real time, or improve safety. The control device 30 may be, for example, a camera, a sensor, a robot, or an IoT device used in a company (such as an office or factory), or may be a home appliance used at home.

[0017] 2 is a diagram showing an example of the configuration of line connection device 50. Line connection device 50 includes a line processing unit 51, an authentication processing unit 52, a secret communication processing unit 53, an authentication information recording processing unit 54, a CPU 55, a memory 56, and a network communication unit 57. Authentication processing unit 52 includes authentication information generation processing unit 521, and authentication feasibility determination processing unit 522. Secret communication processing unit 53 includes distributed data generation processing unit 531, and shared key generation processing unit 532. Note that the shared data generation processing unit 531 and the shared key generation processing unit 532 included in the secret communication processing unit 53 are not essential components.

[0018] The CPU 55 executes applications deployed in the memory 56 to control the entire line connection device 50. The line processing unit 51 executes route selection processing such as routing. The network communication unit 57 executes a communication function with the control device 30, and a communication function with the remote control terminal 10 and the management server 100.

[0019] When the control device 30 and the remote control terminal 10 are implemented so as to be able to directly exchange data with each other via a network, the line connector 50 is included in the control device 30. In this case, the control device 30 is configured with one or more CPUs. The line connection device 50 and the control device 30 may be integrated into one device, but the following description will be given assuming that the line connection device 50 and the control device 30 are configured as separate devices.

[0020] The authentication processing unit 52 authenticates the remote control terminal 10 when the remote control terminal 10 remotely controls the control device 30. If the authentication is successful, the remote control is permitted, and if the authentication is not successful, the remote control is not permitted.

[0021] The authentication information recording processing unit 54 has a function as a recording processing unit, and can record the authentication information distributed to the remote control terminal 10 when the remote control terminal 10 is present within the limited communication area S of the line connection device 50. The authentication information includes secret information, confidential information, or information obtained by processing such information. The details of recording the authentication information will be described later.

[0022] The authentication information generation processing unit 521 can generate authentication information by performing a predetermined calculation process on required information (for example, the unique information of the line connection device 50 or the unique information of the control device 30). The authentication information is recorded in the remote control terminal 10 under the condition that the remote control terminal 10 is located within the limited communication area S of the line connection device 50. The recorded authentication information may be any of authentication information previously stored in the memory 56 of the line connection device 50, authentication information generated by the authentication information generation processing unit 521, authentication information acquired from the remote control terminal 10 located within the communication area S, information recorded in a SIM or the like that can be attached to the device, or a random number value generated by each device.

[0023] The authentication possibility determination processing unit 522 has the function of a determination unit, and when it receives remote control of the control device 30 from the remote control terminal 10 to be authenticated, it can use a predetermined algorithm to determine whether or not authentication is possible depending on whether or not the remote control terminal 10 has recorded or stored authentication information.

[0024] The secret communication processing unit 53 can open a secret communication path between the line connection device 50 and the remote control terminal 10. Two examples of the secret communication path are given below, but other methods are also possible, and both of them can be used. The first method is a method described in Japanese Patent No. 6863514, in which a common key is generated using secret information to encrypt and decrypt. The second method is a method in which communication is performed using a private IP address when the line connection device 50 is operated using a private IP address instead of a global IP address. First, the first method will be described.

[0025] The shared data generation processing unit 531 encrypts the shared information shared in advance using a predetermined encryption method to generate a plurality of pieces of shared information. Note that the remote control terminal 10 also generates a plurality of pieces of shared information using a similar function.

[0026] The shared key generation processing unit 532 generates a shared key by using some of the multiple pieces of shared information generated by the shared data generation processing unit 531. The remote control terminal 10 also generates a shared key by using a similar function. After this, secret communication between the line connection device 50 and the remote control terminal 10 can be realized by using the shared key. This can improve the security of communication between the remote control terminal 10 and the line connection device 50. The first technique will be described in detail later.

[0027] The second method is to use, for example, an Internet VPN (Virtual Private Network). The communication network management server (not shown) manages pairs of global IP addresses and private IP addresses of the remote control terminal 10 and the line connection device 50 that are the subject of management, and therefore can build an Internet VPN between the remote control terminal 10 and the line connection device 50. Alternatively, the mechanism described in PCT / JP2017 / 006131 filed by the applicant may be used. For example, the line connection device 50 and the remote control terminal 10 exist in different IP address spaces, such as indoors and outdoors, but can perform P2P communication using IP addresses managed by the communication network management server. This improves the security of communication between the remote control terminal 10 and the line connection device 50, and the remote control terminal 10 can access the line connection device 50 with the private IP address via the Internet using the private IP address.

[0028] 3 is a diagram showing an example of the configuration of the remote control terminal 10. The remote control terminal 10 includes a control unit 11 that controls the entire terminal, a communication unit 12, a storage unit 13, a display panel 14, an operation unit 15, a remote control processing unit 16, and a secret communication processing unit 17. The control unit 11 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), etc. It can be composed of:

[0029] The communication unit 12 is configured with a required communication module and the like, and provides a communication function between the line connection device 50 and the management server 100 via the communication network 1.

[0030] The storage unit 13 can be configured with a semiconductor memory or the like and can store required information. The storage unit 13 can store a remote control application (computer program) that runs on the remote control terminal 10 and execute the remote control application in the control unit 11.

[0031] The display panel 14 can be configured with a liquid crystal panel, an organic EL (Electro Luminescence) display, or the like.

[0032] The operation unit 15 can be configured, for example, by a touch panel incorporated in the display panel 14, and can perform predetermined operations performed by the user on the display panel 14. The operation unit 15 can also perform operations on a keyboard displayed on the display panel 14. The operation unit 15 may also be a hardware keyboard, a mouse, or the like.

[0033] The remote operation processing unit 16 performs remote operation on the control device 30 via the line connection device 50. The remote operation processing unit 16 can generate a command for the control device 30 based on an operation accepted by the operation unit 15, for example, and transmit the generated command to the control device 30 via the line connection device 50.

[0034] The secret communication processing unit 17 has the same function as the secret communication processing unit 53 of the line connection device 50, and therefore a description thereof will be omitted.

[0035] Next, the registration (recording) of authentication information in the remote control terminal 10 will be described.

[0036] FIG. 4 is a diagram showing an example of registration of authentication information in the remote control terminal 10. In order to connect the remote control terminal 10 to the line connection device 50, the remote control terminal 10 is brought into a limited communication area S of the line connection device 50 (for example, within the communication range of Wi-Fi (registered trademark), Bluetooth (registered trademark), or local 5G) and, in the case of Wi-Fi, it is necessary to input the SSID (Service Set Identifier) ​​and password of the line connection device 50 to the remote control terminal 10. If the pair of the SSID and password is correct, the password associated with the SSID is recorded and registered in the remote control terminal 10. This password can also be used as authentication information. If the authentication information has already been recorded, the line is automatically connected between the line connection device 50 and the remote control terminal 10. The remote control terminal 10 can have multiple SSIDs, and it is also possible to select and use one.

[0037] In the above state, the line connection device 50 generates authentication information, and the remote control terminal 10 records the generated authentication information through the above line. As an example of generating authentication information, the authentication information may be information obtained as a result of calculating arbitrary information (which may include a password) using a required algorithm based on information such as date information and time when communication was established within the limited communication area S, the serial number of the line connection device 50, GPS, and unique information for each CPU held by the CPU. Also, the authentication information may be information obtained by hash calculation from arbitrary information (which may include a password). Note that the method of generating authentication information is not limited to these, and other methods (use of a SIM, etc.) may be used.

[0038] The above-mentioned configuration ensures that, in the communications required for remote operation, authentication information can be registered in the remote operation terminal 10 only if the remote operation terminal 10 used for remote operation actually exists or has existed within the limited communication area S of the line connection device 50. In this manner, in this embodiment, the authentication avoidance determination processing unit 522 of the line connection device 50 can restrict the determination as to whether authentication information of a remote operation terminal 10 that can perform remote operation is stored or recorded, thereby preventing a situation in which remote operation can be performed from any terminal. A terminal that can be remotely operated (remote operation terminal 10) is a terminal that can be remotely operated by the line connection device 50. This means that the device must be present within the limited communication area S at a certain time and must record or possess authentication information. Of course, remote operation is possible from within the communication area S, but the general method of use is to operate the device remotely from outside the communication area S.

[0039] Remote operation by remote login or the like prepared in a PC (personal computer) can be performed with only the device information, user ID, and password of the connection destination. Although the method of performing remote operation from anywhere via the Internet is convenient, it has the disadvantage that since attack points can exist anywhere, it is difficult to take measures against hacking and it is expensive to improve security. However, in this embodiment, at the stage of registering a remote operation terminal that is permitted to be remotely operated, authentication information is received from the line connection device 50 of the connection destination, and the area in which the authentication information can be received is limited to a "limited communication area S". This makes it possible to prevent authentication information from being registered without the involvement of an administrator who can manage / understand / limit entry to the communication area S. In addition, since authentication information is registered (stored / recorded) in the remote operation terminal 10 by entering the limited communication area S of the line connection device 50 installed in a managed place, it is possible to prevent registration of a terminal whose possession is unknown. As a result, distribution of authentication tokens (USB tokens, IC cards, etc.) used in the conventional method and their maintenance (not only updating the authentication token but also measures against sub-lending and losing the token) are no longer necessary, and remote operation can be performed more safely.

[0040] 5 is a flow diagram showing a first example of the registration process of the authentication information. When the remote control terminal 10 is present within the limited communication area S of the line connection device 50, the remote control terminal 10 accepts the SSID and password of the line connection device 50 in response to a user's operation (S1), and transmits the accepted SSID and password to the line connection device 50 (S2). The line connection device 50 authenticates whether the transmitted SSID and password are correct (S3), and if the authentication is successful, transmits the authentication information to the remote control terminal 10 (S4). If the authentication is not successful, the process ends without transmitting the authentication information to the remote control terminal 10. The remote control terminal 10 receives the authentication information and records it in the storage unit 13 (S5). As a result, the authentication information is registered in the remote control terminal 10.

[0041] FIG. 6 is a flow diagram showing a second example of the registration process of the authentication information. When the remote control terminal 10 is present within the limited communication area S of the line connection device 50, the remote control terminal 10 accepts the SSID and password of the line connection device 50 in response to a user's operation (S11), and transmits the accepted SSID and password to the line connection device 50 (S12). The line connection device 50 authenticates whether the transmitted SSID and password are correct (S13), and generates authentication information if the authentication is successful (S14). If the authentication is not successful, the process ends without generating authentication information. The line connection device 50 transmits the generated authentication information to the remote control terminal 10 (S15). The remote control terminal 10 receives the authentication information and records it in the storage unit 13 (S16). As a result, the authentication information is registered in the remote control terminal 10.

[0042] The remote control terminal 10 may encrypt the authentication information using unique information of the remote control terminal 10 and store the encrypted information in the storage unit 13 .

[0043] Fig. 7 is a diagram showing a first example of authentication decision of the remote control terminal 10. Assume that remote control terminals A and B communicate for remote control via the communication network 1. Authentication information is registered in remote control terminal A by the method illustrated in Fig. 4 (authentication information present). On the other hand, authentication information is not registered in remote control terminal B (authentication information absent). The line connection device 50 is operated with a global IP address, and when it receives remote control from remote control terminal A, it decides that authentication is possible because authentication information is registered in remote control terminal A. Also, when it receives remote control from remote control terminal B, it decides that authentication is not possible because authentication information is not registered in remote control terminal B.

[0044] As described above, when the line connection device 50 receives a remote control from a remote control terminal 10 that is outside the limited communication area S, the line connection device 50 can determine whether or not authentication is possible depending on whether or not the remote control terminal 10 has recorded authentication information. Note that even if the remote control terminal 10 is present within the limited communication area S, the remote control terminal 10 stores or records authentication information, so it is possible to determine whether or not authentication is possible.

[0045] In this manner, in this embodiment, the remote control terminals 10 that can be remotely controlled can be limited to those with registered authentication information, and a situation in which remote control can be performed from any remote control terminal in a remote location can be prevented. In other words, malicious remote control attacks (e.g., man-in-the-middle attacks) can be easily prevented. This is because such attackers cannot invade the limited communication area S carrying a remote control terminal 10.

[0046] Fig. 8 is a diagram showing a second example of the judgment of whether or not the remote control terminal 10 can be authenticated. The difference from the first example shown in Fig. 7 is that a secret communication path 2 is opened between the line connection device 50 and the remote control terminal 10. The secret communication path 2 can be opened before the remote control terminal 10 transmits an authentication request to the line connection device 50, but the secret communication path 2 may be opened at any appropriate time.

[0047] FIG. 9 is a flow diagram of a secret communication path establishment process using a common key. The process in the remote control terminal 10 is performed by the secret communication processing unit 17, and the process in the line connection device 50 is performed by the secret communication processing unit 53. The remote control terminal 10 stores the shared information Q in advance (S21), and the line connection device 50 also stores the shared information Q (S22). An example of the shared information Q may be information generated by a predetermined calculation algorithm from unique information such as the serial number, model number, and manufacturing date of the line connection device 50. As a method for sharing the shared information between the remote control terminal 10 and the line connection device 50, for example, when registering authentication information in the remote control terminal 10 within the limited communication area S, the shared information may also be recorded. Another example of the shared information Q may be a result obtained by using a predetermined algorithm from the authentication information itself exchanged within the limited communication area S. As a further example, the shared information Q may be information generated by a predetermined calculation algorithm from unique information such as the serial number, model number, and manufacturing date of the remote control terminal 10. This shared information Q is exchanged within a limited communication area S.

[0048] The remote control terminal 10 transmits a key generation request to the line connection device 50 (S23). The line connection device 50 generates a random number R (S24) and transmits the generated random number R to the remote control terminal 10 to share the random number R (S25). The remote control terminal 10 generates the shared information Q1 and Q2 using a predetermined encryption method with the random number R as an encryption key (S26), and the line connection device 50 generates the shared information Q1 and Q2 using a predetermined encryption method with the random number R as an encryption key (S27). The shared information Q1 and Q2 may be the shared information Q encrypted with an encryption key (random number R) and the encrypted data divided (fragmented) according to a predetermined division rule, or the shared information Q encrypted with the random number R and distributed (distributed encrypted data and key information encrypted and distributed and mixed in the divided data). The number of shares is not limited to two, but may be three or more.

[0049] The remote control terminal 10 generates a common key from the shared information Q1, which is a part of the plurality of pieces of shared information Q1 and Q2 generated (S28), and the line connection device 50 also generates a common key from the shared information Q1, which is a part of the plurality of pieces of shared information Q1 and Q2 generated (S29). The remote control terminal 10 and the line connection device 50 open a secret communication path by encrypting and decrypting communication contents with the generated common key (S30). This makes it possible to improve the security of communication between the remote control terminal 10 and the line connection device 50. At the same time, it is also important that the common key generated by the line connection device 50 and the remote control terminal 10 is the same, which means that authentication has also been performed.

[0050] 10 is a flow diagram showing the process of determining whether or not to approve the authorization by the line connection device 50. The process in the line connection device 50 is mainly performed by the authentication processing unit 52, and therefore, hereinafter, the subject of the process will be described as the authentication processing unit 52. It is also assumed that a secret communication path is established between the remote control terminal 10 and the line connection device 50. The authentication processing unit 52 receives an authentication request from the remote control terminal 10 (S41). The authentication processing unit 52 determines whether or not to approve the authentication based on the authentication information (S42). Specifically, the authentication can be determined based on whether or not the authentication information is registered in the remote control terminal 10.

[0051] The authentication processing unit 52 judges whether or not to permit authentication based on authentication conditions related to the use history of the remote control terminal 10 (S43). That is, the line connection device 50 can judge whether or not to permit authentication based on authentication conditions related to the use history of the remote control terminal 10. The method of setting the authentication conditions in the line connection device 50 may be, for example, by a user or an administrator operating the remote control terminal 10, or by using a management terminal (not shown) used by the administrator. Details of the authentication conditions related to the use history will be described later.

[0052] If it is determined that authentication should not be permitted based on the authentication conditions related to the usage history (NO in S43), the authentication processing unit 52 determines that authentication is permitted because the authentication information has been registered (S49), starts remote operation (S50), and ends the processing.

[0053] When it is determined that the authentication is to be performed based on the authentication condition related to the usage history (YES in S43), the authentication processing unit 52 determines whether the time until the remote operation is satisfied as the authentication condition (S44). That is, the authentication condition can include the time from the time when the authentication information is registered (recorded) in the remote control terminal 10 to the first remote operation of the remote control terminal 10. The time until the first remote operation can be set appropriately, and can be adjusted according to the security level required by the usage environment or the distance between the line connector 50 and the remote control terminal 10, such as 1 hour, 2 hours, 6 hours, or 12 hours. For example, when the time from the time when the authentication information is registered (recorded) in the remote control terminal 10 to the first remote operation of the remote control terminal 10 is set to 6 hours, if the first remote operation of the remote control terminal 10 exceeds 6 hours, it can be determined that the authentication is not possible. In addition, the time until the first remote operation may be dynamically changed according to the security level of the control device 30 to be remotely operated. For example, a time until the first remote control can be set for each of multiple control devices 30, and the remote control terminal 10 can selectively use the set time depending on which control device 30 is to be remotely controlled.

[0054] When it is determined that the time until remote operation is satisfied (YES in S44), the authentication processing unit 52 determines whether the presence frequency of the remote control terminal 10 in the limited communication area S is satisfied (S45). That is, the authentication condition may include the presence frequency of the remote control terminal 10 in the limited communication area S. The presence frequency may be an index of how long a period of time (for example, one week, one month, etc.) the remote control terminal 10 was in the communication area S and how many times the remote control terminal 10 was in the communication area S during the predetermined period of time (for example, one week, one month, etc.), or may be an index of how many times the remote control terminal 10 entered and left the communication area S during the predetermined period (entry frequency, exit frequency, etc.). The presence frequency can be set appropriately, for example, seven times a week, once a month, etc. For example, when the presence frequency in the communication area S is set to seven times a week, if the presence frequency of the remote control terminal 10 is three times a week, it can be determined that the remote control terminal 10 is not authenticated. In addition, the presence frequency can be set according to the level of security required by the usage environment.

[0055] If it is determined that the presence frequency in the limited communication area S is satisfied (YES in S45), the authentication processing unit 52 determines whether or not an authentication condition has been selected (S46). That is, the line connection device 50 accepts the selection of one authentication condition from among a plurality of authentication conditions, and selects the selected authentication condition. Based on this, it is possible to determine whether authentication is possible. The authentication condition is selected by, for example, selecting whether the above-mentioned frequency of presence is seven times a week or once a month. When an administrator manages multiple remote control terminals 10 and each remote control terminal 10 is used by a different user (for example, a family member or a department staff member), the authentication condition can be selected according to the user's attributes, location, etc.

[0056] If no authentication condition is selected (NO in S46), the authentication processing unit 52 performs the process of step S49. If an authentication condition is selected (YES in S46), the authentication processing unit 52 judges whether or not the selected authentication condition is satisfied (S47). If the selected authentication condition is satisfied (YES in S47), the authentication processing unit 52 notifies the outside that a remote operation has been performed (S48), and performs the process of step S49. That is, when the line connection device 50 accepts a remote operation from the remote operation terminal 10, it can notify the outside that the remote operation has been accepted, in accordance with the authentication condition for the remote operation terminal 10.

[0057] For example, if an administrator selects to change the frequency of presence within the communication area S as an authentication condition of a remote control terminal 10 of a certain user from "seven times per week" to "once per month," when the remote control terminal 10 is present within the communication area S at least once per month, a notification can be sent to the terminal device of the administrator by e-mail or the like. This enables the administrator to grasp the state of remote control by the remote control terminal 10 owned by a certain user.

[0058] If the time until remote operation is not satisfied (NO in S44), or if the presence frequency within the limited communication area S is not satisfied (NO in S45), the authentication processing unit 52 determines that authentication is not possible (S51), and ends the process.

[0059] In the above example, satisfaction of the authentication conditions is determined in steps S44 and S45, but only one of the processes in steps S44 and S45 may be performed.

[0060] Fig. 11 is a diagram showing an example of authentication conditions. The authentication conditions for each remote control terminal 10 as shown in Fig. 11 can be stored in the memory 56 of the line connection device 50. Among the authentication conditions, the time until the first remote control and the frequency of presence in the communication area can be set by the user or the administrator by operating the remote control terminal 10 or the management terminal (not shown), and the set conditions can be transmitted to the line connection device 50.

[0061] As shown in FIG. 11, the remote control terminal ID=100 has authentication information, the time until the first remote control is set to 1 hour, and the frequency of presence in the communication area is set to 7 times / week. By tightening the authentication conditions, the security level regarding the remote control by the remote control terminal 10 can be increased. The remote control terminal ID=200 has authentication information, the time until the first remote control is set to 24 hours, and the frequency of presence in the communication area is not set. By slightly relaxing the authentication conditions, the security level regarding the remote control by the remote control terminal 10 can be set to a medium level. Moreover, the remote control terminal ID=300 has authentication information, the time until the first remote control is not set, and the frequency of presence in the communication area is set to 1 time / month. By further relaxing the authentication conditions, the security level regarding the remote control by the remote control terminal 10 can be lowered. In this way, by appropriately setting the authentication conditions, it is possible to correspond to the security level regarding the remote control by the remote control terminal 10. Note that the authentication conditions are not limited to the example of FIG. 11.

[0062] As described above, the line connection device 50 can determine whether or not the remote control terminal 10 can be authenticated by storing the authentication information in the memory 56. In addition, the line connection device 50 can prohibit remote control of the remote control terminal 10 by deleting the authentication information stored in the memory 56. For example, prohibition can be implemented as an emergency measure in the event of a cyber attack or the like. If remote control is not performed within a predetermined time from the time when the authentication information is registered in the remote control terminal 10, the authentication information corresponding to the remote control terminal 10 in the line connection device 50 is deleted, so that the remote control terminal 10 cannot perform remote control. This makes it possible to limit the time until remote control is performed and to strengthen security.

[0063] When the remote control terminal 10 is present within the limited communication area S of the line connection device 50, the remote control application running on the remote control terminal 10 receives authentication information from the line connection device 50, registers (stores) the received authentication information in the memory unit 13, and transmits the authentication information stored in the memory unit 13 together with a remote control request for the control device 30 to the line connection device 50. If the line connection device 50 determines that authentication is possible based on the transmitted authentication information, the remote control device 30 can be remotely controlled via the line connection device 50.

[0064] Fig. 12 is a diagram showing a third example of authentication decision of the remote control terminal 10. The difference from the second example shown in Fig. 8 is that the control device 30, which is the remote target, decides whether to authenticate the remote control terminal 10 in response to an authentication request instead of the line connection device 50. In this case, the control device 30 has the same function as the authentication processing unit 52.

[0065] FIG. 13 is a diagram showing an example of a database for managing the remote control terminal 10. The management server 100 can generate and update a database as shown in FIG. 13. The database can include items such as a remote control terminal ID, a registration area of ​​the remote control terminal 10, registration date and time, initial remote operation date and time, presence frequency within the area, a remote operation log, and an authentication state. The registration area is a limited communication area S when the authentication information is registered in the remote control terminal 10. The registration date and time is the date and time when the authentication information is registered in the remote control terminal 10. The initial remote operation date and time is the date and time when the remote operation is performed for the first time after the authentication information is registered. The presence frequency within the area indicates the presence frequency within the communication area S of the remote control terminal 10. The remote operation log includes history information of remote operations by the remote control terminal 10. The authentication state includes a state where authentication is possible, a state where authentication was possible once but the authentication conditions are no longer satisfied and re-registration is necessary, and the like.

[0066] The management server 100 can record in a database the communication history between one or more remote control terminals 10 and the line connection device 50. This makes it possible to generate and update a database as shown in FIG.

[0067] The remote control terminal 10 or the manager's management terminal (not shown) can generate management information related to the remote control of each remote control terminal based on the information recorded in the database, and display the generated management information. Here, the management information can be all or part of the registered area, registration date and time, first remote control date and time, presence frequency within the area, remote control log, and authentication status of the remote control terminal 10 for each remote control terminal ID. This allows the manager to easily grasp the status of multiple remote control terminals 10.

[0068] As described above, according to this embodiment, at the stage of registering a remote control terminal that is permitted to be remotely controlled, authentication information is received from the destination line connection device 50, and the area in which the authentication information can be received is limited to the "limited communication area S." This makes it possible to prevent authentication information from being registered without the involvement of an administrator. Also, it is possible to realize safer remote control.

[0069] In addition, when only a specific remote control terminal 10 is permitted for remote control use, information on how frequently the remote control terminal 10 was in the limited communication area S can also be utilized, realizing safer remote control. Even if the remote control terminal 10 is lost or stolen, unauthorized remote control can be prevented in advance by simply deleting the authentication information of the line connection device 50.

[0070] In the above embodiment, the line connection device 50 and the control device 30 are configured as separate devices, but the line connection device 50 and the control device 30 may be configured as an integrated device.

[0071] In the remote control method of this embodiment, when a remote control terminal is present within a limited communication area of ​​a line connection device, authentication information held by the line connection device is recorded in the remote control terminal, and when the line connection device accepts remote control of a remote control target device from the remote control terminal to be authenticated, it determines whether or not to allow authentication depending on whether the remote control terminal has recorded the authentication information.

[0072] In the remote control method of this embodiment, when the line connection device receives remote control from the remote control terminal located outside the communication area, it determines whether or not to authenticate the remote control terminal depending on whether or not the remote control terminal has recorded authentication information.

[0073] In the remote control method of this embodiment, the authentication information stored in the line connection device is recorded in the remote control terminal.

[0074] In the remote control method of this embodiment, the authentication information generated by the line connection device is recorded in the remote control terminal.

[0075] In the remote control method of the present embodiment, the line connection device records authentication information acquired from the remote control terminal present within the communication area in the remote control terminal.

[0076] In the remote control method of this embodiment, the line connection device judges whether or not to permit authentication based on authentication conditions related to the usage history of the remote control terminal.

[0077] In the remote control method of the present embodiment, the authentication condition includes a time period from when authentication information is recorded in the remote control terminal to the first remote control of the remote control terminal.

[0078] In the remote control method of the present embodiment, the authentication conditions include a frequency of the remote control terminal being present within the communication area.

[0079] In the remote control method of this embodiment, the line connection device accepts the selection of one authentication condition from among a plurality of authentication conditions, and determines whether or not to permit authentication based on the selected authentication condition.

[0080] In the remote control method of this embodiment, when the line connection device accepts a remote control from the remote control terminal, the line connection device notifies an outside party that the remote control has been accepted, in accordance with an authentication condition for the remote control terminal.

[0081] In the remote control method of this embodiment, each of the line connection device and the remote control terminal encrypts previously shared information using a predetermined encryption method to generate multiple pieces of shared information, generates a common key using a portion of the generated multiple pieces of shared information, and establishes a secret communication path between the line connection device and the remote control terminal.

[0082] In the remote control method of this embodiment, the line connection device determines whether the remote control terminal can be authenticated by retaining authentication information, and prohibits remote control of the remote control terminal by deleting the authentication information.

[0083] In the remote control method of the present embodiment, the remote control target device is When a remote control is received from the remote control terminal via the remote control terminal, it is determined whether or not the remote control terminal can be authenticated depending on whether or not the remote control terminal has recorded authentication information.

[0084] In the remote control method of the present embodiment, the line connection device and the remote control terminal communicate with each other using private IP addresses.

[0085] The remote control method of this embodiment records communication history between one or more remote control terminals and the line connection device in a database, generates management information regarding remote control for each remote control terminal based on the recorded communication history, and displays the generated management information.

[0086] The remote control system of this embodiment is a remote control system including a line connection device and a remote control target device, and the line connection device includes a recording processing unit that records authentication information in the remote control terminal when the remote control terminal is present within a limited communication area of ​​the line connection device, and a judgment unit that, when remote control of the remote control target device is accepted from the remote control terminal to be authenticated, judges whether or not authentication is possible depending on whether the remote control terminal has recorded authentication information.

[0087] The line connection device of this embodiment includes a recording processing unit that records authentication information in a remote control terminal when the remote control terminal is present within a limited communication area of ​​the line connection device, and a judgment unit that, when remote control of a remote control target device is accepted from the remote control terminal to be authenticated, judges whether or not authentication is possible depending on whether the remote control terminal has recorded authentication information.

[0088] The computer program of this embodiment is a computer program that runs on a remote control terminal, and causes a computer to execute a process of receiving authentication information from the line connection device when the remote control terminal is present within a limited communication area of ​​the line connection device, storing the received authentication information in a memory unit, transmitting the authentication information stored in the memory unit to the line connection device together with a remote control request for a remote control target device, and performing remote control via the line connection device if the line connection device determines that authentication is possible based on the transmitted authentication information. [Explanation of symbols]

[0089] 1. Communication Network 2. Secret communication channel 10 Remote control terminal 11 Control section 12 Communications Department 13 Storage section 14 Display Panel 15 Control section 16 Remote control processing section 17 Confidential Communications Processing Unit 30 Control device 50 Line connection equipment 51 Line processing section 52 Authentication processing section 521 Authentication information generation processing unit 522 Authentication decision processing unit 53 Confidential Communications Processing Unit 531 Distributed Data Generation Processing Unit 532 Common key generation processing unit 54 Authentication information recording processing unit 55 CPU 56 Memory 57 Network Communication Department 100 Management Server

Claims

1. When a remote control terminal is present within a limited communication area of ​​a line connection device, authentication information that is held by the line connection device and not held by the remote control terminal is recorded in the remote control terminal; When the line connection device receives a remote control request for a remote control target device from a remote control terminal to be authenticated, the line connection device receives an authentication request from the remote control terminal, and determines whether or not to authenticate the remote control target device depending on whether or not authentication conditions related to the usage history of the remote control terminal are the time until the first remote control and the frequency of presence of the remote control terminal within the communication area. Remote operation method.

2. Recording the authentication information stored in the line connection device in the remote control terminal. The remote control method according to claim 1.

3. The line connection device and the remote control terminal each communicate using a private IP address. The remote control method according to claim 1 or 2.

4. Recording communication history between one or more remote control terminals and the line connection device in a database; generating management information relating to remote operation for each of the remote operation terminals based on the recorded communication history; Display the generated management information, The remote control method according to claim 1 or 2.

5. A remote control system comprising a line connection device and a remote control target device, The line connection device is a recording processing unit for recording, in a case where a remote control terminal is present within a limited communication area of ​​a line connection device, authentication information that is held by the line connection device and not held by the remote control terminal, in the remote control terminal; a determination unit that, when a remote operation of the remote control target device is received from an authentication target remote control terminal, receives an authentication request from the remote control terminal, and determines whether or not authentication is possible depending on whether an authentication condition related to a usage history of the remote control terminal is a time until a first remote operation and a presence frequency of the remote control terminal within the communication area; Equipped with Remote control system.

6. A recording processing unit that records authentication information that is held by the line connection device and not held by the remote control terminal in the case where a remote control terminal exists within a limited communication area of ​​the line connection device, in the remote control terminal; a determination unit that, when a remote control request for a remote control target device is received from a remote control terminal that is an authentication target, receives an authentication request from the remote control terminal, and determines whether or not authentication is possible depending on whether or not authentication conditions related to a usage history of the remote control terminal are a time until a first remote control and a frequency of presence of the remote control terminal within the communication area; Equipped with Line connection equipment.

7. A computer program operating on a line connection device, comprising: When a remote control terminal is present within a limited communication area of ​​the line connection device, authentication information that is held by the line connection device and not held by the remote control terminal is recorded in the remote control terminal; when a remote control request for a remote control target device is received from a remote control terminal to be authenticated, an authentication request is received from the remote control terminal, and whether or not authentication is allowed is determined depending on whether or not authentication conditions related to a usage history of the remote control terminal are a time until a first remote control and a frequency of presence of the remote control terminal within the communication area. Have a computer carry out the process, Computer program.

Images