Information processing apparatus and information processing system

Abstract

To provide an information processing apparatus and an information processing system that, even when a security attack is made on an edge device installed in a shop, can reduce the influence of the security attack on the other devices.SOLUTION: An information processing apparatus of an embodiment is connected to a plurality of devices provided in a shop via a network, and the information processing apparatus comprises first transmission means and cut-off means. The first transmission means transmits, to the plurality of devices, first information for requesting to check a state related to security. When second transmission means detects an abnormality in the security on the basis of second information returned from the plurality of devices in correspondence with the first information, the second transmission means cuts off the device in which the abnormality is detected, from the network.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] An embodiment of the present invention relates to an information processing device and an information processing system. [Background technology]

[0002] Conventionally, there exists a cloud POS (Point Of Sale) system that uses a cloud server. In the cloud POS system, a service is provided in which products can be registered in the cloud POS system from electronic devices (e.g., tablet terminals, smartphones, etc.) installed in a store and payment for the products can be processed through the cloud POS system.

[0003] In addition, a number of devices (hereinafter also referred to as edge devices) for operating the store are installed in the store. For example, a printer that prints information on the payment processing of products on receipts is installed in the store. The operation status of the edge devices is managed by a server (hereinafter also referred to as edge server) installed in the store. Furthermore, the cloud POS system is connected to the edge devices and edge servers installed in the store via communication lines.

[0004] However, if an edge device is attacked by an external security attack, the cloud POS system may also be affected by the security attack because the edge device is connected to the cloud POS system via a communication line, which may result in customers being unable to process payments for registered products. Summary of the Invention [Problem to be solved by the invention]

[0005] The problem that the present invention aims to solve is to provide an information processing device and an information processing system that are capable of reducing the impact of a security attack on other devices even if an edge device installed in a store is attacked. [Means for solving the problem]

[0006] The information processing device according to the embodiment is an information processing device connected to a plurality of devices installed in a store via a network, and includes a first transmission means and a blocking means. The first transmission means transmits first information to the plurality of devices requesting a security status check. When a security anomaly is detected based on second information returned from the plurality of devices in response to the first information, the second transmission means blocks the device that detected the anomaly from the network. [Brief description of the drawings]

[0007] [Figure 1] FIG. 1 is a schematic diagram showing an example of an information processing system according to the present embodiment. [Diagram 2] FIG. 2 is a block diagram showing an example of a hardware configuration of the cloud server according to this embodiment. [Diagram 3] FIG. 3 is a block diagram showing an example of a hardware configuration of the edge server according to the present embodiment. [Figure 4] FIG. 4 is a block diagram showing an example of the hardware configuration of a tablet terminal according to this embodiment. [Diagram 5] FIG. 5 is a block diagram showing an example of the hardware configuration of the printer according to the present embodiment. [Figure 6] FIG. 6 is a block diagram showing an example of the functional configuration of the printer according to the present embodiment. [Figure 7] FIG. 7 is a block diagram showing an example of a functional configuration of the edge server according to the present embodiment. [Figure 8] FIG. 8 is a block diagram showing an example of the functional configuration of the cloud server according to the present embodiment. [Figure 9] FIG. 9 is a block diagram showing an example of the functional configuration of the tablet terminal according to the present embodiment. [Figure 10] FIG. 10 is a sequence diagram showing an example of a control process of the information processing system according to the present embodiment. [Figure 11] FIG. 11 is a block diagram showing an example of an information processing system according to the first modified example. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, an embodiment of an information processing device and an information processing system will be described with reference to the accompanying drawings. In the embodiment described below, an edge server will be described as an example of an information processing device. Note that the embodiment is an embodiment of an information processing device and an information processing system, and the configuration, functions, etc. thereof do not limit the invention.

[0009] 1 is a schematic diagram showing an example of an information processing system 10 according to this embodiment. The information processing system 10 is a system including a cloud server 1, an edge server 2, and an edge device 3.

[0010] Cloud server 1 is, for example, a server that executes product registration processing and payment processing for products sold in a store. Cloud server 1 is composed of one or more computers. Cloud server 1 receives and manages customer information 143 (see FIG. 2) from tablet terminals 311 of each store. Customer information 143 is various information related to customer names, customer IDs (Identification) for identifying customers, etc.

[0011] Furthermore, the cloud server 1 registers product information such as the product name and price of the product based on the product code that identifies the product associated with the symbol, when the tablet terminal 311 of each store reads a symbol such as a barcode attached to the product. Then, the cloud server 1 outputs the total amount and change amount related to the transaction with the customer to the tablet terminal 311 based on the product information of the product registered, and performs payment processing.

[0012] That is, the cloud server 1 is a server that can receive product registration information indicating product registration processing from the tablet terminal 311 via the communication line 4, and transmit print information 146 (see FIG. 2) to the tablet terminal 311. Furthermore, the cloud server 1 is connected to the edge server 2 and edge device 3 of each store via the communication line 4, which is, for example, a dedicated line or an Internet line.

[0013] The edge server 2 is a server connected to multiple devices installed in a store via a network. The edge server 2 is, for example, a store server that connects to multiple edge devices 3 installed in the store and manages the multiple edge devices 3. The edge server 2 is also connected to the cloud server 1 via, for example, a communication line 4. The edge server 2 is further connected to the multiple edge devices 3 in the store via, for example, a communication line 5 such as a LAN (Local Area Network).

[0014] The multiple edge devices 3 are devices installed in a store. Each of the edge devices 3 is connected to, for example, a cloud server 1 and an edge server 2. The edge device 3 is an example of a device. The multiple edge devices 3 include, for example, a tablet terminal 311, a first printer 711, and a second printer 712. The tablet terminal 311 is also connected to the cloud server 1 via, for example, a communication line 4. Furthermore, the multiple edge devices 3 are connected to the edge server 2 via, for example, a communication line 5. Hereinafter, the first printer 711 and the second printer 712 are also collectively referred to simply as printers.

[0015] The tablet terminal 311 executes a product registration process for products sold in the store. The product registration process includes a process of reading a symbol attached to the product, retrieving and displaying product information such as the product name and price of the product based on a product code that identifies the product associated with the symbol, and storing the information in the memory 34 (see FIG. 4). The tablet terminal 311 also outputs to either the first printer 711 or the second printer 712 print information 333 indicating information to be printed on a receipt corresponding to product sales information 145 indicating information related to the payment process.

[0016] The printer issues receipts or slips on which printed information 731 corresponding to product sales information 145 indicating product information of registered products and information related to payment processing is printed. First printer 711 is a printer provided as an active system for the process of issuing printed information 333 output by tablet terminal 311. Second printer 712 is a printer provided as a standby system for the process of issuing printed information 333 output by tablet terminal 311 in place of the process of first printer 711 when first printer 711 is not operating. In other words, first printer 711 and second printer 712 are configured in a redundant relationship of an active system and a standby system.

[0017] Next, the hardware configuration of the cloud server 1 will be described with reference to Fig. 2. Fig. 2 is a block diagram showing an example of the hardware configuration of the cloud server 1 according to this embodiment. As shown in Fig. 2, the cloud server 1 comprises a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, and a memory 14. The CPU 11 is the main controller. The ROM 12 stores various programs. The RAM 13 expands programs and various data. The memory 14 stores various programs.

[0018] The CPU 11, ROM 12, RAM 13, and memory 14 are connected to one another via a bus 15. The CPU 11, ROM 12, and RAM 13 constitute a control unit 100. That is, the control unit 100 executes a control process of the cloud server 1, which will be described later, by the CPU 11 operating in accordance with a control program stored in the ROM 12 and memory 14 and loaded into the RAM 13.

[0019] The memory 14 is composed of a non-volatile memory such as a hard disk drive (HDD) or a flash memory that retains stored information even when the power is turned off. The memory 14 stores a control program 141 that stores a control program for controlling the cloud server 1, a product master 142, customer information 143, product registration information 144, product sales information 145, print information 146, and peripheral device operation information 147.

[0020] The product master 142 is information that associates code information, such as a product code uniquely assigned to each product, with product information, such as the product name, price, product classification, etc. The customer information 143 is various information related to the customer name, customer ID (Identification) for identifying the customer, etc.

[0021] Product registration information 144 is information generated by the cloud server 1 performing product registration processing related to a product read by the tablet terminal. Product sales information 145 is information generated by the cloud server 1 performing payment processing corresponding to the product registration processing. Print information 146 is information to be printed on a receipt corresponding to the product sales information 145, which shows information related to the payment processing. Peripheral device operation information 147 corresponds to peripheral device operation information 242 stored in memory 24 of a store in which an edge server 2, which will be described later, is located. The peripheral device operation information 147 will be described later.

[0022] Furthermore, the control unit 100 is connected to an operation unit 17 and a display unit 18 via a bus 15 and a controller 16. The controller 16 receives instructions from the control unit 100 and controls the operation unit 17 and the display unit 18. However, for convenience of explanation, the control performed by the controller 16 will be explained as being performed by the control unit 100.

[0023] Operation unit 17 is, for example, a keyboard or a touch panel, and is operated by an operator of cloud server 1. Display unit 18 is, for example, a liquid crystal display, and displays various types of information to the operator of cloud server 1.

[0024] The control unit 100 is also connected to a communication unit 19 via a bus 15. The communication unit 19 is connected to the edge server 2 and the edge device 3 via a communication line 4, and transmits and receives various information. Note that the hardware configuration of the cloud server 1 is not limited to this.

[0025] Next, the hardware configuration of the edge server 2 will be described with reference to Fig. 3. Fig. 3 is a block diagram showing an example of the hardware configuration of the edge server 2 according to this embodiment. As shown in Fig. 3, the edge server 2 includes a CPU 21, a ROM 22, a RAM 23, and a memory 24. The CPU 21 is the main controller. The ROM 22 stores various programs. The RAM 23 expands programs and various data. The memory 24 stores various programs.

[0026] The CPU 21, the ROM 22, the RAM 23, and the memory 24 are connected to one another via a bus 25. The CPU 21, the ROM 22, and the RAM 23 constitute a control unit 200. That is, the control unit 200 executes a control process of the edge server 2, which will be described later, by the CPU 21 operating in accordance with a control program stored in the ROM 22 and the memory 24 and loaded in the RAM 23.

[0027] The RAM 23 stores security confirmation information 231. The security confirmation information 231 stored in the RAM 23 corresponds to security confirmation information 732 stored in the RAM 73 of the first printer 711 described below. The memory 24 is composed of a non-volatile memory such as a HDD or flash memory in which stored information is retained even when the power is turned off. The memory 24 stores a control program 241 that stores a control program for controlling the edge server 2, peripheral device operation information 242, and whitelist information 243. The security confirmation information 231, peripheral device operation information 242, and whitelist information 243 will be described later.

[0028] Furthermore, the control unit 200 is connected to an operation unit 27 and a display unit 28 via a bus 25 and a controller 26. The controller 26 receives instructions from the control unit 200 and controls the operation unit 27 and the display unit 28. However, for convenience of explanation, the control performed by the controller 26 will be explained as being performed by the control unit 200.

[0029] The operation unit 27 is, for example, a keyboard or a touch panel, and is operated by an operator of the edge server 2. The display unit 28 is, for example, a liquid crystal display, and displays various information to the operator of the edge server 2.

[0030] The control unit 200 is also connected to the communication unit 30 via a bus 25. The communication unit 30 is connected to the cloud server 1 via a communication line 4, and transmits and receives information to and from the cloud server 1. The communication unit 30 is also connected to the edge device 3 via a communication line 5, and transmits and receives information to and from the edge device 3. Note that the hardware configuration of the edge server 2 is not limited to this.

[0031] Next, the hardware configuration of the tablet terminal 311 included in the edge device 3 will be described with reference to Fig. 4. Fig. 4 is a block diagram showing an example of the hardware configuration of the tablet terminal 311 according to this embodiment. As shown in Fig. 4, the tablet terminal 311 includes a CPU 31, a ROM 32, a RAM 33, a memory 34, and the like.

[0032] The CPU 31 is the main controller. The ROM 32 stores various programs. The RAM 33 expands the programs and various data. The memory 34 stores various programs. The CPU 31, the ROM 32, the RAM 33, and the memory 34 are connected to one another via a bus 35. The CPU 31, the ROM 32, and the RAM 33 constitute a control unit 300. That is, the control unit 300 executes a control process of the tablet terminal 311 described later by the CPU 31 operating in accordance with a control program stored in the ROM 32 and the memory 34 and expanded in the RAM 33.

[0033] The RAM 33 stores customer information 331, product registration information 332, and printed information 333. The customer information 331, product registration information 332, and printed information 333 stored in the RAM 33 correspond to the customer information 143, product registration information 144, and printed information 146 stored in the memory 14 of the cloud server 1. The memory 34 is composed of a non-volatile memory such as a HDD or flash memory that retains stored information even when the power is turned off. The memory 34 stores a control program 341 that stores a control program for controlling the tablet terminal 311.

[0034] Furthermore, the control unit 300 is connected to the operation unit 41, the display unit 42, the card reading unit 43, and the code reading unit 44 via the bus 35 and the controller 36. The controller 36 receives instructions from the control unit 300 and controls the operation unit 41, the display unit 42, the card reading unit 43, and the code reading unit 44. However, for convenience of explanation, the control performed by the controller 36 will be explained as being performed by the control unit 300.

[0035] The operation unit 41 is, for example, a keyboard or a touch panel, and is operated by an operator of the tablet terminal 311. The display unit 42 is, for example, a liquid crystal display, and displays various information to the customer. The card reading unit 43 reads a customer code from a card (for example, a credit card, electronic money, etc.) used by the customer for payment. The code reading unit 46 captures an image or optically reads symbols such as barcodes and two-dimensional codes attached to products.

[0036] The control unit 300 is also connected to a communication unit 47 via a bus 35. The communication unit 47 is connected to the cloud server 1 via a communication line 4, and transmits and receives various information. The communication unit 47 is also connected to the edge server 2, the first printer 711, and the second printer 712 via a communication line 5, and transmits and receives various information. Note that the hardware configuration of the tablet terminal 311 is not limited to this.

[0037] Next, the hardware configuration of the printer included in the edge device 3 will be described with reference to FIG. 5. FIG. 5 is a block diagram showing an example of the hardware configuration of a printer according to this embodiment. Note that the printer shown in FIG. 5 will be described using a first printer 711 as an example. The hardware configuration of the first printer 711 shown in FIG. 5 is also the same as that of the second printer 712 shown in FIG. 1. As shown in FIG. 5, the first printer 711 includes a CPU 71, a ROM 72, a RAM 73, a memory 74, etc.

[0038] The CPU 71 is the main controller. The ROM 72 stores various programs. The RAM 73 loads the programs and various data. The memory 74 stores various programs. The CPU 71, ROM 72, RAM 73, and memory 74 are connected to one another via a bus 75. The CPU 71, ROM 72, and RAM 73 constitute a control unit 700. That is, the control unit 700 executes a control process for the first printer 711 (described later) by the CPU 71 operating in accordance with a control program stored in the ROM 72 and memory 74 and loaded in the RAM 73.

[0039] The RAM 73 stores print information 731 and security confirmation information 732. The print information 731 stored in the RAM 73 corresponds to the print information 146 stored in the memory 14 of the cloud server 1. The memory 74 is composed of a non-volatile memory such as a HDD or flash memory that retains stored information even when the power is turned off. The memory 74 stores a control program 741 that stores a control program for controlling the first printer 711.

[0040] Furthermore, the control unit 700 is connected to the operation unit 81, the display unit 82, and the printing unit 83 via the bus 75 and the controller 76. The controller 76 receives instructions from the control unit 700 and controls the operation unit 81, the display unit 82, and the printing unit 83. However, for convenience of explanation, the control performed by the controller 76 will be explained as being performed by the control unit 700.

[0041] The operation unit 81 is, for example, a keyboard or touch panel, and is operated by an operator of the first printer 711. The display unit 82 is, for example, a liquid crystal display, and displays various information to store clerks and customers. The printing unit 83 prints, for example, print information 731 on receipt paper. The control unit 700 is also connected to the communication unit 77 and interface unit 78 via the bus 75.

[0042] The communication unit 77 connects to the edge server 2 and the tablet terminal 311 via the communication line 5, and transmits and receives various information. The interface unit 78 is, for example, an interface such as a Universal Serial Bus (USB). For example, a user updates firmware for updating the control program 741 stored in the memory 74 via the interface unit 78. Note that the hardware configuration of the first printer 711 is not limited to this.

[0043] Incidentally, when a security attack is made on the edge device 3 from the outside, the security attack may also affect the cloud server 1 since the edge device 3 and the cloud server 1 are configured to be able to communicate with each other.

[0044] Here, an example of a security state will be described. A security attack is assumed to occur when, for example, a malicious user inserts a USB memory into the interface unit 78 of the first printer 711, rewrites the control program 741 stored in the memory 74, and makes the first printer 711 unable to start up.

[0045] Also, a security attack may occur, for example, when a malicious user changes the print information 731 stored in the memory 74 of the first printer 711, causing the first printer 711 to print information different from the print information 146 sent by the cloud server 1. Here, the print information 731 printed by the first printer 711 on receipt paper is information related to the product paid for by the customer, in other words, information related to proof of the product paid for by the customer.

[0046] If the first printer 711 is subjected to the above-mentioned security attack, even if the tablet terminal 311 is operating, customers may not be able to process payments for registered products, and operations related to the store's business may be affected.

[0047] Therefore, the edge server 2 according to the present embodiment performs control to cut off communication with an active edge device 3 that is affected by a security attack and to switch to communication with a standby edge device 3 that is not affected by a security attack, depending on the security status of the multiple edge devices 3. The operation of the edge server 2 will be described later.

[0048] Fig. 6 is a block diagram showing an example of the functional configuration of a printer according to this embodiment. The printer shown in Fig. 6 will be described by taking the first printer 711 as an example. The functional configuration of the first printer 711 shown in Fig. 6 is also the same as that of the second printer 712 shown in Fig. 1. As shown in Fig. 6, the control unit 700 of the first printer 711 includes a first acquisition unit 701, a generation unit 702, and a generation information transmission unit 703. The functional configuration of the control unit 700 of the first printer 711 is not limited to this.

[0049] The first acquisition means 701 acquires the first information. Specifically, the first acquisition means 701 acquires the first information from the edge server 2. The first information is information requesting a security status check. For example, the first information is information instructing a request for a security check on the own printer (first printer 711). For example, the first information is a command or program instructing the control program of the edge device 3 to execute a check process based on a checksum.

[0050] The generating means 702 generates the second information based on the first information. Specifically, the generating means 702 generates the second information based on the first information acquired by the first acquiring means 701. The second information is information indicating the result of a security check corresponding to the first information (hereinafter, also referred to as security confirmation information). The second information is, for example, security confirmation information based on the result of checksum processing for the control program 741 stored in the memory 74.

[0051] The generated information transmitting means 703 transmits the second information. Specifically, the generated information transmitting means 703 transmits the second information generated by the generating means 702 to the edge server 2.

[0052] Fig. 7 is a block diagram showing an example of a functional configuration of the edge server 2 according to this embodiment. As shown in Fig. 7, the control unit 200 of the edge server 2 includes a first transmitting means 201, a first receiving means 202, a blocking means 203, a second transmitting means 204, and a third transmitting means 205. Note that the functional configuration of the control unit 200 of the edge server 2 is not limited to this.

[0053] The first transmission means 201 transmits first information requesting a security-related status check to the multiple edge devices 3. Specifically, the first transmission means 201 transmits the first information requesting a security-related status check to each of the operating devices. For example, the first transmission means 201 transmits the first information to the operating first printer 711. For example, the security-related status check is a status check related to detection of tampering of predetermined data stored in the multiple edge devices 3. The first transmission means 201 transmits the first information to the first printer 711 at a predetermined cycle. The predetermined cycle is, for example, once an hour, and is set by the user. Note that the predetermined cycle is not limited to this.

[0054] The first receiving means 202 receives the second information from the edge device 3. For example, the first receiving means 202 receives the second information from the first printer 711.

[0055] When the blocking means 203 detects a security anomaly based on the second information returned from the multiple edge devices 3 in response to the first information, the blocking means 203 blocks the device in which the anomaly has been detected from the network. Specifically, the blocking means 203 determines whether the security of the edge device 3 is normal based on the second information.

[0056] For example, the blocking means 203 compares the result of the status check included in the second information with the result of the status check acquired for the legitimate data, and detects an anomaly in the security related to the data. The blocking means 203 compares the security check information 231 with the whitelist information 243 stored in the memory 24, and determines whether the security of the first printer 711 is normal. The whitelist information 243 is the result of the status check acquired for the legitimate data, and is, for example, legitimate checksum information based on the processing result of the checksum linked to the file name of the control program 341 of the first printer 711.

[0057] The blocking means 203 compares the security confirmation information 231 with the whitelist information 243 stored in the memory 24, and if they match, determines that the security is normal. The blocking means 203 compares the security confirmation information 231 with the whitelist information 243 stored in the memory 24, and if they do not match, determines that the security is abnormal. A state in which the security is abnormal is a state in which there is a possibility of a security attack. In this embodiment, for the sake of concrete explanation, it is assumed that the first printer 711 is an edge device 3 with a security abnormality.

[0058] Furthermore, when the cutoff means 203 detects a security anomaly based on the second information, it connects to the network a standby device that is in a redundant relationship with the operating device in which the anomaly was detected. When the second information returned from the multiple edge devices 3 in response to the first information includes a state in which the security of the edge device 3 is abnormal, the cutoff means 203 transmits third information to the edge device 3 whose security is abnormal. For example, the cutoff means 203 transmits the third information to the first printer 711 whose security has been determined to be abnormal. The third information is information indicating that the communication connection with the abnormal device is to be cut off.

[0059] In other words, the third information is communication connection cutoff information indicating that communication connections with the cloud server 1, the edge server 2, and the tablet terminal 311 to which the edge device 3 is connected are to be cut off. As a result, the edge device 3 that has acquired the third information cuts off communication connections with the cloud server 1, the edge server 2, and the tablet terminal 311 by the control unit controlling the communication unit.

[0060] Furthermore, the edge server 2 can isolate an edge device 3 that has been or may have been subjected to a security attack, since the communication connection is cut off. Furthermore, since the edge device 3 that has been subjected to a security attack is isolated, the cloud server 1, the edge server 2, and the tablet terminal 311 can reduce the impact of the security attack. Note that the edge server 2 may cut off the communication connection with the edge device 3 with a security abnormality by the cutting means 203 at the point in time when the third information is transmitted to the edge device 3 with a security abnormality.

[0061] The second transmitting means 204 transmits the fourth information to the cloud server 1. Specifically, when the blocking means 203 determines that the security of the edge device 3 is abnormal, the second transmitting means 204 transmits the fourth information to the cloud server 1. The fourth information is peripheral device operation information indicating the operation state of the edge device 3.

[0062] The third transmission means 205 transmits communication connection start information indicating the start of a communication connection with the standby edge device 3. For example, the third transmission means 205 transmits communication connection start information to the second printer 712, which is the standby edge device 3, with respect to the first printer 711. This allows the edge server 2 to establish a communication connection with the edge device 3 that is operating normally and has not been subjected to a security attack. In addition, since the edge device 3 that is operating normally can establish a communication connection, the cloud server 1, the edge server 2, and the tablet terminal 311 operate normally, and it is possible to reduce the impact on operations related to the business of the store.

[0063] Next, the functional configuration of the cloud server 1 will be described with reference to Fig. 8. Fig. 8 is a block diagram showing an example of the functional configuration of the cloud server 1 according to this embodiment. As shown in Fig. 8, the control unit 100 of the cloud server 1 includes a second acquisition means 101, a fourth transmission means 102, and a fifth transmission means 103. Note that the functional configuration of the control unit 100 of the cloud server 1 is not limited to this.

[0064] The second acquisition unit 101 receives the fourth information. Specifically, the second acquisition unit 101 receives the fourth information transmitted by the edge server 2.

[0065] The fourth transmission means 102 transmits the fifth information to the tablet terminal 311. Specifically, when the second acquisition means 101 receives the fourth information, the fourth transmission means 102 transmits the fifth information to the tablet terminal 311. The fifth information is, for example, message information indicating a message prompting switching to a communication connection with the edge device 3 operating normally. The message information is, for example, information that transmits a message to the tablet terminal 311 prompting switching to a communication connection with the second printer 712 of the standby system, whose security is normal, when the security of the first printer 711 is abnormal.

[0066] The fifth transmission means 103 transmits sixth information to the tablet terminal 311. Specifically, when the second acquisition means 101 receives the fourth information, the fifth transmission means 103 transmits sixth information to the tablet terminal 311. The sixth information is, for example, switching information indicating a switch to a communication connection with the edge device 3 operating normally. The switching information is, for example, information transmitted to the tablet terminal 311 instructing the tablet terminal 311 to switch to a communication connection with the second printer 712 of the standby system, whose security is normal, when the security of the first printer 711 is abnormal.

[0067] Next, the functional configuration of the tablet terminal 311 will be described with reference to Fig. 9. Fig. 9 is a block diagram showing an example of the functional configuration of the tablet terminal 311 according to this embodiment. As shown in Fig. 9, the control unit 300 of the tablet terminal 311 includes a third acquisition unit 301 and a communication control unit 302. Note that the functional configuration of the control unit 300 of the tablet terminal 311 is not limited to this.

[0068] The third acquisition means 301 acquires the fifth information and the sixth information from the cloud server 1. Upon acquiring the fifth information from the cloud server 1, the tablet terminal 311 outputs the fifth information on the display unit .

[0069] The communication control means 302 performs communication control so as to start a communication connection with the standby edge device 3. Specifically, when the third acquisition means 301 receives the sixth information, the communication control means 302 performs communication control on the communication unit 47 so as to start a communication connection with the standby second printer 712, whose security is normal. This allows the tablet terminal 311 to communicate with the edge device 3 that is operating normally, thereby reducing the impact on operations related to the store's business.

[0070] Next, the control process of the information processing system 10 will be described with reference to Fig. 10. Fig. 10 is a sequence diagram showing an example of the control process of the information processing system 10 according to the present embodiment. For the sake of specificity, the process when the first printer 711 is subjected to a security attack will be described.

[0071] In step S91, the first transmitting means 201 of the edge server 2 transmits the first information to the first printer 711 (step S91).

[0072] In step S92, the generating means 702 of the first printer 711 generates second information based on the first information acquired by the first acquiring means 701 of the first printer 711 (step S92). In step S93, the generated information transmitting means 703 transmits the second information generated by the generating means 702 to the edge server 2 (step S93).

[0073] In step S94, the cutoff means 203 of the edge server 2 determines whether the security of the first printer 711 is normal based on the second information acquired by the first receiving means 202 (step S94). In step S95, the cutoff means 203 transmits third information to the first printer 711 whose security has been determined to be abnormal (step S95).

[0074] In step S96, the control unit 700 of the first printer 711 controls the communication unit 77 to cut off communication connections with the cloud server 1, the edge server 2, and the tablet terminal 311 (step S96).

[0075] In step S97, when the blocking means 203 determines that the security of the first printer 711 is abnormal, the second transmitting means 204 of the edge server 2 transmits the fourth information to the cloud server 1 (step S97).

[0076] In step S98, when the second acquisition means 101 receives the fourth information, the fourth transmission means 102 of the cloud server 1 transmits the fifth information to the tablet terminal 311 (step S98). In step S99, when the second acquisition means 101 receives the fourth information, the fifth transmission means 103 transmits the sixth information to the tablet terminal 311 (step S99).

[0077] In step S100, when the third acquisition means 301 receives the sixth information, the communication control means 302 of the tablet terminal 311 performs communication control on the communication unit 47 so as to initiate a communication connection with the second printer 712 in the standby system, which has normal security (step S100).

[0078] As described above, the edge server 2 of this embodiment transmits first information to multiple edge devices 3 requesting a security status check, and if it detects a security anomaly based on the second information returned from the multiple edge devices 3 in response to the first information, it disconnects the edge device 3 that detected the anomaly from the network.

[0079] As a result, when the security of multiple edge devices 3 includes an abnormal state, the edge server 2, for example, transmits third information indicating that the communication connection with the abnormal device is to be cut off, and the edge device 3 that has acquired the third information can cut off the communication connection with the cloud server 1, the edge server 2, and the tablet terminal 311 by the control unit controlling the communication unit.

[0080] Furthermore, the edge server 2 can isolate the edge device 3 that has been subjected to a security attack because the communication connection is cut off. Furthermore, the edge device 3 that has been subjected to a security attack or is likely to be subjected to a security attack is isolated, so that the cloud server 1, the edge server 2, and the tablet terminal 311 can reduce the impact of the security attack.

[0081] Although the embodiment of the present invention has been described above, this embodiment is presented as an example and is not intended to limit the scope of the invention. This new embodiment can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the gist of the invention. This embodiment and its modifications are included in the scope and gist of the invention, and are included in the scope of the invention and its equivalents described in the claims.

[0082] (First Modification) In the above embodiment, a configuration has been described in which a plurality of first printers 711 and second printers 712 are provided for the tablet terminal 311, but the present invention is not limited to this. For example, two tablet terminals and printers may be provided, and two printers may be connected to each tablet terminal.

[0083] 11 is a block diagram showing an example of an information processing system 110 according to a first modified example. The information processing system 110 is a system including a cloud server 1, an edge server 2, and an edge device 3. The edge device 3 includes a first tablet terminal 312, a second tablet terminal 313, a first printer 711, and a second printer 712.

[0084] The first tablet terminal 312 is connected to the first printer 711 and the second printer 712 via a communication line 5, which may be, for example, a dedicated line or an Internet line. The second tablet terminal 313 is connected to the first printer 711 and the second printer 712 via a communication line 5, which may be, for example, a dedicated line or an Internet line. By connecting the first tablet terminal 312 and the second tablet terminal 313 to the first printer 711 and the second printer 712, respectively, even if, for example, either one of the first printer 711 and the second printer 712 is in an abnormal state, the printer in a normal state can be used.

[0085] (Second Modification) In the above embodiment, the generating unit 702 of the first printer 711 generates the second information based on the first information, and the second information is security confirmation information based on checksum processing of the control program 741 stored in the memory 74, but the present invention is not limited to this. For example, the second information may be security confirmation information based on hash SHA256 processing of the control program 741 stored in the memory 74.

[0086] In addition, the programs executed by the edge server 2 of the embodiment are provided in the form of files in an installable or executable format recorded on a computer-readable recording medium such as a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versatile Disk).

[0087] The program executed by the edge server 2 of the embodiment may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. The program executed by the edge server 2 of the embodiment may be provided or distributed via a network such as the Internet. [Explanation of symbols]

[0088] 1. Cloud Server 2 Edge Server 3. Edge Devices 10. Information Processing Systems 110 Information Processing Systems 200 Control section 201 First transmission means 202 first receiving means 203 Cutting means 204 Second transmission means 205 Third transmission means 311 Tablet PC 312 1st tablet terminal 313 2nd tablet device 711 First Printer 712 2nd Printer [Prior art documents] [Patent documents]

[0089] [Patent Document 1] JP 2017-191958 A

Claims

1. An information processing device connected to a plurality of devices installed in a store via a network, a first transmission means for transmitting first information requesting a security status check to the plurality of devices; a blocking means for blocking a device in which a security anomaly has been detected from the network when the security anomaly is detected based on second information returned from the plurality of devices in response to the first information; An information processing device comprising:

2. the plurality of devices are configured in a redundant relationship with an active system and a standby system; The first transmission means transmits the first information to each of the active devices; when the blocking means detects a security anomaly based on the second information, it connects a standby device that is in a redundant relationship with the active device in which the anomaly has been detected to the network. The information processing device according to claim 1 .

3. The first transmission means requests, by the first information, a status confirmation related to detection of tampering of predetermined data stored in the plurality of devices. The information processing device according to claim 1 .

4. the blocking means compares a result of the status check included in the second information with a result of the status check acquired for the authentic data, and detects an anomaly in security related to the data. The information processing device according to claim 3 .

5. The plurality of devices include a tablet terminal that executes a product registration process, and a printer that prints on a receipt print information corresponding to product sales information that indicates information related to a payment process for the product. The information processing device according to claim 1 .

6. An information processing system having a plurality of devices installed in a store and an information processing device connected to the plurality of devices via a network, The information processing device includes: a first transmission means for transmitting first information requesting a security status check to the plurality of devices; a cut-off means for cutting off a communication connection with a device in which a security anomaly has been detected when a security anomaly has been detected based on second information returned from the plurality of devices in response to the first information; An information processing system comprising:

Images