Information processing device, information processing method, and information processing program

Abstract

To provide an information processing device capable of efficiently performing engineering of an automation system, an information processing method, and an information processing program.SOLUTION: In an automation system 100, a control device 10 transmits a self-signed certificate to a management server 20 by using a registered Internet protocol address or host name of the management server, receives a certificate authority signature certificate generated by applying a certificate authority signature to the self-signed certificate by the management server, and executes data communication which can verify tampering or validation of the certificate authority signature certificate in a control system by using encrypted information included in the certificate authority signature certificate.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an information processing device, an information processing method, and an information processing program. [Background technology]

[0002] By introducing automation systems into plants, the processes for manufacturing various products are automated. When carrying out projects related to such automation systems, engineering work such as design, construction, and inspection is carried out based on design information received from customers. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2022-046438 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, it has been conventionally difficult to efficiently perform engineering of an automation system in a plant, for example, to efficiently construct a secure network topology in the automation system of a plant.

[0005] The present invention has been made in view of the above, and has an object to efficiently carry out engineering related to a communication network of an automation system. [Means for solving the problem]

[0006] The present invention provides an information management device comprising: a transmitting unit that transmits a self-signed certificate to a management server; a receiving unit that receives a certificate authority signed certificate generated by the management server in response to the self-signed certificate; and an executing unit that performs data communication in a control system that executes control of the system based on the certificate authority signed certificate.

[0007] The present invention also provides an information management method for performing processing in which a computer sends a self-signed certificate to a management server, receives a certificate authority signed certificate generated by the management server in response to the self-signed certificate, and performs data communication in a control system that controls the system based on the certificate authority signed certificate.

[0008] The present invention also provides an information management program that causes a computer to perform the following process: sending a self-signed certificate to a management server, receiving a certificate authority signed certificate generated by the management server in response to the self-signed certificate, and performing data communication in a control system that controls the system based on the certificate authority signed certificate. Effect of the Invention

[0009] According to the present invention, there is an effect that engineering of an automation system can be efficiently carried out. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of an automation system according to an embodiment. [Diagram 2] FIG. 2 is a block diagram showing an example of the configuration of each device of the automation system according to the embodiment. [Diagram 3] FIG. 4 is a diagram illustrating an example of a registration information storage unit of the control device according to the embodiment. [Figure 4] 4 is a diagram illustrating an example of a self-signed certificate storage unit of the control device according to the embodiment; FIG. [Diagram 5] 4 is a diagram illustrating an example of a CA signed certificate storage unit of the control device according to the embodiment; FIG. [Figure 6] FIG. 11 is a diagram illustrating an example of an individual information storage unit of the management server according to the embodiment. [Figure 7] FIG. 2 is a sequence diagram showing an example of the overall flow of an automation system according to an embodiment. [Figure 8] FIG. 2 is a diagram illustrating an example of a hardware configuration according to an embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] An information processing device, an information processing method, and an information processing program according to an embodiment of the present invention will be described in detail below with reference to the drawings. Note that the present invention is not limited to the embodiment described below.

[0012] [Embodiment] The configuration and processing of the automation system 100 according to the embodiment, the configuration and processing of each device of the automation system 100, and the processing flow of the automation system 100 will be described below in order, and finally the effects of the embodiment will be described.

[0013] 1. Configuration and Processing of Automation System 100 The configuration and processing of the automation system 100 according to the embodiment will be described in detail with reference to Fig. 1. Fig. 1 is a diagram showing an example of the configuration of the automation system 100 according to the embodiment. Below, an example of the configuration of the entire automation system 100, an example of the processing of the automation system 100, and the effect of the automation system 100 will be described. Note that in the embodiment, factory production monitoring using plant equipment, which is a device installed in a plant, will be described as an example, but the device and field of use are not limited, and the system can also be applied to environmental measurement monitoring such as power monitoring, wind power generation, water and sewage monitoring, and river monitoring.

[0014] (1-1. Example of the overall configuration of the automation system 100) The automation system 100 has control devices 10 (10A, 10B, ...) which are information processing devices, a management server 20, and field devices 30 (30A, 30B, ...). Here, the control devices 10, the management server 20, and the field devices 30 are connected to each other so as to be able to communicate with each other by wire or wirelessly via a predetermined communication network (not shown). Note that the predetermined communication network can be any of various communication networks such as the Internet or a dedicated line.

[0015] (1-1-1. Control device 10) The control device 10 is a plant device that controls a plurality of field devices 30 that constitute a plant. For example, the control device 10 is realized by a control controller. The control device 10 is managed by an engineer E (EA, EB, ...) who performs maintenance and inspection of the plant's control system. In the example of FIG. 1, the control device 10A that constitutes control system A is managed by engineer EA. The control device 10B that constitutes control system B is managed by engineer EB.

[0016] Here, the control system is a system that controls the process of a plant, and is configured by a control device 10, as well as field devices 30 controlled by the control device 10. For example, the control system is realized by a DCN (Distributed Control Node) that is a control controller, a group of devices that manage the DCN, and a group of devices controlled by the DCN. The example in Fig. 1 includes multiple control systems such as control system A that controls the process of plant A, control system B that controls the process of plant B, etc. Also, the plant is, for example, a production facility for oil / petrochemicals, gas, iron / non-ferrous metals, chemicals, electricity, food and pharmaceuticals, etc.

[0017] (1-1-2. Management Server 20) The management server 20 is an information processing device that manages at least one control system. For example, the management server 20 is realized by a Global Discovery Server (GDS) that manages a control system that complies with Open Platform Communications Unified Architecture (OPC UA). Note that the automation system 100 shown in FIG. 1 may include multiple management servers 20. The management server 20 may also be realized by a cloud environment, an on-premise environment, an edge environment, or the like.

[0018] (1-1-3. Field device 30) The field devices 30 are plant devices that constitute a plant. For example, the field devices 30 are realized by measuring devices such as a temperature sensor, a pressure sensor, a flow rate sensor, and the like, and operating devices such as an actuator. In the example of Fig. 1, the field devices 30A that constitute the plant A include a field device 30A-1, a field device 30A-2, a field device 30A-3, .... The field devices 30B that constitute the plant B include a field device 30B-1, a field device 30B-2, a field device 30B-3, ....

[0019] (1-2. Example of processing of the entire automation system 100) The following describes the overall processing of the automation system 100. Note that the processing of steps S1 to S5 below may be executed in a different order. Also, some of the processing of steps S1 to S5 below may be omitted.

[0020] (1-2-1. Individual information registration process) First, management server 20 registers individual information (step S1). For example, management server 20 receives and stores the individual information of control device 10A that control device 10A has transmitted based on its own registration information.

[0021] Here, the self-registration information is location information of the management server 20 that is registered in advance in the control device 10, and is information including, for example, the IP (Internet Protocol) address and host name of the management server 20.

[0022] In addition, the individual information refers to individual identification information and location information of control devices set for each control system of the plant, and includes, for example, the vendor name of the control system, the control devices 10 that constitute the control system, the device names of the control devices 10, IP addresses, host names, etc.

[0023] (1-2-2. Self-signed certificate sending process) Second, the control device 10 transmits the self-signed certificate C s For example, control device 10A transmits self-signed certificate C s (A) is generated, and the self-signed certificate C is sent to the management server 20 in which the individual information of the control device 10A is registered. s At this time, the control device 10A transmits the self-signed certificate C (A) to the management server 20, for example, when the control device 10A is connected for the first time, or when the configuration of the control system A is changed due to replacement or addition of the control device 10A. s In addition, the control device 10A transmits, for example, the CA signed certificate C (A) transmitted from the management server 20 in the past. c One day before the expiration date of (A), the self-signed certificate C is installed on the management server 20. s Send (A).

[0024] At this time, the control device 10A, for example, receives the public key K p (SA) to private key K s (SA) is generated, and a digest D is generated by hashing the target identification information i(A) of the control device 10A. i (A) is generated, and the private key K of the control device 10A is generated. s Digest D using (SA) i (A) to the self-signed electronic signature S of the control device 10A s (A), generate target identity i(A), and self-signature S s (A), and a public key Kp Self-signed certificate C containing (SA) s (A) is sent to the management server 20.

[0025] Here, the target identity i is the self-signed certificate C s This is information for identifying a target device for generating the control signal, for example, the device name of the control device 10.

[0026] (1-2-3. CA signed certificate generation process) Third, the management server 20 generates the self-signed certificate C s The certificate authority signature S, which is the digital signature of the certificate authority (CA), is added to the c and issue a CA signed certificate C c For example, the management server 20 generates the self-signed certificate C by referring to the individual information held by the management server 20. s If the IP address of the control device 10A that sent (A) is registered, the self-signed certificate C s (A) is signed by the certification authority c (A) grants the CA signed certificate C c Generate (A).

[0027] At this time, the management server 20 generates a digest D by hashing the target identification information i(A) of the control device 10A, for example. i Generate (A) and create a self-signed certificate C s Public key K contained in (A) p (SA) self-signed S s Digest D of (A) i '(A) and convert it to the two digests D i (A) and D i The management server 20 verifies whether the data of the target identification information i(A) has been tampered with by comparing it with the public key K′(A). p Digest D of hashed (SA) k (A) is generated, and the private key K of the management server 20 is s (C) Digest D k(A) sends the certificate authority signature S, which is the digital signature of the management server 20 c Generate (A) and use the public key K p (SA) and Certificate Authority Signature c Certificate authority signed certificate C containing (A) c Generate (A).

[0028] (1-2-4. Certificate Signed by CA Transmission Process) Fourth, the management server 20 transmits the CA signed certificate C to the control device 10. c For example, the management server 20 transmits the generated CA signed certificate C based on the individual information of the control device 10A held by the management server 20 (step S4). c (A) to the control device 10A. In addition, the management server 20 transmits the public key K p (C) is transmitted to control device 10A.

[0029] (1-2-5. Data communication encryption processing) Fifth, the control device 10 encrypts data communication in the control system (step S5). For example, the control device 10A encrypts the CA signed certificate C between the management server 20, another control device 10A′ (not shown) constituting the control system A, an operator terminal of an operator who manages the control system A, etc. c Using the encryption information contained in (A), data communication is performed in which data tampering can be verified or in which "spoofing" or the like can be prevented.

[0030] Here, the cryptographic information is the CA signed certificate C c The information contained in (A), for example, whether or not the transmission data d(A) has been tampered with, or the certificate of another person's CA signing certificate C c The public key K of the control device 10 is used to verify the presence or absence of "spoofing" that uses the p (S) and the public key K p A certificate authority signature S used to verify whether data in (S) has been tampered with c It is.

[0031] At this time, the control device 10A generates a digest D by hashing the transmission data d(A), for example. d (A) generates a private key K s Digest D using (SA) d (A) to self-signed S d Generate (A), send data d(A), and send self-signature S d (A), and CA signed certificate C c (A) to the management server 20, other control devices 10A', operator terminals, etc. In addition, the control device 10A transmits the public key K p (C) is transmitted to the management server 20, other control devices 10A', operator terminals, etc.

[0032] On the other hand, the management server 20, other control devices 10A', operator terminals, etc. generate digests D d Generate (A) and issue a CA signed certificate C c Public key K contained in (A) p (SA) self-signed S d Digest D of (A) d '(A) and convert it to the two digests D d (A) and D d By comparing the transmitted data d(A) with the certificate of the CA of another party, whether or not the transmitted data d(A) has been tampered with is determined. c In addition, the management server 20, other control devices 10A', operator terminals, etc., use the CA signed certificate C c Public key K contained in (A) p Digest D of hashed (SA) k (A) is generated, and the public key K of the management server 20 is generated. p (C) using the certificate authority signature S c Digest D of (A) k '(A) and convert it to the two digests D k (A) and D k '(A) is compared with the public key K p Verify whether (SA) data has been tampered with.

[0033] (1-3. Effects of the Automation System 100) In the following, problems with the automation system 100P according to the reference technology will be described, and then the effects of the automation system 100 will be described.

[0034] (1-3-1. Problems with the Automation System 100P) In the automation system 100P, self-signed certificates C s In the automation system 100P, the certificate authority signed certificate C is exchanged via the certificate management client device. c Requested the issue of a CA signed certificate C c Data communication is performed by exchanging

[0035] However, the self-signed certificate C s The data communication performed by exchanging the CA signed certificate C via the certificate management client device is not secure. c The more plant devices in the control system, the more time and effort it takes to issue the CA signed certificate C. For example, in the automation system 100P, when a plant device in the control system is disconnected from the communication network, the CA signed certificate C is not issued to the plant device. c Engineer E must check whether the CA-signed certificate C issued to the plant equipment has been issued. c If the expiration date is not constantly checked, the communication network may be disconnected.

[0036] (1-3-2. Overview of the automation system 100) In the automation system 100, the following processes are executed. First, the management server 20 registers individual information of each control device 10. Second, the control device 10 registers a self-signed certificate C s Third, the management server 20 transmits the self-signed certificate C sCertificate Authority Signed S c and issue a CA signed certificate C c Fourthly, the management server 20 generates the CA signed certificate C c Fifth, the control device 10 transmits the CA signed certificate C c is used to encrypt data communications in the control system.

[0037] At this time, in the automation system 100, the control device 10 issues a certificate authority signed certificate C when the control device 10 is connected for the first time, when the control device 10 is replaced or added, or when the configuration of the control system is changed. c The self-signed certificate C is sent to the management server 20 at a timing such as a predetermined time before the expiration date of the self-signed certificate C. s Send.

[0038] (1-3-3. Effects of the Automation System 100) In the automation system 100, when the control device 10 joins the network, the control device 10 itself already has a certificate authority signed certificate C c For example, in the automation system 100, when a new control device 10 is installed in the control system, the control device 10 included in the control system checks the digital certificate of the control device 10 and determines whether the control device 10 has a CA signed certificate C. c After the procedure, the issued CA signed certificate C c Therefore, in the automation system 100, when the control device 10 is temporarily disconnected from the network and moved to a new location, the network can be automatically constructed even if the engineer E who manages the control device 10 is changed. Also, in the automation system 100, the CA signed certificate C c You can also check the expiration date and automatically renew it, for example, one day before it expires.

[0039] That is, the automation system 100 has the following effects. First, the automation system 100 can automate the process of electronically signing digital certificates for data communication in a control system that complies with standards such as OPC UA. Second, the automation system 100 can reduce the engineering work required for managing digital certificates and building a secure network. Third, the automation system 100 can prevent data communication of plant equipment that holds an invalid digital certificate, i.e., a digital certificate that has not been electronically signed by the management server 20.

[0040] As described above, the automation system 100 can efficiently perform engineering regarding the communication network of the automation system.

[0041] 2. Configuration and Processing of Each Device of the Automation System 100 The configuration and processing of each device included in the automation system 100 shown in Fig. 1 will be described with reference to Fig. 2. Fig. 2 is a block diagram showing an example of the configuration of each device of the automation system 100 according to the embodiment. In the following, an example of the configuration of the entire automation system 100 according to the embodiment will be described, and then an example of the configuration and processing of the control device 10, the management server 20, and the field device 30 will be described in detail.

[0042] (2-1. Example of the overall configuration of the automation system 100) An example of the overall configuration of the automation system 100 shown in Fig. 1 will be described with reference to Fig. 2. As shown in Fig. 2, the automation system 100 has a control device 10, a management server 20, and a field device 30. The control device 10, the management server 20, and the field device 30 are communicatively connected to each other via a communication network N realized by the Internet, a dedicated line, or the like.

[0043] In this case, the management server 20 may be realized by a cloud environment, an on-premise environment, an edge environment, or the like. The control device 10 and the field device 30 configure a control system that controls a system. Here, the system is, for example, a plant. The control system executes control of the plant. The field device 30 is installed in the plant.

[0044] Furthermore, the control system or the control device 10 may be compliant with, for example, standards such as OPA (Open Process Automation), MTP (Module Type Package), or NOA (NAMUR Open Architecture).

[0045] Furthermore, the control system or control device 10 may be compliant with, for example, the standard OPC UA.

[0046] (2-2. Configuration and Processing Examples of Control Device 10) An example of the configuration and processing of the control device 10 will be described with reference to Fig. 2. The control device 10 is a device that controls a plurality of devices that constitute a control system, and includes a communication unit 11, a storage unit 12, and a control unit 13.

[0047] (2-2-1. Communications Department 11) The communication unit 11 manages data communication with other devices. For example, the communication unit 11 performs data communication with each communication device via a router, etc. The communication unit 11 can also perform data communication with an operator's terminal (not shown).

[0048] (2-2-2. Storage section 12) The storage unit 12 stores various information referenced when the control unit 13 operates and various information acquired when the control unit 13 operates. The storage unit 12 has a self-registration information storage unit 12a, a self-signed certificate storage unit 12b, and a certificate authority signed certificate storage unit 12c. Here, the storage unit 12 can be realized by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk. Note that, in the example of FIG. 2, the storage unit 12 is installed inside the control device 10, but it may be installed outside the control device 10, or a plurality of storage units may be installed.

[0049] (2-2-2-1. Self-registration information storage unit 12a) The self-registration information storage unit 12a stores self-registration information. For example, the self-registration information storage unit 12a stores self-registration information including an IP address or a host name that identifies the location of the management server 20, which is input by an engineer E who manages the control system. An example of data stored in the self-registration information storage unit 12a will now be described with reference to FIG. 3. FIG. 3 is a diagram showing an example of the self-registration information storage unit 12a of the control device 10 according to the embodiment. In the example of FIG. 3, the self-registration information storage unit 12a has items such as "management server" and "IP address".

[0050] "Management server" refers to identification information for identifying the management server 20 that manages the control system, such as an identification number or identification symbol of the management server 20. "IP address" refers to identification information for identifying the management server 20 on the communication network, such as an identification number or identification symbol assigned to the management server 20.

[0051] 3 shows an example in which data such as {management server: "management server GDS001", IP address "XXX.XXX.XXX.001", ...} and {management server: "management server GDS002", IP address "YYY.YYY.YYY.002", ...} are stored in the self-registration information storage unit 12a. In the example of FIG. 3, "management server GDS001" executes processing as an active device that manages multiple control devices 10, and "management server GDS002" executes processing as a standby device that is a backup for the active device.

[0052] (2-2-2-2. Self-signed certificate storage unit 12b) The self-signed certificate storage unit 12b stores the self-signed certificate C s For example, the self-signed certificate storage unit 12b stores the self-signed certificate C generated by the transmission unit 13b of the control unit 13 (to be described later). s An example of data stored in the self-signed certificate storage unit 12b will now be described with reference to Fig. 4. Fig. 4 is a diagram showing an example of the self-signed certificate storage unit 12b of the control device 10 according to the embodiment. In the example of Fig. 4, the self-signed certificate storage unit 12b has items such as "control device" and "self-signed certificate".

[0053] The "control device" indicates identification information for identifying the control device 10 constituting the control system, and is, for example, an identification number or an identification symbol of the control device 10. The "self-signed certificate" is a digital certificate generated by the control device 10, and is, for example, a public key K of the control device 10. p (S) is the secret key K of the corresponding control device 10 s This is a certificate digitally signed by (S).

[0054] That is, Figure 4 shows an example in which data such as "self-signed certificate #1," "self-signed certificate #2," etc. are stored in the self-signed certificate memory unit 12b for the control device 10A identified by "control device DCN-A001."

[0055] (2-2-2-3. CA signed certificate storage unit 12c) The CA signed certificate storage unit 12c stores the CA signed certificate C c For example, the CA signed certificate storage unit 12c stores the CA signed certificate C generated by the management server 20 having the function of the CA and received by the receiving unit 13c of the control unit 13 described later. c An example of data stored in the CA signed certificate storage unit 12c will now be described with reference to Fig. 5. Fig. 5 is a diagram showing an example of the CA signed certificate storage unit 12c of the control device 10 according to the embodiment. In the example of Fig. 5, the CA signed certificate storage unit 12c has items such as "control device" and "CA signed certificate".

[0056] The "control device" indicates identification information for identifying the control device 10 constituting the control system, and is, for example, an identification number or an identification symbol of the control device 10. The "certificate signed by a certificate authority" is a digital certificate generated by the management server 20, and is, for example, a self-signed certificate C sent from the control device 10. s The public key K of the control device 10 included in p (S) is the private key K of the management server 20. s (C) is a digitally signed certificate.

[0057] That is, Figure 4 shows an example in which data such as "Certification Authority Signed Certificate #1", "Certification Authority Signed Certificate #2", etc. are stored in the Certificate Authority Signed Certificate memory unit 12c for the control device 10A identified by "control device DCN-A001".

[0058] (2-2-3. Control unit 13) The control unit 13 is responsible for controlling the entire control device 10. The control unit 13 has a registration unit 13a, a transmission unit 13b, a reception unit 13c, and an execution unit 13d. Here, the control unit 13 can be realized by, for example, an electronic circuit such as a central processing unit (CPU) or a micro processing unit (MPU), or an integrated circuit such as an application specific integrated circuit (ASIC) or a field programmable gate array (FPGA). The control unit 13 is realized via an application having an interface that complies with the standards of the OPA, a standards organization.

[0059] (2-2-3-1. Registration section 13a) The registration unit 13a registers various information. For example, the registration unit 13a uses the IP address or host name of the management server 20 to register individual information including the IP address or host name of the control device 10 in the management server 20.

[0060] To explain a specific example, the registration unit 13a refers to the IP address "XXX.XXX.XXX.001" of the management server 20A, which is the current device, from the self-registration information {management server: "management server GDS001", IP address "XXX.XXX.XXX.001", ...} entered by the engineer EA managing the control system A and stored in the self-registration information storage unit 12a, and transmits individual information including the identification information of the control device 10A, "control device DCN-A001", the IP address of the control device 10A, "XXX.XXX.AAA.001", etc., to the management server 20A, and stores it in the individual information storage unit 23a of the management server 20A.

[0061] On the other hand, when access to the management server 20A, which is the active device, is not possible, the registration unit 13a refers to the IP address "YYY.YYY.YYY.002" of the management server 20B, which is the standby device, from the self-registration information {management server: "management server GDS002", IP address: "YYY.YYY.YYY.002", ...}, transmits the individual information of the control device 10A to the management server 20B, and stores it in the individual information storage unit 23a of the management server 20B. Similarly, when access to the management server 20B is not possible, the registration unit 13a can refer to the IP addresses in the order of the list of the management servers 20 stored in the self-registration information storage unit 12a, and transmits the individual information of the control device 10A.

[0062] (2-2-3-2. Transmitter 13b) The transmission unit 13b transmits various information. For example, the transmission unit 13b transmits the self-signed certificate C s The sending unit 13b sends the self-signed certificate C to the management server 20 using the registered IP address or host name of the management server 20. s is transmitted to the management server 20.

[0063] To explain a specific example, the transmission unit 13b transmits the public key K p (S) to private key K s (S) is generated, and a digest D is generated by hashing the target identification information i of the control device 10. i and generate the private key K of the control device 10. s Digest D using (S) i The self-signed electronic signature S of the control device 10 is s Generate a target identity i and a self-signature S s , and the public key K p Self-signed certificate C containing (S) s The transmission unit 13b also references the IP address "XXX.XXX.XXX.001" of the management server 20, which is the self-registration information stored in the self-registration information storage unit 12a, and generates the self-signed certificate C. s is transmitted to the management server 20.

[0064] When the control device 10 is connected to the communication network including the management server 20 for the first time, or when the control device 10 is connected to the communication network including the management server 20 after a change in the system configuration, the transmission unit 13b transmits the self-signed certificate C s The sending unit 13b sends the CA signed certificate C to the management server 20. c A certain time before the expiration date of self-signed certificate C s is transmitted to the management server 20.

[0065] To explain a specific example, when the control device 10 is connected for the first time, the transmission unit 13b transmits the self-signed certificate C s Generate a self-signed certificate C s When the configuration of the control system is changed, such as when the control device 10 is replaced or expanded, the transmission unit 13b requests the control device 10 to submit a digital certificate held therein, and transmits the digital certificate to the management server 20 if the digital certificate held by the control device 10 is a valid CA signed certificate C c If not, the self-signed certificate C s Generate a self-signed certificate C s The transmitting unit 13b transmits the CA signed certificate C to the control device 10. c Refer to the history information of the CA signed certificate C c One day before the expiration date of self-signed certificate C s Generate a self-signed certificate C s is transmitted to the management server 20.

[0066] (2-2-3-3. Receiving unit 13c) The receiving unit 13c receives various information. For example, the receiving unit 13c receives the self-signed certificate C s The CA signed certificate C generated by the management server 20 according to c At this time, the receiving unit 13c receives the self-signed certificate C s The certificate authority signature S c The CA signed certificate C generated by granting cThe receiving unit 13c also receives the CA signed certificate C generated by the management server 20 when individual information including the IP address or host name of the control device 10 is registered. c Receive.

[0067] To explain a specific example, the receiving unit 13c receives the public key K p (S), and a digital signature generated by the management server 20, which is the private key K of the management server 20. s (C) is used to obtain the public key K p (S) Digest D k The CA signature S generated from c Certificate Authority Signed Certificate C c from the management server 20. The receiving unit 13c also receives the public key K p (C) from the management server 20. The receiving unit 13c receives the public key K p (C) can also be received from a management server 20′ different from the management server 20.

[0068] (2-2-3-4. Executive Section 13d) The execution unit 13d executes data communication. For example, the execution unit 13d executes the data communication using the CA signed certificate C c The execution unit 13d executes data communication in a control system that executes system control based on the CA signed certificate C. c Using the cryptographic information contained in c Here, tampering refers to data tampering of the transmission data d, public key K p (S) data tampering, etc. Also, the CA signed certificate C c The validity of the CA-signed certificate C c "Spoofing" using CA signed certificate C c The validity of the expiration date.

[0069] To explain a specific example, the execution unit 13d hashes the transmission data d to generate a digest D d and generate the private key K of the control device 10. s Digest D using (S) d Self-signed S from d Generate the transmission data d and the self-signed d , and a CA signed certificate C c The execution unit 13d transmits the public key K p (C) is transmitted to the management server 20, other control devices 10', operator terminals, and the like.

[0070] On the other hand, the execution unit 13d receives the transmission data d and the self-signed signature S transmitted from the management server 20, other control devices 10', the operator terminal, etc. d , and a CA signed certificate C c The execution unit 13d also receives the public key K of the management server 20 transmitted from the management server 20, another control device 10′, an operator terminal, etc. p At this time, the execution unit 13d receives the transmission data d and converts it into a hashed digest D d Generate a CA signed certificate C c The public key K contained in p (S) self-signs S d Digest D d ' and convert it to the digest of the two, D d and D d By comparing the data d with the certificate of the CA of another party, it is possible to determine whether the data d has been tampered with or not. c The execution unit 13d also verifies whether there is any "spoofing" using the CA signed certificate C. c The public key K contained in p A hashed digest of (S) D k and generate the public key K of the management server 20. p (C) is used to create the certificate authority signature S c Digest D k ' and convert it to the digest of the two, D k and D k' and the public key K p Verify whether or not the data in (S) has been tampered with.

[0071] Furthermore, the execution unit 13d collects measurement values ​​from the field devices 30 constituting the control system. Furthermore, the execution unit 13d may calculate a calculation value from the measurement values ​​collected from the field devices 30. Furthermore, the execution unit 13d controls the field devices 30 by transmitting a control signal.

[0072] (2-3. Configuration and Processing Examples of Management Server 20) A configuration example and a processing example of the management server 20 will be described with reference to Fig. 2. The management server 20 is an information processing device, and includes a control unit 21, a communication unit 22, and a storage unit 23. The management server 20 may also include an input unit (e.g., a keyboard, a mouse, etc.) that receives various operations from an administrator of the management server 20, and a display unit (e.g., a liquid crystal display, etc.) that displays various information.

[0073] (2-3-1. Control unit 21) The control unit 21 is responsible for controlling the entire management server 20. Here, the control unit 21 can be realized by, for example, an electronic circuit such as a CPU or an MPU, or an integrated circuit such as an ASIC or an FPGA.

[0074] The control unit 21 accepts the individual information. For example, the control unit 21 accepts the individual information including the IP address or the host name of the control device 10 transmitted from the control device 10, and stores the individual information in the storage unit 23.

[0075] To explain a specific example, the control unit 21 receives individual information transmitted from the control device 10A, including the identification information of the control device 10A, "control device DCN-A001", the IP address of the control device 10A, "XXX.XXX.AAA.001", etc., and stores the information in the individual information memory unit 23a of the memory unit 23, which will be described later.

[0076] The control unit 21 receives the self-signed certificate. Also, for example, the control unit 21 receives the self-signed certificate transmitted from the control device 10 using the IP address or host name of the management server 20.

[0077] To explain a specific example, control unit 21 receives target identification information i(A) of control device 10A and self-signed signature S s (A), and a public key K p Self-signed certificate C containing (SA) s Receive (A).

[0078] The control unit 21 generates a CA signed certificate. For example, the control unit 21 refers to the individual information held by the management server 20 and generates a self-signed certificate C s If the IP address of the control device 10A that sent (A) is registered, the self-signed certificate C s (A) is signed by the certification authority c (A) grants the CA signed certificate C c Generate (A).

[0079] To explain a specific example, the control unit 21 hashes the target identification information i(A) of the control device 10A to generate a digest D i Generate (A) and create a self-signed certificate C s Public key K contained in (A) p (SA) self-signed S s Digest D of (A) i '(A) and convert it to the two digests D i (A) and D i The control unit 21 verifies whether the data of the target identification information i(A) has been tampered with by comparing it with the public key K′(A). p Digest D of hashed (SA) k (A) is generated, and the private key K of the management server 20 is s (C) Digest D k (A) sends the certificate authority signature S, which is the digital signature of the management server 20 c Generate (A) and use the public key K p(SA) and Certificate Authority Signature c Certificate authority signed certificate C containing (A) c Generate (A).

[0080] The control unit 21 receives the certificate signed by the certificate authority C c For example, the control unit 21 transmits the generated CA signed certificate C based on the individual information of the control device 10A held by the management server 20. c (A) is sent to the control device 10A. The control unit 21 also transmits the public key K p (C) is transmitted to control device 10A.

[0081] To explain a specific example, the control unit 21 derives the public key K based on the IP address "XXX.XXX.AAA.001" of the control device 10A. p (SA) and Certificate Authority Signature c Certificate authority signed certificate C containing (A) c (A) is transmitted to the control device 10A, and the public key K p (C) is transmitted to control device 10A.

[0082] (2-3-2. Communications section 22) The communication unit 22 manages data communication with other devices. For example, the communication unit 22 performs data communication with each communication device via a router, etc. The communication unit 22 can also perform data communication with an operator's terminal (not shown).

[0083] (2-3-3. Storage section 23) The storage unit 23 stores various information referenced when the control unit 21 operates and various information acquired when the control unit 21 operates. The storage unit 23 has an individual information storage unit 23a. Here, the storage unit 23 can be realized by, for example, a semiconductor memory element such as a RAM or a flash memory, or a storage device such as a hard disk or an optical disk. Note that, in the example of FIG. 2, the storage unit 23 is installed inside the management server 20, but it may be installed outside the management server 20, or multiple storage units may be installed.

[0084] (2-3-3-1. Individual information storage unit 23a) The individual information storage unit 23a stores individual information. For example, the individual information storage unit 23a stores individual information including an IP address or a host name that is registered by the control device 10 and identifies the location of the control device 10. An example of data stored in the individual information storage unit 23a will now be described with reference to FIG. 6. FIG. 6 is a diagram showing an example of the individual information storage unit 23a of the management server 20 according to the embodiment. In the example of FIG. 6, the individual information storage unit 23a has items such as "DCN vendor," "control device," and "IP address."

[0085] "DCN vendor" indicates identification information for identifying the system vendor that provides the control system, such as the company name of the system vendor. "Control device" indicates identification information for identifying the control device 10 that constitutes the control system, such as an identification number or identification symbol of the control device 10. "IP address" indicates identification information for identifying the control device 10 on the communication network, such as an identification number or identification symbol assigned to the control device 10.

[0086] That is, Figure 6 shows an example in which data such as {control device: "control device DCN-A001", IP address "XXX.XXX.AAA.001", ...} for a DCN vendor identified by "Company A" and {control device: "control device DCN-B001", IP address "XXX.XXX.BBB.001", ...} for a DCN vendor identified by "Company B" are stored in the individual information storage unit 23a.

[0087] (2-4. Field device 30) The field device 30 is a measuring device such as a sensor device constituting a control system, and measures a sensor value or a process value. At this time, the field device 30 transmits the measured sensor value or process value as a measurement value to the control device 10 constituting the control system. The field device 30 is also an operating device such as an actuator constituting the control system, and performs process control such as opening and closing a valve in response to a control signal received from the control device 10 constituting the control system.

[0088] 3. Flow of each process in the automation system 100 The overall process flow of the automation system 100 according to the embodiment will be described with reference to Fig. 7. Fig. 7 is a sequence diagram showing an example of the overall process flow of the automation system 100 according to the embodiment. Below, the individual information management process, the certificate management process, and the data communication management process will be described in that order.

[0089] (3-1. Individual information management process flow) The flow of individual information management processing of the automation system 100 according to the embodiment will be described below. Note that the processing of steps S101 to S108 below can be executed in a different order. Also, among the processing of steps S101 to S108 below, some processing may be omitted.

[0090] First, engineer EA executes a self-registration information input process (step S101). For example, engineer EA inputs self-registration information including the IP address of management server 20 that manages control system A to control device 10A. Second, control device 10A executes a self-registration information save process (step S102). For example, control device 10A saves the self-registration information including the IP address of management server 20 in self-registration information storage unit 12a of control device 10A. Third, control device 10A executes an individual information transmission process (step S103). For example, control device 10A refers to the IP address of management server 20 and transmits individual information of control device 10A including the target identification information i(A) and IP address of control device 10A to management server 20. Fourth, management server 20 executes individual information save process (step S104). For example, management server 20 receives individual information of control device 10A transmitted from control device 10A, and stores it in individual information storage unit 23a of control device 10A.

[0091] Fifth, engineer EB executes a self-registration information input process (step S105). For example, engineer EB inputs self-registration information including the IP address of management server 20 that manages control system B to control device 10B. Sixth, control device 10B executes a self-registration information save process (step S106). For example, control device 10B saves the self-registration information including the IP address of management server 20 in self-registration information storage unit 12a of control device 10B. Seventh, control device 10B executes an individual information transmission process (step S107). For example, control device 10B refers to the IP address of management server 20 and transmits individual information of control device 10B including the target identification information i(B) and IP address of control device 10B to management server 20. Eighth, management server 20 executes individual information save process (step S108). For example, management server 20 receives the individual information of control device 10B transmitted from control device 10B, and stores it in individual information storage unit 23a of control device 10B.

[0092] (3-2. Certificate management process flow) The following describes the flow of certificate management processing in the automation system 100 according to the embodiment. Note that the following steps S201 to S212 may be executed in a different order. Also, some of the following steps S201 to S212 may be omitted.

[0093] First, control device 10A executes self-registration information reference processing (step S201). For example, when control system A is initially set up, control device 10A searches self-registration information storage unit 12a of control device 10A and acquires the IP address of management server 20. Second, control device 10A executes self-signed certificate generation processing (step S202). For example, control device 10A searches target identification information i(A), self-signed certificate S s (A), and the public key K of the control device 10A p Self-signed certificate C containing (SA) s Thirdly, control device 10A executes a self-signed certificate transmission process (step S203). For example, control device 10A generates self-signed certificate C(A) based on the IP address of management server 20. s (A) to the management server 20. Fourth, the management server 20 executes a CA signed certificate generation process (step S204). For example, the management server 20 transmits the public key K p (SA) and Certificate Authority Signature c Certificate Authority Signed Certificate C c Fifthly, the management server 20 executes a CA signed certificate transmission process (step S205). For example, the management server 20 generates the CA signed certificate C (A). c Sixth, control device 10A executes a CA signed certificate storage process (step S206). For example, control device 10A transmits the received CA signed certificate C (A) to control device 10A. c (A) is stored in CA signed certificate storage unit 12c of control device 10A.

[0094] Seventh, control device 10B executes self-registration information reference processing (step S207). For example, control device 10B searches self-registration information storage unit 12a of control device 10B during initial configuration of control system B, and acquires the IP address of management server 20. Eighth, control device 10B executes self-signed certificate generation processing (step S208). For example, control device 10B searches target identification information i(B), self-signed certificate S s (B), and the public key K of the control device 10B p Self-signed certificate C containing (SB) s Ninthly, control device 10B executes a self-signed certificate transmission process (step S209). For example, control device 10B generates self-signed certificate C(B) based on the IP address of management server 20. s (B) to the management server 20. Tenth, the management server 20 executes a CA signed certificate generation process (step S210). For example, the management server 20 transmits the public key K p (SB) and Certificate Authority Signature S c Certificate authority signed certificate C containing (B) c Eleventhly, the management server 20 executes a CA signed certificate transmission process (step S211). For example, the management server 20 generates the CA signed certificate C (B). c Twelfthly, control device 10B executes a CA signed certificate storage process (step S212). For example, control device 10B transmits the received CA signed certificate C (B) to control device 10B. c (B) is stored in CA signed certificate storage unit 12c of control device 10B.

[0095] (3-3. Data communication management process flow) The following describes the flow of data communication management processing in the automation system 100 according to the embodiment. Note that the processing in steps S301 to S306 below may be executed in a different order. Also, some of the processing in steps S301 to S306 below may be omitted.

[0096] First, control device 10A executes a CA signed certificate reference process (step S301). For example, when control device 10A starts data communication, control device 10A searches CA signed certificate storage unit 12c of control device 10A and retrieves CA signed certificate C. c Secondly, control device 10A executes data communication encryption processing (step S302). For example, control device 10A obtains digest D(A) by hashing transmission data d(A). d (A) is generated, and the private key K of the control device 10A is generated. s Digest D using (SA) d (A) to self-signed S d Thirdly, control device 10A executes data communication processing (step S303). For example, control device 10A generates transmission data d(A), self-signed signature S d (A), and CA signed certificate C c (A) is the public key K of the management server 20. p The control system A receives the transmission data d(A), the self-signature S, and the control device 10A' that configures the control system A, and transmits the self-signature S together with the received transmission data d(A), the self-signature S, and the control device 10A' that configures the control system A, and the operator terminal of the operator that manages the control system A. d (A), Certificate Authority Signed Certificate C c (A), and a public key K p (C) is used to obtain the public key K of the control device 10A. p Verify whether or not the data (SA) or the transmitted data d(A) has been tampered with.

[0097] Fourth, control device 10B executes a CA signed certificate reference process (step S304). For example, when control device 10B starts data communication, control device 10B searches CA signed certificate storage unit 12c of control device 10B and retrieves CA signed certificate C. c Fifth, control device 10B executes data communication encryption processing (step S305). For example, control device 10B obtains digest D(B) by hashing transmission data d(B). d (B) is generated, and the private key K of the control device 10B is generated. s Digest D using (SB)d (B) to self-signed S d Sixth, control device 10B executes data communication processing (step S306). For example, control device 10B generates transmission data d(B), self-signed signature S d (B), and CA signed certificate C c (B) is the public key K of the management server 20. p The control system B receives the self-signed signature S(C) and transmits it to the management server 20, other control devices 10B' constituting the control system B, and the operator terminal of the operator who manages the control system B. Meanwhile, the management server 20, other control devices 10B', the operator terminal, etc., receive the transmission data d(B), the self-signed signature S(C), and transmit it to the management server 20, other control devices 10B' constituting the control system B, and the operator terminal of the operator who manages the control system B. d (B) Certificate Signed by CA C c (B), and the public key K p (C) is used to obtain the public key K of the control device 10B. p Verify whether or not data tampering has occurred in (SB) or the transmitted data d(B).

[0098] 4. Effects of the embodiment Finally, effects of the embodiment will be described below: Effects 1 to 9 corresponding to the processing according to the embodiment will be described below.

[0099] (4-1. Effect 1) First, in the process according to the embodiment described above, the control device 10 verifies the self-signed certificate C s and send it to the management server 20, and create a self-signed certificate C s The CA signed certificate C generated by the management server 20 according to c Receive the CA signed certificate C c The data communication is performed in a control system that controls the system based on the above. Therefore, in this process, engineering related to the communication network of the automation system can be efficiently performed.

[0100] (4-2. Effect 2) Secondly, in the process according to the embodiment described above, the control device 10 uses the IP address or host name of the registered management server 20 to generate the self-signed certificate C sThe management server 20 sends the self-signed certificate C s The certificate authority signature S c The CA signed certificate C generated by granting c Receive the CA signed certificate C c Using the cryptographic information contained in c For this reason, in this process, the self-signed certificate C is sent to the management server 20 that manages the control system. s By automatically transmitting the information, engineering of the communication network of the automation system can be carried out efficiently.

[0101] (4-3. Effect 3) Thirdly, in the process according to the embodiment described above, the control device 10 registers individual information including the IP address or host name of the control device 10 in the management server 20 using the IP address or host name of the management server 20. Therefore, in this process, by performing self-registration in the management server 20 that manages the control system, engineering related to the communication network of the automation system can be efficiently performed.

[0102] (4-4. Effect 4) Fourthly, in the process according to the embodiment described above, the control device 10 uses the CA signed certificate C generated by the management server 20 when individual information including the IP address or host name of the control device 10 is registered. c Therefore, in this process, the CA signed certificate C is received only for the control device 10 registered in the management server 20. c By transmitting the above information, the engineering of the communication network of the automation system can be carried out efficiently.

[0103] (4-5. Effect 5) Fifth, in the process according to the embodiment described above, when the control device 10 is connected to the communication network including the management server 20 for the first time, or when the control device 10 is connected to the communication network after the system configuration is changed, the control device 10 verifies the self-signed certificate C. s For this reason, in this process, the self-signed certificate C is transmitted to the management server 20 when the control system is connected to the communication network for the first time or after a change in the connection. s By automatically transmitting the information, engineering of the communication network of the automation system can be carried out efficiently.

[0104] (4-6. Effect 6) Sixth, in the process according to the embodiment described above, the control device 10 verifies the CA signed certificate C c A certain time before the expiration date of self-signed certificate C s In this process, the engineer E sends the CA signed certificate C to the management server 20. c Self-signed certificate C without constantly checking the expiration date s By automatically transmitting the information, engineering of the communication network of the automation system can be carried out efficiently.

[0105] (4-7. Effect 7) Seventh, in the process according to the embodiment described above, the control system or the control device 10 complies with OPA, MTP, or NOA. Therefore, in this process, engineering related to the communication network of the automation system, which is being unified as an international standard, can be efficiently performed.

[0106] (4-8. Effect 8) Eighth, in the process according to the embodiment described above, the control system or the control device 10 complies with OPC UA. Therefore, in this process, engineering related to the communication network of the automation system that complies with OPC UA can be efficiently performed.

[0107] (4-9. Effect 9) Ninth, in the process according to the embodiment described above, the control system or the control device 10 controls the plant. Therefore, in this process, engineering of the communication network of the automation system of the plant where safety is required can be efficiently performed.

[0108] 〔system〕 The information including the processing procedures, control procedures, specific names, various data and parameters shown in the above documents and drawings can be changed arbitrarily unless otherwise specified.

[0109] In addition, each component of each device shown in the figure is a functional concept, and does not necessarily have to be physically configured as shown in the figure. In other words, the specific form of distribution and integration of each device is not limited to that shown in the figure. In other words, all or part of them can be functionally or physically distributed and integrated in any unit according to various loads, usage conditions, etc.

[0110] Furthermore, each processing function performed by each device may be realized, in whole or in part, by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware using wired logic.

[0111] [Hardware] Next, an example of the hardware configuration of the control device 10, which is an information management device, will be described. Note that other devices may also have a similar hardware configuration. FIG. 8 is a diagram for explaining an example of the hardware configuration according to an embodiment. As shown in FIG. 8, the control device 10 has a communication device 10a, a HDD (Hard Disk Drive) 10b, a memory 10c, and a processor 10d. Furthermore, each unit shown in FIG. 8 is connected to each other via a bus or the like.

[0112] The communication device 10a is a network interface card or the like, and communicates with other servers. The HDD 10b stores programs and databases that operate the functions shown in FIG.

[0113] The processor 10d reads out a program that executes the same processes as the respective processing units shown in Fig. 2 from the HDD 10b etc. and loads it in the memory 10c, thereby operating a process that executes the respective functions described in Fig. 2 etc. For example, this process executes the same functions as the respective processing units possessed by the control device 10. Specifically, the processor 10d reads out a program having the same functions as the registration unit 13a, the transmission unit 13b, the reception unit 13c, the execution unit 13d etc. from the HDD 10b etc. Then, the processor 10d executes a process that executes the same processes as the registration unit 13a, the transmission unit 13b, the reception unit 13c, the execution unit 13d etc.

[0114] In this way, the control device 10 operates as a device that executes various processing methods by reading and executing a program. The control device 10 can also realize functions similar to those of the above-mentioned embodiment by reading the program from a recording medium using a media reading device and executing the read program. Note that the program in this other embodiment is not limited to being executed by the management server 20. For example, the present invention can be similarly applied to cases where another computer or server executes a program, or where these execute a program in cooperation with each other.

[0115] This program can be distributed via a network such as the Internet. This program can also be recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, a magneto-optical disk (MO), or a digital versatile disk (DVD), and can be executed by being read out from the recording medium by a computer. [Explanation of symbols]

[0116] 10. Control Equipment 11 Communications Department 12 Storage section 12a Self-registration information storage unit 12b Self-signed certificate storage 12c CA Signed Certificate Storage 13 Control section 13a Registration Section 13b Transmitter 13c Receiving section 13d Executive Department 20 Management Server 21 Control section 22 Communications Department 23 Memory section 23a Individual information storage unit 30 Field Devices 100 Automation Systems

Claims

1. a transmitting unit that transmits the self-signed certificate to a management server; a receiving unit that receives a CA signed certificate generated by the management server in response to the self-signed certificate; an execution unit that executes data communication in a control system that executes system control based on the CA signed certificate; An information processing device comprising:

2. The transmission unit is Sending the self-signed certificate to a management server using a registered internet protocol address or hostname of the management server; The receiving unit is receiving the CA-signed certificate generated by the management server by adding a CA signature to the self-signed certificate; The execution unit is performing data communication in the control system that can verify whether the data has been tampered with or that can verify the validity of the certificate signed by the certificate authority, using cryptographic information included in the certificate signed by the certificate authority; The information processing device according to claim 1 .

3. a registration unit that registers individual information including an internet protocol address or a host name of the information processing device in the management server by using the internet protocol address or the host name of the management server; The information processing device according to claim 2 , further comprising:

4. The receiving unit is the management server receives the CA signed certificate generated when individual information including the internet protocol address or the host name of the information processing device is registered; The information processing device according to claim 2 .

5. The transmission unit is when the information processing device is connected to the communication network including the management server for the first time, or when the information processing device is connected to the communication network after a change in a system configuration, the self-signed certificate is transmitted to the management server; The information processing device according to claim 1 .

6. The transmission unit is transmitting the self-signed certificate to the management server a predetermined time before the expiration date of the certificate authority signed certificate; The information processing device according to claim 1 .

7. The control system or the information processing device complies with OPA (Open Process Automation), MTP (Module Type Package), or NOA (NAMUR Open Architecture). The information processing device according to claim 1 .

8. The control system or the information processing device complies with OPC UA (Open Platform Communications Unified Architecture). The information processing device according to claim 1 .

9. The control system or the information processing device executes control of a plant. The information processing device according to claim 1 .

10. The computer Send the self-signed certificate to the management server, receiving a CA signed certificate generated by the management server in response to the self-signed certificate; performing data communication in a control system that performs control of the system based on the CA-signed certificate; An information processing method for performing a process.

11. On the computer, Send the self-signed certificate to the management server, receiving a CA signed certificate generated by the management server in response to the self-signed certificate; performing data communication in a control system that performs control of the system based on the CA-signed certificate; An information processing program that executes processing.

Images