Closed environment system, information processing method, information processing device, and program

Abstract

To provide a closed environment system capable of monitoring a target device installed in a closed environment in which communication with the outside is blocked as much as possible from the outside with higher security.SOLUTION: An information processing device installed in a closed environment is connected for communication with a data diode device, operates a target device based on operation information received from the data diode device, and outputs display information displayed on a monitor provided in the target device operated based on the operation information to the outside via a dedicated display cable.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a closed environment system, an information processing method, an information processing device, and a program. [Background technology]

[0002] Patent Document 1 discloses a technology for a monitoring system and an operation and maintenance data management system for a nuclear power plant.

[0003] The technology in Patent Document 1 describes that a one-way gateway is provided in the monitoring system of a nuclear power plant, and that a monitoring program provided in a thin client server transmits a screen containing monitoring control information to a device such as a terminal outside the system (paragraphs 0036, 0063, etc.). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2011-21977 Summary of the Invention [Problem to be solved by the invention]

[0005] Meanwhile, there is a demand for technology that can provide higher security for external monitoring of target devices that are installed in closed environments where communication with the outside world is blocked as much as possible.

[0006] An object of the present disclosure is to provide a closed environment system, an information processing method, an information processing device, and a program that solve the above-mentioned problems. [Means for solving the problem]

[0007] A closed environment system according to one aspect of the present disclosure includes a communication means for communicating with a data diode device, an operation means for operating a target device based on operation information received from the data diode device, and an output means for outputting display information output by the target device operated based on the operation information to the outside via a dedicated display cable.

[0008] An information processing method according to one aspect of the present disclosure includes establishing a communication connection with a data diode device, operating a target device based on operation information received from the data diode device, and outputting display information output by the target device operated based on the operation information to the outside via a dedicated display cable.

[0009] An information processing device according to one aspect of the present disclosure includes a communication means for communicating with a data diode device, an operation means for operating a target device based on operation information received from the data diode device, and an output means for outputting display information output by the target device operated based on the operation information to the outside via a dedicated display cable.

[0010] A program according to one aspect of the present disclosure causes a computer of an information processing device to function as a communication means for connecting to a data diode device for communication, an operation means for operating a target device based on operation information received from the data diode device, and an output means for outputting display information output by the target device operated based on the operation information to the outside via a dedicated display cable. [Effects of the Invention]

[0011] According to the above aspect, it is possible to perform monitoring from the outside with higher security, on a target device that is installed in a closed environment in which communication with the outside is blocked as much as possible. [Brief explanation of the drawings]

[0012] [Figure 1] FIG. 1 is a first diagram showing an overview of a computer system according to the present disclosure. [Figure 2] FIG. 2 is a functional block diagram of an access point device according to the present disclosure. [Figure 3] FIG. 2 is a first diagram showing functional blocks of a target device provided in the closed environment system of the present disclosure. [Figure 4] FIG. 2 is a diagram illustrating a hardware configuration of a target device according to the present disclosure. [Figure 5] FIG. 2 is a diagram illustrating a processing flow of a computer system according to the present disclosure. [Figure 6] FIG. 2 is a second diagram showing the functional blocks of the target device provided in the closed environment system of the present disclosure. [Figure 7] FIG. 2 is a second diagram showing an overview of the computer system of the present disclosure. [Figure 8] FIG. 1 is a functional block diagram of a closed environment system of the present disclosure. [Figure 9] FIG. 2 is a diagram showing a processing flow of the closed environment system of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0013] A computer system including a closed environment system according to the present disclosure will be described below with reference to the drawings.

[0014] FIG. 1 is a first diagram showing an overview of a computer system according to the present disclosure. The computer system 100 of the present disclosure includes a closed environment system 101 and an open environment system 102. The computer system 100 may further include a remote environment system 103 equipped with a remote terminal for remotely controlling an information processing device equipped in the open environment system 102. Note that the open environment system 102 may be defined as a remote environment system equipped with a terminal for remotely controlling an information processing device equipped in the closed environment system 101.

[0015] The closed environment system 101 is a computer system configured with one or more information processing devices or devices in a closed environment. In the present disclosure, the system includes a target device 1 to be controlled and an AP (access point device) 5. A closed environment may be defined, for example, as an environment in which people's access is restricted and in which communication with the outside via a communication network is strictly restricted. Alternatively, a closed environment may be defined as an environment in which reception via TCP / IP communication is possible but in which transmission to the outside via such communication is restricted. In the present disclosure, data can be received from the outside via a data diode 2, and display information output by the target device 1 can be output to the outside via a dedicated display cable, but other communications are restricted. Note that the data diode 2 may or may not be included in the closed environment system 101.

[0016] The open environment system 102 is equipped with a terminal 3, which is an aspect of an information processing device. The terminal 3 is equipped with a capture board 3. The capture board 3 receives display information output by the target device 1 in the closed environment system 101 via a display-dedicated cable 7 and displays it on the monitor of the terminal 3. The open environment system 102 is equipped with a keyboard and a mouse, and operation information signals output from the mouse and keyboard are received by the AP 5 of the closed environment system 101 via the AP (access point device) 4 and data diode 2 of the open environment system 102, and the target device 1 is controlled based on the operation information. Note that the operation information input devices such as the mouse and keyboard equipped in the open environment system 102 may be equipped in the terminal 3, or may be input devices such as a mouse and keyboard operated from a terminal 6 of the remote environment system 103 that is separate from the terminal 3.

[0017] AP4 and AP5 may transmit and receive signals output from a mouse or keyboard, may transmit and receive pulse signals using voltages corresponding to operation information via signal lines, or may transmit and receive operation information signals using a communication protocol such as TCP / IP.

[0018] The remote environment system 103 is provided with a terminal 6, and a user who manages the target device 1 operates the terminal 6. The terminal 6 is communicatively connected to the terminal 3 provided in the open environment system 102 and input devices such as a mouse and a keyboard. The terminal 6 may be able to receive screen information displayed by the terminal 3 and display it on a monitor. The terminal 6 may also be able to remotely control the terminal 3 based on the user's operation.

[0019] FIG. 2 is a functional block diagram of an access point device provided in the closed environment system. In the above example, the AP 5 may include a communication means 51 and an operation means 52. The communication means 51 is in communication connection with the data diode 2 . The operation means 52 operates the target device 1 based on the operation information received from the data diode 2 .

[0020] 2, the target device 1 includes a means for outputting display information. The output means outputs display information output by the target device operated based on operation information to the capture board 31 of the terminal 3 via a dedicated display cable 7. The AP 5 may perform the functions of the communication means 51 and the operation means 52 by a CPU included in the AP 5 executing a program, or may perform the functions of the communication means 51 and the operation means 52 by an electronic circuit included in the AP 5 operating.

[0021] FIG. 3 is a first diagram showing functional blocks of a target device provided in a closed environment system. In the above example, the target device 1 may have the functions of the AP 5. In this case, the target device 1 has a communication means 11, an operation means 12, and an output means 13. The communication means 11 is in communication connection with the data diode 2 . The operation means 12 operates the target device 1 based on the operation information received from the data diode 2 . The output means 13 outputs the display information output by the target device operated based on the operation information to the capture board 31 of the terminal 3 via the display-dedicated cable 7 .

[0022] 2, the target device 1 includes a display information output means 13. The output means 13 outputs the display information output by the target device operated based on the operation information to the capture board 31 of the terminal 3 via the display-dedicated cable 7.

[0023] The target device 1 may perform the functions of the communication means 11, operation means 12, and output means 13 by the CPU provided in the target device 1 executing a program, or may perform the functions of the communication means 11, operation means 12, and output means 13 by the operation of electronic circuits provided in the target device 1.

[0024] FIG. 4 is a diagram showing the hardware configuration of the target device. 4, the target device 1 is a computer equipped with various hardware components such as a CPU (Central Processing Unit) 101, a ROM (Read Only Memory) 102, a RAM (Random Access Memory) 103, a storage device 104, a communication module 105, and a sensor 106. Note that the data diode 2, terminal 3, AP4, AP5, and terminal 6 may also be computers equipped with all or part of the same hardware configuration. The target device 1, data diode 2, terminal 3, AP4, AP5, and terminal 6 may each be equipped with a predetermined electronic circuit, electric circuit, or other configuration.

[0025] FIG. 5 is a diagram showing the processing flow of the computer system of the present disclosure. First, terminal 3 receives display information from target device 1 via display cable 7 and capture board 31 and displays it on the monitor of terminal 3 (step S501). The information received and displayed by terminal 3 via display cable 7 may be any information that target device 1 outputs as display information. A user remotely operates target device 1 while visually checking the display information output by target device 1 displayed on terminal 3. When operating terminal 3, a user inputs operation information using input devices such as a keyboard or mouse provided on terminal 3, or input devices such as keyboard 32 or mouse 33 provided separately from terminal 3. Terminal 3 detects the input of operation information (step S502). The operation information may be a mouse click or a keyboard key press. Terminal 3, keyboard 32, or mouse 33 outputs the operation information to data diode 2 (step S503). Note that data diode 2 receives the operation information output from keyboard 32 or mouse 33 via AP 4. AP 4 may be connected to input devices such as keyboard 32 or mouse 33 via wireless communication.

[0026] The user may operate terminal 6 of remote environment system 103. In this case, terminal 6 receives the display information of terminal 3 via the communication network and displays it on the monitor of terminal 6. The user operates target device 1 remotely while visually checking the display information output by target device 1 displayed on terminal 6. In this case, the user inputs operation information using input devices such as a keyboard and mouse provided on terminal 6. Terminal 6 transmits the operation information to terminal 3, and terminal 3 outputs the operation information to data diode 2.

[0027] The data diode 2 transmits a signal of operation information to the AP 5 (step S504). The communication means 51 of the AP 5 receives the operation information. The communication means 51 outputs the operation information to the operation means 52. The operation means 52 transmits the operation information to the target device 1. The target device 1 operates based on the operation information (step S505). As a result, for example, the display information output by the output means 13 of the target device 1 changes. The output means 13 transmits the display information to the capture board 31 of the terminal 3 via the display-dedicated cable 7 (step S506). The terminal 3 outputs the display information received by the capture board to the monitor (step S507). Alternatively, if the terminal 3 is being remotely controlled from the terminal 6, the terminal 3 transmits the display information received by the capture board 31 to the terminal 6 (step S508). The terminal 6 outputs the received display information to the monitor (step S509). This allows a user operating terminal 3 of open environment system 102 or a user operating terminal 6 of remote environment system 103 to remotely operate target device 1 while checking the display information output by target device 1 from a remote location.

[0028] According to the above-described computer system 100, the closed environment system 101 receives external operation information only from the data diode 2, and outputs output information of the target device 1 to the outside via a dedicated display cable. Therefore, the closed environment system 101 transfers only operation information output from the keyboard, mouse, etc. to the closed environment through one-way communication using the data diode 2, thereby preventing the leakage of important files stored in the target device 1. Furthermore, since only the display information output by the target device 1 is displayed in an open environment (remote environment) outside the closed environment, it is possible to prevent the leakage of important data stored in the target device 1.

[0029] Furthermore, in the above-mentioned closed environment system 101, the target device 1 does not need to display display information on a monitor, and no hardware such as a dedicated extension cable is required to connect the target device 1 in the closed environment system 101 to input devices such as a keyboard and mouse in the open environment system 102.

[0030] FIG. 6 is a second diagram showing functional blocks of a target device provided in a closed environment system. The closed environment system 101 may have the function of a data processing means 14 that outputs external data received from an external device such as terminal 3 via data diode 2 to the target device 1. Terminal 3 transmits predetermined target data to the data diode 2 based on a user operation using terminal 3 or terminal 6. Data diode 2 transmits the target data 2 to AP 5 or target device 1. When AP 5 receives the target data, AP 5 outputs the target data to the target device 1. Furthermore, the target device 1 acquires operation information through the above-mentioned processing. The target device 1 processes the target data based on the operation information. This allows the target device 1 to process the external data in the closed environment system 101. Note that AP 5 may also be provided with data processing means 14 and perform similar processing.

[0031] FIG. 7 is a second diagram showing an overview of the computer system of the present disclosure. 7 includes a monitor 61 connected to the target device 1 and an imaging device 62. The imaging device 62 captures an image of the monitor 61. Instead of the target device transmitting display information to the capture board 31 of the terminal 3, the imaging device 62 captures the monitor 61 and transmits the generated image information to the capture board 31 of the terminal 3 via the display-dedicated cable 7. Other processing is the same as that described above.

[0032] By such processing of the closed environment system 101, no information is directly output from the target device 1 to the outside, and furthermore, it becomes possible to prevent leakage of important data stored in the target device 1 of the closed environment system 101.

[0033] FIG. 8 is a functional block diagram of the closed environment system. FIG. 9 is a diagram showing a processing flow of the closed environment system. The closed environment system 101 may include a communication means 71, an operation means 72, and an output means 73. The communication means 71 establishes a communication connection with the data diode 2 (step S901). The operation means 72 operates the target device 1 based on the operation information received from the data diode 2 (step S902). The output means 73 outputs the display information output by the target device operated based on the operation information to the outside via a dedicated display cable (step S903).

[0034] According to such a closed environment system 101, it is possible to perform monitoring from the outside with higher security of a target device installed in a closed environment in which communication with the outside is blocked as much as possible.

[0035] Some or all of the above-described embodiments can be described as, but are not limited to, the following supplementary notes.

[0036] (Appendix 1) communication means for communicating with the data diode device; an operation means for operating a target device based on operation information received from the data diode device; an output unit that outputs display information output by the target device operated based on the operation information to an external device via a dedicated display cable; A closed environment system comprising:

[0037] (Appendix 2) 2. A closed environment system according to claim 1, wherein the operation means is an input device for operating a computer of the target device.

[0038] (Appendix 3) The closed environment system according to claim 1 or 2, wherein the operation means operates the target device based on operation information output from a mouse provided in an external system and received via the data diode device.

[0039] (Appendix 4) The closed environment system according to any one of claims 1 to 3, wherein the operation means operates the target device based on operation information output from a keyboard provided in an external system and received via the data diode device.

[0040] (Appendix 5) 5. A closed environment system according to any one of claims 1 to 4, comprising an imaging device that captures an image of a monitor of the target device and that has the output means.

[0041] (Appendix 6) a data processing means for receiving external data from the data diode device and outputting the data to the target device; 6. The closed environment system according to any one of claims 1 to 5, comprising:

[0042] (Appendix 7) 7. A closed environment system according to claim 6, wherein the target device comprises the communication means, the operation means, the output means, and the data processing means.

[0043] (Appendix 8) The output means outputs the display information to an information processing device provided in the external open environment via the dedicated display cable. 10. The closed environment system of any one of claims 1 to 7.

[0044] (Appendix 9) Communicating with the data diode device, operating a target device based on operation information received from the data diode device; The display information output by the target device operated based on the operation information is output to the outside via a dedicated display cable. Information processing methods.

[0045] (Appendix 10) 10. The information processing method according to claim 9, further comprising operating the target device based on operation information output from a mouse provided in an external system and received via the data diode device.

[0046] (Appendix 11) 10. The information processing method according to claim 9, further comprising operating the target device based on operation information output from a keyboard provided in an external system and received via the data diode device.

[0047] (Appendix 12) The display information obtained by capturing an image of the monitor of the target device is output to the outside via a dedicated display cable. 12. An information processing method according to any one of claims 9 to 11.

[0048] (Appendix 13) Receives external data from the data diode device and outputs it to the target device. 13. An information processing method according to any one of claims 9 to 12.

[0049] (Appendix 14) The display information is output to an information processing device provided in the external open environment via the display-dedicated cable. 14. An information processing method according to any one of claims 9 to 13.

[0050] (Appendix 15) communication means for communicating with the data diode device; an operation means for operating a target device based on operation information received from the data diode device; an output unit that outputs display information output by the target device operated based on the operation information to an external device via a dedicated display cable; An information processing device comprising:

[0051] (Appendix 16) 16. The information processing device according to claim 15, wherein the operation means is an input device for operating a computer of the target device.

[0052] (Appendix 17) 17. The information processing device according to claim 15, wherein the operation means operates the target device based on operation information output from a mouse provided in an external system and received via the data diode device.

[0053] (Appendix 18) 18. The information processing device according to any one of claims 15 to 17, wherein the operation means operates the target device based on operation information output from a keyboard provided in an external system and received via the data diode device.

[0054] (Appendix 19) a data processing means for receiving external data from the data diode device and outputting the data to the target device; 19. The information processing device according to any one of Supplementary Note 15 to Supplementary Note 18, comprising:

[0055] (Appendix 20) 20. The information processing device according to claim 19, wherein the target device comprises the communication means, the operation means, the output means, and the data processing means.

[0056] (Appendix 21) The output means outputs the display information to an information processing device provided in the external open environment via the dedicated display cable. 21. The information processing device according to any one of Supplementary Note 15 to Supplementary Note 20.

[0057] (Appendix 22) The computer of the information processing device, communication means for communicating with the data diode device; an operating means for operating a target device based on operation information received from the data diode device; an output means for outputting display information output by the target device operated based on the operation information to an external device via a dedicated display cable; A program that functions as a

[0058] (Appendix 23) The operating means operates the target device based on operation information output from a mouse provided in an external system and received via the data diode device. 22. The program of claim 1.

[0059] (Appendix 24) 24. The program according to claim 22 or 23, wherein the operating means operates the target device based on operation information output from a keyboard provided in an external system and received via the data diode device.

[0060] (Appendix 25) a data processing means for receiving external data from the data diode device and outputting the data to the target device; 25. The program according to any one of claims 22 to 24, [Explanation of symbols]

[0061] 1. Target device 2. Data Diode 3,6... Terminal 4,5···AP 7. Display dedicated cable 11,51,71...Communication means 12,52,72...Operation means 13,73... Output means 14. Data processing means 31 Capture Board 61 Monitor 62 Imaging device

Claims

1. communication means for communicating with the data diode device; an operation means for operating a target device based on operation information received from the data diode device; an output unit that outputs display information output by the target device operated based on the operation information to an external device via a dedicated display cable; A closed environment system comprising:

2. 2. The closed environment system according to claim 1, wherein the operation means is an input device for operating a computer of the target device.

3. 3. The closed environment system according to claim 2, wherein the operating means operates the target device based on operation information output from a mouse provided in an external system and received via the data diode device.

4. 3. The closed environment system according to claim 2, wherein the operation means operates the target device based on operation information output from a keyboard provided in an external system and received via the data diode device.

5. 5. The closed environment system according to claim 1, further comprising an image capturing device that captures an image of a monitor of the target device and that is equipped with the output means.

6. a data processing means for receiving external data from the data diode device and outputting the data to the target device; The closed environment system of claim 5 , comprising:

7. The closed environment system according to claim 6 , wherein the target device comprises the communication means, the operation means, the output means, and the data processing means.

8. Communicating with the data diode device, operating a target device based on operation information received from the data diode device; The display information output by the target device operated based on the operation information is output to the outside via a dedicated display cable. Information processing methods.

9. communication means for communicating with the data diode device; an operation means for operating a target device based on operation information received from the data diode device; an output unit that outputs display information output by the target device operated based on the operation information to an external device via a dedicated display cable; An information processing device comprising:

10. The computer of the information processing device, communication means for communicating with the data diode device; an operating means for operating a target device based on operation information received from the data diode device; an output means for outputting display information output by the target device operated based on the operation information to an external device via a dedicated display cable; A program that functions as a

Images