CONTROL SYSTEM, CONTROL METHOD, AND PROGRAM

Abstract

The present invention can save user's time and effort when allowing information to be shared.　This control system comprises a shared information reception unit and a control unit. The shared information reception unit receives destination information indicating a destination, permission / prohibition information indicating whether to permit or prohibit disclosure to parties other than the destination, and shared information. The control unit controls whether to disclose the shared information. Upon receiving a request to disclose the shared information from a requesting party other than the destination, the control unit allows the shared information to be disclosed to the requesting party if the disclosure is permitted, or prohibits the shared information from being disclosed to the requesting party if the disclosure is prohibited.

Description

[Technical field]

[0001] The present disclosure relates to control systems and the like. [Background technology]

[0002] There are cases where various information is desired to be shared with other users, other organizations, other devices, and the like.

[0003] For example, Patent Document 1 describes a technology that controls to permit the use of information when information set with control information permitting the use of information is received, and controls to permit the transfer of information when information set with control information permitting the transfer of information is received. Specifically, for example, Patent Document 1 describes that a reliability is added to the personal information of each member, and the reliability is used to determine whether to permit primary use or secondary use. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] International Publication No. 2011 / 021278 Summary of the Invention [Problem to be solved by the invention]

[0005] For example, when a user shares various information with other users or other organizations, the information is shared with a specified destination and is not shared with any destination other than the specified destination. When sharing information with a destination other than the specified destination, the user may set access rights to the information for the other users every time the information is shared with the other users. Thus, there is a problem in that it is time-consuming for the user.

[0006] One example of an objective of the present disclosure is to provide a control system or the like that can reduce the effort required by a user when sharing information. [Means for solving the problem]

[0007] A control system in one aspect of the present disclosure includes a shared information receiving means for receiving destination information indicating a destination, availability information indicating whether or not disclosure to anyone other than the destination is permitted, and shared information, and a control means for controlling whether to make the shared information public, wherein when the control means receives a request to disclose the shared information from a requester other than the destination, if the disclosure is permitted, the control means causes the shared information to be disclosed to the requester, and if the disclosure is not permitted, the control means does not cause the shared information to be disclosed to the requester.

[0008] A control method in one aspect of the present disclosure receives destination information indicating a destination, availability information indicating whether or not disclosure to anyone other than the destination, and shared information, and controls whether to make the shared information public.In the control, when a request to disclose the shared information is received from a requester other than the destination, if the disclosure is available, the shared information is made public to the requester, and if the disclosure is not available, the shared information is not made public to the requester.

[0009] A program in one aspect of the present disclosure causes a computer to execute a process of receiving destination information indicating a destination, availability information indicating whether or not disclosure to anyone other than the destination is permitted, and shared information, and controlling whether to make the shared information public.In the control process, when a request to disclose the shared information is received from a requester other than the destination, if the disclosure is permitted, the shared information is made public to the requester, and if the disclosure is not permitted, the shared information is not made public to the requester.

[0010] The program may be stored in a non-transitory computer-readable recording medium. Effect of the Invention

[0011] According to the present disclosure, it is possible to reduce the effort required of a user when sharing information. [Brief description of the drawings]

[0012] [Figure 1] 1 is a block diagram showing a configuration example of a control system according to a first embodiment. [Diagram 2] 4 is a flowchart showing an operation example of the control system according to the first embodiment. [Diagram 3] FIG. 11 is an explanatory diagram showing an example of connection between a control system and a terminal device according to a second embodiment. [Figure 4] FIG. 11 is a block diagram showing a configuration example of a control system according to a second embodiment. [Diagram 5] FIG. 4 is an explanatory diagram showing an example of received data. [Figure 6] FIG. 11 is an explanatory diagram (part 1) showing an example of receiving a request to disclose shared information. [Figure 7] FIG. 2 is an explanatory diagram (part 2) showing an example of receiving a request to disclose shared information; [Figure 8] FIG. 13 is an explanatory diagram showing an example of setting the disclosure range of SBOM. [Figure 9] FIG. 11 is an explanatory diagram showing another example of received data. [Figure 10] FIG. 13 is an explanatory diagram showing an example in which alert information is made public after a predetermined time has elapsed. [Figure 11] 13 is a flowchart showing an example of an operation performed when shared information is received by the control system according to the second embodiment. [Figure 12] 13 is a flowchart showing an example of an operation performed when a disclosure request is received by the control system according to the second embodiment. [Figure 13] FIG. 2 is an explanatory diagram illustrating an example of a hardware configuration of a computer device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] Hereinafter, with reference to the drawings, embodiments of a control system, a control method, a program, and a non-transitory recording medium for recording a program according to the present disclosure will be described in detail. The disclosed technology is not limited to the embodiments.

[0014] (Embodiment 1) First, in the first embodiment, basic functions of a control system will be described. FIG. 1 is a block diagram showing an example of a configuration of a control system according to the first embodiment. The control system 10 controls the publication of shared information. The control system 10 includes a shared information receiving unit 101 and a control unit 102.

[0015] The shared information receiving unit 101 receives destination information, availability information, and shared information. Specifically, for example, the shared information receiving unit 101 receives reception data in which the destination information, availability information, and shared information are associated with each other. The destination information and availability information are, for example, header information of the shared information.

[0016] The destination information indicates the destination of the shared information. The destination may be, for example, one or more users, one or more terminal devices, or a combination thereof. The permission information indicates whether the shared information can be disclosed to a party other than the destination.

[0017] The shared information is information shared with a destination. That is, when the control system 10 receives a request to disclose the shared information from the destination, the control system 10 causes the destination to disclose the shared information. The shared information may be, for example, security information. The security information is shared with the destination, but may be disclosed to parties other than the destination, or may not be disclosed to parties other than the destination. For example, the security information is confidential information having confidentiality. More specifically, the security information may be information necessary for building a supply chain relationship such as a software bill of materials (SBOM), risk assessment information, alert information, etc. The risk assessment information is, for example, the results of various inspections and analyses. The target of the inspection or analysis may be a specific device, etc., and is not particularly limited. The alert information may be, for example, an alert that notifies the user that a cyber attack is being performed, an alert that indicates that a vulnerability for which a solution is not provided is included, or an alert at the time of a disaster such as a fire or flood, and is not particularly limited. The target that is being subjected to a cyber attack may be a specific device, etc., and is not particularly limited. In addition, the target that contains a vulnerability for which a solution is not provided may be a specific device, etc., and is not particularly limited.

[0018] When the control unit 102 receives a request to disclose the shared information from a requester other than the destination, if disclosure is permitted, the control unit 102 causes the requester to disclose the shared information. As a result, the requester may access the shared information, or the control system 100 may transmit the shared information to the requester. On the other hand, if disclosure is prohibited, the control unit 102 does not cause the requester to disclose the shared information. As a result, the requester cannot access the shared information, or the control system 100 does not transmit the shared information to the requester.

[0019] 2 is a flowchart showing an example of an operation of the control system 10 according to the first embodiment. The shared information receiving unit 101 receives header information including destination information and permission information, and the shared information (step S101). The control unit 102 receives a request to disclose the shared information from a requester other than the destination (step S102). Next, the control unit 102 determines whether the shared information is publicly available (step S103). If the permission information of the shared information indicates that disclosure is available (step S103: Yes), the control unit 102 causes the requester to disclose the shared information (step S104). If the permission information indicates that disclosure is not available (step S103: No), the control unit 102 does not cause the requester to disclose the shared information (step S105).

[0020] As described above, in the first embodiment, the control system 10 receives the shared information together with the permission information indicating whether or not to disclose the shared information to a party other than the destination. Then, when the control system 10 receives a disclosure request from a party other than the destination, if the permission information indicates that disclosure is permitted, the control system 10 causes the requester to disclose the shared information, and if the permission information indicates that disclosure is not permitted, the control system 10 does not cause the requester to disclose the shared information. As a result, whether or not to disclose the shared information is controlled by the permission information, it is possible to reduce the effort required of the user when sharing the shared information. In addition, it is possible to prevent the occurrence of modification errors such as incorrect access settings, and it is possible to enable appropriate access control.

[0021] The first embodiment is not limited to the above-mentioned examples, and various modifications are possible.

[0022] (Embodiment 2) Next, the second embodiment will be described in detail with reference to the drawings. In the second embodiment, an example will be described in which a control system registers various shared information created by a terminal device in a database and controls the publication of the shared information registered in the database. Below, the description of the contents that overlap with the above description will be omitted to the extent that the description of the second embodiment is not unclear.

[0023] 3 is an explanatory diagram showing an example of connections between a control system and terminal devices according to the second embodiment. A control system 20 is connected to each terminal device 21 via a communication network NT.

[0024] The control system 20 may be, for example, a server. The control system 20 is, for example, a shared base shared by a plurality of terminal devices 21, or a shared base used by each user who uses each terminal device 21. The terminal device 21 is not particularly limited to, for example, a PC (Personal Computer), a smartphone, a tablet device, an IoT (Internet of Things) device, and the like.

[0025] In Fig. 3, there are a terminal device 21-1 of a user A, a terminal device 21-2 of a user B, a terminal device 21-3 of a user C, and a terminal device 21-n. n is not particularly limited, that is, the number of terminal devices 21 is not particularly limited. In the following description, when there is no limitation to any terminal device, it is represented as a terminal device 21. In Fig. 3, the terminal devices 21 are assigned to each user, but this is not limited. For example, a plurality of users may use one terminal device 21 by switching between them, and the terminal device 21 may not be assigned to a user.

[0026] For example, a specific application program for using the control system 20 may be installed in the terminal device 21. Furthermore, the terminal device 21 may transmit and receive various types of information to and from the control system 20 via the specific application program. Alternatively, the terminal device 21 may be able to access the control system 20 via a Web browser or the like. The terminal device 21 may transmit and receive various types of information to and from the control system 20 via a Web browser or the like.

[0027] 4 is a block diagram showing a configuration example of a control system 20 according to the second embodiment. The control system 20 includes a shared information receiving unit 201, a control unit 202, a shared information transmitting unit 203, and a registration unit 204. The control system 20 according to the second embodiment is different from the control system 20 according to the first embodiment in that the shared information transmitting unit 203 and the registration unit 204 are newly added. The shared information receiving unit 201 and the control unit 202 have the basic functions of the shared information receiving unit 101 and the control unit 102 described in the first embodiment, respectively.

[0028] The control system 20 also has a database 2000. In the database 2000, for example, received data including shared information is registered. The database 2000 may be operated using, for example, SQL (Structured Query Language) or the like. The database 2000 may be stored in the control system 20, or may be stored in another device (for example, a database server, etc.) that the control system 20 can access via a communication network NT or the like.

[0029] The shared information receiving unit 201 receives the destination information, the permission information, and the shared information. The received data including the destination information, the permission information, and the shared information will be described with reference to FIG.

[0030] Fig. 5 is an explanatory diagram showing an example of received data. In Fig. 5, the received data includes header information and sharing information. As described above, the header information includes destination information and permission information. The permission information indicates whether or not to disclose the shared information to a destination other than the destination. For example, the permission information may be a flag indicating whether or not to disclose. More specifically, for example, the permission information may be a flag in which 0 indicates that the shared information is not disclosed and 1 indicates that the shared information is disclosed.

[0031] The order of the information in the header information is not particularly limited. The header information may include other information such as sender information indicating the sender, and transmission date and time information indicating the date and time of transmission.

[0032] 4, the registration unit 204 associates the destination information, the possibility information, and the sharing information with each other and registers them in the database 2000. The registration unit 204 may also register other information included in the header information with the destination information, the possibility information, and the sharing information in the database 2000 and register them.

[0033] Then, the shared information transmitting unit 203 transmits the shared information to the destination indicated by the destination information. Note that the order of the timing at which the registration unit 204 registers the received data in the database 2000 and the timing at which the shared information transmitting unit 203 transmits the shared information to the destination is not particularly limited.

[0034] Moreover, under the control of the control unit 202, the shared information transmission unit 203 transmits each piece of shared information to the requester of the disclosure request.

[0035] The control unit 202 controls whether to make the shared information public. For example, when the control unit 202 receives a request to make the shared information public from a requester other than the destination, if the public is public, the control unit 202 makes the requester make the shared information public if the public is public, and does not make the requester make the shared information public if the public is not public. Specifically, for example, if the public is public, the control unit 202 makes the requester transmit the shared information to the shared information transmitting unit 203. For example, if the public is public, the shared information transmitting unit 203 detects the shared information from the database 2000 and transmits the detected shared information to the requester. On the other hand, for example, if the public is not public, the control unit 202 does not make the requester transmit the shared information to the shared information transmitting unit 203. Note that, if the public is not public, the control unit 202 makes the shared information transmitting unit 203 transmit information indicating that the public is not public to the requester. The shared information transmitting unit 203 may transmit information indicating that the public is not public to the requester. The information indicating that the public is not public is not particularly limited. For example, the information indicating that disclosure is not permitted may be information that displays to the requester that disclosure is not permitted.

[0036] Furthermore, when a disclosure request is received from a destination of the shared information, the control unit 202 causes the destination (requester) to disclose the shared information. The shared information transmitting unit 203 transmits the shared information to the destination (requester).

[0037] Furthermore, when the control unit 202 receives a disclosure request from the sender (creator) of the shared information, it causes the shared information to be made public to the destination (requester). Specifically, for example, when the control unit 202 receives a disclosure request from the sender (creator) of the shared information, it causes the shared information transmitting unit 203 to transmit the shared information to the destination (requester). Then, for example, the shared information transmitting unit 203 transmits the shared information to the sender (creator). Note that it is sufficient that the database 2000 registers sender information indicating the sender in association with the shared information.

[0038] Next, using Figures 6 and 7, we will explain examples of whether or not each piece of shared information can be made public when shared information created in an upstream terminal device 21 is referenced by shared information created in a downstream terminal device 21 in a data flow such as a supply chain in which information created by one user is referenced by the next user.

[0039] Fig. 6 is an explanatory diagram (part 1) showing an example of receiving a request to disclose shared information. In Fig. 6, the terminal device 21-1 creates shared information X by operation of user A. Then, the terminal device 21-1 transmits the shared information X to the control system 20 by operation of user A, with destination information and availability information as header information. An example will be described in which the destination indicated by the destination information is the terminal device 21-2 of user B.

[0040] The shared information receiving unit 201 receives the destination information, the permission information, and the shared information X. The registering unit 204 registers the destination information, the permission information, and the shared information X in the database 2000 in association with each other.

[0041] The shared information transmitting unit 203 transmits the shared information X to the terminal device 21-2 of user B, which is the destination indicated by the destination information.

[0042] Next, the terminal device 21-2 of user B receives the shared information X from the control system 20. Since the terminal device 21-2 is the destination, it can refer to the shared information X. Then, the terminal device 21-2 creates shared information Y including link information indicating an access destination for accessing the shared information X, in response to an operation by user B. Then, the terminal device 21-2 transmits the shared information Y to the control system 20, in response to an operation by user B, with the destination information and the availability information as header information. An example will be described in which the destination indicated by the destination information is the terminal device 21-3 of user C.

[0043] Then, the terminal device 21-3 of the user C receives the shared information Y from the control system 20. Since the shared information Y includes link information of the shared information X, the terminal device 21-3 transmits a request to disclose the shared information X to the control system 20, for example, based on the link information.

[0044] First, a case where the permission information of the shared information X indicates permission of disclosure will be described. When the control unit 202 receives a disclosure request from the terminal device 21-3 of user C who is not the destination of the shared information X, the control unit 202 refers to the permission information of the shared information X from the database 2000. Since the permission information indicates permission of disclosure, the control unit 202 makes the terminal device 21-3 disclose the shared information X. Specifically, for example, since the permission information indicates permission of disclosure, the control unit 202 makes the shared information transmitting unit 203 transmit the shared information X to the terminal device 21-3. Then, for example, the shared information transmitting unit 203 transmits the shared information X to the terminal device 21-3.

[0045] On the other hand, a case where the availability information of the shared information X indicates that disclosure is not possible will be described. When the control unit 202 receives a disclosure request from the terminal device 21-3 of the user C who is not the destination of the shared information X, the control unit 202 refers to the availability information of the shared information X from the database 2000. Since the availability information indicates that disclosure is not possible, the control unit 202 does not allow the terminal device 21-3 to disclose the shared information X. Specifically, for example, since the availability information indicates that disclosure is not possible, the control unit 202 does not allow the shared information transmitting unit 203 to transmit the shared information X to the terminal device 21-3. Therefore, the shared information transmitting unit 203 does not transmit the shared information X to the terminal device 21-3. Also, for example, since the availability information indicates that disclosure is not possible, the control unit 202 may cause the shared information transmitting unit 203 to transmit information indicating that disclosure is not possible to the terminal device 21-3. Then, the shared information transmitting unit 203 may transmit information indicating that disclosure is not possible to the terminal device 21-3.

[0046] Fig. 7 is an explanatory diagram (part 2) showing an example of receiving a request to disclose shared information. In Fig. 7, following Fig. 6, the terminal device 21-3 of user C creates shared information Z including link information indicating an access destination for accessing shared information Y, for example, by an operation of user C. Then, the terminal device 21-3 transmits the shared information Z to the control system 20 with the destination information and the availability information as header information, by an operation of user C. An example will be described in which the destination indicated by the destination information is the terminal device 21-4 of user D.

[0047] Then, the terminal device 21-4 of the user D receives the shared information Z from the control system 20. Since the shared information Z includes link information to the shared information Y, the terminal device 21-4 transmits a request to disclose the shared information Y to the control system 20, for example, based on the link information.

[0048] First, a case where the permission information of the shared information Y indicates permission of disclosure will be described. When the control unit 202 receives a disclosure request from the terminal device 21-4 of the user D who is not the destination of the shared information Y, the control unit 202 refers to the permission information of the shared information Y from the database 2000. Since the permission information indicates permission of disclosure, the control unit 202 causes the terminal device 21-4 to disclose the shared information Y. Since the permission information indicates permission of disclosure, the control unit 202 causes the shared information transmitting unit 203 to transmit the shared information Y to the terminal device 21-4. Therefore, the shared information transmitting unit 203 transmits the shared information Y to the terminal device 21-4. As a result, the terminal device 21-4 receives the shared information Y from the control system 20. Since the shared information Y includes link information of the shared information Z, the terminal device 21-4 transmits a request to disclose the shared information X to the control system 20 based on the link information, for example. The subsequent processing is as described with reference to FIG. 6. Therefore, when the availability information of the shared information X indicates availability, the shared information X is made public to the terminal device 21-4. When the availability information of the shared information X indicates non-availability, the shared information X is not made public to the terminal device 21-4.

[0049] On the other hand, a case will be described where the permission information of the shared information Y indicates that disclosure is not permitted. When the control unit 202 receives a disclosure request from the terminal device 21-4 of the user D who is not the destination of the shared information Y, the control unit 202 refers to the permission information of the shared information Y in the database 2000. Since the permission information indicates that disclosure is not permitted, the control unit 202 does not allow the terminal device 21-4 to disclose the shared information Y. Specifically, for example, the control unit 202 does not cause the shared information transmitting unit 203 to transmit the shared information Y to the terminal device 21-4 because the availability information indicates that disclosure is not possible. Therefore, the shared information transmitting unit 203 does not transmit the shared information Y to the terminal device 21-4. Alternatively, for example, the control unit 202 may cause the shared information transmitting unit 203 to transmit information indicating that disclosure is not possible to the terminal device 21-4 because the availability information indicates that disclosure is not possible. As a result, for example, the shared information transmitting unit 203 transmits information indicating that disclosure is not possible to the terminal device 21-4. Therefore, the shared information Y including the link information of the shared information X is not disclosed to the terminal device 21-4, so even if the availability information of the shared information X indicates that it is possible, the shared information X is not disclosed to the terminal device 21-4 via the shared information Y.

[0050] In this way, the user can set the disclosure range for the shared information in a lump sum by the permission information. Therefore, when the shared information created in the upstream terminal device 21 is referred to in the downstream terminal device 21, it is not necessary to set the disclosure range for the downstream terminal device 21 each time, and the permission or non-permission of disclosure can be set in a lump sum. This can save the user the trouble of creating the shared information.

[0051] Next, a usage example of the control system 20 will be described using a specific example of shared information.

[0052] <sbom> Taking the case where the shared information is SBOM as an example, an example of use of the control system 20 will be described. When application programs are developed, each of a plurality of software programs included in each application program may be developed by a different company or developer.

[0053] 8 is an explanatory diagram showing an example of setting the disclosure range of SBOM. Like a supply chain, there are cases where user A creates software, and user B creates other software by referring to the created software.

[0054] For example, user A may want to release SBOM1 of software designed by user A to user B, who is the delivery destination of the software, but may not want to release this SBOM1 to other users. In such a case, terminal device 21-1 may transmit SBOM1 to control system 20 by operation of user A, with permission information indicating whether or not to release and destination information indicating user B as the destination as header information.

[0055] Then, the shared information receiving unit 201 receives the SBOM1. The registration unit 204 associates the header information with the SBOM1 and registers them in the database 2000. The shared information transmitting unit 203 transmits the SBOM1 to user B. The terminal device 21-2 of user B receives the SBOM1. For example, the terminal device 21-2 creates an SBOM2 including link information of the SBOM1 by operation of user B. The terminal device 21-2 may transmit the SBOM2 to the control system 20 using destination information indicating user C as the destination as header information.

[0056] The shared information receiving unit 201 receives SBOM2. The registration unit 204 associates the header information with SBOM2 and registers it in the database 2000. The shared information transmitting unit 203 transmits SBOM2 to user C. The terminal device 21-3 of user C receives SBOM2. For example, the terminal device 21-3 transmits a request to make SBOM1 public to the control system 20 based on the link information of SBOM1 included in SBOM2. When the control unit 202 receives the request to make SBOM1 public from user C, the control unit 202 does not allow user C to make SBOM1 public because the availability information associated with SBOM1 included in the database 2000 indicates whether or not to make public.

[0057] On the other hand, for example, software designed by user A may be open source. In such a case, user A may disclose the software to other users, not limited to user B, the delivery destination. In such a case, the terminal device 21-1 may transmit the SBOM1 to the control system 20 by operation of user A, with permission information indicating permission for disclosure and destination information indicating user B as the destination as header information. Note that the subsequent processing is the same as the example described using Figs. 6 and 7, and therefore detailed description will be omitted.

[0058] <Risk assessment information (test information)> Next, a usage example of the control system 20 will be described taking the case where the shared information is risk assessment information as an example. For example, risk assessment information may be obtained as a result of performing an evaluation on a certain part. Generally, risk assessment information is shared with the delivery destination, such as the requester of the evaluation, but is not shared with others. However, depending on the part, there are cases where the risk assessment information may be shared up to the end user. The terminal device 21 may transmit the risk assessment information to the control system 20 with the availability information indicating whether or not the information is made public and the destination information indicating the delivery destination as the header information. On the other hand, if the information is not to be shared, the terminal device 21 may transmit the risk assessment information to the control system 20 with the availability information indicating whether or not the information is made public and the destination information indicating the delivery destination as the header information.

[0059] The processing of the control system 20 is the same as the example described with reference to FIGS. 6 and 7, and therefore a detailed description thereof will be omitted.

[0060] <Alert information> Next, a usage example of the control system 20 will be described taking the case where the shared information is alert information as an example. Alert information may be transmitted when a cyber attack, disaster, or the like occurs. There are cases where the alert information may be made public to parties other than the destination, and cases where it is better not to make the alert information public to parties other than the destination. When the alert information may be shared, the terminal device 21 may transmit risk assessment information to the control system 20 with the availability information indicating whether or not the information may be made public and the destination information as header information. On the other hand, when it is better not to share the alert information, the terminal device 21 may transmit risk assessment information to the control system 20 with the availability information indicating whether or not the information may be made public and the destination information as header information.

[0061] The processing of the control system 20 is the same as the example described with reference to FIGS. 6 and 7, and therefore a detailed description thereof will be omitted.

[0062] This completes the explanation of examples of use of each piece of detailed information.

[0063] <Controlling disclosure over time> An example of controlling the disclosure of shared information over time when disclosure is not possible will be described. Even if disclosure of shared information is not possible, there are cases where the information may be disclosed over time. For example, such control may be performed when the shared information is information that can identify a vulnerability in a specific device. Information that can identify a vulnerability includes, for example, alert information and risk assessment information, and is not particularly limited. Note that the type of the specific device may be a terminal device 21, and is not particularly limited.

[0064] For example, when the alert information indicates that a cyber attack is occurring on a certain device, it is undesirable to disclose the alert information to various users while the cyber attack is occurring. For example, if it is disclosed to a malicious user that a device is under a cyber attack, the malicious user may launch another cyber attack on the device. On the other hand, if the alert information is not disclosed after the problem is resolved, such as after the cyber attack has ended, other users may get the impression that the cyber attack is being concealed. Similarly, with regard to risk assessment information, it is undesirable to disclose to various users that a specific device is in a risk state. On the other hand, when the risk has disappeared, it may be better to disclose to other users what kind of risk there was.

[0065] Therefore, when disclosure is not possible, upon receiving a disclosure request, the control unit 202 controls whether to allow the requester to disclose the shared information depending on the time elapsed since the reception of the shared information. Specifically, for example, when disclosure is not possible, upon receiving a disclosure request, the control unit 202 may not allow the requester of the disclosure request to disclose the shared information until a predetermined time has elapsed since the reception of the shared information, and may allow the requester of the disclosure request to disclose the shared information after the predetermined time has elapsed. The predetermined time may be a time designated by a user or may be a fixed value determined in advance, and is not particularly limited. Note that the fixed value may be determined according to the type of the shared information. Also, for example, the predetermined time may be designated by the sender (or creator) of the shared information. When the sender designates the predetermined time, for example, time information indicating the predetermined time may be included in the header information of the shared information.

[0066] Fig. 9 is an explanatory diagram showing another example of received data. In Fig. 9, the received data includes header information and shared information. The header information includes destination information, availability information, and time information. The destination information and availability information are as described in Fig. 5. The time information indicates a predetermined time. The order of each piece of information in the header information is not particularly limited. Note that the header information may include other information such as source information indicating the source, and date and time information of the date and time of transmission.

[0067] 10 is an explanatory diagram showing an example in which alert information is made public after a predetermined time has elapsed. In FIG. 10, the terminal device 21-1 creates alert information H when it detects a cyber attack, for example.

[0068] The terminal device 21-1 transmits the alert information H to the control system 20, using as header information the destination information with the user B as the destination, the permission information indicating whether or not to disclose, and the time information indicating 8 hours. The shared information receiving unit 201 of the control system 20 receives the received data. Then, the registration unit 204 registers the received data in the database 2000.

[0069] The shared information transmitting unit 203 transmits the alert information H to user B. The terminal device 21-2 of user B creates shared information J including link information of the alert information H. The terminal device 21-2 transmits the shared information J to the control system 20 using destination information with user C as the destination and availability information indicating whether or not the information is open to the public as header information. The shared information receiving unit 201 of the control system 20 receives the received data. Then, the registration unit 204 registers the received data in the database 2000. The shared information transmitting unit 203 transmits the shared information J to user C.

[0070] The terminal device 21-3 of user C transmits a request to disclose the alert information H to the control system 20 based on the link information included in the shared information J. When the control unit 202 receives the request to disclose the alert information H, it refers to the availability information and time information of the alert information H from the database 2000. Since the availability information of the alert information H indicates availability and the time information indicates eight hours, the control unit 202 allows user C to disclose the alert information H if eight hours have passed since the alert information H was received, and does not allow user C to disclose the alert information H if eight hours have not passed since the alert information H was received. Note that the transmission process by the shared information transmission unit 203 is the same as the above example, and detailed description will be omitted.

[0071] In addition, the control unit 202 is not limited to the example in which it determines whether a predetermined time has elapsed since the date and time when the shared information receiving unit 201 received the shared information, but may determine whether a predetermined time has elapsed since the date and time when the transmission source transmitted the shared information. In this way, the start date and time for determining the elapsed time is not particularly limited.

[0072] Furthermore, when disclosure is not possible, upon receiving a disclosure request, the control unit 202 may control whether to allow the requester to disclose the shared information depending on whether the time is after a specified time. For example, the time may be specified by the sender of the shared information. For example, time information indicating the specified time may be included in the header information of the shared information.

[0073] <Example of operation> Next, an example of the operation of the control system 20 according to the second embodiment will be described with reference to FIGS.

[0074] 11 is a flowchart showing an example of an operation of the control system 20 according to the second embodiment when receiving shared information. The source terminal device 21 transmits the shared information to the control system 20 using destination information, availability information, and time information as header information (step S201). The shared information receiving unit 201 receives the shared information (step S202). The registering unit 204 associates the header information with the shared information and registers it in the database 2000 (step S203).

[0075] The shared information transmitting unit 203 transmits the shared information to the destination indicated by the destination information included in the header information (step S204). The destination terminal device 21 receives the shared information (step S205).

[0076] As a result, the shared information created by the source terminal device 21 is registered in the database 2000 and is transmitted to the destination.

[0077] 12 is a flowchart showing an example of an operation of the control system 20 according to the second embodiment when receiving a disclosure request. The terminal device 21 transmits a disclosure request for the shared information to the control system 20 by link information included in the shared information (step S211). More specifically, for example, in step S211, when the link information included in the shared information is clicked by a user's operation on the input device, the terminal device 21 transmits a disclosure request for the linked shared information to the control system 20.

[0078] The control unit 202 receives a request to disclose shared information (step S212). Next, the control unit 202 determines whether the shared information requested to be disclosed can be disclosed (step S213). In step S213, for example, the control unit 202 refers to each piece of information associated with the shared information requested to be disclosed from the database 2000. Then, when the requester is other than the destination and source (e.g., the creator) of the shared information requested to be disclosed, the control unit 202 determines whether the availability information of the shared information indicates whether disclosure is possible or not. Note that when the requester is the destination or source (e.g., the creator) of the shared information requested to be disclosed, the control unit 202 determines that the shared information can be disclosed (step S213: Yes), and proceeds to step S215.

[0079] If the shared information cannot be made public (step S213: No), the control unit 202 determines whether a predetermined time indicated by the time information has elapsed since the shared information receiving unit 201 received the shared information (step S214). If it is determined that the predetermined time has not elapsed (step S214: No), the control unit 202 causes the shared information transmitting unit 203 to transmit information indicating that the shared information cannot be made public to the requester. Then, the shared information transmitting unit 203 transmits information indicating that the shared information cannot be made public to the requester (step S216).

[0080] If the shared information is open to the public (step S213: Yes), or if it is determined that the predetermined time has elapsed (step S214: Yes), the control unit 202 causes the shared information transmission unit 203 to transmit the shared information to the request source. of Then, the message is transmitted (step S215).

[0081] The requesting terminal device 21 receives various information corresponding to the disclosure request from the control system 20 (step S217). If the shared information can be disclosed, the requesting terminal device 21 receives the shared information. If the shared information cannot be disclosed, the requesting terminal device 21 receives information indicating that the shared information cannot be disclosed.

[0082] Then, the requesting terminal device 21 displays the received information on a display device of the terminal device 21, for example (step S218). In step S218, an example has been given in which the terminal device 21 displays the received information on the display device of the terminal device 21, but this is not limiting. The received information may be output as audio to an audio output device of the terminal device 21, or the received information may be stored in a storage device of the terminal device 21.

[0083] As described above, in the second embodiment, the control system 20 causes the requester to transmit the shared information when disclosure is permitted, and does not cause the requester to transmit the shared information when disclosure is prohibited. This allows the control system 20 to control the transmission of the shared information based on the permission information.

[0084] If disclosure is not possible, the control system 20 causes information indicating that disclosure is not possible to be transmitted to the requester, thereby enabling the requester to understand the reason for the failure to access the shared information.

[0085] Also, from the viewpoint of security, it is undesirable to immediately disclose information such as alert information and risk assessment information that can identify a certain vulnerability in the terminal device 21 or other devices. On the other hand, after the vulnerability has been dealt with, such information may be disclosed or may be better disclosed. Therefore, when the control system 20 receives a disclosure request in a case where disclosure of shared information is not possible, the control system 20 may control whether to disclose the shared information to the requester depending on the time elapsed since the reception of the shared information. Specifically, for example, when the control system 20 receives a disclosure request in a case where disclosure is not possible, the control system 20 causes the requester to disclose the shared information if a predetermined time has elapsed since the reception of the shared information, and does not cause the requester to disclose the shared information if the predetermined time has not elapsed since the reception of the shared information. This makes it possible to change the scope of disclosure as time passes. Therefore, it is possible to save the user's effort. For example, it is possible to save the user's effort compared to a case where a user who creates shared information gives permission for disclosure to other users after time has passed. Note that, in a case where disclosure of shared information is not possible, examples of shared information when information is disclosed as time passes are not limited to the above examples.

[0086] This concludes the description of each embodiment. Note that each embodiment may be used in combination. For example, in each embodiment, the control system may include each functional unit and part of the information.

[0087] Moreover, each of the above-mentioned embodiments is not limited to the above-mentioned examples, and various modifications are possible. The control system may be realized by one device, or may be realized by multiple devices (e.g., multiple servers) that differ according to information or function. Specifically, for example, one terminal device 21 may have the functional unit of the control system 20 described in the second embodiment.

[0088] In addition, in each embodiment, each piece of information may include a part of the above-mentioned information. In addition, each piece of information may include information other than the above-mentioned information. Each piece of information may be divided into a plurality of pieces of information in more detail. In this way, the method of realizing each piece of information is not particularly limited.

[0089] (Computer Equipment) Next, a hardware configuration example when the control system described in each embodiment is realized by a computer device will be described. Fig. 13 is an explanatory diagram showing a hardware configuration example of a computer device. A part or all of each device can be realized by using any combination of a computer device 30 and a program as shown in Fig. 13, for example.

[0090] The computer device 30 includes, for example, a processor 301, a read only memory (ROM) 302, a random access memory (RAM) 303, a storage device 304, a communication interface 305, and an input / output interface 306. Each component is connected to each other via a bus 307.

[0091] The processor 301 controls the entire computer device 30. The processor 301 may be, for example, a CPU (Central Processing Unit) or a DSP (Digital Signal Processor). There may be a plurality of processors 301. The computer device 30 has a ROM 302, a RAM 303, a storage device 304, and the like as a storage unit. The storage device 304 may be, for example, a semiconductor memory such as a flash memory, a HDD (Hard Disk Drive), or an SSD (Solid State Drive). For example, the storage device 304 stores an OS (Operating System) program, an application program, a program according to each embodiment, and the like. Alternatively, the ROM 302 stores an application program, a program according to each embodiment, and the like. The RAM 303 is used as a work area for the processor 301.

[0092] Moreover, the processor 301 loads a program stored in the storage device 304, the ROM 302, etc. Then, the processor 301 executes each process (each process instruction) coded in the program. The processor 301 may also download various programs via the communication network NT. The processor 301 functions as a part or the whole of the computer device 30. Then, the processor 301 may execute the processes or instructions in the illustrated flowchart based on the program.

[0093] The communication interface 305 is connected to a communication network NT, such as a LAN (Local Area Network) or a WAN (Wide Area Network), via a wireless or wired communication line. The communication network NT may be composed of a plurality of communication networks NT. As a result, the computer device 30 is connected to an external device or an external computer via the communication network NT. The communication interface 305 serves as an interface between the communication network NT and the inside of the computer device 30. The communication interface 305 also controls the input and output of data from the external device or the external computer.

[0094] The input / output interface 306 is connected to at least one of an input device, an output device, and an input / output device. The connection method may be wireless or wired. Examples of the input device include a keyboard, a mouse, and a microphone. Examples of the output device include a display device, a lighting device, and a speaker that is an audio output device that outputs audio. Examples of the input / output device include a touch panel display. The input device, the output device, and the input / output device may be built into the computer device 30 or may be external.

[0095] The hardware configuration of the computer device 30 is an example. The computer device 30 may have some of the components shown in FIG. 13. The computer device 30 may have components other than those shown in FIG. 13. For example, the computer device 30 may have a drive device or the like. The processor 301 may read out a program or data stored in a recording medium attached to the drive device or the like to the RAM 303. Examples of non-transient tangible recording media include optical disks, flexible disks, magneto-optical disks, and USB (Universal Serial Bus) memories. As described above, for example, the computer device 30 may have input devices such as a keyboard and a mouse. The computer device 30 may have an output device such as a display. The computer device 30 may have an input device, an output device, and an input / output device. The computer device 30 may have various sensors not shown. The type of the sensor is not particularly limited.

[0096] This concludes the description of the hardware configuration of the control system. There are various modified examples of the method of realizing the control system. For example, the control system may be realized by any combination of a computer device and a program that are different for each component. Furthermore, multiple components of the control system may be realized by any combination of a single computer and a program.

[0097] Also, some or all of the components of the control system may be realized by application-specific circuits. Also, some or all of the control system may be realized by general-purpose circuits including a processor such as an FPGA (Field Programmable Gate Array). Also, some or all of the control system may be realized by a combination of application-specific circuits and general-purpose circuits. Also, these circuits may be a single integrated circuit. Or, these circuits may be divided into multiple integrated circuits. And, the multiple integrated circuits may be configured by being connected via a bus or the like.

[0098] Furthermore, when some or all of the components of each device are realized by multiple computer devices or circuits, the multiple computer devices or circuits may be arranged in a centralized or distributed manner.

[0099] The control method described in each embodiment is realized by a computer device such as a control system executing the control method. Also, the control method is realized by a computer device such as a control system executing a program prepared in advance. The program described in each embodiment can be stored in a HDD, SSD, flexible disk, optical disk, etc. , magnetic The program is recorded on a recording medium that can be read by a computer device, such as an optical disk, a USB memory, etc. The program is then read from the recording medium and executed by the computer device. The program may also be distributed via a communication network NT.

[0100] The functions of each of the components of the control system in each embodiment described above may be realized by hardware, such as a computer device, or each component may be realized by a computer device or firmware based on program control.

[0101] Although the present disclosure has been described above with reference to each embodiment, the present disclosure is not limited to the above-mentioned embodiment. The configuration and details of each of the present disclosures may include embodiments to which various modifications that a person skilled in the art may understand within the scope of the present disclosure are applied. The present disclosure may include embodiments in which the matters described in this specification are appropriately combined or replaced as necessary. For example, matters described using a specific embodiment may also be applied to other embodiments to the extent that no contradiction occurs. For example, although multiple operations are described in order in the form of a flowchart, the order of description does not limit the order in which the multiple operations are performed. Therefore, when implementing each embodiment, the order of the multiple operations can be changed to the extent that the content is not impaired.

[0102] A part or all of the above-described embodiments can be described as follows: However, a part or all of the above-described embodiments is not limited to the following.

[0103] (Appendix 1) A shared information receiving means for receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and shared information; A control means for controlling whether to make the shared information public; Equipped with When the control means receives a request for disclosure of the shared information from a requester other than the destination, if the disclosure is permitted, the control means causes the requester to disclose the shared information, and if the disclosure is prohibited, the control means does not cause the requester to disclose the shared information. Control system. (Appendix 2) a shared information transmitting means for transmitting the shared information to the destination; 2. The control system of claim 1, comprising: (Appendix 3) the control means, when the disclosure is permitted, causes the requester to transmit the shared information to the shared information transmitting means, and, when the disclosure is prohibited, does not cause the requester to transmit the shared information to the shared information transmitting means. 3. The control system of claim 2. (Appendix 4) When the disclosure is not possible, the control means causes the shared information transmission means to transmit information indicating that the disclosure is not possible to the request source. 4. The control system of claim 3. (Appendix 5) a registration means for registering the destination information, the availability information, and the sharing information in association with each other; 5. The control system of claim 1, further comprising: (Appendix 6) When the control means receives the disclosure request in a case where the disclosure is not possible, the control means controls whether to cause the requester to disclose the shared information depending on the elapsed time from the reception of the shared information. 6. A control system according to any one of claims 1 to 5. (Appendix 7) the control means, when the disclosure is not possible, causes the requester to disclose the shared information if a predetermined time has elapsed since the reception of the shared information, and does not cause the requester to disclose the shared information if the predetermined time has not elapsed since the reception of the shared information. 7. The control system of claim 6. (Appendix 8) the shared information receiving means receives, together with the destination information, the permission information, and the shared information, time information representing the predetermined time when the disclosure is not permitted; 8. The control system of claim 7. (Appendix 9) The shared information is information capable of identifying that a specific device has a vulnerability. 9. A control system according to any one of claims 6 to 8. (Appendix 10) the shared information receiving means receives the shared information as header information including the destination information, the availability information, and the time information. 9. The control system of claim 8. (Appendix 11) receiving the shared information using the destination information and the availability information as header information; 9. A control system according to any one of claims 1 to 8. (Appendix 12) The shared information is a software bill of materials. 7. A control system according to any one of claims 1 to 6. (Appendix 13) The shared information is risk assessment information for a specific device. 12. A control system according to any one of claims 1 to 11. (Appendix 14) The shared information is alert information in a specific device. 12. A control system according to any one of claims 1 to 11. (Appendix 15) receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and sharing information; Controlling whether the shared information is made public; In the control, when a request for disclosure of the shared information is received from a requester other than the destination, if the disclosure is permitted, the shared information is made public to the requester, and if the disclosure is not permitted, the shared information is not made public to the requester. Control methods. (Appendix 16) On the computer, receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and sharing information; Controlling whether the shared information is made public; Execute the process, In the control process, when a request for disclosure of the shared information is received from a requester other than the destination, if the disclosure is permitted, the shared information is made public to the requester, and if the disclosure is not permitted, the shared information is not made public to the requester. A non-transitory recording medium readable by the computer, which records a program. (Appendix 17) On the computer, receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and sharing information; Controlling whether the shared information is made public; Execute the process, In the control process, when a request for disclosure of the shared information is received from a requester other than the destination, if the disclosure is permitted, the shared information is made public to the requester, and if the disclosure is not permitted, the shared information is not made public to the requester. program. [Explanation of symbols]

[0104] 10,20 Control System 21, 21-1, 21-2, 21-3, 21-4 Terminal equipment 30 Computer Equipment 101,201 Shared information receiving section 102,202 Control section 203 Shared information transmission section 204 Registration Department 301 Processor 302 ROM 303 RAM 304 Storage device 305 Communication Interface 306 Input / Output Interface 307 Bus 2000 Database A User B User C User D User H Alert Information J Shared information X Shared information Y Shared Information Z shared information NT Communications Network< / sbom>

Claims

1. A shared information receiving means for receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and shared information; A control means for controlling whether to make the shared information public; a registration means for registering the destination information, the availability information, and the sharing information in association with each other; Equipped with the other shared information created by the destination terminal includes link information for accessing the shared information registered in the registration means; when the control means receives a request for disclosure of the shared information from a requester other than the destination based on the link information included in the other shared information, if the disclosure is permitted, the control means causes the requester to disclose the shared information, and if the disclosure is not permitted, the control means does not cause the requester to disclose the shared information. Control system.

2. a shared information transmitting means for transmitting the shared information to the destination; The control system of claim 1 .

3. the control means, when the disclosure is permitted, causes the requester to transmit the shared information to the shared information transmitting means, and, when the disclosure is prohibited, does not cause the requester to transmit the shared information to the shared information transmitting means. The control system of claim 2.

4. When the disclosure is not possible, the control means causes the shared information transmission means to transmit information indicating that the disclosure is not possible to the request source. The control system of claim 3.

5. When data flows from an upstream terminal to a downstream terminal among a plurality of terminals, the destination terminal is a terminal upstream of the request source terminal. A control system according to any one of claims 1 to 4.

6. When the control means receives the disclosure request in a case where the disclosure is not possible, the control means controls whether to cause the requester to disclose the shared information depending on the elapsed time from the reception of the shared information. A control system according to any one of claims 1 to 5.

7. the control means, when the disclosure is not possible, causes the requester to disclose the shared information if a predetermined time has elapsed since the reception of the shared information, and does not cause the requester to disclose the shared information if the predetermined time has not elapsed since the reception of the shared information.

7. The control system of claim 6.

8. the shared information receiving means receives, together with the destination information, the permission information, and the shared information, time information representing the predetermined time when the disclosure is not permitted; 8. The control system of claim 7.

9. The shared information is information capable of identifying that a specific device has a vulnerability. A control system according to any one of claims 6 to 8.

10. the shared information receiving means receives the shared information with the destination information, the availability information, and the time information as header information; 9. The control system of claim 8.

11. the shared information receiving means receives the shared information including the destination information and the availability information as header information; A control system according to any one of claims 1 to 8.

12. The shared information is a software bill of materials. A control system according to any one of claims 1 to 6.

13. The shared information is risk assessment information for a specific device. A control system according to any preceding claim.

14. The shared information is alert information for a specific device. A control system according to any preceding claim.

15. A computer comprising: receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and sharing information; Controlling whether the shared information is made public; registering the destination information, the availability information, and the sharing information in association with each other; Execute the process, The other shared information created by the destination terminal includes link information for accessing the registered shared information, In the control process, when a request for disclosure of the shared information is received from a requester other than the destination based on the link information included in the other shared information, if the disclosure is permitted, the shared information is made public to the requester, and if the disclosure is not permitted, the shared information is not made public to the requester. Control methods.

16. On the computer, receiving destination information indicating a destination, permission information indicating whether or not the information is to be made public to anyone other than the destination, and sharing information; Controlling whether the shared information is made public; registering the destination information, the availability information, and the sharing information in association with each other; Execute the process, The other shared information created by the destination terminal includes link information for accessing the registered shared information, In the control process, when a request for disclosure of the shared information is received from a requester other than the destination based on the link information included in the other shared information, if the disclosure is permitted, the shared information is made public to the requester, and if the disclosure is not permitted, the shared information is not made public to the requester. program.

Images