System, method, and program

Abstract

To provide a system, a method, and a non-transitory computer-readable medium that can increase reliability of software as to whether or not there is a backdoor in the software.SOLUTION: A system (10) includes: a plurality of backdoor inspection devices (11, 21); databases (14, 24); and a user device (12b). The backdoor inspection device (11) includes: backdoor estimation means (111) for estimating backdoor inspection on predetermined software installed on a device (12a) that communicates with the user device (12b) and estimates whether or not there is a backdoor in the predetermined software; and certificate issuance means (112) for issuing a backdoor inspection certificate including a result of the backdoor inspection. The database (14) includes: registration means (141) for registering the backdoor inspection certificate; and transmission means (142) for transmitting the backdoor inspection certificate.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a system, method, and non-transitory computer-readable medium, and more particularly to a system, method, and non-transitory computer-readable medium that can improve confidence that software has or does not have a backdoor. [Background technology]

[0002] In recent years, infrastructure and enterprise systems that support our daily lives have become more complex, making it difficult to configure them using only devices (equipment) from a single company. Therefore, devices are procured from outside and the procured devices are combined or incorporated to configure infrastructure and enterprise systems. When configuring infrastructure and enterprise systems, it is assumed that the manufacturers and manufacturing / distribution chains of the procured devices are trustworthy. However, in these embedded devices, many incidents have been reported in which hidden or unexpected functions that users (embedders) are not aware of have been discovered in terms of software, firmware, and hardware. Therefore, the assumption that device manufacturers and manufacturing / distribution chains are trustworthy is no longer valid, and methods for detecting unauthorized functions in software, i.e., backdoors, have been proposed.

[0003] Patent Document 1 discloses that an approach for performing offline malware detection inspection and additionally real-time malware detection inspection is provided. Patent Document 1 discloses that the offline malware detection inspection may include offline detection of a function call map of an application, the function call map recording a call relationship between functions called by the application, extracting a pattern of the function calls of the application from the function call map, and comparing the extracted pattern with a basic pattern of a normal application. Patent Document 1 discloses that the real-time malware detection inspection may include executing an application in a real environment, recording the behavior of the application while the application is being executed, extracting a behavior pattern from the recorded behavior, and comparing the extracted behavior pattern with a basic pattern of a normal application or a pattern of a previously recorded application.

[0004] Patent Document 2 discloses a method and apparatus for verifying data for use in an aircraft. Patent Document 2 discloses that a plurality of digital certificates associated with data are received by a processor unit, the processor unit determines whether one of the digital certificates has been compromised, the processor unit selects a select number of the plurality of digital certificates in response to determining that one of the plurality of digital certificates has been compromised, and the processor unit validates the data for use in the aircraft using the select number of the plurality of digital certificates. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Special Publication No. 2017-505944 [Patent Document 2] Special Publication No. 2016-521079 Summary of the Invention [Problem to be solved by the invention]

[0006] Many methods for detecting backdoors include false positives, so there is a problem that inspections using a single certification body (backdoor inspection device) will result in oversights. In addition, when detecting backdoors in large-scale software or in multiple pieces of software used by a single device, there are many targets for inspection (analysis), making it difficult for a single certification body (backdoor inspection device) to inspect all the software.

[0007] It is an object of the present disclosure to provide a system, method, and non-transitory computer-readable medium that solves any of the problems set forth above. [Means for solving the problem]

[0008] The system according to the present disclosure comprises: The system includes a plurality of backdoor inspection devices, a database, and a user device; The plurality of back door inspection devices include a backdoor estimation means for performing a backdoor inspection on a predetermined software installed in a communication destination device of the user device and estimating whether or not the predetermined software has a backdoor; a certificate issuing means for issuing a backdoor inspection certificate including a result of the backdoor inspection, The database includes: A registration means for registering the backdoor inspection certificate; a transmission means for transmitting the backdoor inspection certificate, The user device includes: and a communication partner verification means for obtaining the backdoor inspection certificate from the database and determining whether or not to permit communication with the partner device based on a plurality of the backdoor inspection certificates.

[0009] The method according to the present disclosure comprises: A method for a system including a plurality of backdoor inspection devices, a database, and a user device, comprising: A plurality of the back door inspection devices, A backdoor inspection is performed on a predetermined software installed in a communication destination device of the user device, and it is estimated whether or not the predetermined software has a backdoor; issue a backdoor inspection certificate including the results of said backdoor inspection; The database comprises: Register the backdoor inspection certificate; Transmit the backdoor inspection certificate; The user device, Obtaining the backdoor inspection certificate from the database Based on the backdoor inspection certificates, it is determined whether or not to permit communication with the destination device.

[0010] The present disclosure relates to a non-transitory computer readable medium, comprising: A method for a system including a plurality of backdoor inspection devices, a database, and a user device, comprising: A plurality of the back door inspection devices, A backdoor inspection is performed on a predetermined software installed in a communication destination device of the user device, and it is estimated whether or not the predetermined software has a backdoor; issue a backdoor inspection certificate including the results of said backdoor inspection; The database comprises: Register the backdoor inspection certificate; Transmit the backdoor inspection certificate; The user device, Obtaining the backdoor inspection certificate from the database determining whether to permit communication with the counterpart device based on the plurality of backdoor inspection certificates; A program that causes a computer to execute the above is stored. Effect of the Invention

[0011] According to the present disclosure, a system, method, and non-transitory computer-readable medium can be provided that can improve the confidence that software does or does not have a backdoor. [Brief description of the drawings]

[0012] [Figure 1] 1 is a block diagram illustrating a system according to a first embodiment. [Diagram 2] 1 is a block diagram illustrating a system according to a first embodiment. [Diagram 3] FIG. 11 is a block diagram illustrating a system according to a second embodiment. [Figure 4] FIG. 11 is a block diagram illustrating a system according to a third embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. In each drawing, the same or corresponding elements are given the same reference numerals, and for clarity of explanation, duplicate explanations will be omitted as necessary.

[0014] [Embodiment 1] An overview of the system according to the first embodiment will be described. FIG. 1 is a block diagram illustrating a system according to the first embodiment.

[0015] As shown in Fig. 1, the system 10 according to the first embodiment includes a plurality of backdoor inspection devices (e.g., backdoor inspection device 11 and backdoor inspection device 21), a database (e.g., database 14 and database 24), and a user device 12b. Each of the plurality of backdoor inspection devices is included in a certification authority for each backdoor inspection device. Specifically, the certification authority 10a owns the backdoor inspection device 11 and the database 14, and the certification authority 20a owns the backdoor inspection device 21 and the database 24.

[0016] One of the multiple backdoor inspection devices, for example, the backdoor inspection device 11, includes a backdoor estimation means 111 and a certificate issuing means 112.

[0017] The backdoor estimation means 111 performs a backdoor inspection on a specific software installed in the destination device 12a of the communication with the user device 12b, and estimates whether or not the specific software has a backdoor. Specifically, the backdoor estimation means 111 analyzes the function and structure of the specific software, and identifies from the specific software an estimated code that is estimated to be a backdoor, thereby inspecting the specific software for a backdoor. This is sometimes expressed as the certification authority estimating whether or not the specific software has a backdoor.

[0018] Each of the multiple backdoor inspection devices (backdoor inspection device 11 and backdoor inspection device 21) may perform a backdoor inspection on all of the predetermined software. That is, the backdoor inspection device 11 may perform a backdoor inspection on all of the predetermined software, and the backdoor inspection device 21 may similarly perform a backdoor inspection on all of the predetermined software. Then, the user device 12b may determine the presence or absence of a backdoor based on the backdoor inspection certificate issued by the backdoor inspection device 11 and the backdoor inspection certificate issued by the backdoor inspection device 21.

[0019] Furthermore, a first backdoor inspection device 11 among the multiple backdoor inspection devices (backdoor inspection device 11 and backdoor inspection device 21) may perform a backdoor inspection on a part of the predetermined software. Furthermore, a second backdoor inspection device 21 among the multiple backdoor inspection devices may perform a backdoor inspection on another part of the predetermined software. Then, the user device 12b may determine the presence or absence of a backdoor based on the backdoor inspection certificate issued by the backdoor inspection device 11 and the backdoor inspection certificate issued by the backdoor inspection device 21.

[0020] Incidentally, a hidden function or additional function that is not recognized by a user of the device (user device 12b), and that is an unauthorized or unwanted function in software, is called a "backdoor." Analyzing the function and structure of software and identifying presumed code that is presumed to be a backdoor from the software is sometimes called "backdoor analysis." Presumed code is code that is highly likely to be a backdoor and is suspected.

[0021] The certificate issuing means 112 issues a backdoor inspection certificate including the result of the backdoor inspection. The result of the backdoor inspection includes whether or not a backdoor exists in the specified software. The backdoor inspection certificate further includes information on the backdoor inspection and information linking the information on the backdoor inspection to the specified software.

[0022] One of the databases, for example the database 14, includes a registration means 141 and a transmission means 142.

[0023] The registration means 141 obtains the backdoor inspection certificate from the backdoor inspection device 11 and registers the backdoor inspection certificate.

[0024] The sending means 142 sends the backdoor inspection certificate to the user device 12b.

[0025] The user device 12 b includes a communication partner verification means 121 .

[0026] The communication partner verification means 121 acquires backdoor inspection certificates from the database 14. The communication partner verification means 121 judges whether or not to permit communication with the partner device 12a, based on a plurality of backdoor inspection certificates.

[0027] If all the backdoor inspection certificates indicate that the predetermined software does not have a backdoor, the communication partner verification means 121 of the user device 12b may determine that the predetermined software does not have a backdoor. In this case, the user device 12b may determine to permit communication with the counterpart device 12a.

[0028] In addition, when the backdoor inspection certificates exceeding the threshold value indicate that the predetermined software does not have a backdoor, the communication partner verification means 121 may determine that the predetermined software does not have a backdoor. In this case, the user device 12b may determine to permit communication with the counterpart device 12a.

[0029] Furthermore, the user device 12b may have a list of the backdoor inspection reliability of the backdoor inspection device 11 and may determine the presence or absence of a backdoor based on the backdoor inspection reliability. That is, each of the multiple backdoor inspection devices may have a backdoor inspection reliability indicating the reliability of the backdoor inspection result. Then, when a backdoor inspection certificate issued by a backdoor inspection device 11p whose backdoor inspection reliability is equal to or greater than a reliability threshold indicates that the specific software does not have a backdoor, the user device 12b may determine that the specific software does not have a backdoor. In this case, the user device 12b may determine to permit communication with the counterpart device 12a.

[0030] Furthermore, if a backdoor inspection certificate issued by a certification body (inspection organization) with a high reliability of backdoor inspection indicates that the specified software does not have a backdoor, the user device 12b may determine that the specified software does not have a backdoor.

[0031] In addition, user device 12b may determine that the specified software does not have a backdoor if a backdoor inspection certificate containing the results of an inspection by an inspector with a high backdoor inspection reliability indicates that the specified software does not have a backdoor.

[0032] Also, consider a case where multiple backdoor inspection devices perform backdoor inspections on specific software installed in the counterpart device 12a. In this case, if the backdoor inspection devices have not performed backdoor inspections on all of the specific software, the user device 12b may consider the backdoor inspection certificate to be invalid and may not permit communication with the counterpart device 12a.

[0033] Furthermore, the user device 12b may determine to permit communication with the counterpart device 12a when the backdoor inspection device has performed a backdoor inspection on specific software among the predetermined software.

[0034] The backdoor inspection device 11 issues a backdoor inspection certificate including information on backdoor inspection and information linking the information on backdoor inspection to a specific software. A third party using the user device 12b uses the user device 12b to obtain a plurality of backdoor inspection certificates linked (associated) with the specific software. The user device 12b verifies whether a backdoor is included in the specific software based on the plurality of backdoor inspection certificates, and determines whether to permit communication with the counterpart device 12a. This makes it possible to provide a system, a method, and a non-transitory computer-readable medium that can improve the reliability of whether or not a backdoor is included in the specific software.

[0035] The code may be a source code or an executable code. A set of codes may be referred to as a code block.

[0036] The configuration of the system according to the first embodiment will be described in detail. Here, an example will be described in which the system using the backdoor inspection certificate is a system including the user device 12b and the counterpart device 12a of the communication therewith. FIG. 2 is a block diagram illustrating a system according to the first embodiment. Figure 2 shows details of Figure 1. For simplicity, Figure 2 shows the case where there is one certification authority.

[0037] As shown in FIG. 2, the backdoor estimation means 111 of the backdoor inspection device 11 has a function estimation means 1111 , a structure analysis means 1112 , and an analysis means 1113 .

[0038] The function estimation means 1111 estimates specific functions such as an interface function, an authentication function, a command parser function, etc. in the software.

[0039] The structure analysis means 1112 extracts a plurality of functions included in the control flow starting from the estimated specific function, and estimates each of the functions. The structure analysis means 1112 separates each of the estimated functions by type.

[0040] The analysis means 1113 has an analysis means for each type of backdoor. Using the analysis means, the analysis means 1113 compares the separated functions with the backdoors corresponding to the functions for each type. The analysis means 1113 estimates whether the function is a backdoor or not as a result of the comparison, and identifies the estimated code estimated to be a backdoor from the software. The analysis means 1113 may also inspect the entire software without relying on individual functions.

[0041] The certificate issuing means 112 issues a backdoor inspection certificate, which includes information on the location of the estimated code in the software if the backdoor is included in the software.

[0042] The backdoor inspection certificate may include at least one of the hash value of the software, the name of the software, and the signature of the device that performed the backdoor inspection (backdoor inspection device 11). By including the signature of the backdoor inspection device 11 in the backdoor inspection certificate, it can be proven that the backdoor inspection device 11 has inspected the software for a backdoor.

[0043] The backdoor inspection certificate may include at least one of the version of the backdoor inspection device 11 that performed the backdoor inspection, the ID of the analyst who performed the analysis using the backdoor inspection device 11, the signature of the analyst, the organization to which the analyst belongs, and the name of the analyst. The certificate may additionally include the date on which the analysis was performed.

[0044] [Embodiment 2] FIG. 3 is a block diagram illustrating a system according to the second embodiment. For simplicity, elements other than the certification authority are omitted in FIG.

[0045] As shown in FIG. 3, system 20 according to embodiment 2 differs from system 10 according to embodiment 1 in that the results of a backdoor inspection, etc. are added to a backdoor inspection certificate each time the certification body (backdoor inspection device) performs a backdoor inspection.

[0046] Specifically, a first backdoor inspection device 11 among the multiple backdoor inspection devices performs a backdoor inspection on a part of a predetermined software and obtains a result of the first backdoor inspection. The certification authority 10a performs a backdoor inspection using the first backdoor inspection device 11 owned by itself. The first backdoor inspection device 11 issues a first backdoor inspection certificate. The first backdoor inspection certificate includes the result of the backdoor inspection by the backdoor inspection device 11 and the signature of the certification authority 10a.

[0047] A second backdoor inspection device 21 of the multiple backdoor inspection devices performs a backdoor inspection on another part of the predetermined software and obtains a result of the second backdoor inspection. The certification authority 20a performs a backdoor inspection using the second backdoor inspection device 21 owned by itself. The second backdoor inspection device 21 issues a second backdoor inspection certificate. The second backdoor inspection certificate includes the result of the backdoor inspection by the backdoor inspection device 11, the signature of the certification authority 10a, the result of the backdoor inspection by the backdoor inspection device 21, and the signature of the certification authority 20a.

[0048] That is, the second backdoor inspection device 21 adds the results of the second backdoor inspection, which is the result of performing a backdoor inspection on another part of the specified software, to the results of the first backdoor inspection, and issues a second backdoor inspection certificate.

[0049] In this way, in the system 20 according to the second embodiment, the backdoor inspection certificates are integrated (merged) at the certification authority 20a that issues the backdoor inspection certificates, not at the user device 12b that uses the backdoor inspection certificates, which allows the user device 12b to reduce the cost of obtaining backdoor inspection certificates from each of the multiple certification authorities.

[0050] [Embodiment 3] FIG. 4 is a block diagram illustrating a system according to the third embodiment. For simplicity, elements other than the certification authority are omitted in FIG.

[0051] As shown in FIG. 4, the system 30 according to the third embodiment differs from the system 10 according to the first embodiment in that a coordinating certification body is provided to compile the results of backdoor inspections performed by multiple certification bodies (backdoor inspection devices).

[0052] Specifically, the first backdoor inspection device 11 performs a backdoor inspection on a part of a predetermined software, obtains the result of the first backdoor inspection, and issues a first backdoor inspection certificate. The first backdoor inspection certificate includes the result of the backdoor inspection by the backdoor inspection device 11 and the signature of the certification authority 10a.

[0053] The second backdoor inspection device 21 performs a backdoor inspection on another part of the predetermined software, obtains the result of the second backdoor inspection, and issues a second backdoor inspection certificate. The second backdoor inspection certificate includes the result of the backdoor inspection by the backdoor inspection device 21 and the signature of the certification authority 20a.

[0054] The certification authority 30a for consolidating the results of multiple backdoor inspections issues a new backdoor inspection certificate that integrates a first backdoor inspection result, which is a result of performing a backdoor inspection on a part of the specified software, and a second backdoor inspection result, which is a result of performing a backdoor inspection on another part of the specified software. The new backdoor inspection certificate includes the result of the backdoor inspection by the backdoor inspection device 11, the signature of the certification authority 10a, the result of the backdoor inspection by the backdoor inspection device 21, the signature of the certification authority 20a, and in addition, the signature of the certification authority 30a.

[0055] In this way, the system 30 according to the third embodiment includes the certification authority 30a for consolidating the results of backdoor inspections by a plurality of certification authorities (backdoor inspection devices). This allows the user device 12b to reduce the cost of obtaining backdoor inspection certificates from each of the plurality of certification authorities, as in the second embodiment.

[0056] In the above embodiment, the present invention has been described as being configured as hardware, but the present invention is not limited to this. The present invention can also be realized by having a CPU (Central Processing Unit) execute a computer program to process each component.

[0057] In the above embodiment, the program can be stored and supplied to the computer using various types of non-transitory computer readable media. The non-transitory computer readable media includes various types of tangible storage media. Examples of the non-transitory computer readable media include magnetic recording media (specifically, flexible disks, magnetic tapes, and hard disk drives), magneto-optical recording media (specifically, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / Ws, semiconductor memories (specifically, mask ROMs, PROMs (Programmable ROMs), and EPROMs (Erasable PROMs)), flash ROMs, and RAMs (Random Access Memory). The program may also be supplied to the computer by various types of transitory computer readable media. Examples of the transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The transitory computer readable media can supply the program to the computer via wired communication paths such as electric wires and optical fibers, or wireless communication paths.

[0058] Although the present invention has been described above with reference to the embodiment, the present invention is not limited to the above. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the invention.

[0059] The present invention is not limited to the above-described embodiment, and can be modified as appropriate without departing from the spirit and scope of the present invention.

[0060] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. (Appendix 1) The system includes a plurality of backdoor inspection devices, a database, and a user device; The plurality of back door inspection devices include a backdoor estimation means for performing a backdoor inspection on a predetermined software installed in a communication destination device of the user device and estimating whether or not the predetermined software has a backdoor; a certificate issuing means for issuing a backdoor inspection certificate including a result of the backdoor inspection, The database includes: A registration means for registering the backdoor inspection certificate; a transmission means for transmitting the backdoor inspection certificate, The user device includes: and a communication partner verification means for acquiring the backdoor inspection certificate from the database and determining whether or not to permit communication with the partner device based on a plurality of the backdoor inspection certificates. system. (Appendix 2) Each of the plurality of backdoor inspection devices performs the backdoor inspection on all of the predetermined software. 2. The system of claim 1. (Appendix 3) a first backdoor inspection device among the plurality of backdoor inspection devices performs the backdoor inspection on a part of the predetermined software; a second backdoor inspection device among the plurality of backdoor inspection devices performs the backdoor inspection on another part of the predetermined software; 2. The system of claim 1. (Appendix 4) the second backdoor inspection device adds a result of a second backdoor inspection, which is a result of performing the backdoor inspection on another part of the specified software, to a result of a first backdoor inspection, which is a result of performing the backdoor inspection on a part of the specified software, and issues a second backdoor inspection certificate. 4. The system of claim 3. (Appendix 5) a certification authority that issues a new backdoor inspection certificate that integrates a first backdoor inspection result that is a result of performing the backdoor inspection on a part of the specified software and a second backdoor inspection result that is a result of performing the backdoor inspection on another part of the specified software; 4. The system of claim 3. (Appendix 6) the user device determines that the specified software does not have the backdoor if all of the backdoor inspection certificates indicate that the specified software does not have the backdoor; 6. The system of any one of claims 1 to 5. (Appendix 7) When the backdoor inspection certificate is equal to or greater than a threshold, the user device determines that the specific software does not have the backdoor. 6. The system of any one of claims 1 to 5. (Appendix 8) Each of the plurality of backdoor inspection devices has a backdoor inspection reliability indicating a reliability of a result of the backdoor inspection, the user device determines that the specified software does not contain the backdoor when the backdoor inspection certificate issued by the backdoor inspection device, whose backdoor inspection reliability is equal to or greater than a reliability threshold, indicates that the specified software does not contain the backdoor; 6. The system of any one of claims 1 to 5. (Appendix 9) The backdoor inspection devices are included in a certification body for each of the backdoor inspection devices. 9. The system of any one of claims 1 to 8. (Appendix 10) The result of the backdoor inspection includes whether or not the backdoor is present in the predetermined software. 10. The system of any one of claims 1 to 9. (Appendix 11) the backdoor estimation means analyzes a function and a structure of the predetermined software, and identifies an estimated code estimated to be the backdoor from the predetermined software, thereby inspecting the predetermined software for the backdoor; 11. The system of any one of claims 1 to 10. (Appendix 12) The backdoor inspection certificate further includes information regarding the backdoor inspection and information linking the information regarding the backdoor inspection to the specified software. 12. The system of any one of claims 1 to 11. (Appendix 13) A method for a system including a plurality of backdoor inspection devices, a database, and a user device, comprising: A plurality of the back door inspection devices, A backdoor inspection is performed on a predetermined software installed in a communication destination device of the user device, and it is estimated whether or not the predetermined software has a backdoor; issue a backdoor inspection certificate including the results of said backdoor inspection; The database comprises: Register the backdoor inspection certificate; Transmit the backdoor inspection certificate; The user device, Obtaining the backdoor inspection certificate from the database determining whether to permit communication with the counterpart device based on the plurality of backdoor inspection certificates; method. (Appendix 14) A method for a system including a plurality of backdoor inspection devices, a database, and a user device, comprising: A plurality of the back door inspection devices, A backdoor inspection is performed on a predetermined software installed in a communication destination device of the user device, and it is estimated whether or not the predetermined software has a backdoor; issue a backdoor inspection certificate including the results of said backdoor inspection; The database comprises: Register the backdoor inspection certificate; Transmit the backdoor inspection certificate; The user device, Obtaining the backdoor inspection certificate from the database determining whether to permit communication with the counterpart device based on the plurality of backdoor inspection certificates; A non-transitory computer-readable medium on which a program for causing a computer to execute the program is stored. [Explanation of symbols]

[0061] 10: System 10a, 20a: Certification bodies 11, 21: Backdoor inspection device 111: Backdoor estimation method 1111: Function estimation means 1112: Structural analysis means 1113: Analysis means 112: Certificate issuing method 12b: User device 121: Communication partner verification method 12a: Remote device 121: Communication partner verification method 14, 24: Database 141: Registration method 142: Transmission means

Claims

1. a first authority that issues a first certificate including information indicating the presence or absence of a backdoor in at least a portion of software; a second authority that issues a second certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; a device that determines whether or not to permit communication with the communication destination based on the second certificate issued for the software of the communication destination; Preparation, The second certificate includes the first certificate. system.

2. a first authority that issues a first certificate including information indicating the presence or absence of a backdoor in at least a portion of software; a second authority that issues a second certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; a third authority that issues a third certificate including the first certificate and the second certificate; a device that determines whether or not to permit communication with the communication destination based on the third certificate issued for the software of the communication destination; A system that provides.

3. A first authority issues a first certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; When the second authority issues a second certificate including information indicating the presence or absence of a backdoor in at least a part of the software, determining whether or not to permit communication with the communication destination based on the second certificate issued for the software of the communication destination, the second certificate includes the first certificate; method.

4. A first authority issues a first certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; issuing a second certificate in a second organization, the second certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; a third authority issues a third certificate including the first certificate and the second certificate; a third certificate issued for software at the communication destination, the third certificate being issued to the software at the communication destination, and a determination as to whether or not to permit communication with the communication destination.

5. A step of issuing, at a first institution, a first certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; issuing, at a second authority, a second certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; determining whether or not to permit communication with the communication destination based on the second certificate issued for the software of the communication destination in the device; on the computer, the second certificate includes the first certificate; program.

6. A step of issuing, at a first institution, a first certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; issuing, at a second authority, a second certificate including information indicating the presence or absence of a backdoor in at least a portion of the software; issuing, at a third authority, a third certificate including the first certificate and the second certificate; determining whether or not to permit communication with the communication destination based on the third certificate issued for the software of the communication destination in the device; A program that causes a computer to execute the following.

Images