Device control device, management device, device management system, device control method, and program

Abstract

To increase flexibility in controlling operation of a device.SOLUTION: A device control apparatus 1 which is connected so as to perform encryption communication with a management apparatus 2 that manages certificates for certifying information on a user of a device to be controlled, to control operation of the device to be controlled includes: a user information acquisition unit 120 which reads user information including tag information for identifying a tag indicating a type of a certificate certifying the information on the user, from a user terminal of the user of the device to be controlled; a communication unit 10 which transmits transmission user information including the tag information to a management apparatus 2 via encryption communication, and receives certificate information including a certificate certifying the information on the user U from the management apparatus 2; an operation condition determination unit 123 which determines whether the certificate satisfies an operation condition of the device to be controlled; and a device control unit 124 which permits operation of the device to be controlled on condition that the certificate included in the certificate information satisfies the operation condition.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a device control device, a management device, a device management system, a device control method, and a program. [Background technology]

[0002] In recent years, technologies have been developed that control operations such as door locks, device activation, and engine start, triggered by the exchange of electronic signals from electronic keys, etc. For example, Patent Document 1 discloses a technology for controlling locks by receiving a processing request from one of multiple communication terminals (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2016-223212 A Summary of the Invention [Problem to be solved by the invention]

[0004] By using the above technology, it becomes possible to adaptively set the authority to control the lock for each communication terminal. Here, the authority set for the communication terminal is set according to the attributes of the owner of the communication terminal. For example, the owner authority is set in advance for the communication terminal of the owner of a guest house with a lock, and only the unlocking authority is set in advance for the communication terminal of the user of the guest house.

[0005] The lock operates according to the authority preset in the communication terminal, but this operation is not based on the latest attributes of the owner of the communication terminal. Therefore, even if the attributes of the owner of the communication terminal change, the lock will continue to operate according to the authority set in the communication terminal until the authority set in the communication terminal is changed.

[0006] The inventors of the present application recognized the possibility of increasing flexibility in controlling the operation of equipment by making the conditions for operating the equipment the attributes of the owner of the communication terminal, rather than the authority set in the communication terminal.

[0007] The present invention has been made in consideration of these points, and has an object to provide a technique for increasing the flexibility of device operation control. [Means for solving the problem]

[0008] A first aspect of the present invention is a device control device that is connected to a management device that manages a certificate that certifies information about a user of a controlled device in a manner that allows encrypted communication, and controls the operation of the controlled device. This device includes a user information acquisition unit that reads user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag that indicates a type of a certificate that certifies information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and a signature of the user generated using a user private key that is a private key of the user terminal, a storage unit that stores a device identifier for identifying the device control device, an issuer public key that is a public key of an issuer of the certificate, a management device public key that is a public key of the management device, and operation conditions that define conditions for operation of the controlled device, and a storage unit that stores a device identifier for identifying the device control device, an issuer public key that is a public key of an issuer of the certificate, a management device public key that is a public key of the management device, and operation conditions that define conditions for operation of the controlled device. The device control device includes a signature verification unit that uses a public key to verify the authenticity of the signature of the management device included in the user information read from the user terminal, an encryption unit that generates user information for transmission by encrypting information including the user identifier, the tag information, and the device identifier with the management device public key on condition that the signature is authentic, and a communication unit that transmits the user information for transmission to the management device via encrypted communication and receives proof information from the management device that includes a certificate certifying information about the user and a user public key corresponding to the user private key, the proof information including the signature of the issuer generated using an issuer private key that is the private key of the issuer of the certificate. The signature verification unit of the device control device verifies the authenticity of the signature of the issuer included in the proof information using the issuer public key, and verifies the authenticity of the signature of the user included in the user information using the user public key. The device control device further includes an operating condition determination unit that determines whether the certificate included in the certification information satisfies the operating conditions, provided that both the issuer's signature and the user's signature are valid, and an device control unit that permits operation of the controlled device, provided that the certificate included in the certification information satisfies the operating conditions.

[0009] The tag information may be a hash value of a tag indicating the type of the certificate.

[0010] A second aspect of the present invention is the management device connected to the above-mentioned device control device via a communication network in a manner enabling encrypted communication. This device includes a communication unit that receives the sending user information from the device control device, and a decryption unit that decrypts the sending user information using a management device private key that is a private key corresponding to the management device public key to obtain the user identifier, the tag information, and the device identifier. The communication unit refers to the user identifier and the tag information obtained by the decryption unit, and transmits to the device control device proof information including a certificate certifying information about the user and a user public key corresponding to the user private key, the information including the issuer's signature generated using an issuer private key that is a private key of the issuer of the certificate.

[0011] The management device may further include a list confirmation unit that refers to a pre-defined permission list of device identifiers of device control devices that are permitted to control the controlled device, and confirms whether the device identifier acquired by the decryption unit is included in the permission list, and the communication unit may transmit the certification information to the device control device on the condition that the device identifier acquired by the decryption unit is included in the permission list.

[0012] A third aspect of the present invention is a device management system including a device control device that controls the operation of a controlled device, and a management device that is connected to the device control device via a communication network in a manner that allows encrypted communication. In this system, the device control device includes a user information acquisition unit that reads user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of certificate certifying information about the user, the signature of the management device generated using a management device private key that is the private key of the management device, and the signature of the user generated using a user private key that is the private key of the user terminal; a memory unit that stores a device identifier for identifying the device control device, an issuer public key that is the public key of the issuer of the certificate, a management device public key that is the public key of the management device, and operating conditions that define the conditions for operation of the controlled device; a signature verification unit that uses the management device public key to verify the validity of the signature of the management device included in the user information read from the user terminal; an encryption unit that encrypts information including the user identifier, the tag information, and the device identifier with the management device public key, provided that the signature is valid, to generate user information for transmission; and a communication unit that transmits the user information for transmission to the management device. The management device includes a communication unit that receives the sending user information from the device control device, and a decryption unit that decrypts the sending user information using a management device private key that is a private key corresponding to the management device public key to obtain the user identifier, the tag information, and the device identifier. The communication unit of the management device refers to the user identifier and the tag information acquired by the decryption unit, and transmits to the device control device proof information including a certificate that certifies information about the user and a user public key that corresponds to the user private key, the proof information including a signature of the issuer generated using an issuer private key that is a private key of the issuer of the certificate, the communication unit of the device control device receives the proof information from the management device, and the signature verification unit of the device control device verifies the authenticity of the signature of the issuer included in the proof information using the issuer public key, and verifies the authenticity of the signature of the user included in the user information using the user public key.The device control device further includes an operating condition determination unit that determines whether the certificate included in the certification information satisfies the operating conditions, provided that both the issuer's signature and the user's signature are valid, and an device control unit that permits operation of the controlled device, provided that the certificate included in the certification information satisfies the operating conditions.

[0013] The device management system may further include a storage device that stores a permission list that is pre-listed as device identifiers of device control devices that are permitted to control the controlled device, and a certificate database that links and manages the user identifier, the user public key, the user signature, the certificate, the tag information, and the issuer signature, and the management device may further include a storage device management unit that reads the permission list and the certification information from the storage device.

[0014] A fourth aspect of the present invention is a device control method. In this method, a processor of a device control device that is connected to a management device that manages a certificate that certifies information about a user of a controlled device in a manner that allows encrypted communication and controls the operation of the controlled device reads user information from a user terminal of the user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of a certificate that certifies information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and the signature of the user generated using a user private key that is a private key of the user terminal, a step of verifying the validity of the signature of the management device included in the user information read from the user terminal by using a management device public key that is a public key stored in a storage unit of the device control device and is a public key of the management device, and a step of generating user information for transmission in which information including the user identifier, the tag information, and a device identifier for identifying the device control device is encrypted with the management device public key, on condition that the signature is valid. the step of verifying the validity of the issuer's signature included in the certification information using an issuer public key which is a public key stored in a memory unit of the device control device and is the public key of the issuer of the certificate; the step of verifying the validity of the user's signature included in the user information using the user public key; the step of determining whether the certificate included in the certification information satisfies operating conditions which define conditions for operation of the controlled device, on condition that both the issuer's signature and the user's signature are valid; and the step of permitting operation of the controlled device, on condition that the certificate included in the certification information satisfies the operating conditions.

[0015] A fifth aspect of the present invention is a program. This program is connected to a management device that manages a certificate that certifies information about a user of a controlled device in a manner that allows encrypted communication, and includes a function of reading user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of a certificate that certifies information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and a signature of the user generated using a user private key that is a private key of the user terminal, a function of verifying the validity of the signature of the management device included in the user information read from the user terminal, using a management device public key that is a public key stored in a storage unit of the device control device and is a public key of the management device, and a function of generating user information for transmission in which information including the user identifier, the tag information, and a device identifier for identifying the device control device is encrypted with the management device public key, on condition that the signature is valid. a function of creating a management device that can identify the user through encrypted communication, a function of transmitting the sending user information to the management device via encrypted communication, a function of receiving from the management device via encrypted communication certification information including a certificate proving information about the user and a user public key corresponding to the user private key, the certification information including the issuer's signature generated using an issuer private key that is the private key of the issuer of the certificate, a function of verifying the validity of the issuer's signature included in the certification information using an issuer public key that is a public key stored in a memory unit of the device control device and is the public key of the issuer of the certificate, a function of verifying the validity of the user's signature included in the user information using the user public key, a function of determining whether the certificate included in the certification information satisfies operating conditions that define conditions for operation of the controlled device, provided that both the issuer signature and the user signature are valid, and a function of permitting operation of the controlled device, provided that the certificate included in the certification information satisfies the operating conditions.

[0016] In order to provide this program or to update a part of the program, a computer-readable recording medium having this program recorded thereon may be provided, or this program may be transmitted over a communication line.

[0017] Any combination of the above components, and any transformation of the present invention into a method, device, system, computer program, data structure, recording medium, etc., are also effective as aspects of the present invention. Effect of the Invention

[0018] According to the present invention, it is possible to increase the flexibility of device operation control. [Brief description of the drawings]

[0019] [Figure 1] FIG. 1 is a diagram for explaining an overview of a device management system according to an embodiment. [Diagram 2] 2 is a diagram illustrating a schematic functional configuration of a device control device and a management device according to an embodiment; FIG. [Diagram 3] 2 is a diagram illustrating information stored in a storage unit of a device control device according to an embodiment. FIG. [Figure 4] FIG. 2 is a diagram illustrating an example of a data structure of user information according to an embodiment. [Diagram 5] FIG. 4 is a diagram illustrating a data structure of a certificate database according to the embodiment. [Figure 6] FIG. 4 is a diagram illustrating an example of a data structure of a permission list according to an embodiment. [Figure 7] 4 is a sequence diagram illustrating the flow of device control processing executed in the device management system according to the embodiment. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0020] <Outline of the embodiment> Fig. 1 is a diagram for explaining an overview of a device management system S according to an embodiment. The overview of the embodiment will be described below with reference to Fig. 1.

[0021] The device management system S according to the embodiment includes a control target device D, a device control device 1 that controls the operation of the control target device D, a management device 2 that manages a certificate that certifies information about a user U of the control target device D, and a storage device 3. Here, the device control device 1 and the management device 2 are connected in a manner that allows encrypted communication.

[0022] In the example of the device management system S shown in Fig. 1, the controlled device D is an electronic lock that uses the power of a motor to unlock and lock the device. The device control device 1 can obtain information from the user terminal T carried by the user U by reading a code displayed on the display unit of the user terminal T.

[0023] The process executed by the device management system S according to the embodiment will be outlined below in the order of (1) to (6), and the numbers correspond to (1) to (6) in FIG.

[0024] (1) The device control device 1 reads user information about a user U held by the user terminal T from the user terminal T. Specifically, the device control device 1 may access the URI (Uniform Resource Identifier) ​​read from the user terminal T and acquire the user information from the accessed destination.

[0025] Here, the user information read by the device control device 1 from the user terminal T includes tag information for identifying a tag indicating the type of certificate that certifies the information about the user U. Although not limited thereto, a certificate that certifies the information about the user U is, for example, a license for the user U to operate a specific device or heavy machinery, proof that the user U belongs to a specific organization, proof that the user U or a pet owned by the user U has resistance or antibodies against a specific disease, or has been vaccinated, etc.

[0026] (2) The device control device 1 encrypts a part of the user information with the management device public key and transmits the encrypted information to the management device 2. (3) The management device 2 acquires a certificate from the storage device 3 that stores the certificate that certifies information about the user U, based on the tag information included in the user information received from the device control device 1. (4) The management device 2 transmits the certificate information including the certificate acquired from the storage device 3 to the device control device 1.

[0027] (5) The device controlling apparatus 1 judges whether or not the contents of the certificate received from the management apparatus 2 satisfy the conditions for operating the controlled device D. (6) The device control device 1 permits the operation of the controlled device D on the condition that the contents of the certificate satisfy the conditions for operating the controlled device D.

[0028] This allows the device control device 1 to directly reference the attributes of the user U to determine whether or not to permit operation of the control-target device D, thereby improving the flexibility of the operation control of the control-target device D.

[0029] <Functional configuration of device control device 1 and management device 2 according to the embodiment> 2 is a diagram illustrating a schematic functional configuration of each of a device control device 1 and a management device 2 according to an embodiment. The device control device 1 includes a communication unit 10, a storage unit 11, and a control unit 12. The management device 2 includes a communication unit 20, a storage unit 21, and a control unit 22.

[0030] In Fig. 2, arrows indicate main data flows, and there may be data flows not shown in Fig. 2. In Fig. 2, each functional block indicates a configuration in function units, not a configuration in hardware (device) units. Therefore, the functional blocks shown in Fig. 2 may be implemented in a single device, or may be implemented separately in multiple devices. Data may be exchanged between functional blocks via any means, such as a data bus, a network, or a portable storage medium.

[0031] The communication unit 10 is a communication interface for the device control device 1 to communicate with external devices such as the management device 2, and is realized by, for example, a mobile communication module or a Wi-Fi (registered trademark) module.

[0032] The memory unit 11 is a large-capacity storage device such as a ROM (Read Only Memory) that stores the BIOS (Basic Input Output System) of the computer that realizes the device control device 1, a RAM (Random Access Memory) that serves as the working area of ​​the device control device 1, an HDD (Hard Disk Drive) or SSD (Solid State Drive) that stores the OS (Operating System), application programs, and various information referenced when the application programs are executed.

[0033] The control unit 12 is a processor such as a CPU (Central Processing Unit) or GPU (Graphics Processing Unit) of the equipment control device 1, and functions as a user information acquisition unit 120, a signature verification unit 121, an encryption unit 122, an operating condition determination unit 123, and an equipment control unit 124 by executing programs stored in the memory unit 11.

[0034] The communication unit 20 is a communication interface for the management device 2 to communicate with external devices such as the device control device 1, and is realized by, for example, a LAN (Local Area Network) module.

[0035] The memory unit 21 is a large-capacity storage device such as a ROM that stores the BIOS of the computer that realizes the management device 2, a RAM that serves as the working area of ​​the management device 2, an OS, an application program, and various information referenced when the application program is executed, such as an HDD or SSD.

[0036] The control unit 22 is a processor such as a CPU or GPU of the management device 2, and functions as a decryption unit 220, a storage device management unit 221, and a list confirmation unit 222 by executing programs stored in the storage unit .

[0037] 2 shows an example in which the management device 2 is configured as a single device. However, the management device 2 may be realized by a plurality of computational resources such as processors and memories, for example, as in a cloud computing system. In this case, each unit constituting the control unit 22 is realized by at least one of a plurality of different processors executing a program.

[0038] The user information acquisition unit 120 reads user information from the user terminal T of the user U. Here, the user information is information including a user identifier for identifying the user U, tag information for identifying a tag indicating a type of a certificate certifying information about the user U, a signature of the management device generated using a management device private key which is a private key of the management device 2, and a signature of the user U generated using a user private key which is a private key of the user terminal T.

[0039] FIG. 3 is a diagram showing information stored in the storage unit 11 of the device control device 1 according to the embodiment. As shown in FIG. 3, the storage unit 11 stores, as various information referred to when an application program is executed, a device identifier for identifying the device control device 1, an issuer public key which is the public key of the issuer of the certificate, a management device public key which is the public key of the management device 2, and an operation condition which defines the operation condition of the control target device D. The information stored in the storage unit 11 is stored in the storage unit 11 by the manufacturer of the device control device 1 when the device control device 1 is manufactured, for example. As shown in FIG. 3, the storage unit 11 may include one or more issuer public keys. Examples of the operation condition which defines the operation condition of the control target device D include that the user U has a specific certificate, that the validity period of the certificate has not expired, and the like.

[0040] The signature verification unit 121 reads out the management device public key from the storage unit 11. The signature verification unit 121 verifies the validity of the signature of the management device 2 included in the user information read from the user terminal T by using the management device public key. On the condition that the signature verified by the signature verification unit 121 is valid, the encryption unit 122 generates user information for transmission by encrypting information including a user identifier, tag information, and a device identifier with the management device public key. Note that the user identifier and tag information are included in the user information acquired by the user information acquisition unit 120 from the user terminal T, and the device identifier is stored in the storage unit 11.

[0041] The communication unit 20 transmits the sending user information generated by the encryption unit 122 to the management device 2 via encrypted communication. The communication unit 20 receives proof information including a certificate certifying information about the user U and a user public key corresponding to the user private key from the management device 2. This proof information is information including a signature of the issuer generated using an issuer private key, which is the private key of the certificate issuer. The process executed in the management device 2 will be described later.

[0042] The signature verification unit 121 reads out the issuer public key from the storage unit 11. The signature verification unit 121 uses the issuer public key to verify the validity of the issuer signature included in the certification information received by the communication unit 20. The signature verification unit 121 also uses the user public key included in the certification information received by the communication unit 20 to verify the validity of the signature of the user U included in the user information acquired by the user information acquisition unit 120.

[0043] The operation condition determination unit 123 determines whether or not the certificate included in the certification information satisfies the operation condition, on the condition that both the issuer's signature and the user's signature are valid as a result of the verification by the signature verification unit 121. The device control unit 124 permits the operation of the controlled device D, on the condition that the certificate included in the certification information satisfies the operation condition. For example, if the controlled device D has an autolock door, the certificate is a permit for the user U to enter, and the device control unit 124 permits the controlled device D to unlock it. As another example, if the controlled device D is a special vehicle that requires a license to operate, the certificate is a special vehicle license issued to the user U, and the device control unit 124 permits the controlled device D to start.

[0044] The user U can download tag information for identifying a tag indicating the type of certificate to the user terminal T via the communication network N. Therefore, when the user U acquires a new certificate or updates a certificate, the user U can quickly store the tag information in the user terminal T. The device control unit 124 controls the operation of the control target device D based on the user information read from the user terminal T by the user information acquisition unit 120, and can quickly respond to the acquisition or update of the user U's certificate. As a result, the device control device 1 can increase the flexibility of the operation control of the control target device D based on the user U's certificate.

[0045] Here, the "tag" is information indicating the type of certificate, and examples of such information include a "license for a special vehicle," a "certificate of having been vaccinated against a specific vaccine," and an "employee ID card for a specific company." The tag information included in the user information read by the user information acquisition unit 120 from the user terminal T need only be information capable of identifying a tag indicating the type of certificate that certifies information about the user U, and does not necessarily have to be the tag itself. As a specific example, the tag information may be a hash value of a tag, which is information indicating the type of certificate.

[0046] Fig. 4 is a diagram showing an example of a data structure of user information according to an embodiment. As shown in Fig. 4, the user information includes a user identifier, tag information, the signature of the management device 2, and the signature of the user. In the example shown in Fig. 4, a hash value of a tag, which is information indicating a type of a certificate, is stored as the tag information. In addition, the user information also includes multiple pieces of tag information in correspondence with the fact that the storage unit 11 includes one or more issuer public keys.

[0047] Due to its nature, a hash value has a one-to-one relationship with a tag, and it is considered extremely difficult to restore the original tag from the hash value. Therefore, even if tag information is leaked to a third party, the third party cannot substantially restore the tag from the tag information. On the other hand, since the management device 2 possesses the tag in advance, it is also possible to generate tag information corresponding to the tag. Therefore, the management device 2 can identify the corresponding tag by acquiring the tag information from the device control device 1. In this way, the user information held by the user terminal T is tag information rather than the tag itself, and thus the device management system S can reduce the risk of information leakage.

[0048] (Processing Executed by Management Device 2) Next, a process executed by the management device 2 that receives the sending user information from the device control device 1 will be described.

[0049] The communication unit 20 of the management device 2 receives the sending user information from the device control device 1. The decryption unit 220 decrypts the sending user information using the management device private key, which is a private key corresponding to the management device public key, and acquires the user identifier, the tag information, and the device identifier.

[0050] The communication unit 20 transmits certificate information including a certificate certifying information about the user U and a user public key corresponding to the user private key to the device control device 1. This certificate information includes a signature of the issuer generated using an issuer private key, which is the private key of the certificate issuer.

[0051] 5 is a diagram showing a schematic data structure of the certificate database 30 according to the embodiment. The certificate database 30 is stored in the storage device 3, and is managed by the storage device manager 221 of the management device 2.

[0052] 5, the certificate database 30 manages a user identifier, a user public key, a user signature, a certificate, tag information, and an issuer signature for each user identifier by linking them together. Specifically, the certificate database 30 stores the user identifier and the user public key with the user signature, the certificate, the tag information, the hash value of the tag information, and information indicating the expiration date of the certificate, with the signature of the certificate issuer attached. The signature verification unit 121 refers to the user identifier and the tag information acquired by the decryption unit 220, and reads and acquires the certification information from the certificate database 30.

[0053] In this way, the management device 2 can transmit the authentication information of the user U who is the owner of the user terminal T to the device control device 1 based on the information received from the device control device 1 which reads the user information from the user terminal T.

[0054] Here, since the device control device 1 may be installed in a place beyond the reach of the management device 2, there is a possibility that it cannot be prevented from being stolen or tampered with by a malicious third party. Therefore, the list checking unit 222 of the management device 2 refers to a permission list that lists in advance the device identifiers of the device control devices 1 that are permitted to control the control target device D, and checks whether the device identifier acquired by the decryption unit 220 is included in the permission list.

[0055] Fig. 6 is a diagram showing an example of a data structure of the permission list 31 according to the embodiment. As shown in Fig. 6, the permission list 31 is stored in the storage device 3 in a state where device identifiers of the device control devices 1 that are permitted to control the control target device D are listed in advance, and is managed by the list checking unit 222 of the management device 2. The permission list 31 is read from the storage device 3 by the storage device management unit 221 of the management device 2.

[0056] The communication unit 20 of the management device 2 transmits the certificate information to the device control device 1 on the condition that the device identifier acquired by the decryption unit 220 exists in the permission list 31. For example, if the administrator of the device control device 1 finds any abnormality in the device control device 1, the administrator of the management device 2 notifies the administrator of the management device 2. The administrator of the management device 2 deletes the device identifier of the notified device control device 1 from the permission list 31. This allows the management device 2 to refrain from transmitting the certificate information of the user U to the device control device 1 if the theft or tampering of the device control device 1 is found.

[0057] <Process flow of device control method executed in device management system S> FIG. 7 is a sequence diagram for explaining the flow of device control processing executed in the device management system S according to the embodiment.

[0058] The user information acquisition unit 120 of the device control device 1 reads user information from the user terminal T of the user U (S2). The signature verification unit 121 reads the management device public key from the storage unit 11 (S4). The signature verification unit 121 uses the management device public key to verify the validity of the signature of the management device 2 included in the user information read by the user information acquisition unit 120 (S6).

[0059] If the signature of the management device 2 is valid (Yes in S8), the encryption unit 122 encrypts information including the user identifier, tag information, and device identifier with the management device public key to generate sending user information (S10).

[0060] The communication unit 10 transmits the sending user information generated by the encryption unit 122 to the management device 2 (S12). The communication unit 20 of the management device 2 receives the sending user information from the device control device 1 (S14). The decryption unit 220 decrypts the sending user information received by the communication unit 20 (S16).

[0061] The storage device management unit 221 acquires certification information from the storage device 3 by referring to the user identifier and tag information acquired by the decryption unit 220 by decrypting the sending user information (S18). The communication unit 20 transmits the certification information acquired by the storage device management unit 221 to the device control device 1 (S20).

[0062] The communication unit 10 of the device controlling device 1 receives the certification information from the management device 2 (S22). The signature verification unit 121 verifies the validity of the issuer's signature included in the certification information received by the communication unit 10, using the issuer public key (S24). If the issuer's signature is valid (Yes in S26), the signature verification unit 121 verifies the validity of the signature of user U included in the user information acquired by the user information acquisition unit 120, using the user public key included in the certification information received by the communication unit 10 (S28).

[0063] If the signature of user U is valid (Yes in S30), the operating condition determination unit 123 determines whether the certificate included in the certification information satisfies the operating conditions (S32). If the certificate included in the certification information satisfies the operating conditions (Yes in S34), the device control unit 124 permits the operation of the controlled device D (S36).

[0064] If the signature of the management device 2 is invalid (No in S8), if the signature of the issuer is invalid (No in S26), if the signature of the user U is invalid (No in S30), or if the certificate included in the certification information does not satisfy the operating conditions (No in S34), the equipment control device 1 does not perform any special processing.

[0065] <Effects of the device control device 1 according to the embodiment> As described above, the device control device 1 according to the embodiment can improve the flexibility of device operation control.

[0066] Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments, and various modifications and changes are possible within the scope of the gist of the present invention. For example, all or part of the device can be configured by distributing or integrating functionally or physically in any unit. In addition, new embodiments resulting from any combination of multiple embodiments are also included in the embodiments of the present invention. The effect of the new embodiment resulting from the combination also has the effect of the original embodiment.

[0067] <First Modification> In the above, a case has been described in which the device control device 1 acquires user information from the user terminal T by reading a code displayed on the display unit of the user terminal T. Alternatively or in addition to this, the device control device 1 may read out user information from the user terminal T via short-range wireless communication such as NFC (Near Field Communication). In this case, the device control device 1 may include an NFC reader (not shown) and read information from an NFC tag included in the user terminal T.

[0068] <Second Modification> In the above, it is assumed that the storage device 3 is a normal single storage device, but the storage device 3 may be a distributed storage device. In particular, the storage device 3 may be realized using a known distributed ledger technology such as a blockchain. [Explanation of symbols]

[0069] 1. Equipment control device 10. Communications Department 11...Storage section 12 Control section 120 User information acquisition unit 121 Signature verification unit 122...Encryption section 123...Operating condition determination section 124 Equipment control section 2...Management device 20. Communications Department 21...Storage section 22 Control section 220 Decoding unit 221...Storage device management department 222 List confirmation section 3...Storage device 30 Certificate Database 31. Allow List N: Communication network S...Instrument Management System

Claims

1. A device control device that is connected to a management device that manages a certificate that certifies information about a user of a controlled device in a manner that enables encrypted communication and controls an operation of the controlled device, a user information acquisition unit that reads user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of a certificate that certifies information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and a signature of the user generated using a user private key that is a private key of the user terminal; a storage unit that stores a device identifier for identifying the device control device, an issuer public key that is a public key of an issuer of the certificate, a management device public key that is a public key of the management device, and operating conditions that define conditions for the operation of the controlled device; a signature verification unit that uses the management device public key to verify the validity of the signature of the management device included in the user information read from the user terminal; an encryption unit that encrypts information including the user identifier, the tag information, and the device identifier with the management device public key to generate transmission user information, on condition that the signature is valid; a communication unit that transmits the sending user information to the management device via encrypted communication, and receives from the management device certification information including a certificate certifying information about the user and a user public key corresponding to the user private key, the certification information including a signature of the issuer generated using an issuer private key that is a private key of the issuer of the certificate, the signature verification unit of the device control device verifies the authenticity of the signature of the issuer included in the certification information by using the issuer public key, and verifies the authenticity of the signature of the user included in the user information by using the user public key; The device control device further comprises: an operating condition determination unit that determines whether the certificate included in the certification information satisfies the operating condition, on the condition that both the signature of the issuer and the signature of the user are valid; a device control unit that permits operation of the controlled device on condition that the certificate included in the certification information satisfies the operating condition. Equipment control device.

2. the tag information is a hash value of a tag indicating the type of the certificate; The device control device according to claim 1 .

3. 3. The management device connected to the device control device according to claim 1 or 2 in a manner enabling encrypted communication via a communication network, a communication unit that receives the transmission user information from the device control device; a decryption unit that decrypts the sending user information using a management device private key that is a private key corresponding to the management device public key to obtain the user identifier, the tag information, and the device identifier; the communication unit, by referring to the user identifier and the tag information acquired by the decryption unit, transmits to the device control device certification information including a certificate certifying information about the user and a user public key corresponding to the user private key, the certification information including a signature of the issuer generated using an issuer private key that is a private key of the issuer of the certificate. Management device.

4. The management device includes: a list checking unit that checks whether or not the device identifier acquired by the decryption unit is included in an authorization list that is previously listed as device identifiers of device control devices that are permitted to control the control target device, the communication unit transmits the certification information to the device control device on condition that the device identifier acquired by the decryption unit is included in the permission list. The management device according to claim 3 .

5. 1. An equipment management system including: an equipment control device that controls an operation of a control target equipment; and a management device that is connected to the equipment control device via a communication network in a manner that enables encrypted communication, The device control device includes: a user information acquisition unit that reads user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of a certificate that certifies information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and a signature of the user generated using a user private key that is a private key of the user terminal; a storage unit that stores a device identifier for identifying the device control device, an issuer public key that is a public key of an issuer of the certificate, a management device public key that is a public key of the management device, and operating conditions that define conditions for the operation of the controlled device; a signature verification unit that uses the management device public key to verify the validity of the signature of the management device included in the user information read from the user terminal; an encryption unit that encrypts information including the user identifier, the tag information, and the device identifier with the management device public key to generate transmission user information, on condition that the signature is valid; a communication unit that transmits the transmission user information to the management device, The management device includes: a communication unit that receives the transmission user information from the device control device; a decryption unit that decrypts the sending user information using a management device private key that is a private key corresponding to the management device public key to obtain the user identifier, the tag information, and the device identifier; the communication unit of the management device refers to the user identifier and the tag information acquired by the decryption unit, and transmits to the device control device certification information including a certificate certifying information about the user and a user public key corresponding to the user private key, the certification information including a signature of the issuer generated using an issuer private key that is a private key of the issuer of the certificate; The communication unit of the device control device receives the certification information from the management device, the signature verification unit of the device control device verifies the authenticity of the signature of the issuer included in the certification information by using the issuer public key, and verifies the authenticity of the signature of the user included in the user information by using the user public key; The device control device further comprises: an operating condition determination unit that determines whether the certificate included in the certification information satisfies the operating condition, on the condition that both the signature of the issuer and the signature of the user are valid; a device control unit that permits operation of the controlled device on condition that the certificate included in the certification information satisfies the operating condition. Equipment management system.

6. The device management system includes: an authorization list in which device identifiers of device control devices that are permitted to control the control target device are listed in advance; a storage device that stores the user identifier, the user public key, the signature of the user, the certificate, the tag information, and a certificate database that associates and manages the user identifier, the user public key, the signature of the user, the certificate, the tag information, and the signature of the issuer, The management device includes: a storage device manager that reads the permission list and the certification information from the storage device; The device management system according to claim 5 .

7. A processor of a device control device that is connected to a management device that manages a certificate that certifies information about a user of the controlled device in a manner that enables encrypted communication and controls the operation of the controlled device, reading user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of a certificate certifying information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and a signature of the user generated using a user private key that is a private key of the user terminal; verifying the authenticity of the signature of the management device included in the user information read from the user terminal by using a management device public key that is a public key stored in a storage unit of the device control device and is a public key of the management device; generating user information for transmission by encrypting information including the user identifier, the tag information, and a device identifier for identifying the device control device with the management device public key, on condition that the signature is valid; transmitting the transmission user information to the management device via encrypted communication; receiving, via encrypted communication, from the management device, certification information including a certificate attesting to information regarding the user and a user public key corresponding to the user private key, the certification information including a signature of the issuer generated using an issuer private key that is a private key of the issuer of the certificate; verifying the authenticity of the signature of the issuer included in the certification information by using an issuer public key that is a public key stored in a storage unit of the device control device and is a public key of the issuer of the certificate; verifying the authenticity of the user's signature included in the user information by using the user's public key; determining whether the certificate included in the certification information satisfies an operating condition that defines an operating condition of the controlled device, provided that both the signature of the issuer and the signature of the user are valid; permitting operation of the controlled device on condition that the certificate included in the certification information satisfies the operating condition. Device control method.

8. A device control device that is connected to a management device that manages a certificate that certifies information about a user of a controlled device in a manner that enables encrypted communication and controls the operation of the controlled device, a function of reading user information from a user terminal of a user of the controlled device, the user information including a user identifier for identifying the user, tag information for identifying a tag indicating a type of a certificate certifying information about the user, a signature of the management device generated using a management device private key that is a private key of the management device, and a signature of the user generated using a user private key that is a private key of the user terminal; a function of verifying the authenticity of the signature of the management device included in the user information read from the user terminal by using a management device public key that is a public key stored in a storage unit of the device control device and is a public key of the management device; a function of generating transmission user information by encrypting information including the user identifier, the tag information, and a device identifier for identifying the device control device with the management device public key, on condition that the signature is valid; a function of transmitting the transmission user information to the management device via encrypted communication; a function of receiving, via encrypted communication, from the management device, certification information including a certificate attesting to information regarding the user and a user public key corresponding to the user private key, the certification information including a signature of the issuer generated using an issuer private key that is a private key of the issuer of the certificate; a function of verifying the authenticity of the signature of the issuer included in the certification information by using an issuer public key that is a public key stored in a storage unit of the device control device and is a public key of the issuer of the certificate; a function of verifying the authenticity of the user's signature included in the user information by using the user public key; a function of determining whether or not the certificate included in the certification information satisfies an operating condition that defines an operating condition of the controlled device, provided that both the signature of the issuer and the signature of the user are valid; a function of permitting operation of the controlled device on condition that the certificate included in the certification information satisfies the operating conditions; program.

Images