Connection device, connection method and connection program

Abstract

Provided is a connection device that, in order to enable reduction in occurrence of tamper and leak of data held by a host computer due to a connection of a device that is not allowed to be connected to the host computer, connects a host device and a target device, that is, a device to be connected to the host device, comprises: a reading unit that reads out, from the target device, device information that can identify the device; and a connecting unit that connects the target device and the host device when the device information read out from the target device exists on a whitelist which is a list of the device information on devices that can be connected to the host device.

Description

[Technical field]

[0001] The present invention relates to a connection device and the like. [Background technology]

[0002] When connecting an IO (Input Output) device to a host computer, a system administrator generally checks whether or not it is permitted to connect the IO device to the host computer. The system administrator visually checks whether or not the IO device is an IO device that is prohibited from being connected, or an IO device that cannot be connected due to compatibility or vulnerability, and determines whether or not the IO device can be connected.

[0003] However, there are cases where the physical distance between the IO device and the host computer is large, such as in an IO distribution system where an IO device is connected to a host computer via a network. When the IO device and the host computer are separated from each other in this way, a system administrator who is near the host computer cannot visually check the IO device. The IO distribution system is constructed, for example, by ExpEther. ExpEther is a technology that transmits various signals used in industrial equipment with high reliability and low latency via Ethernet (registered trademark) or wirelessly.

[0004] On the other hand, PCI (Peripheral Component Interconnect)-Express is a standard for connecting a CPU (Central Processing Unit) and an IO device. PCI-Express is also written as PCIe. If an IO device is compatible with PCIe, the OS (Operating System) running on the host computer automatically negotiates when it recognizes that an IO device has been connected. The IO device is then connected to the host computer. The negotiation is performed to incorporate the IO device into the computer system.

[0005] In this way, if an IO device supports PCIe, the host computer automatically negotiates. Therefore, when determining whether an IO device can be connected by a method other than visual inspection, software running on the host computer generally determines whether it can be connected.

[0006] Furthermore, a related technique is described in Patent Document 1. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2007-200212 A Summary of the Invention [Problem to be solved by the invention]

[0008] However, in a method in which software running on a host computer determines whether or not a connection can be made, there is a possibility that data held by the host computer may be tampered with or leaked. In this method, software running on the host computer determines whether or not a connection can be made. Therefore, if a malicious person tampers with the software of the host computer, there is a possibility that an IO device that should not be connected to the host computer may be connected. This may result in data held by the host computer being tampered with or leaked via the IO device.

[0009] An object of the present invention is to provide a connection device etc. that makes it possible to reduce the risk of a device that should not be connected being connected to a host computer, resulting in the tampering or leakage of data held by the host computer. [Means for solving the problem]

[0010] In one aspect of the present invention, a connection device is a connection device that connects a host device to a target device that is a device that is targeted for connection to the host device, and is equipped with a reading means that reads device information, which is information that can identify the device, from the target device, and a connection means that connects the target device to the host device if the device information read from the target device is present in a whitelist, which is a list of device information for devices that can be connected to the host device.

[0011] In another aspect of the present invention, a connection method includes a connection device that connects a host device and a target device that is a device that is targeted for connection to the host device, reads device information, which is information that can identify the device, from the target device, and connects the target device to the host device if the device information read from the target device is present in a whitelist, which is a list of device information for devices that can be connected to the host device.

[0012] In another aspect of the present invention, a connection program recorded on a computer-readable recording medium is a connection program of a connection device that connects a host device and a target device that is a device that is targeted for connection to the host device, and provides a computer with a reading function that reads device information, which is information that can identify the device, from the target device, and a connection function that connects the target device and the host device when the device information read from the target device is present in a whitelist, which is a list of device information for devices that can be connected to the host device. Effect of the Invention

[0013] According to the present invention, it is possible to reduce the occurrence of data tampering or leakage held by a host computer caused by a device that should not be connected being connected to the host computer. [Brief description of the drawings]

[0014] [Figure 1] FIG. 2 illustrates an example of the configuration of a connection device according to the first embodiment of the present invention; [Diagram 2] FIG. 4 is a diagram illustrating an example of an operation flow of the connection device according to the first embodiment of the present invention. [Diagram 3] FIG. 11 is a diagram illustrating a connection example regarding a connection device according to a second embodiment of the present invention. [Figure 4] FIG. 11 is a diagram illustrating an example of the configuration of a connection device according to a second embodiment of the present invention. [Diagram 5] FIG. 11 is a diagram illustrating an example of an operation flow of a connection device according to the second embodiment of the present invention. [Figure 6] FIG. 11 is a diagram illustrating an example of an operation flow of a connection device according to the second embodiment of the present invention. [Figure 7] FIG. 2 is a diagram illustrating an example of a hardware configuration according to each embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] [First embodiment] A first embodiment of the present invention will be described. A specific example of the connection device 10 in the first embodiment is a connection device 20 in a second embodiment, which will be described later.

[0016] 1 shows an example of the configuration of a connection device 10 according to this embodiment. The connection device 10 according to this embodiment includes a read unit 11 and a connection unit 12.

[0017] The reading unit 11 reads device information, which is information capable of identifying a device, from a target device, which is a device to be connected. The connecting unit 12 connects the target device to the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device.

[0018] Next, FIG. 2 shows an example of an operation flow of the connection device 10 of this embodiment.

[0019] The reading unit 11 reads device information, which is information capable of identifying a device, from a target device, which is a device to be connected (step S101). The connecting unit 12 connects the target device to the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device (step S102).

[0020] As described above, in the first embodiment of the present invention, the connection device 10 includes the reading unit 11 and the connection unit 12. The reading unit 11 reads device information from the target device. The connection unit 12 connects the target device to the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device. This allows the connection device 10, not the host device, to determine whether the target device can be connected to the host device. As a result, even if the software of the host device 50 is tampered with, the determination logic for whether or not the connection can be made is not tampered with, so it is possible to reduce the connection of devices that should not be connected to the host device. Therefore, it is possible to reduce the connection of devices that should not be connected to the host device 50 and the tampering or leakage of data held by the host device 50.

[0021] [Second embodiment] Next, a connection device 20 according to a second embodiment of the present invention will be described.

[0022] 3 shows an example of a connection related to the connection device 20 of this embodiment. A target device 40 is connected to the connection device 20. The connection device 20, a host device 50, and a management server 60 are connected to each other via a communication line 80. In addition, a cover sensor 27 is connected to the connection device 20.

[0023] The connection device 20 of this embodiment is assumed to be applied to an IO distribution system, and therefore the target device 40 and the host device 50 are installed at locations that are physically separated from each other.

[0024] The connection device 20 connects the target device 40 and the host device 50 via a communication line 80. The communication line 80 is, for example, the Internet or a local network using a dedicated line.

[0025] The target device 40 is, for example, an IO device. The IO device provides the host device 50 with input and output of data.

[0026] The host device 50 is a device to which the target device 40 is connected, and is, for example, an information processing device.

[0027] The management server 60 has a whitelist. The whitelist is a list of device information of devices that can be connected to the host device 50. The device information is information that can identify a device. The device information includes, for example, a device model number, a serial number, a vendor ID (identification), a device ID, and the like.

[0028] The housing 70 houses the connection device 20. The target device 40 is placed inside the housing 70. In addition, a cover sensor 27 is provided on the cover of the housing 70.

[0029] The cover sensor 27 is a sensor that detects the opening and closing of the cover of the housing 70. When the cover of the housing 70 is opened, the cover sensor 27 outputs a signal indicating that the cover has been opened to the detection unit 26. When the cover is closed, the cover sensor 27 may output a signal indicating that the cover has been closed to the detection unit 26.

[0030] 4 shows an example of the configuration of the connection device 20 of this embodiment. The connection device 20 of this embodiment includes a reading unit 21, a connection unit 22, an acquisition unit 23, a storage unit 24, a determination unit 25, a detection unit 26, and a cover information storage unit .

[0031] The storage unit 24 stores a whitelist, a certificate, a group ID, connected device information, and device information. The storage unit 24 stores the certificate, the group ID, and connected device information in advance. The whitelist is stored in the storage unit 24 by the acquisition unit 23. The device information is stored in the storage unit 24 by the reading unit 21.

[0032] The connected device information is information capable of identifying the connected device 20. The connected device information includes, for example, a device model number, a serial number, and a FW (firmware) hash value.

[0033] The certificate is information that indicates that connection device 20 is a genuine product. The certificate also includes connection device information of connection device 20.

[0034] The group ID is information about the group to which the connection device 20 belongs. The host device 50 and the connection device 20 each have a group ID, and a host device 50 and a connection device 20 having the same group ID can be connected.

[0035] The cover information storage unit 28 stores the cover information. The cover information is information regarding the opening and closing of the cover of the housing of the connection device 20. The cover information is stored in the storage unit 24 by the detection unit 26.

[0036] The detection unit 26 stores the cover information in the cover information storage unit 28 based on the signal output from the cover sensor 27. More specifically, when the detection unit 26 receives a signal from the cover sensor 27 indicating that the cover has been opened, the detection unit 26 stores information indicating that the cover has been opened in the cover information storage unit 28. Furthermore, the detection unit 26 clears the cover information to a state indicating that the cover has not been opened at a predetermined timing, for example, when the power supply of the connection device 20 is turned off or when an instruction is input from an administrator terminal (not shown). In this way, the detection unit 26 can store in the cover information storage unit 28 the cover information indicating whether or not the cover has been opened before the cover information is cleared.

[0037] Note that detection unit 26, cover sensor 27, and cover information storage unit 28 are supplied with power from a system separate from the power supply to connection device 20. Even when power is not supplied to other parts of connection device 20, power is supplied to detection unit 26, cover sensor 27, and cover information storage unit 28. Therefore, detection unit 26 can store the cover information in cover information storage unit 28 before power is applied to connection device 20.

[0038] The determination unit 25 determines the authenticity of the connection device 20. When power is supplied to the connection device 20, the determination unit 25 reads the connection device information stored in the storage unit 24. The determination unit 25 also reads the certificate stored in the storage unit 24 and extracts the connection device information from the read certificate. Then, when the connection device information stored in the storage unit 24 matches the connection device information extracted from the certificate, the determination unit 25 determines that the connection device 20 is authentic. When there is no match, there is a possibility that some kind of unauthorized tampering has been performed on the connection device 20, and therefore the determination unit 25 notifies the administrator terminal that there is no match.

[0039] Furthermore, the determination unit 25 determines whether or not the cover has been opened based on the cover information stored in the cover information storage unit 28. When the cover information indicates that the cover has been opened, the determination unit 25 notifies the administrator terminal that the cover has been opened.

[0040] The reading unit 21, the connection unit 22, and the acquisition unit 23 operate when the operation conditions are satisfied. The operation conditions are that the following conditions (1) and (2) are satisfied. (1) The determination unit 25 has determined that the connection device 20 is authentic. (2) The judgment unit 25 judges that the cover has not been opened.

[0041] It is noted that the judgment unit 25 does not have to perform either one or both of the judgment of the validity of the connection device 20 (validity judgment) and the judgment of the opening and closing of the cover (cover judgment). When the validity judgment is not performed, the operating condition is to satisfy (2). When the cover judgment is not performed, the operating condition is to satisfy (1). When neither the validity judgment nor the cover judgment is performed, the operating condition is always satisfied.

[0042] Furthermore, the connection device 20 may further include a function for measuring the position of the connection device 20, and may detect that the connection device 20 has moved from its original installation location. In this case, the condition (2) above may be that the determination unit 25 has determined that the cover has not been opened, and that the connection device 20 has not moved. The connection device 20 may measure its position using, for example, a Global Navigation Satellite System (GNSS) or a beacon.

[0043] When the operating conditions are satisfied, the acquisition unit 23 acquires a whitelist from the management server 60 and stores the acquired whitelist in the storage unit 24. More specifically, the acquisition unit 23 first transmits the certificate stored in the storage unit 24 to the management server 60. When the management server 60 confirms that the connection device 20 is genuine based on the certificate, the acquisition unit 23 receives the whitelist from the management server 60. Note that the management server 60 determines that the connection device 20 is genuine when the connection device information registered in the management server 60 matches the connection device information included in the certificate received from the connection device 20.

[0044] When a target device 40, which is a device to be connected, is connected to the connection device 20, the reading unit 21 reads device information from the target device 40. In addition, the reading unit 21 stores the device information read from the target device 40 in the storage unit 24. The reading unit 21 operates when an operating condition is satisfied.

[0045] The connection unit 22 connects the target device 40 to the host device 50 when the device information read from the target device 40 exists in the whitelist stored in the storage unit 24. When the device information read from the target device 40 does not exist in the whitelist stored in the storage unit 24, the connection unit 22 does not connect the target device 40 to the host device 50 and notifies the administrator terminal. Note that the reading unit 21 operates when the operating conditions are satisfied.

[0046] More specifically, when the connection unit 22 receives a management packet from the host device 50, it transmits the group ID stored in the storage unit 24 to the host device 50. Then, when a connection permission is received from the host device 50, it connects the target device 40 and the host device 50.

[0047] Next, FIG. 5 shows an example of an operation flow of the connection device 20 of this embodiment.

[0048] First, when power is supplied to the connection device 20, the determination unit 25 checks the validity of the connection device 20 (step S201).

[0049] More specifically, the determination unit 25 reads out the connection device information stored in the storage unit 24. The determination unit 25 also reads out the certificate stored in the storage unit 24 and extracts the connection device information from the read certificate. If the connection device information stored in the storage unit 24 matches the connection device information extracted from the certificate, the determination unit 25 determines that the connection device 20 is legitimate. If there is no match (NO in step S201), the determination unit 25 notifies the administrator terminal that there is no match, since there is a possibility that some kind of unauthorized tampering has been performed on the connection device 20 (step S202).

[0050] When it is determined that the connection device 20 is valid (YES in step S201), the determination unit 25 checks whether or not the cover has been opened based on the cover information stored in the cover information storage unit 28. When the cover information indicates that the cover has been opened (YES in step S203), the determination unit 25 notifies the administrator terminal that the cover has been opened (step S202).

[0051] The reading unit 21, the connection unit 22, and the acquisition unit 23 operate when the operation conditions are satisfied. The operation conditions are that the following conditions (1) and (2) are satisfied. (1) The determination unit 25 determines that the connection device 20 is authentic (YES in step S201). (2) The determination unit 25 determines that the cover is not opened (NO in step S203).

[0052] When the operating conditions are satisfied, the acquisition unit 23 acquires the whitelist from the management server 60 and stores the acquired whitelist in the storage unit 24 (step S204). More specifically, the acquisition unit 23 transmits the certificate stored in the storage unit 24 to the management server 60. When the management server 60 receives the certificate and determines that the connection device 20 is legitimate, the acquisition unit 23 receives the whitelist from the management server 60. Note that the management server 60 determines that the connection device 20 is legitimate when the connection device information registered in the management server 60 matches the connection device information included in the certificate received from the connection device 20.

[0053] When a target device 40, which is a device to be connected, is connected to the connection device 20, the reading unit 21 reads device information from the target device 40. Furthermore, the reading unit 21 stores the device information read from the target device 40 in the storage unit 24 (step S205). The reading unit 21 operates when an operating condition is satisfied.

[0054] If the device information read from the target device 40 is present in the whitelist stored in the memory unit 24 (YES in step S206), the connection unit 22 connects the target device 40 to the host device 50 (step S207). If the device information read from the target device 40 is not present in the whitelist stored in the memory unit 24 (NO in step S206), the connection unit 22 does not connect the target device 40 to the host device 50, and notifies the administrator terminal (step S202). Note that the reading unit 21 operates when the operating conditions are satisfied.

[0055] Next, FIG. 6 shows an example of a more specific operation flow of the connection device 20 with respect to the connection between the target device 40 and the host device 50 (step S207).

[0056] The connection unit 22 waits to receive a management packet from the host device 50. The host device 50 transmits a management packet to the connection device 20 at a predetermined timing, such as when power is supplied. When the connection unit 22 receives the management packet (step S208), it transmits the group ID stored in the storage unit 24 to the host device 50 (step S209). When the host device 50 confirms that the group ID stored in the host device 50 matches the group ID transmitted from the connection device 20 and receives a connection permission from the host device 50 (step S210), the connection unit 22 connects the target device 40 and the host device 50 (step S211). Then, when the operating system of the host device 50 is started, the system including the host device 50 and the target device 40 becomes operable.

[0057] As described above, in the second embodiment of the present invention, the connection device 20 includes the reading unit 21 and the connection unit 22. The reading unit 21 reads device information from the target device 40. The connection unit 22 connects the target device 40 to the host device 50 when the device information read from the target device 40 exists in a whitelist, which is a list of device information of devices that can be connected to the host device 50. As a result, the connection device 20, not the host device 50, determines whether the target device 40 can be connected to the host device 50. As a result, even if the software of the host device 50 is tampered with, the determination logic of whether or not the connection can be made is not tampered with, so that it is possible to reduce the connection of a device that should not be connected to the host device 50. Therefore, it is possible to reduce the connection of a device that should not be connected to the host device 50 and the tampering or leakage of data held by the host device 50.

[0058] Furthermore, the connection device 20 of this embodiment acquires the whitelist from the management server 60. This reduces the possibility that the connection device 20 will be tampered with and the whitelist will be tampered with. Furthermore, compared to a case where a whitelist is stored in each of a plurality of connection devices, updating the whitelist is easier.

[0059] Furthermore, connection device 20 of this embodiment transmits a certificate, which is information indicating that connection device 20 is genuine, to management server 60. Furthermore, when management server 60 confirms that connection device 20 is genuine based on the certificate, the whitelist is transmitted from management server 60 to connection device 20. This reduces the possibility that the whitelist will be transmitted to an unauthorized connection device and leaked.

[0060] Moreover, the connection device 20 of this embodiment further includes a storage unit 24 that stores connection device information, which is information related to the connection device 20. A certificate, which is information indicating that the connection device 20 is genuine, includes connection device information, which is information related to the connection device 20. When the connection device information included in the certificate matches the connection device information stored in the storage unit 24, the acquisition unit 23 connects the target device 40 to the host device 50. This makes it possible to reduce the possibility that an unauthorized connection device will connect to the host device 50 or that a device that should not be connected will connect to the host device 50.

[0061] The connection device 20 of this embodiment further includes a detection unit 26 that stores cover information, which is information regarding the opening and closing of the cover, in the cover information storage unit 28 based on a signal from a cover sensor 27 that detects the opening and closing of the cover of the housing. The housing 70 includes the connection device 20. The target device 40 is installed inside the housing 70. When the cover information stored in the cover information storage unit 28 indicates that the cover has not been opened, the connection unit 22 connects the target device 40 to the host device 50. When the cover information indicates that the cover has been opened, the connection unit 22 does not connect the target device 40 to the host device 50. This can reduce the possibility that a tampered connection device 20 or target device 40 is connected to the host device 50.

[0062] Furthermore, in the present embodiment, when the cover information indicates that the cover has been opened, the determination unit 25 notifies the administrator terminal that the cover has been opened. This allows the administrator to know that the cover may have been opened outside of a planned maintenance period, and an unauthorized target device 40 may have been attached to the connection device 20 or the connection device 20 may have been tampered with.

[0063] [Hardware configuration example] An example of the configuration of hardware resources for implementing the connection device (10, 20) in each of the above-mentioned embodiments of the present invention using one information processing device (computer) will be described. The connection device may be physically or functionally implemented using at least two information processing devices. The connection device may also be implemented as a dedicated device. Only some of the functions of the connection device may also be implemented using an information processing device.

[0064] 7 is a diagram illustrating an example of a hardware configuration of an information processing device capable of implementing the connection device of each embodiment of the present invention. The information processing device 90 includes a communication interface 91, an input / output interface 92, a computing device 93, a storage device 94, a non-volatile storage device 95, and a drive device 96.

[0065] For example, the readout unit 1 in FIG. 1 is The arithmetic unit 93 and the connection unit 12 can be realized by the arithmetic unit 93 and the communication interface 91.

[0066] The communication interface 91 is a communication means for the connection device of each embodiment to communicate with an external device by wire and / or wirelessly. When the connection device is realized using at least two information processing devices, the devices may be connected so as to be able to communicate with each other via the communication interface 91.

[0067] The input / output interface 92 is a man-machine interface including a keyboard as an example of an input device and a display as an output device.

[0068] The arithmetic device 93 is realized by an arithmetic processing device such as a general-purpose CPU (Central Processing Unit) or a microprocessor, and a plurality of electric circuits. The arithmetic device 93 can, for example, read various programs stored in a non-volatile storage device 95 into the storage device 94 and execute processing according to the read programs.

[0069] The storage device 94 is a memory device such as a RAM (Random Access Memory) that can be referenced by the arithmetic device 93, and stores programs, various data, etc. The storage device 94 may be a volatile memory device.

[0070] The non-volatile storage device 95 is, for example, a non-volatile storage device such as a ROM (Read Only Memory) or a flash memory, and is capable of storing various programs, data, and the like.

[0071] The drive device 96 is, for example, a device that processes reading and writing of data from and to a recording medium 97, which will be described later.

[0072] The recording medium 97 is any recording medium capable of recording data, such as an optical disk, a magneto-optical disk, or a semiconductor flash memory.

[0073] Each embodiment of the present invention may be realized, for example, by configuring a connection device using an information processing device 90 as illustrated in FIG. 7 and supplying a program capable of realizing the functions described in each of the above embodiments to this connection device.

[0074] In this case, the embodiment can be realized by having the computing device 93 execute the program supplied to the connection device. Also, it is possible to configure some, but not all, of the functions of the connection device in the information processing device 90.

[0075] Furthermore, the program may be recorded in a recording medium 97, and may be appropriately stored in the non-volatile storage device 95 at the shipping stage or operation stage of the connection device. In this case, the program may be supplied by installing the program in the connection device using a suitable tool at the manufacturing stage before shipping or at the operation stage. The program may be supplied by a general procedure such as downloading the program from an external source via a communication line such as the Internet.

[0076] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.

[0077] (Appendix 1) A connection device that connects a host device and a target device that is a device that is a target for connection to the host device, A read means for reading device information, which is information capable of identifying a device, from the target device; a connection means for connecting the target device and the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device; A connection device comprising:

[0078] (Appendix 2) An acquisition means for acquiring the whitelist from a management server having the whitelist. 2. The connection device of claim 1, further comprising:

[0079] (Appendix 3) The acquiring means transmits a certificate, which is information indicating that the connection device is a genuine product, to the management server; the whitelist is transmitted from the management server to the connection device when the management server confirms that the connection device is genuine based on the certificate; 3. A connection device as described in claim 2.

[0080] (Appendix 4) A storage means for storing connected device information that is information capable of identifying the connected device. Further equipped with a certificate indicating that the connection device is genuine includes the connection device information; The connection means performs a connection between the target device and the host device when the connection device information included in the certificate matches the connection device information stored in the storage means. 4. A connection device according to any one of claims 1 to 3.

[0081] (Appendix 5) a detection means for storing, in a cover information storage means, cover information relating to the opening and closing of a cover of a housing that accommodates the connection device, based on a signal from a cover sensor that detects the opening and closing of the cover; Further equipped with The target device is installed inside the housing, The connection means performs a connection between the target device and the host device when the cover information stored in the cover information storage means indicates that the cover is not opened. 5. A connection device according to any one of claims 1 to 4.

[0082] (Appendix 6) A connection device that connects a host device and a target device that is a target device for connection to the host device, Reading device information, which is information capable of identifying a device, from the target device; connecting the target device to the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device; How to connect:

[0083] (Appendix 7) Obtaining the whitelist from a management server having the whitelist; The connection method described in Appendix 6.

[0084] (Appendix 8) Transmitting a certificate to the management server, the certificate being information indicating that the connection device is a genuine product; the whitelist is transmitted from the management server to the connection device when the management server confirms that the connection device is genuine based on the certificate; The connection method described in Appendix 7.

[0085] (Appendix 9) The connection device stores connection device information that is information that can identify the connection device, a certificate that is information indicating that the connection device is a genuine product includes the connection device information, If the connection device information included in the certificate matches the connection device information stored in the connection device, a connection is established between the target device and the host device. A connection method according to any one of Supplementary Note 6 to Supplementary Note 8.

[0086] (Appendix 10) storing, in a cover information storage unit, cover information relating to opening and closing of a cover of a housing that accommodates the connection device, based on a signal from a cover sensor that detects opening and closing of the cover; The target device is installed inside the housing, When the cover information stored in the cover information storage unit indicates that the cover is not opened, a connection is established between the target device and the host device. A connection method according to any one of Supplementary Note 6 to Supplementary Note 9.

[0087] (Appendix 11) A connection program for a connection device that connects a host device and a target device that is a target device for connection to the host device, On the computer, A read function for reading device information, which is information capable of identifying a device, from the target device; a connection function for connecting the target device and the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device; A computer-readable recording medium having a connection program for realizing the above.

[0088] (Appendix 12) An acquisition function for acquiring the whitelist from a management server having the whitelist. A computer-readable recording medium having recorded thereon the connection program according to claim 11, further causing a computer to realize the above.

[0089] (Appendix 13) The acquisition function transmits a certificate, which is information indicating that the connection device is a genuine product, to the management server; the whitelist is transmitted from the management server to the connection device when the management server confirms that the connection device is genuine based on the certificate; A computer-readable recording medium having recorded thereon the connection program according to claim 12.

[0090] (Appendix 14) the connection device includes a storage unit configured to store connection device information that is information that can identify the connection device, a certificate indicating that the connection device is genuine includes the connection device information; The connection function performs a connection between the target device and the host device when the connected device information included in the certificate matches the connected device information stored in the storage unit. A computer-readable recording medium having recorded thereon a connection program according to any one of Supplementary Note 11 to Supplementary Note 13.

[0091] (Appendix 15) A detection function for storing, in a cover information storage unit, cover information relating to the opening and closing of a cover of a housing that accommodates the connection device, based on a signal from a cover sensor that detects the opening and closing of the cover. Then we further implemented this on a computer. The target device is installed inside the housing, The connection function performs a connection between the target device and the host device when the cover information stored in the cover information storage unit indicates that the cover is not opened. A computer-readable recording medium having recorded thereon a connection program according to any one of Supplementary Note 11 to Supplementary Note 14.

[0092] Although the present invention has been described above with reference to the embodiment, the present invention is not limited to the above embodiment. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

[0093] This application claims priority based on Japanese Patent Application No. 2021-193710, filed on November 30, 2021, the disclosure of which is incorporated herein in its entirety. [Explanation of symbols]

[0094] 10, 20 Connection device 11, 21 Reading part 12, 22 Connection 23 Acquisition Department 24 Memory section 25 Judgment section 26 Detection unit 27 Cover Sensor 28 Cover information storage unit 40 Target Devices 50 Host device 60 Management Server 80 Communication Lines 90 Information processing equipment 91 Communication Interface 92 Input / Output Interface 93 Arithmetic unit 94 Storage device 95 Non-volatile storage devices 96 Drive device 97 Recording media

Claims

1. A connection device that connects a host device and a target device that is a device that is a target for connection to the host device, A read means for reading device information, which is information capable of identifying a device, from the target device; a connection means for connecting the target device and the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device; a detection means for storing, in a cover information storage means, cover information relating to the opening and closing of a cover of a housing that accommodates the connection device, based on a signal from a cover sensor that detects the opening and closing of the cover; Equipped with The target device is installed inside the housing, the connection means, when the cover information stored in the cover information storage means indicates that the cover is not opened, connects the target device to the host apparatus; Connection device.

2. An acquisition means for acquiring the whitelist from a management server having the whitelist. The connection device of claim 1 further comprising:

3. The acquiring means transmits a certificate, which is information indicating that the connection device is a genuine product, to the management server; the whitelist is transmitted from the management server to the connection device when the management server confirms that the connection device is genuine based on the certificate; The connection device according to claim 2 .

4. A storage means for storing connected device information that is information capable of identifying the connected device. Further equipped with a certificate that is information indicating that the connection device is a genuine product includes the connection device information, The connection means performs a connection between the target device and the host device when the connection device information included in the certificate matches the connection device information stored in the storage means. A connection device according to any one of claims 1 to 3.

5. A connection device that connects a host device and a target device that is a target device for connection to the host device, storing, in a cover information storage unit, cover information relating to opening and closing of a cover of a housing that accommodates the connection device, based on a signal from a cover sensor that detects opening and closing of the cover; When the cover information stored in the cover information storage unit indicates that the cover is not opened, device information that can identify the device is read from the target device; When the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device, connecting the target device installed inside the housing to the host device. How to connect:

6. Obtaining the whitelist from a management server having the whitelist; The connection method according to claim 5.

7. Transmitting a certificate to the management server, the certificate being information indicating that the connection device is a genuine product; the whitelist is transmitted from the management server to the connection device when the management server confirms that the connection device is genuine based on the certificate; The connection method according to claim 6.

8. The connection device stores connection device information that is information that can identify the connection device, a certificate that is information indicating that the connection device is a genuine product includes the connection device information, If the connection device information included in the certificate matches the connection device information stored in the connection device, a connection is established between the target device and the host device. The connection method according to any one of claims 5 to 7.

9. A connection program for a connection device that connects a host device and a target device that is a target device for connection to the host device, On the computer, A read function for reading device information, which is information capable of identifying a device, from the target device; A connection function for connecting the target device and the host device when the device information read from the target device exists in a whitelist, which is a list of device information of devices that can be connected to the host device; a detection function of storing, in a cover information storage unit, cover information relating to the opening and closing of a cover of a housing that accommodates the connection device, based on a signal from a cover sensor that detects the opening and closing of the cover; Realize this, The target device is installed inside the housing, The connection function performs a connection between the target device and the host device when the cover information stored in the cover information storage unit indicates that the cover is not opened. Connection program.

Images