Information processing device, search method, and search program

Abstract

An information processing device (10) identifies, from image data of an electronic substrate, identification information related to the feature of an electronic component included in the electronic substrate. Then, the information processing device (10) acquires, using the identified identification information, configuration information from a component information DB (13b) that stores preset identification information and configuration information related to the electronic component, and saves the acquired configuration information in a configuration information DB (13c) in association with the device ID and the component ID. Next, in response to receiving configuration information, the information processing device (10) searches the configuration information DB (13c) for the device ID or the component ID corresponding to the configuration information.

Description

[Technical Field]

[0001] The present invention relates to an information processing device, a search method, and a search program. [Background technology]

[0002] In recent years, cyber attacks targeting weaknesses in supply chains have become more prevalent and sophisticated. Risk management is becoming even more important when companies use IoT (Internet of Things) devices. For this reason, when vulnerabilities or malware infections are discovered, it is necessary to quickly check whether the devices being used contain the software or hardware that is causing the vulnerability and take appropriate action.

[0003] Furthermore, as a method for carrying out the risk management described above, there is known a technology called OEM Finder, which finds similar OEM products from a BOM (Bill of Materials), which is a list of components used when a product is made and is output by CAD (Computer Aided Design) software, or from images of IoT devices, and notifies the OEM (Original Equipment Manufacturer) that their products also have vulnerabilities if the original OEM's (OEM) product has a vulnerability (see, for example, Non-Patent Document 1). [Prior art documents] [Non-patent literature]

[0004] [Non-Patent Document 1] “Hunting Vulnerable OEM IoT Devices at Scale,” Asuka Nakajima, [online], [Retrieved May 16, 2022], Internet <https: / / i.blackhat.com / eu-19 / Thursday / eu-19-Nakajima-OEM-Finder-Hunting-Vulnerable-OEM-IoT-Devices-At-Scale-2.pdf> Summary of the Invention [Problem to be solved by the invention]

[0005] However, conventional technologies have had the problem of being unable to quickly address problems discovered with electronic components. For example, BOM technology requires information to be provided by manufacturers, but manufacturers are reluctant to provide information due to concerns about leaking their know-how, making it difficult to quickly address problems discovered with electronic components. Furthermore, OEM Finder technology, for example, can only grasp the configuration of a product at the external appearance level, so it cannot grasp information about components at the chip level, making it difficult to quickly address problems discovered with electronic components.

[0006] The present invention has been made in view of the above, and aims to provide an information processing device, a search method, and a search program that can quickly deal with a problem that is discovered in an electronic component. [Means for solving the problem]

[0007] In order to solve the above-mentioned problems and achieve the object, the information processing device of the present invention is characterized by having an identification unit that identifies first information regarding the characteristics of electronic components included in an electronic board from image data of the electronic board; a storage unit that uses the first information identified by the identification unit to acquire second information from a first memory unit that stores predetermined first information regarding the characteristics of electronic components and second information regarding electronic components, and stores the acquired second information in a second memory unit in association with identification information that identifies the electronic board or electronic component; and a search unit that, when the second information is received, searches the second memory unit for the identification information corresponding to the second information. [Effects of the Invention]

[0008] According to the present invention, when a problem is discovered in an electronic component, it is possible to deal with it quickly. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a block diagram illustrating an example of a configuration of a system according to an embodiment. [Figure 2] FIG. 2 is a block diagram illustrating the configuration of the information processing apparatus of this embodiment. [Figure 3] FIG. 3 is a diagram illustrating an example of information stored in the feature information DB. [Figure 4] FIG. 4 is a diagram illustrating an example of information stored in the part information DB. [Figure 5] FIG. 5 is a diagram illustrating an example of information stored in the configuration information DB. [Figure 6] FIG. 6 is a diagram illustrating the processing of the recognition unit. [Figure 7] FIG. 7 is a diagram illustrating the processing of the storage unit. [Figure 8] FIG. 8 is a flowchart illustrating an example of a registration process performed by the information processing apparatus according to the embodiment. [Figure 9] FIG. 9 is a flowchart illustrating an example of a processing procedure at the time of a search performed by the information processing apparatus according to the embodiment. [Figure 10] FIG. 10 is a block diagram illustrating the configuration of an information processing device according to a modified example. [Figure 11] FIG. 11 is a diagram illustrating an example of information stored in a configuration information DB according to a modification. [Figure 12] FIG. 12 is a diagram illustrating a computer that executes a program. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments of an information processing device, a search method, and a search program according to the present application will be described in detail with reference to the accompanying drawings. However, the present invention is not limited to the embodiments described below.

[0011] [System Configuration] The configuration of a system including an information processing device according to an embodiment will be described. FIG. 1 is a block diagram showing an example of the configuration of a system according to an embodiment. As shown in FIG. 1, the system has an information processing device 10 and an image capturing device 20. The information processing device 10 and the image capturing device 20 are connected to each other via a network 30. Note that, in the network configuration shown in FIG. 1, each device may communicate via any communication network, whether wired or wireless, such as the Internet, a LAN, or a VPN (Virtual Private Network). Furthermore, the configuration shown in FIG. 1 is merely an example, and the specific configuration and the number of devices are not particularly limited.

[0012] For example, the information processing device 10 acquires image data of an electronic board (a board on which electronic components are arranged) included in an IoT device and identifies the color, shape, etc. of the electronic components. The information processing device 10 then detects the constituent electronic components by comparing it with a component information DB 13b that stores catalog information, etc., of the electronic components, and builds a configuration information DB 13c. Then, for example, if the information processing device 10 discovers that an electronic component has a vulnerability or is infected with malware, the information processing device 10 responds to a user's search request with a result indicating whether the target electronic component is present on the electronic board operated by the user, thereby enabling the usage status of the electronic component to be quickly searched.

[0013] The photographing device 20 acquires image data and spatial data of the electronic board and transmits them to the information processing device 10. For example, the photographing device 20 captures image data of the electronic board using a camera and measures the spatial data using a laser. The photographing device 20 may acquire only image data. The photographing device 20 may be installed in a factory, for example, and automatically capture images of the electronic board, or may be manually captured images of the electronic board at any location.

[0014] [Configuration of information processing device] 2 is a block diagram illustrating the configuration of an information processing device according to this embodiment. As illustrated in FIG. 2, the information processing device 10 according to this embodiment includes a communication processing unit 11, a control unit 12, and a storage unit 13.

[0015] The communication processing unit 11 is realized by a NIC (Network Interface Card) or the like, and controls communication via a telecommunication line such as a LAN (Local Area Network) or the Internet.

[0016] The storage unit 13 stores data and programs necessary for various processes by the control unit 12, and has a feature information DB 13a, a parts information DB 13b, and a configuration information DB 13c. For example, the storage unit 13 is a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk.

[0017] The characteristic information DB 13a stores information about the characteristics of electronic components included in electronic boards. For example, as illustrated in Fig. 3, the characteristic information DB 13a stores identification information, which is the characteristics (color, shape, logo, printed character string, etc.) of electronic components identified from image data and spatial data, and the registration date and time, in association with a "device ID" that uniquely identifies an electronic board and a "component ID" that uniquely identifies an electronic component. Note that "SIP" in Fig. 3 is an abbreviation for Single in-line Package, and "QFP" is an abbreviation for Quad Flat Package.

[0018] The component information DB 13b stores predetermined identification information (first information) and configuration information (second information) related to electronic components. For example, as illustrated in Fig. 4, the component information DB 13b stores the "identification information" of an electronic component manually set from a web page or catalog and the "configuration information" that is detailed information about the electronic component, in association with an "ID" that uniquely identifies the electronic component. Here, the configuration information includes the manufacturer of the electronic component, the function of the electronic component, the start and end of production of the electronic component, the model number of the electronic component, etc.

[0019] The configuration information DB 13c stores the configuration information in association with the device ID and the component ID. For example, as illustrated in Fig. 5, the configuration information DB 13c stores the "registration date and time" and the "configuration information" which is detailed information about the electronic component in association with the "device ID" and the "component ID." Note that the configuration information DB 13c is not limited to storing the "registration date and time" and the "configuration information" in association with the "device ID" and the "component ID," and may store the "registration date and time" and the "configuration information" in association with either the "device ID" or the "component ID."

[0020] The control unit 12 has an internal memory for storing programs that define various processing procedures and required data, and executes various processes using these. For example, the control unit 12 has an identification unit 12a, a storage unit 12b, and a search unit 12c. Here, the control unit 12 is an electronic circuit such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), or an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0021] The identification unit 12a identifies, from the image data of the electronic board, identification information relating to the characteristics of the electronic components included in the electronic board. For example, the identification unit 12a identifies, as the identification information, one or more of the color of the electronic component, the shape of the electronic component, the number of terminals of the electronic component, a logo mark written on the electronic component, and text written on the electronic component.

[0022] As illustrated in FIG. 6, for example, the identification unit 12a acquires image data of an electronic board from the photographing device 20, identifies the area of an electronic component included in the electronic board from the image data, and identifies identification information from the identified area. Note that the identification unit 12a may utilize image processing techniques such as edge detection to identify the area of the electronic component. The identification unit 12a may also acquire spatial data in addition to image data. The identification unit 12a then stores the identified identification information in the feature information DB 13a in association with a device ID and a component ID.

[0023] The storage unit 12b uses the identification information identified by the identification unit 12a to acquire configuration information from a component information DB 13b that stores identification information related to the characteristics of predetermined electronic components and configuration information related to the electronic components, and stores the acquired configuration information in a configuration information DB 13c in association with an equipment ID and a component ID.

[0024] For example, the storage unit 12b acquires, as configuration information, one or more of the manufacturer of the electronic component, the model number of the electronic component, the function of the electronic component, the start date and end date of production of the electronic component from the component information DB 13b, and stores the acquired configuration information in the configuration information DB 13c in association with the device ID and the component ID.

[0025] 7, for example, the storage unit 12b compares the data in the part information DB 13b with the data in the feature information DB 13a to create data in the configuration information DB 13c. For example, the storage unit 12b calculates the similarity between the identification information identified by the identification unit 12a and the identification information stored in the part information DB 13b, and if the similarity is equal to or greater than a predetermined threshold, acquires the configuration information corresponding to the identification information stored in the part information DB 13b and stores the acquired configuration information in the configuration information DB 13c in association with the device ID and the part ID.

[0026] When the search unit 12c receives configuration information, it searches the configuration information DB 13c for a device ID or component ID corresponding to the configuration information. For example, when a user discovers a vulnerability in an IoT device having an electronic board or discovers that malware has been introduced, the user inputs configuration information such as the manufacturer and model number of the electronic component in question. The search unit 12c receives the input of configuration information and outputs whether the electronic board (IoT device) uses the component.

[0027] For example, using the example of Figure 5, if it is discovered that a malicious circuit has been mixed into a CPU manufactured from 2020 for product B, the search unit 12c will specify conditions and search the configuration information DB 13c, and since "chip 2" is found, it will output that the electronic board (IoT device) with device ID "device 1" uses the corresponding component "chip 2."

[0028] [Processing Procedure of Information Processing Device 10] Next, an example of the processing procedure of the processing executed by the information processing device 10 will be described with reference to Fig. 8 and Fig. 9. Fig. 8 is a flowchart showing an example of the processing procedure at the time of registration by the information processing device of the embodiment. Fig. 9 is a flowchart showing an example of the processing procedure at the time of search by the information processing device of the embodiment.

[0029] As illustrated in FIG. 8, when the identification unit 12a of the information processing device 10 acquires image data of the electronic board (Yes at step S101), it identifies identification information of the electronic components included in the electronic board from the image data of the electronic board (step S102).

[0030] Then, the storage unit 12b uses the identified identification information to acquire configuration information from the component information DB 13b (step S103), and stores the acquired configuration information in the configuration information DB 13c in association with the device ID and the component ID (step S104).

[0031] 9, when the search unit 12c of the information processing device 10 receives a designation of a model number, a manufacturer, or the like (Yes at step S201), the search unit 12c searches the configuration information DB 13c for a device ID and a component ID corresponding to the designated information (step S202). Then, the search unit 12c outputs the searched device ID and component ID as the search result (step S203). For example, the search unit 12c searches the configuration information DB 13c by designating a condition, and since "chip 2" is found, the search unit 12c outputs that the electronic board (IoT device) with device ID "device 1" uses the corresponding component "chip 2."

[0032] [Effects of the embodiment] In this way, the information processing device 10 according to the embodiment identifies identification information related to the characteristics of electronic components included in the electronic board from image data of the electronic board. Then, the information processing device 10 uses the identified identification information to acquire configuration information from a component information DB 13b, which stores preset identification information and configuration information related to the electronic components, and stores the acquired configuration information in the configuration information DB 13c in association with a device ID and a component ID. Next, when the information processing device 10 receives the configuration information, it searches the configuration information DB 13c for a device ID or component ID corresponding to the configuration information. This allows the information processing device 10 to quickly address any problems discovered with the electronic components.

[0033] For example, the information processing device 10 identifies the color and shape of electronic components included in an electronic board (a board on which electronic components are arranged) included in an IoT device, and detects the constituent electronic components by comparing them with a component information DB 13b that stores catalog information of the electronic components. If the information processing device 10 discovers that an electronic component has a vulnerability or is infected with malware, it can quickly search the electronic board included in the IoT device to determine whether that electronic component is used.

[0034] As a result, with the information processing device 10, users can grasp the IoT devices they use at the electronic component level, and when vulnerabilities in electronic components or malware contamination are discovered, they can take action more quickly, thereby improving the security level of users.

[0035] [Variations] As a variant, the information processing device may store the combinations and number of electronic components used in electronic devices, share them among users, and perform anomaly detection to estimate counterfeit or inferior electronic components, in order to eliminate counterfeit or inferior electronic components.

[0036] As a modified example, the information processing device 10A may further include an estimation unit 12d as illustrated in Fig. 10. When electronic components of the same type are used on different electronic boards, if the proportion of unknown information about manufacturing included in each piece of configuration information for the electronic components of the same type stored in the configuration information DB 13c is equal to or greater than a predetermined number relative to the total, the estimation unit 12d estimates that the electronic components are inferior products.

[0037] For example, the configuration information DB 13c according to the modified example may manage data for each user, as illustrated in Fig. 11. In the example of Fig. 11, the configuration information DB 13c stores data tables in which "device ID," "component ID," "registration date and time," and "configuration information" are associated with each other for users A, B, and C, respectively.

[0038] The processing of the estimation unit 12d will be described using the example of FIG. 11. For example, as illustrated in FIG. 11, assume that users A, B, and C are using the same type of electronic devices 1, 2, and 3. However, when examining the configuration information of the electronic devices, it is found that the serial number, etc., identified from the image of chip 1 for user C alone is not a valid number or is a random number, and therefore the manufacturing start date is unknown. The estimation unit 12d detects the possibility that the electronic device is an inferior product or a counterfeit by calculating the percentage of the same electronic device whose configuration information is unknown. Note that, for example, the estimation unit 12d can check whether the number is random by searching the serial number via a website to find information on whether the product is genuine.

[0039] For example, in the above example, the estimation unit 12d determines that although the manufacturer of each chip in the configuration information DB13c is the same across users, the proportion of the start date of production of "chip 1" is {2021 / 1 / 1: 2 / 3, unknown: 1 / 3}, and since the proportion that is unknown is equal to or greater than the threshold value T=1 / 3, it is possible to detect that there is an abnormality in the start date of production of chip 1 of device 3, and that it is a counterfeit or inferior product.

[0040] [System configuration, etc.] The components of each device shown in the drawings according to the above embodiments are conceptual functional units and do not necessarily have to be physically configured as shown. In other words, the specific form of distribution and integration of each device is not limited to that shown, and all or part of each device can be functionally or physically distributed and integrated in any unit depending on various loads, usage conditions, etc. Furthermore, all or any part of the processing functions performed by each device can be realized by a CPU and a program analyzed and executed by the CPU, or can be realized as hardware using wired logic.

[0041] Furthermore, among the processes described in the above embodiments, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically using a known method.In addition, the information including the processing procedures, control procedures, specific names, various data and parameters shown in the above documents and drawings can be changed as desired unless otherwise specified.

[0042] 〔program〕 It is also possible to create a program written in a computer-executable language that executes the processes executed by the information processing device described in the above embodiments. In this case, the same effects as those of the above embodiments can be achieved by having a computer execute the program. Furthermore, such a program may be recorded on a computer-readable recording medium, and the program recorded on the recording medium may be read and executed by a computer to achieve the same processes as those of the above embodiments.

[0043] 12 is a diagram showing a computer that executes a program. As shown in the example of FIG. 12, a computer 1000 includes, for example, a memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070, and these components are connected by a bus 1080.

[0044] As shown in FIG. 12, the memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012. The ROM 1011 stores, for example, a boot program such as a BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to a hard disk drive 1031 as shown in FIG. 12. The disk drive interface 1040 is connected to a disk drive 1041 as shown in FIG. 12. A removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1041. The serial port interface 1050 is connected to, for example, a mouse 1051 and a keyboard 1052 as shown in FIG. 12. The video adapter 1060 is connected to, for example, a display 1061 as shown in FIG. 12.

[0045] 12, the hard disk drive 1031 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, the above programs are stored, for example, on the hard disk drive 1031 as program modules in which instructions to be executed by the computer 1000 are written.

[0046] The various data described in the above embodiment are stored as program data, for example, in the memory 1010 or the hard disk drive 1031. The CPU 1020 then reads the program module 1093 and the program data 1094 stored in the memory 1010 or the hard disk drive 1031 into the RAM 1012 as needed, and executes various processing procedures.

[0047] Note that the program module 1093 and program data 1094 related to the program are not limited to being stored in the hard disk drive 1031, and may be stored in, for example, a removable storage medium and read by the CPU 1020 via a disk drive or the like. Alternatively, the program module 1093 and program data 1094 related to the program may be stored in another computer connected via a network (such as a LAN (Local Area Network) or WAN (Wide Area Network)) and read by the CPU 1020 via the network interface 1070.

[0048] Although the present invention has been described above as an embodiment, the present invention is not limited to the description and drawings that form part of the disclosure of the present invention. In other words, other embodiments, examples, and operational techniques that can be made by those skilled in the art based on the present invention are all included in the scope of the present invention. [Explanation of symbols]

[0049] 10, 10A Information processing equipment 11. Communication processing unit 12 Control Unit 12a Identification part 12b Storage area 12c Search section 12d Estimation part 13 Storage section 13a Feature Information DB 13b Parts information DB 13c Configuration information DB

Claims

1. an identification unit that identifies first information related to characteristics of electronic components included in an electronic board from image data of the electronic board; a storage unit that uses the first information identified by the identification unit to acquire second information from a first storage unit that stores first information on predetermined characteristics of electronic components and second information on electronic components, and stores the acquired second information in the second storage unit in association with identification information that identifies the electronic board or the electronic component; a search unit that, when receiving the second information, searches the second storage unit for the identification information corresponding to the second information; An information processing device comprising:

2. The information processing device according to claim 1, characterized in that the identification unit identifies, as the first information, one or more of the color of the electronic component, the shape of the electronic component, the number of terminals of the electronic component, a logo mark written on the electronic component, and text written on the electronic component.

3. 2. The information processing device according to claim 1, wherein the identification unit acquires image data of the electronic board, identifies an area of an electronic component included in the electronic board from the image data, and identifies the first information from the identified area.

4. The information processing device according to claim 1, characterized in that the storage unit acquires, as the second information, one or more of the manufacturer of the electronic component, the model number of the electronic component, the function of the electronic component, the start date and end date of production of the electronic component from the first memory unit, and stores the acquired second information in the second memory unit in association with the identification information.

5. The information processing device described in claim 1, characterized in that the storage unit calculates the similarity between the first information identified by the identification unit and the first information stored in the first memory unit, and if the similarity is greater than or equal to a predetermined threshold, acquires second information corresponding to the first information stored in the first memory unit, and stores the acquired second information in the second memory unit in correspondence with the identification information.

6. The information processing device according to claim 1, further comprising an estimation unit that, when electronic components of the same type are used on different electronic boards, estimates that the electronic components are inferior products if the proportion of manufacturing information contained in each second information of the electronic components of the same type stored in the second storage unit that is unknown is equal to or greater than a predetermined number of the total.

7. A search method executed by an information processing device, comprising: an identification step of identifying first information relating to characteristics of electronic components included in the electronic board from image data of the electronic board; a storage step of acquiring second information from a first storage unit that stores first information related to predetermined characteristics of electronic components and second information related to electronic components, using the first information identified by the identification step, and storing the acquired second information in a second storage unit in association with identification information that identifies the electronic board or the electronic component; a search step of searching the second storage unit for the identification information corresponding to the second information when the second information is received; A search method comprising:

8. an identification step of identifying first information relating to characteristics of electronic components included in the electronic board from image data of the electronic board; a storage step of acquiring second information from a first storage unit that stores first information related to predetermined characteristics of electronic components and second information related to electronic components, using the first information identified by the identification step, and storing the acquired second information in a second storage unit in association with identification information that identifies the electronic board or the electronic component; a search step of searching the second storage unit for the identification information corresponding to the second information when the second information is received; A search program characterized by causing a computer to execute the above.

Images