Trust linkage system, trust linkage method, and trust connector

Abstract

To allow new trust-building methods to be introduced even when trust-building procedures and protocols are not established between computers.SOLUTION: A data collection device collects data, requests trust information to be assigned to the data according to predetermined trust settings from a trust granting device, and sends the data with the assigned trust information as trust data to a trust connector. The trust connector receives the trust data, extracts the trust information contained in the trust data, has it verified by a trust verification device, and, if a verification result is valid, assigns a connector signature to the data of the trust data and, sends it to a business device as transferred data. The business device receives the transferred data, extracts the connector signature contained in the transferred data, verifies that the connector signature is valid, and, if it is a valid connector signature, extracts the data contained in the transferred data to perform prescribed processing.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a trust linkage system, a trust linkage method, and a trust connector that link the results of verification from one or more perspectives. [Background technology]

[0002] In online services, technologies for establishing trust relationships between domain components are known (for example, Patent Document 1). Patent Document 1 discloses a computer system for online service coordination in which trust relationships between domains are established using PKI (Public Key Infrastructure: public key cryptography), and a technology for determining whether communication is possible based on the status of the established trust relationships. [Prior art documents] [Patent Documents]

[0003] [Patent Document 1] International Publication No. 2011 / 034970 [Overview of the project] [Problems that the invention aims to solve]

[0004] However, the conventional technologies described above had the problem that trust relationships between domains were predicated on trust-building frameworks such as PKI, making it difficult to integrate with other trust-building functions and technologies. Furthermore, the conventional technologies described above had the problem that the use cases for trust-building between computers were predetermined, making it difficult to build trust in unexpected use cases.

[0005] Therefore, the present invention has been made in view of the above problems, and aims to enable the introduction of a new trust-building method even when there are no established procedures or protocols for trust-building between computers. [Means for solving the problem]

[0006] The present invention relates to a trust linkage system that links data reliability between a data collection device, a trust connector, and a business device connected via a network, wherein the data collection device collects the data, requests a trust assignment device to assign predetermined trust information to the data according to a pre-set trust setting, and transmits the data with the assigned trust information to the trust connector as trust data; the trust connector receives the trust data, extracts the trust information contained in the trust data, requests a trust verification device to verify it, and if the verification result is valid, assigns a predetermined connector signature to the data extracted from the trust data to generate transfer data and transmits it to the business device; the business device receives the transfer data, extracts the connector signature contained in the transfer data, verifies that the connector signature is valid, and if the connector signature is valid, extracts the data contained in the transfer data and performs predetermined processing. [Effects of the Invention]

[0007] Therefore, even when there are no established procedures or protocols for building trust between the data acquisition device and the business device, the present invention makes it possible to introduce a new trust-building method between the data acquisition device and the trust connector and link it to the trust relationship between the trust connector and the business device.

[0008] Details of at least one embodiment of the subject matter disclosed herein are described in the accompanying drawings and the following description. Other features, aspects and effects of the subject matter disclosed are made apparent by the following disclosures, drawings and claims. [Brief explanation of the drawing]

[0009] [Figure 1] This block diagram shows an example of the configuration of a trust linkage system, illustrating Embodiment 1 of the present invention. [Figure 2] This block diagram shows an example of the configuration of a trust connector, illustrating Embodiment 1 of the present invention. [Figure 3]It is a sequence diagram showing Example 1 of the present invention and an example of the processing performed in the trust cooperation system. [Figure 4] It is a sequence diagram showing Example 1 of the present invention and an example of the trust granting process performed in the trust cooperation system. [Figure 5] It is a sequence diagram showing Example 1 of the present invention and an example of the trust verification process performed in the trust cooperation system. [Figure 6] It is a sequence diagram showing Example 1 of the present invention and an example of the trust verification function list generation process performed in the trust cooperation system. [Figure 7] It is a sequence diagram showing Example 1 of the present invention and an example of the trust setting process performed in the trust cooperation system. [Figure 8] It is a diagram showing Example 1 of the present invention and an example of the collected data. [Figure 9] It is a diagram showing Example 1 of the present invention and an example of the trust-granted collected data. [Figure 10] It is a diagram showing Example 1 of the present invention and an example of the trust data. [Figure 11] It is a diagram showing Example 1 of the present invention and an example of the verification data. [Figure 12] It is a diagram showing Example 1 of the present invention and an example of the transfer data. [Figure 13] It is a diagram showing Example 1 of the present invention and an example of the trust-granting function registration command. [Figure 14] It is a diagram showing Example 1 of the present invention and an example of the trust verification function registration command. [Figure 15] It is a diagram showing Example 1 of the present invention and an example of the trust-granting function list data. [Figure 16] It is a diagram showing Example 1 of the present invention and an example of the trust verification function list data. [Figure 17] It is a diagram showing Example 1 of the present invention and an example of the trust setting command. [Figure 18]This figure shows an example of a trust setting input screen, illustrating Embodiment 1 of the present invention. [Figure 19] This block diagram shows an example of the configuration of a trust linkage system, illustrating Embodiment 2 of the present invention. [Figure 20] This is a sequence diagram illustrating an example of processing performed in a trust-linked system, representing Embodiment 2 of the present invention. [Figure 21] This figure shows an example of a trust setting command, illustrating Embodiment 2 of the present invention. [Figure 22] This figure shows an example of trust configuration, illustrating Embodiment 1 of the present invention. [Figure 23] This figure shows an example of trust configuration, illustrating Embodiment 2 of the present invention. [Modes for carrying out the invention]

[0010] Hereinafter, embodiments of the present invention will be described based on the attached drawings. [Examples]

[0011] Figure 1 is a block diagram showing an example of the configuration of a trust linkage system, illustrating Embodiment 1 of the present invention. The trust linkage system includes data acquisition devices 101-10 that collect data. n and Trust-granting devices 201-20 that assign reliability to the collected data. n The system includes a trust connector 30 that links data reliability and trust verification devices 401-40 that verify data reliability at the request of the trust connector 30. n This includes a business device 50 that utilizes the verified data and a network 60 that connects each device. In the illustrated example, the business device 50 that utilizes the data is not limited to one, and a configuration in which multiple business devices 50 utilize the data is also possible.

[0012] Data acquisition devices 101-10 nWhen the code does not specify an individual device, the code "10" is used, omitting the subscripts "1" through "n". The same applies to the codes of other components. The functional elements of each device are described below.

[0013] <Data acquisition device> The data collection device 10 adds pre-configured trust information to the data collected from equipment and sensors using the trust assignment device 20, and then transmits it to a predetermined business device 50 via the trust connector 30. Data collection devices 101-10 n Since the configuration is similar, the subscript symbols will be omitted in the following explanation (the same applies to other devices).

[0014] Trust information is information used to ensure the reliability of data between devices, and can consist of, for example, digital signatures, evaluation information, verification information, timestamps, ciphertext, and hash values.

[0015] The data acquisition device 10 includes, as functional elements, a communication unit 101, a data acquisition unit 102, a trust data generation unit 103, and a trust setting unit 104. The communication unit 101 communicates with other devices (computers) via the network 60.

[0016] The data acquisition unit 102 collects data from devices (not shown) and sensors (not shown). The devices and sensors may be installed in or connected to the data acquisition device 10.

[0017] The trust data generation unit 103 transmits data to a predetermined trust assignment device 20 in order to assign trust information, which is pre-set in the trust setting 104, to the collected data (hereinafter referred to as collected data), and receives the trust-assigned collected data to which the trust information has been assigned.

[0018] The trust data generation unit 103 extracts verification function identification information from the trust-assigned collected data, as described later, generates trust data, and transmits it to the trust connector 30.

[0019] <Trust Granting Device> The trust assignment device 20 assigns trust information to the data collected from the data acquisition device 10 and returns it as trust-assigned collected data. The trust assignment device 20 includes, as functional elements, a communication unit 201, a trust information assignment unit 202, and a trust assignment function registration unit 203. The communication unit 201 communicates with other devices (computers) via the network 60.

[0020] The trust assignment function registration unit 203 sets (registers) the trust information to be assigned by the trust assignment device 20 based on a command received from an external source, as described later. The trust information assignment unit 202 assigns the pre-set trust information to the received collected data and returns it as trust-assigned collected data.

[0021] <Trust Connector> The trust connector 30 verifies the trust-assigned collected data received from the data acquisition device 10, and if the verification result is normal, it generates signed transfer data as described later and sends it to the specified destination business device 50. The signature assigned by the trust connector 30 is a well-known or publicly available digital certificate, and any digital certificate that can be verified by the business device 50 is acceptable.

[0022] The trust connector 30 includes, as functional elements, a communication unit 301, an identification information recognition unit 302, a forwarding destination extraction unit 303, a forwarding information generation unit 304, a connector signature generation unit 305, a verification / granting function list output unit 306, a verification / granting function list update unit 307, a trust granting function list 308, and a trust verification function list 309. The communication unit 201 communicates with other devices (computers) via the network 60.

[0023] As described later, the identification information recognition unit 302 obtains verification function identification information from the trust data received from the data collection device 10. The verification function identification information is an identifier for the function that verifies the trust information contained in the trust data. The forwarding destination extraction unit 303 extracts the address of the business device 50 that will use the data from the trust data received from the data collection device 10.

[0024] As described later, the transfer information generation unit 304 determines a trust verification device 40 to verify the trust information using the trust verification function list 309, and sends the trust information for verification. If the verification is successful, the transfer information generation unit 304 generates a predetermined signature using the connector signature generation unit 305, adds it to the trust information of the trust data, generates the transfer data, and sends it to the business device 50.

[0025] The verification / granting function list output unit 306 outputs the trust granting function list 308 or the trust verification function list 309. The verification / granting function list update unit 307 updates the trust granting function list 308 or the trust verification function list 309. The trust granting function list 308 is used by trust granting devices 201-20 n This is a list of trust information provided by [the system]. Trust verification function list 309 is for trust verification devices 401-40 n This is a list of trust information that can be verified.

[0026] <Trust Verification Device> The trust verification device 40 verifies the trust information of the verification data received from the trust connector 30 and returns a verification result indicating whether or not the trust information is valid. The trust verification device 40 includes, as functional elements, a communication unit 401, a trust information verification unit 402, and a trust verification function registration unit 403.

[0027] The communication unit 401 communicates with other devices (computers) via the network 60. The trust information verification unit 402 verifies the trust information received from the trust connector 30 and responds whether the trust information is valid or not.

[0028] The trust verification function registration unit 403 registers the trust information verification function to be performed by the trust verification device 40 in response to an external command.

[0029] <Business equipment> The business device 50 performs predetermined tasks using the transfer data received from the trust connector 30. The business device 50 includes, as functional elements, a communication unit 501, a business processing unit 502, a connector signature verification unit 503, a trust setting generation unit 504, and an input / output unit 505.

[0030] The communication unit 501 is connected to the network 60 and communicates with other devices (computers). The business processing unit 502 executes pre-configured tasks using the transferred data. The connector signature verification unit 503 verifies whether the connector signature of the trust connector 30 attached to the transferred data is valid information. The connector signature verification unit 503 is pre-configured with information for verifying the connector signature attached by the trust connector 30.

[0031] The trust setting generation unit 504 sets what kind of trust information to add to the data acquired from the data acquisition device 10. The input / output unit 505 includes an input unit such as a mouse, keyboard, or touch panel, and an output unit such as a display.

[0032] <Hardware> Next, we will describe the configuration of each device, including its hardware. Figure 2 is a block diagram showing an example of the configuration of the trust connector 30. The hardware configurations of the data acquisition device 10, the trust assignment device 20, the trust verification device 40, and the business device 50 are the same as those of the trust connector 30, so redundant explanations will be omitted.

[0033] The Trust Connector 30 is a computer that includes a communication device 11, an input / output device 12, a storage device 13, a CPU 14, and memory 15. The communication device 11 is connected to the network 60 and communicates with other devices and computers. The input / output device 12 includes input devices such as a mouse, keyboard, or touch panel, and output devices such as a display or speaker.

[0034] The storage device 13 is composed of a non-volatile storage medium and stores data and programs. The trust connector 30 stores a trust granting function list 308 and a trust verification function list 309 in the storage device 13.

[0035] A predetermined program is loaded into memory 15 and executed by the CPU 14. In the trust connector 30, an identification information recognition program 151, a transfer destination extraction program 152, a transfer information generation program 153, a connector signature generation program 154, a verification / grant function list output program 155, and a verification / grant function list update program 156 are loaded into memory 15 and executed by the CPU 14.

[0036] The CPU 14 operates as a functional unit that provides predetermined functions by processing according to the programs of each functional unit. For example, the CPU 14 functions as a transfer information generation unit 304 by processing according to the transfer information generation program 153. The same applies to other programs. Furthermore, the CPU 14 also operates as a functional unit that provides the functions of each of the multiple processes executed by each program. A computer and a computer system are devices and systems that include these functional units.

[0037] <Data> The data used by each device is described below. Figure 22 shows an example of the trust settings 104 held by the data acquisition device 10. The trust settings 104 are set based on trust setting commands from the business device 50.

[0038] Trust setting 104 includes the device 141, verification function identification information 142, trust-assigning device address 143, and forwarding destination device address 144 in a single record.

[0039] Device 141 stores sensors or devices that identify the source of the data to be collected. If the data acquisition device 10 handles data from only one sensor or device, it can store a fixed value specific to the data acquisition device 10.

[0040] The verification function identification information 142 stores an identifier for the verification function according to the type of trust information. The verification function can consist of values ​​or identifiers such as "electronic signature," "timestamp," or "evaluation information."

[0041] The trust assignment device address 143 stores the address or identifier of the trust assignment device 20 that assigns trust information to the collected data. The forwarding destination device address 144 stores the address of the forwarding business device 50. If there is only one business device 50, a fixed value can be stored.

[0042] Figure 17 shows an example of a trust setting command A705 issued by the business device 50 to the data acquisition device 10. Before using data from the data acquisition device 10, the business device 50 specifies the type of trust information, etc., in the trust setting 104 of the data acquisition device 10 using the trust setting command A705.

[0043] The trust setting command A705 includes the data acquisition device address A1702, the verification function identification information A1704, and the trust granting device address A1705.

[0044] The configured data acquisition device address A1702 stores the address of the data acquisition device 10 from which the business device 50 will use the data. The verification function identification information A1704 stores the identifier of the verification function corresponding to the type of trust information that the data acquisition device 10 attaches to the data. The verification function can consist of values ​​or identifiers such as "electronic signature," "timestamp," or "evaluation information."

[0045] Trust assignment device address A1705 stores the address of the trust assignment device 20 according to the type of trust information.

[0046] Furthermore, if the data acquisition device 10 handles multiple data sets, a field may be provided in trust setting A1703 to store sensors or devices that identify the data source corresponding to device 141 in trust setting 104.

[0047] Furthermore, if there are multiple business devices 50, a field may be provided in trust setting A1703 to store the address of the business device 50 corresponding to the forwarding destination device address 144 in trust setting 104.

[0048] Figure 8 shows an example of collected data A401 that the data acquisition device 10 transmits to the trust assignment device 20. Collected data A401 includes the forwarding address A802 and data A803.

[0049] The forwarding address A802 stores the address of the business device 50 that will use the data. Data A803 stores the sensor and device data collected by the data acquisition device 10. If the data acquisition device 10 handles multiple types of data, it may also collect information from the device 141 indicating the data source and add it to data A401.

[0050] Figure 9 shows an example of trust-granting data A402 that the trust-granting device 20 sends back to the data acquisition device 10. Trust-granting data A402 includes data A902 and trust information A903.

[0051] Data A902 is data A803 of collected data A401 transmitted by data acquisition device 10. Trust information A903 is information assigned by trust assignment device 20 to ensure data reliability between devices.

[0052] Figure 10 shows an example of trust data A403 transmitted by the data acquisition device 10 to the trust connector 30. Trust data A403 includes the destination device address A1002, verification function identification information A1003, data A1004, and trust information A1005.

[0053] The forwarding device address A1002 stores the address of the business device 50 that will use the data. The verification function identification information A1003 stores the identifier of the function that verifies the trust information. The data A1004 is the data A803 collected by the data collection device 10. The trust information A1005 is information generated by the trust assignment device 20 to ensure the reliability of the data between each device, and is the trust information A903 of the trust assignment collected data A402.

[0054] Figure 11 shows an example of verification data A501 that the trust connector 30 transmits to the trust verification device 40. Verification data A501 includes the trust verification device address A1102, data A1103, and trust information A1104.

[0055] The trust verification device address A1102 stores the address of the trust verification device 40 set by the trust connector 30. Data A1103 is data A803 collected by the data acquisition device 10. Trust information A1104 is trust information A903 generated by the trust granting device 20.

[0056] Figure 12 shows an example of transfer data A503 that the trust connector 30 sends to the business device 50. Transfer data A503 includes the destination device address A1202, data A1203, and connector signature A1204.

[0057] The forwarding device address A1202 stores the address of the destination business device 50. Data A11203 is data A803 collected by the data acquisition device 10. Connector signature A1204 is a predetermined electronic signature generated by the trust connector 30.

[0058] Figure 13 shows an example of a trust granting function registration command A601 that the trust granting device 20 sends to the trust connector 30. The trust granting function registration command A601 includes the trust granting function name A1302 and the trust granting device address A1303.

[0059] Trust assignment function name A1302 stores the name or identifier of the trust information generated by the trust assignment device 20. Trust assignment device address A1303 stores the address of the trust assignment device 20.

[0060] The Trust Assignment Function Registration Command A601 is a command used by a trust assignment device 20 to request registration from the trust connector 30 when a new trust assignment device 20 is added or modified.

[0061] Figure 14 shows an example of a trust verification function registration command A602 that the trust verification device 40 sends to the trust connector 30. The trust verification function registration command A602 includes the trust verification function name A1402 and the trust verification device address A1403.

[0062] The Trust Verification Function Name A1402 stores the name or identifier of the trust information verified by the Trust Verification Device 40. The Trust Verification Device Address A1403 stores the address of the Trust Verification Device 40.

[0063] The Trust Verification Function Registration Command A602 is a command used when a new Trust Verification Device 40 is added, allowing the Trust Verification Device 40 to request registration from the Trust Connector 30.

[0064] Figure 15 shows an example of the trust granting function list data A702 that the trust connector 30 transmits to the business device 50. The trust granting function list data A702 is data that constitutes the trust granting function list 308 held by the trust connector 30.

[0065] The trust granting function list data A702 includes trust granting function identification information A1502, trust granting function name A1503, and trust granting device address A1504.

[0066] Trust granting function identification information A1502 stores the identifier of the trust information generated by the trust granting device 20. Trust granting function name A1503 stores the name of the trust information. Trust granting device address A1504 stores the address of the trust granting device 20.

[0067] Trust granting function list data A702 is data output from trust granting function list 308 when the trust connector 30 notifies the business device 50 of a list of trust granting functions that can be set by the trust granting device 20.

[0068] Figure 16 shows an example of trust verification function list data A704 that the trust connector 30 transmits to the business device 50. Trust verification function list data A704 is data that constitutes the trust verification function list 309 held by the trust connector 30.

[0069] Trust verification function list data A704 includes trust verification function identification information A1602, trust verification function name A1603, and trust verification device address A1604.

[0070] Trust verification function identification information A1602 stores the identifier of the trust information to be verified by the trust verification device 40. Trust verification function name A1603 stores the name of the trust information. Trust verification device address A1604 stores the address of the trust verification device 40.

[0071] Trust Verification Function List Data A704 is data output from Trust Verification Function List 309 when the Trust Connector 30 notifies the Business Equipment 50 of a list of trust verification functions that the Trust Verification Device 40 can perform.

[0072] <Process Overview> Next, an example of processing performed in the trust linkage system will be described. Figure 3 is a sequence diagram showing an example of processing performed in the trust linkage system. The sequence diagram in Figure 3 shows an overview of the processing, and during operation of the trust linkage system, a trust assignment process (S301) is performed in which trust information is added to the data collected by the data acquisition device 10 and the trust data is output to the trust connector 30, and a trust verification process (S302) is performed in which the trust connector 30 has the trust verification device 40 verify the trust information of the trust data and sends the verified transfer data to the business device 50.

[0073] When adding or changing the trust granting device 20 or the trust verification device 40, a trust function list generation process (S303) is performed to update the trust granting function list 308 and the trust verification function list 309 held by the trust connector 30.

[0074] Furthermore, if the business device 50 newly uses data from the data acquisition device 10 or changes the usage method, it performs a trust setting process (S304).

[0075] <Trust Granting Process> Figure 4 is a sequence diagram showing an example of a trust granting process performed in the trust linkage system. This process is the trust granting process shown in step S301 of Figure 3.

[0076] First, the data acquisition device 10 collects data from equipment, sensors, etc. (S401). The data acquisition device 10 refers to the trust setting 104 to determine what kind of trust information to add to the collected data (S402).

[0077] The data acquisition device 10 refers to the trust setting 104 in Figure 22 and obtains the address of the trust granting device 20 from the trust granting device address 143 that matches the device 141, as the destination for transferring the collected data (S403). The data acquisition device 10 also obtains the address of the business device 50 that will use the collected data from the destination device address 144 of the trust setting 104.

[0078] Next, the data acquisition device 10 generates the collected data A401 shown in Figure 8, sets the address of the trust assignment device 20 to the forwarding address A802, and sets the collected data to data A803 (S404). Then, the data acquisition device 10 transmits the collected data A401 to the trust assignment device 20.

[0079] Furthermore, the data acquisition device 10 only needs to send the acquired data A401 to the trust granting device 20 specified by the forwarding address A802, and does not need to broadcast to all trust granting devices 20.

[0080] Upon receiving the collected data A401, the trust assignment device 20 generates pre-configured trust information for each trust assignment device 20 and generates the trust-assigned collected data A402 (S405). As shown in Figure 9, the trust-assigned collected data A402 is data A902 (data A803 of collected data A401) with the trust information A903 added. The trust assignment device 20 sends the generated trust-assigned collected data A402 back to the data collection device 10 that sent it.

[0081] Upon receiving the trust-assigned data A402, the data acquisition device 10 refers to the trust setting 104 and obtains verification function identification information 142 for the trust information assigned by the trust assignment device 20 (S406).

[0082] The data collection device 10 generates trust data A403 shown in Figure 10 based on the acquired verification function identification information 142 and trust information A903, etc. (S407). The data collection device 10 sets the address of the transfer destination business device 50 to the transfer destination device address A1002, sets the verification function identification information 142 to verification function identification information 1003, sets the collected data to data A1004, and sets the trust information A903 to trust information 1005.

[0083] The data acquisition device 10 transmits the generated trust data A403 to the trust connector 30. Through the above process, the data collected by the data acquisition device 10 is assigned the trust information specified in the trust setting 104 by the trust assignment device 20 and transmitted to the trust connector 30 as trust data A403.

[0084] <Trust Verification Process> Figure 5 is a sequence diagram showing an example of a trust verification process performed in the trust linkage system. This process is the trust verification process shown in step S302 of Figure 3.

[0085] When the trust connector 30 receives trust data A403 from the data acquisition device 10, it extracts verification function identification information A1003 (S501). The trust connector 30 reads the trust verification function list 309 (S502), searches for the trust verification function identification information A1602 in the trust verification function list data A704, and extracts the trust verification device address A1604 as the forwarding destination for verification from the data that matches the verification function identification information A1003 (S503).

[0086] Next, the trust connector 30 generates verification data A501 shown in Figure 11 to allow the trust verification device 40 to verify the trust information A1005 of the trust data A403 (S504). The trust connector 30 sets the extracted trust verification device address A1604 to the trust verification device address A1102, sets data A902 to data A1103, sets trust information A1005 to trust information A1104, and transmits it to the designated trust verification device 40.

[0087] Upon receiving verification data A501, the trust verification device 40 verifies whether the trust information A1104 in verification data A501 is legitimate (S505). The trust verification device 40 performs verification of the trust information A1104 according to the pre-configured type of trust information.

[0088] If the trust information set in the device is an electronic signature, the trust verification device 40 verifies the electronic signature using the public key certificate of the signer of trust information A1104, and determines that it is a valid signature if no errors occur. Alternatively, if the trust information set in the trust verification device 40 is a quality evaluation, it queries the issuer of the evaluation with trust information A1104 to determine whether it is legitimate or not. The trust verification device 40 returns the verification result A502 of the legitimacy of trust information A1104 to the trust connector 30. The verification result A502 is set to either success or failure, for example.

[0089] If the verification result A502 received from the trust verification device 40 is successful, the trust connector 30 proceeds to step S508; if the verification result A502 is unsuccessful, it terminates the process in step S507.

[0090] In step S508, the trust connector 30 generates a predetermined signature, and then in step S509, it generates the transfer data A503 shown in Figure 12. The trust connector 30 sets the destination device address A1002 to the destination device address A1202 of the transfer data A503, sets data A1004 to data A1203, sets the generated signature to the connector signature A1204 to generate the transfer data A503, and transmits it to the business device 50 at destination device address A1002.

[0091] Upon receiving the transfer data A503, the business device 50 verifies the connector signature A1204. If the connector signature is valid, it determines that the data is legitimate and has been verified by the trust connector 30 (S510).

[0092] The business device 50 uses data A1203 of the transfer data A503, whose legitimacy is guaranteed, to perform predetermined processing (S511). If the connector signature is not valid, the business device 50 can discard the transfer data A503 and notify the trust connector 30 of the error.

[0093] Through the above process, the data acquisition device 10 has the trust information of the type specified in the trust setting 104 assigned by the trust assignment device 20, and then sends the trust data A403 to the trust connector 30. The trust connector 30 verifies the trust information of the trust data A403, and if it is valid, it can send the transfer data A503 with the connector signature attached to the data to the business device 50. The business device 50 then determines that the data is trustworthy if the connector signature is valid and performs the predetermined business.

[0094] As a result, in the trust linkage system, trust can be granted between the data acquisition device 10 and the trust connector 30 using any of several types of trust information, along with the trust information of the trust granting device 20 and the trust verification device 40, and trust can be granted between the trust connector 30 and the business device 50 using a pre-configured connector signature.

[0095] By pre-configuring the trust information type (verification function identification information) in trust setting 104, the business device 50 can obtain legitimate data from the trust connector 30 and perform the prescribed tasks without verifying the trust information.

[0096] In other words, between the data acquisition device 10 and the trust connector 30, data reliability is assigned using multiple types of trust information by multiple trust assignment devices 20 and trust verification devices 40, and between the trust connector 30 and the business device 50, data reliability is assigned using a pre-configured connector signature.

[0097] As a result, even if the type of trust information between the data acquisition device 10 and the trust connector 30 is changed, the business device 50 can ensure reliability based on the connector signature, provided the data has been verified for reliability by the trust connector 30. Therefore, even while flexibly changing the type of trust information between the data acquisition device 10 and the trust connector 30, the trust connector 30 and the business device 50 can still provide data reliability using a predetermined connector signature.

[0098] <Trust Verification Function List Generation Process> Figure 6 is a sequence diagram showing an example of the trust verification function generation process performed in the trust linkage system. This process is the trust verification function generation process shown in step S303 of Figure 3. This process is executed when new trust information is added or modified in the trust linkage system, or when the trust granting device 20 or the trust verification device 40 is modified. In this embodiment, an example of updating the trust granting device 20 and the trust verification device 40 is shown.

[0099] First, the trust assignment device 20 to be updated generates the trust assignment function registration command A601 shown in Figure 13 (S601). The trust assignment device 20 sets the name of the trust information function to be assigned to the collected data as the trust assignment function name A1302, sets the address of the trust assignment device 20 as the trust assignment device address A1303, and sends it to the trust connector 30.

[0100] Upon receiving the trust granting function registration command A601, the trust connector 30 updates or adds to the trust granting function list data A702 in the trust granting function list 308 (S602). This updates or adds to the information of the trust granting device 20 in the trust granting function list 308.

[0101] Next, the trust verification device 40 to be updated generates the trust verification function registration command A602 shown in Figure 14 (S603). The trust verification device 40 sets the name of the function of the trust information to be verified, which is attached to the trust data A403, as the trust verification function name A1402, sets the address of the trust verification device 40 as the trust verification device address A1403, and sends it to the trust connector 30.

[0102] Upon receiving the trust verification function registration command A602, the trust connector 30 updates or adds to the trust verification function list data A704 in the trust verification function list 309.

[0103] Through the above process, the trust linkage system can introduce a new trust building method by adding or updating the trust granting device 20 and the trust verification device 40, even if the procedures and protocols for building trust related to the granting and verification of trust information have not been established, as long as the trust information (verification function identification information) specified in trust setting 104 is the trust information (verification function identification information).

[0104] <Trust setting process> Figure 7 is a sequence diagram showing an example of a trust configuration process performed in the trust linkage system. This process is the trust configuration process shown in step S304 of Figure 3. This process is executed when a new business device 50 is added or modified in the trust linkage system.

[0105] The business device 50 sends a command (trust function list acquisition command A701) to the trust connector 30 requesting the trust function list 308. Upon receiving the trust function list acquisition command A701, the trust connector 30 reads the trust function list 308 (S701) and sends the trust function list data A702 shown in Figure 15 to the business device 50.

[0106] Next, the business device 50 sends a command (trust verification function list acquisition command A703) to the trust connector 30 requesting the trust verification function list 309. Upon receiving the trust verification function list acquisition command A703, the trust connector 30 reads the trust verification function list 309 (S702) and sends the trust verification function list data A704 in the format shown in Figure 16 to the business device 50.

[0107] When the business device 50 obtains the trust granting function list data A702 and the trust verification function list data A704, it outputs the trust setting input screen A1800 shown in Figure 18 to the input / output device 12. Users of the business device 50 input the trust setting 104 with a confidence level corresponding to the data they are using via the input / output device 12 (S703).

[0108] The trust setting input screen A1800 in Figure 18 includes an area for selecting the target equipment to be set, A1801, for selecting sensors and equipment to be used by the business device 50; an area for selecting the trust information to be assigned to the trust data A403, A1806, for selecting the trust information to be verified by the trust connector 30, and an area for selecting the trust verification equipment list A1810.

[0109] The Selectable Device A1801 is information specific to the data acquisition device 10 and is displayed as a list of selectable sensors and devices for the data source. The list of Selectable Device A1801 includes the target A1802, the device A1803, the IP address A1804, and the acquired data A1805 in a single entry.

[0110] By marking the checkbox for the target A1802 according to the collected data A1805 used by the business device 50, the settings can be reflected in the trust settings 104.

[0111] Trust assignment device list A1806 is information generated from the received trust assignment function list data A702, and is displayed as a selectable list of trust information to be assigned to the collected data.

[0112] Trust granting device list A1806 includes selection A1807, trust granting function name A1808, and trust granting device address A1809 in a single entry. Depending on the collected data A1805 used by the business device 50, the required trust information (trust granting function name A1808) can be reflected in the trust setting 104 by marking the checkbox in selection A1807.

[0113] The Trust Verification Device List A1810 is information generated from the received Trust Verification Function List Data A704, and is displayed as a selectable list of trust information to be verified by the Trust Connector 30.

[0114] Trust verification device list A1810 includes selection A1811, trust verification function name A1812, and trust verification device address A1813 in a single entry. By marking the checkbox for selection A1811 that corresponds to the trust information (trust verification function name A1812) used in trust data A403, it can be reflected in trust setting 104.

[0115] Once input is complete on the trust setting input screen A1800, the business device 50 generates the trust setting command A705 shown in Figure 17 (S704). The business device 50 sends the generated trust setting command A705 to the data acquisition device 10 at IP address A1804.

[0116] Upon receiving the trust setting command A705, the data acquisition device 10 inputs it into the trust setting 104 and uses it in the trust assignment process (S301) shown in Figure 3.

[0117] Through the above process, the business device 50 can select the data acquisition device 10, the trust assignment device 20, and the trust verification device 40 according to the data to be used.

[0118] As described above, in the trust linkage system of this embodiment, while the reliability of the data is provided by the trust information, there is no need for the business equipment 50 that uses the data to verify the trust information. Therefore, the trust provisioning device 20 and the trust verification device 40, which provide and verify the trust information, can be flexibly configured.

[0119] For example, by adding a trust assignment device 20 that assigns new trust information and a trust verification device 40 that verifies said trust information, and then later incorporating the new trust information into the trust settings 104 of the business device 50, the business device 50 can ensure the reliability of the data with the new trust information regardless of the trust building procedure or protocol.

[0120] In this way, multiple trust information can be used between the data acquisition device 10 and the trust connector 30, and reliability is provided by multiple trust granting devices 20 and trust verification devices 40. Reliability is also ensured between the trust connector 30 and the business device 50 by a pre-configured connector signature, making it possible to flexibly change the trust information. [Examples]

[0121] Figures 19 to 21 show Example 2, which illustrates an example of attaching multiple trust information to a single collected data. While Example 1 showed an example of attaching and transmitting one trust information to a single collected data, Example 2 shows an example of ensuring reliability with multiple trust information.

[0122] FIG. 19 shows Example 2 of the present invention and is a block diagram showing an example of the configuration of the trust cooperation system. The trust cooperation system of Example 2 has the same configuration as that of Example 1 except that a connector signature verification unit 105 is added to the data collection device 10 of Example 1.

[0123] The connector signature verification unit 105 is the same as the connector signature verification unit 503 of the business device 50, and verifies whether the connector signature of the trust connector 30 attached to the transfer data is legitimate information. Note that information on the connector signature given by the trust connector 30 is preset in the connector signature verification unit 105.

[0124] FIG. 21 is a diagram showing an example of the trust setting command A705 issued by the business device 50 to the data collection device 10. In Example 2, since the data collection device 10 can use a plurality of trust information, the trust setting command A705 also corresponds to a plurality of trust information, which is different from Example 1.

[0125] The business device 50 designates the type of trust information and the like by the trust setting command A705 before using the data from the data collection device 10. The trust setting command A705 stores the setting destination data collection device address A1702, the verification function identification information A17041 to A1704 n and the trust granting device addresses A17051 to A1705 n are stored.

[0126] As will be described later, the data collection device 10 of this embodiment shows an example in which trust information is added by the trust granting device 20 in ascending order of the subscript letters of the symbol and then transmitted to the trust connector 30.

[0127] The configured data acquisition device address A1702 stores the address of the data acquisition device 10 from which the business device 50 will use the data. The verification function identification information A1704 stores the identifier of the verification function according to the type of trust information that the data acquisition device 10 attaches to the data. The verification function can consist of values ​​or identifiers such as "electronic signature," "timestamp," or "evaluation information." The trust assignment device address A1705 stores the address of the trust assignment device 20 according to the type of trust information.

[0128] Figure 23 shows an example of a trust setting 104 held by the data acquisition device 10. The trust setting 104 is set based on the trust setting command A705 from the business device 50.

[0129] Trust setting 104 includes device 141, forwarding destination device address 144, and verification function identification information 1421-142. n And, trust granting device addresses 1431~143 n Includes.

[0130] Device 141 stores sensors or devices that identify the source of the data to be collected. Transfer destination device address 144 stores the address of the transfer destination business device 50. Verification function identification information 142 stores an identifier for the verification function according to the type of trust information. The verification function can consist of values ​​or identifiers such as "electronic signature," "timestamp," or "evaluation information." Trust granting device address 143 stores the address or identifier of the trust granting device 20 that grants trust information to the collected data.

[0131] Figure 20 is a sequence diagram showing an example of processing performed in the trust linkage system. This processing is performed during the operation of the trust linkage system, similar to the trust granting process (S301) and trust verification process (S302) in Figure 3 of Embodiment 1.

[0132] First, the data acquisition device 10 collects data and performs trust assignment processing (S2001). Trust assignment processing (S2001) is performed in the same way as the trust assignment processing (S301) in the above embodiment 1, but the trust assignment device addresses 1431~143 of the trust setting 104 shown in Figure 24 are different. n The difference from the above embodiment 1 is that the trust assignment process and the verification process by the trust connector 30 are repeated in the order described above.

[0133] In the trust assignment process (S2001), when the data acquisition device 10 collects data, it first requests the trust assignment device address 1431 to assign trust information, obtains the trust information, generates trust data A403, and sends it to the trust connector 30.

[0134] When the trust connector 30 receives trust data A403 from the data acquisition device 10, it extracts verification function identification information A1003 (S2002). The trust connector 30 reads the trust verification function list 309 (S2003), searches for the trust verification function identification information A1602 in the trust verification function list data A704, and extracts the trust verification device address A1604 as the forwarding destination for verification from the data that matches the verification function identification information A1003 (S2004).

[0135] Next, the trust connector 30 generates verification data A501 shown in Figure 11 to allow the trust verification device 40 to verify the trust information A1005 of the trust data A403 (S2005). The trust connector 30 transmits the generated verification data A501 to the designated trust verification device 40.

[0136] Upon receiving the verification data A501, the trust verification device 40 verifies whether the trust information A1104 in the verification data A501 is valid (S2006). The trust verification device 40 verifies the trust information A1104 in the same manner as in the previous embodiment 1, according to the pre-set type of trust information, and returns the verification result A502 of the validity of the trust information A1104 to the trust connector 30.

[0137] If the verification result A502 received from the trust verification device 40 is successful, the trust connector 30 proceeds to step S2009; if the verification result A502 is unsuccessful, it terminates processing in step S2008 (S2007).

[0138] In step S2009, the trust connector 30 generates a predetermined signature, and then in step S2010, it generates the transfer data A503 shown in Figure 12. Until the reliability verification using multiple trust information is completed, the data collection device 10 sets the destination address A1002 of the trust data A403 to the address of the data collection device 10 itself, which is the source. Once the reliability verification using multiple trust information is completed, it sets the destination address A1002 to the address of the business device 50. The trust connector 30 sets the destination specified by the data collection device 10 to the destination device address A1202 of the transfer data A503.

[0139] In step S2011, the trust connector 30 distributes the transfer data to the source data acquisition device 10 or business device 50 (other than the source in the diagram) according to the destination device address A1202 and sends it.

[0140] Upon receiving the transfer data A503, the data acquisition device 10 verifies the connector signature A1204. If the signature is valid, it determines that the data is legitimate and has been verified by the trust connector 30 (S2012).

[0141] Since the verification of the previous trust information was successful, the data acquisition device 10 returns to step S2001 to assign the next trust information and requests the trust information from the trust assignment device address 1432 of the trust setting 104 shown in Figure 23.

[0142] The data acquisition device 10 and the trust connector 30 are connected to the trust assignment device addresses 1431-143 of the trust setting 104. nThe process involves repeatedly assigning and verifying trust information, and once verification of all trust information is complete, the transfer data A503 is sent to the business device 50 to execute the predetermined processing.

[0143] As described above, in the trust linkage system of Example 2, by specifying a combination of multiple trust information (verification function identification information 142, trust assignment device address 143) in advance in the trust setting 104, the trust connector 30 sends the transfer data A503 to the business device 50 only after the verification of all trust information is complete. This enables the business device 50 to process data that has been assigned reliability by combining multiple trust information.

[0144] In the above embodiments 1 and 2, examples were shown in which the trust granting device 20, the trust connector 30, and the trust verification device 40 are configured on different computers. However, the invention is not limited to this, and the functions of these devices may be provided by a single computer.

[0145] Furthermore, while the above-described embodiment 2 shows an example where one trust granting device 20 and trust verification device 40 handle one type of trust information, the invention is not limited to this, and one trust granting device 20 or trust verification device 40 may handle multiple types of trust information.

[0146] <Conclusion> As described above, the trust linkage systems of Examples 1 and 2 can be configured as follows.

[0147] (1) A trust linkage system in which data reliability is linked between a data acquisition device (10), a trust connector (30), and a business device (50) connected via a network (60), wherein the data acquisition device (10) collects the data and requests a trust assignment device (20) to assign predetermined trust information (A903) to the data (A902) according to a pre-set trust setting (104), and transmits the data to the trust connector (30) as trust data (A403), and the trust connector (30) receives the trust data (A403) and the trust information ( A trust linkage system characterized by extracting A1005) and requesting verification from a trust verification device (40), and if the verification result is valid, assigning a predetermined connector signature (A1204) to the data (A1004) extracted from the trust data (A403) to generate transfer data (A503) and sending it to a business device (50), the business device (50) receiving the transfer data (A503), extracting the connector signature (A1204) contained in the transfer data (A503) and verifying that the connector signature (A1204) is valid, and if the connector signature (A1204) is valid, extracting the data (A1203) contained in the transfer data (A503) and executing predetermined processing.

[0148] According to the above configuration, even if there are no established procedures or protocols for building trust between the data acquisition device and the business device, it is possible to introduce a new trust-building method between the data acquisition device and the trust connector and link it to the trust relationship between the trust connector and the business device. Specifically, between the data acquisition device 10 and the trust connector 30, data reliability is assigned using multiple types of trust information by multiple trust-assigning devices 20 and trust-verifying devices 40, and between the trust connector 30 and the business device 50, data reliability is assigned using a pre-configured connector signature. As a result, even if the type of trust information between the data acquisition device 10 and the trust connector 30 is changed, the business device 50 can ensure reliability based on the connector signature if the data has been verified for reliability by the trust connector 30.

[0149] (2) The trust linkage system described in (1) above, wherein the trust granting device (20) is a plurality of trust granting devices (201~20) capable of granting a plurality of types of trust information (A903) n ) and the trust verification device (40) includes a plurality of trust verification devices (401~420) capable of verifying a plurality of types of trust information (A1104) n A trust linkage system characterized in that the data acquisition device (10) selects the trust granting device (20) based on the trust information (trust granting device address 143) specified in the trust setting (104) and grants the trust information (A903), and grants the identification information (verification function identification information A1003) of the specified trust information (A1005) to the trust data (A403), and the trust connector (30) extracts the identification information (A1003) from the trust data (A403), selects the trust verification device (40) corresponding to the identification information (A1003) and requests the verification.

[0150] According to the above configuration, between the data acquisition device 10 and the trust connector 30, the trust granting device 20 and the trust verification device 40 can grant reliability using trust information selected from multiple types of trust information, and between the trust connector 30 and the business device 50, the reliability of the data can be granted using a pre-configured connector signature.

[0151] (3) The trust linkage system described in (1) above, wherein the trust granting device (20) is a plurality of trust granting devices (201~20) capable of granting multiple types of trust information. n ) includes a plurality of trust verification devices (401~40) capable of verifying multiple types of trust information. n ) and the data acquisition device (10) includes a plurality of trust information (1431~143) specified in the trust setting (104). n Based on the above, the identification information of the designated trust information (1421~142 nThe Trust Connector (30) sequentially assigns the following to the Trust Data (A403): the Trust Connector (30) extracts the identification information (A1003) from the Trust Data (A403) and the Trust Verification Device (401~40) corresponding to the identification information (A1003) n ) are selected sequentially and verification is requested, and multiple trust information (1431~143) specified in the trust setting (104) are used. n A trust linkage system characterized by repeating the above verification for ).

[0152] According to the above configuration, by pre-specifying multiple trust information (verification function identification information 142, trust assignment device address 143) in the trust setting 104, the trust connector 30 sends transfer data A503 to the business device 50 only after verification of all trust information is complete. This enables the business device 50 to process data that has been assigned reliability by multiple trust information.

[0153] (4) A trust linkage system as described in (1) above, wherein the trust connector (30) receives additions or changes to the trust information from the trust granting device (20) and updates the granting function list (308) that manages the trust granting device (20), and receives additions or changes to the trust information from the trust verification device (40) and updates the verification function list (309) that manages the trust verification device (40).

[0154] According to the above configuration, in the trust linkage system, even if the procedures and protocols for building trust related to the assignment and verification of trust information are not defined, if the trust information (verification function identification information) is specified in trust setting 104, it is possible to introduce a new trust building method by adding or updating the trust assignment device 20 and the trust verification device 40.

[0155] (5) A trust linkage system as described in (1) above, wherein the trust setting (104) is characterized in that the business device (50) specifies the identification information of the trust information (A903) assigned to the data (A902) by the data acquisition device (10) and the trust information (A1003) verified by the trust verification device (40).

[0156] According to the above configuration, the business device 50 can select the trust information to be used by the data acquisition device 10, the trust assignment device 20, and the trust verification device 40 according to the data to be used. The business device 50 only needs to instruct the data acquisition device 10 to add or change the trust information, and the trust information verification can be performed by the trust connector 30. As a result, reliability can be ensured between the trust connector 30 and the business device 50 by connector signature, and between the data acquisition device 10 and the trust connector 30 by the desired trust information.

[0157] It should be noted that the present invention is not limited to the embodiments described above, and various modifications are included. For example, the embodiments described above are described in detail to make the present invention easier to understand, and are not necessarily limited to including all the configurations described. Furthermore, it is possible to replace parts of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add configurations from other embodiments to the configuration of one embodiment. In addition, for parts of the configuration of each embodiment, the addition, deletion, or substitution of other configurations can be applied individually or in combination.

[0158] Furthermore, each of the above-mentioned configurations, functions, processing units, and processing means may be implemented in hardware, in whole or in part, for example, by designing them as integrated circuits. Alternatively, each of the above-mentioned configurations and functions may be implemented in software by having the processor interpret and execute programs that realize each function. Information such as programs, tables, and files that realize each function can be stored in memory, a recording device such as a hard disk or SSD (Solid State Drive), or a recording medium such as an IC card, SD card, or DVD.

[0159] Furthermore, the control lines and information lines shown are those deemed necessary for explanatory purposes, and not all control lines and information lines are necessarily shown in the actual product. In reality, it is safe to assume that almost all components are interconnected. [Explanation of Symbols]

[0160] 10 Data Acquisition Device 20 Trust Granting Device 30 Trust Connectors 40 Trust Verification Device 50 Business equipment 102 Data Acquisition Unit 103 Trust Data Generation Unit 104 Trust Settings 202 Trust Information Assignment Department 203 Trust Granting Function Registration Section 302 Identification Information Recognition Unit 303 Transfer destination extraction unit 304 Transfer Information Generation Unit 305 Connector Signature Generation Unit 306 Verification / Assignment Function List Output Section 307 Verification and Function List Update Section 308 Trust Granting Function List 309 Trust Verification Function List 402 Trust Information Verification Department 403 Trust Verification Function Registration Section 502 Business Processing Unit 503 Connector Signature Verification Unit 504 Trust Setting Generation Unit

Claims

1. A trust linkage system that links data reliability between data acquisition devices, trust connectors, and business equipment connected via a network, The data acquisition device is The data is collected, and a trust assignment device is requested to assign predetermined trust information to the data according to a pre-configured trust setting, and the data with the assigned trust information is transmitted to the trust connector as trust data. The aforementioned trust connector is The system receives the trust data, extracts the trust information contained in the trust data, requests verification from the trust verification device, and if the verification result is valid, assigns a predetermined connector signature to the data extracted from the trust data, generates transfer data, and transmits it to the business device. The aforementioned business device is A trust linkage system characterized by receiving the aforementioned transfer data, extracting the connector signature contained in the transfer data, verifying that the connector signature is valid, and if the connector signature is valid, extracting the aforementioned data contained in the transfer data and performing predetermined processing.

2. A trust linkage system according to claim 1, The trust granting device includes a plurality of trust granting devices capable of granting a plurality of types of trust information, The trust verification device includes a plurality of trust verification devices capable of verifying a plurality of types of trust information, The data acquisition device is Based on the trust information specified in the trust settings, the trust granting device is selected to grant the trust information, and the identification information of the specified trust information is assigned to the trust data. The aforementioned trust connector is A trust linkage system characterized by extracting the identification information from the trust data, selecting the trust verification device corresponding to the identification information, and requesting verification.

3. A trust linkage system according to claim 1, The trust granting device includes a plurality of trust granting devices capable of granting a plurality of types of trust information, The trust verification device includes a plurality of trust verification devices capable of verifying a plurality of types of trust information, The data acquisition device is Based on the multiple trust information specified in the trust settings, identification information of the specified trust information is sequentially assigned to the trust data. The aforementioned trust connector is A trust linkage system characterized by extracting identification information from the trust data, sequentially selecting the trust verification device corresponding to the identification information and requesting the verification, and repeating the verification for multiple trust information specified in the trust settings.

4. A trust linkage system according to claim 1, The aforementioned trust connector is The trust granting device receives an addition or modification of the trust information and updates the granting function list that manages the trust granting device. A trust linkage system characterized by receiving additions or changes to the trust information from the trust verification device and updating the verification function list that manages the trust verification device.

5. A trust linkage system according to claim 1, The aforementioned trust setting is, A trust linkage system characterized in that the trust information assigned to the data by the data collection device and the identification information of the trust information verified by the trust verification device are specified by the business device.

6. A trust linkage method that links data reliability between a data acquisition device, a trust connector, and a business device connected via a network, The data acquisition device collects the data and requests a trust information assignment device to assign predetermined trust information to the data according to a pre-set trust setting; The data acquisition device transmits the data to the trust connector as trust data in the trust data transmission step, The trust connector receives the trust data, extracts the trust information contained in the trust data, and requests verification from the trust verification device, in a trust information verification step, The trust connector receives the verification result, and if the verification result is valid, it adds a predetermined connector signature to the data extracted from the trust data, generates transfer data, and sends it to the business device in a transfer data transmission step. The aforementioned business device receives the transfer data, extracts the connector signature contained in the transfer data, verifies that the connector signature is valid, and if it is a valid connector signature, extracts the data contained in the transfer data and performs a predetermined process; A trust linkage method characterized by including [a certain element].

7. A trust linkage method according to claim 6, The aforementioned step of assigning trust information is: From among a plurality of trust granting devices capable of assigning multiple types of trust information, the trust granting device is selected based on the trust information specified in the trust setting. The aforementioned trust data transmission step is: The trust information identification information specified in the trust settings is added to the trust data and transmitted. The aforementioned trust information verification step is, A trust linkage method characterized by selecting a trust verification device corresponding to the identification information of the trust data from among a plurality of trust verification devices capable of verifying multiple types of trust information, and requesting verification.

8. A trust linkage method according to claim 6, The aforementioned step of assigning trust information is: From among a plurality of trust granting devices capable of assigning multiple types of trust information, the trust granting devices are sequentially selected based on the plurality of trust information specified in the trust settings. The aforementioned trust data transmission step is: The trust information identification information specified in the trust settings is added to the trust data and transmitted sequentially. The aforementioned trust information verification step is, A trust linkage method characterized by sequentially selecting a trust verification device corresponding to the identification information of the trust data from among a plurality of trust verification devices capable of verifying a plurality of types of the trust information, requesting the verification, and repeating the verification for a plurality of trust information specified in the trust settings.

9. A trust linkage method according to claim 6, The trust connector receives an addition or modification of the trust information from the trust granting device and updates the granting function list, which manages the trust granting device, in a granting function list update step. A trust linkage method characterized in that the trust connector receives additions or changes to the trust information from the trust verification device and updates the verification function list that manages the trust verification device.

10. A trust linkage method according to claim 6, The trust setting is a trust linkage method characterized in that the trust information assigned to the data by the data acquisition device and the identification information of the trust information verified by the trust verification device are specified by the business device.

11. A trust connector having a processor and memory, The system receives trust data to which predetermined trust information has been attached, extracts the trust information contained in the trust data, requests verification from a trust verification device corresponding to the trust information, and if the verification result is valid, attaches a predetermined signature to the data extracted from the trust data, generates transfer data, and outputs it. A trust connector characterized by extracting identification information of the trust data, selecting the trust verification device corresponding to the identification information from among a plurality of trust verification devices capable of verifying multiple types of trust information, and requesting the verification.

12. A trust connector having a processor and memory, The system receives trust data to which predetermined trust information has been attached, extracts the trust information contained in the trust data, requests verification from a trust verification device corresponding to the trust information, and if the verification result is valid, attaches a predetermined signature to the data extracted from the trust data, generates transfer data, and outputs it. A trust connector characterized by extracting identification information for the trust data, selecting the trust verification device corresponding to the identification information from among multiple trust verification devices capable of verifying multiple types of trust information, and repeatedly requesting the verification for each piece of trust data.

13. A trust connector having a processor and memory, The system receives trust data to which predetermined trust information has been attached, extracts the trust information contained in the trust data, requests verification from a trust verification device corresponding to the trust information, and if the verification result is valid, attaches a predetermined signature to the data extracted from the trust data, generates transfer data, and outputs it. Upon receiving the addition or modification of the aforementioned trust information, the list of grant functions that manages the trust granting device is updated. A trust connector characterized by accepting additions or changes to the aforementioned trust information and updating the verification function list that manages the trust verification device.

Images