Testing system, testing method, and testing program

Abstract

An inspection system (10) includes an equipment information transmission device (20) and an inspection processing device (30). The equipment information transmission device (20) includes a first ID assignment unit (22a) and a transmission unit (22b). The inspection processing device (30) includes a second ID assignment unit (32a), a computation unit (32b), and a display unit (32c). The first ID assignment unit (22a) assigns respective IDs to equipment to be inspected and configuration information thereof. The transmission unit (22b) encrypts and transmits the assigned IDs to the inspection processing device (30). The second ID assignment unit (32a) assigns an ID for security risk information to be used in an inspection. The computation unit (32b) finds a feature shared by the ID for the encrypted configuration information and the ID for the security risk information. The display unit (32c) displays an inspection result corresponding to an inputted equipment ID.

Description

Technical Field

[0001] The present invention relates to an inspection system, an inspection method, and an inspection program.

Background Art

[0002] Today, due to the emergence and sophistication of cyberattacks targeting the weaknesses of the supply chain, risk management has become even more important when companies use IoT devices. Therefore, companies need to inspect the IoT devices they use for the presence or absence of software and hardware vulnerabilities, malware infections, and the like.

[0003] Therefore, as technologies related to the inspection of IoT devices, there are technologies that list software dependencies and components and detect defects such as vulnerabilities and bugs at an early stage (see, for example, Non-Patent Document 1), and technologies that prepare in advance data that serves as an indicator of malware infection and check for its presence to inspect for malware infection (see, for example, Non-Patent Document 2), which are known as conventional technologies.

Prior Art Documents

Non-Patent Documents

[0004]

Non-Patent Document 1

Non-Patent Document 2

[0005] However, the conventional technologies described above had a problem: when user information was transmitted externally for remote inspection, there was a risk that the information could be unintentionally leaked externally due to security breaches by attackers or internal fraud. [Means for solving the problem]

[0006] To solve the above-mentioned problems and achieve the objective, the present invention provides an inspection system comprising a device information transmission device and an inspection processing device, wherein the device information transmission device includes a first ID assignment unit that assigns IDs to the device to be inspected and its configuration information, and a transmission unit that encrypts the assigned IDs and transmits them to the inspection processing device, and the inspection processing device includes a second ID assignment unit that assigns IDs to security risk information used for inspection, a calculation unit that finds common terms between the IDs for the encrypted configuration information and the IDs for the security risk information, and a display unit that displays the inspection results corresponding to the input device IDs. [Effects of the Invention]

[0007] According to the present invention, even when user information is transmitted externally and inspections are conducted remotely, security inspections can be performed while avoiding the risk of information leakage. [Brief explanation of the drawing]

[0008] [Figure 1] Figure 1 is a diagram showing an overview of the inspection process, including the inspection system according to the embodiment. [Figure 2] Figure 2 is a block diagram showing the configuration of the inspection system according to the embodiment. [Figure 3] Figure 3 shows a specific example of the configuration information of the device according to the embodiment. [Figure 4]Figure 4 shows a specific example of security risk information according to the embodiment. [Figure 5] Figure 5 is a diagram illustrating the overview of the processing of dividing a set of IDs for security risk information by the calculation unit according to the embodiment. [Figure 6] Figure 6 shows a specific example of the inspection process according to the embodiment. [Figure 7] Figure 7 is a flowchart showing the flow of information processing by the equipment information transmission device in the inspection system according to the embodiment. [Figure 8] Figure 8 is a flowchart showing the flow of information processing by the inspection processing device in the inspection system according to the embodiment. [Figure 9] Figure 9 shows an example of a computer running the inspection program. [Modes for carrying out the invention]

[0009] The embodiments of the inspection system, inspection method, and inspection program relating to this application will be described in detail below with reference to the drawings. However, these embodiments do not limit the inspection system, inspection method, and inspection program relating to this application.

[0010] [1. Example of system configuration] Figure 1 is a diagram showing an overview of the inspection process, including the inspection system according to this embodiment. In the system shown in Figure 1, there are inspection users who manufacture IoT devices, inspectors who inspect those devices, and inspection result verifiers who are the recipients of the IoT devices. The inspection system 10 consists of a device information transmission device 20 into which the inspection user inputs information about the IoT device, and an inspection processing device 30 into which the inspector inputs security risk information.

[0011] The inspection system 10 comprises a device information transmission device 20 and an inspection processing device 30. The device information transmission device 20 assigns an ID to the input device to be inspected and its configuration information, encrypts the assigned IDs, and transmits them to the inspection processing device 30. The inspection processing device 30 also assigns an ID to the input security risk information and finds commonalities between the ID assigned to the security risk information and the ID of the received device to be inspected configuration information. Furthermore, the inspection processing device 30 displays the corresponding inspection result upon input of the device ID.

[0012] The device information transmission device 20 assigns an ID to the device to be inspected and its configuration information, which have been input. For example, the device information transmission device 20 assigns an ID to each of the IoT device to be inspected and its configuration information, which have been input by the inspection user, so that each piece of information can be uniquely identified. The device information transmission device 20 then encrypts the assigned ID and transmits it to the inspection processing device 30. For example, the device information transmission device 20 encrypts the ID assigned to the configuration information of the device to be inspected and transmits it to the inspection processing device 30.

[0013] The inspection processing device 30 assigns an ID to the input security risk information. For example, the inspection processing device 30 assigns an ID to each piece of security risk information, such as vulnerability information and malware information, that can be uniquely identified, based on the information entered by the inspector.

[0014] Subsequently, the inspection processing device 30 finds commonalities between the IDs assigned to the security risk information and the IDs for the configuration information of the received equipment under inspection. For example, the inspection processing device 30 finds commonalities between the set of IDs for the encrypted configuration information and the set of IDs for the security risk information, while keeping them encrypted. The inspection processing device 30 also displays the corresponding inspection results based on the input of the equipment ID. For example, the inspection processing device 30 displays the inspection results for the equipment based on the input of the equipment ID by the inspection user or the person verifying the inspection results.

[0015] [2. Configuration of the Inspection System 10] Next, referring to FIG. 2, the configuration of the inspection system 10 shown in FIG. 1 will be described. FIG. 2 is a diagram showing a configuration example of the inspection system according to the embodiment. As shown in FIG. 2, the inspection system 10 according to the embodiment includes a device information transmission device 20 and an inspection processing device 30.

[0016] The device information transmission device 20 includes a communication unit 21, a control unit 22, and a storage unit 23, and the inspection processing device 30 includes a communication unit 31, a control unit 32, and a storage unit 33. Further, the device information transmission device 20 and the inspection processing device 30 are communicably connected to each other by wire or wirelessly.

[0017] The communication unit 21 and the communication unit 31 are realized, for example, by a NIC (Network Interface Card) or the like. The communication unit 21 and the communication unit 31 are connected to the device information transmission device 20 or the inspection processing device 30 by wire or wirelessly, and transmit and receive information with the device information transmission device 20 or the inspection processing device 30.

[0018] The storage unit 23 and the storage unit 33 are realized, for example, by a storage device such as a RAM (Random Access Memory) or a hard disk. The storage unit 23 and the storage unit 33 store data and programs necessary for various processes by the control unit 22 or the control unit 32. And the storage unit 23 of the device information transmission device 20 has a device information storage unit 23a as being closely related to the present invention.

[0019] The device information storage unit 23a stores the IDs assigned to the devices to be inspected and their configuration information by a first ID assignment unit 22a described later. For example, the device information storage unit 13a stores the IDs assigned to the information of the IoT devices to be inspected input from the outside so that the devices and their configuration information can be uniquely identified.

[0020] Furthermore, the storage unit 33 of the inspection processing device 30, which is closely related to the present invention, includes a received information storage unit 33a, a security risk information storage unit 33b, and an inspection result information storage unit 33c. The received information storage unit 33a stores information that is transmitted by the transmission unit 22b (described later) and received by the inspection processing device 30. For example, the received information storage unit 33a stores encrypted IDs assigned to the equipment to be inspected and IDs assigned to its configuration information, which are received by the inspection processing device 30.

[0021] The security risk information storage unit 33b stores information about vulnerabilities, scores representing their severity, and information about malware, which are used in the inspection process. For example, the security risk information storage unit 33b stores information about vulnerabilities, scores representing their severity, and information about malware, which are stored in the security risk information database held by the inspector, by external storage.

[0022] The inspection result information storage unit 33c stores the inspection results calculated by the calculation unit 32b, which will be described later. For example, the inspection result information storage unit 33c stores inspection results such as commonalities and the number of commonalities between the configuration information ID and the security risk information ID, which will be calculated by the calculation unit 32b, which will be described later, in association with the ID of the device being inspected.

[0023] Control units 22 and 32 are implemented by a CPU (Central Processing Unit) or MPU (Micro Processing Unit), etc., which executes various programs stored in the internal memory of each device using RAM as the working area. Control units 22 and 32 are also implemented by integrated circuits such as ASICs (Application Specific Integrated Circuits) or FPGAs (Field Programmable Gate Arrays).

[0024] The control unit 22 of the device information transmission device 20 has a first ID assignment unit 22a and a transmission unit 22b. The first ID assignment unit 22a assigns an ID to the device to be inspected and its configuration information, respectively. For example, the first ID assignment unit 22a assigns an ID to the device to be inspected, which is input from an external source, by assigning a serial number or an ID that can physically identify the device, thereby assigning an ID that can uniquely identify the device.

[0025] Furthermore, the first ID assignment unit 22a assigns an ID that can uniquely identify each piece of information, for example, according to the type of configuration information of the equipment to be inspected that is input from an external source. If the first ID assignment unit 22a finds a duplicate when assigning an ID, it excludes that ID.

[0026] Now, referring to Figure 3, the process by which the first ID assignment unit 22a assigns an ID to the configuration information will be explained. Figure 3 is a diagram showing a specific example of the configuration information of a device according to the embodiment. In Figure 3, three types of configuration information for the device to be inspected are shown: "app" indicating the application, "file / hash" indicating the file hash, and "file / name" indicating the file name.

[0027] The first ID assignment unit 22a assigns an ID that is a hashed value obtained by combining the app name and version, if the configuration information is "app". In other words, "id1" in Figure 3 is a hashed value obtained by combining the app name "A" and the version "1.0".

[0028] Next, if the configuration information is "file / hash", the first ID assignment unit 22a assigns the file hash value directly as the ID. In other words, "id4" in Figure 3 is the file hash value "1111aaaa". Then, if the configuration information is "file / name", the first ID assignment unit 22a assigns the hashed value of the file name as the ID. In other words, "id6" in Figure 3 is the hashed value of the file name "Malware.exe".

[0029] The transmission unit 22b encrypts the assigned ID and transmits it to the inspection processing device. For example, the transmission unit 22b encrypts the ID for the device configuration information assigned by the first ID assignment unit 22a described above, and transmits the ID for the device and the encrypted ID for the configuration information to the inspection processing device 30.

[0030] The control unit 32 of the inspection processing device 30 includes a second ID assignment unit 32a, a calculation unit 32b, and a display unit 32c. The second ID assignment unit 32a assigns an ID to the security risk information used for inspection. The second ID assignment unit 32a then notifies the calculation unit 32b, which will be described later, of the ID it has assigned.

[0031] For example, the second ID assignment unit 32a assigns an ID that can uniquely identify security risk information, such as vulnerability information and IOC (Indicator of Compromise) information regarding malware, which is input from an external source and used for inspection, and notifies the calculation unit 32b of this ID.

[0032] Now, referring to Figure 4, the process by which the second ID assignment unit 32a assigns an ID to security risk information will be explained. Figure 4 is a diagram showing a specific example of security risk information according to the embodiment. In Figure 4, three types of security risk information are shown: "app" indicating an application, "file / hash" indicating a file hash, and "file / name" indicating a file name.

[0033] The second ID assignment unit 32a assigns an ID that is a hashed value obtained by combining the app name and version, if the type of risk related to the vulnerability information is "app". In other words, "id1" in Figure 4 is a hashed value obtained by combining the app name "A" and the version "1.0".

[0034] Next, the second ID assignment unit 32a assigns the file hash value as the ID if the type of risk related to the malware information is "file / hash". In other words, "id4" in Figure 4 is the file hash value "1111aaaa". Then, the second ID assignment unit 32a assigns the hashed value of the file name as the ID if the type of risk related to the malware information is "file / name". In other words, "id6" in Figure 4 is the hashed value of the file name "Malware.exe".

[0035] The calculation unit 32b finds commonalities between the IDs for the encrypted configuration information and the IDs for the security risk information. For example, the calculation unit 32b finds commonalities between the set of IDs for the encrypted configuration information transmitted from the device information transmission device 20, stored in the received information storage unit 33a, and the set of IDs for the security risk information notified by the second ID assignment unit 32a, while keeping them encrypted.

[0036] The arithmetic unit 32b may also determine the number of common terms between the IDs for the encrypted configuration information and the IDs for the security risk information. For example, the arithmetic unit 32b may determine the number of common terms between the set of IDs for the encrypted configuration information and the set of IDs for the security risk information.

[0037] Furthermore, the arithmetic unit 32b may divide the set of IDs for encrypted configuration information or the set of IDs for security risk information into any number of sets, and for each of the divided sets, find commonalities between the IDs for encrypted configuration information and the IDs for security risk information.

[0038] For example, if the set of IDs for encrypted configuration information or the set of IDs for security risk information has a significantly large number of elements, the arithmetic unit 32b divides the set of IDs into any number of parts and performs the aforementioned calculation of common terms for each of the divided parts.

[0039] Here, referring to Figure 5, the processing by the arithmetic unit 32b to divide a set of IDs for device configuration information or a set of IDs for security risk information will be explained. Figure 5 is a diagram showing an overview of the processing by the arithmetic unit according to the embodiment to divide a set of IDs for security risk information.

[0040] In the example shown in Figure 5, the set of IDs for encrypted configuration information is denoted as X, and the set of IDs for security risk information is denoted as Y. The calculation unit 32b finds the common elements of X and Y. However, if the number of elements in set X or Y is extremely large, finding the common elements requires a significant amount of processing time and consumes resources. Therefore, in such cases, to find the common elements efficiently and with relatively little resource consumption, a partitioning process is performed on X or Y.

[0041] In the example in Figure 5, the number of unique elements in set Y is extremely large. First, the arithmetic unit 32b divides set Y into an arbitrary N sets, named "Y1, Y2, ...". Then, for each of the divided subsets "Y1, Y2, ...", the arithmetic unit 32b calculates the number of common terms with set X and extracts the subsets with a common term count of 1 or more. In the example in Figure 5, set Y is divided into two sets, and both of the divided subsets "Y1" and "Y2" have a common term count of 1 or more.

[0042] Subsequently, for example, the arithmetic unit 32b repeatedly performs the aforementioned series of processes on the extracted subsets until the number of unique elements in the subsets falls below a predetermined threshold. In the example in Figure 5, the extracted subsets "Y1" and "Y2" are similarly divided into two sets, becoming subsets "Y11", "Y12", "Y21", and "Y22". Among these, "Y11" and "Y22" are selected because they have one or more common elements. However, since the number of unique elements in subsets "Y11" and "Y22" falls below a predetermined threshold, the arithmetic unit 32b terminates the division process.

[0043] Furthermore, the arithmetic unit 32b may find commonalities between the ID of the security risk information narrowed down by information regarding the severity of the vulnerability and the ID of the encrypted configuration information.

[0044] For example, in order to reduce the processing time and resource consumption of the process of finding commonalities, the arithmetic unit 32b refers to the CVSS (Common Vulnerability Scoring System), which is a score representing the severity of vulnerabilities, stored in the security risk information storage unit 33b, to narrow down the IDs of the security risk information to be matched, and finds commonalities with the IDs of the encrypted configuration information.

[0045] The display unit 32c displays the inspection result corresponding to the input device ID. For example, for a device ID input from an external source, the display unit 32c displays the inspection result associated with that ID, which is stored in the inspection result information storage unit 33c.

[0046] [3. Specific examples of inspection procedures] Here, the inspection process for equipment configuration information by the inspection system 10 will be explained using the example in Figure 6. Figure 6 is a diagram showing a specific example of the inspection process according to the embodiment. The upper part of Figure 6 shows the configuration information of the equipment to be inspected and the ID assigned to it, and the lower part of Figure 6 shows security risk information and the ID assigned to it.

[0047] The calculation unit 32b finds commonalities between the set of IDs X for the encrypted configuration information and the set of IDs Y for security risk information. For example, when the calculation unit 32b is checking for vulnerability information, it extracts IDs where the type of configuration information and the type of risk information are "app" and finds commonalities.

[0048] In other words, in the example in Figure 6, X = {id1, id2, id3} and Y = {id1, id3}, and their common term X ∩ Y = {id1, id3}. Therefore, the test results reveal that the device under test has vulnerabilities, and these vulnerabilities relate to "CVE-2022-XXXX" and "CVE-2022-YYYY".

[0049] Furthermore, when the calculation unit examines information regarding malware infection, it extracts IDs where the configuration information type and risk information type are "file / *" and finds a common term. In other words, in the example in Figure 6, X={id4, id5, id6, id7} and Y={id4, id6, id9}, and their common term X∩Y={id4, id6}. Therefore, the examination results clearly indicate that the device being examined is suspected of being infected with malware.

[0050] Furthermore, the arithmetic unit 32b uses a mechanism such as a secure common set operation to find common terms, and the transmission unit 22b transmits the ID of the configuration information of the device to be inspected to the inspection processing device 30 in the form of an encrypted function "F(x)=(x-id1)(x-id2)...".

[0051] Then, the arithmetic unit 32b substitutes the ID for the security risk information into the aforementioned F(x). If they match, the return value is "0," allowing only the common IDs to be obtained. On the other hand, since F(x) is encrypted, the configuration information for the parts that do not match will not be revealed.

[0052] [4. An example of the inspection process of the inspection system] Next, the inspection process of the inspection system 10 will be described using Figures 7 and 8. Figure 7 is a flowchart showing the flow of information processing by the equipment information transmission device in the inspection system according to the embodiment, and Figure 8 is a flowchart showing the flow of information processing by the inspection processing device in the inspection system according to the embodiment.

[0053] First, the processing of the device information transmission device 20 will be explained with reference to Figure 7. The device information transmission device 20 receives the device to be inspected and its configuration information (step S101). If the device information transmission device 20 receives the device to be inspected and its configuration information (step S101; Yes), the first ID assignment unit 22a assigns an ID to the device to be inspected and its configuration information, respectively (step S102).

[0054] On the other hand, if the device information transmission device 20 has not received the device to be inspected and its configuration information (step S101; No), the device information transmission device 20 waits until it receives the device to be inspected and its configuration information. Then, the transmission unit 22b encrypts the assigned ID and transmits it to the inspection processing device 30 (step S103).

[0055] Next, with reference to Figure 8, the processing of the inspection processing device 30 will be described. The inspection processing device 30 receives security risk information (step S201). If the inspection processing device 30 receives security risk information (step S201; Yes), the second ID assignment unit 32a assigns an ID to the security risk information (step S202).

[0056] On the other hand, if the inspection processing device 30 has not received security risk information (step S201; No), the inspection processing device 30 waits until it receives security risk information. Then, the inspection processing device 30 receives an encrypted ID from the device information transmission device 20 (step S203). If the inspection processing device 30 has received an encrypted ID from the device information transmission device 20 (step S203; Yes), the calculation unit 32b finds the commonality between the ID for the configuration information and the ID for the security risk information (step S204).

[0057] On the other hand, if the inspection processing device 30 has not received an encrypted ID from the device information transmission device 20 (step S203; No), the inspection processing device 30 waits until it receives an encrypted ID from the device information transmission device 20. Thereafter, the display unit 32c displays the inspection result corresponding to the input device ID (step S205).

[0058] [5. Effects of the Embodiment] As described above, the inspection system 10 according to this embodiment includes an equipment information transmission device 20 and an inspection processing device 30. The equipment information transmission device 20 includes a first ID assignment unit 22a that assigns an ID to the equipment to be inspected and its configuration information, and a transmission unit 22b that encrypts the assigned ID and transmits it to the inspection processing device 30.

[0059] Furthermore, the inspection processing device 30 includes a second ID assignment unit 32a that assigns an ID to the security risk information used for inspection, a calculation unit 32b that finds commonalities between the ID for encrypted configuration information and the ID for security risk information, and a display unit 32c that displays the inspection result corresponding to the input device ID.

[0060] As a result, the inspection system 10 encrypts the configuration information of the equipment to be inspected and transmits it to the inspection processing device 30. Since the inspection is performed while the information remains encrypted, even when user information is transmitted externally to perform the inspection remotely, the risk of information leakage can be avoided, and security inspections can be conducted.

[0061] Furthermore, the calculation unit 32b of the inspection system 10 determines the number of common terms between the ID of the encrypted configuration information and the ID of the security risk information. By determining the number of common terms, the inspection system 10 prevents the inspector from learning the configuration information from the ID of the common term obtained through the inspection process, thereby enabling the security inspection to be conducted.

[0062] Furthermore, the calculation unit 32b of the inspection system 10 divides the set of IDs for encrypted configuration information or the set of IDs for security risk information into any number of sets, and for each of the divided sets, it finds commonalities between the IDs for encrypted configuration information and the IDs for security risk information.

[0063] As a result, the inspection system 10 has the effect of being able to perform security inspections in a relatively short time and with low resource consumption, even when the number of elements in the set is extremely large, in the process of finding commonalities.

[0064] Furthermore, the calculation unit 32b of the inspection system 10 finds commonalities between the ID of the security risk information narrowed down by the information on the severity of the vulnerability and the ID of the encrypted configuration information.

[0065] As a result, the inspection system 10, in the process of finding commonalities, can perform security inspections in a relatively short time and with less resource consumption, even when the set of IDs for security risk information has a significantly large number of elements, by narrowing down the IDs for security risk information to be matched.

[0066] [6. System Configuration, etc.] Of the processes described in the above embodiments, some of those described as being performed automatically can be performed manually. Alternatively, all or part of the processes described as being performed manually can be performed automatically by known methods. In addition, the processing procedures, specific names, and various data and parameters shown in the above document and drawings can be changed at will unless otherwise specified. For example, the various information shown in each figure is not limited to the information shown.

[0067] Furthermore, the components of each illustrated device are functionally conceptual and do not necessarily need to be physically configured as shown. In other words, the specific forms of distribution and integration of each device are not limited to those shown, and all or part of them can be functionally or physically distributed and integrated in any unit according to various loads and usage conditions. Moreover, each processing function performed by each device can be implemented, in whole or in any part, by a CPU and the program that is analyzed and executed by that CPU, or by hardware using wired logic.

[0068] For example, part or all of the storage unit 23 or storage unit 33 shown in Figure 2 may be stored in a storage server or the like, rather than being held by the equipment information transmission device 20 or inspection processing device 30 of the inspection system 10. In this case, the equipment information transmission device 20 or inspection processing device 30 acquires various information by accessing the storage server.

[0069] [7. Hardware Configuration] Figure 9 shows an example of a hardware configuration. The equipment information transmission device 20 and inspection processing device 30 of the inspection system 10 according to the above embodiment are realized by a computer 1000 with a configuration such as that shown in Figure 9.

[0070] Figure 9 shows an example of a computer running a test program. Computer 1000 has, for example, memory 1010 and a CPU 1020. Computer 1000 also has a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These components are connected by a bus 1080.

[0071] Memory 1010 includes ROM (Read Only Memory) 1011 and RAM 1012. ROM 1011 stores, for example, a boot program such as BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090. The disk drive interface 1040 is connected to the disk drive 1100. For example, a removable storage medium such as a magnetic disk or optical disk is inserted into the disk drive 1100. The serial port interface 1050 is connected to, for example, a mouse 1110 and a keyboard 1120. The video adapter 1060 is connected to, for example, a display 1130.

[0072] The hard disk drive 1090 stores, for example, an OS (Operating System) 1091, an application program 1092, a program module 1093, and program data 1094. That is, the programs that define each process of the device information transmission device 20 or the inspection processing device 30 are implemented as program modules 1093 in which code executable by the computer 1000 is written. The program modules 1093 are stored, for example, in the hard disk drive 1090. For example, a program module 1093 for performing processes similar to the functional configuration of the device information transmission device 20 or the inspection processing device 30 is stored in the hard disk drive 1090. Note that the hard disk drive 1090 may be replaced by an SSD (Solid State Drive).

[0073] Furthermore, the configuration data used in the processing of the above-described embodiment is stored as program data 1094 in, for example, memory 1010 or hard disk drive 1090. The CPU 1020 then reads the program module 1093 and program data 1094 stored in memory 1010 or hard disk drive 1090 into RAM 1012 as needed and executes them.

[0074] Furthermore, the program module 1093 and program data 1094 are not limited to being stored in the hard disk drive 1090; for example, they may be stored in a removable storage medium and read by the CPU 1020 via a disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 may be stored in another computer connected via a network (LAN, WAN, etc.). The program module 1093 and program data 1094 may then be read by the CPU 1020 from the other computer via a network interface 1070. [Explanation of symbols]

[0075] 10 Inspection Systems 20. Equipment Information Transmission Device 21, 31 Communications Department 22, 32 Control Unit 22a First ID assignment unit 22b Transmitter 23, 33 Storage section 23a Device information storage section 32a Second ID assignment unit 32b Arithmetic unit 32c Display section 33a Received information storage unit 33b Security Risk Information Storage Unit 33c Inspection Result Information Storage Unit

Claims

1. An inspection system having an equipment information transmission device and an inspection processing device, The aforementioned equipment information transmission device is A first ID assignment unit assigns an ID to the equipment to be inspected and its configuration information, It has a transmission unit that encrypts the assigned ID and transmits it to the inspection processing device, The aforementioned inspection processing device is A second ID assignment unit assigns an ID to the security risk information used for inspection, A calculation unit that finds commonalities between the ID for encrypted configuration information and the ID for security risk information, It has a display unit that displays the inspection result corresponding to the entered device ID. An inspection system characterized by the following features.

2. The calculation unit determines the number of common terms between the ID for encrypted configuration information and the ID for security risk information. The inspection system according to feature 1.

3. The calculation unit divides the set of IDs for the encrypted configuration information or the set of IDs for the security risk information into any number of sets, and for each of the divided sets, it finds commonalities between the IDs for the encrypted configuration information and the IDs for the security risk information. The inspection system according to feature 1.

4. The calculation unit finds commonalities between the ID of the security risk information, which has been narrowed down by information regarding the severity of the vulnerability, and the ID of the encrypted configuration information. The inspection system according to feature 1.

5. An inspection method performed in an inspection system having an equipment information transmission device and an inspection processing device, The aforementioned equipment information transmission device is The first ID assignment step involves assigning an ID to the equipment to be inspected and its configuration information, The process includes a transmission step of encrypting the assigned ID and transmitting it to the inspection processing device, The aforementioned inspection processing device is A second ID assignment process involves assigning an ID to the security risk information used for inspection, A calculation process to find commonalities between the ID for encrypted configuration information and the ID for security risk information, Includes a display step that shows the inspection result corresponding to the entered device ID. A testing method characterized by the following features.

6. A test program that causes a computer to execute a method, A computer as a device information transmission device, The first ID assignment step involves assigning an ID to the equipment to be inspected and its configuration information, A transmission step which encrypts the assigned ID and sends it to a computer acting as an inspection processing device. Make it run, The computer used as the inspection processing device, A second ID assignment step involves assigning an ID to the security risk information used for inspection, A calculation step to find the commonalities between the ID for encrypted configuration information and the ID for security risk information, A display step that displays the test result corresponding to the entered device ID. An inspection program characterized by causing the program to execute.

Images