Information processing device and information processing system

Abstract

To provide an information processing apparatus and an information processing system that, even when a security attack is made on an edge device installed in a shop, can reduce the influence of the security attack on the other devices.SOLUTION: An information processing apparatus of an embodiment is connected to a plurality of devices provided in a shop via a network, and the information processing apparatus comprises first transmission means and cut-off means. The first transmission means transmits, to the plurality of devices, first information for requesting to check a state related to security. When second transmission means detects an abnormality in the security on the basis of second information returned from the plurality of devices in correspondence with the first information, the second transmission means cuts off the device in which the abnormality is detected, from the network.SELECTED DRAWING: Figure 7

Description

Technical Field

[0001] Embodiments of the present invention relate to an information processing apparatus and an information processing system.

Background Art

[0002] Conventionally, there has been a cloud POS (Point Of Sale) system using a cloud server. In such a cloud POS system, a service is deployed that enables registering products from electronic devices (e.g., tablet terminals, smartphones, etc.) installed in a store to the cloud POS system and performing settlement processing of the products via the cloud POS system.

[0003] In addition, a plurality of devices (hereinafter also referred to as edge devices) for operating the store are installed in the store. For example, a printer for printing information on a receipt regarding settlement processing of products is installed in the store. The operation status of the edge devices is managed by a server installed in the store (hereinafter also referred to as an edge server). Further, the cloud POS system is connected via a communication line to the edge devices and the edge server installed in the store.

[0004] By the way, when the edge device is subjected to a security attack from the outside, since the edge device is connected to the cloud POS system via a communication line, the cloud POS system may also be affected by the security attack. As a result, there may be a case where a customer cannot perform settlement processing on the registered products.

Summary of the Invention

Problems to be Solved by the Invention

[0005] The problem to be solved by the present invention is to provide an information processing apparatus and an information processing system capable of reducing the influence of a security attack on other devices even when an edge device installed in a store is subjected to a security attack. [Means for solving the problem]

[0006] The information processing device of the embodiment is installed in a store. It is configured with a redundant relationship between the active system and the standby system. An information processing device connected to multiple devices via a network, comprising a first transmission means and a blocking means. The first transmission means connects to multiple devices Each of the operational devices within The first transmission means sends a request for a security status check. The second transmission means responds to the first information. Operating devices Based on the second piece of information returned, if a security anomaly is detected, the anomaly will be detected. Operating devices Blocked from the network Then, the active device that detected the anomaly and the redundant standby device are connected to the network. [Brief explanation of the drawing]

[0007] [Figure 1] Figure 1 is a schematic diagram showing an example of an information processing system according to this embodiment. [Figure 2] Figure 2 is a block diagram showing an example of the hardware configuration of a cloud server according to this embodiment. [Figure 3] Figure 3 is a block diagram showing an example of the hardware configuration of an edge server according to this embodiment. [Figure 4] Figure 4 is a block diagram showing an example of the hardware configuration of a tablet terminal according to this embodiment. [Figure 5] Figure 5 is a block diagram showing an example of the hardware configuration of the printer according to this embodiment. [Figure 6] Figure 6 is a block diagram showing an example of the functional configuration of the printer according to this embodiment. [Figure 7] Figure 7 is a block diagram showing an example of the functional configuration of the edge server according to this embodiment. [Figure 8] Figure 8 is a block diagram showing an example of the functional configuration of the cloud server according to this embodiment. [Figure 9] Figure 9 is a block diagram showing an example of the functional configuration of a tablet terminal according to this embodiment. [Figure 10]Figure 10 is a sequence diagram showing an example of the control process of the information processing system according to this embodiment. [Figure 11] Figure 11 is a block diagram showing an example of an information processing system related to the first modified example. [Modes for carrying out the invention]

[0008] Hereinafter, embodiments of the information processing device and information processing system will be described with reference to the attached drawings. In the embodiments described below, an edge server will be described as an example of an information processing device. Note that these embodiments are just one example of an information processing device and information processing system, and their configurations and functions are not intended to limit the invention.

[0009] Figure 1 is a schematic diagram showing an example of an information processing system 10 according to this embodiment. The information processing system 10 is a system comprising a cloud server 1, an edge server 2, and an edge device 3.

[0010] Cloud Server 1 is a server that, for example, performs product registration and payment processing for products sold in stores. Cloud Server 1 consists of one or more computers. Cloud Server 1 receives and manages customer information 143 (see Figure 2) from tablet terminals 311 in each store. Customer information 143 includes various information such as customer names and customer IDs (Identification) used to identify customers.

[0011] Furthermore, the cloud server 1 reads barcodes and other symbols attached to products by the tablet terminals 311 in each store, and registers product information such as the product name and price based on the product code that identifies the product associated with the symbol. Then, based on the product information of the registered products, the cloud server 1 outputs the total amount and change amount related to the transaction with the customer to the tablet terminal 311 and processes the payment.

[0012] In other words, the cloud server 1 is a server that, via the communication line 4, can receive shipping registration information indicating the product registration process from the tablet terminal 311 and send print information 146 (see Figure 2) to the tablet terminal 311. Furthermore, the cloud server 1 is connected to the edge servers 2 and edge devices 3 of each store via the communication line 4, which is, for example, a dedicated line or an internet line.

[0013] Edge Server 2 is a server connected to multiple devices installed in the store via a network. Edge Server 2 is, for example, a store server that connects to and manages multiple edge devices 3 installed in the store. Edge Server 2 is also connected to Cloud Server 1 via, for example, a communication line 4. Furthermore, Edge Server 2 is connected to multiple edge devices 3 in the store via, for example, a communication line 5 such as a LAN (Local Area Network).

[0014] Multiple edge devices 3 are devices installed in a store. Each edge device 3 connects to, for example, cloud server 1 and edge server 2. Edge device 3 is an example of a device. Multiple edge devices 3 include, for example, a tablet terminal 311, a first printer 711, and a second printer 712. The tablet terminal 311 is connected to cloud server 1, for example, via a communication line 4. Furthermore, multiple edge devices 3 are connected to edge server 2, for example, via a communication line 5. Hereafter, the first printer 711 and the second printer 712 will be collectively referred to simply as printers.

[0015] The tablet terminal 311 executes product registration processing for products sold in the store. The product registration processing includes reading a symbol attached to a product, calling and displaying product information such as the product name and price of the product based on a product code that identifies the product associated with the symbol, and storing it in the memory 34 (see FIG. 4). Further, the tablet terminal 311 outputs print information 333 indicating information for printing on a receipt corresponding to product sales information 145 indicating information related to settlement processing to either the first printer 711 or the second printer 712.

[0016] The printer issues a receipt or slip on which print information 731 indicating product information of the product processed for product registration and product sales information 145 indicating information related to settlement processing is printed. The first printer 711 is a printer provided as an operating system for the process of issuing the print information 333 output by the tablet terminal 311. The second printer 712 is a printer provided as a standby system for the process of issuing the print information 333 output by the tablet terminal 311 in place of the process of the first printer 711 when the first printer 711 is not operating. That is, the first printer 711 and the second printer 712 are configured in a redundant relationship by an operating system and a standby system.

[0017] Next, the hardware configuration of the cloud server 1 will be described using FIG. 2. FIG. 2 is a block diagram showing an example of the hardware configuration of the cloud server 1 according to the present embodiment. As shown in FIG. 2, the cloud server 1 includes a CPU (Central Processing Unit) 11, a ROM (Read Only Memory) 12, a RAM (Random Access Memory) 13, and a memory 14. The CPU 11 serves as a control entity. The ROM 12 stores various programs. The RAM 13 expands programs and various data. The memory 14 stores various programs.

[0018] The CPU 11, ROM 12, RAM 13, and memory 14 are connected to each other via a bus 15. The CPU 11, ROM 12, and RAM 13 constitute the control unit 100. That is, the control unit 100 executes the control processing of the cloud server 1 described later by operating according to the control program stored in the ROM 12 and memory 14 and expanded in the RAM 13 by the CPU 11.

[0019] The memory 14 is composed of a non-volatile memory such as an HDD (Hard Disc Drive) or a flash memory that retains stored information even when the power is turned off. The memory 14 stores a control program 141 that stores a control program for controlling the cloud server 1, a product master 142, customer information 143, product registration information 144, product sales information 145, printing information 146, and peripheral device operation information 147.

[0020] The product master 142 is information that associates code information such as a product code uniquely assigned to each product with product information such as the name, price, and product classification of the product. The customer information 143 is various information related to the customer name and customer ID (Identification) for identifying the customer.

[0021] The product registration information 144 is information generated by the cloud server 1 performing a registration process for a product read by the tablet terminal. The product sales information 145 is information generated by the cloud server 1 performing a settlement process corresponding to the product registration process. The printing information 146 is information for printing on a receipt corresponding to the product sales information 145 indicating information related to the settlement process. The peripheral device operation information 147 corresponds to the peripheral device operation information 242 stored in the memory 24 of the store where the edge server 2 described later is placed. The explanation of the peripheral device operation information 147 will be described later.

[0022] Furthermore, the control unit 100 is connected to the operation unit 17 and the display unit 18 via the bus 15 and the controller 16. The controller 16 controls the operation unit 17 and the display unit 18 based on instructions from the control unit 100. However, for the sake of explanation, the control performed by the controller 16 will be described as being performed by the control unit 100.

[0023] The operation unit 17 is, for example, a keyboard or touch panel, and is operated by the operator of the cloud server 1. The display unit 18 is, for example, a liquid crystal display, and displays various information to the operator of the cloud server 1.

[0024] Furthermore, the control unit 100 is connected to the communication unit 19 via the bus 15. The communication unit 19 connects to the edge server 2 and the edge device 3 via the communication line 4 to send and receive various types of information. Note that the hardware configuration of the cloud server 1 is not limited to this.

[0025] Next, the hardware configuration of edge server 2 will be explained using Figure 3. Figure 3 is a block diagram showing an example of the hardware configuration of edge server 2 according to this embodiment. As shown in Figure 3, edge server 2 is equipped with a CPU 21, ROM 22, RAM 23, memory 24, etc. The CPU 21 is the control unit. ROM 22 stores various programs. RAM 23 loads programs and various data. Memory 24 stores various programs.

[0026] The CPU 21, ROM 22, RAM 23, and memory 24 are connected to each other via a bus 25. The CPU 21, ROM 22, and RAM 23 constitute the control unit 200. That is, the control unit 200 executes the control processing of the edge server 2, which will be described later, by having the CPU 21 operate according to the control program stored in the ROM 22 and memory 24 and loaded into the RAM 23.

[0027] RAM23 stores security verification information 231. The security verification information 231 stored in RAM23 corresponds to the security verification information 732 stored in RAM73 of the first printer 711, which will be described later. Memory 24 consists of non-volatile memory such as an HDD or flash memory that retains stored information even when the power is turned off. Memory 24 stores a control program 241 that stores the control program for controlling the edge server 2, peripheral device operation information 242, and whitelist information 243. The security verification information 231, peripheral device operation information 242, and whitelist information 243 will be described later.

[0028] Furthermore, the control unit 200 connects the operation unit 27 and the display unit 28 via the bus 25 and the controller 26. The controller 26 controls the operation unit 27 and the display unit 28 in response to instructions from the control unit 200. However, for the sake of explanation, the control performed by the controller 26 will be described as being performed by the control unit 200.

[0029] The operation unit 27 is, for example, a keyboard or touch panel, and is operated by the operator of the edge server 2. The display unit 28 is, for example, a liquid crystal display, and displays various information to the operator of the edge server 2.

[0030] Furthermore, the control unit 200 is connected to the communication unit 30 via the bus 25. The communication unit 30 is connected to the cloud server 1 via the communication line 4 and transmits and receives information with the cloud server 1. The communication unit 30 is also connected to the edge device 3 via the communication line 5 and transmits and receives information with the edge device 3. Note that the hardware configuration of the edge server 2 is not limited to this.

[0031] Next, the hardware configuration of the tablet terminal 311 included in the edge device 3 will be described using Figure 4. Figure 4 is a block diagram showing an example of the hardware configuration of the tablet terminal 311 according to this embodiment. As shown in Figure 4, the tablet terminal 311 includes a CPU 31, ROM 32, RAM 33, and memory 34, etc.

[0032] The CPU 31 is the control unit. The ROM 32 stores various programs. The RAM 33 loads programs and various data. The memory 34 stores various programs. The CPU 31, ROM 32, RAM 33, and memory 34 are connected to each other via the bus 35. The CPU 31, ROM 32, and RAM 33 constitute the control unit 300. That is, the control unit 300 executes the control processing of the tablet terminal 311, which will be described later, by operating according to the control programs stored in the ROM 32 and memory 34 and loaded into the RAM 33.

[0033] RAM33 stores customer information 331, product registration information 332, and printing information 333. The customer information 331, product registration information 332, and printing information 333 stored in RAM33 correspond to the customer information 143, product registration information 144, and printing information 146 stored in the memory 14 of the cloud server 1. Memory 34 is composed of non-volatile memory such as an HDD or flash memory that retains stored information even when the power is turned off. Memory 34 stores a control program 341 that stores a control program for controlling the tablet terminal 311.

[0034] Furthermore, the control unit 300 is connected to the operation unit 41, display unit 42, card reader unit 43, and code reader unit 44 via the bus 35 and controller 36. The controller 36 controls the operation unit 41, display unit 42, card reader unit 43, and code reader unit 44 based on instructions from the control unit 300. However, for the sake of explanation, the control performed by the controller 36 will be described as being performed by the control unit 300.

[0035] The operation unit 41 is, for example, a keyboard or touch panel, and is operated by the user of the tablet terminal 311. The display unit 42 is, for example, a liquid crystal display, and displays various information to the customer. The card reader unit 43 reads the customer code from the card (for example, a credit card, electronic money, etc.) used by the customer for payment. The code reader unit 46 captures or optically reads symbols such as barcodes and two-dimensional codes attached to products.

[0036] Furthermore, the control unit 300 is connected to the communication unit 47 via the bus 35. The communication unit 47 connects to the cloud server 1 via the communication line 4 and transmits and receives various types of information. The communication unit 47 also connects to the edge server 2, the first printer 711, and the second printer 712 via the communication line 5 and transmits and receives various types of information. Note that the hardware configuration of the tablet terminal 311 is not limited to this.

[0037] Next, the hardware configuration of the printer included in the edge device 3 will be described using Figure 5. Figure 5 is a block diagram showing an example of the printer hardware configuration according to this embodiment. The printer shown in Figure 5 will be described using the first printer 711 as an example. Furthermore, the hardware configuration of the first printer 711 shown in Figure 5 is the same as that of the second printer 712 shown in Figure 1. As shown in Figure 5, the first printer 711 is equipped with a CPU 71, ROM 72, RAM 73, and memory 74, etc.

[0038] The CPU 71 is the control unit. The ROM 72 stores various programs. The RAM 73 loads programs and various data. The memory 74 stores various programs. The CPU 71, ROM 72, RAM 73, and memory 74 are connected to each other via the bus 75. The CPU 71, ROM 72, and RAM 73 constitute the control unit 700. That is, the control unit 700 executes the control processing of the first printer 711, which will be described later, by operating according to the control programs stored in the ROM 72 and memory 74 and loaded into the RAM 73.

[0039] RAM 73 stores print information 731 and security confirmation information 732. The print information 731 stored in RAM 73 corresponds to the print information 146 stored in the memory 14 of the cloud server 1. Memory 74 is composed of non-volatile memory such as an HDD or flash memory that retains stored information even when the power is turned off. Memory 74 stores a control program 741 that stores a control program for controlling the first printer 711.

[0040] Furthermore, the control unit 700 is connected to the operation unit 81, the display unit 82, and the printing unit 83 via the bus 75 and the controller 76. The controller 76 controls the operation unit 81, the display unit 82, and the printing unit 83 based on instructions from the control unit 700. However, for the sake of explanation, the control performed by the controller 76 will be described as being performed by the control unit 700.

[0041] The operation unit 81 is, for example, a keyboard or touch panel, and is operated by the operator of the first printer 711. The display unit 82 is, for example, a liquid crystal display, and displays various information to store staff and customers. The printing unit 83 prints, for example, print information 731 onto receipt paper. The control unit 700 is connected to the communication unit 77 and the interface unit 78 via the bus 75.

[0042] The communication unit 77 connects to the edge server 2 and the tablet terminal 311 via the communication line 5 and transmits and receives various types of information. The interface unit 78 is, for example, an interface such as USB (Universal Serial Bus). For example, the user updates firmware, etc., to update the control program 741 stored in the memory 74 via the interface unit 78. Note that the hardware configuration of the first printer 711 is not limited to this.

[0043] By the way, if edge device 3 is subjected to a security attack from an external source, since edge device 3 and cloud server 1 are configured to communicate, cloud server 1 may also be affected by the security attack.

[0044] Here, we will explain an example of a security situation. A security attack could be, for example, one in which a malicious user inserts a USB memory stick into the interface section 78 of the first printer 711, rewrites the control program 741 stored in the memory 74, and renders the first printer 711 unusable.

[0045] Furthermore, a security attack could involve, for example, a malicious user altering the print information 731 stored in the memory 74 of the first printer 711, causing it to print information different from the print information 146 transmitted by the cloud server 1. Here, the print information 731 that the first printer 711 prints on the receipt paper is information relating to the goods the customer has paid for, or in other words, information relating to proof of the goods the customer has paid for.

[0046] If the first printer 711 is subjected to the security attack described above, even if the tablet terminal 311 is operational, customers may be unable to process payments for registered products, and store operations may be affected.

[0047] Therefore, according to this embodiment, the edge server 2 controls the system to block communication with active edge devices 3 affected by security attacks and switch to communication with standby edge devices 3 that are not affected by security attacks, depending on the security status of the multiple edge devices 3. The operation of the edge server 2 will be described later.

[0048] Figure 6 is a block diagram showing an example of the functional configuration of a printer according to this embodiment. The printer shown in Figure 6 is described as the first printer 711. Furthermore, the functional configuration of the first printer 711 shown in Figure 6 is the same for the second printer 712 shown in Figure 1. As shown in Figure 6, the control unit 700 of the first printer 711 includes a first acquisition means 701, a generation means 702, and a generation information transmission means 703. However, the functional configuration of the control unit 700 of the first printer 711 is not limited to this.

[0049] The first acquisition means 701 acquires first information. Specifically, the first acquisition means 701 acquires first information from the edge server 2. The first information is information requesting a security status check. For example, the first information is information instructing a security check to be performed on the user's own printer (first printer 711). For example, the first information is a command or program instructing the control program of the edge device 3 to perform a checksum-based check process.

[0050] The generation means 702 generates second information based on the first information. Specifically, the generation means 702 generates second information based on the first information acquired by the first acquisition means 701. The second information is information indicating the result of a security check corresponding to the first information (hereinafter also referred to as security confirmation information). The second information is, for example, security confirmation information based on the result of checksum processing for the control program 741 stored in the memory 74.

[0051] The generated information transmission means 703 transmits the second information. Specifically, the generated information transmission means 703 transmits the second information generated by the generation means 702 to the edge server 2.

[0052] Figure 7 is a block diagram showing an example of the functional configuration of the edge server 2 according to this embodiment. As shown in Figure 7, the control unit 200 of the edge server 2 includes a first transmission means 201, a first receiving means 202, a blocking means 203, a second transmission means 204, and a third transmission means 205. However, the functional configuration of the control unit 200 of the edge server 2 is not limited to this.

[0053] The first transmission means 201 transmits first information requesting security status checks to multiple edge devices 3. Specifically, the first transmission means 201 transmits first information requesting security status checks to each of the operational devices. For example, the first transmission means 201 transmits first information to the operational first printer 711. For example, security status checks refer to status checks related to the detection of tampering with predetermined data stored by the multiple edge devices 3. The first transmission means 201 transmits first information to the first printer 711 at predetermined intervals. The predetermined interval is, for example, once every hour and is set by the user. However, the predetermined interval is not limited to this.

[0054] The first receiving means 202 receives second information from the edge device 3. For example, the first receiving means 202 receives second information from the first printer 711.

[0055] Based on the second information returned from multiple edge devices 3 in response to the first information, the blocking means 203 detects a security anomaly and blocks the device that detected the anomaly from the network. Specifically, the blocking means 203 determines whether the security of the edge device 3 is normal based on the second information.

[0056] For example, the blocking means 203 compares the status check result included in the second information with the status check result obtained for legitimate data to detect a security anomaly related to the data. The blocking means 203 compares the security check information 231 with the whitelist information 243 stored in the memory 24 to determine whether the security of the first printer 711 is normal. The whitelist information 243 is the status check result obtained for legitimate data, and is, for example, legitimate checksum information based on the processing result of the checksum associated with the file name of the control program 341 of the first printer 711.

[0057] The blocking means 203 compares the security confirmation information 231 with the whitelist information 243 stored in the memory 24, and if they match, it determines that security is normal. The blocking means 203 compares the security confirmation information 231 with the whitelist information 243 stored in the memory 24, and if they do not match, it determines that security is abnormal. An abnormal security state is a state in which a security attack may have occurred. In this embodiment, for the sake of detail, we will assume that the first printer 711 is an edge device 3 with an abnormal security state.

[0058] Furthermore, if the blocking means 203 detects a security anomaly based on the second information, it connects the standby device, which is redundant with the active device that detected the anomaly, to the network. If the second information returned by multiple edge devices 3 in response to the first information includes a state in which the security of an edge device 3 is abnormal, the blocking means 203 sends the third information to the edge device 3 with the security anomaly. For example, the blocking means 203 sends the third information to the first printer 711 which it has determined to have a security anomaly. The third information is information indicating that the communication connection with the abnormal device will be blocked.

[0059] In other words, the third piece of information is communication connection blocking information indicating that the communication connection between the edge device 3 and the cloud server 1, edge server 2, and tablet terminal 311 to which the edge device 3 is connected will be blocked. Upon receiving this third piece of information, the edge device 3, through the control unit's control of the communication unit, blocks the communication connection between the edge device 3 and the cloud server 1, edge server 2, and tablet terminal 311.

[0060] Furthermore, edge server 2 can isolate edge device 3 that has been subjected to or may have been subjected to a security attack by blocking its communication connection. In addition, since edge device 3 that has been subjected to a security attack is isolated, cloud server 1, edge server 2, and tablet terminal 311 can mitigate the impact of the security attack. Edge server 2 may also block its communication connection with edge device 3 that has a security issue when it receives third information from edge device 3 that has a security issue via blocking means 203.

[0061] The second transmission means 204 transmits the fourth information to the cloud server 1. Specifically, the second transmission means 204 transmits the fourth information to the cloud server 1 when the blocking means 203 determines that the security of the edge device 3 is abnormal. The fourth information is peripheral device operation information indicating the operating status of the edge device 3.

[0062] The third transmission means 205 transmits communication connection start information indicating that it is starting a communication connection with the standby edge device 3. For example, the third transmission means 205 transmits communication connection start information to the first printer 711 and to the second printer 712, which is the standby edge device 3. As a result, the edge server 2 can establish a communication connection with the normally functioning edge device 3, which has not been subjected to a security attack. Furthermore, because the normally functioning edge device 3 can establish a communication connection, the cloud server 1, edge server 2, and tablet terminal 311 can operate normally, reducing the impact on store operations.

[0063] Next, the functional configuration of the cloud server 1 will be explained using Figure 8. Figure 8 is a block diagram showing an example of the functional configuration of the cloud server 1 according to this embodiment. As shown in Figure 8, the control unit 100 of the cloud server 1 includes a second acquisition means 101, a fourth transmission means 102, and a fifth transmission means 103. However, the functional configuration of the control unit 100 of the cloud server 1 is not limited to this.

[0064] The second acquisition means 101 receives the fourth information. Specifically, the second acquisition means 101 receives the fourth information transmitted by the edge server 2.

[0065] The fourth transmission means 102 transmits fifth information to the tablet terminal 311. Specifically, when the second acquisition means 101 receives the fourth information, the fourth transmission means 102 transmits fifth information to the tablet terminal 311. The fifth information is, for example, message information indicating a message prompting the tablet terminal 311 to switch to a communication connection with the edge device 3 which is operating normally. The message information is, for example, information that, if the security of the first printer 711 is abnormal, prompts the tablet terminal 311 to send a message prompting it to switch to a communication connection with the standby second printer 712 which has normal security.

[0066] The fifth transmission means 103 transmits sixth information to the tablet terminal 311. Specifically, when the second acquisition means 101 receives fourth information, the fifth transmission means 103 transmits sixth information to the tablet terminal 311. The sixth information is, for example, switching information indicating a switch to a communication connection with the edge device 3 which is operating in a normal state. The switching information is, for example, information transmitted to the tablet terminal 311 to switch to a communication connection with the standby second printer 712, whose security is normal, if the security of the first printer 711 is abnormal.

[0067] Next, the functional configuration of the tablet terminal 311 will be explained using Figure 9. Figure 9 is a block diagram showing an example of the functional configuration of the tablet terminal 311 according to this embodiment. As shown in Figure 9, the control unit 300 of the tablet terminal 311 includes a third acquisition means 301 and a communication control means 302. However, the functional configuration of the control unit 300 of the tablet terminal 311 is not limited to this.

[0068] The third acquisition means 301 acquires the fifth information and the sixth information from the cloud server 1. When the tablet terminal 311 acquires the fifth information from the cloud server 1, it outputs the fifth information to the display unit 42.

[0069] The communication control means 302 performs communication control to initiate a communication connection with the standby edge device 3. Specifically, when the third acquisition means 301 receives the sixth information, the communication control means 302 performs communication control to the communication unit 47 to initiate a communication connection with the standby second printer 712, which has normal security. As a result, the tablet terminal 311 can communicate with the normally operating edge device 3, thereby reducing the impact on store operations.

[0070] Next, Figure 10 will be explained regarding the control processing of the information processing system 10. Figure 10 is a sequence diagram showing an example of the control processing of the information processing system 10 according to this embodiment. To make the explanation more concrete, the processing when the first printer 711 is subjected to a security attack will be described.

[0071] In step S91, the first transmission means 201 of the edge server 2 transmits the first information to the first printer 711 (step S91).

[0072] In step S92, the generation means 702 of the first printer 711 generates second information based on the first information acquired by the first acquisition means 701 of the first printer 711 (step S92). In step S93, the generation information transmission means 703 transmits the second information generated by the generation means 702 to the edge server 2 (step S93).

[0073] In step S94, the blocking means 203 of the edge server 2 determines whether the security of the first printer 711 is normal based on the second information acquired by the first receiving means 202 (step S94). In step S95, the blocking means 203 transmits third information to the first printer 711, which it has determined to have abnormal security (step S95).

[0074] In step S96, the control unit 700 of the first printer 711 controls the communication unit 77 to disconnect the communication connection with the cloud server 1, the edge server 2, and the tablet terminal 311 (step S96).

[0075] In step S97, if the blocking means 203 determines that the security of the first printer 711 is abnormal, the second transmission means 204 of the edge server 2 transmits the fourth information to the cloud server 1 (step S97).

[0076] In step S98, when the second acquisition means 101 receives the fourth information, the fourth transmission means 102 of the cloud server 1 transmits the fifth information to the tablet terminal 311 (step S98). In step S99, when the second acquisition means 101 receives the fourth information, the fifth transmission means 103 transmits the sixth information to the tablet terminal 311 (step S99).

[0077] In step S100, when the third acquisition means 301 of the tablet terminal 311 receives the sixth information, the communication control means 302 of the tablet terminal 311 performs communication control on the communication unit 47 to start a communication connection with the standby second printer 712, which has normal security (step S100).

[0078] As described above, the edge server 2 of this embodiment sends first information to multiple edge devices 3 requesting them to check the security status, and if it detects a security anomaly based on second information returned by the multiple edge devices 3 in response to the first information, it isolates the edge device 3 that detected the anomaly from the network.

[0079] As a result, if the edge server 2 has a security abnormal state, for example, if multiple edge devices 3 have abnormal security states, it will provide third information indicating that it will block communication connections with the abnormal devices. When an edge device 3 receives this third information, the control unit controls the communication unit, which in turn blocks communication connections with the cloud server 1, the edge server 2, and the tablet terminal 311.

[0080] Furthermore, edge server 2 can isolate edge device 3 that has been subjected to a security attack by cutting off its communication connection. In addition, since edge device 3 that has been subjected to or may have been subjected to a security attack is isolated, cloud server 1, edge server 2, and tablet terminal 311 can mitigate the impact of the security attack.

[0081] Although embodiments of the present invention have been described above, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims of the invention and its equivalents.

[0082] (First variation) In the above embodiment, a configuration was described in which a tablet terminal 311 is equipped with multiple first printers 711 and second printers 712, but the embodiment is not limited to this. For example, a tablet terminal and two printers may be provided, and two printers may be connected to each tablet terminal.

[0083] Figure 11 is a block diagram showing an example of an information processing system 110 according to the first modified example. The information processing system 110 is a system comprising a cloud server 1, an edge server 2, and an edge device 3. The edge device 3 comprises a first tablet terminal 312, a second tablet terminal 313, a first printer 711, and a second printer 712.

[0084] The first tablet terminal 312 is connected to the first printer 711 and the second printer 712 via a communication line 5, such as a dedicated line or an internet line. The second tablet terminal 313 is also connected to the first printer 711 and the second printer 712 via a communication line 5, such as a dedicated line or an internet line. By connecting the first tablet terminal 312 and the second tablet terminal 313 to the first printer 711 and the second printer 712, respectively, even if one of the first printer 711 or the second printer 712 is malfunctioning, the printer that is functioning normally can be used.

[0085] (Second variation) In the embodiments described above, the generation means 702 of the first printer 711 generates second information based on first information, and the second information is described as security confirmation information based on checksum processing in the control program 741 stored in memory 74, but is not limited to this. For example, the second information may be security confirmation information based on the SHA256 hash processing of the control program 741 stored in memory 74.

[0086] The program executed on the edge server 2 of this embodiment is provided as an installable or executable file recorded on a computer-readable recording medium such as a CD-ROM, flexible disk (FD), CD-R, or DVD (Digital Versatile Disk).

[0087] Furthermore, the program executed on the edge server 2 of the embodiment may be stored on a computer connected to a network such as the Internet and provided by downloading it via the network. Alternatively, the program executed on the edge server 2 of the embodiment may be provided or distributed via a network such as the Internet. [Explanation of symbols]

[0088] 1. Cloud Server 2 Edge Servers 3 Edge devices 10 Information Processing Systems 110 Information Processing Systems 200 Control Unit 201 First transmission means 202 First receiving means 203 Blocking means 204 Second transmission means 205 Third transmission means 311 Tablet devices 312 First tablet device 313 Second tablet device 711 First Printer 712 Second Printer [Prior art documents] [Patent Documents]

[0089] [Patent Document 1] Japanese Patent Publication No. 2017-191958

Claims

1. An information processing device connected via a network to multiple devices installed in a store and configured in a redundant relationship between an active system and a standby system, A first transmission means that transmits first information requesting a security status check to each of the operational devices among the plurality of devices, Based on the second information returned from the active device in response to the first information, if a security anomaly is detected, the blocking means disconnects the active device that detected the anomaly from the network and connects a standby device that is redundant with the active device that detected the anomaly to the network. An information processing device equipped with the following features.

2. The first transmission means requests the first information to confirm the status related to the detection of tampering with predetermined data stored by the plurality of devices. The information processing apparatus according to claim 1.

3. The blocking means compares the result of the status check included in the second information with the result of the status check obtained for the regular data, and detects a security anomaly related to the data. The information processing apparatus according to claim 2.

4. The aforementioned plurality of devices include a tablet terminal that performs product registration processing and a printer that prints print information corresponding to product sales information showing information related to the payment processing of the said products onto a receipt. The information processing apparatus according to any one of claims 1 to 3.

5. In an information processing system having multiple devices installed in a store and configured in a redundant relationship between an active system and a standby system, and an information processing device connected to these multiple devices via a network, The aforementioned information processing device is A first transmission means that transmits first information requesting a security status check to each of the operational devices among the plurality of devices, Based on the second information returned from the operational device in response to the first information, if a security anomaly is detected, the blocking means blocks the communication connection with the operational device that detected the anomaly and connects a standby device that is redundant with the operational device that detected the anomaly to the network. An information processing system equipped with the following features.

Images