Sensor, terminal, and method

Abstract

The purpose of the present invention is to provide a sensor, a terminal, and a method capable of accurately determining falsification of a sensor.　A device 100 according to the present disclosure comprises a sensor 101. The sensor 101 comprises: a detection element 101a or the like that detects a state; a conversion unit 101d that converts information about the state detected by the detection element 101a or the like into output data (conversion information and first output data); an output unit 101f that outputs the output data to a server 200 (output destination); and a memory 101e that stores input data for calibration (inspection information). In addition, the conversion unit 101d is configured to convert the input data for calibration into calibration output data (conversion information (sensor output, second output data)). That is, the conversion unit 101d and the memory 101e are connected so that switching of the output from the detection element 101a or the like is possible.

Description

Sensor, terminal and method

[0001] The present invention relates to a sensor, a terminal, and a method for determining an abnormality in output data.

[0002] Patent Document 1 describes an apparatus for automatically detecting tampering in a network control system, which detects tampering by detecting inconsistencies in configuration data received from a specific network component based on a comparison between the received configuration data and reference configuration data stored in a database.

[0003] JP 2019-133649 A

[0004] However, in Patent Document 1, when subtle numerical values ​​such as temperature detection values ​​are tampered with, it is difficult to accurately determine whether tampering has occurred.

[0005] Therefore, an object of the present invention is to provide a sensor, a terminal, and a method that can accurately determine whether a sensor has been tampered with.

[0006] The sensor of the present disclosure comprises a detection element that detects a state, a conversion unit that converts the state information detected by the detection element into conversion information, an output unit that outputs the conversion information to an output destination, and a memory unit that stores inspection information, and the conversion unit is configured to convert the inspection information into conversion information.

[0007] According to the present disclosure, the possibility of sensor tampering can be accurately determined.

[0008] FIG. 1 is a diagram showing a system configuration including a device 100 including a sensor 101 of the present disclosure and a server 200. FIG. 2 is a diagram showing a functional configuration of the device 100 of the present disclosure. FIG. 3 is a diagram showing a configuration of the sensor 101. FIG. 4 is a conceptual diagram showing a flow of a sensor detection process by the sensor 101. FIG. 5 is a diagram showing a calibration process. FIG. 6 is a flowchart showing the operation of the device 100 of the present disclosure. FIG. 7 is a diagram showing an example of a hardware configuration of the device 100 according to an embodiment of the present disclosure.

[0009] The present disclosure will be described with reference to the accompanying drawings. Whenever possible, the same parts are designated by the same reference numerals and redundant description will be omitted.

[0010] 1 is a diagram showing a system configuration including a device 100 including a sensor 101 of the present disclosure and a server 200. As shown in the figure, the device 100 includes the sensor 101, and transmits sensor output data output by the sensor 101 to the server 200 via a network. This sensor output data is data converted within the sensor 101. In the present disclosure, the sensor 101 is a temperature sensor, but it may also be another primitive sensor. For example, it may be an air pressure sensor, a magnetic sensor, or a pressure sensor.

[0011] The server 200 receives the sensor output data and determines the validity of the data. The server 200 stores correct answer data corresponding to the sensor output data, and is able to determine the validity of the correct answer data.

[0012] 2 is a diagram showing the functional configuration of device 100 according to the present disclosure. Device 100 includes sensor 101, communication unit 102, and control unit 103. Device 100 is a plain sensor such as an IoT (Internet of Things) sensor, but may also be a user terminal such as a smartphone, or may be in the form of a device other than those.

[0013] The sensor 101 is a temperature sensor for detecting the temperature of an object to be detected (here, the surroundings). As will be described later, the sensor 101 is composed of a detection element, a conversion unit, a memory, and the like.

[0014] The communication unit 102 is a part that transmits sensor output data output from the sensor 101 to the server 200. The communication unit 102 may also receive a determination result of the validity of the sensor output data returned from the server 200.

[0015] The control unit 103 is a part that controls the sensor 101 and the communication unit 102 .

[0016] Next, a detailed configuration of the sensor 101 will be described. Fig. 3 is a diagram showing the configuration of the sensor 101. As shown in the figure, the sensor 101 includes detection elements 101a to 101c, a conversion unit 101d, a memory 101e, an output unit 101f, and a signature processing unit 101g.

[0017] The detection elements 101a to 101c are elements that detect state information indicating the detected state. For example, in the case of a temperature sensor, the detection elements 101a and the like are parts that detect the resistance value of the elements that make up the detection element 101a as state information.

[0018] The conversion unit 101d converts the state information obtained from the detection elements 101a to 101c into conversion information appropriate for the detection element 101a, etc. In the present disclosure, the conversion unit 101d converts, for example, a resistance value into information indicating a temperature. This conversion process is performed depending on the type of the detection element 101a.

[0019] The memory 101e is a memory having a secure area. The secure area is, for example, a tamper-resistant area that cannot be tampered with from the outside. The memory 101e stores the public key certificate of the sensor 101 and calibration input data in this secure area. The calibration input data is sensor input data from a set of input data and output data for which normal sensor operation is known in advance by the verifier. The input data and calibration input data are status information indicating the status of the detection element 101a, etc.

[0020] The output unit 101f is a part that outputs the sensor output data converted by the conversion unit 101d to the outside. In the present disclosure, the output unit 101f outputs the sensor output data to the communication unit 102, and the communication unit 102 transmits the sensor output data to the server 200.

[0021] The signature processing unit 101g is a unit that performs signature processing on the sensor output data using the public key certificate stored in the memory 101e.

[0022] In the sensor 101, in order to simulate the observed state of the calibration input data, the calibration input data stored in the memory 101e is input via the same hardware path as the input of the normal detection elements 101a, etc. In other words, the memory 101e is connected to the input lines to the conversion unit 101d of each of the detection elements 101a to 101c, and the control unit 103 reads out the calibration input data prepared in advance from the memory 101e (secure area) via the input lines from each of the detection elements 101a to 101c and inputs it to the conversion unit 101d. This input control is performed by the control unit 103.

[0023] The conversion unit 101d converts the calibration input data into calibration output data, for example, by converting the resistance value output by the detection element 101a into temperature data.

[0024] The signature processing unit 101g performs signature processing on the calibration output data using the stored public key certificate, converting it into signed calibration output data. The output unit 101f outputs the signed calibration output data to the server 200 via the communication unit 102. The server 200 has a smart contract function and determines the validity of the acquired signed calibration output data. Identification information of the device 100 or sensor 101 is added to the signed calibration output data. The server 200 determines the validity of the signed calibration output data based on whether the signed calibration output data matches the correct answer data corresponding to the identification information. For example, if the signed calibration output data matches the correct answer data or is within a predetermined range, the server 200 determines that the signed calibration output data is valid.

[0025] The server 200 also holds a private key certificate corresponding to the public key certificate of the device 100 and uses it to determine the signed calibration output data.

[0026] The device 100 may also be provided with a random number generator (not shown) that generates random numbers in synchronization with the random numbers generated by the server 200, and may take measures against replay attacks by transmitting the random numbers to the server 200 along with the calibration output data, like a hardware token. For example, the random number generator may generate synchronized random numbers using a timer. The sensor 101 adds the synchronized random number to the signed calibration output data, and the communication unit 102 transmits the signed calibration output data with the added random number to the server 200.

[0027] The control unit 103 may update the parameters necessary for executing the processing, such as the calibration input data and the seed value for the random number, later or as needed, depending on the permission of the server 200 or another device. In particular, the server 200 or the like may determine whether to perform the update by taking into consideration whether it has been verified that the hardware has not been tampered with in the most recent processing. In other words, if the device 100 obtains from the server 200 a result indicating that the calibration output data is invalid, the device 100 may not update the parameters necessary for executing the processing, such as the seed value.

[0028] In this way, by updating the parameters for generating random numbers, the systematicity of the calibration output of the sensor 101 can be analyzed, preventing information disguised as calibration output from being sent to the server side, and reducing the risk of it being mistakenly recognized as having been calibrated.

[0029] 4 and 5 are diagrams showing an overview of the processing in the sensor 101 described above. FIG. 4 is a conceptual diagram showing the flow of the sensor detection processing by the sensor 101. Arrow P1 indicates the processing flow. When the detection elements 101a to 101c detect status information (e.g., resistance value), the conversion unit 101d converts the status information into conversion information. The output unit 101f outputs the conversion information.

[0030] FIG. 5 is a diagram showing the calibration process. For convenience of illustration, the signature processing unit 101g is omitted, but the signature processing is performed. Arrow P2 indicates the calibration process. As shown by arrow P2, calibration input data is read from memory 101e, input to conversion unit 101d, and converted into calibration output data. Then, signature processing is performed on the calibration output data by signature processing P3, and output unit 101f outputs the signed calibration output data.

[0031] Next, the processing procedures in the device 100 and the sensor 101 will be described. FIG. 6 is a flowchart showing the operation of the device 100 of the present disclosure. First, the control unit 103 starts performing calibration based on an instruction from the user of the device 100 or the server 200 (S101). This instruction is based on, for example, when the device 100 is powered on, but other conditions may also be used as triggers. In the present disclosure, calibration refers to a check process in which calibration input data stored in a secure area of ​​the memory 101e is notified to the server 200 and the data is checked.

[0032] If the power is on (S102: YES), the control unit 103 determines whether the sensor 101 is a sensor that constantly monitors and outputs (S103). That is, the control unit 103 determines the sensor type of the sensor 101. The control unit 103 stores type information of the sensor 101 and makes a determination based on that information. A sensor that constantly monitors and outputs is a sensor that constantly monitors (detects) and outputs the sensor value, such as a temperature sensor.

[0033] If the control unit 103 determines that the sensor is not a sensor that continuously monitors and outputs (i.e., is not a predetermined sensor type) (S102: NO), it further determines whether the sensor 101 is about to start monitoring (S103). If the sensor is about to start monitoring (S103: YES), calibration is performed (S105). A sensor that is not a sensor that continuously monitors and outputs is a sensor that performs detection operations according to predetermined conditions, such as a camera that performs shooting operations in response to a shutter button. Note that this is just one example; even a camera that continuously captures video would be considered a sensor that continuously monitors and detects. On the other hand, a temperature sensor that returns an observation value in response to a trigger such as a button or external input would be considered a sensor that is not a sensor that continuously monitors and detects. These differences are largely dependent on the operation and usage of the sensor, regardless of the type of sensor. Note that the control unit 103 stores the timing at which the detection element 101a, etc., detects at predetermined time intervals and determines whether the sensor is about to start monitoring or outputting.

[0034] On the other hand, if the control unit 103 determines in step S103 that observation is not about to start (S103: NO), the process proceeds to step S107.

[0035] On the other hand, if the control unit 103 determines in step S102 that the sensor 101 is a sensor that constantly monitors and outputs (a predetermined sensor type) (S102: YES), it determines whether a certain amount of time has passed since the previous calibration (S104). If the control unit 103 determines that a certain amount of time has passed (S104: YES), it performs calibration (S105). The control unit 103 stores the time when the calibration was performed and the calibration output data. Then, the process proceeds to step S107.

[0036] If the control unit 103 determines that a certain period of time has not elapsed (S104: NO), it further determines whether the calibration output data from the previous calibration is greater by a predetermined value or more (S106). If the control unit 103 determines that the calibration output data is greater (S106: YES), it performs calibration (S105). If the control unit 103 does not determine that the calibration output data is greater (S106: NO), it proceeds to step S107.

[0037] In step S107, if the power is on, the control unit 103 returns to step S102 and repeats the above process, whereas if the power is off, the process ends.

[0038] By performing calibration periodically in this manner, it is possible to verify whether the sensor 101 has been tampered with.

[0039] Next, the effects of the device 100 of the present disclosure will be described. The device 100 of the present disclosure includes a sensor 101. The sensor 101 includes a detection element 101a or the like that detects the state of a detection target (such as the ambient environment in the case of temperature), a conversion unit 101d that converts state information detected by the detection element 101a or the like into output data (conversion information, first output data), an output unit 101f that outputs the output data to the server 200 (output destination), and a memory 101e that stores calibration input data (inspection information). The conversion unit 101d is configured to convert the calibration input data into calibration output data (conversion information (sensor output, second output data)). That is, the conversion unit 101d is connected to the memory 101e so as to be able to receive output from the detection element 101a or the like.

[0040] As a result, when the sensor 101 is used normally, i.e., when it is functioning as a sensor, the conversion unit 101d performs a conversion process using the status information output from the detection elements 101a, etc., and outputs it as output data (sensor values), and when calibrating in accordance with instructions, it converts the calibration input data stored in the memory 101e and outputs it as output data (calibration output data).

[0041] The calibration output data is sent to the server 200, whereby the validity of the data, that is, the possibility of tampering by the conversion unit 101d, can be determined.

[0042] The memory 101e also stores public key information. The signature processing unit 101g then signs the calibration input data using this public key information, and the output unit 101f outputs the signed calibration data. The communication unit 102 of the device 100 then transmits the signed calibration data to the server 200. The server 200 processes the signature using a private key to obtain calibration output data. Note that in the present disclosure, signature processing is not necessarily required, and the communication unit 102 may transmit the calibration output data to the server 200 as is.

[0043] Furthermore, in the present disclosure, the sensor 101 may further include a random number generation unit that generates random numbers synchronized with the random numbers of the server 200, which is the output destination. The output unit 101f outputs the generated random numbers together with the converted calibration output data, and the communication unit 102 transmits the calibration output data with the random numbers added to the server 200. As described above, this random number is a numerical value that is generated in synchronization with the server 200, and synchronization is achieved using a timer, for example.

[0044] The random number generator generates random numbers based on a predetermined seed value, and the seed value is updated according to conditions.

[0045] This update process analyzes the systematicity of the calibration output data of the sensor 101, and reduces the risk of information disguised as calibration output data being sent to the server 200, leading to the data being mistakenly recognized as having been calibrated.

[0046] In the present disclosure, the memory 101e has a secure area in which calibration input data is stored, and the sensor 101 can use this area to hold secure data.

[0047] In the present disclosure, the conversion unit 101d of the sensor 101 is configured to either convert the status information detected by the detection element 101a, etc. into output data (conversion information) or convert the calibration input data (inspection information) stored in the memory 101e into calibration output data (conversion information) in response to an instruction.

[0048] For example, this instruction is given at the time of initial startup of the sensor 101. Initial startup refers to when the power is turned on. When the power is turned on, calibration input data is read from the memory 101e and input to the conversion unit 101d. The conversion unit 101d then converts the calibration input data into calibration output data. This is because the sensor 101 is in its initial state when the power is turned on, and it is effective to check for the possibility of tampering at this timing. The conversion unit 101d performs a conversion process on the input data, but the control unit 103 controls whether the detected data from the detection element 101a or the calibration input data from the memory 101e is input.

[0049] In the present disclosure, the memory 101e updates the calibration input data according to a condition. The condition is that the sensor 101 has not been tampered with. The condition is determined based on the determination result from the server 200. The update process is preferably performed based on an instruction from the server 200, and new calibration input data is transmitted from the server 200 to update the data.

[0050] This update process analyzes the systematicity of the calibration output data of the sensor 101, and reduces the risk of information disguised as calibration output data being sent to the server 200, leading to the data being mistakenly recognized as having been calibrated.

[0051] In the present disclosure, the device 100 includes the sensor 101 and a communication unit 102 that transmits calibration output data based on calibration input data obtained by the sensor 101 to a server 200 (verification device) that verifies the validity of the calibration output data. The server 200 pre-stores correct answer information corresponding to the calibration input data, thereby enabling calibration to be performed.

[0052] The sensor, terminal, and method of the present disclosure have the following configuration.

[0053] [1] A sensor comprising: a detection element that detects a state; a conversion unit that converts state information detected by the detection element into conversion information; an output unit that outputs the conversion information to an output destination; and a storage unit that stores inspection information, wherein the conversion unit is configured to convert the inspection information into conversion information.

[0054] [2] The sensor according to [1], wherein the storage unit stores public key information, and the output unit outputs signed conversion information signed using the public key information.

[0055] [3] The sensor according to [1] or [2], further comprising a random number generating unit that generates a random number synchronized with an output destination, wherein the output unit outputs the generated random number together with the converted conversion information.

[0056] [4] The sensor according to [3], wherein the random number generator generates random numbers based on a predetermined seed value, and the seed value is updated according to a condition.

[0057] [5] The sensor according to any one of [1] to [4], wherein the storage unit has a secure area and stores the inspection information in the secure area.

[0058] [6] The sensor according to any one of [1] to [5], wherein, in response to an instruction, the conversion unit either converts status information detected by the detection element into conversion information, or converts inspection information stored in the storage unit into conversion information.

[0059] [7] The sensor according to [6], wherein the instruction is given at the time of initial startup of the sensor, and at the time of the initial startup, the conversion unit converts the inspection information into conversion information.

[0060] [8] The sensor according to any one of [1] to [7], wherein the storage unit updates the inspection information according to conditions.

[0061] [9] A terminal comprising: a sensor according to any one of [1] to [8]; and a transmission unit that transmits conversion information based on test information obtained by the sensor to a verification device that verifies the validity of the conversion information, wherein the verification device pre-stores correct answer information corresponding to the test information.

[0062]

[10] A method comprising: a conversion step of converting status information detected by a detection element that detects a status into conversion information; and an output step of outputting the conversion information to an output destination, wherein the conversion step converts test information previously stored in a storage unit into the conversion information in response to an instruction.

[0063] The block diagrams used to explain the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of hardware and / or software. Furthermore, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized using a single device that is physically or logically coupled, or may be realized using two or more physically or logically separated devices that are connected directly or indirectly (e.g., via wire, wirelessly, etc.) and these multiple devices. The functional block may also be realized by combining the single device or multiple devices with software.

[0064] Functions include, but are not limited to, judgment, determination, assessment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, selection, establishment, comparison, assumption, expectation, consideration, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, and assignment. For example, a functional block (component) that performs transmission is called a transmitting unit or transmitter. As mentioned above, there are no particular limitations on how these functions are implemented.

[0065] For example, the device 100 according to an embodiment of the present disclosure may function as a computer that performs processing of the calibration execution method of the present disclosure. Fig. 7 is a diagram illustrating an example of the hardware configuration of the device 100 according to an embodiment of the present disclosure. The above-described device 100 may be physically configured as a computer including a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, a sensor 101, and the like. Note that, as described above, when the device 100 is an IoT device in the form of a plain sensor, the hardware configurations of the storage 1003, the input device 1005, the output device 1006, and the like are not essential.

[0066] In the following description, the term "apparatus" can be interpreted as a circuit, a device, a unit, etc. The hardware configuration of device 100 may be configured to include one or more of the apparatuses shown in the figure, or may be configured to exclude some of the apparatuses.

[0067] Each function in device 100 is realized by loading specified software (programs) onto hardware such as processor 1001 and memory 1002, causing processor 1001 to perform calculations, control communication via communication device 1004, and control at least one of reading and writing data in memory 1002 and storage 1003.

[0068] The processor 1001 controls the entire computer by running, for example, an operating system. The processor 1001 may be configured by a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, a register, etc. For example, the above-mentioned control unit 103 may be realized by the processor 1001.

[0069] The processor 1001 also reads programs (program codes), software modules, data, etc. from at least one of the storage 1003 and the communication device 1004 into the memory 1002 and executes various processes in accordance with these. The programs used are those that cause a computer to execute at least some of the operations described in the above-described embodiments. For example, the control unit 103 may be implemented by a control program stored in the memory 1002 and running on the processor 1001, and similar implementations may be made for other functional blocks. While the above-described various processes have been described as being executed by a single processor 1001, they may also be executed simultaneously or sequentially by two or more processors 1001. The processor 1001 may be implemented by one or more chips. The programs may also be transmitted from a network via a telecommunications line.

[0070] The memory 1002 is a computer-readable recording medium and may be configured by, for example, at least one of a read-only memory (ROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), a random access memory (RAM), etc. The memory 1002 may also be called a register, a cache, a main memory (primary storage device), etc. The memory 1002 can store executable programs (program codes), software modules, etc. for implementing a calibration execution method according to an embodiment of the present disclosure.

[0071] Storage 1003 is a computer-readable recording medium, and may be composed of at least one of, for example, an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disk), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 1003 may also be referred to as an auxiliary storage device. The above-mentioned storage medium may be, for example, a database, a server, or other appropriate medium including at least one of memory 1002 and storage 1003.

[0072] The communication device 1004 is hardware (transmission / reception device) for communicating between computers via at least one of a wired network and a wireless network, and is also referred to as, for example, a network device, a network controller, a network card, or a communication module. The communication device 1004 may be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc. to realize at least one of frequency division duplex (FDD) and time division duplex (TDD). For example, the above-mentioned communication unit 102 may be realized by the communication device 1004. The communication device 1004 may be implemented with a transmitter and a receiver that are physically or logically separated.

[0073] The input device 1005 is an input device (e.g., a keyboard, a mouse, a microphone, a switch, a button, a sensor, etc.) that receives input from the outside. The output device 1006 is an output device (e.g., a display, a speaker, an LED lamp, etc.) that outputs to the outside. Note that the input device 1005 and the output device 1006 may be integrated into one device (e.g., a touch panel).

[0074] Furthermore, each device, such as the processor 1001 and the memory 1002, is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or may be configured using different buses between each device.

[0075] Furthermore, device 100 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, processor 1001 may be implemented using at least one of these pieces of hardware.

[0076] The notification of information is not limited to the aspects / embodiments described in the present disclosure and may be performed using other methods. For example, the notification of information may be performed by physical layer signaling (e.g., Downlink Control Information (DCI) and Uplink Control Information (UCI)), higher layer signaling (e.g., Radio Resource Control (RRC) signaling, Medium Access Control (MAC) signaling, broadcast information (Master Information Block (MIB) and System Information Block (SIB))), other signals, or a combination thereof. Furthermore, the RRC signaling may be referred to as an RRC message, and may be, for example, an RRC Connection Setup message, an RRC Connection Reconfiguration message, or the like.

[0077] The order of the procedures, sequences, flowcharts, etc. of each aspect / embodiment described in this disclosure may be changed unless it is consistent. For example, the methods described in this disclosure present elements of various steps using an example order, and are not limited to the particular order presented.

[0078] Input and output information may be stored in a specific location (for example, memory) or may be managed using a management table. Input and output information may be overwritten, updated, or added to. Output information may be deleted. Input information may be sent to another device.

[0079] The determination may be made based on a value represented by one bit (0 or 1), a Boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0080] The aspects / embodiments described in this disclosure may be used alone, in combination, or switched depending on the implementation. Notification of predetermined information (e.g., notification that "X is true") is not limited to explicit notification, but may be implicit (e.g., not notifying the predetermined information).

[0081] Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure.

[0082] Software shall be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0083] Software, instructions, information, etc. may also be transmitted or received over a transmission medium. For example, if software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave), then these wired and / or wireless technologies are included within the definition of transmission media.

[0084] The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.

[0085] Note that terms described in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings. For example, at least one of a channel and a symbol may be a signal (signaling). Furthermore, a signal may be a message. Furthermore, a component carrier (CC) may be called a carrier frequency, a cell, a frequency carrier, etc.

[0086] Furthermore, the information, parameters, etc. described in the present disclosure may be expressed using absolute values, may be expressed using relative values ​​from a predetermined value, or may be expressed using other corresponding information. For example, a radio resource may be indicated by an index.

[0087] The names used for the above-described parameters are not intended to be limiting in any way. Furthermore, the mathematical expressions using these parameters may differ from those explicitly disclosed in this disclosure. The various channels (e.g., PUCCH, PDCCH, etc.) and information elements may be identified by any suitable names, and therefore the various names assigned to these various channels and information elements are not intended to be limiting in any way.

[0088] In this disclosure, the terms "Mobile Station (MS)," "user terminal," "User Equipment (UE)," "terminal," and the like may be used interchangeably.

[0089] A mobile station may also be referred to by those skilled in the art as a subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, or some other suitable terminology.

[0090] As used in this disclosure, the terms "determining" and "determining" may encompass a wide variety of actions. "Determining" and "determining" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, inquiring (e.g., searching in a table, database, or other data structure), ascertaining, and the like. "Determining" and "determining" may also include receiving (e.g., receiving information), transmitting (e.g., sending information), input, output, accessing (e.g., accessing data in memory), and the like. Furthermore, "judgment" and "decision" can include regarding resolving, selecting, choosing, establishing, comparing, etc. as having been "judged" or "decided." In other words, "judgment" and "decision" can include regarding some action as having been "judged" or "decided." Furthermore, "judgment (decision)" can be interpreted as "assuming," "expecting," "considering," etc.

[0091] The terms "connected," "coupled," or any variation thereof, refer to any direct or indirect connection or coupling between two or more elements, and may include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements may be physical, logical, or a combination thereof. For example, "connected" may be read as "access." As used in this disclosure, two elements may be considered to be "connected" or "coupled" to each other using one or more wires, cables, and / or printed electrical connections, as well as electromagnetic energy having wavelengths in the radio frequency range, microwave range, and optical (both visible and invisible) range, as some non-limiting and non-exhaustive examples.

[0092] As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0093] As used in this disclosure, any reference to an element using a designation such as "first," "second," etc. does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must in some way precede the second element.

[0094] When the terms "include," "including," and variations thereof are used in this disclosure, these terms are intended to be inclusive, similar to the term "comprising." Furthermore, when the term "or" is used in this disclosure, it is not intended to be an exclusive or.

[0095] In this disclosure, where articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are in the plural form.

[0096] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "coupled" may also be interpreted in the same way as "different."

[0097] 100...device, 200...server, 101...sensor, 102...communication unit, 103...control unit, 101a, 101b, 101c...detection elements, 101d...conversion unit, 101e...memory, 101f...output unit.

Claims

1. A sensor comprising: a detection element that detects a state; a conversion unit that converts state information detected by the detection element into conversion information; an output unit that outputs the conversion information to an output destination; and a memory unit that stores inspection information, wherein the conversion unit is configured to convert the inspection information into conversion information.

2. The sensor according to claim 1, wherein the storage unit stores public key information, and the output unit outputs signed conversion information signed using the public key information.

3. The sensor according to claim 1, further comprising a random number generating unit that generates random numbers synchronized with an output destination, wherein the output unit outputs the generated random numbers together with the converted conversion information.

4. The sensor according to claim 3, wherein the random number generator generates random numbers based on a predetermined seed value, and the seed value is updated according to conditions.

5. The sensor according to claim 1, wherein the storage unit has a secure area and stores the inspection information in the secure area.

6. The sensor according to claim 1, wherein, in response to an instruction, the conversion unit either converts status information detected by the detection element into conversion information, or converts inspection information stored in the memory unit into conversion information.

7. The sensor according to claim 6, wherein the instruction is given at the time of initial startup of the sensor, and at the time of initial startup, the conversion unit converts the inspection information into conversion information.

8. The sensor according to claim 1, wherein the storage unit updates the inspection information according to conditions.

9. A terminal comprising: a sensor according to claim 1; and a transmitting unit that transmits conversion information based on test information obtained by said sensor to a verification device that verifies the validity of said conversion information, said verification device storing in advance correct answer information corresponding to said test information.

10. A method comprising: a conversion step of converting status information detected by a detection element that detects a status into converted information; and an output step of outputting the converted information to an output destination, wherein the conversion step converts inspection information previously stored in a memory unit into converted information in accordance with an instruction.

Images