Information processing system

Abstract

This information processing system for transmitting data realizes safer and more efficient information processing.　The information processing system comprises: a first type electronic apparatus having at least a transmission function; and a second type electronic apparatus having at least a reception function and including a storage medium for storing transmission data. The first type electronic apparatus includes: a target data acquisition processing means for acquiring original data which is to be transmitted and for generating target data by performing processing of adding a predetermined base value to the original data at a predetermined timing; and a transmission data transmission control means for controlling transmission of transmission data to the second type electronic apparatus. The second type electronic apparatus includes: a transmission data reception control means for executing control for receiving the transmission data; a validity confirmation means for confirming the validity of the received transmission data; and a storage control means for executing control for storing the transmission data the validity of which has been confirmed in the storage medium.

Description

Information processing system

[0001] The present invention relates to an information processing system.

[0002] Conventionally, when transmitting and receiving information, measures against risks related to data destruction are important. In this regard, techniques for reducing the data destruction risk during information transmission have been proposed (see, for example, Patent Document 1).

[0003] Japanese Unexamined Patent Application Publication No. 2017-026755

[0004] Here, in only the conventional technologies including the above-mentioned Patent Document 1, for example, when constructing a system for transmitting data from a sensor via a communication line, it was normal for one or a small number of CPUs (Central Processing Units) to centrally manage all the output information from the sensor. However, in recent years, the number and types of sensors have been increasing, and the load on the CPUs for managing the output information has been growing steadily. On the other hand, when a situation such as data corruption of transmitted data due to lightning, electrostatic discharge phenomena, electromagnetic wave noise from other electronic devices, etc. occurs, if it takes time for the CPU to perform data validity check processing, the CPU side cannot take prompt action. Therefore, in a situation where the importance of being able to immediately detect abnormalities in transmitted data that cause the system to malfunction while reducing the load on the CPU and further instantly normalize the abnormalities in transmitted data is increasing.

[0005] The present invention has been made in view of such a situation, and an object thereof is to realize safer and more efficient information processing in an information processing system that performs data transmission.

[0006] To achieve the above objective, the present invention provides an information processing system comprising: a first type electronic device having at least a transmission function for transmitting transmission data in accordance with a predetermined wireless communication method; and a second type electronic device having at least a reception function for receiving the transmission data in accordance with the predetermined wireless communication method and including a storage medium for storing the transmission data, wherein the first type electronic device includes: target data acquisition processing means for acquiring target data to be transmitted and generating the target data by processing the original data by adding a predetermined base value at a predetermined timing; transmission data generation means for generating the transmission data in predetermined units based on the target data; and transmission data transmission control means for executing control to transmit the transmission data to the second type electronic device in accordance with the predetermined wireless communication method; the second type electronic device includes: transmission data reception control means for executing control to receive the transmission data in accordance with the predetermined wireless communication method; validity verification means for confirming the validity of the received transmission data; and storage control means for executing control to store the validity-verified transmission data in the storage medium.The transmission data generation means of the first type electronic device includes: generation means that repeatedly processes to generate data for each predetermined unit based on the target data; first processing means that generates information including at least a hash value obtained from the second unit data as first associated information, using the data of the predetermined unit to be processed generated by the generation means this time as first unit data, and the data of the predetermined unit previously generated by the generation means as second unit data, and adds the first associated information to the first unit data to be processed; and second processing means that generates information including at least a hash value obtained from the first unit data as second associated information and adds the second associated information to the first unit data to be processed, and outputs the data to which the first associated information and the second associated information have been added to the first unit data generated by the generation means on the p-th time (p is an integer value of 2 or more) as the p-th transmission data, and the transmission data transmission control means of the first type electronic device is, The p-th transmission data is transmitted to the second electronic device, and the validity verification means of the second electronic device confirms that the hash value of the p-1th transmission obtained from the first association information of the p-th transmission data matches the hash value of the p-1th transmission stored in the storage medium, and recalculates the hash value of the p-th transmission based on the hash value of the p-1th transmission obtained from the first association information and the first unit data in the p-th transmission data, and confirms that the recalculated hash value of the p-th transmission data matches the hash value of the p-th transmission obtained from the second association information in the p-th transmission data, thereby confirming the validity of the p-th transmission data. The storage control means of the second electronic device then executes control to store the p-th transmission data, whose validity has been confirmed, in the storage medium together with the hash value of the p-th transmission obtained from the second association information of the p-th transmission data.

[0007] According to the present invention, it is possible to achieve safer and more efficient information processing in an information processing system that transmits data.

[0008] This is a schematic diagram showing the overall outline of an information processing system according to one embodiment of the present invention. This is a block diagram showing the functional configuration of the slave chip HCCS and master chip HCCM that constitute the information processing system according to one embodiment of the present invention. This is a schematic diagram showing the structure of transmitted data and how that data is transmitted and verified in a hash chain network. This is a block diagram showing the processing flow from when the slave chip HCCS requests a base value from the master chip HCCM and obtains it. This is a block diagram showing the processing flow from when the master chip HCCM requests a base value from the slave chip HCCS and obtains it. This is a block diagram showing the processing flow from when the slave chip HCCS or the master chip HCCM requests a base value and obtains a time-information-attached base value (one-time base value) combined with time information. This is a block diagram showing an example of a communication protocol used in an information processing system according to one embodiment of the present invention. This is a block diagram showing examples of connection frames and data transmission frames. This is a block diagram showing examples of setting frames, base value setting frames and synchronization frames in signal transmission from the master chip HCCM to the slave chip HCCS. This is a schematic diagram showing the overall configuration of an information processing system according to a second embodiment of the present invention.

[0009] Embodiments of the present invention will be described below with reference to the drawings.

[0010] The present invention relates to an information processing system. Figure 1 is a schematic diagram showing the overall outline of an information processing system according to one embodiment of the present invention. This system is, for example, a system located in a factory, and is composed of a slave hash chain chip (hereinafter referred to as "slave chip") and a master hash chain chip (hereinafter referred to as "master chip") that are interconnected via a predetermined wireless communication network (hereinafter referred to as "hash chain network"). Here, wireless communication includes wireless communication using radio waves, voice communication using sound waves, or communication using light, but the present invention is not limited to wireless communication and is also effective for wired communication.

[0011] Hereafter, when it is not necessary to distinguish between slave chips, they will be referred to as "Slave Chip HCCS," and when it is necessary to distinguish between them, they will be described as "Slave Chip HCCS-1," "Slave Chip HCCS-2," and so on.

[0012] The slave chip HCCS, for example, has a sensor and a transmission function that transmits data according to a predetermined wireless communication method. The master chip HCCM, for example, controls an actuator and has a receiving function that receives the transmitted data. Both hash chain chips each include a recording medium for recording the transmitted data.

[0013] Specifically, the slave chip HCCS acquires, for example, a detection signal from a connected sensor as target data to be transmitted. The slave chip HCCS generates block-level transmission data, as described later, from this target data. The generated transmission data is broadcast to the hash chain network.

[0014] Meanwhile, the master chip HCCM receives the transmitted data in block units, which will be described later. The master chip HCCM verifies the validity of the received transmission data and executes control over the actuators based on the transmission data.

[0015] In this system, the slave chip HCCS and the master chip HCCM are connected via a network, enabling safe and efficient transmission of control data, for example, from sensors to actuators.

[0016] The slave chip HCCS, the master chip HCCM, and the control devices described later are information processing devices equipped with a CPU (Central Processing Unit), memory-related units such as ROM (Read Only Memory) and RAM (Random Access Memory), input / output interfaces, and communication units. Through the cooperation of these various hardware components and software, various processes can be executed. As a result, the aforementioned information processing system can be provided.

[0017] Figure 2 is a block diagram showing the functional configuration of a slave chip HCCS and a master chip HCCM that constitute an information processing system according to one embodiment of the present invention. In the CPU of the slave chip HCCS, the target data acquisition and processing unit 51, the transmission data generation unit 52, the generation unit 53, the first processing unit 54, the second processing unit 55, the transmission data transmission control unit 56, and the base value acquisition unit 57 are functional. In the CPU of the master chip HCCM, the transmission data reception control unit 61, the validity verification unit 62, the storage control unit 63, the base value generation unit 64, the time synchronization unit 65, and the time information transmission unit 66 are functional.

[0018] The target data acquisition and processing unit 51 has the function of acquiring the raw data of the target data to be transmitted and generating the target data by processing it by adding a predetermined base value at a predetermined timing. The transmission data generation unit 52 has the function of generating transmission data for predetermined units based on the target data. The generation unit 53 has the function of repeating the process of generating data for predetermined units based on the target data. The first processing unit 54 has the function of using the data of the predetermined unit of the target to be processed this time, generated by the generation unit as first unit data, and the data of the predetermined unit generated last time as second unit data, generating information that includes at least the hash value obtained from the second unit data as first association information, and adding this information to the first unit data of the target to be processed. The second processing unit 55 has the function of generating information that includes at least the hash value obtained from the first unit data as second association information, and adding this second association information to the first unit data of the target to be processed. The transmission data transmission control unit 56 has the function of executing control to transmit the transmission data to the master chip HCCM according to a predetermined wireless communication method. The base value acquisition unit 57 has the function of acquiring base values ​​necessary when generating transmission data.

[0019] The transmission data reception control unit 61 has the function of executing control to receive transmission data according to a predetermined wireless communication method. The validity verification unit 62 has the function of verifying the validity of the received transmission data. The storage control unit 63 has the function of executing control to store the verified transmission data in a storage medium. The base value generation unit 64 has the function of generating base values. The time synchronization unit 65 has the function of synchronizing the time with the recording device group. The time information transmission unit 66 has the function of transmitting time information based on the synchronized time to the slave chip HCCS.

[0020] Figure 3 is a schematic diagram showing the structure of transmitted data and how that data is transmitted and verified within the hash chain network.

[0021] The transmitted data consists of data blocks B1, B2, and B3, and association information attached to each data block. For example, transmitted data B2 has data block BD2, first association information HD2 which includes the hash value of the previous transmitted data B1, and second association information FT2 which includes the hash value of data block BD2 itself.

[0022] The validity of the transmitted data is verified using the following procedure. First, it is checked whether the previous (N-1) hash value obtained from the first associated information HD2 of the transmitted data B2 matches the previous hash value recorded on the storage medium. Next, the current hash value is recalculated based on the previous hash value obtained from the first associated information HD2 of the transmitted data B2 and the data block BD2, and it is checked whether the recalculated current hash value matches the current hash value obtained from the second associated information FT2 of the transmitted data B2.

[0023] These verifications ensure the continuity and integrity of the transmitted data, preventing data tampering and unauthorized insertion. The verified transmitted data is recorded on the storage medium along with its hash value.

[0024] The setting of baseline values ​​from the master chip HCCM to the slave chip HCCS is performed at the following timings.

[0025] First, the base value acquisition unit 57 of the slave chip HCCS requests a base value from the master chip HCCM when the slave chip HCCS is started up. Similarly, the base value request is also performed when the slave chip HCCS is reset or reconfigured.

[0026] Meanwhile, the base value generation unit 64 of the master chip HCCM sends a request to the slave chip HCCS to reset the base value when it is time for periodic base value updates or when emergency resetting is required.

[0027] At these times, the aforementioned base value request and authentication processing flow is executed.

[0028] Figure 4 is a block diagram showing the processing flow from when the slave chip HCCS requests a baseline value from the master chip HCCM and when it is obtained.

[0029] In Figure 4, the slave chip HCCS is labeled "Slave," the master chip HCCM is labeled "Master," and the base value is labeled "Seed." This is the same in Figures 5 and beyond.

[0030] In step S101, the target data acquisition and processing unit 51 of the slave chip HCCS records unique information such as the individual ID and public key (for encryption, digital signature, and communication authentication, and may also be used from the secure element) in the initial stage on a group of recording devices BCN, which is represented by a blockchain network BCN. The group of recording devices BCN may be an independent information recording device.

[0031] In step S102, the base value acquisition unit 57 of the slave chip HCCS requests a base value from the master chip HCCM. In step S103, the base value generation unit 64 of the master chip HCCM receives this request and accepts the base value request.

[0032] In step S104, the transmission data transmission control unit 56 of the slave chip HCCS transmits unique information such as an individual ID to the master chip HCCM, and the transmission data reception control unit 61 of the master chip HCCM receives it.

[0033] In step S105, the authentication unit 62 of the master chip HCCM accesses an information recording device (such as a blockchain) based on the received unique information. In step S106, the authentication unit 62 of the master chip HCCM obtains a public key using the unique information as a key.

[0034] In step S107, the authenticity verification unit 62 of the master chip HCCM confirms that unique information is registered and that a public key can be obtained, and authenticates that it is a legitimate slave chip HCCS. After this authentication, the base value generation unit 64 generates a base value, encrypts it with the obtained public key, and transmits it to the slave chip HCCS via the transmission data transmission control unit 56. Instead of recording it in an information recording device, it may be recorded directly in the master chip HCCM. When recording in the master chip HCCM, upon receiving a unique ID from the slave chip HCCS, it compares it with the information recorded in itself, authenticates that it is a legitimate slave if there is a match for the unique ID, obtains the public key recorded in association with that unique ID, encrypts the base value, and transmits it.

[0035] In step S108, the transmission data reception control unit 61 of the slave chip HCCS receives the encrypted base value, and the base value acquisition unit 57 decrypts it with its own secret key to acquire the base value.

[0036] Figure 5 is a block diagram showing the processing flow from when the master chip HCCM requests a baseline value from the slave chip HCCS and when it is obtained.

[0037] In step S201, the target data acquisition and processing unit 51 of the slave chip HCCS records unique information such as the individual ID and public key (for encryption, digital signature, and communication authentication, which may also be used from the secure element) in the recording device group BCN in its initial stage.

[0038] In step S202, the base value generation unit 64 of the master chip HCCM requests a base value request from the slave chip HCCS using a setting frame. In step S203, the transmission data reception control unit 61 of the slave chip HCCS receives this request and sends back an ACK via the transmission data transmission control unit 56.

[0039] In step S204, the transmission data transmission control unit 56 of the slave chip HCCS transmits unique information such as an individual ID to the master chip HCCM. In step S205, the transmission data reception control unit 61 of the master chip HCCM receives this information.

[0040] In step S206, the authenticity verification unit 62 of the master chip HCCM accesses the recording device group BCN based on the received unique information and obtains a public key using the unique information as a key. After confirming that the unique information is registered and that a public key can be obtained, it authenticates that it is a legitimate slave chip HCCS.

[0041] In step S207, the base value generation unit 64 of the master chip HCCM generates a base value, and the transmission data transmission control unit 56 uses a base value setting frame to transmit the base value encrypted with the slave chip's public key. The data may be recorded directly on the master chip HCCM instead of on the information recording device. When recording on the master chip HCCM, upon receiving a unique ID from the slave chip HCCS, it compares the information recorded on itself, authenticates that it is a legitimate slave if there is a match for the unique ID, obtains the public key recorded in association with that unique ID, encrypts the base value, and transmits it. The transmission data reception control unit 61 of the slave chip HCCS receives the encrypted base value.

[0042] In step S208, the base value acquisition unit 57 of the slave chip HCCS decrypts the received encrypted base value with its own secret key to acquire the base value.

[0043] By the way, in data transmission using a base value, if one data block is eavesdropped and subjected to a brute-force attack, there is a risk that the base value will be calculated through long-term analysis. This risk becomes particularly prominent in intermittent data transmission.

[0044] To avoid this risk, it is useful to appropriately change the base value. However, it may be difficult to change the base value due to hardware constraints. Therefore, as a method of greatly reducing the risk of the base value being calculated even when the transmission interval becomes long while sharing the base value at the initial setting, dynamic generation of the base value using time information is considered.

[0045] Specifically, by applying the mechanism of time-based one-time passwords, a hash value is calculated using the base value and time information, and this is used as the one-time base value. Since this method requires time synchronization between the master chip HCCM and the slave chip HCCS, the following describes the initial setting method for performing time synchronization with the base value.

[0046] FIG. 6 is a block diagram showing a processing flow until the slave chip HCCS or the master chip HCCM requests a base value and obtains a base value with time information (one-time base value) combined with time information.

[0047] In step S301, the target data acquisition and processing unit 51 of the slave chip HCCS records unique information such as the individual ID, public key (for encryption, digital signature, and communication authentication, which may be used from the secure element) in the recording device group BCN at its initial stage.

[0048] In step S302, the time synchronization unit 65 of the master chip HCCM synchronizes the time with the information processing recording device.

[0049] In step S303, the time information transmission unit 66 of the master chip HCCM transmits time information to the slave chip HCCS.

[0050] In step S304, the transmission data reception control unit 61 of the slave chip HCCS receives this time information and sends back an acceptance of time synchronization via the transmission data transmission control unit 56.

[0051] In step S305, the base value generation unit 64 of the master chip HCCM requests a base value, and the base value acquisition unit 57 of the slave chip HCCS accepts it.

[0052] In step S306, the transmission data reception control unit 61 of the master chip HCCM receives unique information such as an individual ID from the slave chip HCCS.

[0053] In step S307, the authentication unit 62 of the master chip HCCM accesses the recording device group BCN based on the received unique information and obtains a public key using the unique information as a key.

[0054] In step S308, the authenticity verification unit 62 of the master chip HCCM confirms that unique information is registered and that a public key can be obtained, and authenticates that it is a legitimate slave chip HCCS.

[0055] In step S309, the base value generation unit 64 of the master chip HCCM generates a base value, and the transmission data transmission control unit 56 encrypts it with the public key of the slave chip and transmits it. Instead of recording it in an information recording device, it may be recorded directly in the master chip HCCM. When recording in the master chip HCCM, upon receiving a unique ID from the slave chip HCCS, it compares it with the information recorded in itself, authenticates that it is a legitimate slave if there is a match for the unique ID, obtains the public key recorded in association with that unique ID, encrypts the base value, and transmits it. At that time, the master may use its own time, or it may obtain the time from an NTP server.

[0056] In step S310, the transmission data reception control unit 61 of the slave chip HCCS receives the encrypted base value, and the base value acquisition unit 57 decrypts it with its own secret key to obtain the base value. Subsequently, the base value acquisition unit 57 generates a one-time base value by combining the acquired time information and the base value.

[0057] Figure 7 is a block diagram showing an example of a communication protocol used in an information processing system according to one embodiment of the present invention. When the protocol in the example of Figure 7 is applied to the information processing system of the present invention, the transmission data in block units having a hash value portion is encrypted before transmission. However, encryption is not mandatory.

[0058] However, the application of this protocol is not particularly limited to the example in Figure 7. For example, the slave chip HCCS : master chip HCCM = N : M (where N and M are any mutually independent integers) may be used. Also, for example, the device does not necessarily need to function as either the slave chip HCCS or the master chip HCCM as in the example in Figure 7; a device that can function as either the slave chip HCCS or the master chip HCCM may be used.

[0059] In the example protocol shown in Figure 7, it is specified that the following series of exchanges, from steps S21 to S25, will be executed.

[0060] In step S21, when the slave chip HCCS requests text transmission from the master chip HCCM, it sends an ENQ (Enquiry) signal to the master chip HCCM as an inquiry signal. In step S22, when the master chip HCCM receives the ENQ signal, it sends an ACK (Acknowledge) signal to the slave chip HCCS as an acknowledgment signal. In step S23, the master chip HCCM sends a DLE (Data Link Escape) signal to all slave chip HCCS as a data link escape signal. This DLE signal indicates that the subsequent data is a control signal. A slave chip HCCS that receives a DLE signal enters a transmission standby (idling) state. However, a slave chip HCCS that receives an ACK signal in response to an ENQ signal ignores the DLE signal and does not enter an idling state. In step S24, the slave chip HCCS transmits text (e.g., transmission data in block units). In step S25, when the master chip HCCM receives the text, it transmits an ACK signal to the slave chip HCCS.

[0061] Here, in step S23, the DLE signal may be sent not only to the slave chip HCCS but also to other slave chips HCCS (the second slave chip HCCS in the example of Figure 7). Alternatively, it may be sent simultaneously to all addresses.

[0062] Here, the protocol may specify that the order of steps S22 and S23 is reversed. In this case, the slave chip HCCS sends a text transmission request as an ENQ signal to the master chip HCCM. Next, the master chip HCCM sends a DLE signal to all slave chips HCCS except the one that is currently HCCS. A slave chip HCCS that receives a DLE signal enters a transmission standby (idling) state. Next, when the master chip HCCM receives an ENQ signal, it sends an ACK signal to the slave chip HCCS. A slave chip HCCS that receives an ACK signal in response to an ENQ signal ignores the DLE signal. The slave chip HCCS transmits a text. When the master chip HCCM receives the text, it sends an ACK signal to the slave chip HCCS.

[0063] Furthermore, the application of the wireless protocol shown in Figure 7 is not particularly limited to the hash chain network in the information processing system of the present invention; any network to which the master chip HCCM and slave chip HCCS can be applied is sufficient.

[0064] Next, with reference to Figures 8 and 9, the actual transmission configuration of a data signal according to one embodiment of the present invention will be described. Figure 8 is a block diagram showing examples of connection frames and data transmission frames. Figure 9 is a block diagram showing examples of setting frames, base value setting frames, and synchronization frames in signal transmission from master chip HCCM to slave chip HCCS.

[0065] The data transmission methods shown in Figures 4 to 6 will be explained below with reference to Figures 8 and 9. Similar execution methods will be omitted from explanation as appropriate.

[0066] In step S102 of Figure 4, the base value request from the slave chip HCCS to the master chip HCCM is performed by sending empty text using the data transmission frame shown in Figure 8. In step S103, the master chip HCCM accepts the base value request from the slave chip HCCS by returning an ACK signal using the connection frame shown in Figure 8. In step S107 of Figure 4, the master chip HCCM transmits the base value to the slave chip HCCS using the base value setting frame shown in Figure 9.

[0067] In step S202 of Figure 5, the base value request from the master chip HCCM to the slave chip HCCS is executed using the configuration frame shown in Figure 9. In step S203, the slave chip HCCS accepts the request from the master chip HCCM by returning an ACK signal using the connection frame shown in Figure 8.

[0068] In step S303 of Figure 6, the transmission of time information from the master chip HCCM to the slave chip HCCS is performed using the synchronization frame shown in Figure 9. In step S304, the slave chip HCCS accepts the time synchronization by returning an ACK signal using the connection frame shown in Figure 8. In step S305, the slave chip HCCS accepts the base value request by returning an ACK signal using the connection frame shown in Figure 8. Because the hash chain can be used to verify and determine the origin of the data, it can be used for authentication. It can be used not only for smart keys, but also for hardware wallets, apartment keys, and authentication between devices (e.g., drones).

[0069] (Second Embodiment) In the first embodiment described above, data transmission from the slave chip HCCS to the master chip HCCM within the local hash chain network and its processing were explained. In this embodiment, a method for securely recording data stored in the master chip HCCM to the blockchain network BCN will be described. The hash chain chip, transmission protocol, etc., described in the first embodiment are applied similarly.

[0070] Figure 10 is a schematic diagram showing the overall configuration of an information processing system according to a second embodiment of the present invention.

[0071] Within the local hash chain network, data is transmitted from the slave chip HCCS to the master chip HCCM, and this data is stored in the storage medium of the master chip HCCM for a certain period of time. At regular intervals, the master chip HCCM transmits the stored data to the blockchain node BCN-1 of the blockchain network BCN, and records it in the blockchain network BCN.

[0072] However, since blockchain node BCN-1 is connected to the internet, there is a risk that data within blockchain node BCN-1 may be tampered with due to external hacking attacks, etc. This embodiment describes countermeasures against such risks.

[0073] Figure 10 is a block diagram showing the configuration of an information processing system according to a second embodiment of the present invention. As shown in Figure 10, the information processing system of this embodiment is configured to include a group of recording devices BCN, which includes a blockchain node BCN-1 connected to the internet, and a plurality of Type II electronic devices HCCMs connected thereto. Among the Type II electronic devices HCCMs, a specific Type II electronic device that stores transmission data in a storage medium 18 is distinguished as the storage target Type II electronic device HCCM-A. There are also ordinary Type II electronic devices HCCMs that do not store transmission data.

[0074] The storage target Type 2 electronic devices HCCM-A1, HCCM-A2, HCCM-A3, and HCCM-A4 are each located within a local hash chain network and receive data from their corresponding slave chips HCCS (Type 1 electronic devices), which are then stored in the storage medium 18 by the storage control unit 63. Of these, only the storage target Type 2 electronic device HCCM-A1 is connected to the recording device group BCN, while the other storage target Type 2 electronic devices HCCM-A2, HCCM-A3, and HCCM-A4 are not connected to the internet.

[0075] The storage target Type 2 electronic device HCCM-A stores block data received from the slave chip HCCS in the storage medium 18 for a certain period of time via the storage control unit 63. At this time, the storage target Type 2 electronic device HCCM-A stores the current hash value of the data stored in the storage medium 18. Then, each time new data is added, it calculates the total hash value of that data. Note that a normal Type 2 electronic device HCCM does not perform such hash value storage or calculation.

[0076] For example, one possible method is to calculate the total hash value from the sum of the current hash values ​​each time a new hash value is added (new data is added), or to calculate the hash value of the latest current hash value and the total hash value.

[0077] After a certain period, the Type 2 electronic device HCCM-A1, which is to be stored in the recording device group BCN, checks the total hash value against the other Type 2 electronic devices HCCM-A2, HCCM-A3, and HCCM-A4. At this time, the hash value is not compared with a normal Type 2 electronic device HCCM. If the hash value stored in the storage medium 18 of the Type 2 electronic device HCCM-A1 is the same as the hash value stored in the storage medium 18 of the other Type 2 electronic devices HCCM-A2, HCCM-A3, and HCCM-A4, the data stored in the storage medium 18 is recorded to the blockchain network BCN via the blockchain node BCN-1 included in the recording device group BCN.

[0078] In this way, by comparing the total hash values ​​stored in the storage medium 18 across multiple Type 2 electronic devices HCCM-A, it is possible to confirm that the data on the Type 2 electronic device HCCM-A1 connected to the Internet has not been tampered with. This reduces the risk of data within the recording device group BCN being altered due to hacking attacks or the like.

[0079] Furthermore, it is desirable that the number of Type 2 electronic devices HCCM-A that are not connected to the internet be (2N+1) for N Type 2 electronic devices HCCM-A that are connected to the internet. In this embodiment, since there is one Type 2 electronic device HCCM-A1 that is connected to the internet, three Type 2 electronic devices HCCM-A2, HCCM-A3, and HCCM-A4 that are not connected to the internet are provided.

[0080] In summary, the information processing system to which the present invention applies only needs to have the following configuration, and can take various forms.

[0081] The information processing system includes a first type electronic device (for example, a slave hash chain chip HCCS in Figure 1) having at least a transmission function to transmit transmission data according to a predetermined wireless communication method, and a second type electronic device (for example, a master hash chain chip HCCM in Figure 1) having at least a reception function to receive the transmission data according to the predetermined wireless communication method and including a storage medium for storing the transmission data, wherein the first type electronic device includes a target data acquisition and processing means (for example, a target data acquisition and processing unit 51 in Figure 2) that acquires the raw data of the target data to be transmitted and generates the target data by processing the raw data to add a predetermined base value at a predetermined timing, a transmission data generation means (for example, a transmission data generation unit 52 in Figure 2) that generates the transmission data for each predetermined unit based on the target data, and a transmission data transmission control means (for example, a transmission data transmission control unit 56 in Figure 2) that executes control to transmit the transmission data to the second type electronic device according to the predetermined wireless communication method. The second type electronic device comprises: a transmission data reception control means (for example, a transmission data reception control unit 61 in Figure 2) that executes control to receive the transmission data in accordance with the predetermined wireless communication method; a validity verification means (for example, a validity verification unit 62 in Figure 2) that confirms the validity of the received transmission data; and a storage control means (for example, a storage control unit 63 in Figure 2) that executes control to store the transmission data whose validity has been confirmed in the storage medium; the transmission data generation means of the first type electronic device comprises: a generation means (for example, a generation unit 53 in Figure 2) that repeats the process of generating data for each predetermined unit based on the target data; and a first processing means (for example, a first processing unit 54 in Figure 2) that generates information including at least a hash value obtained from the second unit data as first association information, using the data of the predetermined unit to be processed this time generated by the generation means as first unit data, and the data of the predetermined unit to be processed previously generated by the generation means as second unit data, and adds the first association information to the first unit data to be processed;The system includes a second processing means (for example, the second processing unit 55 in Figure 2) that generates information including at least the hash value obtained from the first unit data as second association information, and adds the second association information to the first unit data to be processed, and outputs data to which the first association information and the second association information have been added to the first unit data generated by the generation means on the p-th time (where p is an integer value of 2 or more) as the p-th transmission data, the transmission data transmission control means of the first electronic device executes control to transmit the p-th transmission data to the second electronic device, and the validity verification means of the second electronic device confirms that the p-1th hash value obtained from the first association information of the p-th transmission data matches the p-1th hash value stored in the storage medium, The p-th transmission data is recalculated based on the p-1th hash value obtained from the first association information and the first unit data, and the validity of the p-th transmission data is confirmed by confirming that the recalculated p-th hash value matches the p-th hash value obtained from the second association information in the p-th transmission data. The storage control means of the second electronic device then executes control to store the p-th transmission data, whose validity has been confirmed, in the storage medium together with the p-th hash value obtained from the second association information of the p-th transmission data. This allows the validity of the transmission data to be confirmed by the chain of hash values, thus preventing data tampering and unauthorized insertion (for example, as shown in Figure 3, the continuity and completeness of the transmission data are guaranteed by confirming that the previous hash value obtained from the first association information HD2 of the transmission data B2 matches the hash value recorded in the storage medium, and that the recalculated hash value in the transmission data B2 matches the hash value obtained from the second association information FT2).Furthermore, by implementing communication between the slave chip HCCS and the master chip HCCM using wireless communication, the number of communication cables within the factory can be reduced, resulting in more efficient use of physical space and improved maintenance efficiency (for example, as shown in Figure 1, the slave chip HCCS and the master chip HCCM are connected via wireless communication).

[0082] Furthermore, the information processing system is composed of one or more recording devices arranged outside the first type electronic device (for example, the slave hash chip HCCS in Figure 1) and the second type electronic device (for example, the master hash chip HCCM in Figure 1), and includes a group of recording devices (for example, the group of recording devices BCN in Figure 1) that pre-records unique information of the first type electronic device, including an electronic key associated with the first type electronic device; the second type electronic device further includes a base value generation means (for example, the base value generation unit 64 in Figure 2) that generates the base value; the first type electronic device further includes a base value acquisition means (for example, the base value acquisition unit 57 in Figure 2) that acquires the base value; the base value acquisition means of the first type electronic device provides the unique information of the first type electronic device to the second type electronic device, acquires an encrypted base value from the second type electronic device obtained as a result of the base value generated by the second type electronic device using the unique information being encrypted with the electronic key, and acquires the base value by decrypting the encrypted base value; The base value generation means of the second type electronic device may authenticate the first type electronic device by recording the unique information provided by the first type electronic device in the recording device group, obtain the electronic key contained in the unique information, generate the base value upon authentication of the first type electronic device, generate an encrypted base value by encrypting it using the obtained electronic key, and provide the encrypted base value to the first type electronic device. This enables secure sharing of the base value through authentication using the recording device group BCN and encryption using an electronic key (for example, as shown in Figures 4 and 5, by authenticating the unique information of a slave chip HCCS with the recording device group BCN and transmitting a base value encrypted with a public key, only legitimate slave chip HCCS can obtain the base value). Furthermore, by securely providing the base value, man-in-the-middle attacks can be prevented and the reliability of communication by hash chain can be ensured (for example, the authentication and encryption process shown in Figures 4 and 5 can prevent the leakage of the base value to unauthorized devices).

[0083] Furthermore, in the information processing system, the base value acquisition means of the first type electronic device or the base value generation means of the second type electronic device further requests the other electronic device to acquire the base value, the base value generation means of the second type electronic device or the base value acquisition means of the first type electronic device, which becomes the other electronic device, further accepts the request, and the base value generation means of the second type electronic device generates the base value triggered by the acceptance. The request and acceptance for acquiring the base value may correspond to the base value request and acceptance process shown, for example, in steps S202 to S203 of Figure 5. By clarifying the procedure for requesting and accepting the base value, the transfer of the base value can be ensured, and the reliability of communication is improved (for example, as shown in steps S202 and S203 of Figure 5, the transfer of the base value can be reliably performed by going through the procedure of requesting and accepting the base value).

[0084] In the information processing system, the first type electronic equipment and the second type electronic equipment communicate with each other according to a protocol in which, as a protocol, a transmission requesting device among a plurality of transmission target devices transmits an ENQ signal indicating a request for transmission data to a receiving device, and when the receiving device receives the ENQ signal, it transmits an ACK signal to the transmission requesting device and also transmits a DLE signal to the plurality of transmission target devices, the transmission requesting device transmits the transmission data to the receiving device, and when the receiving device receives the transmission data, it transmits an ACK signal to the transmission requesting device, and the base value acquisition means of the first type electronic equipment and the second type electronic equipment Of the base value generation means, the means that requests the acquisition of the base value requests the other electronic device to acquire the base value. When the first type electronic device functions as the transmission target device, the base value acquisition means requests the base value from the second type electronic device by sending empty text using a data transmission frame. When the second type electronic device requests the acquisition of the base value and functions as the transmission target device, the base value generation means requests the base value from the first type electronic device by sending a predetermined code using a setting frame. This protocol may correspond to, for example, the communication protocol shown in Figure 6. This allows for efficient management of communication between multiple devices, improves the overall communication efficiency of the system, and by using a dedicated communication frame for base value requests, the distinction between base value requests and normal data transmission becomes clear, improving the operability of the system (for example, as shown in steps S303 and S304 of Figure 6, the purpose of communication becomes clear by using data transmission frames and setting frames separately).

[0085] In the information processing system, the second type of electronic device further includes a time synchronization means for synchronizing the time with the group of recording devices, and a time information transmission means for transmitting time information based on the synchronized time to the first type of electronic device. The base value generation means may create a base value for temporary use based on the base value and the time information. This makes it possible to generate a temporary base value (one-time base value) using time information, and even if the base value is leaked to a third party, it is possible to prevent analysis of the base value by brute force attacks (for example, as shown in step S310 of Figure 6, a one-time base value can be generated by combining time information and the base value, reducing the risk of analysis of the base value). This makes it possible to ensure the security of the base value by using time information even in the case of intermittent data transmission, and to maintain the reliability of communication even at long transmission intervals (for example, as shown in steps S302 and S303 of Figure 6, it is possible to generate a secure base value using time information by performing time synchronization).

[0086] A second embodiment is described below. The information processing system includes: a first type electronic device (for example, a slave chip HCCS shown in Figure 1) having at least a transmission function to transmit transmission data according to a predetermined wireless communication method; and a plurality of second type electronic devices (for example, a master chip HCCM, HCCM-A shown in Figure 1) having at least a reception function to receive the transmission data according to the predetermined wireless communication method and including a storage medium (for example, a storage medium 18 shown in Figure 2) for storing the transmission data; the first type electronic device includes: a target data acquisition and processing means (for example, a target data acquisition and processing unit 51 shown in Figure 2) for acquiring target data to be transmitted or for acquiring the source data of the target data and processing the source data to generate the target data; a transmission data generation means (for example, a transmission data generation unit 52 shown in Figure 2) for generating the transmission data in predetermined units based on the target data; and a transmission data transmission control means (for example, a transmission data transmission control unit 56 shown in Figure 2) for executing control to transmit the transmission data to the second type electronic device according to the predetermined wireless communication method. Each of the multiple Type II electronic devices that store the transmission data is designated as a storage target Type II electronic device (for example, the storage target Type II electronic device HCCM-A shown in Figure 10), and the storage target Type II electronic device comprises: a transmission data reception control means (for example, a transmission data reception control unit 61 shown in Figure 2) that executes control to receive the transmission data according to the predetermined wireless communication method; a validity verification means (for example, a validity verification unit 62 shown in Figure 2) that confirms the validity of the received transmission data; and a storage control means (for example, a storage control unit 63 shown in Figure 2) that executes control to store the transmission data whose validity has been confirmed in the storage medium, and the transmission data generation means of the Type I electronic device comprises: a generation means (for example, a generation unit 53 shown in Figure 2) that repeats the process of generating data for each predetermined unit based on the target data,The first processing means (for example, the first processing unit 54 shown in Figure 2) generates information including at least a hash value obtained from the second unit data as first associated information, using the data of the predetermined unit to be processed generated this time by the generation means as first unit data, and the data of the predetermined unit to be processed previously generated by the generation means as second unit data, and adds the first associated information to the first unit data to be processed; and the second processing means (for example, the second processing unit 55 shown in Figure 2) generates information including at least a hash value obtained from the first unit data as second associated information, and adds the second associated information to the first unit data to be processed; and outputs data to be transmitted as p-th transmission data to be transmitted to the first unit data, using the first unit data generated by the generation means on the p-th time (p is an integer value of 2 or more); the transmission data transmission control means of the first electronic device executes control to transmit the p-th transmission data to the second electronic device; and the legitimacy verification means of the second electronic device The system confirms that the hash value of the (p-1)th transmission obtained from the first association information of the p-th transmission data matches the hash value of the (p-1)th transmission stored in the storage medium, and recalculates the hash value of the p-th transmission based on the hash value of the (p-1)th transmission obtained from the first association information and the first unit data in the p-th transmission data, and confirms that the recalculated hash value of the p-th transmission data matches the hash value of the p-th transmission obtained from the second association information in the p-th transmission data, thereby confirming the validity of the p-th transmission data. The storage control means of the storage target type 2 electronic device executes control to store the p-th transmission data whose validity has been confirmed together with the hash value of the p-th transmission obtained from the second association information of the p-th transmission data in the storage medium. The information processing system is a group of recording devices (for example, the group of recording devices BCN shown in Figure 10) consisting of one or more recording devices arranged outside the type 1 electronic device and the plurality of type 2 electronic devices, and includes a group of recording devices connected to one or more of the plurality of type 2 electronic devices.The storage control means of the Type 2 electronic device to be stored further executes control to store the latest hash value based on the hash value of the p-th transmission in the storage medium when storing the p-th transmission data in the storage medium. Among the one or more Type 2 electronic devices to be stored, the one to be stored in the group of recording devices for the p-th transmission data is designated as the Type 2 electronic device to be stored (for example, HCCM-A1 shown in Figure 10), and the storage control means of the said Type 2 electronic device to be stored checks whether the latest hash values ​​stored in the one or more Type 2 electronic devices to be stored, including itself, all match, and on the condition that they match, executes control to store the p-th transmission data in the group of recording devices. This ensures the reliability of the data recorded in the group of recording devices and guarantees data consistency among multiple Type 2 electronic devices to be stored.

[0087] S... Information processing system, 51... Target data acquisition and processing unit, 52... Transmission data generation unit, 53... Generation unit, 54... First processing unit, 55... Second processing unit, 56... Transmission data transmission control unit, 57... Base value acquisition unit, 61... Transmission data reception control unit, 62... Validity verification unit, 63... Storage control unit, 64... Base value generation unit, 65... Time synchronization unit, 66... ​​Time information transmission unit, HCCS... Slave chip (slave hash chain chip), HCCM... Master chip (master hash chain chip), HCCM-A... Second type electronic device to be stored, BCN... Recording device group (blockchain network), 18... Storage medium

Claims

1. An information processing system comprising: a first type electronic device having at least a transmission function for transmitting transmission data in accordance with a predetermined wireless communication method; and a second type electronic device having at least a reception function for receiving the transmission data in accordance with the predetermined wireless communication method and including a storage medium for storing the transmission data, wherein the first type electronic device comprises: target data acquisition processing means for acquiring raw data of target data to be transmitted and generating the target data by processing the raw data by adding a predetermined base value at a predetermined timing; transmission data generation means for generating the transmission data in predetermined units based on the target data; and transmission data transmission control means for executing control to transmit the transmission data to the second type electronic device in accordance with the predetermined wireless communication method; the second type electronic device comprises: transmission data reception control means for executing control to receive the transmission data in accordance with the predetermined wireless communication method; validity verification means for confirming the validity of the received transmission data; and storage control means for executing control to store the validity-verified transmission data in the storage medium; and the transmission data generation means of the first type electronic device is The system includes: a generation means that repeatedly generates data for each predetermined unit based on the target data; a first processing means that generates information including at least a hash value obtained from the second unit data as first associated information, using the data of the predetermined unit to be processed generated by the generation means this time as first unit data, and the data of the predetermined unit previously generated by the generation means as second unit data, and adds the first associated information to the first unit data to be processed; and a second processing means that generates information including at least a hash value obtained from the first unit data as second associated information and adds the second associated information to the first unit data to be processed; and outputs data to be transmitted as p-th transmission data to be transmitted to the first unit data, with the first associated information and the second associated information added to the first unit data generated by the generation means on the p-th time (p is an integer value of 2 or more); and the transmission data transmission control means of the first type electronic device executes control to transmit the p-th transmission data to the second type electronic device.The validity verification means of the second type electronic device confirms that the hash value of the (p-1)th transmission obtained from the first association information of the p-th transmission data matches the hash value of the (p-1)th transmission stored in the storage medium, and recalculates the hash value of the p-th transmission based on the hash value of the (p-1)th transmission obtained from the first association information and the first unit data in the p-th transmission data, and confirms that the recalculated hash value of the p-th transmission data matches the hash value of the p-th transmission obtained from the second association information in the p-th transmission data, thereby confirming the validity of the p-th transmission data. The storage control means of the second type electronic device executes control to store the p-th transmission data, whose validity has been confirmed, in the storage medium together with the hash value of the p-th transmission obtained from the second association information of the p-th transmission data.

2. The information processing system comprises one or more recording devices located outside the first type electronic device and the second type electronic device, and includes a group of recording devices that pre-record unique information of the first type electronic device, including an electronic key associated with the first type electronic device; the second type electronic device further comprises a base value generation means for generating the base value; the first type electronic device further comprises a base value acquisition means for acquiring the base value; the base value acquisition means of the first type electronic device provides the unique information of the first type electronic device to the second type electronic device; the encrypted base value obtained as a result of the base value generated by the second type electronic device using the unique information being encrypted by the electronic key is acquired from the second type electronic device, and the base value is acquired by decrypting the encrypted base value; the base value generation means of the second type electronic device authenticates the first type electronic device by the fact that the unique information provided by the first type electronic device is recorded in the group of recording devices, and acquires the electronic key included in the unique information. The information processing system according to claim 1, comprising: generating a base value upon authentication of the first type electronic device; generating an encrypted base value by encrypting it using the acquired electronic key; and providing the encrypted base value to the first type electronic device.

3. The information processing system according to claim 2, wherein the base value acquisition means of the first type electronic device or the base value generation means of the second type electronic device further requests the other electronic device to acquire the base value, the base value generation means of the second type electronic device or the base value acquisition means of the first type electronic device which becomes the other electronic device further accepts the request, and the base value generation means of the second type electronic device generates the base value triggered by the acceptance.

4. The first type electronic device and the second type electronic device communicate with each other according to a protocol in which, as a protocol, a transmission requesting device among a plurality of transmitting target devices transmits an ENQ signal indicating a request for transmission data to a receiving device, the receiving device, upon receiving the ENQ signal, transmits an ACK signal to the transmission requesting device and transmits a DLE signal to the plurality of transmitting target devices, the transmission requesting device transmits the transmission data to the receiving device, and the receiving device, upon receiving the transmission data, transmits an ACK signal to the transmission requesting device; the base value acquisition means of the first type electronic device and the base value generation means of the second type electronic device, the means that requests the acquisition of the base value, requests the acquisition of the base value from the other electronic device; when the first type electronic device functions as a transmitting target device, the base value acquisition means requests the base value from the second type electronic device. The information processing system according to claim 2, wherein when the second type electronic device requests the acquisition of the base value and functions as the transmission target device, the base value generation means requests the first type electronic device to acquire the base value by sending a predetermined code using a setting frame.

5. The information processing system according to claim 2, wherein the second type electronic device further comprises a time synchronization means for synchronizing the time with the group of recording devices, and a time information transmission means for transmitting time information based on the synchronized time to the first type electronic device, and the base value generation means creates a base value for temporary use based on the base value and the time information.

Images