JP2006120081A - Failure analysis support terminal and failure analysis support information providing device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a simple failure analysis support terminal with high security and a failure analysis support information providing device. <P>SOLUTION: This failure analysis support terminal comprises a storing part 7 for storing know-how data for encrypted failure analysis, a key generating part 11 for generating a key for determining whether to decrypt encrypted know-how data and decrypting the encrypted know-how data on the basis of at least one of a device inherent code, an operator inherent code, a time code, a qualification code and a usage place code, a decrypting part 10 for decrypting the know-how data on the basis of the generated key, and a failure analyzing part 12 for using the decrypted know-how data to perform failure analysis processing. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a failure analysis support terminal and a failure analysis support information providing device for preventing leakage of know-how data of failure analysis as intellectual property owned by a business operator.

As data security,
MS-Access (DB) login and encryption functions,
・ Digital watermarking (embedding digital watermarks in intellectual property to detect unauthorized use),
・ Smart card (IC card),
・ DRM (Digital Rights Management),
・ NGSCB (Next-Generation Secure Computing Base)
-TCPA (Trusted Computing Platform Alliance) “Each device is equipped with a security chip“ TPM (Trusted Platform Module) ”and authenticated as device->BIOS->OS-> software”
・ SSC (Security Support Component) "Mount security chip called SSC on motherboard"
Are used to regulate the use of protected content and prevent illegal reproduction and copying.

  Such security technology is also used for preventing leakage of know-how data of failure analysis, for example, as intellectual property owned by a business operator. The manufacturer provides local service engineers with program codes and know-how data for supporting failure analysis of medical devices such as CT and MRI. Since there are areas where wireless network environments cannot be used, the usage form of the tool is a stand-alone type in which an application and a data file are installed in the information terminal 1 of the service engineer. In other words, it must be available even if it is not always connected to the network.

  On the other hand, there is a concern that our tools and know-how will leak outside due to the stand-alone form.

  An object of the present invention is to provide a failure analysis support terminal and a failure analysis support information providing device that are simple and have high security.

The first aspect of the present invention is based on at least one of a storage unit that stores encrypted know-how data for failure analysis, a device unique code, an operator unique code, a time code, a qualification code, and a use location code. A key generation unit that determines whether the encrypted know-how data may be decrypted and generates a key for decryption, and a decryption that decrypts the encrypted know-how data based on the generated key And a failure analysis processing unit that performs a failure analysis process using the decrypted know-how data.
A second aspect of the present invention is a storage unit for storing encrypted know-how data for failure analysis, and for decrypting the encrypted know-how data, the encrypted first key Whether or not the encrypted first key may be decrypted based on at least one of a device storage code, an operator unique code, a time code, a qualification code, and a usage location code A key generation unit that generates a second key for determining and decrypting the key, a key decryption unit that decrypts the encrypted first key based on the generated second key, and the decryption A know-how data decrypting unit that decrypts the encrypted know-how data based on the first key that has been encrypted; and a failure analysis processing unit that performs a failure analysis process using the decrypted know-how data. Failure analysis support It is a terminal.
According to a third aspect of the present invention, there is provided a storage unit for storing know-how data for failure analysis, a device-specific code, an operator-specific code, a time code, a qualification code, and a usage location code relating to a failure analysis support terminal that is an information providing destination. And encrypting the know-how data based on at least one of a device-specific code, an operator-specific code, a time code, a qualification code, and a usage location code. A program code for determining whether or not decryption is possible and generating a key for decryption, and a transmission unit that transmits the encrypted know-how data to the failure analysis support terminal. Is a failure analysis support information providing device.
A fourth aspect of the present invention is a storage unit that stores know-how data for failure analysis, a know-how data encryption unit that encrypts the know-how data, and a first for decrypting the encrypted know-how data. A first key data encryption unit that encrypts the key data of the device, and the encrypted first data based on at least one of a device unique code, an operator unique code, a time code, a qualification code, and a usage location code A program code for determining whether or not to decrypt the key data and generating a second key for decryption, the encrypted first key data, and the encrypted know-how A failure analysis support information providing apparatus comprising: a transmission unit that transmits data to the failure analysis support terminal.
According to a fifth aspect of the present invention, there is provided a storage unit for storing encrypted data, and the encrypted data based on at least one of a device unique code, an operator unique code, a time code, a qualification code, and a use place code. A key generation unit that determines whether or not to decrypt the key and generates a key for decryption, and a decryption unit that decrypts the encrypted data based on the generated key Is an information terminal.

  According to the present invention, it is possible to provide a failure analysis support terminal and a failure analysis support information providing device that are simple and have high security.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. Note that, as intellectual property data owned by a business operator and relatively easy to illegally use / copy, the know-how data for failure analysis will be described as an example here, but the invention is not limited thereto.
As shown in FIG. 1, as a client information terminal, for example, a failure analysis support terminal (hereinafter simply referred to as an information terminal) 1 receives information via an electronic communication line 4 such as a wide area communication line (WAN) or a local area communication line (LAN). It is connected to a failure analysis support information providing apparatus (hereinafter simply referred to as a server) 2 as a server. The failure analysis support information providing device 2 provides the failure analysis support terminal 1 with know-how data for failure analysis, a failure analysis program code for performing failure analysis processing using the know-how data, and further from the failure analysis program code. The main function is to provide a security box (security control program code) that accesses know-how data according to requirements. Therefore, the failure analysis support information providing device 2 includes a control unit 21, a know-how data key generation unit 22, a know-how data encryption processing unit 23, a content information generation unit 24, a content information key generation unit 25, and a content information encryption processing unit 26. , An authentication information registration unit 27, an authentication information inquiry unit 28, a know-how data storage unit 29, and a security box / support support software transmission unit 30. Details of these parts will be described later together with an explanation of the operation. The failure analysis support terminal 1 mainly performs failure analysis processing using know-how data provided from the failure analysis support information providing device 2 by a failure analysis program code, and performs security management of know-how data by a security box. It is a function. Therefore, the failure analysis support terminal 1 includes a communication unit 3, a control unit 6, a storage unit 7, an operation unit 8, a security box (security control unit) 9, a decryption processing unit 10, a key generation unit 11, support support software (failure Analysis unit) 12, display unit 13, authentication unit 14, unauthorized use detection unit 15, and data destruction unit 16. Details of these parts will be described later together with an explanation of the operation.

  As shown in FIG. 2, the support support software 12 accesses the know-how data via the security box 9. The security box 9 determines whether or not to decrypt based on at least one of a device unique code, an operator unique code, a time code, a qualification code, and a usage location code, and generates a decryption key for decryption. The key generation unit 11 is controlled. The security box 9 controls the decryption processing unit 10 to decrypt the encrypted know-how data using the decryption key generated by the key generation unit 11. The security box 9 delivers the decrypted know-how data to the support support software 12. The support support software 12 executes failure analysis processing of a medical image diagnostic apparatus such as an X-ray computed tomography apparatus using the decoded know-how data. With the know-how data, it is possible to identify or estimate the cause of failure and the location of failure from the symptom of the failure with high reliability.

  FIG. 3 shows a series of flow from know-how data encryption to decryption. The storage unit 29 of the server 2 stores (stores) original know-how data that is not encrypted. The know-how data is simply a correspondence table in which failure causes (and failure locations) are associated with failure symptoms. When the control unit 21 of the server 2 receives a use application from a certain information terminal 1, the information terminal 1 and the operator etc. supplied as authentication information from the information terminal 1 to the authentication information registration unit 27 together with the application The know-how data key generation unit 22 is used to create the encryption key 101 based on all or a predetermined combination of device specific code, operator specific code, time code, qualification code, and usage location code as authentication information specific to Control. The control unit 21 controls the know-how data encryption processing unit 23 to encrypt the know-how data according to the key 101 generated by the know-how data key generation unit 22.

  In addition, the control unit 21 uses the decryption key 201 for decrypting the encrypted know-how data as a device specific code, an operator specific code, a time code, a qualification code, and a usage location code as authentication information. The content information generation unit 24 is controlled to generate content information created based on a predetermined combination and storing the know-how data decryption key 201. Further, the control unit 21 converts the encryption key 102 for encrypting the content information into all or a predetermined combination of the device unique code, the operator unique code, the time code, the qualification code, and the usage location code as the authentication information. The content information key generation unit 25 is controlled to create the content based on the content. The control unit 21 controls the content information encryption processing unit 26 in order to encrypt the content information in accordance with the key 102 generated by the content information key generation unit 25.

  The security box / support support software transmission unit 30 decrypts the encrypted know-how data, support support software (support support program code), and know-how data after the authentication registration for the information terminal 1 that has applied for use. A security box as software (program code) and content information are transmitted. The information terminal 1 stores the encrypted know-how data and content information in the storage unit 7 and installs the support support software 12 and the security box 9.

  When using know-how data on the side of the information terminal 1, the control unit 6 together with the security box 9 is based on all or a predetermined combination of a device specific code, an operator specific code, a time code, a qualification code, and a usage location code. The key generation unit 11 is controlled to generate the decryption key 202 of the encrypted content information. The security box 9 controls the decryption processing unit 10 to decrypt the encrypted content information with the decryption key 202 generated by the key generation unit 11. The security box 9 extracts the key 201 for decrypting the know-how data from the decrypted content information, and controls the decryption processing unit 10 to decrypt the know-how data using the key 201.

  In the example of FIG. 3, the authentication information includes keys 102 and 202 for encrypting / decrypting content information corresponding to the encryption / decryption key 101/201 for know-how data encryption / decryption. It is generated from all or a predetermined combination of device specific code, operator specific code, time code, qualification code, and usage location code. However, as shown in FIG. Generation / decryption encryption / decryption key 101/201, device-specific code included in authentication information, operator-specific code, time code, qualification code, usage location code, or a predetermined combination It may be.

  In this way, in order to protect know-how data for failure analysis, for example, as intellectual property (data) owned by a business operator, the data is encrypted for each user to be used, and a key for decrypting the data is used for the authentication information. By creating a partial combination, our employees can use it only in a predetermined environment (designated machine, designated user, designated location). I can't copy. Even if it can be copied, a mechanism that cannot be used is realized, and illegal use of intellectual property can be prevented. For example, it prevents the outflow of know-how data used by a local service engineer for failure analysis of a medical device. Therefore, even if it is not authentication, it is used outside the specified environment, that is, when the device unique code, operator unique code, time code, qualification code, and usage location code do not match, the correct decryption key is not generated. Therefore, it is possible to ensure high security that the know-how data cannot be decrypted.

  As shown in FIG. 5, when using data, the information terminal 1 and the application server 2 are connected, and authentication information is registered in the registration unit 27 of the server 2. The server 2 generates a key 101 for encryption / decryption and encrypts know-how data. The encrypted know-how data, service support software 12 and security box 9 are installed in the terminal 1. The service support software 12 accesses the know-how data via the security box 9. Under the control of the security box 9, the decryption processing unit 10 generates a decryption key based on the authentication information and decrypts the know-how data. The user periodically connects to the server 2 and inquires about authentication information. The authentication information inquiry unit 28 of the server 2 checks the consistency of the authentication information transmitted at the time of use with the authentication information already registered in the registration unit 27. If it is not consistent, authentication is not performed and usage permission is not issued. If they are consistent, issue a license. When the use is stopped, a deletion application is made to the server 2. As a result, the authentication information related to the user or device is deleted from the registration unit 27. The unnecessary usage detection unit 15 does not query the authentication information, and when the expiration date of the security box 9 has passed, the unnecessary usage detection unit 15 determines that the usage is unauthorized, deletes the know-how data from the storage unit 7 to the data destruction unit 16, The deletion of the service support software 12 and the security box 9 is permitted.

  As shown in FIG. 6, when applying for use, the user's information terminal 1 and the server 2 are connected and authentication information is registered. The server 2 confirms whether the authentication information is correct through a callback connection. The key generation unit 22 of the application server 2 generates different encryption / decryption keys (know-how data keys) 101 and 201 for each user information terminal 1, and the encryption processing unit 23 encrypts the know-how data. Further, encryption / decryption keys (content keys) 102 and 202 are generated based on the authentication information, and the content information is encrypted (encapsulated). In the content information, a key 201 for decrypting encrypted know-how data and know-how data last access information for detecting unauthorized access are stored. The installation package is released to the public server 30. The user downloads the installation package from the public server 30. The encrypted know-how data, service support software 12, and security box 9 are installed in the information terminal 1 of the user.

  As a usage application method, for example, a user may apply through a network. The information terminal 1 that has been used / installed at the center may be lent to the user, or the send-back method (the information terminal 1 is sent to the center and the center personnel apply / install, and then Return information terminal 1).

As described above, as the authentication information registered in the registration unit 27 of the server 2,
・ Time authentication information (expiration date of security box),
-Device authentication information (MAC address, CPU ID, OS serial number, user or organization name, HDD serial number, security chip, etc. are used as authentication information for identifying the information terminal 1)
-Operator authentication information (uses password, bio (fingerprint, retina, voice, face, etc.) information entered by the operator as authentication information for identifying the operator)
・ Qualification authentication information (uses the user certificate information issued to the employee as information for authenticating the employee)
・ Use location authentication (As information for authenticating that it is a place where know-how data can be used, mutual authentication with the certificate of the medical device and the hospital from the hospital name and location of the certificate information or the identification information of the certificate information) Search and use name, location, GPS location information, PHS location information, search for location and hospital name from information from wireless IC tag, and hospital name and location from identification information in IC tag To do)
Etc.

  7, 8, and 9 show use of the security box 9. The user activates the service support software 12. The service support software 12 confirms the presence of the security box 9 and connects. If not, it ends. The security box 9 confirms the expiration date of the security box 9 by the time authentication means of the authentication unit 14 when the information terminal 1 is activated and when the service support software 12 is connected. The time authentication means obtains the current time information from one of the system time inside the information terminal 1 and an external device (radio clock, GPS, PHS, internal clock in the security box) or a combination thereof, and confirms the expiration date. To do. If the expiration date has expired, the process ends.

  The operation location authentication means of the authentication unit 14 specifies the operation location by mutual authentication with the medical device, GPS location information, PHS location information, or a wireless IC tag attached to the medical device, or a combination thereof. , Confirm. If it detects use outside the company, in a hospital where a medical device is installed, or outside the office of the user, it ends. When connected to a medical device, the latest CRL list is acquired. CRL is an abbreviation for Certificate Revocation List and is defined as a certificate revocation list.

  The support support software 12 and the security box 9 confirm whether the information (serial number, etc.) specifying the security box 9 is included in the CRL list. If it is included, the process ends. The device authentication means of the authentication unit 14 automatically acquires authentication information for specifying a device from the user information terminal 1. The operator authentication means of the authentication unit 14 prompts the user for password input and bio-authentication, and acquires authentication information. The qualification authentication means of the authentication unit 14 prompts the user to select a user certificate indicating that he is an employee, and acquires authentication information.

  The key generation unit 11 generates a content key 202 from any one of the device authentication information, the operator authentication information, the qualification authentication information, or a combination thereof, and the decryption processing unit 10 decrypts the content information. Also, the security box 9 acquires know-how data final access information included in the decrypted content information. The time authentication means confirms that there is no contradiction in the last access information (the current time is not past the last access date). If there is a conflict, exit. Know-how data is decrypted by the decryption processing unit 10 using the know-how data decryption key 201 included in the decrypted content information, and is stored as a temporary file in the local file on the information terminal 1 or the local device in the storage unit 7 or the security box. Store. The support support program 12 accesses the temporary file via the security box 9. At that time, the last access date and time of the content information is updated. When the access to the security box 9 ends, the temporary file is deleted. Update the last access date and time of content information.

  When the authentication information is inquired, the user transmits the authentication information via the network 4 and requests the inquiry from the inquiry unit 28 of the server 2 in order to update the expiration date of the security box 9. The inquiry unit 28 of the server 2 confirms whether the authentication information is correct through a callback connection. The inquiry unit 28 of the server 2 compares the authentication information registered at the time of application for use and updates the expiration date of the security box 9 if they match. Get the latest CRL list.

  In the deletion application, the terminal 1 makes a deletion application to the application server 2. The server 2 expires the expiration date of the security box 9. Information (serial number) specifying the security box 9 is added to the CRL list. The encryption know-how data, the service support software 12 and the security box 9 are deleted from the information terminal 1. The server 2 confirms that it has been deleted from the information terminal 1 by the callback connection. The usage deletion may be performed via the network 4 in the same manner as the usage application, the loan information terminal 1 may be returned, or a send-back method may be used.

  The unauthorized use detection unit 15 monitors and detects unauthorized use of the know-how data and the security box 9. Authentication information obtained by the time authentication means (system time of the information terminal 1 and external time) is compared, and if there is a difference of more than a certain date and time, it is determined as unauthorized access). In addition, the current time and the last access date and time of the content information are compared, and a contradiction (the current time is not past the last access date and time) is confirmed. Also, the expiration date of the security box 9 is confirmed. If the authentication information (location information) obtained by the usage location authentication means is other than the company, the hospital where the medical device is set, or the user's office location, it is determined that the access is unauthorized. When the decryption processing unit 10 continuously fails to decrypt, when the cumulative number of decryption failures exceeds a certain number of times, or when the total number of decryption times within the valid period exceeds the certain number of times, it is determined as unauthorized access. The encryption know-how data, the encryption know-how data last access information, the encryption know-how data key, and the temporary file are monitored, and if there is an access from other than the security box, it is determined as an unauthorized access.

  When the unauthorized use detection unit 15 determines that the unauthorized access is made, the data destruction unit 16 deletes the encrypted know-how data, the support support software 12, and the security box 9.

  According to the present embodiment, it can be used only when the employee is using it properly, and the data itself can be erased when it is used illegally (illegal copy or use for other purposes). Thereby, information assets can be used safely.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

The figure which shows the structure of the failure analysis assistance terminal which concerns on embodiment of this invention, and a failure analysis assistance information provision apparatus. The conceptual diagram which shows the role of the security box of FIG. The figure which shows the whole flow from encryption of encryption of know-how data in this embodiment. The figure which shows the other flow of the whole of encryption from an encryption of know-how data in this embodiment. The figure which shows the relevant operation | movement between the terminals / servers at the time of use application in this embodiment. The figure which shows the other relevant operation | movement between the terminals / servers at the time of use application in this embodiment. The figure which shows the authentication operation | movement by the side of an information terminal in this embodiment. The figure which shows the decoding operation | movement of the know-how data on the information terminal side in this embodiment. The figure which shows completion | finish operation | movement by the side of an information terminal in this embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Failure analysis support terminal (information terminal), 2 ... Failure analysis support information provision apparatus (information server), 3 ... Communication part, 4 ... Communication line, 5 ... Communication part, 6 ... Control part, 7 ... Memory | storage part, 8 Operation unit 9 Security box (security control unit) 10 Decomposition processing unit 11 Key generation unit 12 Failure analysis unit (support support software) 13 Display unit 14 Authentication unit 15 Unauthorized use case part, 16 ... data destruction part, 21 ... control part, 22 ... know-how data key generation part, 23 ... know-how data encryption processing part, 24 ... content information generation part, 25 ... content information key generation part, 26 ... Content information encryption processing unit, 27 ... authentication information registration unit, 28 ... authentication information inquiry unit, 29 ... know-how data storage unit, 30 ... security box / support support software transmission unit.

Claims (9)

A storage unit for storing know-how data for encrypted failure analysis;
Based on at least one of the device unique code, operator unique code, time code, qualification code, and usage location code, it is determined whether or not the encrypted know-how data can be decrypted, and a key for decrypting is generated. A key generator;
A decryption unit for decrypting the encrypted know-how data based on the generated key;
A failure analysis support terminal, comprising: a failure analysis processing unit that performs failure analysis processing using the decrypted know-how data. A storage unit for storing know-how data for encrypted failure analysis;
A key storage unit for decrypting the encrypted know-how data, and storing the encrypted first key data;
A second for determining whether or not to decrypt the encrypted first key based on at least one of a device unique code, an operator unique code, a time code, a qualification code, and a use place code; A key generation unit for generating a key of
A key decryption unit for decrypting the encrypted first key based on the generated second key;
A know-how data decrypting unit for decrypting the encrypted know-how data based on the decrypted first key;
A failure analysis support terminal comprising a failure analysis processing unit that performs failure analysis processing using the decrypted know-how data. A storage unit for storing know-how data for failure analysis;
An encryption unit that encrypts the know-how data based on at least one of a device-specific code, an operator-specific code, a time code, a qualification code, and a usage location code regarding a failure analysis support terminal that is an information providing destination;
Based on at least one of the device unique code, operator unique code, time code, qualification code, and usage location code, it is determined whether or not the encrypted know-how data can be decrypted, and a key for decrypting is generated. A failure analysis support information providing apparatus comprising: a transmission unit configured to transmit a program code for the above and the encrypted know-how data to the failure analysis support terminal. A storage unit for storing know-how data for failure analysis;
A know-how data encryption unit for encrypting the know-how data;
A first key data encryption unit for encrypting first key data for decrypting the encrypted know-how data;
For determining whether or not to decrypt the encrypted first key data based on at least one of a device unique code, an operator unique code, a time code, a qualification code, and a use place code. A program unit for generating a second key, the encrypted first key data, and the transmission unit that transmits the encrypted know-how data to the failure analysis support terminal. Failure analysis support information providing device characterized by the above. The failure analysis support terminal according to claim 1, further comprising an authentication unit that performs authentication based on at least one of the device unique code, operator unique code, time code, qualification code, and usage location code. The failure analysis support terminal according to claim 1, wherein the device specific code is a MAC address. 5. The failure analysis support information providing apparatus according to claim 3, wherein the device specific code is a MAC address. When the storage unit storing the encrypted know-how data is accessed, it is illegal based on any one of the last access date / time, expiration date, usage location, cumulative decryption count, decryption failure count, and accessed program. 3. The failure analysis according to claim 1, further comprising an erasing unit that erases at least one of know-how data, a program code, and a key when it is determined whether or not the access is unauthorized. Support terminal. A storage unit for storing the encrypted data;
A key that determines whether or not the encrypted data can be decrypted based on at least one of a device unique code, an operator unique code, a time code, a qualification code, and a usage location code, and generates a key for decryption Generating part,
An information terminal comprising: a decrypting unit that decrypts the encrypted data based on the generated key.

Images