JP2006148197A - Apparatus, method, and program of distribution management for user information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To detect illegitimate operations of a peer in the P2P system which cannot be detected by a supervisory function for clients, which a conventional server has. <P>SOLUTION: A credible group management section 31a transmits a credible peer list to all the other credible group management sections 31a. When a credible peer is newly added to the reliable group, the credible group management section 31a updates the credible peer list, transmits the newly participated credible peer information to all the other credible group management sections 31a, and shares a common key for issuing an electronic certificate with all the other credible peer credible group management sections 31a. When a general peer 21 newly takes part in the community, a peer management means 31b of the credible peer for receiving a participation request transmitted from the general peer confirms the presence/absence of illegitimate peer registration of the general peer newly taking part in the community, and registers the general peer newly taking part in the community to a general peer list belonging to the credible peers when the general peer is not an illegitimate peer and there is a room for the capacity. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a user information distributed management method and apparatus in a community.

In a conventional server / client system, an illegal operation of a client is detected by a server. However, in the P2P system, there is no peer called a server in particular, and all peers are servers and can be clients. For this reason, there is a problem that the illegal operation detection function of the client of the conventional server cannot detect the illegal operation of the peer in the P2P system.
JP-A-11-259571

  An object of the present invention is to provide a distributed management apparatus, method, and program for user information that enable detection of an illegal operation of a peer in a P2P system that cannot be detected by a client monitoring function of a conventional server. is there.

  The distributed management apparatus for user information of the present invention is a distributed management apparatus for user information in a community by a trust group composed of trusted peers, and each peer constituting the community communicates with a trust group function unit. It has a community service device consisting of functional units.

  The trust group function unit includes a trust group management unit, a peer management unit, a log analysis unit, and an electronic certificate generation unit, and the communication function unit includes a communication unit, a log management unit, and an electronic certificate management unit. .

  The trust group management unit communicates with the other trust group management unit the trusted peer information of the trust group, manages a list of trusted peer information of the trust group, and the electronic certificate generated by the digital certificate generating unit A common key for issuing a certificate is shared with other trusted peers constituting the trust group.

  The log analysis means analyzes the log received from the general peer, and if there is no fraud, instructs the electronic certificate generation means to issue an electronic certificate to the general peer. It has a function of notifying the general peer of fraud.

  The peer management means receives the general peer fraud notification from the log analysis means, deletes the general peer from the general peer list and registers in the illegal peer list, obtains destination information from the trust group management means, A function of notifying the peer management means of the other trusted peer of the general peer fraud and notifying the general peer managed by the trusted peer of the general peer fraud.

  The electronic certificate generating unit has a function of issuing an electronic certificate and a public key necessary for decrypting the electronic certificate to a general peer without fraud in accordance with an instruction from the log analyzing unit.

  The communication means acquires the electronic certificate from the electronic certificate management means for communication with other general peers in the community, transmits the electronic certificate to the other general peer of the communication partner, and receives the electronic certificate from the communication partner. A function for requesting the electronic certificate management means to determine the validity of the certificate.

  The log management unit has a function of periodically transmitting a log to the peer management unit of the peer of the trust group and making a request for updating the electronic certificate.

  The electronic certificate management means receives and manages the electronic certificate and the public key for decrypting the electronic certificate from the electronic certificate generation means of the peer of the trust group, determines the legitimacy of the communication partner by the electronic certificate, A function of transmitting a participation request for a new participation of a general peer in the community;

  Next, the operation of the distributed management apparatus for user information will be described.

  In order to form a trust group, the trust group management unit of the trust group function unit transmits the trusted peer list to all other trust group management units.

  When a new trusted peer is added to the trust group, the trust group manager updates the peer list of trusted peers, sends the newly joined trusted peer information to all other trust group managers, and so on. Share a common key for issuing a digital certificate with the trust group management means of the trusted peer.

  When a general peer newly joins the community, the peer management means of the trusted peer that has received the join request sent by the newly joining general peer checks whether or not the new joining general peer has an illegal peer registration, If the illegal peer is not registered, the newly participating peer is registered in the list of general peers belonging to the trusted peer. If the newly participating general peer is an illegal peer, the new participation request is rejected.

  The electronic certificate generating means generates an electronic certificate for the newly joined general peer that is not fraudulent, and transmits the electronic certificate together with a public key common to the community for decrypting the electronic certificate.

  If the capacity for registering a newly joined general peer is insufficient in the peer management means, other trusted peers managed by the trust group management means are introduced.

  When a general peer periodically sends a log to a peer management means of a trusted peer for renewal of an electronic certificate and makes an electronic certificate renewal request, the log analysis means If there is no fraud, the electronic certificate generation means newly generates the electronic certificate and sends it to a general peer together with the public key necessary for decrypting the electronic certificate. The peer management means of the peer deletes the unauthorized general peer from the general peer list, registers the unauthorized general peer in the unauthorized list, obtains destination information from the trust group management means, and peer management means of other trusted peers Send illegal information of general peers to

  The peer management means that has received the general peer fraud information registers the fraudulent general peer in the general peer fraud list belonging to the trusted peer.

  In the community, when each peer communicates, the communication means transmits an electronic certificate managed by the electronic certificate management means to the receiving peer, and the communication means of the receiving peer verifies the received electronic certificate. The electronic certificate management means is inquired for communication, and if it is valid, the communication is continued, and if it is invalid, the communication is rejected.

  The present invention relates to a user information distributed management method and apparatus in a community.

  In the present invention, a plurality of trusted peers form a trust group, each trusted peer issues an electronic certificate to a general peer, and user information in a community (trusted network) is distributed and managed within the trust group. is there.

The present invention distributes and manages user information in a community by a trust group composed of trusted peers.
There is no need to install specific equipment to manage user information.
Users can be managed in a large community by log analysis.
Remove rogue peers from the community and keep the community safe,
Users can participate in the community with peace of mind and enjoy communication.
There is an effect.

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a system configuration diagram of a trust network (community) according to an embodiment of the present invention.

  The trusted peers 11, 12, and 13 constitute the trust group 1 and manage the general peers 21 and 22, the general peer 23, and the general peer 24 in a distributed manner, respectively.

  FIG. 2 is a diagram showing the configuration of the reliable peer 11 and the general peer 21.

  The trusted peers 11 to 13 include the communication service device 3 including the trust group function unit 31 and the communication function unit 32. The trust group function unit 31 includes the trust group management unit 31a, the peer management unit 31b, the log analysis unit 31c, and the electronic device. The communication function unit 32 includes a communication unit 32a, a log management unit 32b, and an electronic certificate management unit 32c. The reliable peers 12 and 13 and the general peers 21 to 24 have the same configuration.

  The trust group management unit 31a of the trust group function unit 31 communicates with the trust group management unit 31a of the other trusted peers 12 and 13 and the information of the trusted peers 11, 12, and 13 of the trust group 1 so that the trust group 1 The trusted peers 11, 12, and 13 are managed in a list, and a common key for issuing an electronic certificate by the electronic certificate generation unit 31 d is shared with the other reliable peers 12 and 13 constituting the trust group 1. It has a function.

  For example, the log analysis unit 31c analyzes a log received from the general peer 21, and if there is no fraud, the electronic certificate generation unit 31d issues an electronic certificate to the general peer 21 and a public key for decrypting the electronic certificate. If there is a fraud, the peer management unit 31b has a function of instructing fraudulent processing of a fraudulent general peer.

  When the peer management unit 31b of the trusted peer 11 receives, for example, an unauthorized notification of the general peer 21 from the log analysis unit 31c, it deletes the general peer 21 from the list of general peers managed by the trusted peer 11 and makes the peer illegal It registers in the peer list, obtains destination information from the trust group management unit 31a, notifies the peer management unit 31b of all other trusted peers 12 and 13 of the illegality of the general peer 21, and notifies the general peer 22 to the general peer 21. It has a function to notify of fraud.

  The peer management unit 31b of the general peer 22 receives the fraud notification of the general peer 21 from the peer management unit 31b of the trusted peer 11 and registers the general peer 21 in the list of unauthorized general peers belonging to the trusted peer 11 Have

  The electronic certificate generation unit 31d has a function of issuing a public key necessary for decrypting the electronic certificate to the general peer 22 that is not fraudulent, common to the electronic certificate and the community, according to an instruction from the log analysis unit 31c.

  The communication unit 32a of the communication function unit 32 acquires an electronic certificate from the electronic certificate management unit 32c and transmits it to the communication partner general peer 22 for communication with other peers in the community, for example, the general peer 22. It has a function of requesting the electronic certificate management unit 32c to determine the validity of the electronic certificate received from the general peer 22 of the communication partner.

  The log management unit 32b has a function of periodically transmitting a log to the peer management unit 31b of the reliable peer 11 and making a request for updating an electronic certificate.

  The electronic certificate management unit 32c receives and manages the electronic certificate and the public key for decrypting the electronic certificate from the electronic certificate generation unit 31d of the trusted peer 11, and uses the electronic certificate to verify the validity of the communication partner. Judgment is made based on the personal consent information at the time of issuing the electronic certificate, the password, and the expiration date of the electronic certificate, and has a function of confirming that the general peer 22 of the communication partner is not registered in the peer management unit 31b as an unauthorized peer .

  FIG. 3 is a flowchart for explaining the distribution management operation of user information when the trust group 1 is formed.

  When a trusted peer is newly added automatically or artificially to the trust group 1 to form the trust group 1 (step 101), the trust group management unit 31a of the trust group function unit 31 When a change in the trusted peers 11 constituting the trust group 1 is detected, a list of trusted peers in the trust group 1 is created, and a new trusted peer is added, an electronic certificate between the trusted peers in the trust group 1 A common key for issuing is shared (step 102). The trusted peer list of the trust group 1 is transmitted to the trust group manager 31a of the trusted peers 12 and 13 (step 103). The peers 12 and 13 of the trust group 1 receive the list of trusted peers of the trust group 1 from the trusted peer 11, update the list of trusted peers of the trust group 1, and issue a common key for issuing an electronic certificate Is managed by the trust group management unit 31a (step 104).

  FIG. 4 is a diagram for explaining the distributed management operation of user information when the general peer 21 newly joins the reliable peer 11.

  The electronic certificate manager 32c of the newly participating general peer 21 transmits a community participation request to the peer manager 31b of the trusted peer 11 (step 111).

  The peer management unit 31b of the trusted peer 11 receives the participation request from the general peer 21 (step 112). The presence or absence of registration in the unauthorized peer list of the general peer 21 is confirmed (step 113). If the general peer 21 is an unauthorized peer, new participation of the general peer 21 is rejected (step 114). If the general peer 21 is not illegal, the presence / absence of the registration capacity of the newly participating peer 21 is confirmed (step 115). If there is a registration capacity in the peer management unit 31b, the newly participating peer 21 is registered in the general peer list (step 116). The electronic certificate generation unit 31d generates a public key for decrypting the electronic certificate and the electronic certificate common to the community in the newly participating peer 21 (step 111), and the electronic certificate and the public key are transmitted to the general peer 21. Transmit (step 118).

  The electronic certificate management unit 32c of the general peer 21 receives the electronic certificate and the public key from the trusted peer 11 and stores them (step 119). If there is no registered capacity, another trusted peer managed by the trust group management unit 31a, for example, the peer 12 is introduced to the newly participating peer 21 (step 120).

  FIG. 5 is a flowchart for explaining the distributed management operation of user information when the general peer 21 updates the electronic certificate.

  The electronic certificate management unit 32c of the general peer 21 detects the update time of the electronic certificate (step 121). The log management unit 32b of the general peer 21 transmits the log to the peer management unit 31b of the reliable peer 11 (step 122). The reliable peer 11 determines the validity of the log received from the general peer 21 by the log analysis unit 31c (step 123). If there is no fraud, the electronic certificate generation unit 31d generates an electronic certificate (step 124). The electronic certificate and the public key are transmitted to the electronic certificate management unit 32c of the general peer 21 (step 125). The electronic certificate management unit 32c of the general peer 21 receives the electronic certificate and the public key from the trusted peer 11 and stores them in the electronic certificate management unit 32c (step 126). If there is fraud, the peer management unit 31b of the trusted peer 11 deletes the general peer 21 from the general peer list, registers the general peer 21 in the illegal peer list, the trusted peers 12 and 13 and the general peer 22 in the trust group 1 Is notified of the illegality of the general peer 21 (step 121).

  Each peer management unit 31b of the trusted peers 12 and 13 registers the peer 21 in the unauthorized peer list (step 128). The peer management unit 31b of the general peer 22 registers the peer 21 in the unauthorized peer list (step 129).

  FIG. 6 is a flowchart for explaining the distributed management operation of user information when the general peers 21 and 22 communicate in the community.

  The communication unit 32a of the originating general peer 21 transmits the electronic certificate managed by the electronic certificate management unit 32c to the receiving peer 22 (step 131). The communication unit 32a of the reception-side general peer 22 determines the validity of the electronic certificate of the transmission-side general peer 21 by the electronic certificate management unit 32c (step 132). If the electronic certificate is valid, communication is continued (step 133). If the electronic certificate is invalid, communication is rejected (step 134).

  The function of the community service device 31 is not realized by dedicated hardware, but a program for realizing the function is recorded on a computer-readable recording medium, and the program recorded on the recording medium is recorded. May be read by a computer system and executed. The computer-readable recording medium refers to a recording medium such as a flexible disk, a magneto-optical disk, a CD-ROM, or a storage device such as a hard disk device built in the computer system. Further, the program is dynamically held for a short time (transmission medium or transmission wave) as in the case where the program is transmitted via the computer-readable Internet. Such as a memory that holds a program for a certain period of time.

  The user information distributed management method and apparatus according to the present invention may be used as a method and apparatus for distributing and managing user information in a P2P system.

1 is a block diagram of a community including a distributed management apparatus for user information according to an embodiment of the present invention. FIG. It is a figure which shows the structure of a community service apparatus. It is a flowchart explaining the dispersion | distribution management operation | movement of user information in the case of forming a trust group. It is a flowchart explaining the dispersion | distribution management operation | movement of user information in the case of the new participation of the general peer to the reliable peer. It is a flowchart explaining the distributed management operation | movement of user information when a general peer updates an electronic certificate. It is a flowchart explaining the dispersion | distribution management operation | movement of user information when general peers communicate in a community.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Trust group 11-13 Peer which comprises trust group 1 21-24 General peer 3 Community service apparatus 31 Trust group function part 31a Trust group management part 31b Peer management part 31c Log analysis part 31d Electronic certificate generation part 32 Communication function Unit 32a communication unit 32b log management unit 32c electronic certificate management unit 101-104, 111-120, 121-129, 131-134 steps

Claims (5)

A distributed management device for user information in a community by a trust group composed of trusted peers,
Each peer constituting the community includes a community service device including a trust group function unit and a communication function unit,
The trust group function unit includes trust group management means, peer management means, log analysis means, and electronic certificate generation means,
The communication function unit includes communication means, log management means, and electronic certificate management means,
The trust group management unit communicates with the other trust group management unit the trusted peer information of the trust group, manages a list of trusted peer information of the trust group, and generates an electronic certificate generated by the digital certificate generating unit. Having a function of sharing a common key for issuing certificates with other trusted peers constituting the trust group;
The log analysis unit analyzes a log received from a general peer. If there is no fraud, the log analysis unit instructs the digital certificate generation unit to issue the digital certificate to the general peer. Having a function of notifying the general means of fraud to the management means;
The peer management means receives the general peer fraud notification from the log analysis means, deletes the general peer from the general peer list and registers it in the illegal peer list, and receives destination information from the trust group management means. And having the function of notifying the peer management means of all the other trusted peers of the general peer fraud and notifying the general peer managed by the trusted peer of the general peer fraud.
The electronic certificate generating means is a function for issuing a public key necessary for decrypting the electronic certificate, common to the electronic certificate and the community, to the general peer without fraud in accordance with an instruction from the log analyzing means. Have
The communication means acquires the electronic certificate from the electronic certificate management means for communication with another general peer of the community, transmits the electronic certificate to the other general peer of the communication partner, and transmits the electronic certificate from the communication partner. Having the function of requesting the electronic certificate management means to determine the validity of the received electronic certificate;
The log management means has a function of periodically transmitting the log to a peer management means of a peer of the trust group, and making an update request for the electronic certificate,
The electronic certificate management means receives and manages the electronic certificate and the public key for decrypting the electronic certificate from the electronic certificate generation means of the peer of the trust group, and the communication partner uses the electronic certificate to Having a function of determining validity and transmitting a participation request for a new participation of a general peer in the community;
Distributed management device for user information.   The electronic certificate management means determines whether the communication partner is legitimate based on the electronic certificate based on personal identification information, a password, and an expiration date of the electronic certificate when the electronic certificate is issued. The distributed management device according to 1. A community of trust groups composed of trusted peers, wherein each peer constituting the community includes a community service device composed of each trust group function unit and a communication function unit, and the trust group function unit is a trust group The communication function unit is a distributed management method of user information in a community having a communication unit, a log management unit, and an electronic certificate management unit. There,
For the formation of the trust group, a trust group management unit of the trust group function unit transmits the trusted peer list to all other trust group management units.
When a new trusted peer is added to the trust group, the trust group management means updates the peer list of the trusted peer and updates the peer information of the newly joined trusted peer to all other trust groups. Transmitting to the management means, and sharing the common key for issuing the digital certificate with the other trusted peer trust group management means;
When a general peer newly joins the community, the peer management means of the trusted peer that has received the join request transmitted by the newly participating general peer confirms whether or not the new participating general peer is registered as an illegal peer. If it is not registered as an illegal peer, the newly joined general peer is registered in the list of general peers belonging to the trusted peer, and if the newly participating general peer is an unauthorized peer, the new participation request is rejected. Steps,
The electronic certificate generation means generates the electronic certificate for the newly joined general peer that is not fraudulent, and the electronic certificate is shared with the community common public key for decrypting the electronic certificate. Sending, and
Introducing other trusted peers managed by the trust group manager when the capacity to register the newly joined general peers in the peer manager is insufficient;
When the general peer periodically sends the log to the peer management unit of the trusted peer to update the electronic certificate and makes a request for updating the electronic certificate, the log analyzing unit When the received log is analyzed and there is no fraud, the electronic certificate generation means newly generates the electronic certificate and sends it to the general peer along with the public key necessary for decrypting the electronic certificate. If there is fraud, the peer management means of the trusted peer deletes the fraudulent general peer from the general peer list, registers the fraudulent general peer in the fraud list, and receives destination information from the trust group management means. Obtaining and sending the general peer fraud information to the other peer management means of the trusted peer;
The peer management means receiving the fraud information of the general peer registers the fraudulent general peer in a fraud list of general peers belonging to the trusted peer;
In the community, when each peer communicates, the communication means transmits the electronic certificate managed by the electronic certificate management means to the receiving peer, and the communication means of the receiving peer receives the communication. Querying the electronic certificate management means for the validity of the electronic certificate, continuing the communication if valid, and rejecting the communication if invalid,
A distributed management method.   The distributed management method according to claim 3, further comprising a step of automatically selecting the trusted peer. A program for causing a computer to perform distributed management of user information in a community by a trust group composed of trusted peers,
Sending a trusted peer list to all other trusted peers to form the trust group;
When a new trusted peer is added to the trust group, it updates the peer list of the trusted peer, sends peer information of the newly joined trusted peer to all other trusted peers, and Sharing a common key for issuing the digital certificate with the trusted peer;
Upon receipt of a join request sent by a newly participating general peer, the presence or absence of an unauthorized peer registration of the newly participating general peer is confirmed. If there is no registration with the unauthorized peer, the newly participating peer belongs to the trusted peer Registering in the list of general peers and rejecting the new participation request if the new participating general peer is an unauthorized peer;
Generating the electronic certificate and sending the electronic certificate together with a public key common to the community for decrypting the electronic certificate to the newly joined general peer that is not fraud;
Introducing other trusted peers when there is insufficient capacity to register the newly joined general peers;
When the general peer periodically sends the log to the trusted peer to update the electronic certificate and makes an update request for the electronic certificate, the received peer analyzes the received log, If there is not, the electronic certificate is newly generated and transmitted to the general peer together with the public key necessary for decrypting the electronic certificate. If there is an illegality, the unauthorized general peer is deleted from the general peer list. Registering the unauthorized general peer in an unauthorized list, obtaining destination information, and transmitting the unauthorized information of the general peer to the other trusted peers;
Upon receiving the general peer fraud information, registering the fraudulent general peer in a fraud list of general peers belonging to the trusted peer;
When communicating in the community, sending the electronic certificate to a receiving peer;
A procedure for continuing the communication if the received electronic certificate is valid, and rejecting the communication if invalid;
Management program for user information to allow a computer to execute

Images