JP2021018790A - Information processing system, information processing method and information processing program - Google Patents

Abstract

To provide an information processing system, information processing method and information processing program capable retaining safety of control operation of equipment in the equipment being controllable via a network.SOLUTION: An information processing system 100 capable of controlling equipment via a network, comprises white control condition registration section 18 that pre-registers an appropriate control condition in each of equipment, and a control unit 17 that executes control of the equipment by collating setup information set up for executing the control for the equipment, with an appropriate control condition corresponding to the setup for the equipment.SELECTED DRAWING: Figure 1

Description

Embodiments of the present invention relate to information processing systems, information processing methods, and information processing programs.

With the advancement of the Internet of Things (IoT), general-purpose devices in the home and mobile objects such as automobiles can be connected to the Internet, and each device can be accessed and controlled from anywhere, utilizing various data acquired from the device. A more convenient society is being realized that utilizes data, such as improving the efficiency of the supply of electricity.

In recent years, the development of artificial intelligence (AI) has progressed rapidly, and a system that is more comfortable for users by learning a huge amount of information such as data acquired from a device and generating an optimum control model. Can be constructed.

Special Table 2010-359574

While IoT is becoming more common and various devices can be controlled from anywhere via the Internet, it is difficult to prevent device vulnerabilities, and malicious third parties intentionally control the devices. There is always the danger that a device will be subject to cyberattacks via the Internet, such as breaking into a device to make it work.

In addition, artificial intelligence may not be able to form a correct control model unless it is learned from a large amount of data information, and erroneous recognition will occur in a control model generated by insufficient data. Therefore, when the artificial intelligence is entrusted with the control of the device, an unexpected control operation of the user may occur.

The present invention has been made in consideration of such circumstances, and provides an information processing system, an information processing method, and an information processing program capable of maintaining the safety of the control operation of the device in a device that can be controlled via a network. The purpose is to do.

The information processing system according to the embodiment of the present invention is a system capable of controlling devices via a network, and includes a white control condition registration unit for pre-registering appropriate control conditions in each of the devices, and the device. A control unit that collates the setting information set for executing the control with the appropriate control conditions corresponding to the settings for the device and executes the control of the device. It is a feature.

An embodiment of the present invention provides an information processing system, an information processing method, and an information processing program capable of maintaining the safety of control operation of the device in a device that can be controlled via a network.

The block diagram which shows an example of the structure of the information processing system which concerns on this embodiment. The figure which shows an example of the white control condition set corresponding to each device. The figure which shows an example of the authentication information used for the authentication of an administrator terminal in a device control unit. The flowchart which shows an example of the information processing method which concerns on this embodiment. In the information processing method according to this embodiment, a flowchart showing a flow of authentication of an administrator terminal.

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.
FIG. 1 is a diagram showing an example of the configuration of the information processing system 100 according to the present embodiment.

In the information processing system 100 according to the embodiment, appropriate control conditions (hereinafter, appropriately referred to as "white control conditions") for each of the devices 14 that can be controlled via a network such as the Internet are registered in advance. By collating the setting information set by the user to execute control on the device 14 with appropriate control conditions corresponding to the setting on the device 14, the device 14 is controlled. It is a system that maintains the safety of control operations.

Here, the device 14 means all devices whose operations can be controlled via a network such as the Internet, and is a household device (for example, a refrigerator 14a or an air conditioner 14b), a mobile body (for example, an automobile). 14c, drone 14d), and manufacturing equipment (not shown) arranged in the manufacturing plant are exemplified.

A specific configuration will be described.
The information processing system 100 includes a device control unit 10, a user terminal 11, an administrator terminal 12, a management mobile terminal 13, and a device 14.

The device control unit 10 is communicably connected to the device 14 via a network. Note that the device control unit 10 and the device 14 may be directly communicable and connected as in the devices 14 (14a, 14b) shown in FIG.

The device control unit 10 receives setting information set by the user to control the device 14. The setting information for the device 14 set by the user is when the signal of the setting information is directly input to the device 14 from the user (for example, input by a remote control or a touch panel, or a user for controlling speed in a moving body). A signal of setting information may be transmitted from the user terminal 11 to the device 14 via the network, and the device control unit 10 always receives the setting information set by the user.

The user terminal 11 is a terminal capable of transmitting setting information for controlling the operation to the device 14. When the user terminal 11 transmits the setting information, the user terminal 11 executes authentication such as login authentication with each of the devices 14 and transmits the setting information by the user to the device 14. At this time, the setting information by the user is also transmitted to the device control unit 10. The authentication between the user terminal 11 and the device 14 may be performed in multiple stages such as biometric authentication of the user by the user terminal 11 in addition to the login authentication.

The device control unit 10 includes a control unit 17, a white control condition registration unit 18, an authentication information request unit 19, and an authentication unit 20. The device control unit 10 may be arranged on the network to control each of the devices 14 owned by one user, or the devices 14 owned by each user may be grouped with a plurality of users as one group. It may be placed on the network for control.

The function of each unit constituting the device control unit 10 may be realized by executing a predetermined program code by using a processor, and is not limited to such software processing, and for example, an ASIC or the like is used. It may be realized by the existing hardware processing, or it may be realized by combining software processing and hardware processing.

The white control condition registration unit 18 has registered in advance appropriate control conditions for each of the devices 14. Appropriate control conditions registered in each of the devices 14 are set in association with each of the items set by the user to execute the control. Appropriate control conditions registered in the white control condition registration unit 18 are set by the administrator of the administrator terminal 12 described later. Further, the appropriate control conditions may be set directly to the device control unit 10 by the authenticated administrator.

More specifically, the white control conditions are set with control items associated with identification information for identifying each of the devices 14, and each of the control items is appropriate for the device 14 to operate. The control value and control range are set. Other than the control values and control ranges set as appropriate control conditions, the control conditions are not expected in the operation of the device 14.

The control items include the set temperature and set air volume of the device 14, the start time (or end time) at which the operation should be started, the operation duration, and the speed in the case of a moving body or a manufacturing device arranged in the manufacturing plant. And the number of rotations are exemplified. In addition, as control items, control values and control ranges that are appropriate for the operation of the device 14 for various data acquired by using a sensor or the like arranged on the device 14 after the control operation of the device 14 is started. May be set as the white control condition. For example, the internal volume of the device 14 that can be acquired via the sensor, the frequency, temperature, pressure, remaining fuel amount of the device 14, power, voltage, current, position information, and the like are set. An appropriate position range may be set for the position information of the device 14. The appropriate position range may be specified by coordinates, or may be specified by a certain position range (a certain area (for example, within a radius of 10 meters) centered on the designated position coordinates).

Further, as a control item, an operation order (operation flow) suitable for the operation of the device 14 may be set after the control operation of the device 14 is started.

Further, when the user sets to sequentially record the execution information of the control operation of the device 14 and save it as a log, the save destination of the log may be set in the control item. For example, it is set in the device 14 itself as an appropriate storage destination of the log in which the execution information of the control operation of the device 14 is recorded. The log stored in the device 14 may be configured to be viewable only on a display device such as a display of the device 14.

Further, a storage medium provided in the device control unit 10 may be set as an appropriate storage destination of the log. In this case, the log stored in the device control unit 10 may be configured to be accessible (viewable) only from the administrator terminal 12 in which the authentication by the authentication unit 20 of the device control unit 10 is consistent. The authentication method between the device control unit 10 and the administrator terminal 12 will be described later. As a result, the log stored in the device control unit 10 can be accessed only from the authenticated terminal, so that the log data can be safely stored.

Further, the white control condition is not limited to the case where one appropriate control value or control range is set for one control item, and one appropriate control value or the like is set for one control item. Further, ancillary control items may be set, and appropriate control values and the like may be set. As a result, appropriate control conditions can be set in more detail for one control item.

FIG. 2 is a diagram showing an example of white control conditions set corresponding to each of the devices 14. Control items are set in association with each identification ID of the device 14, and control values and control ranges (white control conditions) that are appropriate for the operation of the device 14 are set in each item. For example, for the identification ID of the device 14 of 00xx, two control items of "temperature" and "device 14 operation sequence" are set, and an appropriate temperature range and operation sequence are determined for each. Further, regarding the control item "temperature", an incidental condition called "operating time zone" is set, and an appropriate operating time zone is added as an additional condition. Similarly, control items are set for the identification IDs of the devices 14 of 00x1 and 00x2, and white control conditions are set for each. Further, when the identification ID is 00x3, the device 14 main body is set as an appropriate storage destination of the log of the device 14.

The explanation will be continued by returning to FIG.
The control unit 17 collates the setting information set for executing the control on the device 14 with the appropriate control conditions corresponding to the setting on the device 14, and executes the control of the device 14.

If the setting information set by the user (for example, the temperature of the device 14) matches or is within the white control condition of the control item corresponding to this setting information, it is determined to be normal.

On the other hand, if the setting information set by the user does not match the white control condition of the control item corresponding to this setting information or is out of the range, the control unit 17 determines that the setting is abnormal. If it is determined that the setting is abnormal, the control operation of the device 14 is stopped, or the setting is automatically changed to an appropriate control value. Further, the user terminal 11, the administrator terminal 12, or the management mobile terminal 13 may be notified that an abnormal setting value has been set. As a result, the device 14 always maintains the safety of the control operation.

Further, at the time of authentication such as login authentication between the user terminal 11 and the device 14, the device control unit 10 may acquire the position information of the user terminal 11 at the time of login as user setting information. In this case, the white control condition may be set based on the position information of the user terminal 11. Specifically, as a white control condition, an appropriate position range of the user terminal 11 is set. The appropriate position range may be specified by coordinates, or may be specified by a certain position range (a certain area (for example, within a radius of 10 meters) centered on the designated position coordinates). Further, as a white control condition, a distance between the device 14 and the user terminal 11 (for example, within 30 meters) is set, and when the distance between the device 14 and the user terminal 11 exceeds the set distance, control is performed. The unit 17 may determine that the setting is abnormal by the user terminal 11. Further, the distance set as the white control condition is not limited to the distance between the device 14 and the user terminal 11, but the device / device (for example, a network repeater) and the user terminal 11 capable of acquiring the position. It may be set based on the distance from. The position information of the user terminal 11 may be continuously acquired not only at the time of login authentication but also when the user terminal 11 is accessing the device 14.

Further, when the device 14 arranged in the plant or the like is controlled from a portable terminal such as a tablet, the position information of the tablet terminal may be acquired as the setting information of the user. As the white control condition, it may be set based on the position information of the tablet terminal. Specifically, an appropriate position range of the tablet terminal is set. Further, as a white control condition, a distance between the device 14 and the portable terminal (for example, within 10 meters) is set, and if the distance exceeds the set distance, the control unit 17 is abnormal due to the portable terminal. It may be judged as a setting. Further, the distance set as the white control condition is not limited to the distance between the device 14 and the portable terminal device, and the device / device (for example, a network repeater) capable of acquiring the position and the portable terminal It may be set based on the distance of.

Further, the position information of the user terminal 11, the device 14, and the administrator terminal 12 that manages the white control conditions described later may be acquired, and the white control conditions may be set based on the three position information. Specifically, the user terminal 11, the device 14, and the administrator terminal 12 set a position range to be positioned at the same time as an appropriate control condition. For example, when the user terminal 11, the device 14, and the administrator terminal 12 are set to be simultaneously located in a specific area (for example, Tokyo) as an appropriate control condition, and any one device is not in the set area. The control unit 17 may determine that the setting is abnormal. Further, the position range to be located may be set individually for each of the user terminal 11, the device 14, and the administrator terminal 12, or the position range in which the user terminal 11 and the device 14 should be located at the same time (for example, Tokyo). ) May be set, while the administrator terminal 12 may set an appropriate position range in combination, such as setting another position range (for example, Osaka).

For example, even if a malicious third party terminal 50 illegally accesses the device 14 and transmits fake setting information so as to cause the device 14 to operate abnormally, the fake setting information is a white control condition. If it is out of the range of, the device 14 is not set, and the safety of the control operation is maintained.

In addition, the control of the device 14 performs machine learning from the setting information input in the past and the acquired data of the sensors arranged in the device 14, and the control model that is optimal for the operation of the device 14, that is, AI (artificial intelligence). May be controlled based on this model. In this case, the control unit 17 collates the setting information set for the device 14 by the control model formed in the machine learning with the appropriate control conditions corresponding to the setting for the device 14, and the device 14 Control may be performed.

When forming a control model by machine learning, if the control model is in a state where there is little data for learning, the AI cannot sufficiently recognize the state of the device 14, and there is a possibility that a malfunction may occur. In the present embodiment, the setting information set for the device 14 by the control model is collated with an appropriate control condition (white control condition) corresponding to the setting for the device 14, and the control of the device 14 is executed. Specifically, the control unit 17 collates the setting information by artificial intelligence with an appropriate control condition (white control condition). If the setting information by artificial intelligence does not match the white control condition of the control item corresponding to this setting information or is out of the range, it is judged as an abnormal setting. If it is determined to be abnormal, the control operation of the device 14 is stopped, or the setting is automatically changed to an appropriate control value. By doing so, it is possible to prevent abnormal operation due to erroneous recognition by artificial intelligence, and it is possible to maintain the safety of the control operation of the device 14.

Subsequently, a case where the white control condition of the device 14 registered in the white control condition registration unit 18 is changed (updated) will be examined.

The administrator terminal 12 is a terminal registered in the white control condition registration unit 18 for managing appropriate control conditions corresponding to each of the devices 14. The administrator terminal 12 includes a white control condition changing unit 21 and an authentication information transmitting unit 22.

Here, the authentication unit 20 of the device control unit 10 registers in advance authentication information for identifying and authenticating the administrator terminal 12 when there is an access from the administrator terminal 12. For example, the location information of the administrator terminal 12 is registered as the authentication information. In addition, as authentication information, biometric information such as unique identification information (such as the MAC address of the terminal) for identifying the administrator terminal 12, fingerprint information of the administrator of the administrator terminal 12, and "face" information is registered. May be good.

When updating the white control condition, the white control condition changing unit 21 of the administrator terminal 12 transmits the updated control condition to the device control unit 10 and requests the change of the control condition. The authentication information requesting unit 19 of the device control unit 10 that has received the update of the white control condition requests the authentication information of the administrator terminal 12 from the administrator terminal 12.

Then, the authentication information transmission unit 22 of the administrator terminal 12 transmits the authentication information of the administrator terminal 12 to the device control unit 10.

The authentication unit 20 of the device control unit 10 collates the authentication information received from the administrator terminal 12 with the pre-registered registration authentication information to determine whether or not the white control condition update request is made from the correct administrator terminal 12. To judge. When the received authentication information matches the registered registration authentication information, the access from the correct administrator terminal 12 is permitted, and the white control condition of the white control condition registration unit 18 is overwritten and updated.

On the other hand, if the received authentication information does not match the registered registration authentication information, the white control condition of the white control condition registration unit 18 is not updated. As described above, the white control condition of the white control condition registration unit 18 can be updated only from the administrator terminal 12.

Further, the administrator terminal 12 may be authenticated by using the management mobile terminal 13 registered in association with the administrator terminal 12. At this time, identification information (identification number, telephone number, location information, etc. of the mobile terminal) for identifying the management mobile terminal 13 is associated with the administrator terminal 12.

FIG. 3 is a diagram showing an example of authentication information used for authentication of the administrator terminal 12.
In the authentication unit 20 of the device control unit 10, the position information of the administrator terminal 12 is registered corresponding to the identification number of the administrator terminal 12. In addition, the identification number, telephone number, and location information of the management mobile terminal 13 are registered in association with the administrator terminal 12. The position information may be specified by coordinates, or may be specified by a certain position range (a certain area (for example, within a radius of 10 meters) centered on the designated position coordinates).

As an authentication method of the administrator terminal 12 using the management mobile terminal 13, specifically, the authentication information request unit 19 of the device control unit 10 that has received the update of the white control condition attaches the key for authentication to the management mobile terminal 13. (Identification code) is transmitted to request the administrator terminal 12 to transmit the authentication key. The key for authentication is, for example, a randomly generated one-time password.

When the authentication unit 20 of the device control unit 10 receives the same key as the authentication key previously transmitted to the management mobile terminal 13 from the administrator terminal 12, it recognizes that the access is from the correct administrator terminal 12. The white control condition of the white control condition registration unit 18 is overwritten and updated.

Further, the authentication unit 20 of the device control unit 10 may use the position information of the management mobile terminal 13 for the authentication of the administrator terminal 12. The authentication unit 20 of the device control unit 10 is composed of a plurality of authentication servers, and receives and authenticates a server that transmits an authentication key to the management mobile terminal 13 and an authentication key from the administrator terminal 12. The servers may be configured separately.

In this way, the authentication unit 20 of the device control unit 10 authenticates whether or not the access is from the correct administrator terminal 12 by using the position information of the administrator terminal 12, and thus the white of the white control condition registration unit 18. The control conditions can be firmly protected. Even if a malicious third-party terminal 50 tries to change the white control condition, the white control condition cannot be changed because the authentication of the device control unit 10 cannot be permitted.

Subsequently, the operation of the information processing system 100 according to the present embodiment will be described.
FIG. 4 is a flowchart showing an example of the information processing method according to the present embodiment (see FIG. 1 as appropriate).

The control unit 17 of the device control unit 10 receives the setting information set by the user (S10). Then, the control unit 17 confirms the white control conditions corresponding to the setting information set by the user (S11).

If the setting information set by the user matches or is within the white control condition of the control item corresponding to this setting information, the control unit 17 determines that it is normal and is a device based on the setting information. The control of 14 is continued (S12: YES, S13).

On the other hand, if the setting information set by the user does not match the white control condition of the control item corresponding to this setting information or is out of the range, the control unit 17 determines that the setting is abnormal. For example, the control operation of the device 14 is stopped (S12: NO). The control unit 17 acquires the position information of the user terminal 11 at the time of authentication such as login authentication between the user terminal 11 and the device 14, and makes an abnormal setting based on the distance between the device 14 and the user terminal 11. You may decide whether or not.

Subsequently, FIG. 5 is a flowchart showing the flow of authentication of the administrator terminal 12 in the information processing method according to the present embodiment (see FIG. 1 as appropriate). Here, a case where the white control condition changing unit 21 of the administrator terminal 12 transmits the updated control condition to the white control condition registration unit 18 when updating the white control condition will be examined.

The authentication information requesting unit 19 of the device control unit 10 requests the authentication information from the administrator terminal 12 (S20).

Subsequently, the authentication information transmission unit 22 of the administrator terminal 12 transmits the position information of the administrator terminal 12 to the device control unit 10 (S21).

The authentication unit 20 of the device control unit 10 collates the transmitted position information with the registered position information. If the transmitted location information is not within the range of the registered location information, the access is considered to be incorrect and the process ends (S22: NO, end).

On the other hand, the authentication unit 20 transmits an authentication key to the management mobile terminal 13 when the transmitted location information is within the registered location information range (S22: YES, S23).

Then, the administrator of the administrator terminal 12 confirms the authentication key on the management mobile terminal 13, and transmits the authentication key from the administrator terminal 12 to the device control unit 10.

When the authentication unit 20 of the device control unit 10 has the correct authentication key transmitted from the administrator terminal 12. The white control condition is updated (S24: YES, S25). On the other hand, if the transmitted authentication key is not correct, it is considered that the access is not correct and the process ends (S24: NO, end).

According to the information processing system of the above-described embodiment, appropriate control conditions for each device are registered in advance, and setting information set for executing control for the device is sent to the device. The safety of the control operation of the device can be maintained by executing the control of the device by collating with the appropriate control conditions corresponding to the setting. In addition, the white control condition can be strongly protected by authenticating whether or not the access is from the correct administrator terminal.

The program executed by the device constituting the information processing system is provided by being incorporated in a storage circuit such as a ROM in advance. Alternatively, the program should be provided as a file in an installable or executable format stored on a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD, or flexible disk. You may. Further, the program executed by the information processing system may be stored on a computer connected to a network such as the Internet, and may be downloaded and provided via the network.

Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other embodiments, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.

10 ... Device control unit, 11 ... User terminal, 12 ... Administrator terminal, 13 ... Management mobile terminal, 14a, 14b ... Household equipment, 14c ... Mobile device (automobile), 14d ... Mobile device (drone), 17 ... Control Unit, 18 ... White control condition registration unit, 19 ... Authentication information request unit, 20 ... Authentication unit, 21 ... White control condition change unit, 22 ... Authentication information transmission unit, 50 ... Third party terminal, 100 ... Information processing system.

The information processing system according to the embodiment of the present invention is a system in which a user device can control a device via a network, and has a white control condition registration unit that registers appropriate control conditions in advance for each of the devices. , The setting information including the position information of the user device set by the user device to execute the control on the device is collated with the appropriate control condition corresponding to the setting to the device. A control unit that executes control of the device is provided, and the white control condition registration unit is characterized in that appropriate control conditions are registered based on the position information of the user device .

Claims (10)

It is a system that can control devices via a network.
A white control condition registration unit that registers appropriate control conditions in advance for each of the devices,
A control unit that executes control of the device by collating the setting information set for executing the control with respect to the device with the appropriate control conditions corresponding to the setting for the device.
An information processing system characterized by being equipped with. The appropriate control conditions registered in each of the devices are set in association with each of the items set by the user to execute the control.
The information processing system according to claim 1, wherein the information system is characterized by the above. When the control of the device is the control using machine learning,
The control unit collates the setting information set by the control model generated in machine learning with the appropriate control conditions corresponding to the settings for the device, and executes control of the device.
The information processing system according to claim 1 or 2, wherein the information processing system is characterized by the above. An administrator terminal that manages the appropriate control conditions corresponding to each of the devices and transmits the updated control conditions to the white control condition registration unit is provided.
When the updated control condition is transmitted, the authentication information of the administrator terminal is requested from the administrator terminal, and when the registered authentication information is matched with the pre-registered registration authentication information, the updated control condition is described. It also has an authentication unit that allows renewal to the white control condition registration unit.
The information processing system according to any one of claims 1 to 3, wherein the information processing system is characterized by the above. The authentication information is the location information of the administrator terminal.
The information processing system according to claim 4, wherein the information system is characterized by the above. A management mobile terminal registered corresponding to the administrator terminal is provided.
The authentication unit sends an authentication identification code to the management mobile terminal when the updated control condition is transmitted, and the updated control when the identification code is received from the administrator terminal. Allow updating of the condition to the white control condition registration unit,
The information processing system according to claim 4 or 5. The setting information includes the position information of the user device that controls the device.
In the white control condition registration unit, appropriate control conditions are registered in advance based on the position information of the user device.
The information processing system according to any one of claims 1 to 6, characterized in that. The setting information includes the location information of the device, the user device that controls the device, and the administrator terminal.
In the white control condition registration unit, appropriate control conditions are registered in advance based on the position information of any one of the device, the user device that controls the device, and the administrator terminal.
The information processing system according to any one of claims 4 to 7, characterized in that. It is an information processing method that can control devices via a network.
A step of pre-registering appropriate control conditions in the white control condition registration unit for each of the above devices, and
A step of collating the setting information set for executing the control with respect to the device with the appropriate control conditions corresponding to the setting for the device and executing the control of the device.
An information processing method characterized by including. Computer,
A function to pre-register appropriate control conditions in the white control condition registration unit for each device that can be controlled via the network.
A function of collating the setting information set for executing the control with respect to the device with the appropriate control conditions corresponding to the setting for the device and executing the control of the device.
An information processing program characterized by functioning as.

Images