JP6535042B2 - Sensor network system and data collection method - Google Patents

Description

  The present invention relates to sensor device connection technology for securely connecting various sensor devices with sensor connection terminals.

  With the spread of smartphones and the appearance of wearable sensors, an IoT (Internet of Things) society has come into being in which everything is connected to the Internet. In such IoT, various demands on sensor accommodation are increasing, and various radio standards and data mutual use methods suitable for IoT are proposed. Although the respective standards and methods are respectively useful, since they are not compatible, it is difficult to efficiently transfer data acquired by the sensor device to the data collection device.

  Conventionally, as a sensor network system that collects data from such various types of sensor devices, a technology has been proposed that is accommodated in the system by connecting to the sensor devices using a sensor connection terminal (for example, Non-Patent Document 1) Etc.). This system is a system in which a sensor connection terminal is disposed between a sensor device and a data collection device, and data detected by the sensor device is temporarily acquired by the sensor connection terminal and transferred to the data collection device. As a result, the rich connectivity of the sensor network system can be provided to the sensor device, data can be easily collected from a wide variety of sensor devices, and the communication distance of the sensor device limited by power saving and miniaturization can be expanded. It becomes possible.

Fujita et al., "M2M architecture and technical issues," Journal of the Institute of Electronics, Information and Communication Engineers, Vol. 96, No. 5, P. 305-312, 2013.

  In such a prior art, in order to connect various sensor apparatuses to a sensor connection terminal, the connection procedure document which prescribed the connection procedure with a sensor apparatus will be registered into a sensor connection terminal as needed. For this reason, there is a possibility that the connection procedure registered in the sensor connection terminal may be altered. If such alteration is performed, the sensor device or the sensor connection terminal is illegally connected to another device. In addition to the possibility of unauthorized acquisition of data detected by the sensor device, there is also the possibility of data leakage by a malicious third party, which lowers the security of the entire sensor network system. was there.

  The present invention is intended to solve such a problem, and an object thereof is to provide a sensor device connection technique capable of preventing unauthorized connection between a sensor device and a sensor connection terminal.

  In order to achieve such an object, in a sensor network system according to the present invention, a sensor connection terminal wirelessly connected to a plurality of sensor devices to acquire data from the sensor devices, and the data acquired by the sensor connection terminal A sensor network system including a relay terminal for transferring data and a data collection device for collecting the data transferred from the relay terminal, wherein the data collection device includes a wireless connection between the sensor device and the sensor connection terminal. A device storage unit for adding and storing an electronic signature regarding the connection procedure document using a secret key paired with a public key registered in advance to a connection procedure document describing a connection procedure used for the electronic signature; Reading out the connection procedure sheet to which the data is attached from the device storage unit, and distributing the connection procedure manual to the sensor connection terminal via the relay terminal A data acquisition unit including a procedure manual distribution unit, wherein the sensor connection terminal wirelessly connects to the sensor device based on a connection procedure registered in advance in the terminal storage unit, and acquires data from the sensor device; A data transmission unit that transmits the acquired data to the relay terminal, and an electronic content attached to the new connection procedure when a new connection procedure is distributed from the data collection device via the relay terminal A terminal registration unit for registering the new connection procedure in the terminal storage unit after confirming the validity of the new connection procedure based on the signature and the public key registered in advance; Have.

  In one configuration example of the sensor network system according to the present invention, when the data transmission unit transmits data acquired from the sensor device to the relay terminal, the data transmission unit performs transmission only to the relay terminal. When transmitting via the first wireless line, the relay terminal only transmits to the sensor connection terminal when transferring the new connection procedure to the sensor connection terminal. Is to be transferred via

  In one configuration example of the sensor network system according to the present invention, the data collection device includes a key distribution unit that distributes the public key to the sensor connection terminal via the relay terminal, and the relay terminal includes: When transferring the public key to the sensor connection terminal, transfer is performed via the two-way transmission / reception with the sensor connection terminal, or the one-way third radio channel only transmitting to the sensor connection terminal. It is a thing.

  A data collection method according to the present invention includes a sensor connection terminal wirelessly connected to a plurality of sensor devices to acquire data from the sensor devices, a relay terminal transferring the data acquired by the sensor connection terminal, and A data collection method used in a sensor network system including a data collection device for collecting the data transferred from a relay terminal, wherein the data collection device is used for wireless connection between the sensor device and the sensor connection terminal. Adding a digital signature related to the connection procedure document using a secret key paired with a public key registered in advance to the connection procedure document describing the connection procedure, and storing the digital signature in the device storage unit; Reading out the connection procedure sheet to which is attached from the device storage unit, and distributing it to the sensor connection terminal via the relay terminal The sensor connection terminal wirelessly connects to the sensor device based on a connection procedure registered in advance in the terminal storage unit, acquires data from the sensor device, and transmits the data to the relay terminal. In the case of a data acquisition step to be transmitted, and when a new connection procedure is distributed from the data collection device via the relay terminal, an electronic signature attached to the new connection procedure and the previously registered. The terminal registration step of registering the new connection procedure in the terminal storage unit after confirming the validity of the new connection procedure based on the public key.

  According to the present invention, when registering a new connection procedure in the terminal storage unit of the sensor connection terminal, based on the electronic signature attached to the new connection procedure and the public key set in advance, Connection procedure will be verified. For this reason, registration of the altered unauthorized connection procedure manual with respect to the sensor connection terminal can be avoided, and unauthorized connection between the sensor device and the sensor connection terminal can be prevented. Therefore, it is possible to suppress unauthorized acquisition of data detected by the sensor device and occurrence of data leakage by a malicious third party, and it is possible to improve the security of the entire sensor network system.

It is a block diagram showing composition of a sensor network system. It is a sequence diagram showing registration operation of a connection procedure manual.

Next, an embodiment of the present invention will be described with reference to the drawings.
[Sensor network system]
First, a sensor network system 1 according to the present embodiment will be described with reference to FIG. FIG. 1 is a block diagram showing the configuration of a sensor network system.

  As shown in FIG. 1, the sensor network system 1 collects various data detected by sensors, such as biological information detected from a human body by a wearable sensor, and security data obtained by a sensor device S from a building or facility, for example. The sensor connection terminal 30 acquires data detected from the target by the sensor device S, and has a function of collecting data from the relay terminal 20 by the data collection apparatus 10 via the communication network NW.

The sensor device S is configured of a terminal device that detects various data, such as a temperature sensor, an acceleration sensor, and a camera that captures a moving image or a still image.
The sensor connection terminal 30 as a whole comprises an information terminal capable of wireless communication, and has a function of wirelessly connecting to the sensor device S and acquiring data detected by the sensor device S.

  The relay terminal 20 generally comprises an information terminal capable of wireless communication, wirelessly connects with a plurality of sensor connection terminals 30, and relays and transfers data acquired by the sensor connection terminals 30 to the data collection apparatus 10 via the communication network NW. Function and a one-way radio line L2 (second radio line) that only transmits to the sensor connection terminal 30 when transferring a new connection procedure manual distributed from the data collection device 10 to the sensor connection terminal 30 And the ability to transfer through.

  Further, when the relay terminal 20 transfers the public key distributed from the data collection device 10 to the sensor connection terminal 30, the relay terminal 20 performs bidirectional transmission / reception with the sensor connection terminal 30, or one-way transmission only to the sensor connection terminal 30. And a function of transferring data via the wireless line L3 (third wireless line). At this time, if the validity of the distributed public key is to be confirmed by the authentication device 40, the wireless line L3 in both directions may be used. On the other hand, if the validity check is not performed, the sensor connection terminal 30 It may be a one-way radio line L3 that performs only transmission, and the radio line L2 may be used as the radio line L3.

The data collection device 10 is an information processing device such as a server device as a whole, and has a function of performing various data processing such as detection of a target condition or occurrence of an event based on data collected via the communication network NW. doing.
The authentication device 40 is an information processing device such as a server device as a whole, and has a function of confirming the validity of the public key distributed from the data collection device 10 in response to an inquiry from the sensor connection terminal 30 via the communication network NW. have.

  Although FIG. 1 shows a configuration example in which a plurality of sensor connection terminals 30 are connected to one relay terminal 20 and a plurality of sensor devices S are connected to one sensor connection terminal 30, the system is shown. The configuration is not limited to this. For example, one or more relay devices may be provided between the relay terminal 20 and the sensor connection terminal 30, and these may be connected hierarchically in a tree structure. In the present invention, at least one relay terminal 20, at least one sensor connection terminal 30, and at least one sensor device S may be provided.

[Data acquisition device]
Next, the configuration of the data acquisition device 10 will be described in detail with reference to FIG.
As shown in FIG. 1, the data collection device 10 is provided with a data collection unit 11, an apparatus storage unit 12, a procedure manual distribution unit 13, and a key distribution unit 14 as main functional units. Among these functional units, the data collection unit 11, the procedure manual distribution unit 13, and the key distribution unit 14 are configured by an arithmetic processing unit in which hardware such as a CPU and a program cooperate with each other.

The data collection unit 11 has a function of collecting data transferred from the relay terminal 20 via the communication network NW and storing the data in the device storage unit 12.
The device storage unit 12 comprises a storage device such as a hard disk or a semiconductor memory as a whole, and is used for data collection processing such as collected data, a public key distributed to the sensor connection terminal 30, a secret key paired with the public key, Various connection procedure documents describing the function of storing various processing information and programs and the connection procedure used for wireless connection between the sensor device S and the sensor connection terminal 30 using a secret key paired with a public key in advance It has a function of giving and storing an electronic signature regarding the calculated connection procedure.

The procedure manual distribution unit 13 reads out from the device storage unit 12 a connection procedure manual to which a corresponding electronic signature is attached, in response to a request from the sensor connection terminal 30 or an input operation of the operator, or intermittently. A function of distributing data from the NW to the sensor connection terminal 30 via the relay terminal 20 is provided.
The key distribution unit 14 reads the corresponding public key from the device storage unit 12 according to the request from the sensor connection terminal 30 or the input operation of the operator, or intermittently, and the sensor from the communication line NW through the relay terminal 20 It has a function of distributing to the connection terminal 30. The public key may be generated by the key distribution unit 14, or may be generated by an external device such as the authentication device 40, for example.

[Sensor connection terminal]
Next, the configuration of the sensor connection terminal 30 according to the present embodiment will be described in detail with reference to FIG.
As shown in FIG. 1, the sensor connection terminal 30 is provided with a data acquisition unit 31, a data transfer unit 32, a terminal storage unit 33, and a terminal registration unit 34 as main functional units. Among these functional units, the data acquisition unit 31, the data transfer unit 32, and the terminal registration unit 34 are configured by an arithmetic processing unit in which hardware such as a CPU and a program cooperate with each other.

The data acquisition unit 31 has a function of wirelessly connecting to the sensor device S via the sensor wireless line LS based on a connection procedure registered in advance in the terminal storage unit 33, and the sensor device S from the sensor device S wirelessly connected And the function of acquiring the data detected in the above through the sensor wireless line LS.
The data transmission unit 32 has a function of wirelessly transmitting data acquired from the sensor device S to the relay terminal 20 via the one-way radio line L1 (first radio line) that performs only transmission to the relay terminal 20. Have.

  The terminal storage unit 33 is formed of a storage device such as a semiconductor memory, and includes various processing information and programs used for data collection processing, such as a connection procedure manual distributed from the data collection device 10 and a public key distributed from the data collection device 10. It has the function to memorize.

  When a new connection procedure is distributed from the data collection device 10 via the relay terminal 20, the terminal registration unit 34 receives an electronic signature attached to the new connection procedure and a public key registered in advance. After confirming the legitimacy of the new connection procedure, the function of registering the new connection procedure in the terminal storage unit 33 and the function of discarding the new connection procedure whose legitimacy could not be confirmed And.

[Operation of this embodiment]
Next, with reference to FIG. 2, the operation of the sensor network system 1 according to the present embodiment will be described. FIG. 2 is a sequence diagram showing the registration procedure of the connection procedure manual. Here, the case of registering a new connection procedure document distributed autonomously from the data collection device 10 will be described as an example, but the sensor connection terminal 30 requests the data collection device 10 to register a new connection procedure document. The same is true for the case.

  First, when the terminal registration unit 34 of the sensor connection terminal 30 detects a connection protocol registration instruction according to a new connection protocol received from the data collection device 10 via the relay terminal 20 (step 100), the terminal storage unit 33 If the public key is registered, the process proceeds to step 101 described later.

On the other hand, when the public key is not registered in the terminal storage unit 33, the terminal registration unit 34 executes the public key acquisition process 110 including the following steps 111 to 115 using the wireless line L3.
In the public key acquisition process 110, first, the terminal registration unit 34 transmits a public key distribution request to the data collection device 10 via the relay terminal 20 (step 111).

  Accordingly, the public key distributed from the data collection device 10 is received through the relay terminal 20 (step 112), and the validity of the public key distributed with the authentication device 40 through the relay terminal 20 is received. Is confirmed (step 113), and only when the legitimacy is confirmed (step 114: YES), the public key is registered in the terminal storage unit 33 (step 114). If the legitimacy can not be confirmed, the public key is discarded, and registration of a new connection procedure is canceled.

  Subsequently, the terminal registration unit 34 uses the public key registered in the terminal storage unit 33 to perform signature operation on the new connection procedure manual (step 101), and the obtained operation result is added to the new connection procedure manual. (Step 102).

  Here, if the operation result matches the electronic signature (step 102: YES), the terminal registration unit 34 registers the new connection procedure as valid in the terminal storage unit 33 (step 103), and the data acquisition unit 31 wirelessly connects with the sensor device S via the sensor wireless line LS based on the new connection procedure registered in the terminal storage unit 33 (step 104), and the sensor device S via the sensor wireless line LS Start data acquisition from

  If the operation result does not match the electronic signature, it is determined that the new connection procedure is not valid, and the new connection procedure will be discarded, and based on the new connection procedure. The wireless connection with the sensor device S is not performed.

  Moreover, although the case where the new connection procedure manual registered into the sensor connection terminal 30 was distributed from the data collection device 10 was described as an example in FIG. 2, the present invention is not limited to this. For example, even when a recording medium such as a USB (Universal Serial Bus) memory in which a new connection procedure manual is stored is attached to the sensor connection terminal 30 and registered in the sensor connection terminal 30, the registration operation similar to FIG. Can be performed, and similar effects can be obtained.

[Effect of this embodiment]
As described above, according to the present embodiment, in the data collection device 10, the procedure manual distribution unit 13 reads out the connection procedure manual to which the electronic signature is attached from the device storage unit 12, and sensor connection via the relay terminal 20. When a new connection procedure is distributed from the data collection device 10 via the relay terminal 20 in the sensor connection terminal 30, the new connection procedure is added to the new connection procedure. Based on the electronic signature and the public key registered in advance, after confirming the validity of the new connection procedure, the new connection procedure is registered in the terminal storage unit 33, and the data acquisition unit 31 The wireless connection with the sensor device S is made based on the connection procedure registered in the terminal storage unit 33, and data is acquired from the sensor device S.

  As a result, when a new connection procedure manual is registered in the terminal storage unit 33 of the sensor connection terminal 30, a new connection procedure document is newly created based on the electronic signature attached to the new connection procedure manual and a preset public key. The correctness of the connection procedure will be confirmed. For this reason, registration of the altered unauthorized connection procedure manual with respect to the sensor connection terminal 30 can be avoided, and unauthorized connection between the sensor device S and the sensor connection terminal 30 can be prevented. Therefore, it is possible to suppress unauthorized acquisition of data detected by the sensor device S and data leak occurrence due to a malicious third party, and it is possible to improve the security of the entire sensor network system.

Further, in the present embodiment, when the data transmission unit 32 of the sensor connection terminal 30 transmits data acquired from the sensor device S to the relay terminal 20, the one-way radio line L1 only performs transmission to the relay terminal 20. And the relay terminal 20 transmits the new connection procedure manual to the sensor connection terminal 30 via the one-way radio line L2 which only transmits to the sensor connection terminal 30. It is also good.
Thereby, when the connection procedure manual is transferred from the relay terminal 20 to the sensor connection terminal 30, restrictions are intentionally provided separately from the general-purpose wireless line L1 used for data collection. Since the wireless line L2 is used, the connection procedure can be distributed more safely.

Also, in the present embodiment, the key distribution unit 14 of the data collection device 10 distributes the public key to the sensor connection terminal 30 via the relay terminal 20, and the relay terminal 20 transfers the public key to the sensor connection terminal 30. At this time, transfer may be performed through the two-way transmission / reception with the sensor connection terminal 30 or the one-way third radio channel only transmitting to the sensor connection terminal 30.
As a result, when transferring the public key from the relay terminal 20 to the sensor connection terminal 30, restrictions are given intentionally, separately established from the radio link L1 of the general-purpose standard used for data collection. Since the wireless line L3 is used, it is possible to distribute the public key more safely.

  Further, when NFC (Near Field Communication) is used as the wireless line L2 or the wireless line L3, a simple operation of touching the sensor connection terminal 30 to the antenna unit of the relay terminal 20 (and holding it over) and the relay terminal 20 The processing operation of transferring the connection procedure manual and the public key to the sensor connection terminal 30 can be made to correspond on a one-on-one basis, and the use case can be expanded extremely widely.

[Extension of the embodiment]
As mentioned above, although this invention was demonstrated with reference to embodiment, this invention is not limited to the said embodiment. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention. Moreover, about each embodiment, it can combine arbitrarily and can be implemented in the not conflicting range.

  DESCRIPTION OF SYMBOLS 1 ... Sensor network system, 10 ... Data collection device, 11 ... Data collection part, 12 ... Device memory part, 13 ... Procedure document delivery part, 14 ... Key delivery part, 20 ... Relay terminal, 30 ... Sensor connection terminal, 31 ... Data acquisition unit, 32: data transfer unit, 33: terminal storage unit, 34: terminal registration unit, 40: authentication device, S: sensor device, NW: communication network, L1: wireless line (first wireless line), L2 ... Wireless line (second wireless line), L3 ... Wireless line (third wireless line), LS ... Sensor wireless line.

Claims (4)

A sensor connection terminal for wirelessly connecting to a plurality of sensor devices and acquiring data from the sensor devices, a relay terminal for transferring the data acquired by the sensor connection terminal, and collecting the data transferred from the relay terminal A sensor network system comprising a data acquisition device, comprising:
The data collection device
The connection procedure document describing the connection procedure used for wireless connection between the sensor device and the sensor connection terminal is given an electronic signature regarding the connection procedure document using a secret key paired with a public key registered in advance. A device storage unit for storing
And a procedure document distribution unit that reads out the connection procedure document to which the electronic signature is attached from the device storage unit and distributes the connection procedure document to the sensor connection terminal via the relay terminal.
The sensor connection terminal is
A data acquisition unit configured to wirelessly connect to the sensor device based on a connection procedure registered in advance in the terminal storage unit, and acquire data from the sensor device;
A data transmission unit that transmits the acquired data to the relay terminal;
When a new connection procedure is distributed from the data collection device via the relay terminal, based on the electronic signature attached to the new connection procedure and the public key registered in advance. A sensor network system comprising: a terminal registration unit which registers the new connection procedure in the terminal storage unit after confirming the legitimacy of the new connection procedure. In the sensor network system according to claim 1,
When transmitting data acquired from the sensor device to the relay terminal, the data transmission unit transmits the data via the one-way first radio circuit that performs transmission only to the relay terminal.
The sensor is characterized in that when the relay terminal transfers the new connection protocol to the sensor connection terminal, the relay terminal transmits the new connection procedure only to the sensor connection terminal via the one-way second radio channel. Network system. In the sensor network system according to claim 1 or 2,
The data collection device includes a key distribution unit that distributes the public key to the sensor connection terminal via the relay terminal,
When the relay terminal transfers the public key to the sensor connection terminal, the relay terminal transmits and receives data to and from the sensor connection terminal in both directions, or via the one-way third wireless channel that transmits only the sensor connection terminal. A sensor network system characterized by transferring. A sensor connection terminal for wirelessly connecting to a plurality of sensor devices and acquiring data from the sensor devices, a relay terminal for transferring the data acquired by the sensor connection terminal, and collecting the data transferred from the relay terminal A data collection method for use in a sensor network system comprising a data collection device, comprising:
The data collection device
The connection procedure document describing the connection procedure used for wireless connection between the sensor device and the sensor connection terminal is given an electronic signature regarding the connection procedure document using a secret key paired with a public key registered in advance. Storing in the device storage unit;
And a procedure document distribution step of reading out the connection procedure document to which the electronic signature is attached from the device storage unit and distributing the read connection procedure document to the sensor connection terminal via the relay terminal.
The sensor connection terminal is
A data acquisition step of wirelessly connecting to the sensor device based on a connection procedure registered in advance in a terminal storage unit, acquiring data from the sensor device, and transmitting the data to the relay terminal;
When a new connection procedure is distributed from the data collection device via the relay terminal, based on the electronic signature attached to the new connection procedure and the public key registered in advance. And a terminal registration step of registering the new connection procedure in the terminal storage unit after confirming the legitimacy of the new connection procedure.

Images