JP2002258969A - Remote maintenance management system in distributed communication system, and its communication system and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform safe and certain remote maintenance management in a distributed communication system with electronic signature attachment and encipherment. SOLUTION: A maintenance center 1 performs electronic signature attachment and encipherment to a maintenance application, transfers it, analyzes the electronic signature attached to an output application which is transferred after carrying out management, confirms the propriety of the origin of transfer, decodes and executes the output application, and acquires the maintenance management data. A system 2 to be managed analyzed the electronic signature attached to the maintenance application transferred from the maintenance center 1, and confirms the propriety of the maintenance center 1 being the origin of transfer, and decodes and registers the maintenance application, carries out remote maintenance management, performs the electronic signature attachment and encipherment to the output application based on the implementation of the remote maintenance management, and transfers the resultant output application to the maintenance center 1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an EC (Electric C)
The present invention relates to a remote maintenance management method in a distributed communication system, which attaches an electronic signature to a maintenance application and an output application for remote maintenance management in a distributed communication system such as a remote communication system and transmits the encrypted application, and a communication system and a program thereof.

[0002]

2. Description of the Related Art Conventionally, in a distributed communication system, maintenance management is performed by transferring remote operation data (maintenance application and output application for remote maintenance management) (for example, Japanese Patent Laid-Open No. 2000-293405, "Distributed System"). And a remote maintenance management device and method and a recording medium recording the program ”).

FIG. 12 is a block diagram showing a configuration related to remote maintenance management of a conventional distributed communication system. Referring to FIG. 12, the conventional remote maintenance management system includes a maintenance center E1 and a managed system E2. The maintenance center E1 is a maintenance application introduction device E11.
And a system monitoring device E12. Further, the management target system E2 is a system management device E21.
, And E22n.

In this configuration, a communication device and a transmission system of a communication network between the maintenance center E1 and the managed system E2, and a local network (LAN) between the system management device E21 and the managed devices E221 to E22n. ) Are not shown.

The remote maintenance management system having such a configuration operates as follows. First, the maintenance application introduction device E11 transfers the maintenance application to the system management device E21. The system management device E21 receives the maintenance application, and transfers the application to any or all of the managed devices E221 to E22n to be subjected to maintenance management through a time division multiplex connection or the like. Managed device E2
The maintenance applications 21 to E22n execute the transferred maintenance application to perform the maintenance process, and transfer the maintenance data collected in the maintenance process to the system management device E21.

[0006] The system management device E21 receives the maintenance data of the managed devices E221 to E22n, creates an output application for outputting the maintenance data, and transfers it to the system monitoring device E12. The system management device E12 executes the transferred output application and displays the maintenance data on the screen.

[0007] By the way, in a communication network, particularly in a public communication network, encryption of transfer data is known. In such an encrypted data transfer, more reliable measures are required (for example, Japanese Patent Application Laid-Open No. H11-55247, "Method of transmitting anonymous confidential secret information, apparatus and program recording medium").

[0008]

However, in the above-mentioned conventional example, in remote maintenance management of a distributed communication system in which maintenance applications and output applications are exchanged between a maintenance center and a managed system, in particular, a public line network (TCP / TCP) is used. When connected via an IP communication network / Internet, the following problems may occur.

(1) Since the maintenance application is transferred without encryption, the maintenance application may be eavesdropped on the transmission path.

(2) There is a risk that a third party may pretend to be an authorized maintenance center and register a malicious maintenance application in the managed system. As a result, there is a possibility that information of the managed system is stolen or the managed system is destroyed. This is because the system management apparatus E cannot confirm whether or not the maintenance application has been transferred from the maintenance center.

(3) The output application may be eavesdropped during transfer from the system management device to the system monitoring device. That is, the output application is transferred without being encrypted.

(4) There is a risk that another person may impersonate the system to be managed and transfer a false output application to the system monitoring device. This is because it cannot be confirmed whether the output application has been transferred from the managed system.

(5) Such eavesdropping (obtaining malicious data on a communication path), spoofing (data transmission by impersonating another person), and denial by a malicious third party (communication destination) Communication denial) and alteration (modification of transmission data by a third party on a communication path) may occur.

[0014] The present invention is to solve such a problem in the prior art, and attaches a digital signature to a maintenance application and an output application to be transferred between a maintenance center and a communication system to be managed, and sends the electronic signature to a receiving side. It is an object of the present invention to provide a remote maintenance management method in a distributed communication system, a communication system thereof, and a program capable of confirming the validity of a transfer source and performing safe and reliable remote maintenance management.

Further, the present invention encrypts and transfers a maintenance application and an output application (maintenance data) transferred between the maintenance center and the communication system to be managed, and eavesdrops, impersonates, and denies a malicious third party. ,
Another object of the present invention is to provide a remote maintenance management method in a distributed communication system and a communication system and a program thereof, which can perform safe and secure remote maintenance management while preventing modification or the like.

[0016]

In order to achieve the above-mentioned object, a remote maintenance management method in a distributed communication system according to the present invention includes a maintenance application for remote maintenance and an output application after the management is performed. A step of attaching a digital signature to the maintenance application to be transferred from the management performing side to the managed side, and transferring the maintenance application to which the digital signature is attached. A step in which the target side analyzes the electronic signature to check the validity of the management performing side that is the transfer source; and a step in which the validity is checked in the managed side and registers the received maintenance application. And performing remote maintenance management based on the maintenance application registered by the side.

According to the method of the present invention, a maintenance application for remote maintenance management and an output application after management are transferred between devices on the management execution side and the management target side, and the management target side is based on the maintenance application. Attaching an electronic signature to the output application including the maintenance management data by the remote maintenance performed by the user and transferring the output application to the management implementation side; Analyzing the electronic signature to confirm the validity of the transfer target managed side, and executing the received output application to obtain the maintenance management data when the validity is confirmed by the management execution side And

According to the method of the present invention, a maintenance application for remote maintenance management and an output application after the execution of the management are transferred between the devices on the management execution side and the management target side. Encrypting and transferring the maintenance application to be transferred to the management application, decrypting the maintenance application having received the encrypted maintenance application, registering the decrypted maintenance application on the management target; and Performing remote maintenance management based on the registered maintenance application.

According to the method of the present invention, a maintenance application for remote maintenance management and an output application after the management are performed are transferred between the management-executing side and the management-targeted side. Encrypting the output application including the maintenance management data by the remote maintenance management performed by the user and transferring it to the management implementation side, and decrypting the output application transferred from the management target side by the encryption by the management implementation side And executing the decrypted output application on the management execution side to obtain the executed maintenance management data.

According to the method of the present invention, a maintenance application for remote maintenance management and an output application after the management are performed are transferred between the management-executing side and the management-target side. Attaching and / or encrypting the electronic signature to the maintenance application to be transferred to the management application, and transmitting the maintenance application to the management target side. Verifying the validity and decrypting the encrypted maintenance application; registering the maintenance application and performing remote maintenance when the validity is verified on the management target side; Manages digital signature attachment and / or encryption for output applications based on remote maintenance management Steps performed by the elephant side and transferred to the management side, and the management side receiving this output application analyzes the attached electronic signature to confirm the legitimacy of the transfer side managed side and outputs Decrypting the application if it has been encrypted, and when the validity is confirmed by the management implementation side,
Executing the received output application to obtain maintenance management data.

According to the method of the present invention, a public key cryptosystem or a conventional cryptosystem is applied as confirmation and encryption of the electronic signature.

The remote maintenance management communication system of the present invention transfers a maintenance application for remote maintenance management and an output application after the management has been performed between communication means, and attaches an electronic signature to the maintenance application and / or encrypts it. It analyzes the digital signature attached to the output application transferred after the management is performed, confirms the validity of the transfer source, and decrypts the encrypted output application. A maintenance communication unit that executes the output application to obtain maintenance management data, and the maintenance communication unit analyzes the electronic signature attached to the transferred maintenance application and determines whether the transfer source maintenance communication unit is valid. The maintenance application that has been encrypted, and The maintenance was performed, it is constituted and a managed communication means for transferring the maintenance communication means performs a digital signature attached, and / or encryption for the output applications based on the implementation of the remote maintenance.

In the communication system according to the present invention, the maintenance communication means communicates with the communication means to be managed, an introduction device for introducing a maintenance application from inside and outside the device, and An encryption device for encrypting the maintenance application, a key storage unit for storing a secret key required for encryption and decryption, a decryption device for decrypting the output application transferred from the managed communication means, A system monitoring device that executes the output application decrypted by the decryption device and outputs the maintenance management data from the managed communication means.

[0024] In the communication system according to the present invention, the management target communication means may execute communication with maintenance communication means, and a decoding apparatus decoding the maintenance application transferred from the maintenance communication means. A key storage unit that stores a public key and a private key necessary for encryption and decryption, a system management device that sends out a maintenance application decrypted by the decryption device and collects maintenance management data,
The maintenance application transmitted from the system management device is executed, and at least one managed device to be managed by the maintenance communication unit and an output application from the managed device are encrypted, and the maintenance application is encrypted through the communication device. And an encryption device for transferring to the communication means.

In the communication system according to the present invention, the key storage unit according to claim 8 or 10 is a storage device arranged inside the device or a storage device arranged outside the device. Is configured as

In the communication system according to the present invention, the plurality of managed devices are accommodated in a communication network including a local area network, and the system management device is connected to the communication network via the communication network. Sends a maintenance application to each managed device, and each managed device transfers maintenance management data executed by the maintenance application to the communication network.

According to the program of the present invention, a process for attaching and / or encrypting a digital signature to a maintenance application and transferring the digital signature is performed, and a digital signature attached to an output application including maintenance management data transferred after the management is performed. The actual computer controls the processing of analyzing and confirming the validity of the transfer source and the processing of decrypting the encrypted output application and executing the output application to obtain the maintenance management data. is there.

The program of the present invention analyzes a digital signature attached to a transferred maintenance application to confirm the legitimacy of the maintenance communication means of the transfer source;
Processing for decrypting the encrypted maintenance application, registering the decrypted maintenance application, executing the registered decryption maintenance application to perform remote maintenance, and performing this remote maintenance management A computer executes a process of attaching an electronic signature and / or encrypting and transmitting an output application based on the application.

The present invention is based on the EC (Electric Com
In remote maintenance management in a distributed communication system such as a merce), an electronic signature is attached to a maintenance application and an output application transferred between the maintenance center and the communication system to be managed. Therefore, data modification during transfer can be verified. That is, the validity of the transfer source is confirmed, and the secure and correct maintenance application and output application can be received.

Further, the present invention relates to an EC (Electric Comme
In remote maintenance management in a distributed communication system such as rce), a maintenance application and an output application (maintenance management data) transferred between a maintenance center and a communication system to be managed are encrypted and securely transferred. Therefore, decoding on the transfer path cannot be easily performed. Therefore, eavesdropping, spoofing, denial, alteration, etc. by a malicious third party are reliably prevented.

[0031]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, an embodiment of a remote maintenance management method, a communication system, and a program in a distributed communication system according to the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram illustrating a configuration according to an embodiment of the present invention.

In FIG. 1, this example has a configuration in which a maintenance center 1 as a maintenance communication means remotely manages a managed system 2 as a managed communication means. The maintenance center 1 and the managed system 2 are connected to a local area network (LAN) or a TCP / IP (Transmission Control).
ol Protocol / Internet Protocol) communication network (for example, intranet, Internet, extranet, UNIX (registered trademark) workstation) 5 under an environment. Hereinafter, a public key encryption system (public key encryption / RSA, MH) is used as an encryption method between the maintenance center 1 and the managed system 2.
This will be described by applying the above.

The maintenance center 1 includes a communication device 10, a maintenance application introducing device 11 for introducing a maintenance application, a maintenance application encrypting device 12 for encrypting the maintenance application, and necessary for encryption and decryption. Key storage unit 13 as a storage device arranged inside a device for storing a public key and a secret key, and an output application decryption device 14 for decrypting an output application transferred from the managed system 2
And a system monitoring device 15 that executes an output application and outputs maintenance data.

The managed system 2 includes a communication device 20 and
Maintenance application decryption device 21 for decrypting the maintenance application transferred from maintenance center 1
A key storage unit 22 for storing a public key and a secret key necessary for encryption and decryption, a system management device 23 for distributing a maintenance application and collecting maintenance data, and a managed device as a device to be managed. 241 to 24n, and an output application encryption device 25 for encrypting the output application.

In the maintenance center 1, the maintenance application introduction device 11 inputs a maintenance application to be operated on the managed system 2. The key storage device 13
The secret key and the public key of the maintenance center 1 necessary for the electronic signature and the encryption, and the public keys of the managed systems 241 to 24n are stored. Further, the maintenance application encryption device 12 attaches an electronic signature to the maintenance application input to the maintenance application introduction device 11 using the secret key of the maintenance center 1 stored in the key storage device 13, and Then, the data is encrypted using the public key of the managed system 2 stored in the key storage device 13 and transferred to the managed system 2.

As described above, when the maintenance application is encrypted and transferred, even if the data of the maintenance application is stolen along the communication path during the transfer, there is little possibility that the data is decrypted.

In FIG. 1, the output application decryption device 14 receives the encrypted output application transferred from the managed system 2 and replaces the secret key of the maintenance center 1 stored in the key storage device 13 with the output application decryption device 14. Using the public keys of the managed systems 241 to 24n stored in the key storage device 13, the attached electronic signature is authenticated.

If the authentication fails, the process is interrupted because the output application is likely to have been transferred from a third party other than the managed systems 241 to 24n.

Since the source of the output application can be confirmed in this manner, the managed systems 241 to 241
The transfer of a malicious output application from a third party impersonating 24n can be prevented.

In FIG. 1, the key storage device 22 in the managed system 2 stores secret keys and public keys of the managed systems 241 to 24n required for electronic signature and encryption, and a public key of the maintenance center 1. I remember. The maintenance application decryption device 21 receives the encrypted maintenance application transferred from the maintenance center 1, decrypts the encrypted maintenance application using the secret keys of the managed systems 241 to 24 n stored in the key storage device 22, Using the public key of the maintenance center 1 stored in the storage device 22,
Authenticate the attached digital signature. If the authentication fails, there is a high probability that the maintenance application has been transferred from a third party other than the maintenance center 1.
Stop processing.

Since the source of the maintenance application can be confirmed in this way, it is possible to prevent a malicious maintenance application from being sent from a third party impersonating the maintenance center 1.

In FIG. 1, a system management device 23 in the managed system 2 is for integrated management of the managed devices 241 to 24n, which are the devices to be managed.
The system management device 23 acquires the maintenance application by the maintenance application decryption device 21, distributes the maintenance application to the managed devices 241 to 24n, and acquires maintenance data, which is the execution result, from the managed devices 241 to 24n. Then, an output application for outputting data from the maintenance data is created.

The output application encryption device 2
5 attaches an electronic signature to the output application created by the system management device 23 using the secret key of each of the managed systems 241 to 24n stored in the key storage device 22. The data is encrypted using the public key of the maintenance center 1 stored in the storage 22 and transferred to the maintenance center 1.

As described above, since the output application is also encrypted and transferred, even if the data of the output application is stolen along the communication path during the transfer, there is little possibility that the data is decrypted.

The system monitoring device 15 acquires the output application from the output application decoding device 14, executes the output application, and outputs the maintenance data.

FIG. 2 is a block diagram showing a detailed configuration of each unit shown in FIG. 1 and 2, the maintenance application introduction device 11 has an application operation unit 111. Application operating means 11
1 operates an application for inputting a maintenance application, reads a designated maintenance application, and transfers the read maintenance application to the maintenance application encryption device 12.

The key storage device 13 has a key storage unit 131 and a public key storage unit 132. The key storage unit 131 stores a public key and a private key of the maintenance center 1. The public key storage unit 132 stores the public key of each of the managed systems 241 to 24n managed by the maintenance center.

The maintenance application encryption device 12
Connected to the managed system 2 via a network or the like, and
And a maintenance application encryption unit 122. The maintenance application electronic signature attaching means 121
The public key of the maintenance center is obtained from the key storage unit 131, and an electronic signature is attached to the maintenance application. The maintenance application encryption unit 122 obtains the public key of the transfer destination managed system 2 from the public key storage unit 132, and encrypts the maintenance application. Then, the encrypted maintenance application and the digital signature are transferred to the managed system 2.

The output application decoding device 14
It is connected to the managed system 2 via the local area network, and the output application decoding means 142
And an output application digital signature confirmation unit 141. The output application decrypting means 142
It receives the encrypted output application and the electronic signature transferred from the management target system 2 and
The secret key of the maintenance center is obtained from 31 and the output application is decrypted. The output application digital signature confirmation means 141 is provided by the output application decryption means 1
Receiving the output application and the electronic signature from 42,
The public key of the managed system 2 is obtained from the public key storage unit 132, and the electronic signature is authenticated. Then, when the authentication is successful, the output application is transferred to the system monitoring device 15.

The system monitoring device 15 has an application operating means 151. The application operating unit 151 operates the output application transferred from the output application digital signature confirming unit 141 and displays maintenance data.

In FIG. 2, the key storage device 22 has a public key storage unit 221 and a key storage unit 222. The public key storage unit 221 stores the public key of the maintenance center.
The key storage unit 222 stores public keys and private keys of the managed systems 241 to 24n.

The maintenance application decryption device 21
Connected to the maintenance center 1 via a network, etc.
It has a maintenance application decryption unit 211 and a maintenance application digital signature confirmation unit 212. The maintenance application decryption unit 211 receives the encrypted maintenance application and the electronic signature transferred from the maintenance application encryption unit 122, acquires the secret keys of the managed systems 241 to 24n from the key storage unit 222, Decrypt the maintenance application. The maintenance application electronic signature confirmation unit 212 receives the maintenance application and the electronic signature from the maintenance application decryption unit 211, acquires the public key of the maintenance center from the public key storage unit 222, and authenticates the electronic signature.
Then, when the authentication is successful, the maintenance application is transferred to the system management device 23.

In FIG. 2, the system management device 23
It has a maintenance application registration unit 231 and an output application creation unit 232. The maintenance application registration unit 231 receives the maintenance application transferred from the maintenance application digital signature confirmation unit 212 and transfers the maintenance application to the managed devices 241 to 24n. The management target devices 241 to 24n execute the maintenance application, and transfer the maintenance data, which is the execution result, to the output application creating unit 232. The output application creating unit 232 creates an output application for outputting data from the maintenance data, and transfers the output application to the output application encryption device 25.

In FIG. 2, the output application encryption device 25 includes an output application digital signature attaching unit 251 and an output application encryption unit 252. Output application digital signature attaching means 2
51 receives the output application transferred from the output application creating means 232, acquires the secret keys of the managed systems 241 to 24n from the key storage unit 222, and attaches an electronic signature to the output application. The output application encryption unit 252 acquires the public key of the maintenance center from the public key storage unit 221, and encrypts the output application. Then, the encrypted output application and the digital signature are transferred to the maintenance center 1.

Hereinafter, a detailed operation of the embodiment will be described. First, the maintenance application registration operation will be described. FIG. 3 is a flowchart showing a procedure of a maintenance application registration operation. 1 to 3, in the maintenance application registration operation, first, the maintenance application introduction device 11 executes the input application by the application operation unit 111 and acquires the maintenance application (step S1 in FIG. 3).

Next, the maintenance application digital signature attaching means 121 acquires the private key of the maintenance center from the key storage unit 131 (step S2). Then, the maintenance application electronic signature attaching unit 121 attaches an electronic signature to the maintenance application using the obtained private key (step S3).

Next, the maintenance application encryption means 1
22 acquires the public key of the transfer destination managed system 2 from the public key storage unit 132 (step S4). Next, the maintenance application encryption unit 122 encrypts the maintenance application using the obtained public key (Step S5). Further, maintenance application encryption means 1
22 is the encrypted maintenance application and step S
The electronic signature created in step 3 is transferred to the managed system 2 (step S6).

Next, the maintenance application decoding means 2
11 acquires the secret key of the managed system 2 from the key storage unit 222 (Step S7). Next, the maintenance application decrypting means 211 decrypts the maintenance application transferred from the maintenance center 1 using the obtained private key (Step S8).

Next, the maintenance application electronic signature confirmation unit 212 acquires the public key of the maintenance center from the public key storage unit 221 (step S9). Next, the maintenance application electronic signature confirmation unit 212 authenticates the electronic signature transferred from the maintenance center 1 using the obtained public key (step S10). If the electronic signature is not correct, the process ends (step S11). If the electronic signature is correct, the maintenance application electronic signature confirmation means 212,
The maintenance application registration unit 231 transfers the maintenance application, registers the maintenance application, and ends (step S12).

Next, the transfer operation of the output application will be described. FIG. 4 is a flowchart showing a processing procedure of the transfer operation of the output application. 1 and 2
In FIG. 4 and FIG.
2 creates an output application for data output from the maintenance data collected as a result of executing the maintenance application on the managed devices 241 to 24n (step S21 in FIG. 4).

Next, the output application electronic signature attaching means 251 stores the managed system 2 in the key storage unit 222.
The secret keys of 41 to 24n are obtained (step S22).
Next, output application digital signature attaching means 251
Attaches an electronic signature to the output application using the obtained private key (step S23).

Next, output application encryption means 2
52 acquires the public key of the maintenance center 1 from the public key storage unit 221 (step S24). Next, the output application encryption unit 252 encrypts the output application using the obtained public key (Step S25).
Next, the output application encryption unit 252 transfers the encrypted output application and the digital signature created in step S23 to the maintenance center 1 (step S2).
6).

Next, output application decoding means 1
42 acquires the secret key of the maintenance center 1 from the key storage unit 131 (step S27). Next, the output application decrypting means 142 decrypts the output application transferred from the managed system 2 using the obtained secret key (Step S28).

Next, the output application digital signature confirmation means 141 acquires the public key of the transfer source managed system 2 from the public key storage unit 132 (step S29).
Next, the output application electronic signature confirmation unit 141
Authenticates the electronic signature transferred from the managed system 2 using the acquired public key (step S3).
0). If not correct, the process ends (step S3
1). If the electronic signature is correct, the output application electronic signature confirmation means 141 transfers the output application to the system monitoring device 15. The application operating unit 151 executes the output application, outputs the maintenance data, and ends (step S32).

Next, the operation of the embodiment will be described more specifically. FIG. 5 is a diagram for explaining the maintenance application registration operation in detail. Note that the step numbers in parentheses correspond to FIG. First, the maintenance application C1 is input to the maintenance application introduction device 11 (step S1).

Next, the maintenance application encryption device 1
2 obtains the maintenance center secret key C3 from the key storage unit 131 (step S2). The maintenance application encryption device 12 calculates the Hash value C2 from the maintenance application C1, and creates the electronic signature C5 by encrypting the Hash value C2 with the maintenance center secret key C3 (step S3). The maintenance application encryption device 12 acquires the public key C6 of the transfer destination managed system A from the public key storage unit 132 (Step S4).

The maintenance application encryption device 12
By encrypting the maintenance application C1 with the public key C6 of the managed system A, an encrypted maintenance application C8 is created (step S5). The maintenance application encryption device 12 transfers the created encrypted maintenance application C8 and the electronic signature C5 to the managed system A (step S6).

The maintenance application decryption device 21
The secret key C9 of the managed system A is obtained from the key storage unit 222 (step S7). The maintenance application decryption device 21 decrypts the encrypted maintenance application C8 transferred from the maintenance center 1 with the secret key C9 of the managed system A to create the maintenance application C10 (Step S8). The maintenance application decryption device 21 acquires the public key C4 of the maintenance center from the public key storage unit 221 (Step S9). The maintenance application decryption device 21 decrypts the electronic signature C5 transferred from the maintenance center 1 by using the public key C4 of the maintenance center, and acquires a Hash value C11.

Further, the maintenance application decryption device 21 transmits the decrypted maintenance application C10 to H
The hash value C12 is calculated and compared with the hash value C11 (step S10). Hash value C11 and Hash value C
If they are equal to each other, it is determined that the electronic signature is correct (step S11), and the maintenance application C10 is transferred to the system management device 23 and registered (step S12).
If the Hash value C11 is different from the Hash value C12, it is determined that the electronic signature is invalid (step S11), and the processing is stopped.

Next, the transfer operation of the output application will be described in detail. FIG. 6 is a diagram for describing the transfer operation of the output application in detail. Note that the step numbers in parentheses correspond to FIG. First, the system management device 23 creates an output application D1 for outputting data from the maintenance data collected as a result of executing the maintenance application on the managed devices 241 to 24n (step S21).

Next, the output application encryption device 2
5 acquires the secret key C9 of the managed system A from the key storage unit 222 (step S22). The output application encryption device 25 calculates the Hash value D2 from the output application D1, and creates the digital signature D3 by encrypting the Hash value D2 with the maintenance center secret key C9 (step S23).

The output application encryption device 25
The public key C4 of the maintenance center is obtained from the public key storage unit 221 (step S24). The output application encryption device 25 creates the encrypted output application D4 by encrypting the output application D1 with the public key C4 of the maintenance center (step S25). The output application encryption device 25 transfers the created encrypted output application D4 and digital signature D3 to the maintenance center (Step S26).

The output application decoding device 14
The secret key C3 of the maintenance center is obtained from the key storage unit 131 (step S27). The output application decryption device 14 decrypts the encrypted output application D4 transferred from the managed system A with the secret key C3 of the maintenance center to create the output application D5 (Step S28).

The output application decoding device 14
Public key C of the managed system 1 from the public key storage unit 132
6 is acquired (step S29). The output application decryption device 14 decrypts the electronic signature D3 transferred from the managed system using the public key C6 of the managed system A to obtain a Hash value D6. Further, the output application decoding device 14 calculates a Hash value D7 from the decoded output application D5 and
The value is compared with the h value D6 (step S30).

If the Hash value D6 and the Hash value D7 are equal, it is determined that the electronic signature is correct (step S31), the output application D5 is transferred to the system monitoring device 15, and the maintenance data is output (step S3).
2). If the Hash value D6 is different from the Hash value D7, it is determined that the electronic signature is invalid (step S31), and the process is stopped.

Next, another embodiment will be described in detail with reference to the drawings. In other embodiments, the same components as those in FIGS. 1 to 6 are denoted by the same reference numerals. FIG. 7 is a block diagram showing a detailed configuration of another embodiment. 7 has a public key storage device 3 in addition to the configuration shown in FIG. On the other hand, the key storage device 13
Does not include the public key storage unit 132 illustrated in FIG. 2, and the key storage device 22 does not include the public key storage unit 221.

Referring to FIG. 7, the public key storage device 3
This is a device for managing public keys for both the maintenance center 1 and the management target system 2, and has a public key storage unit 31 as a storage device arranged outside the device.
The public key storage unit 31 stores the public keys of all the managed systems 241 to 24n managed by the device and the public key of the maintenance center 1.

Next, the operation of another embodiment will be described. FIG. 8 is a flowchart showing a processing procedure of a maintenance application registration operation according to another embodiment. In FIGS. 7 and 8, the operations from step S41 to step S43 in FIG. 8 are the same processes as those from step S1 to step S3 in FIG.
The maintenance application encryption unit 122 of the maintenance application encryption device 12 manages the managed systems 241-2 required for encrypting the maintenance application.
The public key 4n is obtained from the public key storage unit 31 of the public key storage device 3 (step S44 in FIG. 8).

Steps S45 to S4 in FIG.
The operations up to 8 are performed in steps S5 to S8 in FIG.
This is the same process as that described above, and duplicate description will be omitted. The maintenance application electronic signature confirmation unit 212 of the maintenance application decryption device 21 acquires the public key of the maintenance center required to authenticate the electronic signature from the public key storage unit 31 of the public key storage device 3 (Step S49). ). The operations from step S50 to step S52 in FIG. 8 are the same processes as those from step S10 to step S12 in FIG. 3, and redundant description will be omitted.

Next, the operation of another embodiment will be described. FIG. 9 is a flowchart showing a processing procedure of a transfer operation of an output application according to another embodiment. In FIGS. 7 and 9, the operations from step S61 to step S63 in FIG. 9 are the same processes as those from step S21 to step S23 in FIG. 4, and the duplicate description will be omitted.

The output application encryption means 252 of the output application encryption device 25 in FIG. 7 stores the public key of the maintenance center necessary for encrypting the output application in the public key storage unit 31 of the public key storage device 3. (Step S64). Step S6 in FIG.
5 to step S68 are performed in step S68 of FIG.
25 to 25 are the same as those in step S28, and redundant description will be omitted.

The maintenance application digital signature confirmation means 141 of the output application decryption device 14 in FIG.
Acquires the public keys of the managed systems 241 to 24n required to authenticate the electronic signature from the public key storage unit 31 of the public key storage device 3 (step S6).
9). The operations from step S70 to step S72 in FIG. 9 are the same processes as those from step S30 to step S32 in FIG. 4, and redundant description will be omitted.

Next, a specific operation of another embodiment will be described. FIG. 10 is a diagram for explaining a specific operation of the maintenance application registration operation. In the specific example of FIG. 10, the public key C of the managed system A stored in the public key storage unit 132 in the specific example of FIG.
6 and the public key C7 of the managed system B and the public key C4 of the maintenance center 1 stored in the public key storage unit 221 are respectively stored in the public key storage unit 31 of the public key storage device 3.
Is stored in The operation from step S41 to step S43 in FIG. 10 is performed in step S1 of the specific example in FIG.
3 to FIG. 3, and redundant description will be omitted.

In FIG. 10, the maintenance application encryption device 12 acquires the public key C6 of the managed system A to which the maintenance application C1 is transferred from the public key storage unit 31 of the public key storage device 3 (step S4).
4). The operation from step S45 to step S48 in FIG. 10 is the same as the operation from step S5 to step S8 in the specific example of FIG. 5, and a duplicate description will be omitted.

In FIG. 10, the maintenance application decryption device 21 obtains the public key C4 of the maintenance center required for authenticating the electronic signature from the public key storage unit 31 of the public key storage device 3 (step S49). ). The operations from step S50 to step S52 in FIG. 10 are the same as the operations from step S10 to step S12 in the specific example in FIG. 5, and the duplicate description will be omitted.

Next, the operation of another embodiment will be described. FIG. 11 is a diagram for explaining a specific operation of the output application transfer operation. In the specific example of FIG. 11, the public key C6 of the managed system A and the public key C7 of the managed system B and the public key storage unit 221 stored in the public key storage unit 132 in the specific example of FIG. The public key C4 of the maintenance center is stored in the public key storage unit 3 of the public key storage device 3.
1 in that it is stored in the memory.

The operation from step S61 to step S63 in FIG. 11 is the same as that in step S21 in the specific example of FIG.
To step S23, and a duplicate description will be omitted. In FIG. 10, the output application encryption device 25 obtains the public key C4 of the maintenance center required for encrypting the output application D1 from the public key storage unit 31 of the public key storage device 3 (Step S64).

The operation from step S65 to step S68 in FIG. 11 corresponds to step S25 in the concrete example of FIG.
The operation is the same as that from step S28 to step S28, and a duplicate description is omitted. Output application decryption device 14
Acquires the public key C6 of the managed system A required for authenticating the electronic signature from the public key storage unit 31 of the public key storage device 3 (step S69). The operation from step S70 to step S72 in FIG. 11 is the same as the operation from step S30 to step S32 in the specific example in FIG. 6, and a duplicate description will be omitted.

Although the above embodiment has been described with reference to the application of the public key cryptosystem, the present invention is not limited to this. For example, using the same key for encryption and decryption, DES and DEA that change the order of characters (transliteration) and change the characters (substitution)
1 conventional cryptosystem
The same operation and effect can be obtained with m).

[0090]

As is apparent from the above description, according to the remote maintenance management method, the communication system, and the program in the distributed communication system according to the present invention, in the remote maintenance management in the distributed communication system, the maintenance center and the communication to be managed are performed. An electronic signature is attached to the maintenance application and the output application transferred to and from the system.

As a result, data modification during transfer can be verified, the validity of the transfer source is confirmed, and secure and correct maintenance applications and output applications can be received. This has the effect that remote maintenance management in the system can be performed.

Further, according to the present invention, in remote maintenance management in a distributed communication system for EC or the like, a maintenance application and maintenance data to be transferred between a maintenance center and a communication system to be managed are encrypted and transferred. I have.

As a result, decryption on the transfer path cannot be easily performed, and eavesdropping, spoofing, denial, and alteration by a malicious third party are reliably prevented, and remote maintenance in a safe and reliable distributed communication system is performed. This has the effect that management can be performed.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration according to an embodiment of the present invention.

FIG. 2 is a block diagram showing a detailed configuration of each unit shown in FIG.

FIG. 3 is a flowchart showing a processing procedure of a maintenance application registration operation in the embodiment.

FIG. 4 is a flowchart illustrating a processing procedure of an output application transfer operation in the embodiment.

FIG. 5 is a diagram illustrating in detail a maintenance application registration operation in the embodiment.

FIG. 6 is a diagram for explaining in detail an output application transfer operation in the embodiment.

FIG. 7 is a block diagram showing a detailed configuration of another embodiment.

FIG. 8 is a flowchart illustrating a procedure of a maintenance application registration operation according to another embodiment.

FIG. 9 is a flowchart illustrating a procedure of a transfer operation of an output application according to another embodiment.

FIG. 10 is a diagram for explaining a specific operation of a maintenance application registration operation in the embodiment.

FIG. 11 is a diagram illustrating a specific operation of an output application transfer operation in the embodiment.

FIG. 12 is a block diagram showing a configuration related to remote maintenance management of a conventional distributed communication system.

[Explanation of symbols]

 Reference Signs List 1 maintenance center 2 managed system 3 public key storage device 5 communication network 10, 20 communication device 11 maintenance application introduction device 12 maintenance application encryption device 13, 22 key storage device 14 output application decryption device 15 system monitoring device 21 maintenance application ... To 24n managed device 25 output application encryption device 31 public key storage unit

Claims (13)

[Claims] 1. A remote maintenance management method in a distributed communication system for transferring a maintenance application for remote maintenance management and an output application after the management is performed between devices on a management execution side and a management target side. Attaching the electronic signature to the maintenance application to be transferred to the target side, and transferring the maintenance application. The management target receiving the maintenance application with the electronic signature analyzes the electronic signature, and verifies the validity of the management execution side as the transfer source. And a step of registering the received maintenance application when the validity is confirmed on the managed side, and a step of performing remote maintenance based on the registered maintenance application on the managed side. A remote maintenance management method in a distributed communication system. 2. A remote maintenance management method in a distributed communication system for transferring a maintenance application for remote maintenance management and an output application after the management is performed between devices on a management execution side and a management target side. Attaching an electronic signature to the output application including the maintenance management data by remote maintenance performed based on the electronic signature and transferring the output application to the management performing side; and receiving the output application transferred from the management target side to which the electronic signature is attached. A step in which the management performing side analyzes the electronic signature to confirm the validity of the transfer target managed side; and when the management performing side confirms the validity, executes the received output application to generate the maintenance management data. Obtaining a distributed communication system. Remote maintenance management how. 3. A remote maintenance management method in a distributed communication system for transferring a maintenance application for remote maintenance management and an output application after the management is performed between devices on a management execution side and a management target side. A step of encrypting and transferring the maintenance application to be transferred to the target side, a step of decrypting the encrypted maintenance application by the managed side that has received the encrypted maintenance application, a step of registering the maintenance application decrypted by the managed side, and a step of managing Performing a remote maintenance management based on the maintenance application registered by the target side. A remote maintenance management method in a distributed communication system, comprising: 4. A remote maintenance management method in a distributed communication system for transferring a maintenance application for remote maintenance management and an output application after the management is performed between devices on a management execution side and a management target side, wherein the management target side is a maintenance application. Encrypting the output application including the maintenance management data by the remote maintenance performed based on the above, and transferring the encrypted application to the management performing side; and the management performing side receiving the output application transferred from the management target side by the encryption decrypts the output application. Performing the decrypted output application on the management implementation side to obtain the implemented maintenance management data. A remote maintenance management method in a distributed communication system, comprising: 5. A remote maintenance management method in a distributed communication system for transferring a maintenance application for remote maintenance management and an output application after the management is performed between devices on a management side and a management target side. Adding a digital signature and / or encrypting the maintenance application to be transferred to the target side and transferring the same; and
Analyzing the attached electronic signature to confirm the legitimacy of the management side that is the transfer source, and decrypting the encrypted maintenance application, and verifying the legitimacy of the management target side Registering the maintenance application to perform remote maintenance management, and attaching and / or encrypting an electronic signature to the output application based on the execution of the remote maintenance management and transferring it to the management implementation side. And the management implementing side that has received this output application,
Analyzing the attached digital signature to confirm the validity of the transfer target managed side, and decrypting if the output application was encrypted, and confirming the validity on the management side Executing the received output application to obtain maintenance management data when the operation is performed, and a remote maintenance management method in the distributed communication system. 6. A remote maintenance management method in a distributed communication system, wherein a public key cryptosystem or a conventional cryptosystem is applied as the electronic signature confirmation and encryption according to claim 1 to 5. 7. A remote maintenance and management communication system for transferring a maintenance application for remote maintenance and an output application after the management has been performed between communication means, wherein an electronic signature is attached to the maintenance application and / or encrypted. Analyzes the electronic signature attached to the output application transferred after the management is performed, checks the validity of the transfer source, decrypts the encrypted output application, and executes the output application Maintenance communication means for obtaining maintenance management data, and the maintenance communication means analyzes the electronic signature attached to the transferred maintenance application to confirm the validity of the transfer source maintenance communication means, In addition, decrypt the encrypted maintenance application and register it for remote maintenance management. Subjecting the electronic signature attached and for outputting the application based on the implementation of the remote maintenance /
Or a communication object to be managed, which encrypts the data and transfers it to the maintenance communication means. 8. A communication device for executing communication with a communication device to be managed, wherein the maintenance communication device according to claim 7 is an installation device for installing a maintenance application from inside or outside the device. An encryption device for encrypting a maintenance application from a storage device, a key storage unit for storing a secret key required for encryption and decryption, and a decryption device for decrypting an output application transferred from the managed communication means. A system monitoring device that executes the output application decrypted by the decryption device and outputs maintenance management data from the managed communication means. 9. A communication device for executing communication with a maintenance communication device, wherein the communication device to be managed according to claim 7 is a decoding device for decoding a maintenance application transferred from the maintenance communication device. A key storage unit that stores a public key and a private key necessary for encryption and decryption, a system management device that sends out a maintenance application decrypted by the decryption device and collects maintenance management data, A maintenance application sent from the system management device, and at least one managed device to be managed by the maintenance communication unit; and an output application from the managed device is encrypted, and the maintenance is performed through the communication device. A remote maintenance management communication system, comprising: an encryption device for transferring to a communication means. 10. The remote maintenance, wherein the key storage unit according to claim 8 or 10 is configured as a storage device arranged inside the device or a storage device arranged outside the device. Management communication system. 11. A plurality of managed devices according to claim 9, wherein the plurality of managed devices are accommodated in a communication network including a local area network, and system management is performed by a communication connection with the communication network. A remote maintenance management communication system, wherein the device sends a maintenance application to each managed device, and each managed device transfers maintenance management data executed by the maintenance application to the communication network. 12. A process for attaching and / or encrypting a digital signature to a maintenance application and transferring the digital signature, and analyzing a digital signature attached to an output application including maintenance management data transferred after the management is performed. A program for causing a computer to execute the control of: a process of confirming the validity of the transfer source; a process of decrypting the encrypted output application; and executing the output application to obtain maintenance management data. . 13. A process for analyzing a digital signature attached to a transferred maintenance application to confirm the legitimacy of the maintenance communication means of the transfer source, and a process for decrypting the encrypted maintenance application. A process of registering the decrypted maintenance application; a process of executing the registered decrypted maintenance application to perform remote maintenance; and attaching an electronic signature to an output application based on the implementation of the remote maintenance and / or A program that allows a computer to execute the process of encrypting and transferring, and the control of.