JP2005101741A - Communication apparatus, method, apparatus controller, controlling method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To overcome the problem that a security policy provides a method being set for each user but each phase of an apparatus control protocol is not taken into account. <P>SOLUTION: A security policy A110 is applied to a finding protocol 114 for use in the finding phase of an apparatus control protocol 113, and a security policy B111 is applied to a control protocol 115 for use in the control phase. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a communication device, a method, a device control device, a method, and a program.

  Due to advances in computer technology, functions such as linkage and processing linkage through networks have been realized in office equipment and general household equipment.

  As network technologies for realizing such integration of device control apparatuses through a network, device control protocols such as UPnP (Universal Plug and Play), Jini, and Jxta are known.

  Here, UPnP will be described as a representative example. UPnP is an IP (Internet Protocol), TCP (Transfer Control Protocol), UDP (User Datagram Protocol), HTTP (Hyper Text Transfer Protocol) and XML (Extensible World on the Internet). This is a device control protocol used on a network that supports other protocols.

  In UPnP, SSDP (Simple Service Discover Protocol) is used to discover devices connected to the network and grasp their functions. SSDP is a basic part for configuring UPnP, and standard specifications are issued from IETF. IP broadcast is used for device discovery. For example, when broadcasting “Which device can play a digital video stream?”, A device that meets the conditions voluntarily transmits an IP address and a host name to the inquiry source. Also, information specific to the device, such as what functions it has, is also exchanged at this time. The data format used for information exchange is XML and is communicated by HTTP.

  For control of the device, SOAP (Simple Object Access Protocol) is used. SOAP is an industry standard protocol for RPC-based Internet communication that is negotiated to facilitate the exchange of XML Web services. Send a control message to the device using SOAP to get a result or error. The UPnP control request is a SOAP message including an action to be called by specifying a parameter, the response is also a SOAP message and the status is included, and a value and a parameter are returned.

  The device control protocol used to connect devices to each other through a network such as UPnP is roughly divided into a discovery phase for searching for devices connected to the network, and a control for devices discovered in the discovery phase. In many cases, different communication methods are adopted in each phase, such as broadcast communication in the discovery phase and unicast communication in the control phase.

In addition, regarding security policies, security is determined by dynamically determining the security policy at the start of communication with the control device (having one security policy for each system) or by authenticating the user using the control device. There is a method for dynamically determining a policy (having one security policy for each user) (see Patent Document 1).
JP 2001-298449 A

  However, at present, the security policy is not considered for each phase of the device control protocol.

  The present invention has been made in view of such problems, and is to provide a more secure network by applying a security policy suitable for each phase such as discovery and control of device control protocol. .

  In order to achieve the above object, a communication apparatus according to the present invention has the following configuration. In other words, the communication includes communication means for communicating with another device according to a predetermined protocol, and application means for applying a security policy corresponding to a communication phase by the communication means to communication of the communication means. Device.

  The device control device according to the present invention has the following configuration. That is, it has a control unit that discovers a device and controls the discovered device, and an application unit that applies a security policy depending on whether the control unit discovers the device or controls the discovered device. Is a device control device characterized by

  The communication apparatus according to the present invention has the following configuration. That is, a communication comprising: a search unit that searches for a device; and an application unit that applies a security policy depending on whether the device is searched by broadcast communication or a device is searched using a directory service. Device.

  As described above in detail, according to the present invention, it is possible to apply a security policy suitable for each phase, such as discovery and control of device control.

  Furthermore, when a plurality of device control protocols can be handled, it is possible to apply a security policy suitable for a combination of each phase such as device control discovery and control and the device control protocol used. .

  EMBODIMENT OF THE INVENTION Below, the form for implementing this invention is demonstrated using drawing.

  FIG. 1 and FIG. 2 are configuration diagrams for showing differences from the prior art of the present invention.

  In the prior art described in FIG. 1, when applying the security policy 103 to the device control protocol 105 used for communication between the protocol control unit 102 and the control target device 104, the discovery protocol 106 and the control protocol 107 are used. Without distinction, one security policy is applied to the entire device control protocol 105.

  On the other hand, the device control apparatus (communication device) of the present embodiment illustrated in FIG. 2 includes a device control application 108, a protocol control unit 109, and security policies 110 and 111. The protocol control unit 109 and the control target device 112 are included. The security policy A110 is applied to the discovery protocol 114, which is a protocol used in the discovery phase of the device control protocol 113, instead of applying the security policy to the device control protocol 113 used for communication with the device. The security policy B111 is applied to the control protocol 115 which is a protocol used in the phase.

  In this way, the device control apparatus holds a plurality of security policies 110 and 111, and the security policies suitable for the protocol 114 used in the discovery phase and the protocol 115 used in the control phase in the device control protocol 113, respectively. 110 and 111 are applied. For example, in the case of UPnP, which is a device control protocol, it is possible to apply appropriate security policies to the protocol SSDP used in the discovery phase and the protocol SOAP used in the control phase.

  As described above, in the embodiment of the present invention, the security policies 110 and 111 suitable for the discovery phase and the control phase of the device control protocol are set, so that, for example, a device to be discovered in the security policy applied in the discovery phase. (Only devices that match the security policy are discovered), and further devices can be selected in the security policy applied in the control phase (only devices that match the security policy can be controlled). Device control can be performed.

  Also, by applying various security policies in the discovery phase, it becomes possible for device control devices that match the security policy to discover each other, and form groups based on the security policy in the discovery phase within the device control device network be able to.

  Another embodiment of the present invention described in FIG. 3 is an embodiment of a device control device (communication device) configured to handle a plurality of device control protocols.

  The device control application 201 controls a plurality of device control protocols via a virtual protocol processing unit 202 via a virtual protocol for providing a means for generalizing functions required for device control. , 204 performs processing specific to the actual device control protocol and connects to the control target devices 210 and 216.

  When the device control application 201 issues a command (a command used in the virtual protocol), the virtual protocol processing unit 202 changes the command issued by the device control application 201 to the device control protocol A 205 (and / or the device control protocol B 211). ) And used for the protocol A control unit 203 (and / or the protocol control unit 204). When the virtual protocol processing unit 202 searches for a device using both the device control protocols A 205 and B 211, or controls the device using both, the virtual protocol processing unit 202 sends a discovery or control command to the protocol A control unit 203 and the protocol. It gives to both control part B204. When searching for a device by one of the device control protocols A205 and B211, or when controlling a device by one, a command for discovery or control is given to one of the protocol A control unit 203 and the protocol control unit B204. .

  In FIG. 3, two types of protocol A and protocol B are described. However, the number of protocols handled at the same time is not limited, and any number may be used.

  In the device control apparatus configured to handle a plurality of device control protocols as shown in FIG. 3, the security level to be applied differs depending on each device control protocol as well as each phase of the device control protocol. Think. Therefore, in the form described in FIG. 3, the security policy is set to the discovery protocol A206 which is a protocol used in the discovery phase of the device control protocol A205 used for communication between the protocol A control unit 203 and the control target device A210. A208 is applied, and the security policy B209 is applied to the control protocol A207 that is a protocol used in the control phase. In addition, the security policy C214 is applied to the discovery protocol B212 that is used in the discovery phase of the device control protocol B211 used for communication between the protocol B control unit 204 and the control target device B216, and used in the control phase. The security policy D215 is applied to the control protocol B213 that is the protocol to be executed.

  In this way, the device control device configured to handle a plurality of device control protocols holds a plurality of security policies, and the protocol used in the discovery phase in each device control protocol handled by the device control device, and the control It is possible to apply a security policy suitable for each protocol used in the phase.

  For example, the device control protocol A 205 used by the protocol A control unit 203 is UPnP, and the device control protocol B 211 used by the protocol B control unit 204 is a protocol based on a Web service (searches a device using UDDI and controls it using SOAP. ), The appropriate security policies 208 and 209 are applied to the protocol SSDP (A206) used in the UPnP discovery phase, which is the device control protocol A205, and the protocol SOAP (A207) used in the control phase, respectively. Further, in the search request to UDDI by SOAP used in the discovery phase of the device control protocol B211 (B212) and the control by SOAP used in the control phase (B213), appropriate security policies are respectively used. It is possible to apply the Sea 214 and 215.

  That is, in this embodiment, depending on whether a device is searched for by broadcast communication as in SSDP in UPnP, or a device that searches a device using a database that provides a directory service, such as a search request to UDDI by SOAP. And apply the security policy.

  As described above, in this embodiment, in the device control apparatus configured to handle a plurality of device control protocols, appropriate security policies are set in the discovery phase and the control phase for each device control protocol handled by the device control apparatus. So, for example, in the security policy applied in the discovery phase of each device control protocol, the devices to be discovered are selected (only devices that match the security policy are found), and further in the security policy applied in the control phase Further device selection (controllable only for devices that meet the security policy) becomes possible, and more secure device control can be performed. In addition, by applying various security policies in the discovery phase of each device control protocol, it becomes possible for device control devices that match the security policy to discover each other. Each group can be formed according to the security policy of the discovery phase.

  FIG. 4 is a block diagram when the device control apparatus (communication apparatus) according to the embodiment of the present invention is configured by a computer system such as a PC (personal computer).

  In addition to the PC (personal computer), the device control device (communication device) includes a workstation, a notebook PC, a palmtop PC, various home appliances such as a television with a built-in computer, a game machine, a telephone, The present invention can also be implemented by a terminal having a communication function for communicating with other device control apparatuses including a FAX, a mobile phone, a PHS, an electronic notebook, etc., or a combination thereof.

  Reference numeral 301 in FIG. 4 denotes a central processing unit (hereinafter referred to as a CPU) that controls the computer system.

  Reference numeral 302 denotes a random access memory (hereinafter referred to as a RAM), which functions as a main memory of the CPU 301, an execution program area, an execution area of the program, and a data area.

  Reference numeral 303 denotes a read-only memory (hereinafter referred to as ROM) in which the operation processing procedure of the CPU 301 is recorded. The ROM 303 includes a program ROM that records basic software (OS), which is a system program for controlling the equipment of the computer system, and a data ROM that records information necessary for operating the system. An HDD 309 described later may be used instead of the ROM 303.

  Reference numeral 304 denotes a network interface (hereinafter referred to as NETIF), which performs control for transferring data between computer systems via the network and diagnoses connection status. The NETIF 304 is a communication unit that communicates with other devices according to a predetermined protocol. Further, the CPU 301 applies a security policy corresponding to a communication phase by the NETIF 304 as the communication means. This security policy is stored in the RAM 302 or the HDD 309. As will be described later, the CPU 301 which is an application unit applies a security policy corresponding to a discovery phase for discovering a device and a control phase for controlling the discovered device.

  Reference numeral 305 denotes a video RAM (hereinafter referred to as VRAM), which expands an image displayed on a screen of a CRT 306, which will be described later, indicating the operating state of the computer system, and controls its display. Reference numeral 306 denotes a display device, for example, a display. Hereinafter referred to as CRT.

  A controller 307 controls an input signal from an external input device 308 described later. Reference numeral 308 denotes an external input device for accepting operations performed by the computer system user on the computer system, such as a keyboard.

  Reference numeral 309 denotes a storage device, such as a hard disk. Used for storing data such as application programs and image information. The application program in the present embodiment is a software program that executes various device control means constituting the present embodiment.

  Reference numeral 310 denotes an external input / output device that inputs and outputs removable (registered trademark) such as a floppy (registered trademark) disk drive and CD-ROM drive. Used. Hereinafter referred to as FDD. Note that application programs and data stored in the HDD 309 can be stored in the FDD 310 and used.

  Reference numeral 300 denotes an input / output bus (address bus, data bus, and control bus) for connecting the above-described units.

  Next, the application module of the device control apparatus (communication apparatus) according to the embodiment of the present invention will be described with reference to FIG.

  The application module described below supplies a recording medium in which a program code of software realizing the function is recorded to the system or apparatus, and the computer (CPU or MPU) of the system or apparatus is stored in the storage medium. This is realized by reading and executing the program code. In this case, the program code itself read from the recording medium realizes the functions of the above-described embodiments (or examples described later), and the storage medium on which the program code is recorded constitutes the present invention. It will be.

  Further, by executing the program code read out by the computer, not only the functions of the above-described embodiment (or an example described later) are realized, but the computer is operated on the basis of the instruction of the program code. The case where the OS (operation system) or the like performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing is also included. Furthermore, after the program code read from the storage medium is written in the memory of the function expansion board inserted in the computer or the function expansion unit connected to the computer, the function expansion board is based on the instruction of the program code. Also included is a case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are realized by the processing.

  Returning to FIG. The device control device (communication device) includes a device control device application 401, a device control function providing unit 402, a device control protocol control unit 403, a phase determination unit 404, a security application unit 405, a security policy holding unit 406, and a message transmission / reception unit. 407.

  The device control device application 401 manages data input / output control between the external input device 308, the display device 306, and the device control function providing unit 402.

  The device control function providing unit 402 includes a profile information operation unit 402a and a device set information operation unit 402b. The device control function providing unit 402 includes profile information expression means (not shown) that holds an XML file that represents the contents of a profile (device specifications and settings). This profile information is acquired from the discovered device in the discovery phase. The profile information operation unit 402a reads and operates the profile held in the profile information expression means.

  When the device control application 401 requests a device list edited by owner, the device set information operation unit 402b searches for a device and creates a device list edited by owner from the list of discovered devices. Return to the control application 401. The device control application 401 displays the device list received from the device set information operation unit 402 b on the display device 306.

  The device control function providing unit 402 further includes a device control unit (not shown). When the device control application 401 requests acquisition of the status of a specific device included in the displayed list, the device control unit 401 Requests the status of that particular device and receives the status from that particular device.

  The message transmitting / receiving unit 407 includes a message transmitting unit 407a and a message receiving unit 407b.

  When UPnP is used as the device control protocol, SSDP is used as the protocol in the discovery phase, and SOAP is used as the protocol in the control phase. Therefore, the protocol used differs depending on the phase. Therefore, the phase can be determined from the protocol. The device control protocol control unit 403 detects that the protocol has changed from SSDP to SOAP, and issues an event. The phase determination unit 404 determines the phase upon receiving an event notification from the device control protocol control unit 403 that the phase has changed.

  The security application unit 405 reads the security policy corresponding to the phase determined by the phase determination unit 404 from the security policy holding unit 406 and applies it to the device control protocol control unit 403. The device control protocol control unit 403 performs message transmission / reception by the message transmission / reception unit 407 in accordance with the security policy applied by the security policy application unit 405.

  The device control protocol control unit 403 is a control unit that discovers a device and controls the discovered device, and the security setting unit 406 is when the device control protocol control unit 403 that is a control unit discovers a device ( It is an application means for applying a corresponding security policy (a security policy corresponding to a phase) to each of a discovery phase) and when a discovered device is controlled (control phase).

  Next, an application module of a device control apparatus (communication device) capable of handling a plurality of device control protocols according to an embodiment of the present invention will be described with reference to FIG.

  A device control device (communication device) capable of handling a plurality of device control protocols includes a device control application 501, a device control function providing unit 502, a virtual protocol processing unit 503, a device control protocol control unit 504, and a phase determination. A unit 505, a device control protocol determination unit 506, a security application unit 507, a security policy holding unit 508, and a message transmission / reception unit 509.

  The device control device application 501 manages data input / output control between the external input device 308, the display device 306, and the virtual protocol processing unit 503.

  The device control function providing unit 502 includes a profile information operation unit 502a and a device set information operation unit 502b. The device control function providing unit 502 includes profile information expression means for holding an XML format file that represents the contents of a profile (device contents). This profile information is acquired from the discovered device in the discovery phase. The profile information operation unit 502a reads and operates the profile held in the profile information expression means.

  When the device control application 501 requests a device list edited by owner, the device set information operation unit 502b finds the device as described above, and the device edited by owner from the list of discovered devices. A list is created and returned to the device control application 501. The device control application 501 displays the device list received from the device set information operation unit 502 b on the display device 306.

  The device control function providing unit 502 further includes device control means (not shown). When the device control application 501 requests acquisition of the status of a specific device included in the displayed list, the device control means 501 Requests the status of the specific device via the virtual protocol processing unit 503 and receives the status from the specific device.

  The device control protocol control unit 504 includes a protocol A processing unit 504a, a protocol B processing unit 504b, and a protocol C processing unit 504c. In FIG. 6, the device control protocol control unit 504 holds three protocol processing units, but the number of protocol processing units is not limited to three and can be handled. Follow the number of control protocols.

  The message transmitting / receiving unit 509 includes a message transmitting unit 509a and a message receiving unit 509b.

  The virtual protocol processing unit 503 determines which device control protocol is actually used, and notifies the device control protocol control unit 504 of an event that the device control protocol is determined.

  Upon receiving the event notification, the device control protocol control unit 504 understands which device control protocol is to be used. When UPnP is used as the device control protocol, the device control protocol control unit 504 detects that the protocol has changed from SSDP to SOAP and issues an event. The phase determination unit 505 receives the event notification that the phase has changed from the device control protocol control unit 504 and determines the phase.

  The security application unit 507 reads out the device control protocol determined by the device control protocol determination unit 606 and the security policy corresponding to the phase determined by the phase determination unit 505 from the security policy holding unit 508, and controls the device control protocol. Part 504 is applied.

  A protocol processing unit (for example, 504a) that processes a device control protocol determined to be used by the virtual protocol processing unit 503 receives a device discovery command in the device control protocol from the virtual protocol processing unit 503, and receives a security policy application unit. The command is transmitted from the message transmission unit 509a using the security policy applied by 507.

  The device control protocol control unit 504 is a control unit that can handle a plurality of device control protocols, discover devices using the plurality of device control protocols, and control the discovered devices. The security setting unit 507 is a device control protocol used when the device control protocol control unit 504, which is a control unit, discovers a device (discovery phase) and when it controls a discovered device (control phase). The application means applies a corresponding security policy (a security policy corresponding to the device control protocol and phase).

  The device control protocol control unit 504 is a search unit that searches for a device. The security application unit 507 searches for a device by broadcast communication, such as SSDP in UPnP, or requests a search request to UDDI by SOAP. In this way, the application means applies a security policy depending on whether a device is searched using a database that provides a directory service.

  FIG. 7 is a flowchart when the security policy is applied in the device control apparatus according to the embodiment of FIG. This flowchart shows a part of the application program stored in the storage device 309.

  First, in step S <b> 601, the device control function providing unit 402 receives a processing request from the device control application 401. Next, in step S <b> 602, the device control function providing unit 402 determines the control content and issues a command to the device control protocol control unit 403.

  In step S603, the phase determination unit 404 determines whether the device control protocol control unit 403 is currently executing the discovery phase or the control phase. For example, in the case of UPnP, SSDP is used as a protocol in the discovery phase, and SOAP is used as a protocol in the control phase. Therefore, the protocol used differs depending on the phase. Therefore, the phase determination unit 404 determines the phase from the protocol.

  In step S <b> 604, the security application unit 406 obtains a security policy suitable for the phase determined by the phase determination unit 404 from the security policy holding unit 406. For example, when the security policy holding unit 406 holds the security policy A for the discovery phase and the security policy B for the control phase, in step S604, the security application unit 406 determines whether the security policy is in accordance with the currently executed phase. One of the policies A and B is acquired from the security holding unit 406.

  The security policy A is as follows, for example. That is, the security policy A is used in the UPnP discovery phase. The protocol used is SSDP and the type is broadcast. The encryption type is IPsec, the level is use, and the protocol uses AH (Authentication Header; an authentication header for user authentication). When the level is “use”, if IPsec is usable, communication is performed with IPsec, and if impossible, communication is performed without IPsec.

  Security policy B is as follows. That is, the security policy B is used in the UPnP control phase. The protocol used is SOAP and the type is unicast. The encryption type is IPsec, the level is “require”, and the protocol uses AH (Authentication Header) and ESP (Encapsulating Security Payload). When the level is “require”, if IPsec is usable, communication is performed with IPsec, and if impossible, communication is not performed. This security policy B has a higher security level than the security policy A.

  In step S 605, the security policy application unit 405 applies the security policy acquired from the security policy holding unit 406 to the device control protocol control unit 403.

  In step S606, the message transmitting unit 407a transmits a message encrypted according to a security policy such as IPSec or SSL to the control target device. Note that the Internet protocol (IP) is used when the message is transmitted from the message transmission unit 407a. In this case, both IPv4 and IPv6 can be used as the IP version. In addition, a medium that is actually used as a communication path can be wired or wireless. Depending on the device control protocol, a communication protocol such as TCP, UDP, HTTP, SMTP, SNMP, or FTP may be further used.

  According to the embodiment described above, by setting appropriate security policies in the discovery phase and control phase of the device control protocol, for example, the devices to be discovered are selected in the security policy applied in the discovery phase ( Since only devices that match the security policy are discovered), and further devices can be selected in the security policy applied in the control phase (only devices that match the security policy can be controlled), more secure device control is possible. It becomes possible to carry out.

  That is, the security policies of the discovery phase and the control phase are set in the security policy holding unit 406 so that the security policy of the discovery phase is lower (or no security is applied) than the security policy of the control phase. .

  For example, when the device control application 401 requests a device list edited for each owner (step S601), the device control function providing unit 402 generates a command for discovering a device (step S602), and the generated command is displayed. The data is transferred to the device control protocol control unit 403. Here, the phase of communication performed in accordance with the device control protocol is detected (step S603). In this case, since it is the discovery phase, the security policy of the discovery phase is acquired from the security policy holding unit 406 (step S604). ), Applying the acquired security policy to this communication (step S605), transmitting the above discovery command (step S606), and receiving a response from the device that received this command.

  When the device control protocol is UPnP and the security policy A is applied in the discovery phase, when IPsec is used, communication with a device that cannot use IPsec is performed using IPsec. Communicate without using it. In this security policy A, IPsec AH (Authentication Header; authentication header for user authentication) is used.

  In this way, a device is discovered, a device list edited for each owner is created from the list of discovered devices, and the device list is returned to the device control application 401. The device control application 401 displays the device list received from the device control function providing unit 402 on the display device 306.

  Furthermore, when the device control application 401 requests acquisition of the status of a specific device included in the displayed list (step S601), the device control function providing unit 402 acquires the status of the specific device. A command is generated (step S602), and the generated command is passed to the device control protocol control unit 403. Here, the phase of communication performed according to the device control protocol is detected (step S603). In this case, since it is not the discovery phase but the control phase, the security policy of the control phase is acquired from the security policy holding unit 406. (Step S604), the acquired security policy is applied to this communication (Step S605), the above-mentioned command for acquiring the status of the device is transmitted (Step S606), and the status is received from the specific device.

  When the device control protocol is UPnP and the security policy B is applied in the control phase, when the specific device can use IPsec, the device communicates using IPsec, and the specific device uses IPsec. If not available, do not communicate. This security policy B uses IPsec AH (Authentication Header; authentication header for user authentication) and ESP (Encapsulating Security Payload: encryption of IP packet).

  Also, by applying various security policies in the discovery phase, it becomes possible for device control devices that match the security policy to discover each other, and form groups based on the security policy in the discovery phase within the device control device network be able to.

  FIG. 8 is a flowchart when a security policy is applied in a device control apparatus capable of handling a plurality of device control protocols according to the embodiment of FIG. This flowchart shows a part of the application program stored in the storage device 309.

  First, in step S701, the device control function providing unit 502 receives a processing request from the device control application 501. Next, the device control function providing unit 502 determines the control content in step S702.

  In step S703, the virtual protocol processing unit 503 converts the protocol from the virtual protocol abstracting a plurality of device control protocols to the actually used device control protocol in accordance with the control content determined in step S702. And issues a command to the device control protocol control unit 504.

  For example, when the device control application 501 requests a device list edited for each owner (step S701), the device control function providing unit 502 generates a command (command in the virtual protocol) for discovering the device (step S702). ), And passes the generated command to the virtual protocol processing unit 503. Here, it is assumed that the devices are discovered using the protocols A, B, and C sequentially. The device control function providing unit 502 notifies the virtual protocol processing unit 503 which device control protocol to use. The virtual protocol processing unit 503 first converts the command received from the device control function providing unit 502 into a command used in the protocol A and passes the command to the device control protocol control unit 504 (discovering a device using the protocol A) After the processing is completed, the device is discovered using the protocol B, and then the device is discovered using the protocol C).

  In step S704, the device control protocol determination unit 506 determines which device control protocol is used by the device control protocol control unit 504 according to the command issued in step S703.

  In step S705, the phase determination unit 505 determines whether the device control protocol control unit 504 is currently executing the discovery phase or the control phase. For example, when the device control protocol is UPnP, SSDP is used as the protocol in the discovery phase, and SOAP is used as the protocol in the control phase. Therefore, the protocol used differs depending on the phase. Therefore, the phase determination unit 505 determines the phase from the protocol.

  In step S706, the security application unit 507 acquires from the security policy holding unit 508 a security policy suitable for the current phase of the currently used device control protocol based on the determination results in steps S704 and S705. To do.

  If the device control protocol currently in use is UPnP, the security policy A or B is acquired from the security policy holding unit 508 according to the current phase, as in step S604 of FIG.

  If the device control protocol currently in use is a Web service, one of the security policies C and D is acquired from the security holding unit 508 according to the current phase.

  The security policy C is, for example, as follows. That is, the security policy C is used in the Web service discovery phase. The protocol used is SOAP (UDDI (access to a database for searching Web services)), and the type is unicast. The encryption type is IPsec, the level is “require”, and the protocol uses AH (Authentication Header). When the level is “require”, if IPsec is usable, communication is performed with IPsec, and if impossible, communication is not performed.

  The security policy D is as follows. That is, the security policy D is used in the control phase of the web service. The protocol used is SOAP (access to the control target device), and the type is unicast. The encryption type is IPsec, the level is “require”, and the protocol uses AH (Authentication Header) and ESP (Encapsulating Security Payload). When the level is “require”, if IPsec is usable, communication is performed with IPsec, and if impossible, communication is not performed.

  If the device control protocol currently in use is Jini (Java (R) intelligent network infrastructure), one of the security policies E and F is acquired from the security holding unit 508 according to the current phase.

  The security policy E is, for example, as follows. That is, the security policy E is used in the Jini discovery phase. In addition, the protocol used is RMI (Remote Method Invocation, Lookup service (access to a service in which a function provided by a device connected to a network is registered and a device having a desired function is searched)), and the type is Broadcast or unicast. The encryption type is IPsec, the level is use, and the protocol uses AH (Authentication Header) and ESP (Encapsulating Security Payload). When the level is “use”, if IPsec is usable, communication is performed with IPsec, and if impossible, communication is performed without IPsec.

  The security policy F is as follows. That is, the security policy F is used in the Jini control phase. The protocol used is RMI (access to the control target device), and the type is unicast. The encryption type is IPsec, the level is “require”, and the protocol uses AH (Authentication Header) and ESP (Encapsulating Security Payload). When the level is “require”, if IPsec is usable, communication is performed with IPsec, and if impossible, communication is not performed.

  When configured to handle a plurality of device control protocols as in this embodiment, different security levels are applied not only for each phase of the device control protocol but also for each device control protocol. For example, when a nearby controllable device is searched for by broadcast communication as in the UPnP discovery phase, a directory service such as UDDI (Universal Description Discovery and Integration, (database for searching Web services)) is used. Thus, when searching for a controllable device, the characteristics and transmission method of the transmitted / received data are different, so different security levels are applied (when searching by broadcast communication, a lower security level is applied).

  In step S 707, the security policy application unit 507 applies the security policy acquired from the security policy holding unit 508 to the device control protocol control unit 504.

  In step S708, the message transmission unit 509a transmits a message subjected to encryption according to a security policy such as IPSec or SSL to the control target device. Note that the Internet protocol (IP) is used when the message is transmitted from the message transmission unit 509a. In this case, both IPv4 and IPv6 can be used as the IP version. In addition, a medium that is actually used as a communication path can be wired or wireless. Depending on the device control protocol, a communication protocol such as TCP, UDP, HTTP, SMTP, SNMP, or FTP may be further used.

  According to the embodiment described above, in a device control apparatus capable of handling a plurality of device control protocols, appropriate security policies are set in the discovery phase and control phase of each device control protocol handled by the device control device. For example, in the security policy applied in the discovery phase of each device control protocol, the devices to be discovered are selected (only devices that match the security policy are discovered), and the security applied in the control phase. It is possible to select more devices in the policy (only devices that match the security policy can be controlled), and more secure device control can be performed.

  That is, for each of a plurality of device control protocols, the security policy of the discovery phase and the control phase is set so that the security policy of the discovery phase is lower than the security policy of the control phase (or security is not applied). This is set in the security policy holding unit 406.

  For example, when the device control application 501 requests a device list edited for each owner (step S701), the device control function providing unit 502 generates a command for discovering a device (step S702), and the generated command is displayed. It passes to the virtual protocol control unit 503. Here, it is assumed that the devices are discovered using the protocols A, B, and C sequentially. The device control function providing unit 502 notifies the virtual protocol processing unit 503 which device control protocol to use. The virtual protocol processing unit 503 first converts the command received from the device control function providing unit 502 into a command used in the protocol A (step S703), and passes it to the device control protocol control unit 504 (using the protocol A). After the device discovery process is completed, the device is discovered using the protocol B, and then the device is discovered using the protocol C).

  Here, the device control protocol used and the phase in the device control protocol used are detected. In this case, the device control protocol is protocol A (step S704), and the phase is the discovery phase. Therefore (step S705), the security policy for the discovery phase of protocol A is acquired from the security policy holding unit 508 (step S706), and the acquired security policy is applied to this communication (step S707). Command is transmitted (step S708), and a response from the device that has received the command is received.

  When the device control protocol is UPnP and the security policy A is applied in the discovery phase, when IPsec is used, communication with a device that cannot use IPsec is performed using IPsec. Communicate without using it. In this security policy A, IPsec AH (Authentication Header; authentication header for user authentication) is used.

  In this way, a device is discovered, a device list edited for each owner is created from the list of discovered devices, and returned to the device control application 501. The device control application 501 displays the device list received from the device control function providing unit 502 on the display device 306.

  Furthermore, when the device control application 501 requests acquisition of the status of a specific device included in the displayed list (step S701), the device control function providing unit 502 acquires the status of the specific device. A command is generated (step S702), and the generated command is passed to the virtual protocol processing unit 503. In addition, the device control function providing unit 502 notifies the virtual protocol processing unit 503 which device control protocol to use. Here, the device control protocol when this specific device is found is used. That is, when a device discovered using UPnP as a device control protocol is controlled, UPnP is used (in the UPnP discovery phase, SSDP is used, and in the control phase, SOAP is used). The virtual protocol processing unit 503 passes a SOAP command for acquiring the status of the specific device to the device control protocol control unit 504.

  Then, the device control protocol is determined (step S704, for example, UPnP). In this case, since it is not the discovery phase but the control phase (step S705), the security policy of the control phase of the device control protocol is set. Obtained from the security policy holding unit 508 (step S706), applies the obtained security policy to this communication (step S707), transmits a command for obtaining the status of the device (step S708), Receive status from the device.

  When the device control protocol is UPnP and the security policy B is applied in the control phase, when the specific device can use IPsec, the device communicates using IPsec, and the specific device uses IPsec. If not available, do not communicate. This security policy B uses IPsec AH (Authentication Header; authentication header for user authentication) and ESP (Encapsulating Security Payload: encryption of IP packet).

  In addition, by applying various security policies in the discovery phase of each device control protocol, it becomes possible for device control devices that match the security policy to discover each other. Each group can be formed according to the security policy of the discovery phase.

It is a figure which shows the structure of the apparatus control apparatus in a prior art. It is a figure which shows the structure of the apparatus control apparatus which concerns on embodiment of this invention. It is a figure which shows the structure of the apparatus control apparatus which can handle the some protocol for apparatus control which concerns on embodiment of this invention. It is a system block diagram at the time of implement | achieving the apparatus control apparatus which concerns on the Example of this invention using PC (personal computer). It is a figure which shows the module structure of the apparatus control apparatus which concerns on the Example of this invention. It is a figure which shows the module structure of the apparatus control apparatus which can handle the some protocol for apparatus control concerning the Example of this invention. It is a flowchart which shows the procedure of the security policy application process in the apparatus control apparatus which concerns on the Example of this invention. It is a flowchart which shows the procedure of the security policy application process in the apparatus control apparatus which can handle the some protocol for apparatus control which concerns on one Embodiment of this invention.

Explanation of symbols

205 Device Control Protocol 206 Discovery Protocol 207 Control Protocol 211 Device Control Protocol 212 Discovery Protocol 213 Control Protocol

Claims (15)

Communication means for communicating with other devices according to a predetermined protocol;
A communication apparatus comprising: an application unit that applies a security policy corresponding to a phase of communication by the communication unit to communication of the communication unit.   The communication device according to claim 1, wherein the applying unit applies a security policy corresponding to a discovery phase for discovering a device and a control phase for controlling the discovered device.   The communication unit is capable of handling a plurality of device control protocols, and the application unit is configured to provide a security policy corresponding to a combination of a device control protocol used by the communication unit and a phase in the device control protocol, The communication apparatus according to claim 1, wherein the communication apparatus is applied to communication by a communication unit. A communication step of communicating with another device according to a predetermined protocol;
A communication method comprising: applying a security policy corresponding to a communication phase in the communication step to communication in the communication step. A detection module for detecting a phase of communication performed according to a predetermined protocol;
An application module that applies a security policy corresponding to the communication phase to the communication.   The program according to claim 5, wherein the detection module detects a discovery phase for discovering a device and a control phase for controlling the discovered device.   The detection module detects a device control protocol to be used and a phase in the device control protocol to be used, and the application module detects a phase in the device control protocol to be used and the device control protocol. 6. The program according to claim 5, wherein a security policy corresponding to a combination of the above is applied to the communication. Control means for discovering the device and controlling the discovered device;
An apparatus control apparatus comprising: an application unit that applies a security policy according to whether a device is discovered or controlled by the control unit.   The control means can handle a plurality of device control protocols, and the application means discovers a device by the control means or a discovered device in accordance with a device control protocol used by the control means. The device control apparatus according to claim 8, wherein a security policy is applied according to whether to control the device. Discover the equipment,
Control the discovered equipment,
A device control method, wherein a security policy is applied depending on whether the device is in the phase of discovering the device or in the phase of controlling the discovered device. Discover the equipment,
Control the discovered equipment,
A device control program that applies a security policy according to a phase of discovering the device or a phase of controlling the discovered device.   It is possible to handle a plurality of device control protocols, and the application means applies a security policy according to the device control protocol and whether to detect the device or control the discovered device. The apparatus control program according to claim 11, wherein: Search means for searching for devices;
A communication apparatus comprising: an application unit that applies a security policy according to whether a device is searched for by broadcast communication or a device is searched using a directory service. A determination step for determining whether to search for a device by broadcast communication or to search for a device using a directory service;
A security policy application method comprising: an application step of applying a security policy to a device search according to the determination in the determination step. A determination module for determining whether to search for a device by broadcast communication or to search for a device using a directory service;
An application module that applies a security policy to device search according to the determination by the determination module.

Images