JP2005301825A - Service providing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a service providing device capable of restricting to provide service to providers having right authorities. <P>SOLUTION: A service providing device 2 has a provision profile storage part 11 wherein a profile representing attributes of a service providing side is stored and a provision condition determination part 12 for determining whether a provision condition of a service is satisfied or not on the basis of the profile stored in the provision profile storage part 11. The provision condition determination part 12 permits the service to be provided when it is determined that the provision condition of the service is satisfied and a profile representing attributes of a service utilizing side satisfies a utilization condition of the service. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a service providing system, and more particularly to a service providing system that provides a user with a service via a network.

Conventionally, as a service provided to a user via a network, the access control information including the user's date of birth and the access request recorded on the IC card are received, and the access control information received is received. Judge whether the age of the included user satisfies the registered age condition according to the content of the requested content or the form of its provision, and only when the age of the user satisfies the registered age condition Some allow the provision of requested content (see, for example, Patent Document 1).
JP 2003-167785 A

  However, the conventional technology as described above has a problem that although the use of the service can be restricted to a user having a legitimate authority, the provision of the service cannot be restricted to the service provider.

  The present invention has been made to solve such a problem, and an object of the present invention is to provide a service providing system capable of restricting the provision of services to a provider having a legitimate authority. .

  According to the first aspect of the present invention, a service providing system includes a provision profile storage unit storing a profile representing an attribute of a service providing side, and a profile stored in the provision profile storage unit includes a service provision condition. Providing condition judging means for judging whether or not the condition is satisfied, usage profile storage means for storing a profile representing an attribute on the side of using the service, and a profile stored in the usage profile storage means determines the usage conditions for the service. Use condition determining means for determining whether or not the condition is satisfied, the providing condition determining means determines that the service providing condition is satisfied, and if the use condition determining means determines that the service using condition is satisfied, The service provision is permitted, the use condition determining means determines that the service use condition is satisfied, and the service is determined. If it is determined by the scan of providing satisfying the providing condition determination means is configured to allow use of the service.

  With this configuration, if the service user has the authority to use the service, and the service provider has the authority to provide the service, the service is started when the two are judged to be mutually authorized. It is possible to restrict the use of the service to users who have the service, and to restrict the provision of the service to a provider having a legitimate authority.

  According to the embodiment of the present invention, the service providing system includes provision condition information generating means for generating provision condition information representing a provision condition for providing a service, and use condition information representing a use condition for using the service. Use condition information generating means for generating the condition, and the determination by the provision condition determining means is performed according to whether or not the provision condition represented by the provision condition information generated by the provision condition information generating means is satisfied. The determination by the determining means is configured to be performed depending on whether or not the usage condition represented by the usage condition information generated by the usage condition information generating means is satisfied.

  With this configuration, it is determined whether or not the service using side has authority to use the service based on the policy of the service providing side, and the service providing side is determined based on the policy of the service using side. Since it is determined whether or not there is an authority to provide a service, each policy change can be flexibly handled.

  According to the embodiment of the present invention, the provision profile storage means is constituted by an IC card that stores a provider profile representing an attribute of the provider who provides the service.

  With this configuration, since the profile of the provider providing the service is stored in the tamper-resistant IC card, it is possible to prevent the provider profile from being leaked to a third party. Can be made portable.

  According to the embodiment of the present invention, the provision profile storage means is configured by an IC chip that stores a provision device profile that represents an attribute of a provision device that provides a service.

  With this configuration, since the profile of the providing device that provides the service is stored in the IC chip controlled to be tamper resistant, the leakage of the profile of the providing device to a third party can be prevented.

  According to the embodiment of the present invention, the usage profile storage means is constituted by an IC card that stores a user profile representing an attribute of a user who uses the service.

  With this configuration, since the profile of the user who uses the service is stored in the IC card controlled to be tamper-resistant, it is possible to prevent the leakage of the user profile to a third party. Can be made portable.

  According to the embodiment of the present invention, the usage profile storage means is constituted by an IC chip that stores a usage device profile that represents an attribute of a usage device that uses the service.

  With this configuration, since the profile of the device that uses the service is stored in the IC chip controlled to be tamper resistant, the leakage of the profile of the device that is used to a third party can be prevented.

  According to an embodiment of the present invention, a service providing system includes a service providing apparatus that provides a service and a service using apparatus that uses the service, and the service providing apparatus includes a provision profile storage unit and a provision condition determination unit. And the service use apparatus has use profile storage means and use condition determination means.

  With this configuration, the service using apparatus determines that the service using side has authority to use the service, and the service providing apparatus determines that the service providing apparatus determines that the service providing side has authority to provide the service. Since the service is started, use of the service can be restricted to a user having a legitimate authority, and provision of the service can be restricted to a provider having a legitimate authority.

  According to an embodiment of the present invention, a service providing system includes a service providing apparatus that provides a service and a service using apparatus that uses the service, and the service providing apparatus includes a providing profile storage unit and a use condition determining unit. And the service use apparatus has use profile storage means and provision condition judgment means.

  With this configuration, the service providing apparatus determines that the service using side has authority to use the service, and the service using apparatus determines that the service providing apparatus has authority to provide the service to the service providing side. Since the service is started, use of the service can be restricted to a user having a legitimate authority, and provision of the service can be restricted to a provider having a legitimate authority.

  The present invention can provide a service providing system capable of restricting the use of a service to a user having a legitimate authority and restricting the provision of the service to a provider having a legitimate authority.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[First Embodiment]
FIG. 1 is a block diagram showing a configuration of a service providing system 1A according to the first embodiment of the present invention.

  The service providing system 1 includes a service providing apparatus 2A that provides a service, and a service using apparatus 4A that is connected to the service providing apparatus 2A via the network 3 and uses a service provided by the service providing apparatus 2A. The service providing system of the present invention can be applied to various services, but the service providing system 1A of the present embodiment is applied to the maintenance service of the service using device 4A.

  Further, the service providing system 1A can include a plurality of service providing apparatuses 2A and a plurality of service using apparatuses 4A. However, in order to make the explanation easy to understand, it will be described below as being provided one by one.

  Note that the service providing device 2A and the service using device 4B are established by a known encryption or signature technique, etc., and are performed via a secure communication path in which leakage or tampering of communication information is prevented. ing.

  FIG. 2 is a block diagram showing a configuration of the service providing apparatus 2A.

  The service providing apparatus 2A includes a central processing unit (hereinafter simply referred to as “CPU”), a volatile storage medium such as a RAM, a non-volatile storage medium such as a ROM and a hard disk, an input such as a keyboard and a pointing device. It is comprised by the computer apparatus provided with the apparatus, the monitor apparatus which displays an image, and a speaker.

  As shown in FIG. 2, the service providing apparatus 2A includes a service providing unit 10 that provides a maintenance service, provided profile storage units 11a and 11b that store profiles representing attributes of the service providing side, and a service using device. A provision condition determining unit 12 that determines whether or not the provision condition represented in the provision condition information transmitted by 4A is satisfied, and a use condition information generating unit that generates use condition information representing a use condition for using the service 13 and a network interface 14 for communicating with a communication device including a service utilization device 4A connected to the network 3.

  Here, the provision condition information represents a provision condition for providing a service, a service ID for identifying a service, a condition for restricting a provider such as a provider ID or an age that can provide a maintenance service. In addition, a condition for limiting the service providing apparatus such as specifying the service providing apparatus, and a condition for limiting the environment such as an expiration date and time for providing the service are included.

  The provision conditions are described in XACML (eXtensible Access Control Markup Language). XACML is defined by the Organization for the Advancement of Structured Information Standards (OASIS) to control access to services on the Web, and is a policy that describes access authorization information for services. Are used for collecting parameters such as a provider ID and determining whether or not access to a service is possible based on parameters such as a policy and a provider ID.

  The use condition information represents a use condition for using the service, a service ID for identifying the service, a user ID that can use the maintenance service, a condition that restricts users such as age, A condition for limiting the service using device such as specifying the service using device and a condition for limiting the environment such as an expiration date and time when the service can be used are included. The usage conditions are described in XACML as with the provision conditions.

  The provided profile storage units 11 a and 11 b are configured by an IC card 15 owned by a service provider, that is, a serviceman, and an IC chip 16 provided in the service providing apparatus 2.

  The service providing apparatus 2 </ b> A further includes a reader / writer 17 that communicates with the IC card 15. For example, when the IC card 15 transmits / receives information by wireless communication, the reader / writer 17 transmits electromagnetic waves to the IC card 15 and wirelessly communicates with the IC card 15 driven by the transmitted electromagnetic waves. ing. Further, the reader / writer 17 has a connector for connecting to the contact of the IC card 15 when the IC card 15 has a contact for transmitting and receiving information by wire.

  The IC card 15 constituting the provided profile storage unit 11a includes a generation source ID for identifying the generation source of the profile, an owner ID for identifying the owner of the IC card 15, and the date of birth of the owner. It includes cardholder information such as nationality, and further includes signature information by the profile generator for each piece of information.

  The signature information by the profile generation source is obtained by encrypting a hash value of information obtained by combining the generation source ID, the owner ID, the card owner information, and the like with the secret key of the profile generation source.

  Further, the IC chip 16 configuring the provision profile storage unit 11b identifies a generation source ID for identifying a profile generation source, a device ID for identifying the service provision device 2A, and a manufacturer of the service provision device 2A. Manufacturer ID, model ID for identifying the model of the service providing apparatus 2A, and serial number of the service providing apparatus 2A are included, and signature information by the profile generator for each of these pieces of information is further included.

  The signature information generated by the profile generator is obtained by encrypting the hash value of information obtained by combining the generator ID, device ID, manufacturer ID, model ID, serial number, etc. with the secret key of the profile generator. It is.

  As shown in FIG. 2, the service providing apparatus 2A may further include provision right storage units 18a and 18b that store provision rights representing the right to provide services. The provision right storage units 18a and 18b are configured by the IC card 15 owned by the service person and the IC chip 16 provided in the service provision apparatus 2A, similarly to the provision profile storage units 11a and 11b.

  Here, the provision right includes a generation ID for identifying the issuer of the provision right, a provision right ID for identifying the provision right, a service ID for identifying the service, and the provision right as another IC. Distribution permission / inhibition information indicating restrictions when moving or copying to a card or IC chip is included, and signature information by the issuer of the provision right for each piece of information, that is, the administrator of the service using device 4A is further included. .

  The signature information by the administrator of the service using device 4A is encrypted with the hash value of information obtained by combining the generation source ID, the usage right ID, the service ID, the distribution availability information, etc. with the secret key of the administrator of the service using device 4A. It has been

  The provision condition determination unit 12 provides a maintenance service depending on whether the profile and environment information stored in the provision profile storage units 11a and 11b satisfy the provision condition represented in the provision condition information transmitted by the service utilization device 4A. The determination result is transmitted to the service using apparatus 4A via the network interface 14.

  When the service providing apparatus 2A includes the provision right storage units 18a and 18b, the provision condition determining unit 12 is requested to provide the provision right according to the provision conditions represented in the provision condition information transmitted by the service using apparatus 4A. When the provision right corresponding to the service provided from the provision right storage units 18a and 18b cannot be acquired, it is determined that there is no right to provide the maintenance service.

  In addition, the provision condition determination unit 12 receives a determination result as to whether or not there is an authority to use maintenance on the service use apparatus 4A side from the service use apparatus 4A via the network interface 14.

  When the provision condition determination unit 12 determines that there is an authority to provide the maintenance service and receives a determination result indicating that there is an authority to use the maintenance service from the service use device 4A, the maintenance service by the service providing unit 10 Is allowed to provide.

  On the other hand, when the provision condition determination unit 12 determines that there is no authority to provide the maintenance service or receives a determination result indicating that there is no authority to use the maintenance service from the service use device 4A, the provision of service is provided. The provision of the maintenance service by the unit 10 is not permitted.

  The use condition information generating unit 13 generates use condition information corresponding to the service to be provided based on the use condition input by the administrator of the service providing apparatus 2A through the input device, and the generated use condition information is serviced. The data is transmitted to the utilization apparatus 4A via the network interface 14. The usage condition information generation unit 13 generates usage condition information in advance, stores the generated usage condition information in a nonvolatile storage medium, and uses the usage conditions according to the service provided from the stored usage condition information. Information may be transmitted to the service using device 4A.

  Each component of the service providing unit 10, the providing profile storage units 11 a and 11 b, the providing condition determining unit 12, the use condition information generating unit 13, the network interface 14, and the reader / writer 17 that constitute the service providing apparatus 2 </ b> A described above. The interval is established by a known encryption or signature technique, and is performed via a secure communication path in which leakage or tampering of communication information is prevented.

  FIG. 3 is a block diagram showing the configuration of the service utilization device 4A.

  The service utilization device 4A includes a CPU, a volatile storage medium such as a RAM, a non-volatile storage medium such as a ROM and a hard disk, an input device such as a keyboard and a pointing device, a monitor device that displays an image, and a computer including a speaker. It is comprised by maintenance object apparatuses, such as an apparatus.

  As shown in FIG. 3, the service use device 4A includes a service use unit 20 that uses a maintenance service, a use profile storage unit 21 that stores a profile representing an attribute on the service use side, and a service providing device 2A. A use condition determining unit 22 for determining whether or not the use condition represented in the transmitted use condition information is satisfied, a providing condition information generating unit 23 for generating providing condition information, and a service providing apparatus connected to the network 3 2A, and a network interface 24 that communicates with a communication device including 2A.

  The usage profile storage units 21a and 21b are configured by an IC card 25 owned by a service user, that is, an administrator of the service usage device 4A, and an IC chip 26 provided in the service usage device 4A.

  The service using device 4A further includes a reader / writer 27 that communicates with the IC card 25. For example, when the IC card 25 transmits and receives information by wireless communication, the reader / writer 27 transmits electromagnetic waves to the IC card 25 and communicates wirelessly with the IC card 25 driven by the transmitted electromagnetic waves. ing. Further, the reader / writer 27 has a connector for connecting to the contact of the IC card 25 when the IC card has a contact for transmitting and receiving information by wire.

  The IC card 25 constituting the use profile storage unit 21a includes a generation ID for identifying the generation source of the profile, an owner ID for identifying the owner of the IC card 25, and the date of birth of the owner. It includes cardholder information such as nationality, and further includes signature information by the profile generator for each piece of information.

  The signature information by the profile generation source is obtained by encrypting a hash value of information obtained by combining the generation source ID, the owner ID, the card owner information, and the like with the secret key of the profile generation source.

  Further, the IC chip 26 constituting the usage profile storage unit 21b identifies the generation source ID for identifying the generation source of the profile, the device ID for identifying the service usage device 4A, and the manufacturer of the service usage device 4A. Manufacturer ID, model ID for identifying the model of the service using apparatus 4A, and serial number of the service using apparatus 4A are included, and signature information by the profile generator for each of these pieces of information is further included.

  The signature information generated by the profile generator is obtained by encrypting the hash value of information obtained by combining the generator ID, device ID, manufacturer ID, model ID, serial number, etc. with the secret key of the profile generator. It is.

  As shown in FIG. 3, the service utilization device 4A may further include utilization right storage units 28a and 28b for storing utilization rights representing the right to use the service. Similar to the usage profile storage units 21a and 21b, the usage right storage units 28a and 28b are configured by an IC card 25 owned by the administrator of the service usage device 4A and an IC chip 26 provided in the service usage device 4A. .

  Here, the usage right includes a generation source ID for identifying the issuer of the usage right, a usage right ID for identifying the usage right, a service ID for identifying the service, and the usage right as another IC. Distribution permission / rejection information indicating restrictions when moving or copying to a card or IC chip is included, and signature information by the issuer of the usage right for each piece of information, that is, the administrator of the service providing apparatus 2A is further included. .

  The signature information by the administrator of the service providing apparatus 2A is encrypted with the hash value of information obtained by combining the generation source ID, the usage right ID, the content ID, the distribution availability information, and the like with the secret key of the administrator of the service providing apparatus 2A. It has been

  The usage condition determination unit 22 is authorized to use the maintenance service depending on whether the profile and the environment information stored in the usage profile storage unit 21 satisfy the usage condition indicated in the usage condition information transmitted by the service providing apparatus 2A. The determination result is transmitted to the service providing apparatus 2A via the network interface 24.

  When the service use device 4A includes the use right storage units 28a and 28b, the use condition determining unit 22 is requested to use the right according to the use conditions represented in the use condition information transmitted by the service providing device 2A. When the usage right corresponding to the service to be used cannot be obtained from the usage right storage units 28a and 28b, it is determined that there is no right to use the maintenance service.

  Further, the use condition determining unit 22 receives a determination result as to whether or not the service providing apparatus 2A has an authority to provide a maintenance service from the service providing apparatus 2A via the network interface 24.

  When the use condition determining unit 22 determines that the user has authority to use the maintenance service and receives a determination result indicating that the user has authority to provide the maintenance service from the service providing apparatus 2A, the service using unit 20 performs the maintenance service. Is allowed to use.

  On the other hand, when the use condition determination unit 22 determines that there is no authority to use the maintenance service or receives a determination result indicating that there is no authority to provide maintenance from the service providing apparatus 2A, the service use unit 20 is not permitted to use the maintenance service.

  The provision condition information generation unit 23 generates provision condition information corresponding to the service to be used based on the provision condition input through the input device by the administrator of the service using device 4A, and provides the generated provision condition information to the service. The data is transmitted to the device 2A via the network interface 24. The provision condition information generation unit 23 generates provision condition information in advance, stores the generated provision condition information in a nonvolatile storage medium, and provides provision conditions according to the service to be used from the stored provision condition information Information may be transmitted to the service providing apparatus 2A.

  Between the above-described components of the service usage unit 20, the usage profile storage unit 21, the usage condition determination unit 22, the provision condition information generation unit 23, the network interface 24, and the reader / writer 27 that constitute the service usage apparatus 4A. Established with known encryption and signature techniques, etc., it is performed via a secure communication path in which leakage or tampering of communication information is prevented.

  The operation of the service providing system 1A will be described below. The operation of the service providing system 1A will be described below separately for a case where a service start request is received from the service providing apparatus 2A and a case where a service start request is received from the service using apparatus 4A.

  FIG. 4 is a flowchart showing the operation of the service providing system 1A when there is a service start request from the service providing apparatus 2A. In FIG. 4, the left side shows the operation of the service providing apparatus 2A, and the right side shows the operation of the service using apparatus 4A. In addition, the flow of information transmission / reception between the service providing apparatus 2A and the service using apparatus 4A is indicated by broken line arrows.

  First, when a service start request is input via the input device of the service providing apparatus 2A (step 101), usage condition information corresponding to the requested service is generated by the usage condition information generating unit 13 (step 102). The generated use condition information is transmitted to the service use apparatus 4A via the network interface 14 (step 103).

  When the service use apparatus 4A receives the use condition information via the network interface 24 (step 104), the use condition represented in the received use condition information is stored in the use profile storage units 21a and 21b. Whether or not the profile and the environment information are satisfied is determined by the use condition determining unit 22 (step 105).

  Next, provision condition information corresponding to the requested service is generated by the provision condition information generation unit 23 (step 106), and the generated provision condition information and the determination result by the use condition determination unit 22 are sent via the network interface 24. Is transmitted to the service providing apparatus 2A (step 107).

  When the service provision apparatus 2A receives the provision condition information and the determination result by the use condition determination unit 22 via the network interface 14 (step 108), the provision condition represented in the received provision condition information is provided as the provision profile. Whether or not the profile or environment information stored in the storage unit 11 is satisfied is determined by the provision condition determination unit 12 (step 109), and the determination result by the provision condition determination unit 12 is transmitted via the network interface 14 to the service utilization device 4A. (Step 110).

  When the determination result by the provision condition determination unit 12 is received via the network interface 24 in the service use device 4A (step 111), the received determination result by the provision condition determination unit 12 and the determination by the use condition determination unit 22 Based on the result, it is determined whether or not the service use unit 20 is permitted to use the maintenance service (step 112). If it is determined that the use of the maintenance service is permitted, the service use unit 20 uses the service. Is started (step 113), and when it is determined that the use of the maintenance service is not permitted, the service using unit 20 does not use the service.

  On the other hand, in the service providing apparatus 2A, the service providing unit 10 is permitted to provide a maintenance service based on the determination result by the use condition determining unit 22 and the determination result by the providing condition determining unit 12 received via the network interface 24. If it is determined whether or not to permit the provision of the maintenance service, it is determined that the provision of the service is started by the service providing unit 10 (step 115) and the provision of the maintenance service is not permitted. If it is determined, the service providing unit 10 does not provide the service.

  FIG. 5 is a flowchart showing the operation of the service providing system 1A when there is a service start request from the service using device 4A. In FIG. 5, the left side shows the operation of the service using device 4A, and the right side shows the operation of the service providing device 2A. In addition, the flow of information transmission / reception between the service providing apparatus 2A and the service using apparatus 4A is indicated by broken line arrows.

  First, when a service start request is input via the input device of the service utilization device 4A (step 201), provision condition information corresponding to the requested service is generated by the provision condition information generation unit 23 (step 202). The generated provision condition information is transmitted to the service providing apparatus 2A via the network interface 24 (step 203).

  When the provision condition information is received via the network interface 14 in the service provision apparatus 2A (step 204), the provision condition indicated in the received provision condition information is stored in the provision profile storage unit 11 or the profile stored in the provision profile storage unit 11 Whether the environmental information is satisfied is determined by the provision condition determination unit 12 (step 205).

  Next, usage condition information corresponding to the requested service is generated by the usage condition information generation unit 13 (step 206), and the generated usage condition information and the determination result by the provision condition determination unit 12 are sent via the network interface 14. Is transmitted to the service using apparatus 4A (step 207).

  When the service use apparatus 4A receives the use condition information and the determination result by the provision condition determining unit 12 via the network interface 24 (step 208), the use condition represented in the received use condition information is used as the use profile. Whether or not the profile and environment information stored in the storage unit 21 are satisfied is determined by the use condition determination unit 22 (step 209), and the determination result by the use condition determination unit 22 is transmitted via the network interface 24 to the service providing apparatus 2A. (Step 210).

  In the service providing apparatus 2A, when the determination result by the use condition determining unit 22 is received via the network interface 14 (step 211), the received determination result by the use condition determining unit 22 and the determination by the providing condition determining unit 12 Based on the result, it is determined whether or not the service providing unit 10 is permitted to provide the maintenance service (step 212). When it is determined that the maintenance service is permitted to be provided, the service providing unit 10 provides the service. Is started (step 213), and when it is determined that the provision of the maintenance service is not permitted, the service providing unit 10 does not provide the service.

  On the other hand, in the service utilization device 4A, the service utilization unit 20 is permitted to use the maintenance service based on the determination result by the provision condition determination unit 12 and the determination result by the utilization condition determination unit 22 received via the network interface 14. If it is determined whether or not to permit the use of the maintenance service (step 214), the use of the service is started by the service using unit 20 (step 215), and the use of the maintenance service is not permitted. If it is determined, the service using unit 20 does not use the service.

  As described above, according to the service providing system 1A, the service using apparatus 4A determines that the service using side has the authority to use the service, and the service providing side has the authority to provide the service. Since the service is started when it is determined by the service providing apparatus 2A, the use of the service can be restricted to a user having a legitimate authority, and the provision of the service can be restricted to a provider having a legitimate authority. .

[Second Embodiment]
FIG. 6 is a block diagram illustrating a configuration of a service providing system 1B according to the second embodiment of this invention.

  The service providing system 1B includes a service providing apparatus 2B that provides a service and a service using apparatus 4B that is connected to the service providing apparatus 2B via the network 3 and uses a service provided by the service providing apparatus 2B. Note that the service providing system 1B of the present embodiment is applied to the maintenance service of the service using device 4B.

  The service providing system 1B can include a plurality of service providing apparatuses 2B and a plurality of service using apparatuses 4B. In order to make the explanation easy to understand, the following description will be given assuming that one is provided.

  Note that the service providing apparatus 2B and the service using apparatus 4B are established through a known communication path established through known encryption or signature technology, and prevented from leaking or tampering with communication information. ing.

  FIG. 7 is a block diagram showing a configuration of the service providing apparatus 2B.

  In the service providing apparatus 2B according to the second embodiment of the present invention, the same components as those of the service providing apparatus 2A according to the first embodiment of the present invention are denoted by the same reference numerals. The description is omitted.

  The service providing apparatus 2B requests the service using apparatus 4B to provide the service providing unit 10, provided profile storage units 11a and 11b, a use condition information generating unit 61 that generates use condition information, and a profile for determining use conditions. A profile request unit 62 that performs the request, a use condition determination unit 63 that determines whether or not the profile transmitted by the service use device 4B satisfies the use condition in response to a request from the profile request unit 62, and a request from the service use device 4B The profile transmitting unit 64 that transmits the profiles stored in the provided profile storage units 11a and 11b to the service using apparatus 4B, the network interface 14, and the reader / writer 17 are provided.

  The use condition information generating unit 61 generates use condition information corresponding to the service to be provided based on the use condition input by the administrator of the service providing apparatus 2B through the input device. The usage condition information generation unit 61 generates usage condition information in advance, stores the generated usage condition information in a nonvolatile storage medium, and uses the usage conditions according to the service provided from the stored usage condition information. Information may be selected.

  The profile request unit 62 generates profile request information for requesting a profile or environment information that requires the use condition determination unit 63 based on the use condition information generated by the use condition information generation unit 61, and generates the generated profile request information. Is transmitted to the service using apparatus 4B via the network interface 14.

  The use condition determining unit 63 receives the profile and environment information transmitted from the service using apparatus 4B in response to the transmission of the profile request information via the network interface 14, and the received profile and environment information is used as the use condition information generating unit. The service utilization apparatus 4B determines whether or not the service utilization apparatus 4B has the authority to use the maintenance service based on whether or not the utilization condition represented in the utilization condition information generated by 61 is satisfied, and the determination result is transmitted to the service utilization apparatus 4B. Transmission is performed via the face 14.

  Further, the use condition determining unit 63 receives a determination result as to whether or not the service providing apparatus 2B has the authority to provide the maintenance service from the service using apparatus 4B via the network interface 14.

  When the service condition determining unit 63 determines that the service using device 4B has the authority to use the maintenance service and receives a determination result indicating that the service providing device 2B has the authority to provide the maintenance service from the service using device 4B. The service providing unit 10 is permitted to provide a maintenance service.

  On the other hand, the use condition determining unit 63 determines from the service using apparatus 4B that the service using apparatus 4B determines that the service using apparatus 4B is not authorized to use the maintenance service or that the service providing apparatus 2B is not authorized to provide maintenance. In such a case, the provision of the maintenance service by the service providing unit 10 is not permitted.

  The profile transmission unit 64 sends, via the network interface 14, profile request information for requesting a profile required by the service using device 4B and environment information to determine whether or not the service providing device 2B is authorized to use the maintenance service. In response to the received profile request information, the profile is acquired from the provided profile storage units 11a and 11b, the environment information is acquired from the CPU, and the acquired profile and environment information are transmitted to the service using device 4B as a network interface. 14 for transmission.

  The service providing unit 10, the provided profile storage units 11 a and 11 b, the use condition information generating unit 61, the profile requesting unit 62, the use condition determining unit 63, and the profile transmitting unit configuring the service providing apparatus 2 </ b> B described above. 64, the network interface 14, and each component of the reader / writer 17 are established by a known encryption or signature technique, etc., and are performed via a secure communication path in which leakage or tampering of communication information is prevented. It is like that.

  FIG. 8 is a block diagram showing a configuration of the service using device 4B.

  In the service utilization device 4B according to the second embodiment of the present invention, the same reference numerals are given to the same components as those of the service utilization device 4A according to the first embodiment of the present invention, The description is omitted.

  The service utilization device 4B includes a service utilization unit 20, a utilization profile storage unit 21, a provision condition information generation unit 71 that generates provision condition information, and a profile that requests the service provision device 2B for a profile for determining provision conditions. In response to a request from the request providing unit 72, a providing condition determining unit 73 that determines whether the profile transmitted by the service providing apparatus 2B satisfies the providing condition in response to a request from the profile requesting unit 72, and a request from the service providing apparatus 2B The profile transmitting unit 74 that transmits the profile stored in the usage profile storage unit 21 to the service providing apparatus 2B, the network interface 24, and the reader / writer 27 are provided.

  The provision condition information generation unit 71 generates provision condition information corresponding to the service to be used based on the provision condition input via the input device by the administrator of the service utilization device 4B. The provision condition information generation unit 71 generates provision condition information in advance, stores the generated provision condition information in a non-volatile storage medium, and provides provision conditions according to the service used from the stored provision condition information Information may be selected.

  The profile request unit 72 generates profile request information for requesting a profile or environment information that requires determination by the provision condition determination unit 73 based on the provision condition information generated by the provision condition information generation unit 71, and generates the generated profile request information. Is transmitted to the service providing apparatus 2B via the network interface 24.

  The provision condition determining unit 73 receives the profile and environment information transmitted from the service providing apparatus 2B in response to the transmission of the profile request information via the network interface 24, and the received profile and environment information is the provision condition information generating unit. The service providing apparatus 2B determines whether or not the service providing apparatus 2B has the authority to provide the maintenance service based on whether or not the providing condition represented in the providing condition information generated by the network 71 is satisfied. Transmission is performed via the face 24.

  In addition, the provision condition determination unit 73 receives a determination result as to whether or not the service use apparatus 4B has the authority to use the maintenance service from the service provision apparatus 2B via the network interface 24.

  The provision condition determination unit 73 determines that the service providing apparatus 2B has the authority to provide the maintenance service, and receives the determination result indicating that the service using apparatus 4B has the authority to use the maintenance service from the service providing apparatus 2B. The service use unit 20 permits the use of the maintenance service.

  On the other hand, the provision condition determining unit 73 determines from the service providing apparatus 2B that the service providing apparatus 2B determines that the service providing apparatus 2B is not authorized to provide the maintenance service or that the service using apparatus 4B is not authorized to use the maintenance. In such a case, the use of the maintenance service by the service using unit 20 is not permitted.

  The profile transmission unit 74 sends, via the network interface 24, profile request information for requesting a profile required by the service providing apparatus 2B and environment information in order to determine whether or not the service using apparatus 4B is authorized to provide the maintenance service. In response to the received profile request information, the profile is acquired from the usage profile storage unit 21 or the environment information is acquired from the CPU, and the network interface 24 is transmitted to the service providing apparatus 2B. To send through.

  The service utilization unit 20, the utilization profile storage unit 21, the provision condition information generation unit 71, the profile request unit 72, the provision condition determination unit 73, and the profile transmission unit 74 that constitute the service utilization apparatus 4B described above. Each component of the network interface 24 and the reader / writer 27 is established by a known encryption or signature technique, etc., and is performed via a secure communication path in which leakage or tampering of communication information is prevented. It has become.

  As shown in FIG. 7, the service providing apparatus 2B may further include provision right storage units 18a and 18b, similar to the service providing apparatus 2B according to the first embodiment of the present invention. When the service providing apparatus 2B includes the provision right storage units 18a and 18b, the profile transmission unit 64 acquires the provision right according to the service from the provision right storage units 18a and 18b together with the profile and the environment information, and uses the service. It is configured to transmit to the device 4B.

  As shown in FIG. 8, the service use device 4B may further include usage right storage units 28a and 28b, similar to the service use device 4A according to the first embodiment of the present invention. When the service use device 4B includes the use right storage units 28a and 28b, the profile transmission unit 74 obtains the use right corresponding to the service from the use right storage units 28a and 28b together with the profile and the environment information and provides the service. It is configured to transmit to the device 2B.

  Here, when the service usage apparatus 4B includes the usage right storage units 28a and 28b, the usage condition determination unit 63 uses the usage right according to the usage conditions expressed in the usage condition information generated by the usage condition information generation unit 61. When the use right corresponding to the service to be provided is not received together with the profile and the environment information, the service using apparatus 4B is determined to have no authority to use the maintenance service.

  When the service provision device 2B includes the provision right storage unit 18, the provision condition determination unit 73 is requested to provide the provision right according to the provision conditions represented in the provision condition information generated by the provision condition information generation unit 71. When the provision right corresponding to the service to be used is not received together with the profile and the environment information, the service providing apparatus 2B is determined to have no authority to provide the maintenance service.

  Below, operation | movement of the service provision system 1B is demonstrated. The operation of the service providing system 1B will be described below separately for a case where a service start request is received from the service providing apparatus 2B and a case where a service start request is received from the service using apparatus 4B.

  FIG. 9 and FIG. 10 are flowcharts showing the operation of the service providing system 1B when there is a service start request from the service providing apparatus 2B. 9 and 10, the left side shows the operation of the service providing apparatus 2B, and the right side shows the operation of the service using apparatus 4B. In addition, the flow of information transmission / reception between the service providing apparatus 2B and the service using apparatus 4B is indicated by broken line arrows.

  First, when a service start request is input via the input device of the service providing apparatus 2B (step 301), use condition information corresponding to the requested service is generated by the use condition information generating unit 61 (step 302). ).

  Next, the profile request unit 62 generates profile request information for requesting a profile or environment information that needs to be determined by the use condition determining unit 63 based on the use condition information generated by the use condition information generating unit 61 (step 303). The generated profile request information is transmitted to the service using device 4B via the network interface 14 (step 304).

  When the service requesting device 4B receives profile request information via the network interface 24 (step 305), the profile is stored in the profile from the usage profile storage unit 21 and the environment information from the CPU according to the received profile request information. Each is acquired by the transmitter 74 (step 306).

  Next, provision condition information corresponding to the requested service is generated by the provision condition information generation unit 71 (step 307), and profile or environment information that needs to be determined by the provision condition determination unit 73 based on the generated provision condition information Profile request information for requesting the user is generated by the profile request unit 72 (step 308), and the generated profile request information and the profile and environment information acquired by the profile transmission unit 74 are provided via the network interface 24. It is transmitted to the device 2B (step 309).

  In the service providing apparatus 2B, when the profile request information and the profile and environment information acquired by the profile transmission unit 74 are received via the network interface 14 (step 310), they are provided according to the received profile request information. The profile is acquired from the profile storage units 11a and 11b and the environment information is acquired from the CPU by the profile transmission unit 64 (step 311).

  Next, whether or not the service use device 4B has the authority to use the maintenance service depending on whether or not the received profile or environment information satisfies the use condition represented by the use condition information generated by the use condition information generating unit 61. The use condition determination unit 63 determines whether or not (Step 312), and the determination result by the use condition determination unit 63 and the profile and environment information acquired by the profile transmission unit 64 are transmitted via the network interface 14 to the service use device 4B. (Step 313).

  In the service using device 4B, when the determination result, the profile, and the environment information by the use condition determining unit 63 are received via the network interface 24 (step 314), the received profile and environment information are provided as the provision condition information generating unit. Whether or not the service providing apparatus 2B has the authority to provide the maintenance service is determined by the providing condition determining unit 73 depending on whether or not the providing condition represented in the providing condition information generated by 71 is satisfied (step 315). The determination result by the providing condition determining unit 73 is transmitted to the service providing apparatus 2B via the network interface 24 (step 316).

  In the service providing apparatus 2B, when the determination result by the provision condition determination unit 73 is received via the network interface 14 (step 317), the received determination result by the provision condition determination unit 73 and the determination by the use condition determination unit 63 Based on the result, it is determined whether or not to allow the service providing unit 10 to provide the maintenance service (step 318). When it is determined to permit the provision of the maintenance service, the service providing unit 10 provides the service. Is started (step 319), and when it is determined that the provision of the maintenance service is not permitted, the service providing unit 10 does not provide the service.

  On the other hand, in the service utilization device 4B, the service utilization unit 20 is permitted to use the maintenance service based on the determination result by the utilization condition determination unit 63 and the determination result by the provision condition determination unit 73 received via the network interface 24. If it is determined whether or not to permit the use of the maintenance service, it is determined that the use of the service is started by the service using unit 20 (step 321) and the use of the maintenance service is not permitted. If it is determined, the service using unit 20 does not use the service.

  FIG. 11 and FIG. 12 are flowcharts showing the operation of the service providing system 1B when there is a service start request from the service using device 4B. In FIGS. 11 and 12, the left side shows the operation of the service using device 4B, and the right side shows the operation of the service providing device 2B. In addition, the flow of information transmission / reception between the service providing apparatus 2B and the service using apparatus 4B is indicated by broken line arrows.

  First, when a service start request is input via the input device of the service utilization device 4B (step 401), provision condition information corresponding to the requested service is generated by the provision condition information generation unit 71 (step 402). ).

  Next, profile request information for requesting a profile or environment information that requires determination by the provision condition determination unit 73 based on the provision condition information generated by the provision condition information generation unit 71 is generated by the profile request unit 72 (step 403). The generated profile request information is transmitted to the service providing apparatus 2B via the network interface 24 (step 404).

  In the service providing apparatus 2B, when profile request information is received via the network interface 14 (step 405), profiles are provided from the provided profile storage units 11a and 11b and environment information from the CPU according to the received profile request information. Are acquired by the profile transmitter 64 (step 406).

  Next, usage condition information corresponding to the requested service is generated by the usage condition information generation unit 61 (step 407), and profile and environment information that needs to be determined by the usage condition determination unit 63 based on the generated usage condition information. The profile request information requesting the request is generated by the profile request unit 62 (step 408), and the generated profile request information and the profile and environment information acquired by the profile transmission unit 64 are used via the network interface 14. It is transmitted to the device 4B (step 409).

  When the service requesting device 4B receives the profile request information and the profile and environment information acquired by the profile transmitting unit 64 via the network interface 24 (step 410), the service using device 4B uses them according to the received profile request information. The profile is acquired from the profile storage unit 21 and the environment information is acquired from the CPU by the profile transmission unit 74 (step 411).

  Next, whether or not the service providing apparatus 2B has the authority to provide the maintenance service depending on whether or not the received profile or environment information satisfies the provision condition represented by the provision condition information generated by the provision condition information generating unit 71. The provision condition determining unit 73 determines whether or not (Step 412), and the result of the determination by the providing condition determining unit 73 and the profile and environment information acquired by the profile transmitting unit 74 are connected via the network interface 24 to the service providing apparatus 2B. (Step 413).

  In the service providing apparatus 2B, when the determination result by the providing condition determining unit 73, the profile, and the environment information are received via the network interface 14 (step 414), the received profile and environment information are used as the use condition information generating unit. Whether or not the service using device 4B has the authority to use the maintenance service is determined by the use condition determining unit 63 based on whether or not the use condition represented in the use condition information generated by 61 is satisfied (step 415). The determination result by the use condition determining unit 63 is transmitted to the service using device 4B via the network interface 14 (step 416).

  When the service use apparatus 4B receives the determination result by the use condition determining unit 63 via the network interface 24 (step 417), the received determination result by the use condition determining unit 63 and the determination by the providing condition determining unit 73 are received. Based on the result, it is determined whether or not the service using device 4B is permitted to use the maintenance service (step 418). If it is determined that the use of the maintenance service is permitted, the service using unit 20 uses the service. Is started (step 419), and if it is determined that the use of the maintenance service is not permitted, the service using unit 20 does not use the service.

  On the other hand, in the service providing apparatus 2B, the service providing unit 10 is permitted to provide a maintenance service based on the determination result by the providing condition determining unit 73 and the determination result by the use condition determining unit 63 received via the network interface 14. If it is determined whether or not to permit the provision of the maintenance service, it is determined that the provision of the service is started by the service providing unit 10 (step 421) and the provision of the maintenance service is not permitted. If determined, provision by the service providing unit 10 is not performed.

  As described above, according to the service providing system 1B, the service providing apparatus 2B determines that the service using side has the authority to use the service, and the service providing side has the authority to provide the service. Since the service is started when it is determined by the service using device 4B, the use of the service can be restricted to a user having a legitimate authority, and the provision of the service can be restricted to a provider having a legitimate authority. .

  The service providing apparatus and the service using apparatus of the present invention record a program for realizing the function in a computer-readable recording medium in addition to those realized by dedicated hardware, and record the program on the recording medium. The recorded program may be read into a computer system and executed. The computer-readable recording medium refers to a recording medium such as a floppy disk, a magneto-optical disk, a CD-ROM, or a storage device such as a hard disk device built in the computer system. Furthermore, a computer-readable recording medium is a server that dynamically holds a program (transmission medium or transmission wave) for a short period of time, as in the case of transmitting a program via the Internet, and a server in that case. Some of them hold programs for a certain period of time, such as volatile memory inside computer systems.

It is a block diagram which shows the structure of the service provision system of the 1st Embodiment of this invention. It is a block diagram which shows the structure of the service provision apparatus which comprises the service provision system of the 1st Embodiment of this invention. It is a block diagram which shows the structure of the service utilization apparatus which comprises the service provision system of the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the service provision system of the 1st Embodiment of this invention when the service start request | requirement has been received from the service provision apparatus. It is a flowchart which shows operation | movement of the service provision system of the 1st Embodiment of this invention when there is a service start request from a service utilization apparatus. It is a block diagram which shows the structure of the service provision system of the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the service provision apparatus which comprises the service provision system of the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the service utilization apparatus which comprises the service provision system of the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the service provision system of the 2nd Embodiment of this invention when there is a service start request from a service provision apparatus. It is a flowchart following the flowchart shown in FIG. It is a flowchart which shows operation | movement of the service provision system of the 2nd Embodiment of this invention when there is a service start request from a service utilization apparatus. It is a flowchart following the flowchart shown in FIG.

Explanation of symbols

1A, 1B service providing system 2A, 2B service providing device 3 network 4A, 4B service using device 10 service providing unit 11a, 11b providing profile storage unit 12, 73 providing condition determining unit 13, 61 using condition information generating unit 14, 24 network Interface 15, 25 IC card 16, 26 IC chip 17, 27 Reader / writer 18a, 18b Provision right storage unit 20 Service use unit 21a, 21b Use profile storage unit 22, 63 Use condition determination unit 23, 71 Provision condition information generation unit 28a, 28b Usage right storage unit 62, 72 Profile request unit 64, 74 Profile transmission unit

Claims (8)

Provision profile storage means in which a profile representing an attribute of a service providing side is stored;
Providing condition determining means for determining whether or not a profile stored in the providing profile storage means satisfies a providing condition for the service;
Usage profile storage means in which a profile representing an attribute of a side using the service is stored;
Usage condition determination means for determining whether or not the profile stored in the usage profile storage means satisfies the usage condition of the service;
With
The providing condition determining means determines that the service providing condition is satisfied, and when the use condition determining means determines that the use condition of the service is satisfied, permits the provision of the service;
A service providing system for permitting use of the service when the use condition determining unit determines that the use condition of the service is satisfied and the providing condition determining unit determines that the service providing condition is satisfied. Providing condition information generating means for generating providing condition information representing a providing condition for providing the service;
Use condition information generating means for generating use condition information representing a use condition for using the service;
With
The determination by the provision condition determination unit is performed according to whether the provision condition represented by the provision condition information generated by the provision condition information generation unit is satisfied,
The service providing system according to claim 1, wherein the determination by the use condition determination unit is performed based on whether or not a use condition represented by the use condition information generated by the use condition information generation unit is satisfied.   The service providing system according to claim 1, wherein the provision profile storage unit is configured by an IC card that stores a provider profile representing an attribute of a provider who provides the service.   4. The service providing system according to claim 1, wherein the provided profile storage unit is configured by an IC chip that stores a provided device profile that represents an attribute of a provided device that provides the service. 5.   5. The service providing system according to claim 1, wherein the usage profile storage unit is configured by an IC card that stores a user profile representing an attribute of a user who uses the service.   The service providing system according to claim 1, wherein the usage profile storage unit is configured by an IC chip that stores a usage device profile that represents an attribute of a usage device that uses the service. A service providing device for providing the service;
A service using device that uses the service;
With
The service providing apparatus includes the provision profile storage unit and the provision condition determination unit;
The service providing system according to claim 1, wherein the service using device includes the use profile storage unit and the use condition determining unit. A service providing device for providing the service;
A service using device that uses the service;
With
The service providing apparatus includes the provision profile storage unit and the use condition determination unit;
The service provision system according to any one of claims 1 to 6, wherein the service utilization apparatus includes the utilization profile storage unit and the provision condition determination unit.

Images