JP2023082221A - Remote operation method - Google Patents

Abstract

To provide a remote operation method capable of achieving safer remote operation.SOLUTION: A remote operation method includes recording authentication information held by a line connection apparatus on a remote operation terminal when the remote operation terminal exists within a limited communication area of the line connection apparatus. When receiving a remote operation for a remote operation target device from the remote operation terminal to be authenticated, the line connection apparatus determines whether authentication is possible depending on whether the remote operation terminal has recorded the authentication information.SELECTED DRAWING: Figure 1

Description

The present invention relates to a remote control method.

With the development of the Internet, systems and services using remote control are increasing. By remote control, it is possible to operate a remote control target device existing in a remote location using a terminal device existing in a physically remote location.

In Patent Document 1, a client terminal used by a user, a conversation operator terminal on the support side, and a technical operator terminal are provided. Accordingly, a remote control system is disclosed that can reduce malicious operations by technical operators by setting a range in which the client terminals can accept remote operations from the technical operator terminals.

JP 2016-213753 A

In a remote control system, it is common to log into the system using a user ID and password. However, with the spread of the Internet, systems and services using remote control can be used at any time and from anywhere, improving convenience, but on the other hand, countermeasures against hacking are difficult or costly. Therefore, if an attacker performs unauthorized remote control, various security problems such as unexpected behavior of the remote control target device and theft of internal data may occur.

Also, with the advancement of computer technology, it has become a well-known fact that password attacks succeed very quickly. For example, an article has been published that a 6-digit password can be cracked in less than one second. Bio-authentication is once again in the spotlight as one specific defense against password attacks. However, in terms of remote operation, not only can it be applied only to remote-operable terminal devices, but even if it is possible to ensure that the correct terminal device is used by bio-authentication and that the person who is authorized to operate it is operating it, communication It is a well-known fact that it is impossible to defend against falsification of data or man-in-the-middle attacks on the route.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a remote control method capable of realizing safer remote control.

The present application includes a plurality of means for solving the above problems. Authentication information held by the device is recorded in the remote control terminal, and when the line connection device accepts remote control of the remote control target device from the remote control terminal to be authenticated, the remote control terminal records the authentication information. Whether or not authentication is possible is determined according to whether or not the

According to the present invention, safer remote control can be realized.

It is a figure showing an example of composition of a remote control system of this embodiment. It is a figure which shows an example of a structure of a line connection apparatus. It is a figure which shows an example of a structure of a remote control terminal. It is a figure which shows an example of registration of the authentication information to a remote control terminal. FIG. 5 is a flow diagram showing a first example of registration processing of authentication information; FIG. 11 is a flowchart showing a second example of registration processing of authentication information; FIG. 10 is a diagram showing a first example of determining whether or not authentication of a remote control terminal is possible; FIG. 10 is a diagram showing a second example of whether or not authentication of a remote control terminal is possible; FIG. 10 is a flow chart of secret communication path establishment processing using a common key; FIG. 10 is a flow chart showing processing for judging approval/non-approval by a line connection device; It is a figure which shows an example of authentication conditions. FIG. 11 is a diagram showing a third example of whether or not authentication of a remote control terminal is possible; FIG. 3 is a diagram showing an example of a database for managing remote control terminals; FIG.

Embodiments of the present invention will be described below. FIG. 1 is a diagram showing an example of the configuration of a remote control system according to this embodiment. The remote control system includes a line connection device 50 and one or more control devices 30 as remote control target devices. The remote control terminal 10 is a terminal for remotely controlling the control device 30 via the line connection device 50 . The remote control terminal 10 is, for example, a communication terminal such as a smartphone, a tablet, or a personal computer carried by the user, and one or more remote control terminals 10 may exist for the line connection device 50 . The management server 100 can manage remote operations by recording a remote operation log of the remote operation terminal 10, processing details of the line connection device 50, and the like. The line connection device 50, the remote control terminal 10, and the management server 100 are connected via a communication network such as the Internet.

In the remote control system of the present embodiment, information collected by control device 30 can be transmitted to remote control terminal 10 through line connection device 50 . When the user who operates the remote control terminal 10 needs to remotely control the control device 30 , only the remote control terminal 10 permitted to perform remote control can remotely control the control device 30 .

The line connection device 50 includes, for example, routers (including not only fixed routers but also managed mobile routers), gateway devices, terminal devices, etc., which are types of terminal connection devices. The line connection device 50 may be a device having a line connection function, and may be a device (having a line connection function) that is divided and subnetted in the same network as the line connection device 50 . The location where the line connection device 50 is installed is usually managed by the line operator or the service provider. A line provider is a provider of lines (telephone lines, optical fibers, etc.) for users to connect to the Internet. Service providers include businesses that provide various services on the Internet.

The installation location of the line connection device 50 may be managed by the line operator, or may be managed by the service operator or a company to which the consumer has applied for registration. That is, the line provider or the service provider delivers the line connection device 50 to individual homes, corporate offices, factories, etc., based on a contract with a contractor such as an individual or a company. The delivered line connection device 50 is (fixedly) installed in the contractor's house, office, factory, or the like, which is an installation location managed by the line operator or service provider. The line connection device 50 is installed at the place where the address is specified. As a result, the line connection device 50 can function as a "thing" that can determine user information specified by the contract, including the user's name and address.

In this specification, the line connection device 50 means not only one line connection device 50 but also a group of line connection devices. That is, it not only includes a device group in which the line connection device 50 is divided into a plurality of devices, but also includes line connectors connected under the line connector 50, such as fixed routers, mobile routers, gateway devices, and terminal devices. shall also include Also, the line connection device 50 may be installed in a mobile object such as a vehicle and have a communication function for relaying between an in-vehicle communication network and an external communication network.

The control device 30 is connected to the line connection device 50 . The control device 30 and the line connection device 50 are ready to communicate using a private IP address or the like through direct connection, wired communication, wireless communication, or other communication techniques. The limited communication area S of the line connection device 50 is a limited communication area in the sense that the communication network 1 such as the Internet allows communication from anywhere in the world without restrictions on the communication area. It expresses something. The control device 30 controls remotely operated devices and equipment to improve manpower saving, labor saving, real-time response, or safety in all industries such as smart homes, smart factories, smart farms, and medical sites. include. The control device 30 may be, for example, a camera, a sensor, a robot, or an IoT device used in companies (offices, factories, etc.), or home electric appliances used in the home.

FIG. 2 is a diagram showing an example of the configuration of the line connection device 50. As shown in FIG. The line connection device 50 includes a line processing unit 51 , an authentication processing unit 52 , a confidential communication processing unit 53 , an authentication information recording processing unit 54 , a CPU 55 , a memory 56 and a network communication unit 57 . The authentication processing unit 52 includes an authentication information generation processing unit 521 and an authentication availability determination processing unit 522 . The confidential communication processing unit 53 includes a distributed data generation processing unit 531 and a common key generation processing unit 532 . Note that the secret communication processing unit 53 including the distributed data generation processing unit 531 and the common key generation processing unit 532 is not an essential component.

The CPU 55 controls the overall line connection device 50 by executing the application developed in the memory 56 . The line processing unit 51 executes path selection processing such as routing. The network communication unit 57 executes a function of communication with the control device 30 and a function of communication with the remote control terminal 10 and the management server 100 .

When the control device 30 and the remote control terminal 10 are mounted so as to enable direct data exchange via a network, the line connector 50 is included in the control device 30 . In this case, it is composed of one or more CPUs. Although the line connection device 50 and the control device 30 may be integrated into one device, the following description assumes that the line connection device 50 and the control device 30 are configured as separate devices. do.

The authentication processing unit 52 authenticates the remote control terminal 10 when the remote control terminal 10 remotely controls the control device 30 . Remote operation is permitted if the authentication is successful, and remote operation is not permitted if the authentication is not successful.

The authentication information recording processing unit 54 has a function as a recording processing unit, and when the remote control terminal 10 exists within the limited communication area S of the line connection device 50, the authentication information distributed to the remote control terminal 10 is recorded. can be recorded. The authentication information includes confidential information, confidential information, and information obtained by processing such information. The details of recording the authentication information will be described later.

The authentication information generation processing unit 521 generates authentication information by performing predetermined arithmetic processing on required information (for example, the unique information of the line connection device 50 or the unique information of the control device 30). can be generated. The authentication information recording processing unit 54 records the authentication information in the remote control terminal 10 under the condition that the remote control terminal 10 exists within the limited communication area S of the line connection device 50 . The authentication information to be recorded is the authentication information pre-stored in the memory 56 of the line connection device 50, the authentication information generated by the authentication information generation processing unit 521, or the authentication information acquired from the remote control terminal 10 existing within the communication area S. , information recorded in a SIM or the like that can be attached to the device, or a random number generated by each device.

The authentication approval/disapproval determination processing unit 522 has a function as a determination unit, and when a remote operation to the control device 30 is received from the remote operation terminal 10 to be authenticated, the remote operation terminal 10 uses a predetermined algorithm to determine the authentication information. It is possible to determine whether or not the authentication is possible depending on whether or not the is recorded or stored.

The confidential communication processing unit 53 can establish a confidential communication channel between the line connection device 50 and the remote control terminal 10 . Two examples of secure channels are given, but others are possible, and both can be used. The first method is a method described in Japanese Patent No. 6863514, in which secret information is used to generate a common key for encryption/decryption. A second method is to use a private IP address for communication when the line connection device 50 is operated with a private IP address without using a global IP address. First, the first method will be explained.

The distributed data generation processing unit 531 encrypts shared information shared in advance with a predetermined encryption method to generate a plurality of pieces of distributed information. Note that the remote control terminal 10 also generates a plurality of pieces of distributed information using similar functions.

The common key generation processing unit 532 generates a common key using part of the plurality of distributed information generated by the distributed data generation processing unit 531 . Note that the remote control terminal 10 also generates a common key using a similar function. Thereafter, using the common key, confidential communication between the line connection device 50 and the remote control terminal 10 can be realized. Thereby, the security of communication between the remote control terminal 10 and the line connection device 50 can be improved. Details of the first method will be described later.

A second method can use, for example, an Internet VPN (Virtual Private Network). The communication network management server (not shown) manages pairs of global IP addresses and private IP addresses of the remote control terminal 10 and the line connection device 50, which are objects of management. You can build an Internet VPN between Alternatively, the mechanism described in PCT/JP2017/006131 filed by the applicant may be used. For example, the line connection device 50 and the remote control terminal 10 exist in different IP address spaces such as indoors and outdoors, but can perform P2P communication using IP addresses managed by the communication network management server. As a result, the security of communication between the remote control terminal 10 and the line connection device 50 is improved, and the remote control terminal 10 uses the private IP address to connect to the line connection device 50 with the private IP address via the Internet. can access.

FIG. 3 is a diagram showing an example of the configuration of the remote control terminal 10. As shown in FIG. The remote control terminal 10 includes a control section 11 that controls the entire terminal, a communication section 12 , a storage section 13 , a display panel 14 , an operation section 15 , a remote control processing section 16 and a secure communication processing section 17 . The control unit 11 can be configured with a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and the like.

The communication unit 12 is composed of required communication modules and the like, and provides communication functions between the line connection device 50 and the management server 100 via the communication network 1 .

The storage unit 13 can be composed of a semiconductor memory or the like, and can store required information. The storage unit 13 stores a remote operation application (computer program) that operates on the remote operation terminal 10, and the control unit 11 can execute the remote operation application.

The display panel 14 can be composed of a liquid crystal panel, an organic EL (Electro Luminescence) display, or the like.

The operation unit 15 can be composed of, for example, a touch panel incorporated in the display panel 14 , and allows the user to perform predetermined operations on the display panel 14 . Also, the operation unit 15 can perform operations on the keyboard displayed on the display panel 14 . Note that the operation unit 15 may be a hardware keyboard, mouse, or the like.

The remote operation processing unit 16 remotely operates the control device 30 via the line connection device 50 . For example, the remote operation processing unit 16 can generate a command for the control device 30 based on an operation received by the operation unit 15 and transmit the generated command to the control device 30 via the line connection device 50. .

The confidential communication processing unit 17 has the same function as the confidential communication processing unit 53 of the line connection device 50, so the description thereof is omitted.

Next, registration (recording) of authentication information in the remote control terminal 10 will be described.

FIG. 4 is a diagram showing an example of registration of authentication information in the remote control terminal 10. As shown in FIG. In order to connect the remote control terminal 10 to the line connection device 50, the remote control terminal 10 must be placed within the limited communication area S of the line connection device 50 (for example, Wi-Fi (registered trademark), Bluetooth (registered trademark), or within a communication range such as local 5G), and in the case of Wi-Fi, it is necessary to enter the SSID (Service Set Identifier) of the line connection device 50 and the password into the remote control terminal 10. If the combination of the SSID and password is correct, the password associated with the SSID is recorded and registered in the remote control terminal 10 . This password can also be used as authentication information. If the authentication information has already been recorded, the line is automatically connected between the line connection device 50 and the remote control terminal 10 . A plurality of SSIDs can be held in the remote control terminal 10, and it is also possible to select and use one.

In the above state, the line connection device 50 generates authentication information, and the remote control terminal 10 records the generated authentication information through the line. As an example of authentication information generation, any information (a password may be included) is set to date information and time when communication was established within the limited communication area S, the serial number of the line connection device 50, GPS, CPU Information obtained as a result of calculation by a required algorithm based on information such as unique information for each CPU held by may be used as the authentication information. Also, information obtained by hash calculation from arbitrary information (which may include a password) may be used as the authentication information. Note that the method of generating the authentication information is not limited to these, and other methods (use of SIM or the like) may be used.

With the above configuration, in the communication required for remote control, the remote control terminal 10 used for remote control actually exists within the limited communication area S of the line connection device 50, or if it exists, It is guaranteed that the authentication information can only be registered in the remote control terminal 10. As described above, in the present embodiment, it is possible to restrict the authentication avoidance determination processing unit 522 of the line connection device 50 to determine whether the authentication information of the remote control terminal 10 capable of remote control is stored or recorded. Therefore, it is possible to prevent a situation in which remote control can be performed from any terminal. A remote-operable terminal (remote-operating terminal 10) must exist within the limited communication area S of the line connection device 50 at a certain timing, and must record or possess authentication information. Become. Of course, remote operation is also possible from within the communication area S, but the general method of use is operation from a remote location outside the communication area S.

A remote operation such as a remote login provided by a PC (personal computer) can be performed only with the device information of the connection destination, user ID and password. The method of remote control from anywhere via the Internet is convenient, but on the other hand, it is difficult to implement hacking countermeasures because attack points can exist everywhere, and it is expensive to improve security. However, in the present embodiment, at the stage of registering a remote control terminal for which remote control is permitted, authentication information is received from the line connection device 50 to be connected, and the area where the authentication information can be received is "limited communication." limited to area S. As a result, it is possible to prevent the authentication information from being registered while the administrator who can manage/know/limit access to the communication area S is not involved. Also, by entering the limited communication area S of the line connection device 50 installed in a managed location, the authentication information is registered (stored/recorded) in the remote control terminal 10, so that the unknown terminal can be used. It is possible to prevent registration, and as a result, distribution and maintenance of authentication tokens (USB tokens, IC cards, etc.) used in conventional methods (not only updating authentication tokens, but also subleasing and loss countermeasures for these tokens) ) becomes unnecessary, and remote control can be performed more safely.

FIG. 5 is a flowchart showing a first example of registration processing of authentication information. When the remote control terminal 10 exists within the limited communication area S of the line-connected device 50, the remote control terminal 10 receives the SSID and password of the line-connected device 50 (S1) in response to the user's operation, and receives the received SSID and password. to the line connection device 50 (S2). The line connection device 50 authenticates whether the transmitted SSID and password are correct information (S3), and if the authentication succeeds, transmits the authentication information to the remote control terminal 10 (S4). If the authentication is not successful, the process ends without sending the authentication information to the remote control terminal 10 . The remote control terminal 10 receives the authentication information and records it in the storage unit 13 (S5). As a result, the authentication information is registered in the remote control terminal 10 .

FIG. 6 is a flowchart showing a second example of registration processing of authentication information. When the remote control terminal 10 exists within the limited communication area S of the line-connected device 50, the remote control terminal 10 accepts the SSID and password of the line-connected device 50 (S11), and to the line connection device 50 (S12). The line connection device 50 authenticates whether the transmitted SSID and password are correct information (S13), and if the authentication succeeds, generates authentication information (S14). If the authentication is not successful, the process ends without generating authentication information. The line connection device 50 transmits the generated authentication information to the remote control terminal 10 (S15). The remote control terminal 10 receives the authentication information and records it in the storage unit 13 (S16). As a result, the authentication information is registered in the remote control terminal 10 .

The remote control terminal 10 may encrypt the authentication information with unique information of the remote control terminal 10 and store it in the storage unit 13 .

FIG. 7 is a diagram showing a first example of whether or not the remote control terminal 10 is authenticated. Assume that remote control terminals A and B perform communication for remote control via the communication network 1 . Authentication information is registered in the remote control terminal A by the method illustrated in FIG. 4 (authentication information is present). On the other hand, remote control terminal B has no authentication information registered (no authentication information). The line connection device 50 is operated with a global IP address, and when remote operation is received from the remote control terminal A, authentication information is registered in the remote control terminal A, so it is determined that authentication is possible. Further, when the line connection device 50 receives the remote operation from the remote control terminal B, the authentication information is not registered in the remote control terminal B, so the line connection device 50 determines that the authentication is not possible.

As described above, when the line connection device 50 receives a remote operation from the remote control terminal 10 located outside the limited communication area S, the line connection device 50 determines whether or not the remote control terminal 10 records authentication information. It is possible to determine whether or not authentication is possible. Even if the remote control terminal 10 exists within the limited communication area S, the remote control terminal 10 stores or records the authentication information, so it is possible to determine whether or not the authentication is possible.

As described above, in the present embodiment, the remote control terminals 10 that can be remotely controlled can be limited to the remote control terminals 10 whose authentication information is registered. You can prevent the situation that you can. In other words, malicious remote control attacks (for example, man-in-the-middle attacks, etc.) can be easily blocked. This is because these attackers cannot enter the limited communication area S with the remote control terminal 10 in their possession.

FIG. 8 is a diagram showing a second example of determining whether or not the remote control terminal 10 is authenticated. The difference from the first example shown in FIG. 7 is that a secret communication path 2 is established between the line connection device 50 and the remote control terminal 10. FIG. The secret communication path 2 can be opened before the remote control terminal 10 transmits the authentication request to the line connection device 50, but the secret communication path 2 may be opened at any time.

FIG. 9 is a flow chart of processing for establishing a secret communication path using a common key. Processing in the remote control terminal 10 is performed by the confidential communication processing unit 17 , and processing in the line connection device 50 is performed by the confidential communication processing unit 53 . The remote control terminal 10 stores the shared information Q in advance (S21), and the line connection device 50 also stores the shared information Q (S22). An example of the shared information Q can be information generated by a predetermined arithmetic algorithm from unique information such as the serial number, model number, date of manufacture, etc. of the line connection device 50 . As a method of sharing the shared information between the remote control terminal 10 and the line connection device 50, for example, the shared information may be recorded when the authentication information is registered in the remote control terminal 10 within the limited communication area S. . As another example of the shared information Q, the result obtained by using a predetermined algorithm from the exchanged authentication information itself within the limited communication area S may be used as the shared information Q. FIG. As a further example, information generated by a predetermined arithmetic algorithm from unique information such as the serial number, model number, date of manufacture, etc. of the remote control terminal 10 can be used. This shared information Q is exchanged within a limited communication area S.

The remote control terminal 10 transmits a key generation request to the line connection device 50 (S23). The line connection device 50 generates the random number R (S24), and transmits the generated random number R to the remote control terminal 10, thereby sharing the random number R (S25). The remote control terminal 10 uses a predetermined encryption method to generate distributed information Q1 and Q2 using the random number R as an encryption key (S26), and the line connection device 50 uses a predetermined encryption method to encrypt the random number R. Distributed information Q1 and Q2 are generated as keys (S27). The shared information Q1 and Q2 may be obtained by encrypting the shared information Q with an encryption key (random number R) and dividing (fragmenting) the encrypted data according to a predetermined division rule. Information distributed while being encrypted (distributed encrypted data and key information distributed and mixed in encrypted divided data) may also be used. Also, the number of pieces of distributed information is not limited to two, and may be three or more.

The remote control terminal 10 generates a common key from a part of the distributed information Q1 of the generated plurality of distributed information Q1, Q2 (S28), and the line connection device 50 also generates a common key from the generated plurality of distributed information Q1, Q2. A common key is generated from part of the shared information Q1 (S29). The remote control terminal 10 and the line connection device 50 establish a confidential communication path by encrypting/decrypting the communication content with the generated common key (S30). Thereby, the security of communication between the remote control terminal 10 and the line connection device 50 can be improved. At the same time, it is also important that the common key generated by the line connection device 50 and the remote control terminal 10 is the same, and the authentication has also been performed.

FIG. 10 is a flow chart showing processing for judging authorization by the line connection device 50. As shown in FIG. Since the processing in the line connection device 50 is mainly performed by the authentication processing unit 52, the authentication processing unit 52 will be described below as the main body of the processing. It is also assumed that a confidential communication path is established between the remote control terminal 10 and the line connection device 50 . The authentication processing unit 52 receives an authentication request from the remote control terminal 10 (S41). The authentication processing unit 52 determines whether or not authentication is possible based on the authentication information (S42). Specifically, it is possible to determine whether or not authentication is possible depending on whether or not authentication information is registered in the remote control terminal 10 .

The authentication processing unit 52 determines whether or not to determine whether or not to authenticate based on the authentication conditions related to the usage history of the remote control terminal 10 (S43). That is, the line connection device 50 can determine whether or not to authenticate based on the authentication conditions related to the usage history of the remote control terminal 10 . As for the method of setting the authentication conditions in the line connection device 50, for example, the user or the administrator may operate the remote control terminal 10 to set the conditions, or the administrator may set the conditions using a management terminal (not shown) used by the administrator. may The details of the authentication conditions regarding the usage history will be described later.

If it is determined not to determine whether or not to authenticate based on the authentication conditions related to the usage history (NO in S43), the authentication processing unit 52 determines that authentication is permitted because the authentication information is registered (S49), and remote operation is performed. is started (S50), and the process ends.

If it is determined to determine whether or not to authenticate based on the authentication conditions related to the usage history (YES in S43), the authentication processing unit 52 determines whether or not the time until remote operation is satisfied as the authentication conditions (S44). That is, the authentication condition can include the time from when the authentication information is registered (recorded) in the remote control terminal 10 to when the remote control terminal 10 is first remotely operated. The time until the first remote operation can be set as appropriate, for example, 1 hour, 2 hours, 6 hours, 12 hours, etc., depending on the security level required by the usage environment, or , the length of time can be adjusted according to the distance between the line connector 50 and the remote control terminal 10 . For example, if the time from when the authentication information is registered (recorded) in the remote control terminal 10 to the first remote control of the remote control terminal 10 is set to 6 hours, the first remote control of the remote control terminal 10 takes 6 hours. is exceeded, it can be determined that authentication is not possible. Also, the time until the first remote operation may be dynamically changed according to the security level of the control device 30 to be remotely operated. For example, the time until the first remote operation is set for each of the plurality of control devices 30, and the set time is set depending on which control device 30 is to be remotely operated by the remote control terminal 10. Can be used selectively.

If it is determined that the time until remote control is sufficient (YES in S44), the authentication processing unit 52 determines whether the remote control terminal 10 satisfies the presence frequency in the limited communication area S (S45). ). That is, the authentication condition may include the frequency of presence of the remote control terminal 10 within the limited communication area S. The existence frequency may be an index indicating how long or how many times the user has been in the communication area S in a predetermined period (for example, one week, one month, etc.), or an index indicating how many times An index of how many times the user has entered and exited the communication area S (frequency of entry, frequency of exit, etc.) may be used. The presence frequency can be set as appropriate, and can be, for example, seven times a week, once a month, or the like. For example, if the presence frequency in the communication area S is set to 7 times a week and the presence frequency of the remote control terminal 10 is set to 3 times a week, it can be determined that authentication is not possible. In addition, it is possible to set the presence frequency according to the level of security required by the usage environment.

When it is determined that the presence frequency in the limited communication area S is satisfied (YES in S45), the authentication processing unit 52 determines whether or not authentication conditions are selected (S46). That is, the line connection device 50 can accept selection of one authentication condition from among a plurality of authentication conditions, and determine whether or not authentication is permitted based on the selected authentication condition. The authentication condition is selected, for example, by selecting whether the aforementioned presence frequency is seven times a week or once a month. When an administrator manages a plurality of remote control terminals 10 and each remote control terminal 10 is used by a different user (for example, a family member or a person in charge of a department), the authentication conditions are set according to the user's attributes and location. can be selected.

If no authentication condition is selected (NO in S46), the authentication processing unit 52 performs the process of step S49. If authentication conditions are to be selected (YES in S46), the authentication processing unit 52 determines whether or not the selected authentication conditions are satisfied (S47). If the selected authentication condition is satisfied (YES in S47), the authentication processing unit 52 notifies the outside that there has been a remote operation (S48), and performs the process of step S49. In other words, when receiving a remote operation from the remote control terminal 10 , the line connection device 50 can notify the outside that the remote control has been received according to the authentication conditions for the remote control terminal 10 .

For example, the administrator selects such that the frequency of presence in the communication area S as an authentication condition for the remote control terminal 10 of a certain user is changed from "seven times a week" to "once a month". If the remote control terminal 10 is present in the communication area S at least once a month, the administrator's terminal device can be notified by e-mail or the like. This enables the administrator to grasp the state of remote control by the remote control terminal 10 owned by a certain user.

If the time until the remote operation is not satisfied (NO at S44) or if the frequency of presence in the limited communication area S is not satisfied (NO at S45), the authentication processing unit 52 determines that authentication is not possible (S51), End the process.

In the above example, the satisfaction of the authentication conditions is determined in steps S44 and S45, but only one of steps S44 and S45 may be performed.

FIG. 11 is a diagram showing an example of authentication conditions. Authentication conditions for each remote control terminal 10 as shown in FIG. 11 can be stored in the memory 56 of the line connection device 50 . Of the authentication conditions, the time until the first remote operation and the frequency of presence in the communication area are set by the user or administrator by operating the remote control terminal 10 or a management terminal (not shown). It can be transmitted to the connected device 50 .

As shown in FIG. 11, the remote control terminal ID=100 has authentication information, the time until the first remote control is set to 1 hour, and the presence frequency in the communication area is set to 7 times/week. By tightening the authentication conditions, it is possible to increase the security level for remote operation by the remote control terminal 10 . Remote control terminal ID=200 has authentication information, the time until the first remote control is 24 hours, and the presence frequency within the communication area is not set. By relaxing the authentication conditions slightly, the security level for remote operation by the remote control terminal 10 can be moderated. Further, the remote control terminal ID=300 has authentication information, the time until the first remote control is not set, and the presence frequency in the communication area is set to once/month. By further relaxing the authentication conditions, the security level regarding remote operation by the remote control terminal 10 can be lowered. In this way, by appropriately setting the authentication conditions, it is possible to correspond to the security level regarding the remote operation by the remote control terminal 10 . Note that the authentication conditions are not limited to the example in FIG. 11 .

As described above, the line connection device 50 can determine whether or not to authenticate the remote control terminal 10 by holding the authentication information in the memory 56 . Further, the line connection device 50 can prohibit remote operation of the remote control terminal 10 by erasing the authentication information held in the memory 56 . For example, it is conceivable to prohibit it as an emergency measure when a cyber attack occurs. If the remote operation is not performed within a predetermined time after the authentication information is registered in the remote control terminal 10, the authentication information corresponding to the remote control terminal 10 in the line connection device 50 is erased. will not be able to operate remotely. As a result, security can be strengthened by limiting the time until remote control.

The remote control application running on the remote control terminal 10 receives the authentication information from the line connection device 50 when the remote control terminal 10 exists within the limited communication area S of the line connection device 50, and performs the received authentication. Information is registered (stored) in the storage unit 13, authentication information stored in the storage unit 13 is transmitted to the line connection device 50 together with a remote operation request to the control device 30, and the line connection device 50 performs authentication based on the transmitted authentication information. If it is determined that it is possible, the controller 30 can be remotely operated via the line connection device 50 .

12A and 12B are diagrams showing a third example of whether or not the remote control terminal 10 is authenticated. The difference from the second example shown in FIG. 8 is that, in response to the authentication request from the remote control terminal 10, instead of the line connection device 50, the control device 30, which is the remote target, determines whether or not to authenticate. In this case, the control device 30 has functions similar to those of the authentication processing unit 52 .

FIG. 13 is a diagram showing an example of a database for managing the remote control terminal 10. As shown in FIG. The management server 100 can generate and update a database as shown in FIG. The database can include items such as the remote control terminal ID, the registration area of the remote control terminal 10, the date and time of registration, the date and time of the first remote control, the frequency of presence in the area, the remote control log, and the authentication status. The registration area is a limited communication area S when authentication information is registered in the remote control terminal 10 . The date and time of registration is the date and time when the authentication information was registered in the remote control terminal 10 . The date and time of the first remote operation is the date and time when the first remote operation was performed after the authentication information was registered. The in-area presence frequency represents the presence frequency of the remote control terminal 10 within the communication area S. FIG. The remote operation log includes history information of remote operations by the remote operation terminal 10 . The authentication state includes a state of being authenticated, a state of being once authenticated but requiring re-registration because the authentication conditions are no longer satisfied, and the like.

The management server 100 can record the history of communication between one or more remote control terminals 10 and the line connection device 50 in a database. This makes it possible to create and update a database as shown in FIG.

The remote control terminal 10 or an administrator's management terminal (not shown) can generate management information related to remote control for each remote control terminal based on the information recorded in the database, and display the generated management information. . Here, the management information may be all or part of the registration area of the remote control terminal 10, the date and time of registration, the date and time of the first remote control, the frequency of presence in the area, the remote control log, and the authentication status for each remote control terminal ID. can. This allows the administrator to easily grasp the states of the plurality of remote control terminals 10 .

As described above, according to the present embodiment, at the stage of registering a remote control terminal for which remote control is permitted, authentication information is received from the connection destination line connection device 50, and an area where the authentication information can be received is defined. Limited to "limited communication area S". This can prevent authentication information from being registered while the administrator is not involved. In addition, safer remote control can be realized.

In addition, when only a specific remote control terminal 10 is recognized as a remote control application, information on how often the remote control terminal 10 was in the limited communication area S can also be utilized. Safe remote control can be realized. Also, even if the remote control terminal 10 is lost or stolen, unauthorized remote control can be prevented by simply deleting the authentication information of the line connection device 50 .

In the above embodiment, the line connection device 50 and the control device 30 are configured as separate devices, but the line connection device 50 and the control device 30 may be configured as an integrated device.

According to the remote control method of the present embodiment, when a remote control terminal exists within a limited communication area of a line-connected device, authentication information possessed by the line-connected device is recorded in the remote control terminal, and When receiving a remote operation for a remote operation target device from a remote operation terminal to be authenticated, the connection device determines whether or not authentication is possible depending on whether or not the remote operation terminal records authentication information.

In the remote control method according to the present embodiment, when receiving a remote control from the remote control terminal located outside the communication area, the line connection device determines whether or not the remote control terminal records authentication information. Authentication is determined accordingly.

In the remote control method of this embodiment, the authentication information stored by the line connection device is recorded in the remote control terminal.

In the remote control method of this embodiment, the authentication information generated by the line connection device is recorded in the remote control terminal.

In the remote control method of the present embodiment, the line connection device records, in the remote control terminal, the authentication information acquired from the remote control terminal existing within the communication area.

In the remote control method of the present embodiment, the line connection device determines whether or not authentication is possible based on authentication conditions related to the usage history of the remote control terminal.

In the remote control method of this embodiment, the authentication condition includes the time from when the authentication information is recorded in the remote control terminal to the first remote control of the remote control terminal.

In the remote control method of this embodiment, the authentication condition includes the frequency of presence of the remote control terminal within the communication area.

In the remote control method of the present embodiment, the line connection device accepts selection of one authentication condition from a plurality of authentication conditions, and determines whether or not authentication is permitted based on the selected authentication condition.

In the remote operation method according to the present embodiment, when the line connection device accepts the remote operation from the remote operation terminal, the line connection device notifies the outside that the remote operation has been accepted according to the conditions for authenticating the remote operation terminal. .

In the remote control method according to the present embodiment, each of the line connection device and the remote control terminal encrypts shared information shared in advance with a predetermined encryption method to generate a plurality of distributed information, and generates a plurality of distributed information. is used to generate a common key to establish a confidential communication path between the line connection device and the remote control terminal.

In the remote control method of this embodiment, the line connection device determines whether or not the remote control terminal can be authenticated by holding authentication information, and deletes the authentication information to determine whether the remote control terminal Prohibit remote operation.

In the remote control method of the present embodiment, when the remote control target device receives a remote control from the remote control terminal via the line connection device, whether or not the remote control terminal records authentication information. Whether the authentication is possible or not is determined according to the above.

In the remote control method of this embodiment, the line connection device and the remote control terminal each communicate using a private IP address.

A remote control method according to the present embodiment records a communication history between one or more remote control terminals and the line connection device in a database, and based on the recorded communication record, remote control for each remote control terminal is performed. Generate management information about operations and display the generated management information.

A remote control system according to the present embodiment is a remote control system comprising a line-connected device and a remote control target device, wherein the line-connected device is a remote control terminal within a limited communication area of the line-connected device. a recording processing unit for recording authentication information in the remote control terminal when it exists; a determination unit that determines whether or not authentication is possible depending on whether or not the device is present.

A line-connected device according to the present embodiment includes a recording processing unit that records authentication information in the remote-control terminal when the remote-control terminal exists within a limited communication area of the line-connected device, and a remote-control device to be authenticated. a determination unit that determines whether or not authentication is possible according to whether or not the remote control terminal records authentication information when remote control of the remote control target device is received from the terminal.

A computer program according to the present embodiment is a computer program that operates on a remote control terminal, and when the remote control terminal exists in a limited communication area of a line-connected device in the computer, the line-connected device and stores the received authentication information in a storage unit, transmits the authentication information stored in the storage unit together with a remote operation request to the remote operation target device to the line connection device, and based on the transmitted authentication information If it is determined that the line connection device is authenticated, a process of performing remote control via the line connection device is executed.

1 communication network 2 secure communication path 10 remote control terminal 11 control unit 12 communication unit 13 storage unit 14 display panel 15 operation unit 16 remote control processing unit 17 secure communication processing unit 30 control device 50 line connection device 51 line processing unit 52 authentication processing Unit 521 Authentication information generation processing unit 522 Authentication propriety determination processing unit 53 Confidential communication processing unit 531 Distributed data generation processing unit 532 Common key generation processing unit 54 Authentication information recording processing unit 55 CPU
56 memory 57 network communication unit 100 management server

Claims (1)

recording authentication information possessed by the line-connected device in the remote-control terminal when the remote-control terminal exists within a limited communication area of the line-connected device;
When the line connection device receives a remote operation of the remote operation target device from the remote operation terminal to be authenticated, the line connection device determines whether or not the authentication is possible depending on whether the remote operation terminal records authentication information.
remote control method.

Images