JP6956343B2 - Sensing device and information processing method - Google Patents

Description

The present disclosure relates to sensing devices, sensing systems and information processing methods.

Traditionally, a traceability system has been operated as a mechanism for ensuring the reliability of measurement results used in transactions. For example, Japanese Patent Application Laid-Open No. 2009-230174 (Patent Document 1) provides inspection measuring instruments and calibrations having inspection standards for measurement traceability that enables remote calibration or carry-on calibration to a calibration company and a national measurement standard organization. By combining with a certificate search system, the calibration certificate is searched sequentially up the hierarchy via the Internet, the chain leading to the national measurement standard is confirmed, and the configuration that promptly guarantees or proves the reliability of the inspection result is disclosed. do.

Japanese Unexamined Patent Publication No. 2009-23174

The traceability system as described above is only applied to some measuring instruments that require reliability assurance in terms of commercial transactions and various regulations, and a similar mechanism is applied to general-purpose or general measuring instruments. Difficult to apply.

One of the purposes of the present disclosure is to provide a scheme that can guarantee the sensing performance of the sensing device that has acquired the sensing result as a solution to such a problem.

A sensing device according to a certain form of the present disclosure includes a sensing module that acquires information from an object, a storage unit that holds performance guarantee information indicating the guaranteed sensing performance of the sensing device, and a sensing result acquired by the sensing module. Includes an output unit that outputs at least a part of the performance guarantee information.

The output unit may add an electronic signature to at least a part of the sensing result and the performance guarantee information.

The performance guarantee information is determined based on the inspection result regarding the sensing performance and the sensing function of the sensing device, and may be stored in the storage unit with an electronic signature added.

The performance guarantee information may include at least one of the identification information of the sensing device, the performance information of the sensing device, the calibration information of the sensing device, and the expiration date.

In a sensing system according to another form of the present disclosure, performance guarantee information indicating the guaranteed sensing performance of the sensing device is determined based on the sensing device and the inspection result regarding the sensing performance and the sensing function for the sensing device, and the performance is determined. It includes means for adding an electronic signature to the warranty information and storing it in the sensing device. The sensing device includes a sensing module that acquires information from the target, a storage unit that holds performance guarantee information, and an output unit that adds at least a part of the performance guarantee information to the sensing result acquired by the sensing module and outputs it. including.

The information processing method according to still another form of the present disclosure includes a step of determining performance guarantee information indicating the guaranteed sensing performance of the sensing device and performance guarantee information based on the inspection result regarding the sensing performance and the sensing function of the sensing device. A step of adding an electronic signature to the device and storing it in the sensing device, a step of acquiring information from the target using the sensing module of the sensing device, and at least a part of the performance guarantee information in the sensing result acquired by the sensing module. Includes steps to add and output.

According to the present disclosure, it is possible to guarantee the sensing performance of the sensing device that has acquired the sensing result.

It is a schematic diagram for demonstrating the outline of the sensing system according to this Embodiment. It is a block diagram which shows the hardware configuration example of the sensing device which comprises the sensing system according to this embodiment. It is a schematic diagram which shows an example of the data structure of the electronically signed document stored in the sensing device which constitutes the sensing system according to this embodiment. It is a schematic diagram which shows an example of the data structure of the self-signed certificate stored in the sensing device which constitutes the sensing system according to this embodiment. It is a flowchart which shows the processing procedure which concerns on the storage of the electronic signature document in the sensing device in the manufacturing body of the sensing system according to this Embodiment. It is a flowchart which shows the processing procedure which concerns on the output of the electronically signed result data by the sensing device of the sensing system according to this embodiment. It is a schematic diagram which shows an example of the data structure of the electronically signed result data generated by the sensing device which constitutes the sensing system according to this embodiment. It is a schematic diagram which shows an example of the data structure of the self-signed certificate generated by the sensing device constituting the sensing system according to this embodiment. It is a schematic diagram which shows the display example of the sensing device according to this embodiment. It is a schematic diagram which shows the configuration example of the network system which consists of the sensing device which follows this embodiment. It is a schematic diagram which shows the example of the unified management of the sensing result by the sensing device according to this embodiment.

The embodiments according to the present disclosure will be described in detail with reference to the drawings. The same or corresponding parts in the drawings are designated by the same reference numerals and the description thereof will not be repeated.

<A. Overview of Sensing System 1>
The outline of the sensing system 1 according to the present embodiment will be described.

FIG. 1 is a schematic diagram for explaining an outline of the sensing system 1 according to the present embodiment. With reference to FIG. 1, in the sensing system 1, basically, a manufacturing entity 10 of the sensing device 100 and a user entity 20 using the sensing device 100 are assumed.

As used herein, the term "sensing device" is a term that includes devices and devices capable of acquiring arbitrary information from any object. Typically, the "sensing device" includes a measuring instrument or the like that can measure a physical quantity, an industrial quantity, or the like from an object by using an arbitrary sensor or the like. Alternatively, the "sensing device" may include devices and devices that simply record audio, light, and the like. In the following description, as a typical example, a case where the “sensing device” is a measuring instrument will be described.

In the present specification, "manufacturing entity" is basically a term that includes an organization (company, group, etc.) and an individual who manufactures or repairs a sensing device. The "manufacturing subject" is a subject whose sensing performance of the sensing device is planned to be guaranteed. Therefore, the "manufacturer" also includes organizations and individuals who calibrate sensing devices.

In the present specification, "user entity" is a term that includes an organization (company, group, etc.) and an individual who obtains sensing results from an arbitrary object by using a sensing device. For example, the "user" may be an end user of a sensing device, or an organization or an individual who provides various measurement services using the sensing device. If the sensing device is a medical measuring instrument, the "user" may be a medical institution. The "user entity" is not limited to the above-mentioned organization or individual, but includes any entity that can use the sensing device.

In the sensing system 1 shown in FIG. 1, the manufacturing entity 10 manufactures a specific sensing device 100. Then, the manufacturing main body 10 calibrates the manufactured sensing device 100 and sets a price for the sensing result. That is, the manufacturing entity 10 performs the processing necessary for guaranteeing the sensing performance of the manufactured sensing device 100.

Finally, the manufacturing entity 10 generates an electronically signed document 150 for the manufactured sensing device 100 and stores it in the sensing device 100.

The production entity 10 has a key pair 12 including a private key 13 (private key) and a public key 14 (public key), and uses the key pair 12 to generate an electronically signed document 150.

The electronically signed document 150 about the sensing device 100 includes performance assurance information 152 indicating the guaranteed sensing performance and related information of the target sensing device 100, and electronic certificate 156. The electronically signed document 150 includes an electronic signature 154 (not shown) for ensuring that the performance assurance information 152 is legitimate. Details of the electronically signed document 150 will be described later.

For convenience of explanation, the performance guarantee information 152 and the digital certificate 156 are drawn as independent data, but these may be separate files or a single file.

The sensing device 100 (including the electronically signed document 150) manufactured by the production entity 10 is used by any user entity 20.

The user subject 20 acquires the sensing result 162 from an arbitrary user by using, for example, the sensing device 100. The sensing device 100 adds an electronic signature 164 (not shown) and an electronic certificate 166 to ensure that the sensing result 162 is valid in addition to the sensing result 162. The electronically signed result data 160 Is output.

The sensing device 100 has a key pair 122 including a private key 123 and a public key 124, and uses the key pair 122 to generate an electronically signed document 150.

For convenience of explanation, the sensing result 162 and the digital certificate 166 are drawn as independent data, but these may be separate files or a single file.

The digitally signed result data 160 (sensing result 162 and digital certificate 166) may be stored in an arbitrary database 30.

As described above, in the sensing system 1 according to the present embodiment, the sensing performance of the sensing device 100 can be guaranteed by the electronically signed document 150 attached to the sensing device 100, and the sensing result 162 output from the sensing device 100 can be obtained. The attached electronic certificate 166 can guarantee the reliability of the sensing result 162 and the source of the sensing result 162.

By a mechanism using such an electronically signed document, it is possible to guarantee the sensing performance and authenticity from the manufacturing entity 10 of the sensing device 100 to the sensing result 162.

<B. Hardware configuration example of sensing device 100>
Next, a hardware configuration example of the sensing device 100 constituting the sensing system 1 according to the present embodiment will be described.

FIG. 2 is a block diagram showing a hardware configuration example of the sensing device 100 constituting the sensing system 1 according to the present embodiment. With reference to FIG. 2, the sensing device 100 includes a processor 102, a main memory 104, a sensing module 106, a communication interface 108, a storage 110, a secure storage 120, an input unit 130, a display unit 132, and the like. Includes output unit 134.

The processor 102 is composed of, for example, a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), or the like. A plurality of processors 102 may be arranged, or a processor 102 having a plurality of cores may be adopted.

The main memory 104 provides an area for deploying a program or the like executed by the processor 102. The main memory 104 is typically composed of a volatile storage device such as a DRAM (Dynamic Random Access Memory) or a SRAM (Static Random Access Memory).

The sensing module 106 is a main part for the sensing device 100 to realize the sensing performance, and acquires information from the target. The sensing module 106 is composed of, for example, various sensors, measurement mechanisms, and control circuits that control and drive them.

The communication interface 108 is in charge of exchanging data between the sensing device 100 and the external device. The communication interface 108 may be, for example, a wired communication device including a wired connection terminal such as an Ethernet® port, a USB (Universal Serial Bus) port, a serial port such as IEEE 1394, or a legacy parallel port. Alternatively, the communication interface 108 is a wireless LAN or LTE (Long Term Evol).
It may be a wireless communication device such as ution).

The storage 110 is a storage unit that holds a program executed by the processor 102 and necessary data. The storage 110 is typically composed of a non-volatile storage device such as a hard disk, an SSD (Solid State Drive), and a flash memory.

For example, the sensing program 112, the result output program 114, and the setting information 116 are stored in the storage 110.

The sensing program 112 includes a group of instructions for performing sensing using the sensing module 106. The result output program 114 includes a group of instructions for performing processing for externally outputting the sensing result acquired by sensing using the sensing module 106. The setting information 116 includes calibration values and setting values necessary for the sensing device 100 to perform a predetermined operation.

Among the programs such as the sensing program 112 and the result output program 114 stored in the storage 110, the computer-readable instructions included in the specified program are expanded on the main memory 104, and the processor 102 expands them. By executing it sequentially, various functions as described later are realized.

The secure storage 120 is a storage unit that holds information necessary for realizing a mechanism using the electronically signed document as described above. Like the storage 110, the secure storage 120 may be composed of a non-volatile storage device such as a hard disk, an SSD, or a flash memory. In this case, a known access control function may be added to prevent modification of the stored data. Further, it may be configured by using a security chip such as TPM (Trusted Platform Module).

Further, necessary information may be retained by using an RFID (Radio Frequency IDentifier) tag or the like.

The secure storage 120 stores, for example, an electronic certificate 166, a key pair 122 including a private key 123 and a public key 124, and identification information 126. The digital certificate 166 is issued by any issuer (typically a certificate authority). The key pair 122 is used for a process in which the sensing device 100 generates electronically signed result data 160. The identification information 126 includes information for identifying the sensing device 100 (for example, a serial number, a serial number, and the like).

The input unit 130 receives a user operation or the like for the sensing device 100. The input unit 130 may be, for example, an operation button, an operation key, a keyboard, a mouse, a touch panel, or the like.

The display unit 132 displays the processing result of the processor 102 and the like. The display unit 132 may be, for example, an LCD (Liquid Crystal Display), an organic EL (Electro-Luminescence) display, or the like.

The output unit 134 externally outputs the electronically signed result data 160 (sensing result 162 and digital certificate 166). The output unit 134 can read / write data to, for example, a memory card interface that can read / write data to an SD card, a reader / writer interface that can read / write data to an RFID tag, and an arbitrary storage medium. It may be any of the interfaces.

FIG. 2 shows, as an example, a configuration example in which the processor 102 realizes a necessary function by executing a program, but an ASIC in which a circuit corresponding to a computer-readable instruction is incorporated in all or a part of the function. It may be realized by using a hard-wired circuit such as (Application Specific Integrated Circuit). Further, it may be realized by using a circuit corresponding to a computer-readable instruction on FPGA (field-programmable gate array).
Further, the processor 102, the main memory 104, the ASIC, the FPGA, and the like may be combined as appropriate. As described above, the sensing device 100 may appropriately realize the functions described later by using the processor 102 and / or the processing circuits including the hard-wired circuits such as ASIC and FPGA.

<C. Electronically signed document 150 generated by the creator 10>
Next, the electronically signed document 150 generated by the production entity 10 will be described in detail. The manufacturing entity 10 stores the performance guarantee information 152 for guaranteeing the sensing performance of the manufactured sensing device 100 in the sensing device 100 and ships it to the user entity 20.

FIG. 3 is a schematic diagram showing an example of the data structure of the electronically signed document 150 stored in the sensing device 100 constituting the sensing system 1 according to the present embodiment. With reference to FIG. 3, the electronically signed document 150 includes, as an example, performance assurance information 152, an electronic signature 154, and an electronic certificate 156.

The performance guarantee information 152 includes the guaranteed sensing performance of the target sensing device 100 and related information. The performance guarantee information 152 is stored in the secure storage 120 of the sensing device 100. As an example, the performance guarantee information 152 includes the identification information 1521 of the sensing device 100, the performance information 1522 of the sensing device 100, the calibration information 1523 of the sensing device 100, and the validity period 1524.

The identification information 1521 of the sensing device 100 includes information such as the serial number and model of the sensing device 100. The performance information 1522 of the sensing device 100 includes information such as the sensing range and the sensing accuracy of the sensing device 100. The calibration information 1523 of the sensing device 100 includes calibration information, correction information, and the like for correcting the sensing data of the sensing device 100 and outputting it as a sensing result. The validity period 1524 indicates the expiration date of the information described in the performance guarantee information 152 and the like. For example, for the sensing device 100 whose calibration cycle is set to 5 years, 5 years may be set as the valid period 1524.

The electronic signature 154 is information for guaranteeing that the performance guarantee information 152 is legitimate, and is added for the purpose of preventing forgery or falsification. The electronic signature 154 is generated by encrypting the hash value calculated from the performance guarantee information 152 with the private key 13 of the production entity 10. A known algorithm can be used for the generation of the electronic signature 154.

The electronic certificate 156 authenticates the public key 14 of the production entity 10 used for verification by the electronic signature 154, and is generated by an issuer such as a certificate authority (CA). The certification authority may be operated by a certified organization or may be operated by the production entity 10.

As an example, the electronic certificate 156 includes the identification information 1561 of the production entity 10, the public key 1562 of the production entity 10, the identification information 1563 of the issuer, and the electronic signature 1564.

The identification information 1561 of the production entity 10 includes information such as the company name and contact information of the production entity 10. The public key 1562 of the production entity 10 includes information indicating the public key 14 of the production entity 10. The issuer identification information 1563 includes information for identifying the subject who issued the digital certificate 156. The electronic signature 1564 is information for guaranteeing that the digital certificate 156 is legitimate, and is added for the purpose of preventing forgery or falsification. The digital signature 1564 is generated by encrypting the hash value calculated from the information contained in the digital certificate 156 with the issuer's private key. A known algorithm can be used for generating the electronic signature 1564.

The data structure shown in FIG. 3 is an example, and any data structure may be adopted as long as it includes data corresponding to the performance guarantee information 152, the electronic signature 154, and the digital certificate 156. The stored information may be stored in a key-value type in which a value to be stored and a corresponding indicator (key) are associated with each other. By storing information in a key-value type, it is possible to facilitate the implementation of processing related to the utilization of information.

Further, the information included in the performance guarantee information 152, the electronic signature 154, and the digital certificate 156 is not limited to the example shown in FIG. 3, and may be added or deleted as appropriate. That is, the performance guarantee information 152 may include at least a part of the items listed in FIG.

The production entity 10 itself may issue an electronic certificate instead of the certificate authority (CA). Such digital certificates are also called self-signed certificates. In this case, the electronic signature 1564 included in the digital certificate 156 is generated by encrypting the hash value calculated from the information included in the digital certificate 156 with the private key 13 of the production entity 10.

Further, when the production entity 10 itself issues the digital certificate, the information itself included in the performance guarantee information 152 may be included in the digital certificate. As a result, the addition of the electronic signature 154 can be omitted.

FIG. 4 is a schematic diagram showing an example of the data structure of the self-signed certificate 158 stored in the sensing device 100 constituting the sensing system 1 according to the present embodiment. With reference to FIG. 4, the self-signed certificate 158, which is an electronic certificate, includes the identification information 1561 of the production entity 10, the public key 1562 of the production entity 10, the performance guarantee information 152, and the electronic signature 1584.

Since the identification information 1561, the public key 1562, and the performance guarantee information 152 are substantially the same as the corresponding information shown in FIG. 3 above, detailed description thereof will not be repeated.

The electronic signature 1584 is information for guaranteeing that the content of the self-signed certificate 158 is legitimate, and is added for the purpose of preventing forgery or falsification. The electronic signature 1584 is generated by encrypting a hash value calculated from information including identification information 1561, public key 1562, and performance guarantee information 152 with the private key 13 of the production entity 10. A known algorithm can be used to generate the electronic signature 1584.

By using such a self-signed certificate 158, the digital certificate can be used with a relatively simple mechanism without using a certificate authority or the like.

<D. Storage of Electronically Signed Document 150 in Sensing Device 100>
Next, the processing procedure for storing the electronically signed document 150 in the sensing device 100 in the manufacturing entity 10 will be described.

FIG. 5 is a flowchart showing a processing procedure for storing the electronically signed document 150 in the sensing device 100 in the manufacturing entity 10 of the sensing system 1 according to the present embodiment.

With reference to FIG. 5, the manufacturing entity 10 manufactures the sensing device 100 (step S100). The manufacturing entity 10 carries out various inspections related to the sensing performance and the sensing function of the manufactured sensing device 100, and determines the setting information 116 including the necessary information (step S102). Then, the manufacturing entity 10 stores the determined setting information 116 in the sensing device 100 (step S104).

Further, the manufacturing entity 10 generates the performance guarantee information 152 based on the various inspections performed and the determined setting information 116 and the like (step S106). The production entity 10 generates an electronic signature 154 based on the generated performance guarantee information 152 (step S108), and generates an electronically signed document 150 including the performance guarantee information 152, the electronic signature 154, and the electronic certificate 156 (step S108). S110).

It is assumed that the digital certificate 156 is issued in advance by an arbitrary issuer based on the public key 14 of the production entity 10. However, the digital certificate 156 may be issued each time the digitally signed document 150 is generated. The production entity 10 stores the generated electronically signed document 150 in the sensing device 100 (step S112).

In this way, the manufacturing entity 10 determines the performance guarantee information 152 indicating the guaranteed sensing performance of the sensing device 100 based on the inspection result regarding the sensing performance and the sensing function of the sensing device 100. Then, the manufacturing entity 10 adds an electronic signature to the performance guarantee information 152 and stores it in the sensing device 100.

Further, the manufacturing entity 10 also stores the key pair 122 including the private key 123 and the public key 124 and the identification information 126 including the serial number, the serial number, and the like in the sensing device 100 (step S114).

The production entity 10 may save the records of the electronically signed document 150, the public key 124, and the identification information 126 stored in the sensing device 100 for post-maintenance or the like.

Then, the sensing device 100 in which the necessary information is stored is shipped.
As described above, the performance guarantee information 152 is determined based on the inspection result regarding the sensing performance and the sensing function for the sensing device 100. Further, the performance guarantee information 152 is stored in the secure storage 120 (storage unit) of the sensing device 100 with the electronic signature 154 added. That is, the manufacturing entity 10 determines the performance guarantee information 152 indicating the guaranteed sensing performance of the sensing device 100 based on the inspection result regarding the sensing performance and the sensing function of the sensing device 100, and electronically converts the performance guarantee information 152 into the performance guarantee information 152. The signature 154 is added and stored in the sensing device 100.

<E. Acquisition and output of sensing results by the sensing device 100>
Next, acquisition and output of the sensing result using the sensing device 100 in the user subject 20 will be described.

As described with reference to FIG. 1, the sensing device 100 outputs the electronically signed result data 160 including the acquired sensing result 162. Since the electronically signed result data 160 includes information for guaranteeing the sensing performance of the sensing device 100, the reliability of the sensing result 162 can be guaranteed.

FIG. 6 is a flowchart showing a processing procedure related to the output of the electronically signed result data 160 by the sensing device 100 of the sensing system 1 according to the present embodiment. Each step shown in FIG. 6 is typically realized by the processor 102 of the sensing device 100 executing the sensing program 112 and the result output program 114.

With reference to FIG. 6, when the sensing device 100 is instructed to start sensing (YES in step S200), the sensing module 106 operates according to the setting information 116, and the sensing module 106 acquires raw data (YES). Step S202). Then, the sensing device 100 calculates the sensing data from the acquired raw data, the performance guarantee information 152, and the like (step S204). The sensing data corresponds to the measured value of the sensing device 100. In this way, the sensing device 100 acquires information from the target using the sensing module 106.

The sensing device 100 outputs the calculated sensing data to the display unit 132 or the like (step S206).

Subsequently, the sensing device 100 generates a sensing result 162 including the sensing data (step S208), and generates an electronic signature 164 based on the generated sensing result 162 (step S210). Then, the sensing device 100 generates and outputs the electronically signed result data 160 including the sensing result 162, the electronic signature 164, and the electronic certificate 166 (step S212). Then, the process ends.

In this way, the sensing device 100 adds at least a part of the performance guarantee information 152 to the sensing result 162 acquired by the sensing module 106 and outputs it.

It is assumed that the digital certificate 166 is issued in advance by an arbitrary issuer (certificate authority or production entity 10) based on the public key 124 of the sensing device 100. However, the digital certificate 166 may be issued each time the digitally signed result data 160 is generated.

In this way, the sensing device 100 adds at least a part of the performance guarantee information 152 to the sensing result 162 acquired by the sensing module 106 and outputs it. Further, the sensing device 100 outputs the sensing result 162 and the performance guarantee information 152 with an electronic signature 164 added to at least a part of the sensing result 162.

<F. Electronically signed result data 160 generated by the sensing device 100>
Next, the electronically signed result data 160 generated by the sensing device 100 will be described.

FIG. 7 is a schematic diagram showing an example of the data structure of the electronically signed result data 160 generated by the sensing device 100 constituting the sensing system 1 according to the present embodiment. With reference to FIG. 7, the electronically signed result data 160 includes, as an example, a sensing result 162, an electronic signature 164, and an electronic certificate 166.

As an example, the sensing result 162 includes sensing data 1621, identification information 1622 of the sensing device 100, performance information 1623 of the sensing device 100, calibration information 1624 of the sensing device 100, and a valid period 1625.

The sensing data 1621 corresponds to the measured value of the sensing device 100. The sensing data 1621 may be a data set consisting of a plurality of values.

The identification information 1622 of the sensing device 100, the performance information 1623 of the sensing device 100, the calibration information 1624 of the sensing device 100, and the validity period 1625 are described in the performance guarantee information 152 of the electronically signed document 150 stored in the sensing device 100. The included identification information 1521, the performance information 1522 of the sensing device 100, the calibration information 1523 of the sensing device 100, and the validity period 1524 may be copied as they are.

The electronic signature 164 is information for ensuring that the sensing result 162 is valid, and is added for the purpose of preventing forgery or falsification. The electronic signature 164 is generated by encrypting the hash value calculated from the sensing result 162 with the private key 123 of the sensing device 100. A known algorithm can be used for the generation of the electronic signature 164.

The digital certificate 166 authenticates the public key 124 of the sensing device 100 used for verification by the digital signature 164, and is generated by an issuer such as a certificate authority (CA). The certification authority may be operated by a certified organization or may be operated by the production entity 10.

As an example, the electronic certificate 166 includes the identification information 1661 of the manufacturing entity 10, the identification information 1662 of the sensing device 100, the public key 1663 of the sensing device 100, the identification information 1664 of the issuer, and the electronic signature 1665. ..

The identification information 1661 of the production entity 10 includes information such as the company name and contact information of the production entity 10. By including the identification information 1661 of the manufacturing entity 10 in the digital certificate 166, the connection (chain) of the information up to the manufacturing entity 10 of the sensing device 100 can be maintained. The identification information 1661 of the production entity 10 may have the same contents as the identification information 1561 of the production entity 10 included in the digital certificate 156 stored in the sensing device 100.

The identification information 1662 of the sensing device 100 includes information for identifying the sensing device 100 (for example, a serial number, a serial number, etc.). The public key 1663 of the sensing device 100 includes information indicating the public key 124 of the sensing device 100.

The issuer identification information 1664 includes information for identifying the subject who issued the digital certificate 166. The electronic signature 1665 is information for ensuring that the digital certificate 166 is legitimate, and is added for the purpose of preventing forgery or falsification. The digital signature 1665 is generated by encrypting the hash value calculated from the information contained in the digital certificate 166 with the issuer's private key. A known algorithm can be used for the generation of the electronic signature 1665.

The data structure shown in FIG. 7 is an example, and any data structure may be adopted as long as it includes data corresponding to the sensing result 162, the electronic signature 164, and the digital certificate 166. The stored information may be stored in a key-value type in which a value to be stored and a corresponding indicator (key) are associated with each other. By storing information in a key-value type, it is possible to facilitate the implementation of processing related to the utilization of information.

Further, the information included in the sensing result 162, the electronic signature 164 and the electronic certificate 166 is not limited to the example shown in FIG. 7, and may be added or deleted as appropriate.

The sensing device 100 itself may issue an electronic certificate instead of the certificate authority (CA). Such digital certificates are also called self-signed certificates. In this case, the digital signature 1665 included in the digital certificate 166 is generated by encrypting the hash value calculated from the information included in the digital certificate 166 with the private key 123 of the sensing device 100.

Further, when the sensing device 100 itself issues the digital certificate, the information itself included in the sensing result 162 may be included in the digital certificate. As a result, the addition of the electronic signature 164 can be omitted.

FIG. 8 is a schematic diagram showing an example of the data structure of the self-signed certificate 168 generated by the sensing device 100 constituting the sensing system 1 according to the present embodiment.

With reference to FIG. 8, the self-signed certificate 168, which is an electronic certificate, includes the identification information 1661 of the manufacturing entity 10, the identification information 1662 of the sensing device 100, the public key 1663 of the sensing device 100, and the sensing result 162. , Electronic signature 1684 and.

Since the identification information 1661, the identification information 1662, the public key 1663, and the sensing result 162 are substantially the same as the corresponding information shown in FIG. 7 above, detailed description will not be repeated.

The electronic signature 1684 is information for ensuring that the content of the self-signed certificate 168 is legitimate, and is added for the purpose of preventing forgery or falsification. The electronic signature 1684 is generated by encrypting the hash value calculated from the information including the identification information 1661, the identification information 1662, the public key 1663, and the sensing result 162 with the private key 123 of the sensing device 100. A known algorithm can be used for the generation of the electronic signature 1684.

By using such a self-signed certificate 168, the digital certificate can be used with a relatively simple mechanism without using a certificate authority or the like.

As yet another form, a so-called client certificate may be used for the digital certificate 166 stored in the sensing device 100. In this case, the digital certificate 166 for the sensing device 100 may be issued based on the authentication for the manufacturing entity 10 that produced the sensing device 100.

<G. Application example>
Next, an application example of the sensing system 1 according to the present embodiment will be described.

As described above, since the electronically signed document 150 or the self-signed certificate 158 is stored in the sensing device 100, the reliability of the sensing device 100 itself can be ensured. Further, by using the electronically signed result data 160 or the self-signed certificate 168 output by the sensing device 100, the reliability of the sensing result 162 acquired by the sensing device 100 can be ensured.

As described above, by using the sensing device 100 according to the present embodiment, the reliability of both the sensing device 100 itself and the sensing result 162 acquired by the sensing device 100 can be ensured.

(G1: Guarantee of sensing performance of sensing device 100)
An application example for ensuring the sensing performance using the electronically signed document 150 or the self-signed certificate 158 stored in the sensing device 100 will be described.

FIG. 9 is a schematic view showing a display example of the sensing device 100 according to the present embodiment. With reference to FIG. 9, the sensing device 100 may be able to display the status display screen 170 on the display unit 132. The status display screen 170 is generated based on the information of the electronically signed document 150 or the self-signed certificate 158 in response to the user operation.

The status display screen 170 includes model information 171 indicating the model of the sensing device 100, identification information 172 indicating the serial number of the sensing device 100, and expiration date information 173 indicating the expiration date of the sensing performance of the sensing device 100.

Based on the expiration date information 173, the status display screen 170 displays a caution message 174 prompting the maintenance of the sensing device 100 when the expiration date is less than or equal to a predetermined period (for example, 3 months). May be good.

By providing such a state display screen 170 to the user, the sensing performance of the sensing device 100 can be more reliably ensured.

FIG. 10 is a schematic diagram showing a configuration example of a network system 2 including a sensing device 100 according to the present embodiment. The network system 2 shown in FIG. 10 includes a plurality of sensing devices 100 connected via the network 136.

A management device 200, which is a computer, is connected to the network 136. The management device 200 reads necessary information from each of the sensing devices 100 and provides the management screen 210.

The management device 200 verifies the electronically signed document 150 or the self-signed certificate 158 stored in each of the sensing devices 100 based on the public key 124 of the sensing device 100, and then generates the management screen 210.

The management screen 210 contains information for managing the sensing device 100. Specifically, the management screen 210 includes identification information 211 indicating the serial number of the target sensing device 100 and expiration date information 212 indicating the expiration date.

The administrator of the sensing device 100 can confirm the state of the sensing device 100 to be managed by referring to the management screen 210.

Further, on the management screen 210, when the expiration date is less than or equal to a predetermined period (for example, 3 months) based on the expiration date information 212, in order to promote the maintenance of the sensing device 100, the corresponding entry is entered. The display mode 214 may be different. By changing the display mode in this way, the administrator can uniquely specify which sensing device 100 should be provided.

(G2: Maintenance history / Calibration history)
In addition to the above-mentioned information, the performance guarantee information 152 included in the electronically signed document 150 and the self-signed certificate 158 may include a history of arranging the target sensing device 100 and a history of calibration. By including such a history, the maintenance status of the sensing device 100 can be easily grasped.

(G3: Centralized management of sensing results)
FIG. 11 is a schematic diagram showing an example of centralized management of sensing results by the sensing device 100 according to the present embodiment. With reference to FIG. 11, for example, the sensing results 162 acquired by the plurality of sensing devices 100 from the same user A can be centrally managed by adding an attribute indicating the user A.

A corresponding digital certificate 166 is added to each of the sensing results 162 that are centrally managed in this way. Based on the digital certificate 166, it is possible to verify that the content of the sensing result 162 is valid.

Further, by referring to the information regarding the sensing performance of the sensing device 100 included in the sensing result 162, the reliability of acquisition of the sensing data 1621 included in the sensing result 162 can be guaranteed.

(G4: Data output form)
The electronically signed result data 160 or the self-signed certificate 168 generated by the sensing device 100 can be output in any form.

For example, the electronically signed result data 160 or the self-signed certificate 168 may be externally output from the sensing device 100 in the form of being attached to an e-mail. Alternatively, Bluetooth (registered trademark), RFID, or the like may be used to transmit the electronically signed result data 160 or the self-signed certificate 168 to the mobile terminal held by the user.

Further, for example, when the sensing device 100 is a medical device used for a medical examination or the like, a storage medium is lent to the user, and each sensing device 100 electronically signs the result data on the lent storage medium. 160 or self-signed certificate 168 may be written (see FIG. 11 above). By writing the sensing results acquired by each sensing device 100 to the storage medium worn by the user, it is possible to streamline the aggregation of the sensing results 162 for a specific user and prevent the sensing results 162 from being mistaken for each other.

(G5: Variation of sensing data)
The sensing data typically includes, but is not limited to, the measured values of the sensing device 100. For example, the sensing data may be an inference value obtained by inputting raw data or the like acquired by the sensing device 100 into an inference device (learned model).

Alternatively, the sensing data may be a future value calculated from raw data or the like acquired by the sensing device 100.

<H. Modification example>
In the above-described embodiment, the sensing device 100 has been described as a single device, but the present invention is not limited to this, and a configuration including a plurality of devices may be adopted as the sensing device 100. In this case, the electronically signed document 150 or the self-signed certificate 158 may be set in a plurality of devices collectively, or the electronically signed document 150 or the self-signed certificate 158 may be set in each device. You may.

<I. Advantages>
According to the sensing system 1 according to the present embodiment, the sensing performance of the sensing device 100 can be guaranteed by the electronically signed document 150 (or the self-signed certificate 158) attached to the sensing device 100, and the sensing device 100 outputs the signal. The reliability of the sensing result 162 and the source of the sensing result 162 can be guaranteed by the digital certificate 166 (or the self-signed certificate 168) attached to the sensing result 162.

The embodiments disclosed this time should be considered as exemplary in all respects and not restrictive. The scope of the present invention is shown by the claims rather than the above description, and it is intended to include all modifications within the meaning and scope equivalent to the claims.

1 sensing system, 2 network system, 10 production body, 12,122
Key pair, 13,123 private key, 14,124,1562,1663 public key, 20 user, 30 database, 100 sensing device, 102 processor, 104 main memory, 106 sensing module, 108 communication interface, 110 storage, 112 sensing Program, 114 result output program, 116 setting information, 120 secure storage, 126,172,211,1521,1561,1563,1622,1661,1662,1664 identification information, 130 input unit, 132 display unit, 134 output unit, 136 Network, 150 Digitally Signed Documents, 152 Performance Guarantee Information, 154,164,1564,1584,1665,168 Digitally Signed, 156,166 Digitally Certificates, 158,168 Self-Signed Certificates, 160 Electronically Signed Result Data, 162 Sensing result, 170 status display screen, 171
Model information, 173,212 expiration date information, 174 caution message, 200 management device, 210 management screen, 214 display mode, 1522, 1623 performance information, 1523, 1624 calibration information, 1524, 1625 validity period, 1621 sensing data.

Claims (11)

It ’s a sensing device,
A sensing module that acquires information from the target,
A storage unit that holds performance guarantee information indicating the guaranteed sensing performance of the sensing device and a first electronic signature generated from the performance guarantee information .
Wherein the sensing data and the performance guarantee information sensing module, and an output unit for outputting by adding the second digital signature generated based on the sensing data and the performance guarantee information,
Before Symbol performance warranty information, and a sensing range of the sensing module, the sensing accuracy of the sensing module, at least Tsuo含free of the information to be output as a sensing result by correcting the sensing data of the sensing module , Sensing device. The sensing device according to claim 1, wherein the performance guarantee information is determined based on an inspection result regarding the sensing performance and the sensing function for the sensing device by the manufacturing entity. It ’s a sensing device,
A sensing module that acquires information from the target,
A storage unit that holds performance guarantee information indicating the guaranteed sensing performance of the sensing device and a first electronic signature generated from the performance guarantee information .
Wherein the sensing data and the performance guarantee information sensing module, and an output unit for outputting by adding the second digital signature generated based on the sensing data and the performance guarantee information,
Before SL first digital signature has been generated using a key pair fabrication principal of the sensing device,
The performance guarantee information includes at least one of the sensing range of the sensing module, the sensing accuracy of the sensing module, and the information for correcting the sensing data of the sensing module and outputting it as a sensing result. device. The sensing device according to claim 2, wherein the manufacturing entity determines the performance guarantee information based on the inspection result regarding the sensing performance and the sensing function for the sensing device. It ’s a sensing device,
A sensing module that acquires information from the target,
A storage unit that holds performance guarantee information indicating the guaranteed sensing performance of the sensing device and a first electronic signature generated from the performance guarantee information.
An output unit that outputs the sensing data of the sensing module and the performance guarantee information, and
A display unit that displays the state of the sensing performance of the sensing device based on the performance guarantee information is provided .
The performance guarantee information includes at least one of the sensing range of the sensing module, the sensing accuracy of the sensing module, and the information for correcting the sensing data of the sensing module and outputting it as a sensing result. device. The performance guarantee information includes the expiration date of the sensing device.
The sensing device according to claim 5, wherein the display unit displays a message prompting maintenance of the sensing device based on the expiration date of the sensing device. The sensing device according to any one of claims 1 to 4, wherein the second electronic signature is generated from the sensing data and the performance guarantee information. The sensing device according to any one of claims 1 to 7, wherein the storage unit holds a key pair of a private key and a public key of the sensing device. A step of storing the performance guarantee information indicating the guaranteed sensing performance of the sensing device and the first electronic signature generated from the performance guarantee information in the sensing device .
Said sensing device cell provides loans sensing data and the performance guarantee information obtained by the module, a second step of adding and outputting the digital signature that is generated based on the sensing data and the performance guarantee information,
Before Symbol performance warranty information, and a sensing range of the sensing module, the sensing accuracy of the sensing module, at least Tsuo含free of the information to be output as a sensing result by correcting the sensing data of the sensing module , Information processing method. A step of storing the performance guarantee information indicating the guaranteed sensing performance of the sensing device and the first electronic signature generated from the performance guarantee information in the sensing device .
Comprising sensing data and the performance guarantee information obtained by the sensing module sensing device, and outputting by adding the second digital signature generated based on the sensing data and the performance guarantee information,
Before SL first digital signature has been generated using a key pair fabrication principal of the sensing device,
The performance guarantee information includes at least one of the sensing range of the sensing module, the sensing accuracy of the sensing module, and the information for correcting the sensing data of the sensing module and outputting it as a sensing result. Processing method. A step of storing the performance guarantee information indicating the guaranteed sensing performance of the sensing device and the first electronic signature generated from the performance guarantee information in the sensing device.
Steps to acquire sensing data by the sensing module of the sensing device,
A step of outputting the sensing data of the sensing module and the performance guarantee information, and
A step of displaying the state of the sensing performance of the sensing device based on the performance guarantee information is provided .
The performance guarantee information includes at least one of the sensing range of the sensing module, the sensing accuracy of the sensing module, and the information for correcting the sensing data of the sensing module and outputting it as a sensing result. Processing method.

Images