JP7245634B2 - execution regulation system - Google Patents

Description

The present disclosure relates to regulation of execution of functions.

2. Description of the Related Art Conventionally, there are known techniques for regulating the execution of functions, such as a technique of permitting the use of optional functions of a program with a license key and a technique of managing device function extensions with an extension key (see Patent Document 1). For example, Patent Literature 1 discloses an execution regulation system in which a management device permits operation of a device to be managed such as a machine tool in a user's factory only during the usable period. Specifically, the management device generates a password based on the usable period information and the code (random number) transmitted from the managed device, and transmits the password to the managed device. The managed device decodes the received password to extract the code and usable period information, and then stores the code received via the managed device as described above in the storage unit before transmission to the management device. match the code that was As a result of this collation, if both codes match, an operation permission command is given to the control unit that controls the operation of the device to be managed so that it can be used only during the usable period specified in the extracted usable period information. is issued, the control unit operates only during the usable period. If the codes match, the managed device deletes the code in the storage unit, but if they do not match, it does not delete the code in the storage unit. is disabled. It is said that this makes it possible to provide a low-cost and efficient execution regulation system in which illegal use of passwords is not easy.

JP 2014-78201 A

When regulating the execution of a device or a program, as described in Patent Document 1, it is necessary to authenticate with a password (code) or the like, and to manage the usable period, etc., and to prevent unauthorized use of the password. It is necessary to take measures from the system aspect. Under such a problem, the present inventors have invented a new technique that enables execution of a specific function only during the permitted period.

In view of the circumstances described above, it is an object of at least one embodiment of the present invention to provide an execution restricting device that allows execution of a specific function only during the permitted period.

(1) An execution regulation device according to at least one embodiment of the present invention,
An execution restriction device that enables execution of a specific function only for a permitted period,
an executability determination unit configured to determine whether the specific function can be executed in a prescribed cycle shorter than the permission period;
The executability determination unit
a seed acquisition unit that acquires a seed that changes at the prescribed cycle;
a first verification information generating unit that generates first verification information based on the seed;
a second verification information receiving unit that receives second verification information generated based on the seed acquired by the seed acquisition unit from an authentication device that authenticates execution of the specific function;
and a collation unit that determines whether the specific function can be executed based on the first collation information and the second collation information.

According to the above configuration (1), the execution restricting device includes first verification information generated based on a seed that changes at a prescribed cycle, and second verification generated based on the same seed and received from the authentication device. It is configured such that execution of a specific function is permitted when the information is matched, and execution of the specific function is not permitted when the matching is not passed. Execution of the specific function during the permission period T is permitted when the collation is passed at each specified cycle. The seed for generating the second verification information may be different from the seed for generating the first verification information.

For example, a method of permitting the use of a specific function in the permitted period by one-time authentication at the start of the permitted period T, or when the seed is the same in each cycle, the first verification information, the second verification information, the seed and the seed If it is simulated by obtaining the method of generating verification information based on the above, the method of permitting execution of specific functions, etc., it will be possible to execute specific functions outside the permitted period or when there is no proper use permission such as a contract. It becomes possible to execute a specific function. However, in the present invention, by changing the seed at a specified cycle, the first verification information and the second verification information are also changed at a specified cycle. can be made difficult. Therefore, it is possible to more reliably protect the specific function from being illegally executed, and to allow the specific function P to be executed only during the permission period T.

(2) In some embodiments, in the configuration of (1) above,
The collation unit determines that the specific function can be executed when the first collation information and the second collation information satisfy a collation determination condition.
With configuration (2) above, it is possible to appropriately determine whether or not the specific function can be executed by confirming whether or not the first verification information and the second verification information satisfy the verification determination condition.

(3) In some embodiments, in the configuration of (2) above,
When the absolute value of the first verification information and the absolute value of the second verification information are the same, or the result of an operation including multiplication or division of the first verification information and the second verification information is If it becomes the specified value, it is determined that the collation determination condition is satisfied.
With configuration (3) above, it is possible to determine whether or not the collation determination condition is satisfied.

(4) In some embodiments, in the configurations of (1) to (3) above,
further comprising an authentication information transmission unit configured to transmit authentication information to the authentication device for validating execution of transmission of the second verification information to the second verification information reception unit by the authentication device. .
According to the above configuration (4), the authentication device is configured to send the second verification information to the execution regulating device when the authentication information is sent to the authentication device. As a result, the collation unit can start collation using the second collation information generated based on the same seed used to generate the first collation information, and the permission period can be started.

(5) In some embodiments, in the configurations of (1) to (4) above,
The executability determination unit
further comprising a seed generation unit that generates the seed that changes at the specified cycle and transmits the seed to the seed acquisition unit;
The first verification information generating unit generates the first verification information using a function for calculating the first verification information from the seed,
The execution regulation device
A function determination unit configured to determine the function used by the first verification information generation unit based on a function instruction value for determining the function acquired by the seed acquisition unit is further provided.

According to the above configuration (5), the execution regulation device generates the first collation information from the seed using the function, and this function is determined based on the function instruction value. As a result, the function for generating the first verification information can be defined (changed) according to the function instruction value, so that unauthorized use of the specific function can be prevented more reliably.

(6) In some embodiments, in the configuration of (5) above,
The apparatus further includes a function update unit configured to cause the function determination unit to select the function when the collation unit continuously determines that the specific function cannot be executed more than a prescribed number of times.

According to the above configuration (6), when the number of times that the verification based on the first verification information and the second verification information is not passed exceeds the specified number of times, the logic for calculating the first verification information is changed. This makes it possible to recover from a situation in which collation fails due to an accidental event.

(7) In some embodiments, in the configurations of (1) to (6) above,
A seed transmission unit that transmits the seed acquired by the seed acquisition unit to the authentication device is further provided.
According to the above configuration (7), it is possible to provide the first verification information generation section and the second verification information generation section with a seed that changes at a prescribed cycle.

(8) In some embodiments, in the configurations of (1) to (7) above,
The execution restricting device enables execution of the specific function used in the plant only during the permission period.
According to the configuration (8) above, for example, execution of a specific function of a control device for a gas turbine in a power plant can be restricted during the permitted period.

(9) An execution regulation system according to at least one embodiment of the present invention,
an execution restricting device according to any one of (1) to (8) above, which enables execution of the specific function only during the permitted period;
an authentication device communicably connected to the execution regulation device,
The authentication device
a seed receiver that receives a seed;
a second verification information generating unit that generates second verification information based on the seed;
and a transmitting unit configured to transmit the second verification information to the execution restricting device.

With configuration (9) above, by connecting the execution restricting device and the authentication device via a communication network such as a LAN, execution of the specific function can be permitted only during the permitted period.

(10) In some embodiments, in the configuration of (9) above,
an authentication information receiving unit that receives authentication information;
An execution permitting unit that permits execution of processing by the second verification information generation unit and the transmission unit when authentication based on the authentication information is successful.
According to the above configuration (10), the authentication device is configured to transmit the second verification information to the execution regulation device when the authentication device for authenticating the authentication information receives the authentication information. can appropriately determine whether or not the specific function can be executed.

(11) In some embodiments, in the configuration of (10) above,
The execution permitting unit performs at least one of the generation of the second verification information based on the seed by the second verification information generation unit and the processing by the transmission unit after the permission period has elapsed after the permission is given. Disallow processing.
According to the configuration (11) above, the authorization period can be managed on the authentication device side.

(12) An execution regulation program according to at least one embodiment of the present invention,
An execution regulation program that enables execution of a specific function only for a permitted period,
to the computer,
realizing an executability determination unit configured to determine whether or not the specific function is executable at a prescribed cycle;
The executability determination unit,
a seed acquisition unit that acquires a seed that changes at the prescribed cycle;
a verification information generation unit that generates first verification information based on the seed;
a second verification information receiving unit that receives second verification information generated by an authentication device based on the seed acquired by the seed acquisition unit;
and a collation unit that determines whether or not the specific function can be executed based on the first collation information and the second collation information.

According to the configuration of (12) above, the same effect as that of (1) above is achieved.

(13) An execution regulation method according to at least one embodiment of the present invention comprises:
An execution regulation method that enables execution of a specific function only for a permitted period,
an executability determination step for determining whether or not the specific function can be executed in a prescribed cycle shorter than the permission period;
The executability determination step includes:
a seed receiving step of receiving a seed that changes at the prescribed cycle;
a first verification information generating step of generating first verification information based on the seed;
a second verification information receiving step of receiving second verification information generated based on the seed received by the seed receiving step from an authentication device that authenticates execution of the specific function;
and a collation step of determining whether or not the specific function can be executed based on the first collation information and the second collation information.

According to the configuration of (13) above, the same effect as that of (1) above is achieved.

According to at least one embodiment of the present invention, there is provided an execution regulation device that allows execution of a specific function only during a permitted period.

1 is a diagram schematically showing the configuration of an execution regulation system according to one embodiment of the present invention; FIG. 1 is a diagram schematically showing the configuration of an execution regulation system according to an embodiment of the present invention, showing a case where an authentication information transmitting section is provided in an authentication device; FIG. 1 is a diagram schematically showing the configuration of an execution regulation system according to an embodiment of the present invention, showing a case where an authentication information transmission unit is located at a remote location; FIG. It is a figure which shows the switching aspect of permission and non-permission by the execution permission part which concerns on one Embodiment of this invention. It is a figure which shows the switching aspect of permission and non-permission by the execution permission part which concerns on other one Embodiment of this invention. FIG. 11 is a diagram showing a mode of switching between permission and non-permission by an execution permission unit according to another embodiment of the present invention; 1 is a diagram schematically showing the configuration of an execution regulation system according to an embodiment of the present invention, comprising a function determining section and a function updating section; FIG. 1 is a flow diagram illustrating an execution regulation method according to an embodiment of the invention; FIG. FIG. 9 is a flow diagram illustrating the preprocessing of FIG. 8 in accordance with one embodiment of the present invention;

Several embodiments of the present invention will now be described with reference to the accompanying drawings. However, the dimensions, materials, shapes, relative arrangements, etc. of the components described as embodiments or shown in the drawings are not intended to limit the scope of the present invention, and are merely illustrative examples. do not have.
For example, expressions denoting relative or absolute arrangements such as "in a direction", "along a direction", "parallel", "perpendicular", "center", "concentric" or "coaxial" are strictly not only represents such an arrangement, but also represents a state of relative displacement with a tolerance or an angle or distance to the extent that the same function can be obtained.
For example, expressions such as "identical", "equal", and "homogeneous", which express that things are in the same state, not only express the state of being strictly equal, but also have tolerances or differences to the extent that the same function can be obtained. It shall also represent the existing state.
For example, expressions that express shapes such as squares and cylinders do not only represent shapes such as squares and cylinders in a geometrically strict sense, but also include irregularities and chamfers to the extent that the same effect can be obtained. The shape including the part etc. shall also be represented.
On the other hand, the expressions "comprising", "comprising", "having", "including", or "having" one component are not exclusive expressions excluding the presence of other components.

1 to 3 are diagrams schematically showing the configuration of an execution regulation system 1 according to one embodiment of the present invention. 4 to 6 are diagrams showing how the execution permitting section switches between permission and non-permission according to an embodiment of the present invention.

The execution regulation system 1 restricts the execution of a desired function (hereinafter referred to as a specific function P) among the functions possessed by any device or program, for example, for a contract period determined between the provider of the specific function P and the user. It is a system for enabling only the permission period T, such as. As shown in FIGS. 1 to 7, an execution regulation system 1 includes an execution regulation device 2 configured to allow execution of a specific function P only for a permitted period T, and an execution regulation device 2 communicably connected to the execution regulation device 2. and an authentication device 5 . As shown in FIGS. 1 to 7, the execution regulation device 2 and the authentication device 5 are connected via a communication network 7 or the like so as to be capable of two-way communication. Control (hereinafter referred to as execution regulation) is executed so that the function P can be executed only during the permission period T.

In the embodiment shown in FIGS. 1 to 7, the execution regulation system 1 regulates execution of a specific function P of a control device 9 of a plant such as a power plant. Normally, this type of control device 9 has a plurality of functions, and the execution regulation system 1 can regulate the execution of a desired function among them. Execution regulation is executed by connecting the execution regulation device 2 and the authentication device 5 via a communication network 7 such as a LAN (Local Area Network). 1 to 7, the specific function P and the function G are linked in the control device 9. For example, the function G is a combustion control function of a gas turbine, and the specific function P optimizes combustion. It may be a function to In this case, when the execution of the specific function P is permitted, the specific function P determines various optimum combustion control parameters through monitoring the combustion state, etc., and the function G performs various combustion control determined by the specific function P. For example, the parameters are used to operate the gas turbine.

Note that the authentication device 5 may be realized by a computer, and may be realized by running a program on its OS (Operating System). The authentication device 5 shown in FIGS. 1 to 7 is realized by a personal computer. Also, the communication network 7 may be wired or wireless. Alternatively, the communication network 7 may be configured including a wireless communication section and a wired communication section. Moreover, the communication network 7 may include a WAN (Wide Area Network). Alternatively, the execution regulation device 2 and the authentication device 5 may be connected on a one-to-one basis by individual wiring.

The above-described devices constituting the execution regulation system 1 will be described in detail below.
The execution restriction device 2 includes an execution possibility determination section 3 configured to determine whether or not the specific function P is executable in a specified cycle C as a configuration for performing the above-described execution restriction. This specified cycle C is shorter than the permission period T, and the execution permission/inhibition determination unit 3 performs the above-described execution permission/prohibition determination in the specified cycle C a plurality of times. The executability determination unit 3 includes a seed acquisition unit 31, a first collation information generation unit 32, a second collation information reception unit 33, and a collation unit 34, thereby performing the above executability determination. conduct. Each of these configurations will be described.

1 to 7 is composed of a computer, and includes a CPU (processor) (not shown), memories such as ROM (Read Only Memory) and RAM (Random Access Memory), external storage devices, and the like. A storage device m is provided. Each functional unit of the execution restricting device 2 is realized by the CPU operating (data calculation, etc.) according to the instructions of the program (execution restricting program) loaded in the main storage device. The execution restriction program may run on the same OS as the control program running on the control device 9 .

The seed acquisition unit 31 is a functional unit that acquires the seed S that changes at the prescribed cycle C. As shown in FIG. This seed S is data used to generate first verification information Va, which will be described later. The seed S may be a numerical value or a character string. In the embodiment shown in FIGS. 1 to 7, the execution regulation device 2 further includes a seed generating section 31a that generates the seed S that changes at the prescribed cycle C described above. The seed acquisition unit 31 is connected to the seed generation unit 31a and acquires the seed S from the seed generation unit 31a. At this time, the seed generation unit 31a generates the seed S based on the time information so that the seed S becomes random data (random number, etc.).

The seed S generated by the seed generator 31a is transmitted to the seed receiver 51 of the authentication device 5 via the seed transmitter 31b. The seed S generated by the seed generation unit 31a may be input to the seed transmission unit 31b via the seed acquisition unit 31, or may be directly input to the seed transmission unit 31b.

In the embodiments shown in FIGS. 1 to 7, the seed generation unit 31a is provided in the same hardware, such as operating on the same OS as the seed acquisition unit 31. Embodiments may reside in different hardware. In this case, the seed acquisition unit 31 and the seed generation unit 31a may be connected via the communication network 7, for example. More specifically, the seed generation unit 31a may be provided in the same hardware as the authentication device 5, or may be provided in a computer or cloud connected via a WAN.

The first collation information generation unit 32 is a functional unit that generates the first collation information Va based on the seed S acquired by the seed acquisition unit 31 described above. The first verification information Va may be the same as the seed S, or may be different. In the embodiment shown in FIGS. 1 to 7, the first collation information generation section 32 is connected to the seed acquisition section 31, and the seed S is input from the seed acquisition section 31. FIG. The first verification information generator 32 generates the first verification information Va from the input seed S using a function (first function Fa) for calculating the first verification information Va from the seed S. ing.

The second verification information receiving unit 33 receives the second verification information Vb generated based on the same seed S as the seed S acquired by the seed acquisition unit 31 described above from the authentication device 5 that authenticates execution of the specific function P. This is the functional part for receiving. In the embodiment shown in FIGS. 1 to 7, the second verification information Vb is generated by the authentication device 5 described above, and the second verification information receiving unit 33 receives the authentication device 5 via the communication network 7. receives the second verification information Vb from.
The seed for generating the second verification information may be different from the seed for generating the first verification information.

The verification unit 34 is a functional unit that determines whether or not the specific function P can be executed based on the above-described first verification information Va and second verification information Vb. More specifically, the collation unit 34 may determine that the specific function P is executable when the first collation information Va and the second collation information Vb satisfy collation determination conditions. This collation determination condition defines a collation method for both collation information V (Va, Vb) and a condition for judging whether or not collation is possible when collation is performed according to the collation method. For example, the verification unit 34 may determine that the specific function P is executable when the absolute value of the first verification information Va and the absolute value of the second verification information Vb are the same. In this case, the collation method is to calculate the absolute value of each of the first collation information Va and the second collation information Vb and compare the two or obtain the result of subtracting the two. are equal, or the result of subtraction of both is 0, and so on. Further, the collation unit 34 may determine that the collation determination condition is satisfied when the result of the calculation including the multiplication or division of the first collation information Va and the second collation information Vb is a prescribed value. The verification method in this case is a calculation method for both verification information V, and the determination condition is whether the calculation result is equal to a specified value.

Then, when the collating unit 34 determines that the specific function P is executable, execution of the specific function P is permitted, thereby enabling execution of the specific function P on the user side. Conversely, when the collating unit 34 determines that the specific function P cannot be executed, execution of the specific function P is not permitted, so that the user cannot execute the specific function P. At this time, the collating unit 34 may allow execution of the specific function P when it is determined that execution is possible in all of the plurality of times as a result of repeating the specified cycle C multiple times. As described above, execution of the specific function P is permitted during the permission period T as the verification unit 34 determines whether the function can be executed during the permission period T. FIG.

In the embodiment shown in FIGS. 1 to 7, the execution restricting device 2 and the specific function P are separated, and the collation unit 34 notifies the specific function P or the function G of permission based on the determination result. Execution of the specific function P is thereby permitted. However, the present invention is not limited to this embodiment. In some other embodiments, if the execution restricting device 2 is incorporated into the specific function P, the specific method by which the execution restricting device 2 permits execution of the specific function P can be more securely concealed. Therefore, it is possible to make unauthorized use more difficult. The collation unit 34 may be configured to determine whether or not the specific function P can be executed even outside the permission period T. In this case, the first collation information Va and the second collation information Vb are collated. However, execution of the specific function P is not permitted because the collation determination condition is not satisfied.

On the other hand, as shown in FIGS. 1 to 7, the authentication device 5 includes a seed receiving unit 51 that receives the same seed S as the seed S obtained by the seed obtaining unit 31 described above, and a second seed based on the received seed S. It has a second verification information generation unit 52 that generates second verification information Vb and a transmission unit 53 that transmits the generated second verification information Vb to the execution regulation device 2 . In the embodiment shown in FIGS. 1 to 7, the second verification information generator 52 uses the same function (second function Fb) as the first function Fa described above to generate the second verification information Vb. ing. Therefore, the execution restricting device 2 determines that the specific function P is executable when the first verification information Va and the second verification information Vb are the same.

However, the present invention is not limited to this embodiment. The seed S for generating the first verification information and the seed S for generating the second verification information may be different, and the first function Fa and the second function Fb may be different. If the first function Fa and the second function Fb are different, even if the function on one side is leaked, the other side is different and an unauthorized simulated signal cannot be generated, so that the unauthorized use of the specific function P can be prevented more reliably. can be done.

According to the above configuration, the execution restricting device 2 receives the first verification information Va generated based on the seed S that changes at the prescribed cycle C and the same seed S generated based on the same seed S from the authentication device 5. Execution of the specific function P is permitted when the verification with the second verification information Vb is passed, and execution is not permitted when the verification is not passed. Execution of the specific function P during the permission period T is permitted when the verification is passed at each specified cycle C. FIG.

For example, if the method permits the use of the specific function P in the permission period T by one authentication at the start, or if the seed S is the same in each cycle, the first verification information Va, the second verification information Vb, the seed S , the method of generating verification information based on the seed S, the method of permitting the execution of the specific function P, etc., can be simulated by obtaining the execution of the specific function P outside the permission period T, and the proper use of the contract, etc. It becomes possible to execute the specific function P without permission. For example, since the second verification information Vb and the seed S are communicated over a communication network, they are relatively easy to leak due to eavesdropping or the like, and the execution regulation device 2 and the specific function P are separated by hardware. However, if the method of permitting the execution of the specific function P is simulated, unauthorized use will be possible regardless of the previous verification or authentication.

However, in the present invention, by changing the seed S at the specified cycle C, the first verification information Va and the second verification information Vb are also changed at the specified cycle C. can make it difficult to pass Therefore, the specific function P can be more reliably protected from unauthorized execution, and the specific function P can be executed only during the permission period T.

In some embodiments, as shown in FIGS. 1 to 7, the execution regulating device 2 enables the authentication device 5 to transmit the second verification information Vb to the second verification information receiving unit 33. The authentication information transmission unit 4 configured to transmit the authentication information I to the authentication device 5 may be further provided. This authentication information transmission unit 4 may be provided so as to operate on the hardware on which the executability determination unit 3 operates (see FIGS. 1 and 4 to 7), or may be installed in another device (place). They may be distributed and provided. Specifically, the authentication information transmission unit 4 may be provided in the same hardware as the authentication device 5 (see FIG. 2), or may be transmitted from a site such as a plant in which the execution regulation device 2 is installed to a WAN or the like. It may also be provided in a remotely located device such as connected via a communications network (see FIG. 3). It should be noted that such an arrangement of the authentication information transmitting unit 4 may of course be performed in the embodiments shown in FIGS. 1 and 4 to 7 as well.

On the other hand, the execution regulation system 1, as shown in FIGS. An execution permitting unit 56 that permits execution of processing by the information generating unit 52 and the transmitting unit 53 (execution permitting) is further provided. These functional units are provided in the authentication device 5 in the embodiment shown in FIGS. It is connected via network 7 . When the authentication information receiving unit 54 receives the authentication information I transmitted by the authentication information transmitting unit 4, the processing by the authentication unit 55 described later is performed, and the above processing by the execution permitting unit 56 is performed. Permission to execute is made.

In the embodiment shown in FIGS. 1 to 7, the execution regulation system 1 further includes an authentication section 55 that performs authentication based on the authentication information I received. For example, the authentication information I includes an authentication code used for authentication, and the authentication code may be extracted by decoding the authentication information I. Authentication based on the authentication information I may be performed by extracting the authentication code from the authentication information I and obtaining the authentication code by the authentication unit 55 . The execution permitting unit 56 permits the execution when the authentication based on the authentication information I by the authenticating unit 55 is successful, and disallows the execution of the above processing when the authentication fails. not allowed).

In some embodiments, as shown in FIGS. 4 to 6, this execution disapproval is that information that is not generated using the same seed S as the seed S used to generate the first verification information Va is 2 verification information Vb may be configured to be transmitted from the authentication device 5 to the execution regulation device 2 . In the embodiments shown in FIGS. 4 to 6, the execution permitting unit 56 causes the second verification information generating unit 52 to generate the seed used to generate the first verification information Va according to the success or failure of the authentication by the authenticating unit 55. Authentication information generated using the same seed S as S and another authentication information generated without intervention of the second collation information generation unit 52 are switched.

More specifically, in the embodiment shown in FIG. 4, the execution permitting unit 56 sends the seed received by the seed receiving unit 51 to the second verification information generating unit 52 when the authentication by the authenticating unit 55 is successful. S is entered. Conversely, if the authentication by the authentication unit 55 fails, the second verification information generation unit 52 receives the A fixed value that does not cause an error, or a fixed value that can be obtained by applying an appropriate calculation to the verification information generated by the second verification information generation unit 52 is input.

In the embodiment shown in FIG. 5, when the authentication by the authentication unit 55 is successful, the execution permitting unit 56 uses the verification information generated by the second verification information generation unit 52 as the second verification information Vb. sent to. Conversely, when the authentication by the authentication unit 55 fails, the fixed value as described above is transmitted to the execution regulation device 2 .

In the embodiment shown in FIG. 6, when the authentication by the authentication unit 55 is successful, the seed S received by the seed receiving unit 51 is input to the second verification information generation unit 52, and the second verification information is generated. The collation information generated by the unit 52 is transmitted to the execution regulation device 2 as the second collation information Vb. Conversely, when the authentication by the authentication unit 55 fails, the seed S received by the seed receiving unit 51 is input to the third verification information generation unit 52b, and the third verification information generation unit 52b generates The collation information is transmitted to the execution regulation device 2 as the second collation information Vb. The third collation information generation unit 52b generates collation information that does not pass the collation with the first collation information Va in the collation unit 34 of the execution regulation device 2. FIG. Therefore, when the verification information generated by the third verification information generating section 52b is sent to the execution restricting device 2 as the second verification information Vb, execution of the specific function P is not permitted. It should be noted that in the embodiment shown in FIG. 6, the third verification information generation unit 52b generates verification information using the third function Fc.

In some other embodiments, generation of the second verification information Vb by the second verification information generation unit 52 is prevented, such as by preventing the authentication information I from being input to the second verification information generation unit 52 from the authentication information reception unit 54. You can do it by preventing it from being done. In some other embodiments, this may be done by not transmitting the second verification information Vb from the transmitter 53 . In some other embodiments, these embodiments may be combined.

In addition, in the embodiment shown in FIGS. 1 to 7, the authentication unit 55 and the execution permitting unit 56 are provided in the authentication device 5, but the present invention is not limited to this embodiment. In some other embodiments, at least one of the authentication unit 55 and the execution permission unit 56 is installed in a remote location such that it is connected via a communication network such as a WAN from the site where the execution regulation device 2 is installed. It may be provided in a device that has been installed.

According to the above configuration, when the authentication information I is transmitted to the authentication device 5 , the authentication device 5 is configured to transmit the second verification information Vb to the execution regulation device 2 . As a result, the collation unit 34 can start collation using the second collation information Vb generated based on the same seed S used to generate the first collation information Va, and the permission period T starts. can do.

On the other hand, the authorization period T started as described above may be managed by the authentication device 5 side.
Specifically, in some embodiments, the above-described execution permission unit 56 permits execution of processing by the second verification information generation unit 52 and the transmission unit 53, and after the permission period T elapses, the second At least one of the generation of the second verification information Vb based on the seed S by the second verification information generation unit 52 and the processing by the transmission unit 53 may be disallowed. That is, when the execution permitting unit 56 disallows execution, the authentication device 5 does not transmit the second verification information Vb based on the appropriate seed S to the execution regulation device 2 . Therefore, by disabling the execution after the permission period T has passed, the execution regulating device 2 does not permit the execution of the specific function P after the permission period T has passed.

In order to configure in this way, the authentication device 5 needs to acquire the permission period T. FIG. Therefore, by including the information of the permitted period T in the authentication information I, the permitted period T may be extracted on the side of the authentication device 5 by decoding the authentication information I or the like. Alternatively, the execution regulation system 1 is provided with a database that associates the authentication information I or the information included in the authentication information I with the permission period T, so that the authentication apparatus 5 can search the database based on the authentication information I received. , the permission period T may be obtained. As a result, the permission period T can be obtained on the authentication device 5 side, so that the execution permission unit 56 can manage the end time of the permission period T, and the authentication device 5 side can manage the permission period T. can.

In some other embodiments, the permission period T may be managed by the execution restricting device 2 side. In this case, the execution regulation device 2 stores the permission period T, and after the permission period T has passed, the seed generation unit 31a generates the seed S, the seed acquisition unit 31 receives the seed S, and the first collation information At least one of the generation of the first verification information Va by the generation unit 32, the reception of the second verification information Vb by the second verification information reception unit 33, and the determination by the verification unit 34 or permission to execute the specific function P is performed. Execution of the specific function P may not be permitted by not having it.

Next, another configuration of the execution restricting device 2 will be described with reference to FIG. FIG. 7 is a diagram schematically showing the configuration of the execution regulation system 1 according to one embodiment of the present invention, which includes a function determining section 36 and a function updating section 37. As shown in FIG.

In some embodiments, the execution regulation device 2 determines the first function Fa used by the first verification information generation unit 32 based on the function instruction value Fv for determining the first function Fa acquired by the seed acquisition unit 31. A function determiner 36 configured to determine the .function. That is, the execution regulation device 2 stores in advance a plurality of candidate functions that are candidates for the first function Fa. Then, the function determination unit 36 selects one candidate function from a plurality of candidate functions based on the function instruction value Fv received from the seed acquisition unit 31, and sets it so that the first verification information generation unit 32 can be used. do. For example, the function determination unit 36 may select a candidate function indicated by the function indication value Fv or a conversion value obtained by converting the function indication value Fv using a predetermined function.

In the embodiment shown in FIG. 7, in the initial state, the function determination unit 36 recognizes the seed S first received from the seed acquisition unit 31 as the function instruction value Fv. Similarly, the authentication device 5 is also provided with the second function determination unit 57, so that the candidate function corresponding to the function instruction value Fv is set as the second function Fb. As a result, the first function Fa used by the first verification information generation unit 32 and the second function Fb used by the second verification information generation unit 52 are the same. It becomes the same as the second verification information Vb.

According to the above configuration, the execution regulation device 2 generates the first collation information Va from the seed S using the first function Fa. determined based on As a result, the function for generating the first verification information Va can be determined (changed) according to the function instruction value Fv, so that unauthorized use of the specific function P can be prevented more reliably.

In the above-described embodiments, in some embodiments, the execution restricting device 2 determines that the function determination unit 36 performs the first It may further comprise a function updater 37 configured to cause the selection of the function Fa. In other words, the first function Fa is reset in the above case in preparation for the case where the matching between the first matching information Va and the second matching information Vb fails due to an accidental event or the like. In the embodiment shown in FIG. 7, the result of collation by the collating unit 34 is input to the function updating unit 37. In the embodiment shown in FIG. Also, the function determining section 36 updates the first function Fa based on the notification from the function updating section 37 . The notification from the function updating unit 37 is also sent to the second function updating unit 58 provided in the authentication device 5, and the second function updating unit 58 receives the second function Fb from the second function determining unit 57 according to this notification. is made to select.

According to the above configuration, the calculation logic of the first verification information Va is changed when the number of times that verification based on the first verification information Va and the second verification information Vb fails exceeds the specified number of times. This makes it possible to recover from a situation in which collation fails due to an accidental event.

An execution regulation method corresponding to the processing by the execution regulation system 1 described above will be described below with reference to FIGS. 8 and 9. FIG. FIG. 8 is a flow diagram illustrating an execution regulation method according to one embodiment of the present invention. 9 is a flow diagram illustrating the pre-processing of FIG. 8 according to one embodiment of the invention.
The execution restriction method is a method for enabling execution of the specific function P only during the permitted period T, and as shown in FIG. It has an executability determination step.

Then, as shown in FIG. 8, the executability determination step includes a seed acquisition step (S21) for acquiring a seed S that changes at a prescribed cycle C, and a first collation information Va based on the acquired seed S. A first verification information generating step (S23) and a second verification information receiving step of receiving (obtaining) second verification information Vb generated based on the same seed S as the seed S obtained in the seed acquisition step (S21) (S27), and a verification step (S28) of determining whether or not the specific function P can be executed based on the first verification information Va and the second verification information Vb. Further, as shown in FIG. 8, the executability determination step may further include a seed transmission step (S22) for transmitting the same seed S as the seed S acquired in the seed acquisition step (S21) to the authentication device 5. good. The execution regulation method includes a seed receiving step (S24) of receiving a seed S, a second verification information generating step (S25) of generating second verification information Vb based on the received seed S, and a generated second verification information a transmission step (S26) of transmitting Vb to the execution regulation device 2;

The execution regulation method will be described in the order of steps in FIG. Note that the seed acquisition step (S21), the transmission step (S22), the first collation information generation step (S23), the seed reception step (S24), the second collation information generation step (S25), the transmission step (S26), the second The verification information receiving step (S27) and the verification step (S28) are performed by the seed acquisition unit 31, the seed transmission unit 31b, the first verification information generation unit 32, the seed reception unit 51, and the second verification information generation unit, respectively. 52, the transmission unit 53, the second verification information reception unit 33, and the verification unit 34, the details are omitted. In addition, in FIG. 8, it is assumed that the execution regulation device 2 performs the seeding S. As shown in FIG.

In FIG. 8, after the pre-processing (described later) in step S1, when the prescribed cycle C arrives, the executability determination step (S2) is executed. Specifically, in step S21, the seed S is obtained by generating it, and the seed S is transmitted to the authentication device 5 in step S22. Then, in step S23, the first verification information Va is generated based on the seed S obtained. On the other hand, the authentication device 5 receives the seed S in step S24, generates the second verification information Vb based on the received seed S in step S25, and then restricts execution of the second verification information Vb generated in step S26. Send to device 2. Thereafter, in step S27, when the execution restricting device 2 receives the second verification information Vb, in step S28, it is determined whether or not the specific function P can be executed based on the first verification information Va and the second verification information Vb. In S29, the specific function P is switched between executable and unexecutable according to the determination result.

Then, in the embodiment shown in FIG. 8, in step S3 following step S29, it is determined whether or not the permission period T has passed. When the next timing in the prescribed cycle C comes, the process is repeated from step S21. Conversely, if the permission period T has elapsed in step S3, the flow ends. It should be noted that, as already explained, this permission period T may be managed by the authentication device 5 side.

Next, the pre-processing of step S1 in FIG. 8 will be described. In some embodiments, as shown in FIG. 9, the execution regulation method further comprises an authentication information transmission step (S11) of transmitting the authentication information I described above to the authentication device 5 or the authentication information receiving unit 54. Also good. Furthermore, as shown in FIG. 9, the execution regulation method includes an authentication information receiving step (S12) for receiving the authentication information I transmitted in this way, and an authentication step (S13) for performing authentication based on the received authentication information I. ), and an execution permission step (S14) for permitting the execution of the processing by the second verification information generation step (S4) and the transmission step (S26) when the authentication based on the authentication information I is successful. good. The authentication information transmission step (S11), the authentication information reception step (S12), the authentication step (S13), and the execution permission step (S14) are performed by the already explained authentication information transmission unit 4, the authentication information reception unit 54, and the authentication unit 55, respectively. , are the same as the processing contents executed by the execution permitting unit 56, the details are omitted.

The embodiment shown in FIG. 9 will be described step by step. In step S11, the authentication information I is transmitted from the execution regulation device 2 to the authentication device 5. In step S12, the authentication device 5 receives the authentication information I. FIG. In step S13, the authentication device 5 performs authentication. As a result, when the authentication is successful, the execution is permitted in step S14. In other words, proper second verification information Vb is provided to the execution regulation device 2 by the proper operation of the authentication device 5 . Conversely, if the authentication fails, the flow ends and execution of the specific function P is not permitted. It should be noted that if the authentication fails, the fact may be notified to the execution regulation device 2, and in this case, the execution regulation device 2 may also terminate the flow.

Further, as shown in FIG. 9, the execution regulation method includes a function determination step (S17 ) is executed. Since the function determining step (S17) is the same as the processing executed by the function determining unit 36 already described, the details are omitted. Referring to FIG. 9, after step S11 is executed, the function instruction value Fv is generated in step S15, the function instruction value Fv is transmitted to the authentication device 5 in step S16, and the function instruction value Fv is generated in step S17. to determine the first function Fa, and to generate the first verification information Va using the first function Fa in the subsequent first verification information generation step (S23). On the other hand, the authentication device 5 receives the function instruction value Fv transmitted in step S17, and determines the second function Fb based on the function instruction value Fv in step S18. Note that steps S15 and S16 may be performed at any timing in FIG. 9 as long as they are before step S18.

Further, in some embodiments, the execution regulation method is such that when the verification step (S28 in FIG. 8) continues to determine that the specific function P cannot be executed for a predetermined number of times or more, the function selection step is performed. It may further include a function update step that causes the Since the function update step is the same as the processing content executed by the function update unit 37 already described, the details are omitted.

The present invention is not limited to the above-described embodiments, and includes modifications of the above-described embodiments and modes in which these modes are combined as appropriate.

1 Execution regulation system 2 Execution regulation device 3 Execution propriety determination unit 31 Seed acquisition unit 31a Seed generation unit 31b Seed transmission unit 32 First verification information generation unit 33 Second verification information reception unit 34 Verification unit 36 Function determination unit 37 Function update unit 4 authentication information transmission unit 5 authentication device 51 seed reception unit 52 second verification information generation unit 52b third verification information generation unit 53 transmission unit 54 authentication information reception unit 55 authentication unit 56 execution permission unit 57 second function determination unit 58 second Function updating unit 7 Communication network 9 Control device

m storage device P specific function G function (function other than specific function)
T Permission period C Specified period S Seed V Verification information Va First verification information Vb Second verification information Fa First function Fb Second function Fc Third function Fv Function instruction value I Authentication information

Claims (7)

Among a plurality of functions possessed by a control device of a plant, execution of a specific function that operates in cooperation with a normal function that is executed during the operation period of the plant is allowed only for a predetermined period of permission. An execution regulation system comprising an execution regulation device and an authentication device communicably connected to the execution regulation device ,
The execution regulation device
an executability determination unit configured to determine whether the specific function can be executed in a prescribed cycle shorter than the permission period;
The executability determination unit
a determination unit that determines whether the permission period has passed;
a seed acquisition unit that acquires a seed that changes at the specified cycle when the determination unit determines that the permission period has not elapsed;
a first verification information generating unit that generates first verification information based on the seed;
a second verification information receiving unit that receives second verification information generated based on the seed acquired by the seed acquisition unit from the authentication device that authenticates execution of the specific function;
a collation unit that determines whether the specific function can be executed based on the first collation information and the second collation information ;
The authentication device
a seed receiver that receives the seed;
a second verification information generating unit that generates the second verification information based on the seed;
a transmission unit that transmits the second verification information to the execution regulation device;
an authentication information receiving unit that receives authentication information including information on the permission period;
a storage control unit that acquires and stores information on the permitted period by decoding the authentication information received by the authentication information reception unit;
an execution permission unit that permits execution of processing by the second verification information generation unit and the transmission unit when authentication based on the authentication information is successful;
After the permission is granted, the execution permitting unit generates the second verification information based on the seed by the second verification information generation unit, or executes processing by the transmission unit after the stored permission period elapses. Disallow at least one process,
The control device is configured to switch to a non-executable state of the specific function while maintaining the specific function executable state when the at least one of the processes is disallowed. execution regulation system . 2. The execution regulation system according to claim 1, wherein said collation unit determines that said specific function can be executed when said first collation information and said second collation information satisfy collation determination conditions. When the absolute value of the first verification information and the absolute value of the second verification information are the same, or the result of an operation including multiplication or division of the first verification information and the second verification information is 3. The execution regulation system according to claim 2, wherein it is determined that the collation determination condition is satisfied when the specified value is obtained. further comprising an authentication information transmission unit configured to transmit authentication information to the authentication device for validating execution of transmission of the second verification information to the second verification information reception unit by the authentication device. 4. The execution regulation system according to any one of claims 1 to 3, characterized in that: The executability determination unit
further comprising a seed generation unit that generates the seed that changes at the specified cycle and transmits the seed to the seed acquisition unit;
The first verification information generating unit generates the first verification information using a function for calculating the first verification information from the seed,
The execution regulation device
Further comprising a function determination unit configured to determine the function used by the first collation information generation unit based on a function instruction value for determining the function acquired by the seed acquisition unit. The execution regulation system according to any one of claims 1 to 4. A function update unit configured to cause the function determination unit to select the function when the collation unit continuously determines that the specific function cannot be executed more than a predetermined number of times. 6. The execution regulation system according to claim 5. 7. The execution regulation system according to any one of claims 1 to 6, further comprising a seed transmission unit that transmits the seed acquired by the seed acquisition unit to the authentication device.

Images