WO2012042633A1

WO2012042633A1 - Machine management system, machine management device and machine management method

Info

Publication number: WO2012042633A1
Application number: PCT/JP2010/067049
Authority: WO
Inventors: 延之太田
Original assignee: 株式会社日立製作所
Priority date: 2010-09-30
Filing date: 2010-09-30
Publication date: 2012-04-05
Also published as: JPWO2012042633A1; JP5681198B2

Abstract

A machine management system of the present invention comprises: a machine to be managed; an information collection and utilization device which acquires observation information of the machine to be managed, and uses a secondary information generated on the basis of the observation information; and a machine management device which generates secondary information from the observation information. Given that a shared key used for encrypting and decrypting the observation information is shared between the machine management device and the machine to be managed, the information collection and utilization device may acquire the observation information but may not know the content thereof. The machine management device generates secondary information based on the observation information acquired through the information collection and utilization device, and transmits the secondary information to the information collection and utilization device. Given that a shared key used for encrypting and decrypting the secondary information is shared between the machine management device and the information collection and utilization device, the information collection and utilization device may browse the content of the second information.

Description

Machine management system, machine management apparatus, and machine management method

The present invention relates to a machine management system, a machine management apparatus, and a machine management method.

In recent years, with the development of network technology, it is possible to remotely monitor the state of machines located in remote locations. Furthermore, it is possible to process secondary information having a higher use value than the observation information based on the observation information observed by remote monitoring. For example, in Patent Document 1, the monitoring observation information portal site monitors equipment owner machines via a network, acquires observation information, processes the secondary information based on the observation information, Provide to users of monitoring observation information. Even if the number of machines increases, the existing monitoring observation information users can immediately use the secondary information. On the other hand, even if the number of monitoring observation information users increases, the monitoring observation information users Secondary information of existing machines can be used immediately.

JP 2003-22332 A

In the technique of Patent Document 1, when the machine cannot be connected to the network, for example, when the machine is installed outdoors, the monitoring observation information portal site cannot collect the observation information directly via the network. At this time, an arbitrary information collector collects observation information from the machine and transmits it to the monitoring observation information portal site. However, the information collector browses the observation information at this time. The information collector here also often serves as a person who performs maintenance of the machine using the secondary information, that is, a monitoring observation information user.

Therefore, the present invention provides an information collector who also obtains machine observation information in a state where the information collector cannot view it, while the secondary information processed based on the observation information serves as a user of the observation information. The purpose is to provide a mechanism that can be browsed freely.

The machine management system of the present invention is a management target machine that is a management target, an information collection and utilization device that acquires observation information of the management target machine, and uses secondary information generated based on the observation information; A machine management device that generates the secondary information based on the observation information, and the machine management device and the managed machine have a first common key for encrypting and decrypting the observation information. The machine management device and the information collection and utilization device share and store a second common key for encrypting and decrypting the secondary information, and the managed machine Encrypts the observation information using the first common key, and the information collection and utilization device receives the input of the encrypted observation information and transmits the received observation information to the machine management device And the machine management Uses the first common key to decrypt the transmitted observation information, generates the secondary information based on the decrypted observation information, and uses the second common key Then, the generated secondary information is encrypted, and the encrypted secondary information is transmitted to the information collection and utilization device. The information collection and utilization device uses the second common key, Decoding the transmitted secondary information, and using the decoded secondary information, outputting information used when executing a service for the managed machine .

According to the present invention, the information collector obtains the machine observation information in a state where it cannot be browsed by itself, while the secondary information processed based on the observation information serves as the user of the observation information. It becomes possible to provide a mechanism that can be viewed freely.

It is a figure for demonstrating the outline of this embodiment. It is a lineblock diagram of the machine management system concerning this embodiment. (A) is a figure which shows an example of the table for machine owners of the common key database stored in the machine management apparatus based on this embodiment. (B) is a figure which shows an example of the table for information collection users of the common key database stored in the machine management apparatus based on this embodiment. It is a figure which shows an example of the random number database which concerns on this embodiment. It is a figure which shows an example of the observation information database stored in the machine management apparatus based on this embodiment. It is a figure which shows an example of the public key / private key database which concerns on this embodiment. It is a figure which shows an example of the observation information database stored in the management object machine based on this embodiment. It is a figure which shows an example of the common key database stored in the information collection utilization apparatus based on this embodiment. It is a flowchart of the 1st processing procedure concerning this embodiment. It is a flowchart of the 2nd processing procedure which concerns on this embodiment. It is a flowchart of the 3rd process sequence which concerns on this embodiment. (A) is a figure which shows an example of the graph produced based on secondary information based on this embodiment. (B) is a figure which shows an example of the table | surface created based on secondary information based on this embodiment.

Hereinafter, a mode for carrying out the present invention (referred to as “the present embodiment”) will be described in detail with reference to the drawings.

(Outline of this embodiment)
The outline of this embodiment is demonstrated along FIG. First, the parties related to the operation of the machine management system 1 will be described. The parties are a machine manufacturer, a machine owner, and an information collection user.
The machine maker is a manufacturer of managed machines. The machine manufacturer delivers the managed machine to the machine owner. A machine owner is a person who owns and uses a managed machine. A “maintenance contract” is signed between the machine owner and the information collection user to the effect that the information collection user maintains the managed machine. The information collection user requests the machine manufacturer to process the secondary information based on the observation information, and performs maintenance of the managed machine using the secondary information.

Under a machine manufacturer, a machine owner, and an information collection user, there are a machine management device, a managed machine, and an information collection and utilization device, respectively.
Managed machines are general machines including industrial machines such as machine tools, consumer machines such as personal computers, and the like, and generate observation information indicating the operation state. This observation information includes information that the machine owner or machine manufacturer does not want to be known to the information collection user (for example, confidential information on design, personal information of the machine owner, etc.). Then, in this embodiment, the managed machine, because, for example, which is installed outdoors, the information collection utilizing device and machine management device shall not connected by a communication line. Or, even if connected, it shall be in an environment where only a very small amount of data can be transmitted and received. Therefore, the transfer of the observation information from the management target machine to the information collection and utilization apparatus is executed by, for example, an operator using a recording medium such as a memory card (details will be described later).

The information collection and utilization device collects observation information and transfers it to the machine management device as the first function. At this time, the observation information is encrypted, and security is guaranteed. That is, the information collection and utilization device cannot know the contents of the observation information. As a second function, the information collection and utilization device receives secondary information from the machine management device and uses the secondary information. The secondary information is, for example, information indicating an abnormality of the management target machine. Using the secondary information includes, for example, displaying information indicating the abnormality of the management target machine and allowing the worker to browse the information. It is. At this time, the information use collection device is not subject to any browsing restrictions on the secondary information.

The machine management device receives the observation information from the information collection and utilization device, processes the secondary information based on the observation information, and transmits the secondary information to the information collection and utilization device. The machine management device and the information collection and utilization device are connected by a communication line, and a large amount of data can be delivered.

(About encryption method)
As is well known, “common key cryptosystem” and “public key cryptosystem” exist as technologies for encryption / decryption of secret data. In the common key cryptosystem, the key used for encryption and the key used for decryption are the same. These are called “common keys”, and one of the two parties exchanging secret data generates a common key and transmits the common key to the other. In the public key cryptosystem, a key used for encryption and a key used for decryption are different. However, they are paired and are called “secret key” and “public key”. Secret data is encrypted using one of the “secret key” and “public key”, and the secret data is decrypted using the other. One of the two parties exchanging secret data generates a “secret key” and a “public key”, holds the “secret key” by itself, and transmits the “public key” to the other party.

In this embodiment, a common key cryptosystem is used between the machine management device and the managed machine for security of observation information. The common key is generated by the machine management apparatus. A common key cryptosystem is also used between the machine management apparatus and the information collection and utilization apparatus for the security of secondary information. The common key is generated by the information collection and utilization device. Further, a public key cryptosystem is used between the machine management device and the information collection and utilization device for the security of the common key itself for encrypting the secondary information. The secret key and the public key are generated by the machine management apparatus.
That is, there are three encryption targets: (1) observation information, (2) secondary information, and (3) a common key for encrypting secondary information, and the encryption method is only for (3). Is a “public key cryptosystem” and the others are “common key cryptosystems”.

(Machine management system)
The configuration of the machine management system 1 will be described with reference to FIG. The machine management system 1 includes a machine management device 2, an information collection and utilization device 3, and a management target machine 4. The communication line 5 connects the machine management device 2 and the managed machine 4. The communication line 5 is assumed to be a network such as a satellite communication line or a mobile phone network, which has a small line capacity and a cost for mass data communication. For this reason, communication via the communication line 5 is communication with a small amount of data.
The communication line 6 connects the machine management device 2 and the information collection and utilization device 3. As the communication line 6, various networks such as a dedicated line, a WAN (Wide Area Network), a power line network, a wireless network, and a public line network can be adopted in addition to the Internet and a LAN (Local Area Network). For this reason, communication via the communication line 6 is communication with a large amount of data.

(Machine management device)
The machine management device 2 is a general computer and includes a central control device 11, a main storage device 12, an auxiliary storage device 13, a communication device 14, an input device 15, and an output device 16. These are connected to each other by a bus.
The auxiliary storage device 13 stores a common key database 31, a random number database 32, an observation information database 33, and a public / private key database 34 (detailed later).
The A common key generation unit 21, the random number matching unit 22, the A / key decryption unit 23, the secondary information generation unit 24, and the B encryption unit 25 are programs. Thereafter, when the subject is described as “XX section”, the central controller 11 reads out each program from the auxiliary storage device 13 and loads it into the main storage device 12, and then the function of each program (detailed later). (This also applies to the information collection and utilization device 3 and the management target machine 4 described later).

(Information collection and utilization device)
The information collection and utilization device 3 is a general computer and includes a central control device 41, a main storage device 42, an auxiliary storage device 43, a communication device 44, an input device 45, and an output device 46. These are connected to each other by a bus.
The auxiliary storage device 43 stores a common key database 55 (details described later).
The B common key generation unit 51, the key encryption unit 52, the B decryption unit 53, and the secondary information utilization unit 54 are programs.

(Managed machine)
The managed machine 4 is a general machine for industrial use and consumer use. However, in the present embodiment, the managed machine 4 refers to a sensor part and a computer part (so-called microcomputer part) that obtain observation information about a mechanical part that performs the original function of such a machine. . The managed machine 4 includes a central control device 61, a main storage device 62, an auxiliary storage device 63, a communication device 64, an input device 65, an output device 66, and a sensor 67. These are connected to each other by a bus.
The auxiliary storage device 63 stores an observation information database 74 (details described later).
The A encryption unit 71 and the random number generation unit 72 are programs.
It should be noted that the words “A” and “B” in the names of programs across the machine management device 2, the information collection and utilization device 3, and the management target machine 4 are “related to observation information” and “secondary information”, respectively. It has the meaning.

In FIG. 2, the machine management device 2 is configured to exist. However, the machine management device 2 may have a configuration divided into a plurality of cases. For example, there may be one or a plurality of apparatuses that store programs and one or a plurality of apparatuses that store a database or the like. The same applies to the information collection and utilization device 3. Only one managed machine 4 is shown in FIG. 2, but there are actually one or a plurality of managed machines 4.

(Common key database)
The common key database 31 will be described with reference to FIG. The common key database 31 is divided into a machine owner table 35 (FIG. 3A) and an information collection user table 36 (FIG. 3B).

In the machine owner table 35, in association with the machine owner ID stored in the machine owner ID column 101, the machine ID column 102 has a machine ID, the manufacturing number column 103 has a manufacturing number, and an algorithm column 104. Is the name of the algorithm, and the common key column 105 stores the common key.
The machine owner ID in the machine owner ID column 101 is an identifier that uniquely identifies the machine owner.
The machine ID in the machine ID column 102 is an identifier that uniquely identifies the type of the management target machine 4.
The serial number in the serial number column 103 is a number indicating the order in which the managed machine 4 is manufactured among the same type of managed machines 4.
The managed machine 4 is uniquely specified by the combination of the machine ID and the production number.
The name of the algorithm in the algorithm column 104 is the name of an algorithm that is an encryption / decryption procedure. The algorithm itself is stored in association with the name of the algorithm in the auxiliary storage device 13 of the machine management device 2 or in an external system. The machine management device 2 can freely specify the algorithm if the name of the algorithm can be specified. It is assumed that it can be used (the same applies to the description of the algorithm below). This algorithm is adopted by the machine manufacturer.
The common key in the common key column 105 is a parameter read by the algorithm at the time of encryption / decryption. The common key is generated by the machine manufacturer and is shared by the machine management device 2 and the managed machine 4.

In the information collection user table 36, the algorithm name is stored in the algorithm field 107 and the common key is stored in the common key field 108 in association with the information collection user ID stored in the information collection user ID field 106. Has been.
The information collection user ID in the information collection user ID column 106 is an identifier that uniquely identifies the information collection user.
The name of the algorithm in the algorithm column 107 is the name of an algorithm that is an encryption / decryption procedure. This algorithm is adopted by the information collecting user.
The common key in the common key column 108 is a parameter read by the algorithm at the time of encryption / decryption. The common key is generated by the information collecting user and is shared by the machine management device 2 and the information collecting and using device 3.

(Random number database)
The random number database 32 will be described with reference to FIG. In the random number database 32, in association with the machine owner ID stored in the machine owner ID column 111, the machine ID column 112 has a machine ID, the manufacturing number column 113 has a manufacturing number, and the random number column 114 has a random number. Is remembered.
The machine owner ID in the machine owner ID column 111 is the same as the machine owner ID in FIG.
The machine ID in the machine ID column 112 is the same as the machine ID in FIG.
The serial number in the serial number column 113 is the same as the serial number in FIG.
The random number in the random number column 114 is a string of numbers generated immediately before the managed machine 4 encrypts the observation information. Individual numbers included in the string of numbers are randomly generated, and it is practically impossible for anyone other than the managed machine 4 to know them by themselves.

(Observation information database)
The observation information database 33 will be described with reference to FIG. In the observation information database 33, in association with the machine owner ID stored in the machine owner ID field 121, the machine ID field 122 has a machine ID, the production number field 123 has a production number, and the part ID field 124. Shows the part ID, the temperature column 125 stores the temperature, the pressure column 126 stores the pressure, the position column 127 stores the position, and the observation time column 128 stores the observation time.

The machine owner ID in the machine owner ID column 121 is the same as the machine owner ID in FIG.
The machine ID in the machine ID column 122 is the same as the machine ID in FIG.
The serial number in the serial number column 123 is the same as the serial number in FIG.
The component in the component ID column 124 is an identifier that uniquely identifies the component of the managed machine 4 in the same managed machine 4.
The temperature in the temperature column 125 is a temperature when the parts of the managed machine 4 are observed by the sensor 67 that observes the temperature.
The pressure in the pressure column 126 is a pressure when a substance such as a gas in a part of the managed machine 4 is observed by the sensor 67 that observes the pressure.
The position in the position column 127 is the latitude and longitude of the place where the managed machine 4 is located. The latitude and longitude are observed by a GPS (Global Positioning System) (not shown).
The observation time in the observation time column 128 is the time when the temperature, pressure and position are observed.

(Public / private key database)
The public key / private key database 34 will be described with reference to FIG. In the public key / private key database 34, the public key is stored in the public key column 132 and the secret key is stored in the secret key column 133 in association with the algorithm name stored in the algorithm column 131.
The name of the algorithm in the algorithm column 131 is the name of an algorithm that is an encryption / decryption procedure. This algorithm is adopted by the machine manufacturer.
The public key in the public key column 132 is a parameter read by the algorithm at the time of encryption / decryption. The public key is generated by the machine maker and is transmitted to the information collection and utilization apparatus 3.
The secret key in the secret key column 133 is a parameter read by the algorithm at the time of encryption / decryption. The secret key is generated by the machine manufacturer and is not disclosed to others. The public health and the secret health are paired. In this embodiment, the data (the common key for security of the secondary information itself) is encrypted using the public key, and the secret key is used to encrypt the data. Data is decrypted.

(Observation information database)
The observation information database 74 will be described with reference to FIG. While the observation information database 33 described in FIG. 5 is stored in the machine management apparatus 2, the observation information database 74 is stored in the managed machine 4. The configuration of the observation information database 74 is the same as the configuration of the observation information database 33 except that there is no column corresponding to the machine owner ID column 121 in FIG. That is, the description of the column 122 to the column 128 of FIG. 5 is applied as it is to the column 141 to the column 147 of FIG.

(Common key database)
The common key database 55 will be described with reference to FIG. The common key database 31 described in FIG. 3 is stored in the machine management apparatus 2, whereas the common key database 55 is stored in the information collection and utilization apparatus 3. The configuration of the common key database 55 does not have the configuration of the machine owner table 35 shown in FIG.
In the common key database 55, the algorithm name 152 is stored in the algorithm column 152 and the common key is stored in the common key column 153 in association with the machine manufacturer ID stored in the machine manufacturer ID column 151.
The machine maker ID in the machine maker ID column 151 is an identifier that uniquely identifies the machine maker.
The name of the algorithm in the algorithm column 152 is the name of the algorithm that is the procedure of encryption / decryption. This algorithm is adopted by the information collecting user.
The common key in the common key column 153 is a parameter read by the algorithm at the time of encryption / decryption. The common key is generated by the information collecting user and is shared by the machine management device 2 and the information collecting and using device 3.

(Outline of processing procedure)
There are the following three processing procedures. That is, (1) for the security of observation information, the machine management device 2 generates a common key shared with the managed machine 4 (see FIG. 9), (2) the security of secondary information Therefore, the information collection and utilization device 3 generates a common key shared with the machine management device 2, and the machine management device 2 attaches a public key for encrypting the common key itself to the information collection and utilization device. And (3) the information collection and utilization device 3 acquires observation information from the managed machine 4, and the information collection and utilization device 3 obtains the observation information from the machine management device 2 And the machine management device 2 processes the secondary information based on the observation information and transmits the processed secondary information to the information collection and utilization device 3, and the information collection and utilization device 3 uses the secondary information (FIG. 3). 11).
In order to execute the third processing procedure, it is assumed that the first processing procedure and the second processing procedure have been completed.

(First processing procedure)
The first processing procedure will be described with reference to FIG. The first processing procedure is executed only once when the machine manufacturer delivers the managed machine 4 to the machine owner.
In step S201, the A common key generation unit 21 of the machine management device 2 generates a common key. Specifically, the A common key generation unit 21 first accepts that the machine owner ID, the machine ID, and the manufacturing number are input via the input device 15.
Second, an algorithm to be adopted is determined and a common key is generated.
Third, a new record of the machine owner table 35 (FIG. 3A) of the common key database 31 is created, and a machine owner ID column 101, a machine ID column 102, a production number column 103, and an algorithm column 104 are created. In the common key column 105, the received machine owner ID, machine ID, serial number, determined algorithm name, and generated common key are stored.

In step S202, the A common key generation unit 21 stores the common key in the managed machine 4. Specifically, the A common key generation unit 21 stores the name of the algorithm determined in step S201 and the common key generated in step S201 in the managed machine 4. At the time of the storage, it is assumed that the communication device 14 of the machine management device 2 and the communication device 64 of the managed machine 4 are directly connected (by a cable or the like).

In step S203, the A encryption unit 71 of the managed machine 4 stores the common key. Specifically, the A encryption unit 71 stores the name of the algorithm and the common key stored in step S202 in the auxiliary storage device 63.
Thereafter, the first processing procedure is terminated.

(Second processing procedure)
The second processing procedure will be described with reference to FIG. The second processing procedure is performed once when the information collection user signs a “maintenance contract” with the machine owner and the machine manufacturer of the machine 4 to be managed by the machine owner is new to the information collection user. Only executed.

In step S301, the B common key generation unit 51 of the information collection and utilization device 3 generates a common key. Specifically, the B common key generation unit 51 first accepts that the machine manufacturer ID is input via the input device 45.
Second, an algorithm to be adopted is determined and a common key is generated.
Third, a new record is created in the common key database 55 (FIG. 8), and the machine maker ID column 151, the algorithm column 152, and the common key column 153 are respectively received the machine maker ID, the name of the determined algorithm, and Store the generated common key.

In step S302, the key encryption unit 52 of the information collection and utilization device 3 requests the public key of the machine manufacturer. Specifically, the key encryption unit 52 transmits a signal requesting a public key to the machine management device 2. The key encryption unit 52 may send the name of a specific algorithm to the signal. The transmission is performed via the communication line 6.

In step S303, the A / key decryption unit 23 of the machine management device 2 transmits the public key. Specifically, the A / key decryption unit 23 first obtains the public key and algorithm name from an arbitrary record in the public key / private key database 34 (FIG. 6). If the name of a specific algorithm is transmitted in step S302, the public key / private key database 34 is searched using the name of the algorithm as a search key, and the public key of the corresponding record is acquired.
The machine management apparatus 2 accepts that the machine maker inputs the algorithm name, public key, and secret key via the input device 15 in advance, and sets a record in the public key / secret key database 34.
Secondly, the name of the algorithm used as (or acquired) the search key and the acquired public key are transmitted to the information collection and utilization apparatus 3. The transmission is performed via the communication line 6.

In step S304, the key encryption unit 52 of the information collection and utilization device 3 receives the public key. Specifically, the key encryption unit 52 receives the algorithm name and the public key transmitted in step S303.

In step S305, the key encryption unit 52 encrypts the common key. Specifically, the key encryption unit 52 first acquires the algorithm name and the common key stored in step S301 from the common key database 55 (FIG. 8).
Second, using the algorithm corresponding to the algorithm name received in step S304 and the public key received in step S304, the algorithm name and common key acquired in “first” of step S305 are encrypted. To do.

In step S306, the key encryption unit 52 transmits the common key. Specifically, the key encryption unit 52 transmits the algorithm name and the common key encrypted in step S305 to the machine management apparatus 2 together with the information collection user ID. The transmission is performed via the communication line 6.

In step S307, the A / key decryption unit 23 of the machine management device 2 receives the common key. Specifically, the A / key decryption unit 23 receives the algorithm name and the common key transmitted in step S306 together with the information collection user ID.

In step S308, the A / key decryption unit 23 of the machine management device 2 decrypts the common key. Specifically, first, the A / key decryption unit 23 obtains the secret key of the record including the public key acquired in “first” in step S303 from the public key / private key database 34 (FIG. 6). get.
Second, the algorithm name and the common key received in step S307 are decrypted using the acquired secret key.
Third, a new record of the information collection user table 36 (FIG. 3B) of the common key database 31 is created, and the information collection user ID column 106, the algorithm column 107, and the common key column 108 are respectively stored. The information collection user ID, the name of the decrypted algorithm and the common key are stored.
Thereafter, the second processing procedure is terminated.

(Third processing procedure)
A third processing procedure will be described with reference to FIG. The third processing procedure is executed at a timing determined by the information collection user. For example, it is executed each time an information collection user (a worker) goes to the site where the managed machine 4 is installed and collects observation information.

In step S401, the random number generation unit 72 of the managed machine 4 generates a random number. Specifically, the random number generation unit 72 first generates a random number.
Secondly, the machine ID and the production number stored in advance in the auxiliary storage device 63 at the time of production of the managed machine 4 are acquired.
Third, it transmits random number generated, the acquired machine ID and serial number, without encrypting the machine management device 2 with mechanical holders ID. The transmission is performed via the communication line 5 (communication capacity is small).

In step S402, the random number matching unit 22 of the machine management device 2 receives a random number. Specifically, the random number matching unit 22 first receives the random number, the machine ID, the manufacturing number, and the machine owner ID transmitted in step S401.
Secondly, a new record of the random number database 32 (FIG. 4) is created, and the received machine owner ID, machine ID field 111, machine ID field 112, serial number field 113, and random number field 114 are respectively received. Machine ID, serial number and random number are stored.

In step S403, the A encryption unit 71 of the managed machine 4 encrypts the observation information. Specifically, the A encryption unit 71 firstly has a machine ID, serial number, part ID, temperature, pressure, position, and observation time stored in all records of the observation information database 74 (FIG. 7). (The collected information is collectively referred to as “observation information”).
Second, the algorithm name and the common key stored in step S203 are acquired from the auxiliary storage device 63.
Thirdly, the observation information acquired in “first” in step S403 and the random number generated in “first” in step S401 are the algorithm and step corresponding to the name of the algorithm acquired in “second” in step S403. Encryption is performed using the common key acquired in “second” in S403. Then, the encrypted observation information and random numbers are output via the communication device 64 to a recording medium such as a memory card. The recording medium is manually removed from the managed machine 4 by an information collection user (operator) and transported to the information collection and utilization apparatus 3.
Fourth, the observation information (in plain text) that is the object of encryption is deleted.

In step S404, the secondary information utilization unit 54 of the information collection and utilization device 3 acquires and transmits observation information. Specifically, the secondary information utilization unit 54 first accepts that the information collection user (the worker) inputs the recording medium via the communication device 44 (broken line in FIG. 2).
Second, the secondary information utilization unit 54 reads the observation information and the random number that are encrypted from the recording medium. Then, the information collection user ID, the read observation information, and the random number are transmitted to the machine management device 2. The transmission is performed via the communication line 6. At this time, the information collection and utilization apparatus 3 cannot know the contents of observation information and the contents of random numbers.

In step S405, the A / key decryption unit 23 of the machine management device 2 decrypts the observation information. Specifically, first, the A / key decryption unit 23 receives the information collection user ID, the encrypted observation information, and the random number transmitted in “second” in step S404.
Second, in the “second” in step S402, the machine owner ID, machine ID, serial number and random number stored in the new record of the random number database 32 (FIG. 4) are acquired (these are encrypted). Absent).
Third, the machine owner table 35 (FIG. 3A) of the common key database 31 is searched using the machine owner ID, machine ID, and manufacturing number acquired in “second” in step S405 as search keys. The algorithm name and common key of the corresponding record are acquired.

Fourth, using an algorithm and a common key corresponding to the name of the algorithm obtained in the "third" in step S405, decodes the observation information and the random number received.
Fifth, compares the random number decrypted, the random number acquired in the "second" in step S405, to ensure that they match. If the two match, it can be determined that the encrypted observation information and random number have been acquired through the correct route. If they do not match, for example, there is a possibility that the worker had entered into the communication device 44 erroneously recording medium for another managed machine 4. In this case, the A / key decryption unit 23 displays an error message on the output device 16 and the output device 46, and ends the third processing procedure.
Sixth, records of the observation information database 33 (FIG. 5) are newly created for the number of records included in the received observation information, and the decoded observation information is stored in the machine ID column 122 to the observation information column 128. The machine owner ID acquired in the “second” in step S405 is stored in the machine owner ID column 121.

In step S406, the secondary information generation unit 24 of the machine management device 2 generates secondary information. Specifically, the secondary information generation unit 24 first reads, for example, the records created in “Sixth” in step S405 of the records in FIG. Produce information that forms the basis for graphing changes. (For the graph, see FIG. 12 (a). Detailed description below). In FIG. 5, the observation times of the four records are all the same. However, this is merely an example, and when there are a plurality of records having a plurality of observation times for a specific part, it is assumed that the temperature change of the part is known in time series.
Second, an observation time, a machine owner ID, a machine ID, and a production number of a record whose temperature exceeds a predetermined threshold for the first time are acquired. And the information used as the base which displays a table | surface like FIG.12 (b) is produced | generated.
Information that is the basis of such graphs and tables (FIGS. 12A and 12B) is secondary information. The specific content of the secondary information is not limited to this example. For example, a temperature increase rate per unit time is calculated based on a plurality of observation times and a difference of “temperature” corresponding to these observation times, and it is detected that the temperature increase rate exceeds a predetermined threshold. Also good. Here, the temperature is described as an example, but “temperature” may be replaced with “pressure”. In short, the secondary information may be anything that can be processed based on the observation information.

In step S407, the B encryption unit 25 of the machine management device 2 encrypts the secondary information. Specifically, the B encryption unit 25 firstly uses the information collection user ID received in “first” of step S405 as a search key, and the information collection user table 36 ( 3B) is searched, and the algorithm name and common key of the corresponding record are acquired.
Second, the secondary information generated in step S406 is encrypted using the algorithm and the common key corresponding to the algorithm name acquired in “first” in step S407.
Third, the machine maker ID and the encrypted secondary information are transmitted to the information collection and utilization device 3. The transmission is performed via the communication line 6.

In step S408, the B decoding unit 53 of the information collection and utilization device 3 decodes the secondary information. Specifically, the B decrypting unit 53 first receives the machine manufacturer ID and the encrypted secondary information transmitted in “third” in step S407.
Second, the common key database 55 (FIG. 8) is searched using the received machine manufacturer ID as a search key, and the algorithm name and common key of the corresponding record are acquired.
Third, the received secondary information is decrypted using the algorithm and the common key corresponding to the name of the algorithm acquired in “second” in step S408.

In step S409, the secondary information utilization unit 54 of the information collection and utilization device 3 utilizes the secondary information. Specifically, the secondary information utilization unit 54 processes a graph or a table based on the decrypted secondary information and displays it on the output device 46.
FIG. 12A is an example of the graph. The horizontal axis of the graph is the date and time (observation time). The vertical axis of the graph represents the degree of abnormality (for example, temperature). A broken line 161 is a predetermined temperature threshold.
FIG. 12B is an example of the table. The secondary information utilization unit 54 sets the observation time, machine owner ID, machine ID, and manufacturing number acquired in “second” in step S406 to the abnormality detection date / time column 171, the machine owner ID column 172, and the machine ID column, respectively. 173 and the serial number column 174. The observation time in the abnormality detection date / time column 171 corresponds to the observation time indicated by “abnormality detection” in FIG.

In step S410, the managed machine 4 sends and receives services. Specifically, in the management target machine 4, first, an information collection user (operator) who visually recognizes the graph or table displayed in step S 409 performs an optimal service for the management target machine 4. Accept. For example, when the graph indicates a temperature abnormality, a service such as checking the parts of the cooling system is accepted.
Second, information gathering user (worker) accepts the return the recording medium such as a detached memory card in step S403.
Thereafter, the third processing procedure is terminated.

The present invention is not limited to the above-described embodiment, and can be modified without departing from the gist of the present invention.

DESCRIPTION OF SYMBOLS 1 Machine management system 2 Machine management apparatus 3 Information collection utilization apparatus 4

Management object machine

11, 41, 61 Central control apparatus (control part)
12, 42, 62 Main storage device (storage unit)
13, 43, 63 Auxiliary storage device (storage unit)
14, 44, 64

Communication device

15, 45, 65

Input device

16, 46, 66 Output device 21 A Common key generation unit 22 Random number matching unit 23 A / Key decryption unit 24 Secondary information generation unit 25 B Encryption unit 31 Common key database 32 Random number database 33 Observation information database 34 Public key / private key database 35 Machine owner table 36 Information collection user table 51 B Common key generation unit 52 Key encryption unit 53 B Decryption unit 54 Secondary information Utilization part 55 Common key database 67 Sensor 71 A Encryption part 72 Random number generation part 74 Observation information database

Claims

Managed machines that are the subject of management,
An information collection and utilization device that acquires observation information of the managed machine and uses secondary information generated based on the observation information;
A machine management device that generates the secondary information based on the observation information;
A machine management system comprising:
The machine management device and the managed machine are:
Storing and sharing a first common key for encrypting and decrypting the observation information;
The machine management device and the information collection and utilization device are:
A second common key for encrypting and decrypting the secondary information is shared and stored;
The managed machine is
Encrypting the observation information using the first common key;
The information collection and utilization device includes:
Receiving the input of the encrypted observation information, transmitting the received observation information to the machine management device;
The machine management device includes:
Decrypting the transmitted observation information using the first common key;
Generating the secondary information based on the decoded observation information;
Encrypting the generated secondary information using the second common key;
Sending the encrypted secondary information to the information collection and utilization device;
The information collection and utilization device includes:
Decrypting the transmitted secondary information using the second common key;
Using the decrypted secondary information to output information used when performing a service on the managed machine;
A machine management system characterized by
The machine management device includes:
Storing a public key for encrypting and decrypting the second common key and a secret key paired with the public key;
In response to a request from the information collection and utilization device, the public key is transmitted to the information collection and utilization device,
The information collection and utilization device includes:
Generating the second common key;
Encrypting the generated second common key using the transmitted public key;
Transmitting the encrypted second common key to the machine management device;
The machine management device includes:
Decrypting the transmitted second common key using the secret key;
The machine management system according to claim 1, wherein:
The managed machine is
Prior to encrypting the observation information using the first common key, generating a random number, and transmitting the generated random number to the machine management device without encryption;
When encrypting the observation information using the first common key, encrypting the generated random number using the first common key;
The information collection and utilization device includes:
When accepting the input of the encrypted observation information, accepting the input of the encrypted random number,
Sending the accepted encrypted random number to the machine management device;
The machine management device includes:
Decrypting the transmitted encrypted random number using the first common key;
Determining whether the decrypted random number matches the random number transmitted without encryption;
The machine management system according to claim 1, wherein:
Managed machines that are the subject of management,
Acquire observation information of the managed machine, in cooperation with an information collection and utilization device that uses secondary information generated based on the observation information,
A machine management device that generates the secondary information based on the observation information,
A first common key shared with the managed machine for encrypting and decrypting the observation information;
A second common key shared with the information collection and utilization device for encrypting and decrypting the secondary information;
A storage unit storing
When receiving the received observation information from the information collection and utilization device that has received the input of the observation information encrypted by the managed machine using the first common key,
Decrypting the transmitted observation information using the first common key;
Generating the secondary information based on the decoded observation information;
Encrypting the generated secondary information using the second common key;
A control unit for transmitting the encrypted secondary information to the information collection and utilization device;
A machine management device comprising:
The storage unit of the machine management device is
A public key for encrypting and decrypting the second common key and a secret key paired with the public key are stored;
The control unit of the machine management device is
In response to a request from the information collection and utilization device, the public key is transmitted to the information collection and utilization device,
Receiving from the information collection and utilization device a second common key generated by the information collection and utilization device and encrypted using the transmitted public key;
Decrypting the received second common key using the secret key;
The machine management device according to claim 4, wherein:
The control unit of the machine management device is
The managed machine receives a random number generated prior to encrypting the observation information using the first common key in an unencrypted state;
When the managed machine encrypts the observation information using the first common key, the random number encrypted using the first common key is converted into the encrypted observation information. And received via the information collection and utilization device,
Decrypting the received encrypted random number using the first common key;
Determining whether the decrypted random number matches the random number received in the unencrypted state;
The machine management device according to claim 4, wherein:
Managed machines that are the subject of management,
An information collection and utilization device that acquires observation information of the managed machine and uses secondary information generated based on the observation information;
A machine management device that generates the secondary information based on the observation information;
A machine management method for a machine management system comprising:
The machine management device and the managed machine are:
Storing and sharing a first common key for encrypting and decrypting the observation information;
The machine management device and the information collection and utilization device are:
A second common key for encrypting and decrypting the secondary information is shared and stored;
The managed machine is
Encrypting the observation information using the first common key;
The information collection and utilization device includes:
Receiving the input of the encrypted observation information, transmitting the received observation information to the machine management device;
The machine management device includes:
Decrypting the transmitted observation information using the first common key;
Generating the secondary information based on the decoded observation information;
Encrypting the generated secondary information using the second common key;
Sending the encrypted secondary information to the information collection and utilization device;
The information collection and utilization device includes:
Decrypting the transmitted secondary information using the second common key;
Using the decrypted secondary information to output information used when performing a service on the managed machine;
A machine management method characterized by the above.
The machine management device includes:
Storing a public key for encrypting and decrypting the second common key and a secret key paired with the public key;
In response to a request from the information collection and utilization device, the public key is transmitted to the information collection and utilization device,
The information collection and utilization device includes:
Generating the second common key;
Encrypting the generated second common key using the transmitted public key;
Transmitting the encrypted second common key to the machine management device;
The machine management device includes:
Decrypting the transmitted second common key using the secret key;
The machine management method according to claim 7, wherein:
The managed machine is
Prior to encrypting the observation information using the first common key, generating a random number, and transmitting the generated random number to the machine management device without encryption;
When encrypting the observation information using the first common key, encrypting the generated random number using the first common key;
The information collection and utilization device includes:
When accepting the input of the encrypted observation information, accepting the input of the encrypted random number,
Sending the accepted encrypted random number to the machine management device;
The machine management device includes:
Decrypting the transmitted encrypted random number using the first common key;
Determining whether the decrypted random number matches the random number transmitted without encryption;
The machine management method according to claim 7, wherein: