WO2023166980A1

WO2023166980A1 - Electronic equipment, information processing method, and program

Info

Publication number: WO2023166980A1
Application number: PCT/JP2023/005121
Authority: WO
Inventors: 立桑原
Original assignee: ソニーグループ株式会社
Priority date: 2022-03-01
Filing date: 2023-02-15
Publication date: 2023-09-07

Abstract

The present disclosure relates to electronic equipment, an information processing method, and a program capable of suppressing unauthorized intrusion regardless of the network environment to which the equipment is connected. A plurality of application services are provided, and an API gateway is provided as one application service thereof, and the API gateway accepts a communication request from an external communication partner, authenticates the communication partner, and authorizes communication between the communication partner and application service. The present disclosure can be applied to an information processing device, electronic equipment, information processing method, or a program, for example.

Description

Electronic device, information processing method, and program

TECHNICAL FIELD The present disclosure relates to an electronic device, an information processing method, and a program, and particularly relates to an electronic device, an information processing method, and a program capable of suppressing unauthorized intrusion regardless of the connected network environment. .

In recent years, electronic devices such as cameras and switchers used in television broadcasting stations have been connected to networks and used in network systems. Therefore, it is necessary to take measures to prevent unauthorized intrusion from the outside in those electronic devices. However, it has been difficult to take countermeasures for each application service provided by those electronic devices. Therefore, a method of using an external trust manager to authenticate and authorize communication has been devised (see, for example, Patent Document 1).

WO2007/077634

However, in the case of the method described in Patent Document 1, in order to prevent unauthorized intrusion into the device, it was necessary for the device to be connected to a network system having this trust manager.

The present disclosure has been made in view of this situation, and is intended to prevent unauthorized intrusion regardless of the connected network environment.

An electronic device according to one aspect of the present technology includes an information processing unit that provides a plurality of application services, the information processing unit provides an API (Application Program Interface) gateway as one of the application services, and the API gateway is an electronic device that receives a communication request from an external communication partner, authenticates the communication partner, and authorizes the communication between the communication partner and the application service.

An information processing method according to one aspect of the present technology provides a plurality of application services, provides an API (Application Program Interface) gateway as one of the application services, and the API gateway provides communication from an external communication partner. An information processing method for accepting a request, authenticating the communication partner, and authorizing the communication between the communication partner and the application service.

A program according to one aspect of the present technology causes a computer to function as an information processing unit that provides a plurality of application services, the information processing unit provides an API (Application Program Interface) gateway as one of the application services, The API gateway is a program that receives a communication request from an external communication partner, authenticates the communication partner, and authorizes the communication between the communication partner and the application service.

In the electronic device, information processing method, and program of one aspect of the present technology, a plurality of application services are provided, an API (Application Program Interface) gateway is provided as one of the application services, and an external is accepted, the communication partner is authenticated, and communication between the communication partner and the application service is authorized.

It is a figure which shows the main structural examples of an information processing system. 1 is a block diagram showing a main configuration example of an imaging device; FIG. FIG. 10 is a diagram illustrating an example of how an application service is accessed; FIG. 4 is a diagram illustrating an example of access to an application service via an API gateway; FIG. 6 is a flowchart for explaining an example of a flow of communication processing; FIG. 10 is a diagram showing an example of unauthorized access; FIG. 10 is a diagram showing an example of unauthorized access; FIG. 4 is a diagram for explaining separation of execution spaces; FIG. 4 is a diagram explaining a container; 1 is a diagram showing a main configuration example of an image processing system; FIG. It is a block diagram which shows the main structural examples of a computer.

Hereinafter, a form for carrying out the present disclosure (hereinafter referred to as an embodiment) will be described. The description will be given in the following order.
1. Documents, etc. that support technical content and technical terms 2 . API gateway for embedded devices 3 . Separation of execution space4. Application example 5. Supplementary note

<1. Documents, etc. that support technical content and technical terms>
The scope disclosed in the present technology is not limited to the contents described in the embodiments, but also the contents described in the following patent documents that are publicly known at the time of filing and the following patent documents that are referred to. It also includes the contents of other literature that has been published.

Patent Document 1: (mentioned above)

In other words, the content described in the above-mentioned patent documents and the content of other documents referred to in the above-mentioned patent documents are also the basis for determining the support requirements.

<2. API gateway for embedded devices >
<Information processing system>
FIG. 1 is a block diagram showing an example of the configuration of an information processing system, which is one mode of a system using electronic equipment to which the present technology is applied. As shown in FIG. 1 , the information processing system 100 has an imaging device 101 , a client device 102 and a control authority management server 103 . An information processing system 100 is a system in which a client device 102 remotely controls an imaging device 101 .

The imaging device 101 is an electronic device that captures an image of a subject and generates image data of a captured image. A client device 102 is a device that controls the imaging device 101 . The control authority management server 103 is a device that manages control authority for the imaging device 101 .

Although not shown, the imaging device 101 and the client device 102, as well as the client device 102 and the control right management server 103, are communicably connected to each other via a wired communication medium, a wireless communication medium, or both. there is Wired and wireless communication standards are arbitrary. For example, wired communication may be Ethernet (registered trademark), HDMI (High-Definition Multimedia Interface) (registered trademark), USB (Universal Serial Bus) (registered trademark), It may be other than that. Also, the wireless communication may be Wi-Fi (registered trademark), UWB (Ultra Wide Band), Bluetooth (registered trademark), or any other method. may These communication media are arbitrary and may be cables or networks. A network may include, for example, the Internet, a local area network, a wide area network, or the like. This network may include one or more networks. Also, the imaging device 101, the client device 102, and the control authority management server 103 may be connected to the same network.

In order to control the imaging device 101 , the client device 102 first receives control rights from the control rights management server 103 . Therefore, the client device 102 requests the control right of the application service from the control right management server 103 (arrow 111).

In response to the request, the control right management server 103 authenticates (performs ID authentication) the (user of) the client device 102 based on the registration information. If the client device 102 is authenticated as a legitimate right holder, the control right management server 103 authorizes the control right and issues control right information (token (permit)) to the client device 102 (arrow 112).

The client device 102 uses the control right information (token) to request desired control processing from (the application service of) the imaging device 101 (arrow 113).

The imaging device 101 authenticates the control right information (token) attached to the request, and if it is valid, performs imaging-related processing according to the control. After completing the processing, the imaging device 101 returns a control response to the client device 102 as a response to the request (arrow 114).

Thus, the client device 102 controls the imaging device 101 from the outside.

<Imaging device>
As described above, the imaging device 101 is an electronic device having a function of imaging a subject. In other words, the imaging device 101 is a built-in device having a configuration for realizing its imaging function. In this specification, an embedded device refers to a device in which the hardware necessary to drive/operate the device is pre-installed monolithically (integrally), making it difficult for the user to partition the device. .

FIG. 2 is a block diagram showing a main configuration example of the imaging device 101 in FIG. Note that FIG. 2 shows main components such as processing units and data flow, and the components shown in FIG. 2 are not limited to all. In other words, the imaging device 101 may have devices and processing units that are not shown as blocks in FIG. In addition, there may be data flows and processes that are not shown as arrows or the like in FIG.

As shown in FIG. 2, the imaging device 101 has an imaging unit 131, an information processing unit 132, a communication unit 133, a UI (User Interface) unit 141, a storage unit 142, and a drive 143.

The imaging unit 131 has an optical system such as a lens and an aperture, and an image sensor, and uses them to perform processing related to imaging of a subject. For example, the imaging unit 131 may be controlled by the information processing unit 132 to drive an optical system or an image sensor to capture an image of a subject and generate image data of the captured image. The imaging unit 131 may also supply the generated image data to the information processing unit 132 .

The information processing unit 132 has a CPU (Central Processing Unit), RAM (Random Access Memory), ROM (Read Only Memory), and the like. The CPU loads a program stored in the ROM or storage unit 142 into the RAM and executes it. Data necessary for the CPU to execute various processes may be stored in the RAM as appropriate. The information processing unit 132 performs processing for providing an application service by executing the application program in this manner. At that time, the information processing section 132 may acquire a control request supplied from the communication section 133 (client device 102) and execute processing according to the control.

The content of the processing (content of the application service) is arbitrary. For example, the information processing section 132 may control the imaging section 131, the communication section 133, the UI section 141, the storage section 142, the drive 143, and the like. Further, the information processing section 132 may perform image processing on image data from the imaging section 131 , and may supply the image data to the communication section 133 , the UI section 141 , the storage section 142 , or the drive 143 . Of course, processing other than these may be performed.

The communication unit 133 has a communication interface function and executes processing related to communication. For example, the communication unit 133 may use its communication interface function to communicate with another device (for example, the client device 102). For example, the communication unit 133 may supply the control request supplied from the client device 102 to the information processing unit 132 . Further, the communication unit 133 may transmit the information supplied from the information processing unit 132 to another device under the control of the information processing unit 132 .

The UI unit 141 has a device related to the user interface and executes processing related to the user interface. For example, the UI unit 141 may have input devices such as a keyboard, mouse, microphone, touch panel, and input terminals. Then, under the control of the information processing section 132 , the UI section 141 may receive information input from the user or an external device using the input device, and supply the received information to the information processing section 132 . Also, the UI unit 141 may have output devices such as a display, a speaker, and an output terminal. Then, under the control of the information processing unit 132, the UI unit 141 uses the output device to supply the information supplied from the information processing unit 132 to other devices, or to present the information to the user or the like as an image or sound. may

The storage unit 142 has an arbitrary storage medium such as a hard disk, RAM disk, non-volatile memory, etc., and stores information using the storage medium. For example, the storage unit 142 may store the information supplied from the information processing unit 132 in its storage medium under the control of the information processing unit 132 . Further, the storage unit 142 may read information stored in a storage medium and supply the information to the information processing unit 132 under the control of the information processing unit 132 .

The drive 143 is a device that executes processing related to reading and writing information from the removable recording medium 144 attached to it. For example, the drive 143 may drive the removable recording medium 144 under the control of the information processing section 132 , read information recorded on the removable recording medium 144 , and supply the information to the information processing section 132 . Further, the drive 143 may drive the removable recording medium 144 under the control of the information processing section 132 and write the information supplied from the information processing section 132 to the removable recording medium 144 .

The removable recording medium 144 is any removable recording medium that can be attached to and detached from the drive 143 . For example, the removable recording medium 144 may be a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or others. good.

<API Gateway>
FIG. 3 is a diagram illustrating an example of how an application service provided by the information processing unit 132 is accessed. In the example of FIG. 3, the information processing unit 132 provides application services 152-1 to 152-3. Each application service is referred to as an application service 152 when it is not necessary to distinguish between them. The application service 152 is, for example, a service realized by the information processing unit 132 executing processing using software composed of an application program and information necessary for executing the program such as a library. The application services 152-1 to 152-3 are different services. As in this example, information processor 132 may provide multiple application services 152 .

The client device 102 controls and monitors the processing of the imaging device 101 via the network 151 . In that case, the client device 102 accesses the application service 152 provided by the information processing unit 132 and requests control and provision of information. Since the application service 152 is thus accessed from the outside, it is necessary to take measures to prevent unauthorized intrusion. In particular, in recent years, the imaging apparatus 101 has been connected to a larger scale network, so the risk of unauthorized intrusion is increasing, and countermeasures against it have become more important.

In addition, the imaging device 101 has been connected to a larger network, and along with this, the network functions (services provided to the outside) provided by the imaging device 101 have become sophisticated and diversified. Therefore, the network function is realized by using a plurality of application services 152 . As in the example of FIG. 3, when using a plurality of application services 152, conventionally, the client device 102 individually accesses each application service 152 using its own API.

Therefore, the developer had to take measures to prevent unauthorized intrusion for each application service 152. In other words, the developer needs to develop, evaluate, and update application programs and libraries for each application service 152 so as to eliminate so-called security holes. Therefore, there is a risk that the work for such countermeasures will become more sophisticated and complicated.

For example, if even one of a plurality of application services 152 has insufficient countermeasures and the security level against unauthorized intrusion is low, that application service 152 is used as a stepping stone to allow intrusion into other application services 152. There is a risk of In other words, if the security levels of the application services 152 vary, the security level of the entire imaging apparatus 101 is the lowest level among the security levels of the application services 152 . In other words, the security level of all application services 152 must be set to a high level. Therefore, as the number of application services 152 provided by the information processing unit 132 increases, the cost of developing and evaluating countermeasures may increase.

In addition, it is important to take measures to curb unauthorized intrusions as early as possible. The longer the countermeasures are delayed, the greater the risk of unauthorized intrusion. As the number of application services 152 provided by the information processing unit 132 increases, the time required for development and evaluation increases, and the risk of unauthorized intrusion increases.

Furthermore, as in the case of using a plurality of application services 152 as described above, the more complex the mechanism for providing the application services 152, the greater the cost of developing and evaluating countermeasures to suppress unauthorized intrusions. and the time required for evaluation may increase.

Therefore, with such a method, it may be difficult to take appropriate measures to reduce the risk of unauthorized intrusion. Therefore, for example, as described in Patent Document 1, a method of using an external trust manager to authenticate and authorize communication has been devised. However, in the case of this method, in order to suppress unauthorized intrusion into the device, the device had to be connected to a network system having this trust manager. In other words, there is a risk that the versatility of use of the equipment will be reduced.

Therefore, as shown in FIG. 4, the information processing unit 132 provides a plurality of application services 152, and provides an API (Application Program Interface) gateway 161 as one of the application services 152. Communication between the other application service 152 and the outside of the imaging apparatus 101 is performed via the API gateway 161 .

The API gateway 161 is one of the application services 152, and performs processing related to authentication, authorization, and routing regarding communication between the outside of the imaging device 101 and the application service 152. For example, the API gateway 161 may accept a communication request from a communication partner (for example, the client device 102) external to the imaging device 101. FIG. API gateway 161 may also perform authentication of its communication partner (eg, client device 102 or its user). The API gateway 161 may also authorize communication between the communication partner and the application service 152 if the communication partner is authenticated. The API gateway 161 may also supply information sent from the communication partner to the application service 152 if the communication is authorized.

In other words, access to all application services 152 from outside the imaging device 101 is performed via this API gateway 161 . Therefore, the developer can improve the security level of all application services 152 by taking measures to suppress unauthorized access to the API gateway 161 . In other words, developers can more easily take measures to suppress unauthorized intrusions. Therefore, it is possible to suppress an increase in costs for developing and evaluating countermeasures for suppressing unauthorized intrusions. Also, countermeasures for suppressing unauthorized intrusions can be taken earlier. Therefore, it is possible to suppress an increase in the risk of unauthorized intrusion.

By providing this API gateway 161 in the imaging device 101, the imaging device 101 can prevent unauthorized access regardless of the network environment to which it is connected.

　The method of authenticating the communication partner is arbitrary. For example, the API gateway 161 may authenticate the client device 102 (or its user) using control right information (token) issued by the control right management server 103 as shown in FIG. API gateway 161 may also authenticate client device 102 (or its user) using an account or password. Also, the method of authorization for communication is arbitrary.

In addition, the API gateway 161 may also perform processing related to communication encryption and decryption. For example, API gateway 161 may decrypt encrypted information sent from client device 102 and supply the decrypted information to application service 152 . API gateway 161 may also encrypt information supplied from application service 152 and transmit the encrypted information to client device 102 . This encryption/decryption method is arbitrary. For example, it may be a common key encryption method such as DES (Data Encryption Standard) or AES (Advanced Encryption Standard), or a hash function method such as MD5 (Message Digest Algorithm 5) or SHA (Secure Hash Algorithm). Alternatively, a public key encryption method such as RSA (Rivest-Shamir-Adleman cryptosystem) or DSA (Digital Signature Algorithm) may be used. By doing so, the developer can more easily and earlier take measures to suppress unauthorized intrusions related to encryption/decryption.

In addition, the API gateway 161 may also perform processing related to communication filtering. For example, the API gateway 161 may detect malware (malicious programs) such as computer viruses, worms, and Trojan horses, and block (interrupt) communications containing such information. By performing such filtering, the API gateway 161 can block (interrupt) unauthorized communication (information) sent from a legitimate communication partner. In other words, the API gateway 161 can pass more secure communications (information). In other words, the API gateway 161 can improve the security level against unauthorized intrusion of the imaging device 101 .

<Communication processing flow>
An example of the flow of communication processing executed in the information processing system 100 of FIG. 1 will be described with reference to the flowchart of FIG.

When the communication process starts, the client device 102 requests the control right of the imaging device 101 from the control right management server 103 in step S111.

In step S121, the control right management server 103 accepts the request. In step S<b>122 , the control right management server 103 confirms the requested control, that is, the right related to the control of the imaging device 101 by (the user of) the client device 102 . For example, the control right management server 103 compares the requester's information included in the request (that is, information about the client device 102) with pre-registered information, so that the requester has the right to control it. It may be determined whether It may also be determined whether or not the requestor has the right to perform the control by having (the user of) the client device 102 log in (provide an ID and password). If it is determined that (the user of) the client device 102 has the right to perform the control, the control right management server 103 sends control right information to the client device 102 in step S123 to allow the requested control right. issue. For example, this control rights information may include a token (permit).

The client device 102 acquires the control right information in step S112. In step S113, the client apparatus 102 requests control of the imaging apparatus 101 using the acquired control right information. That is, the client apparatus 102 transmits control right information (token) to the imaging apparatus 101 together with the request (included in the request).

In step S131, the API gateway 161 of the imaging device 101 acquires the request (and control right information) via the communication unit 133. In step S132, the API gateway 161 confirms the acquired control rights information. That is, the API gateway 161 authenticates the requesting client device 102 (or its user) using the control right information (token or the like). If the client device 102 is authenticated as a valid communication partner, the API gateway 161 approves the control request sent from the client device 102 in step S133 and supplies it to the application service 152 that is the request destination.

The application service 152, which is the request destination, acquires the control request in step S141. In step S142, the application service 152 performs control according to the request. When the control process ends, the application service 152 returns the control result to the API gateway 161 as a response to the request in step S143. That is, the application service 152 responds to the API gateway 161 with the control result.

The API gateway 161 acquires the response in step S134. Upon obtaining the response, the API gateway 161 returns a control result to the client device 102 as a response to the request in step S135. That is, the API gateway 161 responds to the client device 102 with the control result.

The client device 102 acquires the response in step S114. When step S114 ends, the communication process ends.

By executing each process in this way, it is possible to take measures to prevent unauthorized intrusion more easily and earlier. Therefore, it is possible to suppress an increase in the risk of unauthorized intrusion. Then, the API gateway 161 in the imaging device 101 executes the processing as described above, so that the imaging device 101 can suppress unauthorized intrusion regardless of the network environment to which it is connected.

<3. Separation of Execution Space>
<Application service execution space>
<2. embedded device API gateway>, when the imaging device 101 is provided with the API gateway 161, if the API gateway 161 is simply provided, all the application services 152 including the API gateway 161 exist on the same network. . All application services 152 including the API gateway 161 exist on the same execution space.

When all the application services 152 including the API gateway 161 exist on the same network, for example, like the arrow 171 in FIG. If so, it may access application services 152-3). Therefore, it may not be possible to prevent unauthorized access.

Also, the API gateway 161 may be vulnerable to unauthorized intrusion. As in the example shown in FIG. 7, when the API gateway 161 is hijacked by exploiting the vulnerability, if all the application services 152 including the API gateway 161 exist on the same execution space, the API gateway 161 , an attack on the application service 152 (arrow 191) and unauthorized access to the confidential information 182 (arrow 192) are possible via the functions of the OS (Operating System) 181 and the like. Therefore, it may not be possible to prevent unauthorized access.

<Separation of execution space for each application service>
Therefore, the information processing unit 132 may form an execution space for each application service 152 as in the example shown in FIG. In the example of FIG. 8, API gateway 161 is running in execution space 201-1. Also, the application service 152-1 is executed in the execution space 201-2. Also, application service 152-2 is running in execution space 201-3. Application service 152-3 is also running in execution space 201-4. The execution spaces 201-1 to 201-4 are different execution spaces. Hereinafter, the execution spaces 201-1 to 201-4 will be referred to as the execution space 201 when there is no need to distinguish them.

<Network Separation>
By separating the execution space 201 for each application service 152 in this way, it is possible to separate namespaces and limit the execution authority of administrators and users. For example, the information processing unit 132 may separate a network that connects the API gateway 161 and other application services 152 from an external network (for example, the network 151). For example, the information processing unit 132 may construct a DMZ (DeMilitarized Zone) using the execution space 201-1 and execute the API gateway 161 in the DMZ. Then, the information processing unit 132 may separate the network inside the execution space 201-1 (the network between the execution spaces 201) from the network outside the execution space 201-1 (the network 151, etc.).

By doing so, since the network inside the execution space 201-1 is not exposed to the outside, direct access from the external network 151 to the application service 152 other than the API gateway 161 (access not via the API gateway 161) is possible. ) can be suppressed.

In addition, by doing so, it is possible to develop the external interface providing part and the internal function providing part separately. Therefore, for example, the internal function providing part applies relatively low security rules to facilitate hardware access, and the external interface providing part individually applies strong security rules to protect against network threats. It is also possible to take more flexible security measures depending on the situation. In addition, it is possible to suppress an increase in development costs by sharing an external interface part among a plurality of products.

<Restrictions on execution authority>
Further, the information processing unit 132 may limit execution authority for the execution space 201 so that access to the application service 152 is limited to cases through a predetermined interface. For example, access from the OS 181 and access to the OS 181 may be restricted. By doing so, unauthorized access via the OS 181 can be suppressed. For example, even if an unauthorized program is executed in the execution space 201-1, the influence on the OS 181 and other application services 152 can be suppressed.

<Realization of execution space>
The method of realizing such execution space 201 is arbitrary. For example, the information processing unit 132 may form an execution space using containers. That is, the information processing unit 132 may create a container for each application service. This container is a function (execution environment) that stores information necessary for providing the application service 152 and executes processing for providing the application service 152 using a common operating system. Information required to provide the application service 152 is arbitrary. For example, application programs, libraries, and the like may be included.

FIG. 9 shows a main configuration example of the information processing unit 132 in that case. In this example, the information processing section 132 is formed with a container 211-1 and a container 211-2. Hereinafter, the container 211-1 and the container 211-2 are referred to as the container 211 when there is no need to distinguish between them. A container 211 is formed for each application service 152 . In other words, a plurality of containers 211 are formed in the information processing unit 132, and each container 211 stores an application program, a library, and the like necessary for realizing the corresponding application service 152. .

For example, the container 211-1 forms an execution space for executing the API gateway 161, and stores the network I/F 221 and library 222 as information necessary for providing the API gateway 161. A network I/F 221 is an application program for the API gateway 161 . The library 222 is a library necessary for executing the program, and its contents are arbitrary. For example, it may be a library related to encryption such as OpenSSL.

For example, the container 211-2 forms an execution space for executing other application services 152, and stores applications 223 and libraries 224 as information necessary for providing the application services 152. Application 223 is the application program of the application service 152 . The library 224 is a library necessary for executing the program, and its contents are arbitrary. For example, it may be a library related to encryption such as OpenSSL.

Using such containers, for example, the communication path may be limited between the containers 211-1 and 211-2. In other words, the container 211-2 of the application service 152 other than the API gateway 161 may communicate with the outside only through the container 211-1 of the API gateway 161. FIG. In other words, the container 211-2 can only perform communication passing through the paths indicated by the double arrow 241 and the double arrow 242. FIG. By doing so, it is possible to prevent the container 211-2 from being used as a stepping stone to the external network (network 151).

Also, access from the container 211-1 to the system such as the OS 181 may be restricted. In other words, access between the container 211-1 indicated by the dotted line frame 243 and the OS 181 may be restricted. By doing so, even if an unauthorized program is executed in the container 211-1, the influence on the OS 181, the container 211-2, etc. can be suppressed.

Also, the configuration of the library may be independent for each container 211. That is, all the libraries required for each container 211 may be stored in that container 211 . By doing so, the library can be updated for each container 211 . For example, even if the same library is used in a plurality of containers 211 , not all the information in the library is used in all the containers 211 . Therefore, for example, even if a problem occurs in the library, there may be containers 211 that are not affected by the problem. Therefore, by storing the library in each container 211, it is possible to update the library only for the container that needs to be updated. Therefore, when developing update information, it is possible to omit evaluation of unnecessary application services (application services not affected by defects). This makes it possible to respond more quickly.

Note that the information processing unit 132 may form an execution space by forming a virtual machine instead of forming a container. That is, the information processing unit 132 may create a virtual machine for each application service 152 . A virtual machine is a function (execution environment) that has a separate operating system and information necessary to provide the application service 152, and executes processing for providing the application service 152 using the separate operating system. Even if a virtual machine is applied in this way, the information processing unit 132 can form an execution space for each application service and realize the same functions as in the case of the container described above, as in the case of the container described above. can. Therefore, the imaging apparatus 101 can obtain the same effect as the container described above even if a virtual machine is applied.

Further, the information processing unit 132 may have hardware (CPU, ROM, RAM, etc.) that executes processing for providing the application service 152 for each application service 152 . In this case as well, the information processing unit 132 can form an execution space for each application service and implement the same functions as in the case of the container described above. . Therefore, in this case, the imaging device 101 can also obtain the same effects as in the container described above.

<4. Application example>
This technology can be applied to any electronic device, and the electronic device to which this technology is applied can be applied to any system. For example, the technology may be applied to an electronic device used in an image processing system used in a broadcasting station or the like. FIG. 10 is a diagram showing a main configuration example of the image processing system.

An image processing system 300 shown in FIG. 10 is an image processing system used in a broadcasting station or the like. As shown in FIG. 10, the image processing system 300 has electronic devices such as a broadcast controller 311, an imaging device 321, a switcher 322, an editing server 323, and a broadcasting device 324. The broadcast controller 311 and the imaging device 321 to broadcasting device 324 are connected via a network 320 so as to be able to communicate with each other. Each of the broadcast controller 311 and the imaging device 321 to broadcasting device 324 is a built-in device having a configuration for realizing a predetermined function.

The broadcast controller 311 is a device that accesses the imaging device 321 to the broadcasting device 324 via the network 320 and controls and monitors them.

The imaging device 321 is a device that performs processing related to imaging of a subject. For example, the imaging device 321 may capture an image of a subject and generate image data of the captured image under the control of the broadcast controller 311 . In addition, the imaging device 321 may supply the image data of the generated captured image to other devices such as the switcher 322, the editing server 323, and the broadcasting device 324 under the control of the broadcast controller 311. FIG.

The switcher 322 is a device that performs processing related to switching of image data. For example, the switcher 322 may acquire image data supplied from other devices such as the imaging device 321 and the editing server 323 under the control of the broadcast controller 311 . The switcher 322 may also acquire image data supplied from the editing server 323 under the control of the broadcast controller 311 . The switcher 322 may also supply the image data to other devices such as the editing server 323 and the broadcasting equipment 324 under the control of the broadcast controller 311 . The switcher 322 may also select (switch) image data to be supplied under the control of the broadcast controller 311 .

The editing server 323 is a device that performs processing related to image editing. For example, the editing server 323 may acquire image data supplied from other devices such as the imaging device 321 and the switcher 322 under the control of the broadcast controller 311 . The editing server 323 may also edit the acquired image data under the control of the broadcast controller 311 . The editing server 323 may also supply the image data to other devices such as the switcher 322 and the broadcasting equipment 324 under the control of the broadcast controller 311 .

The broadcasting equipment 324 performs processing related to image broadcasting and the like. For example, the broadcasting device 324 may acquire image data supplied from other devices such as the imaging device 321 to the editing server 323 under the control of the broadcast controller 311 . Also, the broadcasting device 324 may broadcast or distribute the acquired image data under the control of the broadcast controller 311 .

In the image processing system 300 that exchanges image data in this manner, the broadcast controller 311 accesses the imaging device 321 through the broadcasting device 324 via the network 320 for control and monitoring. In other words, the imaging device 321 to the broadcasting device 324 are accessed from the outside (broadcast controller 311) via the network 320. FIG. By applying the present technology to the electronic devices (imaging device 321 to broadcasting device 324) of such an image processing system 300, developers of these electronic devices can achieve <2. API Gateway for Embedded Devices> and <3. Separation of Execution Spaces> above can be obtained.

Although one broadcast controller 311 and one imaging device 321 to one broadcasting device 324 are provided in FIG. 10, the number of each device is arbitrary. The image processing system 300 may have multiple broadcast controllers 311 . Also, the image processing system 300 may have a plurality of imaging devices 321 . Also, the image processing system 300 may have a plurality of switchers 322 . Also, the image processing system 300 may have a plurality of editing servers 323 , and the image processing system 300 may have a plurality of broadcasting devices 324 . Of course, the image processing system 300 may have electronic equipment other than the electronic equipment shown in FIG.

The network 320 is configured by any network. For example, the network 320 may be composed of a single network, or may be composed of a plurality of networks. Also, the network 320 may be configured by a wired communication network, may be configured by a wireless communication network, or may be configured by both.

The scale of this network 320 is arbitrary, and the scale of the image processing system 300 is also arbitrary. For example, the image processing system 300 may be composed of electronic devices installed in one studio and a network 320 connecting them. Further, the image processing system 300 may be configured by electronic devices installed in a plurality of studios in one broadcasting station, or by a network 320 that connects the electronic devices in the studios or between the studios. Further, the image processing system 300 includes electronic devices installed in a plurality of studios of a plurality of broadcasting stations, a network 320 that connects electronic devices in the studios, studios, broadcasting stations, and the like. good too. Further, the image processing system 300 may be configured by electronic devices installed at the broadcasting station and the relay destination, and a network 320 connecting the electronic devices and the broadcasting station and the relay destination. In addition, the image processing system 300 includes electronic devices installed at a broadcasting station and a plurality of relay destinations, and a network 320 that connects between these electronic devices, between relay destinations, between the broadcasting station and relay destinations, and the like. may be The network 320 may also be connected to computers in server rooms, data centers, and the like.

Note that the broadcast controller 311 and the imaging device 321 to broadcasting device 324 can be applied to the image processing system 300 and network 320 having various configurations as described above. In other words, by applying the present technology, the electronic device (or embedded device) can suppress unauthorized intrusion regardless of the configurations of the image processing system 300 and network 320 .

<5. Note>
<Computer>
The series of processes described above can be executed by hardware or by software. When executing a series of processes by software, a program that constitutes the software is installed in the computer. Here, the computer includes, for example, a computer built into dedicated hardware and a general-purpose personal computer capable of executing various functions by installing various programs.

For example, in FIG. 2, the program executed by the imaging device 101 may be recorded in a removable recording medium 144 such as a package medium and applied. In that case, the program may be read from the removable recording medium 144 attached to the drive 143 and installed in the storage section 142 via the information processing section 132 .

In addition, this program may be provided via any wired or wireless transmission medium, such as local area networks, the Internet, digital satellite broadcasting, and the like. In that case, the program may be received by the communication unit 914 and installed in the storage unit 142 via the information processing unit 132 .

Alternatively, this program may be installed in advance in the ROM within the information processing unit 132, the storage unit 142, or both.

FIG. 11 is a block diagram showing an example of the hardware configuration of a computer that executes the series of processes described above by a program.

In a computer 900 shown in FIG. 11, a CPU (Central Processing Unit) 901, a ROM (Read Only Memory) 902, and a RAM (Random Access Memory) 903 are interconnected via a bus 904.

An input/output interface 910 is also connected to the bus 904 . An input unit 911 , an output unit 912 , a storage unit 913 , a communication unit 914 and a drive 915 are connected to the input/output interface 910 .

The input unit 911 is composed of, for example, a keyboard, mouse, microphone, touch panel, input terminals, and the like. The output unit 912 includes, for example, a display, a speaker, an output terminal, and the like. The storage unit 913 is composed of, for example, a hard disk, a RAM disk, a nonvolatile memory, or the like. The communication unit 914 is composed of, for example, a network interface. A drive 915 drives a removable recording medium 921 such as a magnetic disk, optical disk, magneto-optical disk, or semiconductor memory.

In the computer configured as described above, the CPU 901 loads, for example, a program stored in the storage unit 913 into the RAM 903 via the input/output interface 910 and the bus 904 and executes it. As a result, the series of processes described above are performed. Data necessary for the CPU 901 to execute various processes may be stored in the RAM 903 as appropriate.

A program executed by a computer may be applied by being recorded in a removable recording medium 921 such as a package medium, for example. In that case, the program may be read from removable recording medium 921 attached to drive 915 and installed in storage unit 913 via input/output interface 910 .

In addition, this program may be provided via any wired or wireless transmission medium, such as local area networks, the Internet, digital satellite broadcasting, and the like. In that case, the program may be received by the communication unit 914 and installed in the storage unit 913 via the input/output interface 910 .

Alternatively, this program may be installed in the ROM 902 or the storage unit 913 or both in advance.

<Application target of this technology>
This technology can be applied to any configuration. For example, the present technology can be applied to various electronic devices. For example, the present technology is <2. API Gateway for Embedded Device>, <3. Separation of execution space>, <4. Application Examples> is not limited to the examples of the electronic devices (imaging device, switcher, editing server, broadcasting device, etc.) described above, but may be applied to any electronic device (embedded device). For example, the present technology may be applied to recorders, television receivers, and the like that record video content. Also, an electronic device (embedded device) to which the present technology is applied may be a device other than a device that processes video content. For example, it may be a device that processes still image content, a device that processes audio content, or a device that processes multiple types of content. Also, the present technology may be applied to electronic devices (embedded devices) other than devices that process content. For example, the present technology may be applied to a device that controls driving of a predetermined mechanism.

In addition, for example, the present technology includes a processor (e.g., video processor) as a system LSI (Large Scale Integration), etc., a module (e.g., video module) using a plurality of processors, etc., a unit (e.g., video unit) using a plurality of modules, etc. Alternatively, it can be implemented as a part of the configuration of the device, such as a set (for example, a video set) in which other functions are added to the unit.

In this specification, a system means a set of multiple components (devices, modules (parts), etc.), and it does not matter whether all the components are in the same housing. Therefore, a plurality of devices housed in separate housings and connected via a network, and a single device housing a plurality of modules in one housing, are both systems. .

<Fields and applications where this technology can be applied>
Systems, devices, processing units, etc. to which this technology is applied can be used in any field, such as transportation, medical care, crime prevention, agriculture, livestock industry, mining, beauty, factories, home appliances, weather, and nature monitoring. . Moreover, its use is arbitrary.

<Others>
Embodiments of the present technology are not limited to the above-described embodiments, and various modifications are possible without departing from the gist of the present technology.

For example, a configuration described as one device (or processing unit) may be divided and configured as a plurality of devices (or processing units). Conversely, the configuration described above as a plurality of devices (or processing units) may be collectively configured as one device (or processing unit). Further, it is of course possible to add a configuration other than the above to the configuration of each device (or each processing unit). Furthermore, part of the configuration of one device (or processing unit) may be included in the configuration of another device (or other processing unit) as long as the configuration and operation of the system as a whole are substantially the same. .

Also, for example, the above-described program may be executed on any device. In that case, the device should have the necessary functions (functional blocks, etc.) and be able to obtain the necessary information.

Also, for example, each step of one flowchart may be executed by one device, or may be executed by a plurality of devices. Furthermore, when one step includes a plurality of processes, the plurality of processes may be executed by one device, or may be shared by a plurality of devices. In other words, a plurality of processes included in one step can also be executed as processes of a plurality of steps. Conversely, the processing described as multiple steps can also be collectively executed as one step.

Further, for example, a computer-executed program may be configured such that the processing of the steps described in the program is executed in chronological order according to the order described in this specification, in parallel, or when calls are executed. It may also be executed individually at necessary timings such as when it is interrupted. That is, as long as there is no contradiction, the processing of each step may be executed in an order different from the order described above. Furthermore, the processing of the steps describing this program may be executed in parallel with the processing of other programs, or may be executed in combination with the processing of other programs.

Also, for example, multiple technologies related to this technology can be implemented independently as long as there is no contradiction. Of course, it is also possible to use any number of the present techniques in combination. For example, part or all of the present technology described in any embodiment can be combined with part or all of the present technology described in other embodiments. Also, part or all of any of the techniques described above may be implemented in conjunction with other techniques not described above.

Note that the present technology can also take the following configuration.
(1) comprising an information processing unit that provides a plurality of application services;
The information processing unit provides an API (Application Program Interface) gateway as one of the application services,
The API gateway receives a communication request from an external communication partner, authenticates the communication partner, and authorizes the communication between the communication partner and the application service.
(2) The electronic device according to (1), wherein the API gateway further executes processing related to encryption and decryption of the communication.
(3) The electronic device according to (1) or (2), wherein the API gateway further executes processing related to filtering of the communication.
(4) The electronic device according to any one of (1) to (3), wherein the information processing unit forms an execution space for each application service.
(5) The information processing unit forms a container for each application service,
(4) The electronic device according to (4), wherein the container stores information necessary for providing the application service, and executes processing for providing the application service using a common operating system.
(6) The information processing unit forms a virtual machine for each application service,
(4), wherein the virtual machine has a separate operating system and information necessary for providing the application service, and uses the separate operating system to perform processing for providing the application service. Electronics.
(7) The electronic device according to (4), wherein the information processing unit includes hardware for executing processing for providing the application service for each application service.
(8) The electronic device according to any one of (4) to (7), wherein the information processing unit separates a network connecting the API gateway and the application service from an external network.
(9) The electronic device according to any one of (4) to (8), wherein the information processing unit restricts execution authority to the execution space so as to limit access to the application service to only through a predetermined interface. device.
(10) The electronic device is monolithically provided in advance with the hardware necessary to operate the electronic device, and is an embedded device that is difficult to be divided by the user. electronics.
(11) provide multiple application services;
providing an API (Application Program Interface) gateway as one of the application services;
The API gateway receives a communication request from an external communication partner, authenticates the communication partner, and authorizes the communication between the communication partner and the application service.
(12) The information processing method according to (11), wherein the API gateway further executes processing related to filtering of the communication.
(13) The information processing method according to (11) or (12), wherein an execution space is formed for each application service.
(14) The information processing method according to (13), wherein a network connecting the API gateway and the application service is separated from an external network.
(15) The information processing method according to (13) or (14), wherein execution authority for the execution space is restricted so that access to the application service is limited to cases through a predetermined interface.
(16) causing the computer to function as an information processing unit that provides a plurality of application services;
The information processing unit provides an API (Application Program Interface) gateway as one of the application services,
A program for causing the API gateway to receive a communication request from an external communication partner, authenticate the communication partner, and authorize the communication between the communication partner and the application service.
(17) The program according to (16), wherein the API gateway further executes processing related to filtering of the communication.
(18) The program according to (16) or (17), wherein the information processing unit forms an execution space for each of the application services.
(19) The program according to (18), wherein the information processing unit separates a network connecting the API gateway and the application service from an external network.
(20) The program according to (18) or (19), wherein the information processing unit restricts execution authority to the execution space so that access to the application service is limited to access via a predetermined interface.

100 information processing system, 101 imaging device, 102 client device, 103 control right management server, 131 imaging unit, 132 information processing unit, 133 communication unit, 141 UI unit, 142 storage unit, 143 drive, 144 removable recording medium, 151 network , 152 Application Service, 161 API Gateway, 181 OS, 182 Confidential Information, 201 Execution Space, 211 Container, 221 Network I/F, 222 Library, 223 Application, 224 Library, 300 Image Processing System, 311 Broadcast Controller, 320 Network, 321 imaging device, 322 switcher, 323 editing server, 324 broadcasting equipment, 900 computer

Claims

Equipped with an information processing unit that provides multiple application services,
The information processing unit provides an API (Application Program Interface) gateway as one of the application services,
The API gateway receives a communication request from an external communication partner, authenticates the communication partner, and authorizes the communication between the communication partner and the application service.
The electronic device according to Claim 1, wherein said API gateway further executes processing relating to encryption and decryption of said communication.
The electronic device according to claim 1, wherein the API gateway further executes processing related to filtering of the communication.
The electronic device according to claim 1, wherein the information processing unit forms an execution space for each application service.
The information processing unit forms a container for each application service,
5. The electronic device according to claim 4, wherein said container stores information necessary for providing said application service, and executes processing for providing said application service using a common operating system.
The information processing unit forms a virtual machine for each application service,
5. The virtual machine according to claim 4, wherein the virtual machine has a separate operating system and information necessary for providing the application service, and uses the separate operating system to execute processing for providing the application service. Electronics.
5. The electronic device according to claim 4, wherein the information processing unit has hardware for executing processing for providing the application service for each of the application services.
The electronic device according to claim 4, wherein the information processing unit separates a network connecting the API gateway and the application service from an external network.
5. The electronic device according to claim 4, wherein the information processing unit restricts execution authority for the execution space so as to limit access to the application service via a predetermined interface.
2. The electronic device according to claim 1, wherein the electronic device is a built-in device in which the hardware necessary for operating the electronic device is monolithically provided in advance and it is difficult for a user to divide the electronic device.
provide multiple application services,
providing an API (Application Program Interface) gateway as one of the application services;
The API gateway receives a communication request from an external communication partner, authenticates the communication partner, and authorizes the communication between the communication partner and the application service.
12. The information processing method according to claim 11, wherein said API gateway further executes processing related to filtering of said communication.
The information processing method according to claim 11, wherein an execution space is formed for each application service.
14. The information processing method according to claim 13, wherein a network connecting said API gateway and said application service is separated from an external network.
14. The information processing method according to claim 13, further comprising restricting execution authority for said execution space so as to limit access to said application service to cases through a predetermined interface.
causing the computer to function as an information processing unit that provides multiple application services;
The information processing unit provides an API (Application Program Interface) gateway as one of the application services,
A program for causing the API gateway to receive a communication request from an external communication partner, authenticate the communication partner, and authorize the communication between the communication partner and the application service.
17. The program according to claim 16, wherein said API gateway further executes processing relating to filtering of said communication.
17. The program according to claim 16, wherein said information processing unit forms an execution space for each of said application services.
19. The program according to claim 18, wherein said information processing unit separates a network connecting said API gateway and said application service from an external network.
19. The program according to claim 18, wherein said information processing unit restricts execution authority for said execution space so as to limit access to said application service via a predetermined interface.