WO2023233487A1

WO2023233487A1 - Information processing device, search method, and search program

Info

Publication number: WO2023233487A1
Application number: PCT/JP2022/022003
Authority: WO
Inventors: 楊鐘本; 良彰中嶋
Original assignee: 日本電信電話株式会社
Priority date: 2022-05-30
Filing date: 2022-05-30
Publication date: 2023-12-07

Abstract

An information processing device (10) identifies, from image data of an electronic substrate, identification information related to the feature of an electronic component included in the electronic substrate. Then, the information processing device (10) acquires, using the identified identification information, configuration information from a component information DB (13b) that stores preset identification information and configuration information related to the electronic component, and saves the acquired configuration information in a configuration information DB (13c) in association with the device ID and the component ID. Next, in response to receiving configuration information, the information processing device (10) searches the configuration information DB (13c) for the device ID or the component ID corresponding to the configuration information.

Description

Information processing device, search method and search program

The present invention relates to an information processing device, a search method, and a search program.

In recent years, cyber attacks targeting weaknesses in the supply chain have become more obvious and sophisticated. Risk management becomes even more important when companies use IoT (Internet of Things) devices. Therefore, when a vulnerability or malware infection is discovered, it is necessary to promptly check whether the device being used uses the software or hardware that causes the problem, and take countermeasures.

In addition, as a method of risk management as described above, BOM (Bill of Materials), which is a composition table of parts when creating a certain product and is output by CAD (Computer Aided Design) software, etc., and IoT device There is a known OEM Finder technology that finds similar OEM products from images and, if the OEM (Original Equipment Manufacturing) product has a vulnerability, notifies the OEM that the OEM's product also has a vulnerability (for example, , see Non-Patent Document 1).

However, with the conventional technology, there was a problem in that it was not possible to quickly deal with a problem when a problem was discovered with an electronic component. For example, BOM technology requires the manufacturer to provide information, but it is difficult for manufacturers to provide information because they are concerned about their own know-how being leaked, and it is difficult to quickly respond if a problem is discovered with an electronic component. was difficult. Also, for example, with OEM Finder's technology, it is only possible to understand the configuration at the external appearance level of the product, so information about the components at the chip level cannot be grasped, making it difficult to respond quickly if a problem is discovered with an electronic component. .

The present invention has been made in view of the above, and an object of the present invention is to provide an information processing device, a search method, and a search program that can quickly deal with problems when a problem is discovered in an electronic component.

In order to solve the above-mentioned problems and achieve the objects, the information processing device of the present invention includes an identification unit that identifies first information regarding characteristics of electronic components included in the electronic board from image data of the electronic board; Using the first information identified by the identification unit, the second information is transferred from a first storage unit that stores first information regarding the characteristics of the electronic component set in advance and second information regarding the electronic component. a storage unit that acquires information and stores the acquired second information in a second storage unit in association with identification information for identifying an electronic board or an electronic component; and when the second information is received; and a search unit that searches the second storage unit for the identification information corresponding to the second information.

According to the present invention, when a problem is discovered in an electronic component, it is possible to quickly deal with it.

FIG. 1 is a block diagram showing an example of the configuration of a system according to an embodiment. FIG. 2 is a block diagram illustrating the configuration of the information processing apparatus of this embodiment. FIG. 3 is a diagram showing an example of information stored in the feature information DB. FIG. 4 is a diagram showing an example of information stored in the parts information DB. FIG. 5 is a diagram showing an example of information stored in the configuration information DB. FIG. 6 is a diagram illustrating the processing of the identification unit. FIG. 7 is a diagram illustrating the processing of the storage unit. FIG. 8 is a flowchart illustrating an example of a processing procedure at the time of registration by the information processing apparatus according to the embodiment. FIG. 9 is a flowchart illustrating an example of a processing procedure during a search performed by the information processing apparatus according to the embodiment. FIG. 10 is a block diagram illustrating the configuration of an information processing device according to a modification. FIG. 11 is a diagram illustrating an example of information stored in the configuration information DB according to the modification. FIG. 12 is a diagram showing a computer that executes a program.

Below, embodiments of an information processing device, a search method, and a search program according to the present application will be described in detail based on the drawings. Further, the present invention is not limited to the embodiments described below.

[System configuration]
The configuration of a system including an information processing device according to an embodiment will be described. FIG. 1 is a block diagram showing an example of the configuration of a system according to an embodiment. As shown in FIG. 1, the system includes an information processing device 10 and a photographing device 20. The information processing device 10 and the photographing device 20 are connected to each other via a network 30. Regarding the network configuration shown in FIG. 1, each device may communicate via any communication network, such as the Internet, LAN, or VPN (Virtual Private Network), regardless of whether it is wired or wireless. Further, the configuration shown in FIG. 1 is only an example, and the specific configuration and the number of each device are not particularly limited.

The information processing device 10, for example, acquires image data of an electronic board (a board on which electronic components are arranged) included in an IoT device and identifies the color, shape, etc. of the electronic components. Then, the information processing device 10 detects the electronic components to be configured by comparing them with the component information DB 13b that stores catalog information of electronic components, etc., and constructs the configuration information DB 13c. For example, when it is discovered that an electronic component is contaminated with vulnerability or malware, the information processing device 10 responds to a user's search request and searches for the presence of the target electronic component on an electronic board operated by the user. By replying with the result, the usage status of the electronic component can be quickly searched.

The photographing device 20 acquires image data and spatial data of the electronic board and transmits them to the information processing device 10. For example, the imaging device 20 uses a camera to capture image data of an electronic board, and uses a laser to measure spatial data. Note that the photographing device 20 may acquire only image data. Note that the photographing device 20 may be installed in a factory and automatically take an image of the electronic board, for example, or may take an image of the electronic board manually at any location.

[Configuration of information processing device]
FIG. 2 is a block diagram illustrating the configuration of the information processing apparatus of this embodiment. As illustrated in FIG. 2, the information processing device 10 of this embodiment includes a communication processing section 11, a control section 12, and a storage section 13.

The communication processing unit 11 is realized by a NIC (Network Interface Card) or the like, and controls communication via a telecommunication line such as a LAN (Local Area Network) or the Internet.

The storage unit 13 stores data and programs necessary for various processing by the control unit 12, and has a feature information DB 13a, a parts information DB 13b, and a configuration information DB 13c. For example, the storage unit 13 is a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk.

The characteristic information DB 13a stores information regarding the characteristics of electronic components included in the electronic board. For example, as illustrated in FIG. 3, the feature information DB 13a identifies electronic components from image data and spatial data in association with "equipment ID" that uniquely identifies electronic boards and "component ID" that uniquely identifies electronic components. Identification information representing the characteristics of the electronic component (color, shape, logo mark, printed character string, etc.) and the registration date and time are stored. Note that "SIP" illustrated in FIG. 3 is an abbreviation for Single in-line Package, and "QFP" is an abbreviation for Quad Flat Package.

The component information DB 13b stores preset identification information (first information) and configuration information regarding electronic components (second information). For example, as illustrated in FIG. 4, the parts information DB 13b stores "identification information" of electronic parts manually set from web pages and catalogs in association with "ID" that uniquely identifies electronic parts, and electronic parts. ``Configuration information'' that is detailed information about the ``configuration information'' is stored. Here, the configuration information includes the manufacturer of the electronic component, the function of the electronic component, the start of manufacturing of the electronic component, the end of manufacturing of the electronic component, the model number of the electronic component, and the like.

The configuration information DB 13c stores configuration information in association with device IDs and component IDs. For example, as illustrated in FIG. 5, the configuration information DB 13c stores "registration date and time" and "configuration information" which is detailed information on electronic components in association with "equipment ID" and "component ID". . Note that the configuration information DB 13c is not limited to storing "registration date and time" and "configuration information" in association with "device ID" and "parts ID"; "Registration date and time" and "configuration information" may be stored in association with any one of the following.

The control unit 12 has an internal memory for storing programs that define various processing procedures and required data, and executes various processes using these. For example, the control unit 12 includes an identification unit 12a, a storage unit 12b, and a search unit 12c. Here, the control unit 12 is an electronic circuit such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), or an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The identification unit 12a identifies identification information regarding the characteristics of electronic components included in the electronic board from the image data of the electronic board. For example, the identification unit 12a selects any one of the color of the electronic component, the shape of the electronic component, the number of terminals of the electronic component, a logo mark written on the electronic component, and text written on the electronic component as the identification information. identify one or more.

As illustrated in FIG. 6, for example, the identification unit 12a acquires image data of an electronic board from the imaging device 20, specifies the area of the electronic component included in the electronic board from the image data, and Identify identification information. Note that the identification unit 12a may utilize image processing technology such as edge detection, for example, in order to identify the area of the electronic component. Furthermore, the identification unit 12a may acquire not only image data but also spatial data. The identification unit 12a then stores the identified identification information in the feature information DB 13a in association with the device ID and the component ID.

The storage unit 12b uses the identification information identified by the identification unit 12a to acquire configuration information from a component information DB 13b that stores identification information regarding characteristics of electronic components set in advance and configuration information regarding electronic components. The configured configuration information is stored in the configuration information DB 13c in association with the device ID and component ID.

For example, the storage unit 12b stores any one or more of the manufacturer of the electronic component, the model number of the electronic component, the function of the electronic component, the manufacturing start time, and the manufacturing end time of the electronic component as the configuration information in the component information DB 13b. The acquired configuration information is stored in the configuration information DB 13c in association with the device ID and component ID.

As illustrated in FIG. 7, for example, the storage unit 12b collates data in the parts information DB 13b and feature information DB 13a, and creates data in the configuration information DB 13c. For example, the storage unit 12b calculates the similarity between the identification information identified by the identification unit 12a and the identification information stored in the parts information DB 13b, and if the similarity is equal to or higher than a predetermined threshold, the storage unit 12b calculates the similarity between the identification information identified by the identification unit 12a and the identification information stored in the parts information DB 13b. The configuration information corresponding to the identification information stored in the DB 13b is acquired, and the acquired configuration information is stored in the configuration information DB 13c in association with the device ID and the component ID.

When receiving configuration information, the search unit 12c searches the configuration information DB 13c for the device ID or component ID corresponding to the configuration information. For example, when a user discovers a vulnerability in an IoT device having an electronic board or discovers that it is contaminated with malware, the user inputs configuration information such as the target electronic component manufacturer and model number. The search unit 12c receives input of configuration information and outputs whether the electronic board (IoT device) uses the component.

For example, to explain using the example of FIG. Since "chip 2" is found in the search, it is output that the electronic board (IoT device) with the device ID "device 1" uses the corresponding component "chip 2."

[Processing procedure of information processing device 10]
Next, an example of a processing procedure of processing executed by the information processing device 10 will be described using FIGS. 8 and 9. FIG. 8 is a flowchart illustrating an example of a processing procedure at the time of registration by the information processing apparatus according to the embodiment. FIG. 9 is a flowchart illustrating an example of a processing procedure during a search performed by the information processing apparatus according to the embodiment.

As illustrated in FIG. 8, when the identification unit 12a of the information processing device 10 acquires the image data of the electronic board (Yes at step S101), the identification unit 12a of the information processing device 10 extracts identification information of the electronic components included in the electronic board from the image data of the electronic board. Identification (step S102).

Then, the storage unit 12b uses the identified identification information to acquire configuration information from the component information DB 13b (step S103), and stores the acquired configuration information in the configuration information DB 13c in association with the device ID and the component ID. (Step S104).

Further, as illustrated in FIG. 9, when the search unit 12c of the information processing device 10 receives the specification of the model number, manufacturer, etc. (Yes at step S201), the search unit 12c configures the device ID and parts ID corresponding to the specified information. The information DB 13c is searched (step S202). Then, the search unit 12c outputs the searched device ID and component ID as the search result (step S203). For example, the search unit 12c searches the configuration information DB 13c by specifying conditions, and since "chip 2" is hit, the electronic board (IoT device) with the device ID "device 1" uses the corresponding component "chip 2". Output what is being done.

[Effects of embodiment]
In this manner, the information processing apparatus 10 according to the embodiment identifies identification information regarding the characteristics of the electronic components included in the electronic board from the image data of the electronic board. Then, the information processing device 10 uses the identified identification information to acquire configuration information from the component information DB 13b that stores preset identification information and configuration information regarding electronic components, and uses the acquired configuration information to identify the device ID. and is stored in the configuration information DB 13c in association with the component ID. Subsequently, when receiving the configuration information, the information processing device 10 searches the configuration information DB 13c for the device ID or component ID corresponding to the configuration information. Therefore, the information processing device 10 can quickly deal with a problem when a problem is discovered in the electronic component.

For example, the information processing device 10 identifies the color and shape of an electronic component included in an electronic board (a board on which electronic components are arranged) included in an IoT device, and collates it with the component information DB 13b that stores catalog information of electronic components. Detects the electronic components that it consists of. If it is discovered that an electronic component is vulnerable or has been contaminated with malware, the information processing device 10 can quickly search for whether or not the electronic component is used in an electronic board included in the IoT device.

As a result, according to the information processing device 10, users can understand the IoT devices they use at the level of electronic components, and can respond more quickly when vulnerabilities in electronic components or malware contamination is discovered. This will improve the user's security level.

[Modified example]
In addition, as a modified example, the information processing device can store the combinations and number of electronic components used in electronic devices, share them among users, and detect abnormalities in order to eliminate counterfeit and inferior electronic components. By doing so, it may be possible to estimate whether the electronic component is a counterfeit product or an inferior product.

As a modification, for example, the information processing device 10A may further include an estimation unit 12d, as illustrated in FIG. The estimating unit 12d determines that when electronic components of the same type are used in different electronic boards, the information regarding manufacturing included in each configuration information of the electronic components of the same type stored in the configuration information DB 13c is unknown. If the ratio is greater than or equal to a predetermined number, the electronic component is estimated to be of inferior quality.

For example, the configuration information DB 13c according to the modification may manage data for each user, as illustrated in FIG. 11. In the example of FIG. 11, the configuration information DB 13c stores data tables in which "device ID", "component ID", "registration date and time", and "configuration information" are associated with each other for users A, B, and C. ing.

The processing of the estimation unit 12d will be explained using the example of FIG. For example, as illustrated in FIG. 11, it is assumed that users A, B, and C use the same types of

electronic devices

1, 2, and 3. However, when looking at the configuration information of the electronic device, the serial number etc. that only user C identified from the image of the chip 1 was not a valid number or was a random number, so the production start date is unknown. The estimating unit 12d detects that there is a possibility that the electronic device is an inferior product or a counterfeit product by calculating the percentage of unknown configuration information for the same electronic device. Note that, for example, the estimating unit 12d can determine whether the number is made up or not by searching for the serial number via a website to determine whether the product is a genuine product.

For example, in the case of the above example, the estimating unit 12d calculates that although the manufacturer of each chip in the configuration information DB 13c is the same among users, the ratio of the manufacturing start time of "chip 1" is {2021/1/1: 2/3, unknown:　1/3}, and the unknown ratio is greater than the threshold T = 1/3, so there is an abnormality in the manufacturing start time of chip 1 of device 3, and it is considered to be a counterfeit or inferior product. It is possible to detect it.

[System configuration, etc.]
The components of the illustrated devices according to the above embodiments are functional and conceptual, and do not necessarily need to be physically configured as illustrated. In other words, the specific form of distributing and integrating each device is not limited to what is shown in the diagram, and all or part of the devices can be functionally or physically distributed or integrated in arbitrary units depending on various loads and usage conditions. Can be integrated and configured. Furthermore, all or any part of each processing function performed by each device may be realized by a CPU and a program that is analyzed and executed by the CPU, or may be realized as hardware using wired logic.

Furthermore, among the processes described in the above embodiments, all or part of the processes described as being performed automatically can be performed manually, or the processes described as being performed manually can be performed manually. All or part of the process can also be performed automatically using known methods. In addition, information including processing procedures, control procedures, specific names, and various data and parameters shown in the above documents and drawings may be changed arbitrarily, unless otherwise specified.

〔program〕
Further, it is also possible to create a program in which the processing executed by the information processing apparatus described in the above embodiment is written in a language executable by a computer. In this case, when the computer executes the program, the same effects as in the above embodiment can be obtained. Furthermore, the same processing as in the above embodiments may be realized by recording such a program on a computer-readable recording medium and having the computer read and execute the program recorded on this recording medium.

FIG. 12 is a diagram showing a computer that executes the program. As illustrated in FIG. 12, the computer 1000 includes, for example, a memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. However, each of these parts is connected by a bus 1080.

The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012, as illustrated in FIG. The ROM 1011 stores, for example, a boot program such as BIOS (Basic Input Output System). Hard disk drive interface 1030 is connected to hard disk drive 1031, as illustrated in FIG. Disk drive interface 1040 is connected to disk drive 1041, as illustrated in FIG. For example, a removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1041. The serial port interface 1050 is connected to, for example, a mouse 1051 and a keyboard 1052, as illustrated in FIG. Video adapter 1060 is connected to display 1061, for example, as illustrated in FIG.

Here, as illustrated in FIG. 12, the hard disk drive 1031 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, the above program is stored, for example, in the hard disk drive 1031 as a program module in which commands to be executed by the computer 1000 are written.

Further, the various data described in the above embodiments are stored as program data in, for example, the memory 1010 or the hard disk drive 1031. Then, the CPU 1020 reads out the program module 1093 and program data 1094 stored in the memory 1010 and the hard disk drive 1031 to the RAM 1012 as necessary, and executes various processing procedures.

Note that the program module 1093 and program data 1094 related to the program are not limited to being stored in the hard disk drive 1031, but may be stored in a removable storage medium, for example, and read by the CPU 1020 via a disk drive or the like. . Alternatively, the program module 1093 and program data 1094 related to the program are stored in another computer connected via a network (LAN (Local Area Network), WAN (Wide Area Network), etc.), and are transmitted via the network interface 1070. It may be read by the CPU 1020.

Although embodiments to which the invention made by the present inventor is applied have been described above, the present invention is not limited by the description and drawings that form part of the disclosure of the present invention by this embodiment. That is, all other embodiments, examples, operational techniques, etc. made by those skilled in the art based on this embodiment are included in the scope of the present invention.

10, 10A Information processing device 11 Communication processing section 12 Control section 12a Identification section 12b Storage section 12c Search section 12d Estimation section 13 Storage section 13a Feature information DB
13b Parts information DB
13c Configuration information DB

Claims

an identification unit that identifies first information regarding characteristics of electronic components included in the electronic board from image data of the electronic board;
Using the first information identified by the identification unit, the second information is transferred from a first storage unit that stores first information regarding the characteristics of the electronic component set in advance and second information regarding the electronic component. a storage unit that acquires information and stores the acquired second information in a second storage unit in association with identification information for identifying an electronic board or an electronic component;
An information processing device comprising: a search unit that searches the second storage unit for the identification information corresponding to the second information when the second information is received.
The identification unit includes, as the first information, the color of the electronic component, the shape of the electronic component, the number of terminals of the electronic component, a logo mark written on the electronic component, and text written on the electronic component. The information processing apparatus according to claim 1, wherein one or more of the information processing apparatuses are identified.
The identification unit is characterized in that it acquires image data of the electronic board, identifies an area of electronic components included in the electronic board from the image data, and identifies the first information from the identified area. The information processing device according to claim 1.
The storage unit stores, as the second information, any one or more of a manufacturer of the electronic component, a model number of the electronic component, a function of the electronic component, a manufacturing start time, and a manufacturing end time of the electronic component. The information processing apparatus according to claim 1, wherein a plurality of pieces of information are acquired from the first storage unit, and the acquired second information is stored in the second storage unit in association with the identification information.
The storage unit calculates a degree of similarity between the first information identified by the identification unit and the first information stored in the first storage unit, and if the degree of similarity is equal to or higher than a predetermined threshold value, acquires second information corresponding to the first information stored in the first storage unit, and stores the acquired second information in the second storage unit in association with the identification information; The information processing device according to claim 1, characterized in that:
When electronic components of the same type are used on different electronic boards, the information regarding manufacturing included in each second information of the electronic components of the same type stored in the second storage section is unknown. 2. The information processing apparatus according to claim 1, further comprising an estimating unit that estimates that the electronic component is an inferior product if the proportion is a predetermined number or more with respect to the whole.
A search method executed by an information processing device, comprising:
an identification step of identifying first information regarding characteristics of electronic components included in the electronic board from image data of the electronic board;
Using the first information identified in the identification step, the second information is stored from a first storage unit that stores first information regarding the characteristics of the electronic component set in advance and second information regarding the electronic component. a storage step of acquiring information and storing the acquired second information in a second storage unit in association with identification information for identifying an electronic board or an electronic component;
A search method comprising: when the second information is received, the second storage unit is searched for the identification information corresponding to the second information.
an identification step of identifying first information regarding characteristics of electronic components included in the electronic board from image data of the electronic board;
Using the first information identified in the identification step, the second information is stored from the first storage section that stores the first information regarding the characteristics of the electronic component set in advance and the second information regarding the electronic component. a storing step of acquiring information and storing the acquired second information in a second storage unit in association with identification information for identifying an electronic board or an electronic component;
A search program that causes a computer to execute a search step of searching the second storage unit for the identification information corresponding to the second information when the second information is received.