WO2024105751A1 - Inspection device, inspection method, and inspection program - Google Patents

Inspection device, inspection method, and inspection program Download PDF

Info

Publication number
WO2024105751A1
WO2024105751A1 PCT/JP2022/042294 JP2022042294W WO2024105751A1 WO 2024105751 A1 WO2024105751 A1 WO 2024105751A1 JP 2022042294 W JP2022042294 W JP 2022042294W WO 2024105751 A1 WO2024105751 A1 WO 2024105751A1
Authority
WO
WIPO (PCT)
Prior art keywords
inspection
information
specification information
unit
components
Prior art date
Application number
PCT/JP2022/042294
Other languages
French (fr)
Japanese (ja)
Inventor
良彰 中嶋
亮太 佐藤
浩義 瀧口
Original Assignee
日本電信電話株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 日本電信電話株式会社 filed Critical 日本電信電話株式会社
Priority to PCT/JP2022/042294 priority Critical patent/WO2024105751A1/en
Publication of WO2024105751A1 publication Critical patent/WO2024105751A1/en

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/36—Preventing errors by testing or debugging software

Definitions

  • the present invention relates to an inspection device, an inspection method, and an inspection program.
  • the conventional technology has the problem that when information about the configuration of a device or system is not disclosed accurately and in detail, it can be difficult to check the compatibility of the device or system.
  • configuration information regarding the hardware and software of a device or system is equivalent to device design information, and it may be difficult for the vendor to disclose it from the perspective of intellectual property protection, etc.
  • users may have had to rely on the trust placed in the device or system vendor or on ex-post responses based on contracts, etc., regarding security measures for the device or system. As a result, this can lead to problems such as increased costs for maintaining and managing the device or system, and delayed responses when problems occur.
  • the inspection device of the present invention is characterized by having a generation unit that generates inspection specification information including at least one of structural specification information, assembly specification information, external specification information, operational specification information, and status specification information contained in configuration information, which is information about the components of a device or system, and an inspection unit that performs a consistency inspection by comparing the specifications of the components of the device or system with the actual components of the device or system based on the inspection specification information.
  • the present invention has the effect of making it possible to check the consistency of a device or system even when information about the device or system configuration has not been disclosed accurately and in detail.
  • FIG. 1 is a diagram showing an overview of an inspection method according to this embodiment.
  • FIG. 2 is a diagram illustrating an example of a device configuration of the inspection device according to the first embodiment.
  • FIG. 3 is a table diagram illustrating an example of inspection specification information according to the first embodiment.
  • FIG. 4 is a diagram illustrating an example of a flowchart of the inspection method according to the first embodiment.
  • FIG. 5 is a diagram illustrating an example of a device configuration of an inspection device according to the second embodiment.
  • FIG. 6 is a table diagram illustrating an example of additional inspection specification information according to the second embodiment.
  • FIG. 7 is a diagram illustrating an example of a flowchart of the inspection method according to the second embodiment.
  • FIG. 8 is a diagram showing an example of a computer in which the inspection apparatus according to the present embodiment is realized.
  • the inspection device 100 inspects a target device or system to detect the presence of an unauthorized component and unauthorized operation. A predetermined inspection is performed on the components of the system, and the inspection results are output to a terminal device 200 such as a user.
  • the control unit 130 of the inspection device 100 in Figure 1 receives information about individual components of the device or system to be inspected (e.g., a group of files that make up the software) via a network or the like (see (1) in Figure 1). Note that in this embodiment, it is assumed that the above-mentioned information has been disclosed by the vendor of the device or system (e.g., the device or system, or the hardware or software parts that make up the device or system; hereinafter, this may be referred to as "device or system”) within the scope of their disclosure policy. Also, as shown in Figure 1, there may be multiple devices or systems.
  • the control unit 130 of the inspection device 100 generates inspection specification information 121f by combining the received information on the individual components in a predetermined format (see (2) in FIG. 1). At this time, the control unit 130 may generate additional inspection specification information 121g using inspection specification information 121f that combines multiple of the above-mentioned components and predefined external definition information 122a (see (3) in FIG. 1). The generation of additional inspection specification information 121g and the predetermined consistency check using additional inspection specification information 121g will be explained in the section on embodiment 2.
  • the memory unit 120 of the inspection device 100 stores the inspection specification information 121f generated using the structure specification information 121a, assembly specification information 121b, external shape specification information 121c, operation specification information 121d, and state specification information 121e (see (4) in Figure 1).
  • the control unit 130 of the inspection device 100 uses the generated inspection specification information 121f to carry out a predetermined consistency inspection (e.g., inspection of the excess or deficiency of components, operation, etc.) for the device or system being inspected (see (5) in FIG. 1).
  • the inspection device 100 then outputs the inspection results to the terminal device 200 of the user, etc. (see (6) in FIG. 1).
  • Embodiment 1 Hereinafter, a first embodiment of the present invention will be described.
  • the inspection device 100 of the present embodiment performs a predetermined process related to consistency inspection using information (configuration information) regarding individual components of a device or system, etc., that has been generated in advance by a vendor of the device or system, etc.
  • the reception unit 131 of the inspection device 100 receives configuration information as information about individual components of the equipment or system to be inspected.
  • the generation unit 132 generates inspection specification information 121f (information that combines the structure specification information 121a, external specification information 121c, operation specification information 121d, and status specification information 121e in a predetermined manner) based on the configuration information received by the reception unit 131.
  • the inspection unit 133 of the inspection device 100 performs a consistency check on the target device or system based on the contents included in the aforementioned inspection specification information 121f. Specifically, the inspection unit 133 of the inspection device 100 performs a consistency check on whether components are insufficient or excessive based on the structural specification information 121a, and on the external specification information 121c, the operational specification information 121d, and the state specification information 121e. Details of each consistency check in embodiment 1 are also explained in the section "Inspection unit 133".
  • the output unit 134 of the inspection device 100 outputs the above-mentioned inspection results to the terminal device 200 of the user, etc. (the person in charge of inspection, etc.).
  • the inspection device 100 has a communication unit 110, a storage unit 120, and a control unit 130, and communicates with an external device (e.g., a terminal device 200, etc.) via the communication unit 110.
  • the inspection device 100 may also include an input unit (e.g., a keyboard, a mouse, etc.) that accepts various operations, and a display unit (e.g., a display, etc.) that displays various information.
  • an input unit e.g., a keyboard, a mouse, etc.
  • a display unit e.g., a display, etc.
  • the communication unit 110 is realized by a NIC (Network Interface Card) or the like, and controls communication via an electric communication line such as a LAN (Local Area Network) or the Internet.
  • the communication unit 110 is connected to a network by wire or wirelessly as necessary, and can transmit and receive information bidirectionally. In this embodiment, it is assumed that communication between the inspection device 100 and an external device (e.g., the terminal device 200, etc.) is performed via the communication unit 110.
  • the storage unit 120 stores data and programs necessary for various processes by the control unit 130.
  • the storage unit 120 also has a configuration information storage unit 121 and an inspection result storage unit 123.
  • the storage unit 120 is realized by a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk.
  • the configuration information storage unit 121 stores the inspection specification information 121f generated by combining the configuration information and information on the components included in the configuration information in a predetermined format.
  • the configuration information storage unit 121 can store the inspection specification information 121f at various levels of detail or abstraction by describing the components by arbitrarily combining information on the components included in the configuration information.
  • the configuration information storage unit 121 stores structural specification information 121a, external specification information 121c, operational specification information 121d, status specification information 121e, and inspection specification information 121f. Note that the configuration information storage unit 121 may store all of the above-mentioned information, or may store one or a combination of multiple pieces of information.
  • the configuration information storage unit 121 stores information on individual components of a device or a system as the structural specification information 121a.
  • the individual components referred to here are the state of a device or a system configured by software parts and hardware parts in the device or system, in other words, specification information on the component configuration of software parts and hardware parts that configure a device or a system described in a unified data format (e.g., SBOM, etc.).
  • the structural specification information 121a includes information such as the "package name,” "file name,” and associated "attribute information.”
  • the format for expressing this information may be, for example, a data format used by an OS (Operating System) standard package management system, or a data format for describing software configuration such as SBOM.
  • the structural specification information 121a can also describe components of hardware parts using information such as the part's "model number” and "serial number.” Note that the information described above is merely an example, and the structural specification information 121a may include items and information other than the information described above.
  • the configuration information storage unit 121 can store the structural specification information 121a as hierarchical information. Specifically, the configuration information storage unit 121 can store the "configuration information" on a system basis in a state configured by combining it with "configuration information” on a device basis, or the "configuration information” of a device in a state configured by combining it with "configuration information” on a software component basis or hardware component basis.
  • the configuration information storage unit 121 can store only the relevant configuration information of the software and hardware components included in the device based on the structural specification information 121a included in the device's configuration information. This makes it possible to carry out a consistency check performed by the inspection unit 133 (described below) on only an arbitrary limited range of the target device or system. The relationship of the combinations described above is specified by the structural specification information 121a.
  • the configuration information storage unit 121 stores, as the external specification information 121c, information describing the external characteristics that do not easily change in normal use with respect to an aggregate of components (parts) of an apparatus or a system, etc.
  • the external specification information 121c may also include information describing the external characteristics expressed by the target components as a whole with respect to not only physical aggregates but also aggregates of electronic parts (e.g., two-dimensional images, three-dimensional videos, etc.) that have similar characteristics.
  • the external specification information 121c may include information regarding the external characteristics of the target device or system, such as size, color, shape, pattern, etc. Note that the above-mentioned information is merely an example, and the external specification information 121c may include items and information other than the above-mentioned information.
  • the configuration information storage unit 121 stores, as the operation specification information 121d, information describing the specifications of physical or logical operations occurring in the components of the device or system, etc.
  • the operation specification information 121d may include, as the operation specifications performed by the target components as a whole, "operation pattern, range, speed, etc. of the device or system or its components,""input/output specifications (communication, video, audio, etc. data) of the device or system or its components,””data processing specifications (arithmetic processing, storage processing, etc.) in the device or system or its components,” etc.
  • the aforementioned operation specification information 121d may be generated as a learning model based on machine learning using information obtained by the actual operation of a device or system (e.g., an operation log, etc.) as input, and this may be used as information equivalent to the operation specification information 121d.
  • the information described above is merely an example, and the operation specification information 121d may include items and information other than the information described above.
  • the configuration information storage unit 121 stores, as the state specification information 121e, specification information on a predetermined state that occurs or changes due to normal use of a device, a system, etc.
  • the state specification information 121e may include specification information on the state of temperature, speed, volume, sound quality, etc., as specification information on the state that the target components can take as a whole.
  • the above-mentioned state specification information 121e may be generated as a learning model based on machine learning using information obtained by the actual operation of a device or system (e.g., communication logs, etc.) as input, and this may be used as information equivalent to the state specification information 121e.
  • the above-mentioned information is merely an example, and the state specification information 121e may include items and information other than the above-mentioned information.
  • the configuration information storage unit 121 stores, as the inspection specification information 121f, information that combines at least one of the structural specification information 121a, the external specification information 121c, the operation specification information 121d, and the state specification information 121e.
  • the configuration information storage unit 121 may store the inspection specification information 121f that includes all of the above-mentioned information.
  • the configuration information storage unit 121 can store the inspection specification information 121f in which each component is combined in a format as shown in the table diagram of FIG. 3.
  • items such as "target of structural information”, “software name”, “file name”, and “attribute information” as structural specification information 121a, “size”, “color”, “shape”, and “pattern” as external specification information 121c, "operation pattern”, “range”, “speed”, “input/output specifications”, and “data processing specifications” as operation specification information 121d, and "temperature”, “speed”, “volume”, and “sound quality” as status specification information 121e can be stored.
  • target of configuration information items may be configuration information in units of "device” or “system,” or may be in more detailed units such as “software parts” or “hardware parts.” Additionally, the contents of each item listed in the table diagram of Figure 3 are merely examples, and are not limited to the contents listed.
  • the configuration information storage unit 121 can store the information described above as the inspection specification information 121f for each component of the device or system (for example, device ABC and system DEF in FIG. 3).
  • the configuration information storage unit 121 may store inspection specification information 121f that includes all of the structural specification information 121a, external specification information 121c, operational specification information 121d, and state specification information 121e for the above-mentioned inspection specification information 121f, or may store inspection specification information 121f that includes one or a combination of multiple information.
  • the above-mentioned items are merely examples, and the configuration information storage unit 121 may store information within the category of inspection specification information 121f as necessary in addition to the above-mentioned items and information.
  • the inspection result storage unit 123 stores information related to a predetermined consistency inspection performed by the inspection unit 133.
  • the inspection result storage unit 123 can store information related to excess or deficiency, differences, inconsistencies, etc. of components of a device or a system as a result of a consistency inspection performed by the inspection unit 133 described below.
  • the contents of the inspection results described above are merely examples, and the inspection result storage unit 123 can store any information that falls within the scope of the inspection results of the consistency inspection without any limitations.
  • the control unit 130 includes a reception unit 131, a generation unit 132, an inspection unit 133, and an output unit 134.
  • the control unit 130 has an internal memory for temporarily storing programs that define various processing procedures and the like and processing data, and is realized by electronic circuits such as a CPU (Central Processing Unit) and an MPU (Micro Processing Unit), and integrated circuits such as an ASIC (Application Specific Integrated Circuit) and an FPGA (Field Programmable Gate Array).
  • the receiving unit 131 receives configuration information as information about individual components of a device or system to be inspected (for example, a group of files constituting software, etc.). Note that it is assumed that the above-mentioned information has been disclosed by the vendor of the device or system, etc., within the scope based on the disclosure policy.
  • the reception unit 131 receives configuration information corresponding to the device or system to be inspected, which information has been generated in advance by a vendor of the device or system.
  • the reception unit 131 may receive configuration information associated with the device or system, or the aforementioned configuration information that has been acquired in advance.
  • the reception unit 131 may receive configuration information that is manually input, or may receive configuration information that is electronically built into the device or system via a network or the like; the method is not limited.
  • the generating unit 132 generates the inspection specification information 121f by combining predetermined information included in the configuration information, which is information on components of the device or system, etc. (e.g., information on individual components of the device or system, etc.) Specifically, the generating unit 132 generates the inspection specification information 121f including at least one of the structure specification information 121a, the external shape specification information 121c, the operation specification information 121d, and the state specification information 121e, which are included in the configuration information, which is information on the components of the device or system.
  • the inspection unit 133 performs a consistency check to compare the specifications of the components of the device or system with the actual components of the device or system based on the inspection specification information 121f generated by the generation unit 132. Specifically, the inspection unit 133 performs, as a predetermined consistency check, one or more combinations of a consistency check as a check for excess or deficiency of components based on the structure specification information 121a, a consistency check based on the external specification information 121c, a consistency check based on the operation specification information 121d, and a consistency check based on the state specification information 121e, using the inspection specification information 121f.
  • the inspection unit 133 may operate when the inspection specification information 121f associated with the device or system to be inspected is input.
  • the inspection unit 133 performs a consistency check based on the structural specification information 121a included in the inspection specification information 121f to check for excess or deficiency of components. Specifically, when the components include software components, the inspection unit 133 performs an inspection for excess or deficiency of data (e.g., files that make up the software) stored in the storage device or the like being inspected. On the other hand, when the components include hardware components, the inspection unit 133 uses the functions of the OS or firmware being inspected to obtain information on the installation status of the hardware components and performs an inspection for excess or deficiency.
  • data e.g., files that make up the software
  • the inspection unit 133 performs a predetermined consistency inspection based on the external specification information 121c included in the inspection specification information 121f, using measurements by physical sensors (e.g., cameras, microphones, etc.) or acquired image or video data. Furthermore, the inspection unit 133 may inspect not only physical assemblies but also electronic component assemblies (two-dimensional images or three-dimensional videos, etc.) as having similar characteristics. Specifically, the inspection unit 133 may inspect the external characteristics (e.g., size, color, shape, pattern, etc.) expressed as a whole as the target components, for differences, excesses, deficiencies, suspicious points, etc., based on the inspection specification information 121f and the acquired information on the external shape. Note that the inspection unit 133 can perform any inspection that falls within the scope of a consistency inspection of the external specifications of the target device or system, etc., without any restrictions.
  • the external characteristics e.g., size, color, shape, pattern, etc.
  • the inspection unit 133 performs a consistency check based on the operation specification information 121d included in the inspection specification information 121f, based on the monitoring function, operation log, etc. (hereinafter referred to as "operation data") of the device or system to be inspected or the peripheral device, to inspect the consistency between the operation specifications of the inspection target and the operation data.
  • the inspection unit 133 may inspect the operation specifications (e.g. operation pattern, range, speed, input/output specifications, data processing specifications, etc.) performed by the components as a whole as the target components, based on the inspection specification information 121f and the operation data, for differences, excesses, deficiencies, incorrect operations, etc.
  • the inspection unit 133 can perform any inspection that falls within the scope of the consistency check of the operation specifications performed by the components as a whole, without any restrictions.
  • the inspection unit 133 performs an inspection for a consistency inspection based on the state specification information 121e included in the inspection specification information 121f, based on the monitoring function, communication log, etc. (hereinafter referred to as "communication data") of the device or system to be inspected or the peripheral device, and performs an inspection regarding the consistency inspection between the state specification (communication specification) of the inspection target and the communication data.
  • the inspection unit 133 may inspect the specifications of the state that can be taken as a whole for the target component (for example, specifications related to the state of temperature, speed, volume/sound quality, etc.) for differences, excesses, deficiencies, incorrect operation, etc., based on the inspection specification information 121f and the communication data.
  • the inspection unit 133 can perform an inspection that falls within the scope of a consistency inspection of specification information of the state that can be taken by the component as a whole, without any restrictions.
  • the output unit 134 outputs the inspection result of the inspection unit 133 to the terminal device 200 of a user or the like.
  • the output unit 134 can output the inspection result of the inspection unit 133 to a predetermined user (for example, an inspector or an operator) or a vendor's terminal device 200 or the like.
  • the predetermined user or vendor may be one person or multiple people.
  • the output format of the test results output by the output unit 134 is not particularly limited.
  • the output unit 134 can output the results in any format as long as the results can be perceived by the user using the five senses (for example, visual information such as text or figures, or audio information).
  • the terminal device 200 receives the inspection results output by the output unit 134 of the inspection device 100, and displays them to a user (e.g., an inspector, an operator of the device or system, a vendor of the device or system, etc.).
  • the terminal device 200 may be an information processing device such as a desktop PC, a tablet PC, a notebook PC, a mobile phone, a smartphone, a PDA (Personal Digital Assistant), etc., and the form of the information processing device may be selected according to need.
  • the reception unit 131 receives information (configuration information) on individual components of a device or a system (step S101). Note that the reception unit 131 may receive information on each of the aforementioned components directly from the target device or system via a network or the like, or may receive information input by a user, a vendor, or the like.
  • the generating unit 132 generates the inspection specification information 121f by combining, in a predetermined format, the structural specification information 121a, the external specification information 121c, the operational specification information 121d, and the state specification information 121e contained in the information (configuration information) relating to the individual components described above (step S102).
  • the inspection unit 133 performs a predetermined consistency check based on the inspection specification information 121f generated by the generation unit 132 (step S103).
  • the inspection unit 133 may use the inspection specification information 121f to perform all of the following: a consistency check as a check for excess or deficiency of components based on the structural specification information 121a; a consistency check based on the external specification information 121c; a consistency check based on the operational specification information 121d; and a consistency check based on the state specification information 121e, or may perform one or a combination of multiple checks as necessary.
  • the output unit 134 outputs the inspection results of the inspection unit 133 to the terminal device 200 of a specified user, etc. (step S104), and ends the process.
  • the output unit 134 may output, for example, information regarding excesses/deficiencies, differences, inconsistencies, etc. of components of the equipment or system, etc., as the inspection results to the terminal device 200 of the user, etc., in a manner that the user can perceive with their five senses, such as text, graphs, images, videos, sounds, etc.
  • the inspection device 100 of the present embodiment performs a predetermined process related to consistency inspection using information (configuration information) regarding individual components of a device or system, etc., that is generated in advance by a vendor of the device or system, etc., and pre-defined external definition information 122a.
  • the reception unit 131 of the inspection device 100 receives information (configuration information) about individual components of the equipment or system to be inspected.
  • the generation unit 132 generates inspection specification information 121f (information that combines, in a predetermined manner, the structure specification information 121a, the assembly specification information 121b, the external shape specification information 121c, the operation specification information 121d, and the state specification information 121e) based on the received configuration information.
  • the generation unit 132 of the inspection device 100 generates additional inspection specification information 121g based on the aforementioned inspection specification information 121f and related external definition information 122b that is matched by the matching unit 135 using predefined external definition information 122a and the inspection specification information 121f. Then, the inspection unit 133 of the inspection device 100 uses the aforementioned additional inspection specification information 121g to perform a consistency check based on the excess/deficiency check of the components to be inspected, the external specifications, the operation specifications, and the state specifications. Details of each consistency check in embodiment 2 will be explained in the section "Inspection unit 133" below.
  • the output unit 134 of the inspection device 100 outputs the above-mentioned inspection results to the terminal device 200 of the user (e.g., the person in charge of inspection). Note that if the related external definition information 122b includes attribute information, the inspection device 100 may also output it to the terminal device 200 of another user (e.g., the operator).
  • the inspection device 100 in the second embodiment has a communication unit 110, a storage unit 120, and a control unit 130, which are the same as those in the first embodiment, and communicates with an external device (e.g., a terminal device 200) via the communication unit 110. Therefore, in this section, the configuration information storage unit 121 (set specification information 121b, additional inspection specification information 121g) including differences, the external definition information storage unit 122 (external definition information 122a, related external definition information 122b), the generation unit 132, the inspection unit 133, and the collation unit 135 will be described, and other detailed descriptions will be omitted.
  • the configuration information storage unit 121 stores information on an aggregate of components that constitute a part of the configuration information as the aggregate specification information 121b.
  • the aggregate specification information 121b can store information in which a name expressing the meaning of the function of the aggregate is described, instead of comprehensively describing each component (e.g., file, data, etc.) that constitutes the aggregate of components that constitute a part of the configuration information.
  • the "name” mentioned above may represent the function brought about by the set of target components as a whole.
  • the set specification information 121b may include names representing functions constituting part of a device or system, such as a web server, database server, or mail server, or names of software packages constituting part of a device or system, such as Apache HTTP Server, PostgreSQL, SSH, OpenSSL, etc.
  • the information mentioned above is merely an example, and the set specification information 121b may include items and information other than the information mentioned above.
  • the configuration information storage unit 121 stores the additional inspection specification information 121g generated by the generation unit 132.
  • the additional inspection specification information 121g stored in the configuration information storage unit 121 will be described with reference to Fig. 6.
  • the configuration information storage unit 121 can store, as the additional inspection specification information 121g, information in which related external definition information 122b is added to inspection specification information 121f in which each component is combined, in a format as shown in the table diagram of Fig. 6.
  • items that can be stored include the "target of structural information,” “software name,” “file name,” and “attribute information” as structural specification information 121a, “function name” and “software package name” as set specification information 121b, “size,” “color,” “shape,” and “pattern” as external specification information 121c, “operation pattern,” “range,” “speed,” “input/output specifications,” and “data processing specifications” as operation specification information 121d, "temperature,” “speed,” “volume,” and “sound quality” as status specification information 121e, and “complementary definition,” “additional definition,” and “attribute definition” as related external definition information 122b.
  • the configuration information storage unit 121 can also store the above-mentioned information for each component of a device or system (for example, device ABC or system DEF in FIG. 6). Note that the above-mentioned items are merely examples, and the configuration information storage unit 121 may store information in the category of additional inspection specification information 121g in addition to the above-mentioned items and information, as necessary.
  • the external definition information storage unit 122 stores external definition information 1222a and related external definition information 122b.
  • the external definition information storage unit 122 stores, as external definition information 122a, associated information used for inspecting devices, systems, etc. Note that the information described below is merely an example, and the external definition information storage unit 122 can store items and information other than the above-mentioned information.
  • the external definition information storage unit 122 can store information regarding the complementary definition of the inspection specification information 121f included in the external definition information 122a (such as information representing hardware components, software components, etc., as components assumed to be included in the collection represented by the name).
  • the external definition information storage unit 122 can store information regarding additional definitions of the inspection specification information 121f included in the external definition information 122a (for example, information regarding the external specifications, operational specifications, or state specifications of the aggregate represented by the name).
  • the external definition information storage unit 122 can store information related to the attribute definition of the inspection specification information 121f included in the external definition information 122a (attribute information related to the collection represented by the name, such as category, developer, manufacturer, creation date and time, etc.).
  • the external definition information storage unit 122 stores related external definition information 122b to be collated by a collation unit 135 (described later).
  • the related external definition information 122b is information collated (associated) by the collation unit 135 (described later) using predefined external definition information 122a and inspection specification information 121f.
  • the related external definition information 122b is information used by a user of a device or system, etc., together with the associated inspection specification information 121f, to inspect the device or system, etc.
  • the related external definition information 122b may include "information representing the components (hardware and software parts) assumed to be included in the aggregate represented by the name" as a supplementary definition of the inspection specification information 121f, "information relating to the external specifications, operational specifications, or status specifications that the aggregate represented by the name has” as an additional definition of the inspection specification information 121f, and "attribute information relating to the aggregate represented by the name, such as information on the category, developer, manufacturer, creation date and time, etc.” as an attribute definition of the inspection specification information 121f.
  • the generating unit 132 generates additional inspection specification information 121g using the inspection specification information 121f and the related external definition information 122b. Specifically, the generating unit 132 generates additional inspection specification information 121g including at least one of the structure specification information 121a, the set specification information 121b, the external shape specification information 121c, the operation specification information 121d, the state specification information 121e, and the related external definition information 122b, which are included in the configuration information that is information related to the configuration of the device, system, etc.
  • the inspection unit 133 uses the additional inspection specification information 121g to perform one or more combinations of a consistency check based on the structural specification information 121a, a consistency check based on the set specification information 121b, a consistency check based on the external specification information 121c, a consistency check based on the operational specification information 121d, and a consistency check based on the status specification information 121e.
  • the inspection unit 133 performs a consistency check based on the structural specification information 121a included in the additional inspection specification information 121g by checking whether there is a surplus or deficiency of data (e.g., files constituting the software) stored in a storage device of the device or system being inspected when the additional inspection specification information 121g includes software components.
  • the inspection device 100 checks whether there is a surplus or deficiency of components by using functions provided in the OS or firmware of the device or system being inspected.
  • the inspection unit 133 also performs an inspection based on this, based on the related external definition information 122b (complementary definition of configuration information) matched by the matching unit 135 using the set specification information 121b and the external definition information 122a.
  • the inspection unit 133 performs a consistency inspection based on the external specification information 121c, using measurements by physical sensors (e.g., cameras, microphones, etc.) or image data, video data, etc. Note that if the related external definition information 122b (additional definition of the inspection specification information 121f) matched by the matching unit 135 using the external specification information 121c and the external definition information 122a is included in the additional inspection specification information 121g, the inspection device 100 also performs an inspection that includes this information.
  • the related external definition information 122b additional definition of the inspection specification information 121f
  • the inspection unit 133 performs a consistency check based on the operation specification information 121d, checking the consistency between the operation specifications of the device or system to be inspected, etc., and the operation data based on the actual operation described above, based on the monitoring functions, operation logs, etc. (operation data) of the device or system to be inspected, or peripheral devices. Note that if related external definition information 122b (additional definition of inspection specification information 121f) collated by the collation unit 135 using the operation specification information 121d and external definition information 122a is included in the additional inspection specification information 121g, the inspection device 100 also performs an inspection that includes this information.
  • the inspection unit 133 performs a consistency check based on the state specification information 121e, by checking the consistency between the state specifications (communication specifications) of the device or system to be inspected and the communication data based on the actual state, based on the monitoring function and communication logs (communication data) of the device or system to be inspected or the peripheral device. Note that if related external definition information 122b (additional definition of inspection specification information 121f) collated by the collation unit 135 using the state specification information 121e and external definition information 122a is included in the additional inspection specification information 121g, the inspection device 100 also performs an inspection that includes this.
  • related external definition information 122b additional definition of inspection specification information 121f
  • the collation unit 135 collates information associated with the inspection specification information 121f as related external definition information 122b based on the external definition information 122a, which is information used for the consistency check. Specifically, the collation unit 135 collates information associated with the inspection specification information 121f received by the reception unit 131 as related external definition information 122b based on the external definition information 122a stored in the external definition information storage unit 122.
  • the associated information here refers to external definition information 122a that has a certain degree of match with the information included in inspection specification information 121f (e.g., structural specification information 121a, set specification information 121b, external specification information 121c, operational specification information 121d, and state specification information 121e).
  • the matching unit 135 may identify external definition information 122a that includes a "name" that matches a "name” included in set specification information 121b of inspection specification information 121f as being associated, or may identify external definition information 122a based on a condition that a match is determined based on a combination of multiple pieces of information. Note that the matching unit 135 can change the above-mentioned conditions as necessary and perform the matching process.
  • the reception unit 131 receives information (configuration information) on individual components of a device or a system (step S201). Note that the reception unit 131 may receive information on each of the aforementioned components directly from the target device or system via a network or the like, or may receive information input by a user, a vendor, or the like.
  • the comparison unit 135 compares information related to the test specification information 121f from the external definition information 122a, which is information used to check for a specified consistency, as related external definition information 122b (step S202).
  • the generating unit 132 combines the structural specification information 121a, the assembly specification information 121b, the external specification information 121c, the operation specification information 121d, and the state specification information 121e, which are included in the information (configuration information) relating to the individual components described above, in a predetermined format, and further adds the related external definition information 122b, which is matched by the matching unit 135, to generate additional inspection specification information 121g (step S203).
  • the inspection unit 133 performs a predetermined consistency check based on the additional inspection specification information 121g generated by the generation unit 132 (step S204).
  • the inspection unit 133 may perform one or more combinations of a consistency check as a check for excess or deficiency of components based on the structure specification information 121a and the set specification information 121b, a consistency check based on the external specification information 121c, a consistency check based on the operation specification information 121d, and a consistency check based on the state specification information 121e as necessary.
  • the inspection unit 133 may perform a consistency check that includes the above-mentioned related external definition information 122b.
  • the output unit 134 outputs the inspection results of the inspection unit 133 to the terminal device 200 of a specified user, etc. (step S205), and ends the process.
  • the output unit 134 may output, for example, information regarding excesses/deficiencies, differences, inconsistencies, etc. of components of the equipment or system, etc., as inspection results to the user's terminal device 200, etc., in a manner that the user can perceive with their five senses, such as text, graphs, images, videos, sounds, etc.
  • the inspection device 100 is characterized in that it generates inspection specification information 121f including at least one of structure specification information 121a, set specification information 121b, external shape specification information 121c, operation specification information 121d, and state specification information 121e, which are included in configuration information that is information about the components of a device or system, and performs a consistency check that compares the specifications of the components of the device or system with the actual components of the device or system based on the inspection specification information 121f. Therefore, according to this embodiment, the following effects are achieved.
  • the inspection device 100 provides the effect of implementing consistency inspection based on inspection specification information 121f that is generated using information about the components of a device or system that is available to the user, even if the vendor does not disclose detailed configuration information that describes the configuration of the device or system in detail to the user.
  • the inspection device 100 generates inspection specification information 121f using hierarchical configuration information defined by the structural specification information 121a, making it possible to inspect only a limited range, such as by selecting a portion of the equipment or system to be inspected, thereby improving the efficiency of the inspection and the maintainability of the configuration information.
  • the inspection device 100 realizes consistency inspection based on inspection specification information 121f, which is generated using information about the components of a device or system, etc., that is available to the user, and provides the effect of allowing the user to flexibly describe or disclose information about the configuration at a disclosure level (level of detail or abstraction) based on the user's own disclosure policy, rather than the vendor disclosing all details of the configuration of the device or system, etc. in a uniform manner.
  • inspection specification information 121f is generated using information about the components of a device or system, etc., that is available to the user, and provides the effect of allowing the user to flexibly describe or disclose information about the configuration at a disclosure level (level of detail or abstraction) based on the user's own disclosure policy, rather than the vendor disclosing all details of the configuration of the device or system, etc. in a uniform manner.
  • the inspection device 100 allows the user to perform component deficiency/excess inspections and operation inspections depending on the level of information disclosed by the vendor about the configuration of the device or system, etc., thereby improving the possibility of performing inspections and their effectiveness compared to conventional inspections when the vendor does not disclose any information about the configuration.
  • the inspection device 100 also provides the advantage of being able to create a mechanism that allows flexible mutual adjustment of the level of disclosure of configuration information between the vendor of the device or system and the user, thereby improving the transparency of security regarding devices in the supply chain.
  • each component of each device shown in the figure is a functional concept, and does not necessarily have to be physically configured as shown in the figure.
  • the specific form of distribution and integration of each device is not limited to that shown in the figure, and all or a part of it can be functionally or physically distributed and integrated in any unit according to various loads, usage conditions, etc.
  • all or any part of each processing function performed by each device can be realized by a CPU and a program analyzed and executed by the CPU, or can be realized as hardware using wired logic.
  • the various devices constituting the inspection device 100 can be implemented by installing the above-mentioned inspection program as package software or online software on a desired computer.
  • the above-mentioned inspection program can be executed by an information processing device to function as various devices constituting the inspection device 100.
  • the information processing device here includes desktop or notebook personal computers.
  • the information processing device also includes mobile communication terminals such as smartphones and mobile phones, and slate terminals such as PDAs (Personal Digital Assistants).
  • FIG. 8 is a diagram showing an example of a computer in which the various devices constituting the inspection device 100 are realized.
  • the computer 1000 has, for example, a memory 1010 and a CPU 1020.
  • the computer 1000 also has a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. Each of these components is connected by a bus 1080.
  • the memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012.
  • the ROM 1011 stores a boot program such as a BIOS (Basic Input Output System).
  • BIOS Basic Input Output System
  • the hard disk drive interface 1030 is connected to a hard disk drive 1090.
  • the disk drive interface 1040 is connected to a disk drive 1100.
  • a removable storage medium such as a magnetic disk or optical disk is inserted into the disk drive 1100.
  • the serial port interface 1050 is connected to a mouse 1110 and a keyboard 1120, for example.
  • the video adapter 1060 is connected to a display 1130, for example.
  • the hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, the programs that define the processes of the various devices that make up the inspection device 100 are implemented as program modules 1093 in which computer-executable code is written.
  • the program modules 1093 are stored, for example, in the hard disk drive 1090.
  • the program modules 1093 for executing processes similar to the functional configurations of the various devices that make up the inspection device 100 are stored in the hard disk drive 1090.
  • the hard disk drive 1090 may be replaced by an SSD (Solid State Drive).
  • the setting data used in the processing of the above-mentioned embodiment is stored as program data 1094, for example, in memory 1010 or hard disk drive 1090.
  • the CPU 1020 reads out the program module 1093 or program data 1094 stored in memory 1010 or hard disk drive 1090 into RAM 1012 as necessary, and executes the processing of the above-mentioned embodiment.
  • the program module 1093 and program data 1094 are not limited to being stored in the hard disk drive 1090, but may be stored in a removable storage medium, for example, and read by the CPU 1020 via the disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 may be stored in another computer connected via a network (such as a LAN or a WAN (Wide Area Network)). The program module 1093 and program data 1094 may then be read by the CPU 1020 from the other computer via the network interface 1070.
  • a network such as a LAN or a WAN (Wide Area Network)
  • Inspection device 110 Communication unit 120 Storage unit 121 Configuration information storage unit 121a Structure specification information 121b Set specification information 121c External shape specification information 121d Operation specification information 121e State specification information 121f Inspection specification information 121g Additional inspection specification information 122 External definition information storage unit 122a External definition information 122b Related external definition information 123 Inspection result storage unit 130 Control unit 131 Reception unit 132 Generation unit 133 Inspection unit 134 Output unit 135 Collation unit 200 Terminal device 1000 Computer 1010 Memory 1011 ROM 1012 RAM 1020 CPU 1030 Hard disk drive interface 1040 Disk drive interface 1050 Serial port interface 1060 Video adapter 1070 Network interface 1080 Bus 1090 Hard disk drive 1091 OS 1092 application program 1093 program module 1094 program data 1100 disk drive 1110 mouse 1120 keyboard

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Debugging And Monitoring (AREA)

Abstract

An inspection device (100) generates inspection specification information (121f) including at least one of structural specification information (121a), assembly specification information (121b), external form specification information (121c), operation specification information (121d), and state specification information (121e) included in configuration information which is information relating to components of an instrument or a system, and performs consistency inspection for comparing specifications of the components of the instrument or the system and actual components of the instrument or the system on the basis of the inspection specification information (121f).

Description

検査装置、検査方法、および検査プログラムInspection device, inspection method, and inspection program
　本発明は、検査装置、検査方法、および検査プログラムに関する。 The present invention relates to an inspection device, an inspection method, and an inspection program.
　機器またはシステムの構成要素（機器またはシステムを構成する部品や動作等のことで、以降は「構成要素」と表記）を確認して、欠陥や脆弱性をタイムリーかつ的確に発見することを目的とする整合性検査（以降は、「整合性検査」と表記）の実施のための機器またはシステムの構成に関する情報（例えば、ハードウェアやソフトウェア部品に関する情報等）の開示ニーズが高まっている。例えば、従来技術では、ソフトウェア構成について、機器またはシステムの構成に関する情報のデータ形式を統一するＳＢＯＭ（Software　Bill　of　Materials）のような取組みが知られている（例えば、非特許文献１を参照）。 There is an increasing need to disclose information about the configuration of a device or system (e.g., information about hardware and software components, etc.) for the purpose of conducting a consistency check (hereinafter referred to as a "consistency check"), which aims to check the components of a device or system (the parts and operations that make up the device or system, hereafter referred to as "components") and discover defects and vulnerabilities in a timely and accurate manner. For example, in the prior art, efforts such as SBOM (Software Bill of Materials), which standardizes the data format of information about the configuration of a device or system, are known for software configuration (see, for example, Non-Patent Document 1).
　しかしながら、従来技術では、機器またはシステムの構成に関する情報が正確かつ細部まで開示されていない場合に、機器またはシステムの整合性検査が困難になる場合がある、という問題があった。 However, the conventional technology has the problem that when information about the configuration of a device or system is not disclosed accurately and in detail, it can be difficult to check the compatibility of the device or system.
　具体的には、機器またはシステムの構成を検査して不正な要素を正確に検知するためには、機器またはシステムの構成を正確に把握している者（例えば、機器やシステムのベンダで、以降は「ベンダ」と表記）から、あらかじめ該当する情報（仕様情報）を取得して機器またはシステムの仕様情報と実際の構成を照合する必要があった。しかしながら、機器またはシステムの構成に関する情報は、オープン仕様のものを除いて秘密として扱われている場合がある。そのため、機器またはシステムの購入者やユーザ等（以降は、「ユーザ」と表記）に対して、前述の構成に関する情報が開示されない場合がある。 Specifically, in order to inspect the configuration of a device or system and accurately detect unauthorized elements, it is necessary to obtain the relevant information (specification information) in advance from a person who accurately understands the device or system configuration (for example, the device or system vendor, hereafter referred to as the "vendor") and compare the device or system specification information with the actual configuration. However, information regarding the configuration of a device or system may be treated as confidential, except for open specifications. For this reason, the aforementioned information regarding the configuration may not be disclosed to purchasers or users of the device or system (hereafter referred to as the "user").
　その理由として、機器またはシステムのハードウェアおよびソフトウェアに関する構成の情報は、機器の設計情報に相当し、ベンダにとって知的財産保護の観点等から開示困難な場合があるためである。そのため、ユーザは、オープン仕様ではない機器またはシステムの構成について、詳細な整合性検査を行うことが難しい場合がある。さらに、ユーザは、当該機器またはシステムのセキュリティ対策等について、前述の機器またはシステムのベンダに対する信頼や契約等による事後対応に依存する場合があった。その結果、機器またはシステムの維持や管理のコスト増大やトラブル時の対応遅れ等の問題につながる場合があった。 The reason for this is that configuration information regarding the hardware and software of a device or system is equivalent to device design information, and it may be difficult for the vendor to disclose it from the perspective of intellectual property protection, etc. As a result, it may be difficult for users to perform detailed consistency checks on the configuration of devices or systems that do not have open specifications. Furthermore, users may have had to rely on the trust placed in the device or system vendor or on ex-post responses based on contracts, etc., regarding security measures for the device or system. As a result, this can lead to problems such as increased costs for maintaining and managing the device or system, and delayed responses when problems occur.
　そこで、上記の課題を解決し目的を達成するために、本発明の検査装置は、機器またはシステムの構成要素に関する情報である構成情報に含まれる、構造仕様情報と、集合仕様情報と、外形仕様情報と、動作仕様情報と、状態仕様情報と、の少なくとも１つを含む検査仕様情報を生成する生成部と、前記検査仕様情報に基づき、前記機器または前記システムの構成要素の仕様と前記機器または前記システムの実際の構成要素とを比較する整合性検査を行う検査部と、を有することを特徴とする。 In order to solve the above problems and achieve the objective, the inspection device of the present invention is characterized by having a generation unit that generates inspection specification information including at least one of structural specification information, assembly specification information, external specification information, operational specification information, and status specification information contained in configuration information, which is information about the components of a device or system, and an inspection unit that performs a consistency inspection by comparing the specifications of the components of the device or system with the actual components of the device or system based on the inspection specification information.
　本発明は、機器またはシステムの構成に関する情報が正確かつ細部まで開示されていない場合においても、機器またはシステムの整合性検査を可能とする、という効果を奏する。 The present invention has the effect of making it possible to check the consistency of a device or system even when information about the device or system configuration has not been disclosed accurately and in detail.
図１は、本実施形態に係る検査方法の概要を示す図である。FIG. 1 is a diagram showing an overview of an inspection method according to this embodiment. 図２は、実施形態１に係る検査装置の装置構成の一例を示す図である。FIG. 2 is a diagram illustrating an example of a device configuration of the inspection device according to the first embodiment. 図３は、実施形態１に係る検査仕様情報の一例を示すテーブル図である。FIG. 3 is a table diagram illustrating an example of inspection specification information according to the first embodiment. 図４は、実施形態１に係る検査方法のフローチャートの一例を示す図である。FIG. 4 is a diagram illustrating an example of a flowchart of the inspection method according to the first embodiment. 図５は、実施形態２に係る検査装置の装置構成の一例を示す図である。FIG. 5 is a diagram illustrating an example of a device configuration of an inspection device according to the second embodiment. 図６は、実施形態２に係る追加検査仕様情報の一例を示すテーブル図である。FIG. 6 is a table diagram illustrating an example of additional inspection specification information according to the second embodiment. 図７は、実施形態２に係る検査方法のフローチャートの一例を示す図である。FIG. 7 is a diagram illustrating an example of a flowchart of the inspection method according to the second embodiment. 図８は、本実施形態に係る検査装置が実現されるコンピュータの一例を示す図である。FIG. 8 is a diagram showing an example of a computer in which the inspection apparatus according to the present embodiment is realized.
　以下、図面を参照しながら、本発明を実施するための形態（以降、「実施形態」）について説明する。なお、各実施形態は、以下に記載する内容に限定されない。 Below, the form for carrying out the present invention (hereinafter, "embodiments") will be described with reference to the drawings. Note that each embodiment is not limited to the contents described below.
〔１．全体概要〕
　本実施形態における検査装置１００による検査方法の概要について説明する。検査装置１００は、機器またはシステムに不正な構成要素が含まれていること、および不正な動作を検知するために、対象の機器またはシステムの構成要素について所定の検査を行い、ユーザ等の端末装置２００に検査結果を出力する。 [1. Overall Overview
An overview of an inspection method using the inspection device 100 in this embodiment will be described. The inspection device 100 inspects a target device or system to detect the presence of an unauthorized component and unauthorized operation. A predetermined inspection is performed on the components of the system, and the inspection results are output to a terminal device 200 such as a user.
　ここから、図１を用いて検査装置１００が行う検査方法の概要について、更に説明する。図１における検査装置１００の制御部１３０は、ＮＷ等を介して検査対象となる機器またはシステムの個別の構成要素に関する情報（例えば、ソフトウェアを構成するファイル群等）を受け付ける（図１の（１）を参照）。なお、本実施形態において、前述の情報は、機器またはシステム等（例えば、機器やシステム、または機器やシステムを構成するハードウェア部品やソフトウェア部品のことで、以降は「機器またはシステム等」と表記する場合がある）のベンダが開示ポリシに基づく範囲で開示している前提とする。また、図１に示す通り、機器またはシステム等は複数あってよい。 From here, the overview of the inspection method performed by the inspection device 100 will be further explained using Figure 1. The control unit 130 of the inspection device 100 in Figure 1 receives information about individual components of the device or system to be inspected (e.g., a group of files that make up the software) via a network or the like (see (1) in Figure 1). Note that in this embodiment, it is assumed that the above-mentioned information has been disclosed by the vendor of the device or system (e.g., the device or system, or the hardware or software parts that make up the device or system; hereinafter, this may be referred to as "device or system") within the scope of their disclosure policy. Also, as shown in Figure 1, there may be multiple devices or systems.
　検査装置１００の制御部１３０は、受け付けた個別の構成要素に関する情報を所定の形式で組み合わせて検査仕様情報１２１ｆを生成する（図１の（２）を参照）。この時、制御部１３０は、前述の構成要素を複数組み合わせた検査仕様情報１２１ｆと予め定義される外部定義情報１２２ａとを用いて、追加検査仕様情報１２１ｇを生成してもよい（図１の（３）を参照）。なお、追加検査仕様情報１２１ｇの生成と追加検査仕様情報１２１ｇとを用いた所定の整合性検査は、実施形態２の項目で説明する。 The control unit 130 of the inspection device 100 generates inspection specification information 121f by combining the received information on the individual components in a predetermined format (see (2) in FIG. 1). At this time, the control unit 130 may generate additional inspection specification information 121g using inspection specification information 121f that combines multiple of the above-mentioned components and predefined external definition information 122a (see (3) in FIG. 1). The generation of additional inspection specification information 121g and the predetermined consistency check using additional inspection specification information 121g will be explained in the section on embodiment 2.
　そして、検査装置１００の記憶部１２０は、構造仕様情報１２１ａ、集合仕様情報１２１ｂ、外形仕様情報１２１ｃ、動作仕様情報１２１ｄ、状態仕様情報１２１ｅを用いて生成された、検査仕様情報１２１ｆとして記憶する（図１の（４）を参照）。 Then, the memory unit 120 of the inspection device 100 stores the inspection specification information 121f generated using the structure specification information 121a, assembly specification information 121b, external shape specification information 121c, operation specification information 121d, and state specification information 121e (see (4) in Figure 1).
　検査装置１００の制御部１３０は、生成された検査仕様情報１２１ｆを用いて、検査対象の機器またシステムについての所定の整合性検査（例えば、構成要素の過不足や動作等の検査）を実施する（図１の（５）を参照）。そして、検査装置１００は、検査結果をユーザ等の端末装置２００に出力する（図１の（６）を参照）。 The control unit 130 of the inspection device 100 uses the generated inspection specification information 121f to carry out a predetermined consistency inspection (e.g., inspection of the excess or deficiency of components, operation, etc.) for the device or system being inspected (see (5) in FIG. 1). The inspection device 100 then outputs the inspection results to the terminal device 200 of the user, etc. (see (6) in FIG. 1).
〔２．実施形態１〕
　ここから、本実施形態における実施形態１を説明する。 2. Embodiment 1
Hereinafter, a first embodiment of the present invention will be described.
〔２－１．実施形態１の概要〕
　実施形態１では、機器またはシステム等のベンダによってあらかじめ生成された機器またはシステム等の個別の構成要素に関する情報（構成情報）を用いて、本実施形態の検査装置１００が整合性検査に関する所定の処理を実施する。 2-1. Overview of the First Embodiment
In the first embodiment, the inspection device 100 of the present embodiment performs a predetermined process related to consistency inspection using information (configuration information) regarding individual components of a device or system, etc., that has been generated in advance by a vendor of the device or system, etc.
　検査装置１００の受付部１３１は、検査対象の機器またはシステム等の個別の構成要素に関する情報として構成情報を受け付ける。生成部１３２は、受付部１３１により受け付けられた構成情報に基づき、検査仕様情報１２１ｆ（構造仕様情報１２１ａ、外形仕様情報１２１ｃ、動作仕様情報１２１ｄ、状態仕様情報１２１ｅを所定の方法で組み合わせた情報）を生成する。 The reception unit 131 of the inspection device 100 receives configuration information as information about individual components of the equipment or system to be inspected. The generation unit 132 generates inspection specification information 121f (information that combines the structure specification information 121a, external specification information 121c, operation specification information 121d, and status specification information 121e in a predetermined manner) based on the configuration information received by the reception unit 131.
　次に、検査装置１００の検査部１３３は、前述の検査仕様情報１２１ｆに含まれる内容に基づき対象の機器またはシステム等について整合性検査を実施する。具体的には、検査装置１００の検査部１３３は、整合性検査として構造仕様情報１２１ａに基づく構成要素の過不足検査、外形仕様情報１２１ｃ、動作仕様情報１２１ｄ、状態仕様情報１２１ｅに基づく整合性検査を、実施する。なお、実施形態１における各整合性検査の詳細は、「検査部１３３」の項目で併せて説明する。 Next, the inspection unit 133 of the inspection device 100 performs a consistency check on the target device or system based on the contents included in the aforementioned inspection specification information 121f. Specifically, the inspection unit 133 of the inspection device 100 performs a consistency check on whether components are insufficient or excessive based on the structural specification information 121a, and on the external specification information 121c, the operational specification information 121d, and the state specification information 121e. Details of each consistency check in embodiment 1 are also explained in the section "Inspection unit 133".
　そして、検査装置１００の出力部１３４は、前述の検査結果をユーザ等（検査担当者等）の端末装置２００に出力する。 Then, the output unit 134 of the inspection device 100 outputs the above-mentioned inspection results to the terminal device 200 of the user, etc. (the person in charge of inspection, etc.).
〔２－２．検査装置の構成〕
　ここから、実施形態１に係る検査装置１００の構成について、図２を用いて説明する。図２に示すように、検査装置１００は、通信部１１０と、記憶部１２０と、制御部１３０と、を有し、通信部１１０を介して外部の装置等（例えば、端末装置２００等）と通信を行う。なお、図示していないが、検査装置１００は、各種操作を受け付ける入力部（例えば、キーボードやマウス等）や、各種情報を表示するための表示部（例えば、ディスプレイ等）を備えてもよい。続いて、以下に各部の詳細な機能について記載する。 2-2. Configuration of the inspection device
From here, the configuration of the inspection device 100 according to the first embodiment will be described with reference to Fig. 2. As shown in Fig. 2, the inspection device 100 has a communication unit 110, a storage unit 120, and a control unit 130, and communicates with an external device (e.g., a terminal device 200, etc.) via the communication unit 110. Although not shown, the inspection device 100 may also include an input unit (e.g., a keyboard, a mouse, etc.) that accepts various operations, and a display unit (e.g., a display, etc.) that displays various information. Next, detailed functions of each unit will be described below.
（通信部１１０）
　通信部１１０は、ＮＩＣ（Network　Interface　Card）等で実現され、ＬＡＮ（Local　Area　Network）やインターネット等の電気通信回線を介して通信を制御する。そして、通信部１１０は、必要に応じてネットワークと有線または無線で接続され、双方向に情報の送受信を行うことができる。なお、本実施形態においては、検査装置１００と外部の装置（例えば、端末装置２００等）との通信は、通信部１１０を介して実施される前提とする。 (Communication unit 110)
The communication unit 110 is realized by a NIC (Network Interface Card) or the like, and controls communication via an electric communication line such as a LAN (Local Area Network) or the Internet. The communication unit 110 is connected to a network by wire or wirelessly as necessary, and can transmit and receive information bidirectionally. In this embodiment, it is assumed that communication between the inspection device 100 and an external device (e.g., the terminal device 200, etc.) is performed via the communication unit 110.
（記憶部１２０）
　記憶部１２０は、制御部１３０による各種処理に必要なデータおよびプログラムを格納する。また、記憶部１２０は、構成情報記憶部１２１と、検査結果記憶部１２３と、を有する。そして、記憶部１２０は、ＲＡＭ（Random　Access　Memory）、フラッシュメモリ（Flash　Memory）等の半導体メモリ素子、または、ハードディスク、光ディスク等の記憶装置等で実現する。 (Memory unit 120)
The storage unit 120 stores data and programs necessary for various processes by the control unit 130. The storage unit 120 also has a configuration information storage unit 121 and an inspection result storage unit 123. The storage unit 120 is realized by a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk.
（構成情報記憶部１２１）
　構成情報記憶部１２１は、構成情報、および構成情報に含まれる構成要素に関する情報を所定の形式で組み合わせて生成される検査仕様情報１２１ｆを記憶する。なお、構成情報記憶部１２１は、構成情報に含まれる構成要素に関する情報を任意に組み合わせて構成要素を記述することによって、さまざまな詳細レベルまたは抽象レベルで検査仕様情報１２１ｆを記憶できる。 (Configuration information storage unit 121)
The configuration information storage unit 121 stores the inspection specification information 121f generated by combining the configuration information and information on the components included in the configuration information in a predetermined format. The configuration information storage unit 121 can store the inspection specification information 121f at various levels of detail or abstraction by describing the components by arbitrarily combining information on the components included in the configuration information.
　具体的には、構成情報記憶部１２１は、構造仕様情報１２１ａと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、検査仕様情報１２１ｆとを記憶する。なお、構成情報記憶部１２１は、前述した情報を全て記憶してもよいし、１つまたは複数の組み合わせについて記憶してもよい。 Specifically, the configuration information storage unit 121 stores structural specification information 121a, external specification information 121c, operational specification information 121d, status specification information 121e, and inspection specification information 121f. Note that the configuration information storage unit 121 may store all of the above-mentioned information, or may store one or a combination of multiple pieces of information.
（構造仕様情報１２１ａ）
　構成情報記憶部１２１は、構造仕様情報１２１ａとして、機器またはシステム等の個別の構成要素に関する情報を記憶する。ここでいう個別の構成要素とは、機器またはシステム等におけるソフトウェア部品やハードウェア部品による構成された機器またはシステム等の在り様であり、言い換えると、統一的データ形式（例えば、ＳＢＯＭ等）で記述される機器またはシステム等を構成するソフトウェア部品やハードウェア部品の部品構成に関する仕様情報である。 (Structural specification information 121a)
The configuration information storage unit 121 stores information on individual components of a device or a system as the structural specification information 121a. The individual components referred to here are the state of a device or a system configured by software parts and hardware parts in the device or system, in other words, specification information on the component configuration of software parts and hardware parts that configure a device or a system described in a unified data format (e.g., SBOM, etc.).
　例えば、構造仕様情報１２１ａは、「パッケージ名」、「ファイル名」、それらに付随する「属性情報」等の情報が含まれる。そして、これらの情報の表現形式には、例えば、ＯＳ（Operating　System）標準のパッケージ管理システムが用いるデータ形式、ＳＢＯＭのようなソフトウェア構成を記述するデータ形式等を用いることができる。また、本実施形態において、構造仕様情報１２１ａは、ハードウェア部品についても部品の「型番」や「シリアル番号」等の情報を用いて構成要素を記述することができる。なお、前述した情報はあくまで一例であり、構造仕様情報１２１ａは、前述した情報以外の項目や情報を含んでいてよい。 For example, the structural specification information 121a includes information such as the "package name," "file name," and associated "attribute information." The format for expressing this information may be, for example, a data format used by an OS (Operating System) standard package management system, or a data format for describing software configuration such as SBOM. In this embodiment, the structural specification information 121a can also describe components of hardware parts using information such as the part's "model number" and "serial number." Note that the information described above is merely an example, and the structural specification information 121a may include items and information other than the information described above.
　さらに、構成情報記憶部１２１は、構造仕様情報１２１ａを階層化された情報として記憶できる。具体的には、構成情報記憶部１２１は、システム単位の「構成情報」を機器単位の「構成情報」によって組み合わせて構成された状態、あるいは機器の「構成情報」をソフトウェア部品単位やハードウェア部品単位の「構成情報」によって組み合わせて構成された状態で記憶することができる。 Furthermore, the configuration information storage unit 121 can store the structural specification information 121a as hierarchical information. Specifically, the configuration information storage unit 121 can store the "configuration information" on a system basis in a state configured by combining it with "configuration information" on a device basis, or the "configuration information" of a device in a state configured by combining it with "configuration information" on a software component basis or hardware component basis.
　例えば、構成情報記憶部１２１は、機器の構成情報に含まれる構造仕様情報１２１ａに基づいて、機器に含まれるソフトウェア部品やハードウェア部品の構成情報の中から該当するもののみを記憶することができる。それによって、後述の検査部１３３により実施される整合性検査において、対象の機器またはシステム等において任意の限定された範囲のみの検査の実施を可能とする。なお、前述した組み合わせの関係は、構造仕様情報１２１ａによって規定される。 For example, the configuration information storage unit 121 can store only the relevant configuration information of the software and hardware components included in the device based on the structural specification information 121a included in the device's configuration information. This makes it possible to carry out a consistency check performed by the inspection unit 133 (described below) on only an arbitrary limited range of the target device or system. The relationship of the combinations described above is specified by the structural specification information 121a.
（外形仕様情報１２１ｃ）
　構成情報記憶部１２１は、外形仕様情報１２１ｃとして、機器またはシステム等の構成要素（部品）の集合体に関して、通常利用では容易に変質しない外形特徴が記述された情報を記憶する。また、外形仕様情報１２１ｃは、物理的な集合体だけでなく電子的な部品の集合体（例えば、２次元画像や３次元映像等）も同様の特徴を有するものに関して、対象となる構成要素が全体として表わす外形的な特徴が記述された情報を含んでよい。 (External specification information 121c)
The configuration information storage unit 121 stores, as the external specification information 121c, information describing the external characteristics that do not easily change in normal use with respect to an aggregate of components (parts) of an apparatus or a system, etc. The external specification information 121c may also include information describing the external characteristics expressed by the target components as a whole with respect to not only physical aggregates but also aggregates of electronic parts (e.g., two-dimensional images, three-dimensional videos, etc.) that have similar characteristics.
　例えば、外形仕様情報１２１ｃは、対象となる機器またはシステム等の大きさ、色、形状、模様等の外形特徴に関する情報を含んでいてよい。なお、前述した情報はあくまで一例であり、外形仕様情報１２１ｃは、前述した情報以外の項目や情報を含んでいてよい。 For example, the external specification information 121c may include information regarding the external characteristics of the target device or system, such as size, color, shape, pattern, etc. Note that the above-mentioned information is merely an example, and the external specification information 121c may include items and information other than the above-mentioned information.
（動作仕様情報１２１ｄ）
　構成情報記憶部１２１は、動作仕様情報１２１ｄとして、機器またはシステム等の構成要素において発生する物理的または論理的な動作の仕様が記述された情報を記憶する。例えば、動作仕様情報１２１ｄは、対象となる構成要素が全体として行なう動作仕様として、「機器またはシステムまたはその構成要素の動作パターン、範囲、速度等」と、「機器またはシステムまたはその構成要素の入出力仕様（通信、映像、音声等のデータ）」と、「機器またはシステムまたはその構成要素におけるデータ処理仕様（演算処理、記憶処理等）」と、等を含んでいてよい。 (Operation specification information 121d)
The configuration information storage unit 121 stores, as the operation specification information 121d, information describing the specifications of physical or logical operations occurring in the components of the device or system, etc. For example, the operation specification information 121d may include, as the operation specifications performed by the target components as a whole, "operation pattern, range, speed, etc. of the device or system or its components,""input/output specifications (communication, video, audio, etc. data) of the device or system or its components,""data processing specifications (arithmetic processing, storage processing, etc.) in the device or system or its components," etc.
　また、前述の動作仕様情報１２１ｄは、あらかじめ仕様情報として記憶される他に、機器またはシステム等の実動作によって得られる情報（例えば、動作ログ等）を入力とする機械学習に基づく学習モデルとして生成し、これを動作仕様情報１２１ｄに相当する情報として用いてよい。なお、前述した情報はあくまで一例であり、動作仕様情報１２１ｄは、前述した情報以外の項目や情報を含んでいてよい。 In addition to being stored in advance as specification information, the aforementioned operation specification information 121d may be generated as a learning model based on machine learning using information obtained by the actual operation of a device or system (e.g., an operation log, etc.) as input, and this may be used as information equivalent to the operation specification information 121d. Note that the information described above is merely an example, and the operation specification information 121d may include items and information other than the information described above.
（状態仕様情報１２１ｅ）
　構成情報記憶部１２１は、状態仕様情報１２１ｅとして、機器またはシステム等の通常利用によって発生したり、変化したりする所定の状態に関する仕様情報を記憶する。例えば、状態仕様情報１２１ｅは、対象となる構成要素が全体としてとり得る状態の仕様情報として、温度、速度、音量、音質等の状態に関する仕様情報が含まれていてよい。 (Status specification information 121e)
The configuration information storage unit 121 stores, as the state specification information 121e, specification information on a predetermined state that occurs or changes due to normal use of a device, a system, etc. For example, the state specification information 121e may include specification information on the state of temperature, speed, volume, sound quality, etc., as specification information on the state that the target components can take as a whole.
　また、前述の状態仕様情報１２１ｅは、あらかじめ仕様情報として記憶される他に、機器またはシステム等の実動作によって得られる情報（例えば、通信ログ等）を入力とする機械学習に基づく学習モデルとして生成し、これを状態仕様情報１２１ｅに相当する情報として用いてよい。なお、前述した情報はあくまで一例であり、状態仕様情報１２１ｅは、前述した情報以外の項目や情報を含んでいてよい。 In addition to being stored in advance as specification information, the above-mentioned state specification information 121e may be generated as a learning model based on machine learning using information obtained by the actual operation of a device or system (e.g., communication logs, etc.) as input, and this may be used as information equivalent to the state specification information 121e. Note that the above-mentioned information is merely an example, and the state specification information 121e may include items and information other than the above-mentioned information.
（検査仕様情報１２１ｆ）
　構成情報記憶部１２１は、構造仕様情報１２１ａと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、の少なくとも１つ以上を組み合わせた情報を、検査仕様情報１２１ｆとして記憶する。なお、構成情報記憶部１２１は、前述した情報を全て含む検査仕様情報１２１ｆを記憶してもよい。 (Inspection specification information 121f)
The configuration information storage unit 121 stores, as the inspection specification information 121f, information that combines at least one of the structural specification information 121a, the external specification information 121c, the operation specification information 121d, and the state specification information 121e. The configuration information storage unit 121 may store the inspection specification information 121f that includes all of the above-mentioned information.
　ここで、図３を用いて、構成情報記憶部１２１が記憶する検査仕様情報１２１ｆについて説明する。構成情報記憶部１２１は、一例として、図３のテーブル図に示すような形式で、各構成要素が組み合わされた検査仕様情報１２１ｆを記憶することができる。図３では、「構造情報の対象」と、構造仕様情報１２１ａとして「ソフトウェア名」、「ファイル名」、「属性情報」と、外形仕様情報１２１ｃとして「大きさ」、「色」、「形状」、「模様」と、動作仕様情報１２１ｄとして「動作パターン」、「範囲」、「速度」、「入出力仕様」、「データ処理仕様」と、状態仕様情報１２１ｅとして「温度」、「速度」、「音量」、「音質」と、といった項目を記憶することができる。 Here, the inspection specification information 121f stored in the configuration information storage unit 121 will be described with reference to FIG. 3. As an example, the configuration information storage unit 121 can store the inspection specification information 121f in which each component is combined in a format as shown in the table diagram of FIG. 3. In FIG. 3, items such as "target of structural information", "software name", "file name", and "attribute information" as structural specification information 121a, "size", "color", "shape", and "pattern" as external specification information 121c, "operation pattern", "range", "speed", "input/output specifications", and "data processing specifications" as operation specification information 121d, and "temperature", "speed", "volume", and "sound quality" as status specification information 121e can be stored.
　なお、前述の「構成情報の対象」の項目は、「機器」または「システム」という単位で構成情報であってもよいし、その他にも「ソフトウェア部品」や「ハードウェア部品」といったより細かな単位であってもよい。また、図３のテーブル図に記載された各項目の内容はあくまで一例であり、記載されている内容に限定されない。 Note that the aforementioned "target of configuration information" items may be configuration information in units of "device" or "system," or may be in more detailed units such as "software parts" or "hardware parts." Additionally, the contents of each item listed in the table diagram of Figure 3 are merely examples, and are not limited to the contents listed.
　また、構成情報記憶部１２１は、検査仕様情報１２１ｆとして前述した情報を機器またはシステム等の構成要素ごと（例えば、図３の機器ＡＢＣ、システムＤＥＦ等）に記憶することができる。なお、構成情報記憶部１２１は、前述した検査仕様情報１２１ｆについて、構造仕様情報１２１ａと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅとの全てを含む検査仕様情報１２１ｆを記憶してもよいし、１つまたは複数の組み合わせを含む検査仕様情報１２１ｆを記憶してよい。なお、前述した項目はあくまで一例であり、構成情報記憶部１２１は、前述した項目や情報以外にも必要に応じて検査仕様情報１２１ｆの範疇の情報を記憶してよい。 The configuration information storage unit 121 can store the information described above as the inspection specification information 121f for each component of the device or system (for example, device ABC and system DEF in FIG. 3). The configuration information storage unit 121 may store inspection specification information 121f that includes all of the structural specification information 121a, external specification information 121c, operational specification information 121d, and state specification information 121e for the above-mentioned inspection specification information 121f, or may store inspection specification information 121f that includes one or a combination of multiple information. The above-mentioned items are merely examples, and the configuration information storage unit 121 may store information within the category of inspection specification information 121f as necessary in addition to the above-mentioned items and information.
（検査結果記憶部１２３）
　検査結果記憶部１２３は、検査部１３３により実施される所定の整合性の検査に関する情報を記憶する。例えば、検査結果記憶部１２３は、後述の検査部１３３が行う整合性検査の結果として、機器またはシステム等の構成要素の過不足や、差分や、不整合箇所、等に関する情報を記憶できる。なお、前述の検査結果の内容はあくまで一例であり、検査結果記憶部１２３は、整合性検査の検査結果の範疇に含まれる情報であれば、限定なく記憶できる。 (Test result storage unit 123)
The inspection result storage unit 123 stores information related to a predetermined consistency inspection performed by the inspection unit 133. For example, the inspection result storage unit 123 can store information related to excess or deficiency, differences, inconsistencies, etc. of components of a device or a system as a result of a consistency inspection performed by the inspection unit 133 described below. Note that the contents of the inspection results described above are merely examples, and the inspection result storage unit 123 can store any information that falls within the scope of the inspection results of the consistency inspection without any limitations.
（制御部１３０）
　制御部１３０は、受付部１３１と、生成部１３２と、検査部１３３と、出力部１３４と、を有する。そして、制御部１３０は、各種の処理手順等を規定したプログラムや処理データを一時的に格納するための内部メモリを有し、ＣＰＵ（Central　Processing　Unit）やＭＰＵ（Micro　Processing　Unit）等の電子回路、ＡＳＩＣ（Application　Specific　Integrated　Circuit）やＦＰＧＡ（Field　Programmable　Gate　Array）等の集積回路によって実現される。 (Control unit 130)
The control unit 130 includes a reception unit 131, a generation unit 132, an inspection unit 133, and an output unit 134. The control unit 130 has an internal memory for temporarily storing programs that define various processing procedures and the like and processing data, and is realized by electronic circuits such as a CPU (Central Processing Unit) and an MPU (Micro Processing Unit), and integrated circuits such as an ASIC (Application Specific Integrated Circuit) and an FPGA (Field Programmable Gate Array).
（受付部１３１）
　受付部１３１は、検査対象となる機器またはシステム等の個別の構成要素に関する情報（例えば、ソフトウェアを構成するファイル群等）として構成情報を受け付ける。なお、前述の情報は、機器またはシステム等のベンダが開示ポリシに基づく範囲で開示している前提とする。 (Reception Unit 131)
The receiving unit 131 receives configuration information as information about individual components of a device or system to be inspected (for example, a group of files constituting software, etc.). Note that it is assumed that the above-mentioned information has been disclosed by the vendor of the device or system, etc., within the scope based on the disclosure policy.
　具体的には、受付部１３１は、機器またはシステム等のベンダによってあらかじめ生成された検査対象となる機器またはシステム等に対応する構成情報を受け付ける。具体例として、受付部１３１は、機器またはシステム等に付随した構成情報、あるいは予め取得された前述の構成情報を受け付けてよい。なお、受付部１３１は、人手により入力される構成情報を受け付けてもよいし、ＮＷ等を介して機器またはシステム等に電子的に内蔵された構成情報を受け付けてもよく、その方法は限定されない。 Specifically, the reception unit 131 receives configuration information corresponding to the device or system to be inspected, which information has been generated in advance by a vendor of the device or system. As a specific example, the reception unit 131 may receive configuration information associated with the device or system, or the aforementioned configuration information that has been acquired in advance. Note that the reception unit 131 may receive configuration information that is manually input, or may receive configuration information that is electronically built into the device or system via a network or the like; the method is not limited.
（生成部１３２）
　生成部１３２は、機器またはシステム等の構成要素に関する情報（例えば、機器またはシステム等の個別の構成要素に関する情報）である構成情報に含まれる所定の情報を組み合わせて、検査仕様情報１２１ｆを生成する。具体的には、生成部１３２は、機器またはシステムの構成要素に関する情報である構成情報に含まれる、構造仕様情報１２１ａと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、の少なくとも１つを含む検査仕様情報１２１ｆを生成する。 (Generation unit 132)
The generating unit 132 generates the inspection specification information 121f by combining predetermined information included in the configuration information, which is information on components of the device or system, etc. (e.g., information on individual components of the device or system, etc.) Specifically, the generating unit 132 generates the inspection specification information 121f including at least one of the structure specification information 121a, the external shape specification information 121c, the operation specification information 121d, and the state specification information 121e, which are included in the configuration information, which is information on the components of the device or system.
（検査部１３３）
　検査部１３３は、生成部１３２により生成された検査仕様情報１２１ｆに基づき、機器またはシステムの構成要素の仕様と機器またはシステムの実際の構成要素とを比較する整合性検査を行う。具体的には、検査部１３３は、所定の整合性検査として、検査仕様情報１２１ｆを用いて、構造仕様情報１２１ａに基づく構成要素の過不足検査としての整合性検査と、外形仕様情報１２１ｃに基づく整合性検査と、動作仕様情報１２１ｄに基づく整合性検査と、状態仕様情報１２１ｅに基づく整合性検査と、の１つまたは複数の組み合わせを実施する。なお、検査部１３３は、検査対象となる機器またはシステム等に付随する検査仕様情報１２１ｆが入力されたことを契機に動作してよい。 (Inspection Unit 133)
The inspection unit 133 performs a consistency check to compare the specifications of the components of the device or system with the actual components of the device or system based on the inspection specification information 121f generated by the generation unit 132. Specifically, the inspection unit 133 performs, as a predetermined consistency check, one or more combinations of a consistency check as a check for excess or deficiency of components based on the structure specification information 121a, a consistency check based on the external specification information 121c, a consistency check based on the operation specification information 121d, and a consistency check based on the state specification information 121e, using the inspection specification information 121f. The inspection unit 133 may operate when the inspection specification information 121f associated with the device or system to be inspected is input.
　ここから、検査部１３３が行う所定の整合性検査について詳細を説明する。検査部１３３は、構成要素の過不足検査について、検査仕様情報１２１ｆに含まれる構造仕様情報１２１ａに基づく整合性検査を実施する。具体的には、検査部１３３は、構成要素にソフトウェア部品が含まれる場合には、検査対象の記憶装置等に格納されたデータ（例えば、ソフトウェアを構成するファイル等）の過不足に関する検査を実施する。他方で、検査部１３３は、構成要素としてハードウェア部品が含まれる場合には、検査対象のＯＳやファームウェアが機能等を利用して、ハードウェア部品の搭載状況に関する情報を取得して過不足に関する検査を実施する。 The following provides a detailed explanation of the specific consistency check performed by the inspection unit 133. The inspection unit 133 performs a consistency check based on the structural specification information 121a included in the inspection specification information 121f to check for excess or deficiency of components. Specifically, when the components include software components, the inspection unit 133 performs an inspection for excess or deficiency of data (e.g., files that make up the software) stored in the storage device or the like being inspected. On the other hand, when the components include hardware components, the inspection unit 133 uses the functions of the OS or firmware being inspected to obtain information on the installation status of the hardware components and performs an inspection for excess or deficiency.
　検査部１３３は、検査仕様情報１２１ｆに含まれる外形仕様情報１２１ｃに基づく整合性検査について、物理センサ（例えばカメラ、マイク等）による測定、または取得された画像や映像データ等を用いて、所定の整合性検査を実施する。さらに、検査部１３３は、物理的な集合体だけでなく、電子的な部品の集合体（２次元画像または３次元映像等）についても同様の特徴を有するものとして、検査してよい。具体的には、検査部１３３は、対象となる構成要素として、全体として表わす外形特徴（例えば、大きさ、色、形状、模様等）について、検査仕様情報１２１ｆと取得される外形に関する情報に基づき、差分、過不足、不審な点等を検査してよい。なお、検査部１３３は、対象となる機器またはシステム等の外形仕様についての整合性検査の範疇に含まれる検査を限定無く実施できる。 The inspection unit 133 performs a predetermined consistency inspection based on the external specification information 121c included in the inspection specification information 121f, using measurements by physical sensors (e.g., cameras, microphones, etc.) or acquired image or video data. Furthermore, the inspection unit 133 may inspect not only physical assemblies but also electronic component assemblies (two-dimensional images or three-dimensional videos, etc.) as having similar characteristics. Specifically, the inspection unit 133 may inspect the external characteristics (e.g., size, color, shape, pattern, etc.) expressed as a whole as the target components, for differences, excesses, deficiencies, suspicious points, etc., based on the inspection specification information 121f and the acquired information on the external shape. Note that the inspection unit 133 can perform any inspection that falls within the scope of a consistency inspection of the external specifications of the target device or system, etc., without any restrictions.
　検査部１３３は、検査仕様情報１２１ｆに含まれる動作仕様情報１２１ｄに基づく整合性検査について、検査対象の機器またはシステム等、あるいは周辺装置が備えるモニタリング機能、動作ログ等（以降、「動作データ」と表記）に基づいて、検査対象の動作仕様と動作データとの整合性に関する検査を実施する。具体的には、検査部１３３は、対象となる構成要素として、構成要素が全体として行なう動作仕様（例えば動作パターン、範囲、速度、入出力仕様、データ処理仕様等）について、検査仕様情報１２１ｆと動作データに基づき、差分、過不足、不正な動作等について検査してよい。なお、検査部１３３は、構成要素が全体として行なう動作仕様の整合性検査の範疇に含まれる検査を限定無く実施できる。 The inspection unit 133 performs a consistency check based on the operation specification information 121d included in the inspection specification information 121f, based on the monitoring function, operation log, etc. (hereinafter referred to as "operation data") of the device or system to be inspected or the peripheral device, to inspect the consistency between the operation specifications of the inspection target and the operation data. Specifically, the inspection unit 133 may inspect the operation specifications (e.g. operation pattern, range, speed, input/output specifications, data processing specifications, etc.) performed by the components as a whole as the target components, based on the inspection specification information 121f and the operation data, for differences, excesses, deficiencies, incorrect operations, etc. Note that the inspection unit 133 can perform any inspection that falls within the scope of the consistency check of the operation specifications performed by the components as a whole, without any restrictions.
　検査部１３３は、検査仕様情報１２１ｆに含まれる状態仕様情報１２１ｅに基づく整合性検査について検査対象の機器またはシステム等、あるいは周辺装置が備えるモニタリング機能、通信ログ等（以降、「通信データ」と表記）に基づいて、検査対象の状態仕様（通信仕様）と通信データとの整合性検査に関する検査を行う。具体的には、検査部１３３は、対象となる構成要素として、全体としてとり得る状態の仕様（例えば、温度、速度、音量・音質等の状態に関する仕様）について、検査仕様情報１２１ｆと通信データに基づき、差分、過不足、不正な動作等について検査してよい。なお、検査部１３３は、構成要素が全体としてとり得る状態の仕様情報の整合性検査の範疇に含まれる検査を限定無く実施できる。 The inspection unit 133 performs an inspection for a consistency inspection based on the state specification information 121e included in the inspection specification information 121f, based on the monitoring function, communication log, etc. (hereinafter referred to as "communication data") of the device or system to be inspected or the peripheral device, and performs an inspection regarding the consistency inspection between the state specification (communication specification) of the inspection target and the communication data. Specifically, the inspection unit 133 may inspect the specifications of the state that can be taken as a whole for the target component (for example, specifications related to the state of temperature, speed, volume/sound quality, etc.) for differences, excesses, deficiencies, incorrect operation, etc., based on the inspection specification information 121f and the communication data. Note that the inspection unit 133 can perform an inspection that falls within the scope of a consistency inspection of specification information of the state that can be taken by the component as a whole, without any restrictions.
（出力部１３４）
　出力部１３４は、検査部１３３の検査結果をユーザ等の端末装置２００に出力する。また、出力部１３４は、検査部１３３の検査結果を所定のユーザ（例えば、検査担当者や運用者等）またはベンダの端末装置２００等に出力することができる。なお、前述の所定のユーザまたはベンダは、１人であってもよいし、複数人であってもよい。 (Output unit 134)
The output unit 134 outputs the inspection result of the inspection unit 133 to the terminal device 200 of a user or the like. In addition, the output unit 134 can output the inspection result of the inspection unit 133 to a predetermined user (for example, an inspector or an operator) or a vendor's terminal device 200 or the like. Note that the predetermined user or vendor may be one person or multiple people.
　加えて、出力部１３４により出力される検査結果の出力形式は特に限定されない。例えば、出力部１３４は、ユーザが五感を用いて知覚できる方法（例えば、テキストや図等の視覚情報、音声情報）であれば、特に形式を限定せずに出力することができる。 In addition, the output format of the test results output by the output unit 134 is not particularly limited. For example, the output unit 134 can output the results in any format as long as the results can be perceived by the user using the five senses (for example, visual information such as text or figures, or audio information).
（端末装置２００）
　端末装置２００は、検査装置１００の出力部１３４により出力される検査結果を受け付け、ユーザ等（例えば、検査担当者、機器またはシステム等の運用者、機器またはシステム等のベンダ）に表示する。なお、端末装置２００は、例えば、デスクトップ型ＰＣ、タブレット型ＰＣ、ノート型ＰＣ、携帯電話機、スマートフォン、ＰＤＡ（Personal　Digital　Assistant）等の情報処理装置であってよく、必要に応じた情報処理装置としての形態が選択されてよい。 (Terminal device 200)
The terminal device 200 receives the inspection results output by the output unit 134 of the inspection device 100, and displays them to a user (e.g., an inspector, an operator of the device or system, a vendor of the device or system, etc.). The terminal device 200 may be an information processing device such as a desktop PC, a tablet PC, a notebook PC, a mobile phone, a smartphone, a PDA (Personal Digital Assistant), etc., and the form of the information processing device may be selected according to need.
〔２－３．処理手順〕
　ここから、実施形態１に係る検査装置１００の手順を、図４を用いて説明する。まず、受付部１３１は、機器またはシステム等の個別の構成要素に関する情報（構成情報）を、受け付ける（ステップＳ１０１）。なお、受付部１３１は、ＮＷ等を介して対象の機器またはシステム等から直接前述の各構成要素に関する情報を受け付けてもよいし、ユーザやベンダ等が入力する情報を受け付けてもよい。 2-3. Processing Procedure
From here, the procedure of the inspection device 100 according to the first embodiment will be described with reference to Fig. 4. First, the reception unit 131 receives information (configuration information) on individual components of a device or a system (step S101). Note that the reception unit 131 may receive information on each of the aforementioned components directly from the target device or system via a network or the like, or may receive information input by a user, a vendor, or the like.
　生成部１３２は、前述の個別の構成要素に関する情報（構成情報）に含まれる、構造仕様情報１２１ａと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、を所定の形式で組み合わせて検査仕様情報１２１ｆを生成する（ステップＳ１０２）。 The generating unit 132 generates the inspection specification information 121f by combining, in a predetermined format, the structural specification information 121a, the external specification information 121c, the operational specification information 121d, and the state specification information 121e contained in the information (configuration information) relating to the individual components described above (step S102).
　検査部１３３は、生成部１３２により生成された検査仕様情報１２１ｆに基づき、所定の整合性検査を実施する（ステップＳ１０３）。なお、検査部１３３は、所定の検査として、検査仕様情報１２１ｆを用いて、構造仕様情報１２１ａに基づく構成要素の過不足検査としての整合性検査と、外形仕様情報１２１ｃに基づく整合性検査と、動作仕様情報１２１ｄに基づく整合性検査と、状態仕様情報１２１ｅに基づく整合性検査と、の全てを実施してもよいし、必要に応じて１つまたは複数の組み合わせを実施してよい。 The inspection unit 133 performs a predetermined consistency check based on the inspection specification information 121f generated by the generation unit 132 (step S103). Note that, as the predetermined check, the inspection unit 133 may use the inspection specification information 121f to perform all of the following: a consistency check as a check for excess or deficiency of components based on the structural specification information 121a; a consistency check based on the external specification information 121c; a consistency check based on the operational specification information 121d; and a consistency check based on the state specification information 121e, or may perform one or a combination of multiple checks as necessary.
　出力部１３４は、検査部１３３の検査結果を所定のユーザ等の端末装置２００に出力し（ステップＳ１０４）、工程を終了する。なお、出力部１３４は、例えば、ユーザ等の端末装置２００に検査結果として、機器またはシステム等の構成要素の過不足や、差分や、不整合箇所、等に関する情報を、テキスト、グラフ、画像、映像、音声等のユーザが五感で感知できる手段で出力してよい。 The output unit 134 outputs the inspection results of the inspection unit 133 to the terminal device 200 of a specified user, etc. (step S104), and ends the process. Note that the output unit 134 may output, for example, information regarding excesses/deficiencies, differences, inconsistencies, etc. of components of the equipment or system, etc., as the inspection results to the terminal device 200 of the user, etc., in a manner that the user can perceive with their five senses, such as text, graphs, images, videos, sounds, etc.
〔３．実施形態２〕
　ここから、異なる実施形態として、実施形態２について説明を行う。 3. Second embodiment
From here, a second embodiment will be described as a different embodiment.
〔３－１．実施形態２の概要〕
　実施形態２では、機器またはシステム等のベンダによってあらかじめ生成される機器またはシステム等の個別の構成要素に関する情報（構成情報）と予め定義される外部定義情報１２２ａとを用いて、本実施形態の検査装置１００が整合性検査に関する所定の処理を実施する。 3-1. Overview of the Second Embodiment
In the second embodiment, the inspection device 100 of the present embodiment performs a predetermined process related to consistency inspection using information (configuration information) regarding individual components of a device or system, etc., that is generated in advance by a vendor of the device or system, etc., and pre-defined external definition information 122a.
　検査装置１００の受付部１３１は、検査対象の機器またはシステム等の個別の構成要素に関する情報（構成情報）を受け付ける。生成部１３２は、受け付けられた構成情報に基づき、検査仕様情報１２１ｆ（構造仕様情報１２１ａ、集合仕様情報１２１ｂ、外形仕様情報１２１ｃ、動作仕様情報１２１ｄ、状態仕様情報１２１ｅを所定の方法で組み合わせた情報）を生成する。 The reception unit 131 of the inspection device 100 receives information (configuration information) about individual components of the equipment or system to be inspected. The generation unit 132 generates inspection specification information 121f (information that combines, in a predetermined manner, the structure specification information 121a, the assembly specification information 121b, the external shape specification information 121c, the operation specification information 121d, and the state specification information 121e) based on the received configuration information.
　検査装置１００の生成部１３２は、前述の検査仕様情報１２１ｆと、予め定義される外部定義情報１２２ａと検査仕様情報１２１ｆとを用いて照合部１３５により照合される関連外部定義情報１２２ｂとに基づき、追加検査仕様情報１２１ｇを生成する。そして、検査装置１００の検査部１３３は、前述の追加検査仕様情報１２１ｇを用いて検査対象の構成要素の過不足検査、外形仕様、動作仕様、状態仕様に基づく整合性検査を実施する。なお、実施形態２における各整合性検査の詳細は、後述の「検査部１３３」の項目で併せて説明する。 The generation unit 132 of the inspection device 100 generates additional inspection specification information 121g based on the aforementioned inspection specification information 121f and related external definition information 122b that is matched by the matching unit 135 using predefined external definition information 122a and the inspection specification information 121f. Then, the inspection unit 133 of the inspection device 100 uses the aforementioned additional inspection specification information 121g to perform a consistency check based on the excess/deficiency check of the components to be inspected, the external specifications, the operation specifications, and the state specifications. Details of each consistency check in embodiment 2 will be explained in the section "Inspection unit 133" below.
　検査装置１００の出力部１３４は、前述の検査結果をユーザ等（検査担当者等）の端末装置２００に出力する。なお、検査装置１００は、関連外部定義情報１２２ｂが属性情報を含む場合には、併せて他ユーザ（運用者等）端末装置２００等に出力してよい。 The output unit 134 of the inspection device 100 outputs the above-mentioned inspection results to the terminal device 200 of the user (e.g., the person in charge of inspection). Note that if the related external definition information 122b includes attribute information, the inspection device 100 may also output it to the terminal device 200 of another user (e.g., the operator).
〔３－２．検査装置の構成〕
　次に、実施形態２における検査装置１００の構成について、図５を用いて説明を行う。実施形態２における検査装置１００は、実施形態１と同様の構成として、通信部１１０と、記憶部１２０と、制御部１３０と、を有し、通信部１１０を介して外部の装置等（例えば、端末装置２００）と通信を行う。従って、本項目では、差異が含まれる構成情報記憶部１２１（集合仕様情報１２１ｂ、追加検査仕様情報１２１ｇ）と、外部定義情報記憶部１２２（外部定義情報１２２ａ、関連外部定義情報１２２ｂ）と、生成部１３２と、検査部１３３と、照合部１３５と、について説明し、それ以外の詳細な説明は省略する。 3-2. Configuration of the inspection device
Next, the configuration of the inspection device 100 in the second embodiment will be described with reference to FIG. 5. The inspection device 100 in the second embodiment has a communication unit 110, a storage unit 120, and a control unit 130, which are the same as those in the first embodiment, and communicates with an external device (e.g., a terminal device 200) via the communication unit 110. Therefore, in this section, the configuration information storage unit 121 (set specification information 121b, additional inspection specification information 121g) including differences, the external definition information storage unit 122 (external definition information 122a, related external definition information 122b), the generation unit 132, the inspection unit 133, and the collation unit 135 will be described, and other detailed descriptions will be omitted.
（集合仕様情報１２１ｂ）
　構成情報記憶部１２１は、集合仕様情報１２１ｂとして、構成情報の一部を構成する構成要素の集合体に関する情報を記憶する。具体的には、集合仕様情報１２１ｂは、構成情報の一部を構成する構成要素の集合体を構成する個々の構成要素（例えば、ファイルやデータ等）を網羅的に記述する代わりに、前述の集合体の機能の意味を表わす名称が記述された情報を記憶できる。 (Set specification information 121b)
The configuration information storage unit 121 stores information on an aggregate of components that constitute a part of the configuration information as the aggregate specification information 121b. Specifically, the aggregate specification information 121b can store information in which a name expressing the meaning of the function of the aggregate is described, instead of comprehensively describing each component (e.g., file, data, etc.) that constitutes the aggregate of components that constitute a part of the configuration information.
　なお、前述の「名称」とは、対象となる構成要素の集合が全体としてもたらす働きの意味を表わしてよい。例えば、集合仕様情報１２１ｂは、Ｗｅｂサーバ、データベースサーバ、メールサーバ等のような機器またはシステム等の一部を構成する機能を表す名称や、Ａｐａｃｈｅ　ＨＴＴＰ　Ｓｅｒｖｅｒ、Ｐｏｓｔｇｒｅｓｑｌ、ＳＳＨ、ＯｐｅｎＳＳＬ等のような機器またはシステム等の一部を構成するソフトウェアパッケージの名称が含まれていてよい。また、前述した情報はあくまで一例であり、集合仕様情報１２１ｂは、前述した情報以外の項目や情報を含んでいてよい。 The "name" mentioned above may represent the function brought about by the set of target components as a whole. For example, the set specification information 121b may include names representing functions constituting part of a device or system, such as a web server, database server, or mail server, or names of software packages constituting part of a device or system, such as Apache HTTP Server, PostgreSQL, SSH, OpenSSL, etc. Also, the information mentioned above is merely an example, and the set specification information 121b may include items and information other than the information mentioned above.
（追加検査仕様情報１２１ｇ）
　構成情報記憶部１２１は、生成部１３２により生成された追加検査仕様情報１２１ｇを記憶する。ここで、図６を用いて、構成情報記憶部１２１が記憶する追加検査仕様情報１２１ｇについて説明する。構成情報記憶部１２１は、一例として、図６のテーブル図に示すような形式で、各構成要素が組み合わされた検査仕様情報１２１ｆに関連外部定義情報１２２ｂを追加した情報を、追加検査仕様情報１２１ｇとして記憶することができる。 (Additional inspection specification information 121g)
The configuration information storage unit 121 stores the additional inspection specification information 121g generated by the generation unit 132. The additional inspection specification information 121g stored in the configuration information storage unit 121 will be described with reference to Fig. 6. As an example, the configuration information storage unit 121 can store, as the additional inspection specification information 121g, information in which related external definition information 122b is added to inspection specification information 121f in which each component is combined, in a format as shown in the table diagram of Fig. 6.
　図６では、「構造情報の対象」と、構造仕様情報１２１ａとして「ソフトウェア名」、「ファイル名」、「属性情報」と、集合仕様情報１２１ｂとして「機能名称」、「ソフトウェアパッケージ名称」と、外形仕様情報１２１ｃとして「大きさ」、「色」、「形状」、「模様」と、動作仕様情報１２１ｄとして「動作パターン」、「範囲」、「速度」、「入出力仕様」、「データ処理仕様」と、状態仕様情報１２１ｅとして「温度」、「速度」、「音量」、「音質」と、関連外部定義情報１２２ｂとして「補完定義」、「追加定義」、「属性定義」と、といった項目を記憶することができる。 In FIG. 6, items that can be stored include the "target of structural information," "software name," "file name," and "attribute information" as structural specification information 121a, "function name" and "software package name" as set specification information 121b, "size," "color," "shape," and "pattern" as external specification information 121c, "operation pattern," "range," "speed," "input/output specifications," and "data processing specifications" as operation specification information 121d, "temperature," "speed," "volume," and "sound quality" as status specification information 121e, and "complementary definition," "additional definition," and "attribute definition" as related external definition information 122b.
　また、構成情報記憶部１２１は、前述した情報を機器またはシステム等の構成要素ごと（例えば、図６の機器ＡＢＣ、またはシステムＤＥＦ等）に記憶することができる。なお、前述した項目はあくまで一例であり、構成情報記憶部１２１は、前述した項目や情報以外にも必要に応じて、追加検査仕様情報１２１ｇの範疇の情報を記憶してよい。 The configuration information storage unit 121 can also store the above-mentioned information for each component of a device or system (for example, device ABC or system DEF in FIG. 6). Note that the above-mentioned items are merely examples, and the configuration information storage unit 121 may store information in the category of additional inspection specification information 121g in addition to the above-mentioned items and information, as necessary.
（外部定義情報記憶部１２２）
　ここから、図５に戻り説明を続ける。外部定義情報記憶部１２２は、外部定義情報１２２２ａと、関連外部定義情報１２２ｂと、を記憶する。 (External definition information storage unit 122)
From this point, the explanation will be continued by returning to Fig. 5. The external definition information storage unit 122 stores external definition information 1222a and related external definition information 122b.
（外部定義情報１２２ａ）
　外部定義情報記憶部１２２は、外部定義情報１２２ａとして機器またはシステム等の検査に用いる付随情報を記憶する。なお、以下に記載する情報はあくまで一例であり、外部定義情報記憶部１２２は、前述した情報以外の項目や情報を記憶できる。 (External definition information 122a)
The external definition information storage unit 122 stores, as external definition information 122a, associated information used for inspecting devices, systems, etc. Note that the information described below is merely an example, and the external definition information storage unit 122 can store items and information other than the above-mentioned information.
　外部定義情報記憶部１２２は、外部定義情報１２２ａに含まれる検査仕様情報１２１ｆの補完定義に関する情報（名称が表わす集合体に含まれると想定される構成要素として、例えば、ハードウェア部品やソフトウェア部品等を表わす情報等）を記憶できる。 The external definition information storage unit 122 can store information regarding the complementary definition of the inspection specification information 121f included in the external definition information 122a (such as information representing hardware components, software components, etc., as components assumed to be included in the collection represented by the name).
　外部定義情報記憶部１２２は、外部定義情報１２２ａに含まれる検査仕様情報１２１ｆの追加定義に関する情報（例えば、名称が表わす集合体が備える外形仕様、動作仕様、または状態仕様に関する情報等）を記憶できる。 The external definition information storage unit 122 can store information regarding additional definitions of the inspection specification information 121f included in the external definition information 122a (for example, information regarding the external specifications, operational specifications, or state specifications of the aggregate represented by the name).
　外部定義情報記憶部１２２は、外部定義情報１２２ａに含まれる検査仕様情報１２１ｆの属性定義に関する情報（名称が表わす集合体に関する属性情報として、例えば、カテゴリ、開発者、製造者、作成日時等の情報等）を記憶できる。 The external definition information storage unit 122 can store information related to the attribute definition of the inspection specification information 121f included in the external definition information 122a (attribute information related to the collection represented by the name, such as category, developer, manufacturer, creation date and time, etc.).
（関連外部定義情報１２２ｂ）
　外部定義情報記憶部１２２は、後述の照合部１３５により照合される関連外部定義情報１２２ｂを記憶する。なお、前述の関連外部定義情報１２２ｂは、予め定義される外部定義情報１２２ａと検査仕様情報１２１ｆとを用いて、後述の照合部１３５が照合（関連付け）した情報である。 (Related external definition information 122b)
The external definition information storage unit 122 stores related external definition information 122b to be collated by a collation unit 135 (described later). The related external definition information 122b is information collated (associated) by the collation unit 135 (described later) using predefined external definition information 122a and inspection specification information 121f.
　具体的には、関連外部定義情報１２２ｂは、機器またはシステム等のユーザがそれらに付随する検査仕様情報１２１ｆとともに、機器またはシステム等の検査に用いる情報である。例えば、関連外部定義情報１２２ｂは、検査仕様情報１２１ｆの補完定義として「名称が表わす集合体に含まれると想定される構成要素（ハードウェア・ソフトウェア部品）を表わす情報」と、検査仕様情報１２１ｆの追加定義として「名称が表わす集合体が備えると外形的仕様、動作仕様、または状態仕様に関する情報」と、検査仕様情報１２１ｆの属性定義として「名称が表わす集合体に関する属性情報として、例えば、カテゴリ、開発者、製造者、作成日時等の情報」と、を含んでいてよい。 Specifically, the related external definition information 122b is information used by a user of a device or system, etc., together with the associated inspection specification information 121f, to inspect the device or system, etc. For example, the related external definition information 122b may include "information representing the components (hardware and software parts) assumed to be included in the aggregate represented by the name" as a supplementary definition of the inspection specification information 121f, "information relating to the external specifications, operational specifications, or status specifications that the aggregate represented by the name has" as an additional definition of the inspection specification information 121f, and "attribute information relating to the aggregate represented by the name, such as information on the category, developer, manufacturer, creation date and time, etc." as an attribute definition of the inspection specification information 121f.
（生成部１３２）
　生成部１３２は、検査仕様情報１２１ｆと関連外部定義情報１２２ｂとを用いて、追加検査仕様情報１２１ｇを生成する。具体的には、生成部１３２は、機器またはシステム等の構成に関する情報である構成情報に含まれる、構造仕様情報１２１ａと、集合仕様情報１２１ｂと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、関連外部定義情報１２２ｂと、の少なくとも１つを含む追加検査仕様情報１２１ｇを生成する。 (Generation unit 132)
The generating unit 132 generates additional inspection specification information 121g using the inspection specification information 121f and the related external definition information 122b. Specifically, the generating unit 132 generates additional inspection specification information 121g including at least one of the structure specification information 121a, the set specification information 121b, the external shape specification information 121c, the operation specification information 121d, the state specification information 121e, and the related external definition information 122b, which are included in the configuration information that is information related to the configuration of the device, system, etc.
（検査部１３３）
　検査部１３３は、所定の整合性についての検査として、追加検査仕様情報１２１ｇを用いて、構造仕様情報１２１ａに基づく整合性検査と、集合仕様情報１２１ｂに基づく整合性検査と、外形仕様情報１２１ｃに基づく整合性検査と、動作仕様情報１２１ｄに基づく整合性検査と、状態仕様情報１２１ｅに基づく整合性検査と、の１つまたは複数の組み合わせを実施する。 (Inspection Unit 133)
As a test for specified consistency, the inspection unit 133 uses the additional inspection specification information 121g to perform one or more combinations of a consistency check based on the structural specification information 121a, a consistency check based on the set specification information 121b, a consistency check based on the external specification information 121c, a consistency check based on the operational specification information 121d, and a consistency check based on the status specification information 121e.
　検査部１３３は、追加検査仕様情報１２１ｇに含まれる構造仕様情報１２１ａに基づく整合性検査として、追加検査仕様情報１２１ｇにソフトウェア部品が含まれる場合には、検査対象の機器またはシステム等の記憶装置に記憶されるデータ（例えば、ソフトウェアを構成するファイル等）の過不足を検査する。他方、検査装置１００は、追加検査仕様情報１２１ｇにハードウェア部品が含まれる場合には、検査対象の機器またはシステム等のＯＳやファームウェアが備える機能等を利用して部品の過不足を検査する。 The inspection unit 133 performs a consistency check based on the structural specification information 121a included in the additional inspection specification information 121g by checking whether there is a surplus or deficiency of data (e.g., files constituting the software) stored in a storage device of the device or system being inspected when the additional inspection specification information 121g includes software components. On the other hand, when the additional inspection specification information 121g includes hardware components, the inspection device 100 checks whether there is a surplus or deficiency of components by using functions provided in the OS or firmware of the device or system being inspected.
　検査部１３３は、集合仕様情報１２１ｂと外部定義情報１２２ａを用いて照合部１３５により照合された関連外部定義情報１２２ｂ（構成情報の補完定義）に基づいて、追加検査仕様情報１２１ｇに名称が表わす集合体に含まれると想定される構成要素（例えば、ハードウェア部品やソフトウェア部品）が規定されている場合には、これに基づく検査も実施する。 If components (e.g., hardware components or software components) that are expected to be included in the aggregate represented by the name in the additional inspection specification information 121g are specified, the inspection unit 133 also performs an inspection based on this, based on the related external definition information 122b (complementary definition of configuration information) matched by the matching unit 135 using the set specification information 121b and the external definition information 122a.
　検査部１３３は、外形仕様情報１２１ｃに基づく整合性検査として、物理センサ（例えば、カメラ、マイク等）による測定、または画像データや映像データ等を用いて検査を実施する。なお、検査装置１００は、外形仕様情報１２１ｃと外部定義情報１２２ａを用いて照合部１３５により照合された関連外部定義情報１２２ｂ（検査仕様情報１２１ｆの追加定義）が追加検査仕様情報１２１ｇに含まれる場合には、これも加えた検査も実施する。 The inspection unit 133 performs a consistency inspection based on the external specification information 121c, using measurements by physical sensors (e.g., cameras, microphones, etc.) or image data, video data, etc. Note that if the related external definition information 122b (additional definition of the inspection specification information 121f) matched by the matching unit 135 using the external specification information 121c and the external definition information 122a is included in the additional inspection specification information 121g, the inspection device 100 also performs an inspection that includes this information.
　検査部１３３は、動作仕様情報１２１ｄに基づく整合性検査として、検査対象の機器やシステム、あるいは周辺装置が備えるモニタリング機能、動作ログ等（動作データ）に基づき、検査対象の機器またはシステム等の動作仕様と、前述の実動作に基づく動作データとの整合性検査を行なう。なお、検査装置１００は、動作仕様情報１２１ｄと外部定義情報１２２ａを用いて照合部１３５により照合された関連外部定義情報１２２ｂ（検査仕様情報１２１ｆの追加定義）が追加検査仕様情報１２１ｇに含まれる場合には、これも加えた検査も実施する。 The inspection unit 133 performs a consistency check based on the operation specification information 121d, checking the consistency between the operation specifications of the device or system to be inspected, etc., and the operation data based on the actual operation described above, based on the monitoring functions, operation logs, etc. (operation data) of the device or system to be inspected, or peripheral devices. Note that if related external definition information 122b (additional definition of inspection specification information 121f) collated by the collation unit 135 using the operation specification information 121d and external definition information 122a is included in the additional inspection specification information 121g, the inspection device 100 also performs an inspection that includes this information.
　検査部１３３は、状態仕様情報１２１ｅに基づく整合性検査として、検査対象の機器やシステム、あるいは周辺装置が備えるモニタリング機能、通信ログ等（通信データ）に基づき、検査対象の機器またはシステム等の状態仕様（通信仕様）と実状態に基づく通信データとの整合性検査を実施する。なお、検査装置１００は、状態仕様情報１２１ｅと外部定義情報１２２ａを用いて照合部１３５により照合された関連外部定義情報１２２ｂ（検査仕様情報１２１ｆの追加定義）が追加検査仕様情報１２１ｇに含まれる場合には、これも加えた検査も実施する。 The inspection unit 133 performs a consistency check based on the state specification information 121e, by checking the consistency between the state specifications (communication specifications) of the device or system to be inspected and the communication data based on the actual state, based on the monitoring function and communication logs (communication data) of the device or system to be inspected or the peripheral device. Note that if related external definition information 122b (additional definition of inspection specification information 121f) collated by the collation unit 135 using the state specification information 121e and external definition information 122a is included in the additional inspection specification information 121g, the inspection device 100 also performs an inspection that includes this.
（照合部１３５）
　照合部１３５は、整合性検査に用いる情報である外部定義情報１２２ａに基づき、検査仕様情報１２１ｆに関連付く情報を関連外部定義情報１２２ｂとして照合する。具体的には、照合部１３５は、外部定義情報記憶部１２２が記憶する外部定義情報１２２ａに基づいて、受付部１３１が受け付ける検査仕様情報１２１ｆに関連付く情報を関連外部定義情報１２２ｂとして照合する。 (Collation unit 135)
The collation unit 135 collates information associated with the inspection specification information 121f as related external definition information 122b based on the external definition information 122a, which is information used for the consistency check. Specifically, the collation unit 135 collates information associated with the inspection specification information 121f received by the reception unit 131 as related external definition information 122b based on the external definition information 122a stored in the external definition information storage unit 122.
　なお、ここでいう関連付く情報とは、検査仕様情報１２１ｆに含まれる情報（例えば、構造仕様情報１２１ａ、集合仕様情報１２１ｂ、外形仕様情報１２１ｃ、動作仕様情報１２１ｄ、状態仕様情報１２１ｅ）と、一定以上の一致度を有する外部定義情報１２２ａである。例えば、照合部１３５は、検査仕様情報１２１ｆの集合仕様情報１２１ｂに含まれる「名称」と一致する「名称」を含む外部定義情報１２２ａを関連づくとみなすという条件に基づき特定してもよいし、複数の情報を組み合わせた条件で一致とみなすという条件に基づき特定してもよい。なお、照合部１３５は、前述した条件は必要に応じて変更して、照合の処理を実施することができる。 Note that the associated information here refers to external definition information 122a that has a certain degree of match with the information included in inspection specification information 121f (e.g., structural specification information 121a, set specification information 121b, external specification information 121c, operational specification information 121d, and state specification information 121e). For example, the matching unit 135 may identify external definition information 122a that includes a "name" that matches a "name" included in set specification information 121b of inspection specification information 121f as being associated, or may identify external definition information 122a based on a condition that a match is determined based on a combination of multiple pieces of information. Note that the matching unit 135 can change the above-mentioned conditions as necessary and perform the matching process.
〔３－３．処理手順〕
　ここから、実施形態２に係る検査装置１００の検査の手順を、図７を用いて説明する。まず、受付部１３１は、機器またはシステム等の個別の構成要素に関する情報（構成情報）を、受け付ける（ステップＳ２０１）。なお、受付部１３１は、ＮＷ等を介して対象の機器またはシステム等から直接前述の各構成要素に関する情報を受け付けてもよいし、ユーザやベンダ等が入力する情報を受け付けてもよい。 3-3. Processing Procedure
From here, the inspection procedure of the inspection device 100 according to the second embodiment will be described with reference to Fig. 7. First, the reception unit 131 receives information (configuration information) on individual components of a device or a system (step S201). Note that the reception unit 131 may receive information on each of the aforementioned components directly from the target device or system via a network or the like, or may receive information input by a user, a vendor, or the like.
　照合部１３５は、所定の整合性についての検査に用いる情報である外部定義情報１２２ａから、検査仕様情報１２１ｆに関連付く情報を関連外部定義情報１２２ｂとして照合する（ステップＳ２０２）。 The comparison unit 135 compares information related to the test specification information 121f from the external definition information 122a, which is information used to check for a specified consistency, as related external definition information 122b (step S202).
　生成部１３２は、前述の個別の構成要素に関する情報（構成情報）に含まれる構造仕様情報１２１ａと、集合仕様情報１２１ｂと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、を所定の形式で組み合わせを行い、更に照合部１３５が照合する関連外部定義情報１２２ｂを加えて、追加検査仕様情報１２１ｇを生成する（ステップＳ２０３）。 The generating unit 132 combines the structural specification information 121a, the assembly specification information 121b, the external specification information 121c, the operation specification information 121d, and the state specification information 121e, which are included in the information (configuration information) relating to the individual components described above, in a predetermined format, and further adds the related external definition information 122b, which is matched by the matching unit 135, to generate additional inspection specification information 121g (step S203).
　検査部１３３は、生成部１３２により生成された追加検査仕様情報１２１ｇに基づき、所定の整合性検査を実施する（ステップＳ２０４）。なお、検査部１３３は、所定の整合性検査として、構造仕様情報１２１ａと集合仕様情報１２１ｂに基づく構成要素の過不足検査としての整合性検査と、外形仕様情報１２１ｃに基づく整合性検査と、動作仕様情報１２１ｄに基づく整合性検査と、状態仕様情報１２１ｅに基づく整合性検査と、の１つまたは複数の組み合わせを必要に応じて実施してよい。なお、検査部１３３は、検査仕様情報１２１ｆに関連外部定義情報１２２ｂが含まれている場合（言い換えると、追加検査仕様情報１２１ｇを用いる場合）には、前述の関連外部定義情報１２２ｂを加えた整合性検査を実施してよい。 The inspection unit 133 performs a predetermined consistency check based on the additional inspection specification information 121g generated by the generation unit 132 (step S204). Note that, as the predetermined consistency check, the inspection unit 133 may perform one or more combinations of a consistency check as a check for excess or deficiency of components based on the structure specification information 121a and the set specification information 121b, a consistency check based on the external specification information 121c, a consistency check based on the operation specification information 121d, and a consistency check based on the state specification information 121e as necessary. Note that, when the inspection specification information 121f includes the related external definition information 122b (in other words, when the additional inspection specification information 121g is used), the inspection unit 133 may perform a consistency check that includes the above-mentioned related external definition information 122b.
　出力部１３４は、検査部１３３の検査結果を所定のユーザ等の端末装置２００に出力し（ステップＳ２０５）、工程を終了する。なお、出力部１３４は、例えば、ユーザの端末装置２００等に、検査結果として、機器またはシステム等の構成要素の過不足や、差分や、不整合箇所、等に関する情報を、テキスト、グラフ、画像、映像、音声等のユーザが五感で感知できる手段で出力してよい。 The output unit 134 outputs the inspection results of the inspection unit 133 to the terminal device 200 of a specified user, etc. (step S205), and ends the process. Note that the output unit 134 may output, for example, information regarding excesses/deficiencies, differences, inconsistencies, etc. of components of the equipment or system, etc., as inspection results to the user's terminal device 200, etc., in a manner that the user can perceive with their five senses, such as text, graphs, images, videos, sounds, etc.
〔４．効果〕
　以下の項目で本実施形態の検査装置１００が提供する効果について説明する。本実施形態に係る検査装置１００は、機器またはシステムの構成要素に関する情報である構成情報に含まれる、構造仕様情報１２１ａと、集合仕様情報１２１ｂと、外形仕様情報１２１ｃと、動作仕様情報１２１ｄと、状態仕様情報１２１ｅと、の少なくとも１つを含む検査仕様情報１２１ｆを生成し、検査仕様情報１２１ｆに基づき、機器またはシステムの構成要素の仕様と機器またはシステムの実際の構成要素とを比較する整合性検査を行う、ことを特徴とする。したがって、本実施形態によれば、以下のような効果を奏する。 4. Effects
The effects provided by the inspection device 100 of this embodiment will be described in the following items. The inspection device 100 according to this embodiment is characterized in that it generates inspection specification information 121f including at least one of structure specification information 121a, set specification information 121b, external shape specification information 121c, operation specification information 121d, and state specification information 121e, which are included in configuration information that is information about the components of a device or system, and performs a consistency check that compares the specifications of the components of the device or system with the actual components of the device or system based on the inspection specification information 121f. Therefore, according to this embodiment, the following effects are achieved.
　検査装置１００は、ベンダがユーザに対して機器またはシステム等の構成を細部までを表わす詳細な構成に関する情報を開示しない場合でも、ユーザが取得可能な範囲の機器またはシステム等の構成要素に関する情報を用いて生成される検査仕様情報１２１ｆに基づく整合性検査を実現する、という効果を提供する。 The inspection device 100 provides the effect of implementing consistency inspection based on inspection specification information 121f that is generated using information about the components of a device or system that is available to the user, even if the vendor does not disclose detailed configuration information that describes the configuration of the device or system in detail to the user.
　また、検査装置１００は、構造仕様情報１２１ａにより規定される階層化された構成情報を用いて検査仕様情報１２１ｆを生成することにより、検査対象とする機器またはシステム等の一部分を選択する等の限定された範囲のみの検査を可能とし、検査の効率性や構成情報のメンテナンス性を向上させる、という効果を提供する。 In addition, the inspection device 100 generates inspection specification information 121f using hierarchical configuration information defined by the structural specification information 121a, making it possible to inspect only a limited range, such as by selecting a portion of the equipment or system to be inspected, thereby improving the efficiency of the inspection and the maintainability of the configuration information.
　検査装置１００は、ユーザが取得可能な範囲の機器またはシステム等の構成要素に関する情報を用いて生成する検査仕様情報１２１ｆに基づく整合性検査を実現により、ベンダが機器またはシステム等の構成の細部まで一律的に全開示するのではなく、ユーザ自らの開示ポリシに基づく開示レベル（詳細度あるいは抽象度）で構成に関する情報を柔軟に記述あるいは開示することを可能とする、という効果を提供する。 The inspection device 100 realizes consistency inspection based on inspection specification information 121f, which is generated using information about the components of a device or system, etc., that is available to the user, and provides the effect of allowing the user to flexibly describe or disclose information about the configuration at a disclosure level (level of detail or abstraction) based on the user's own disclosure policy, rather than the vendor disclosing all details of the configuration of the device or system, etc. in a uniform manner.
　検査装置１００は、ユーザがベンダから開示された機器またはシステム等の構成に関する情報の開示レベルに応じて、構成要素の過不足検査や動作検査を行なうことを可能とし、ベンダが構成に関する情報を一切開示しない場合における従来の検査よりも、検査を実施できる可能性とその実効的を向上させる、という効果を提供する。 The inspection device 100 allows the user to perform component deficiency/excess inspections and operation inspections depending on the level of information disclosed by the vendor about the configuration of the device or system, etc., thereby improving the possibility of performing inspections and their effectiveness compared to conventional inspections when the vendor does not disclose any information about the configuration.
　そして、検査装置１００は、機器またはシステム等のベンダとユーザの間に、構成に関する情報の開示レベルを柔軟に相互調整できるしくみを構築でき、サプライチェーンにおける機器に関するセキュリティの透明性が向上する、という効果を提供する。 The inspection device 100 also provides the advantage of being able to create a mechanism that allows flexible mutual adjustment of the level of disclosure of configuration information between the vendor of the device or system and the user, thereby improving the transparency of security regarding devices in the supply chain.
〔５．ハードウェア構成〕
　図示した各装置の各構成要素は機能概念的なものであり、必ずしも物理的に図示のように構成されていることを要しない。すなわち、各装置の分散・統合の具体的形態は図示のものに限られず、その全部または一部を、各種の負荷や使用状況等に応じて、任意の単位で機能的または物理的に分散・統合して構成することができる。さらに、各装置にて行われる各処理機能は、その全部または任意の一部が、ＣＰＵおよび当該ＣＰＵにて解析実行されるプログラムにて実現され、あるいは、ワイヤードロジックによるハードウェアとして実現され得る。 5. Hardware Configuration
Each component of each device shown in the figure is a functional concept, and does not necessarily have to be physically configured as shown in the figure. In other words, the specific form of distribution and integration of each device is not limited to that shown in the figure, and all or a part of it can be functionally or physically distributed and integrated in any unit according to various loads, usage conditions, etc. Furthermore, all or any part of each processing function performed by each device can be realized by a CPU and a program analyzed and executed by the CPU, or can be realized as hardware using wired logic.
　また、本実施形態において説明した各処理のうち、自動的に行われるものとして説明した処理の全部または一部を公知の方法で手動的に行うこともできる。この他、図面中で示した処理手順、制御手順、具体的名称、各種のデータやパラメータを含む情報については、特記する場合を除いて任意に変更することができる。 Furthermore, among the various processes described in this embodiment, all or part of the processes described as being performed automatically can also be performed manually using known methods. In addition, the information including the processing procedures, control procedures, specific names, various data, and parameters shown in the drawings can be changed as desired unless otherwise specified.
［プログラム］
　一実施形態として、検査装置１００を構成する各種の装置は、パッケージソフトウェアやオンラインソフトウェアとして、前述した検査プログラムを、所望のコンピュータにインストールさせることによって実装できる。例えば、上記の検査プログラムを情報処理装置に実行させることにより、検査装置１００を構成する各種の装置として機能させることができる。ここで言う情報処理装置には、デスクトップ型またはノート型のパーソナルコンピュータが含まれる。また、その他にも、情報処理装置にはスマートフォン、携帯電話機等の移動体通信端末、さらには、ＰＤＡ（Personal　Digital　Assistant）等のスレート端末等がその範疇に含まれる。 [program]
In one embodiment, the various devices constituting the inspection device 100 can be implemented by installing the above-mentioned inspection program as package software or online software on a desired computer. For example, the above-mentioned inspection program can be executed by an information processing device to function as various devices constituting the inspection device 100. The information processing device here includes desktop or notebook personal computers. In addition, the information processing device also includes mobile communication terminals such as smartphones and mobile phones, and slate terminals such as PDAs (Personal Digital Assistants).
　図８は、検査装置１００を構成する各種の装置が実現されるコンピュータの一例を示す図である。コンピュータ１０００は、例えば、メモリ１０１０、ＣＰＵ１０２０を有する。また、コンピュータ１０００は、ハードディスクドライブインタフェース１０３０、ディスクドライブインタフェース１０４０、シリアルポートインタフェース１０５０、ビデオアダプタ１０６０、ネットワークインタフェース１０７０を有する。これらの各部は、バス１０８０によって接続される。 FIG. 8 is a diagram showing an example of a computer in which the various devices constituting the inspection device 100 are realized. The computer 1000 has, for example, a memory 1010 and a CPU 1020. The computer 1000 also has a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. Each of these components is connected by a bus 1080.
　メモリ１０１０は、ＲＯＭ（Read　Only　Memory）１０１１およびＲＡＭ１０１２を含む。ＲＯＭ１０１１は、例えば、ＢＩＯＳ（Basic　Input　Output　System）等のブートプログラムを記憶する。ハードディスクドライブインタフェース１０３０は、ハードディスクドライブ１０９０に接続される。ディスクドライブインタフェース１０４０は、ディスクドライブ１１００に接続される。例えば磁気ディスクや光ディスク等の着脱可能な記憶媒体が、ディスクドライブ１１００に挿入される。シリアルポートインタフェース１０５０は、例えばマウス１１１０、キーボード１１２０に接続される。ビデオアダプタ１０６０は、例えばディスプレイ１１３０に接続される。 The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012. The ROM 1011 stores a boot program such as a BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to a hard disk drive 1090. The disk drive interface 1040 is connected to a disk drive 1100. A removable storage medium such as a magnetic disk or optical disk is inserted into the disk drive 1100. The serial port interface 1050 is connected to a mouse 1110 and a keyboard 1120, for example. The video adapter 1060 is connected to a display 1130, for example.
　ハードディスクドライブ１０９０は、例えば、ＯＳ１０９１、アプリケーションプログラム１０９２、プログラムモジュール１０９３、プログラムデータ１０９４を記憶する。すなわち、検査装置１００を構成する各種の装置の各処理を規定するプログラムは、コンピュータにより実行可能なコードが記述されたプログラムモジュール１０９３として実装される。プログラムモジュール１０９３は、例えばハードディスクドライブ１０９０に記憶される。例えば、検査装置１００を構成する各種の装置における機能構成と同様の処理を実行するためのプログラムモジュール１０９３が、ハードディスクドライブ１０９０に記憶される。なお、ハードディスクドライブ１０９０は、ＳＳＤ（Solid　State　Drive）により代替されてもよい。 The hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, the programs that define the processes of the various devices that make up the inspection device 100 are implemented as program modules 1093 in which computer-executable code is written. The program modules 1093 are stored, for example, in the hard disk drive 1090. For example, the program modules 1093 for executing processes similar to the functional configurations of the various devices that make up the inspection device 100 are stored in the hard disk drive 1090. The hard disk drive 1090 may be replaced by an SSD (Solid State Drive).
　また、前述した実施形態の処理で用いられる設定データは、プログラムデータ１０９４として、例えばメモリ１０１０やハードディスクドライブ１０９０に記憶される。そして、ＣＰＵ１０２０は、メモリ１０１０やハードディスクドライブ１０９０に記憶されたプログラムモジュール１０９３やプログラムデータ１０９４を必要に応じてＲＡＭ１０１２に読み出して、前述した実施形態の処理を実行する。 Furthermore, the setting data used in the processing of the above-mentioned embodiment is stored as program data 1094, for example, in memory 1010 or hard disk drive 1090. Then, the CPU 1020 reads out the program module 1093 or program data 1094 stored in memory 1010 or hard disk drive 1090 into RAM 1012 as necessary, and executes the processing of the above-mentioned embodiment.
　なお、プログラムモジュール１０９３やプログラムデータ１０９４は、ハードディスクドライブ１０９０に記憶される場合に限らず、例えば着脱可能な記憶媒体に記憶され、ディスクドライブ１１００等を介してＣＰＵ１０２０によって読み出されてもよい。あるいは、プログラムモジュール１０９３およびプログラムデータ１０９４は、ネットワーク（ＬＡＮ、ＷＡＮ（Wide　Area　Network）等）を介して接続された他のコンピュータに記憶されてもよい。そして、プログラムモジュール１０９３およびプログラムデータ１０９４は、他のコンピュータから、ネットワークインタフェース１０７０を介してＣＰＵ１０２０によって読み出されてもよい。 The program module 1093 and program data 1094 are not limited to being stored in the hard disk drive 1090, but may be stored in a removable storage medium, for example, and read by the CPU 1020 via the disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 may be stored in another computer connected via a network (such as a LAN or a WAN (Wide Area Network)). The program module 1093 and program data 1094 may then be read by the CPU 1020 from the other computer via the network interface 1070.
〔６．その他〕
　以上、本実施形態について説明したが、本実施形態は、開示の一部をなす記述および図面により限定されることはない。すなわち、本実施形態に基づいて当業者等によりなされる他の実施形態、実施例および運用技術等は全て本実施形態の範疇に含まれる。 [6. Other]
Although the present embodiment has been described above, the present embodiment is not limited by the description and drawings that form a part of the disclosure. In other words, other embodiments, examples, operation techniques, etc. made by those skilled in the art based on the present embodiment are all included in the scope of the present embodiment.
　１００　　　検査装置
　１１０　　　通信部
　１２０　　　記憶部
　１２１　　　構成情報記憶部
　１２１ａ　　構造仕様情報
　１２１ｂ　　集合仕様情報
　１２１ｃ　　外形仕様情報
　１２１ｄ　　動作仕様情報
　１２１ｅ　　状態仕様情報
　１２１ｆ　　検査仕様情報
　１２１ｇ　　追加検査仕様情報
　１２２　　　外部定義情報記憶部
　１２２ａ　　外部定義情報
　１２２ｂ　　関連外部定義情報
　１２３　　　検査結果記憶部
　１３０　　　制御部
　１３１　　　受付部
　１３２　　　生成部
　１３３　　　検査部
　１３４　　　出力部
　１３５　　　照合部
　２００　　　端末装置
　１０００　　コンピュータ
　１０１０　　メモリ
　１０１１　　ＲＯＭ
　１０１２　　ＲＡＭ
　１０２０　　ＣＰＵ
　１０３０　　ハードディスクドライブインタフェース
　１０４０　　ディスクドライブインタフェース
　１０５０　　シリアルポートインタフェース
　１０６０　　ビデオアダプタ
　１０７０　　ネットワークインタフェース
　１０８０　　バス
　１０９０　　ハードディスクドライブ
　１０９１　　ＯＳ
　１０９２　　アプリケーションプログラム
　１０９３　　プログラムモジュール
　１０９４　　プログラムデータ
　１１００　　ディスクドライブ
　１１１０　　マウス
　１１２０　　キーボード 100 Inspection device 110 Communication unit 120 Storage unit 121 Configuration information storage unit 121a Structure specification information 121b Set specification information 121c External shape specification information 121d Operation specification information 121e State specification information 121f Inspection specification information 121g Additional inspection specification information 122 External definition information storage unit 122a External definition information 122b Related external definition information 123 Inspection result storage unit 130 Control unit 131 Reception unit 132 Generation unit 133 Inspection unit 134 Output unit 135 Collation unit 200 Terminal device 1000 Computer 1010 Memory 1011 ROM
1012 RAM
1020 CPU
1030 Hard disk drive interface 1040 Disk drive interface 1050 Serial port interface 1060 Video adapter 1070 Network interface 1080 Bus 1090 Hard disk drive 1091 OS
1092 application program 1093 program module 1094 program data 1100 disk drive 1110 mouse 1120 keyboard

Claims (5)

  1. 　機器またはシステムの構成要素に関する情報である構成情報に含まれる、構造仕様情報と、集合仕様情報と、外形仕様情報と、動作仕様情報と、状態仕様情報と、の少なくとも１つを含む検査仕様情報を生成する生成部と、
    　前記検査仕様情報に基づき、前記機器または前記システムの構成要素の仕様と前記機器または前記システムの実際の構成要素とを比較する整合性検査を行う検査部と、
    　を有することを特徴とする検査装置。     A generating unit that generates inspection specification information including at least one of structural specification information, assembly specification information, external shape specification information, operation specification information, and state specification information included in configuration information, which is information about components of a device or system;
    an inspection unit that performs a consistency inspection by comparing the specifications of components of the device or the system with actual components of the device or the system based on the inspection specification information;
    An inspection device comprising:
  2. 　前記検査部は、前記整合性検査として、前記検査仕様情報を用いて、集合仕様情報に基づく整合性検査と、外形仕様情報に基づく整合性検査と、動作仕様情報に基づく整合性検査と、状態仕様情報に基づく整合性検査と、の１つまたは複数の組み合わせを実施する、
    　ことを特徴とする請求項１に記載の検査装置。     the inspection unit uses the inspection specification information to perform, as the consistency check, one or more combinations of a consistency check based on set specification information, a consistency check based on external specification information, a consistency check based on operation specification information, and a consistency check based on state specification information.
    2. The inspection apparatus according to claim 1 .
  3. 　前記整合性検査に用いる情報である外部定義情報に基づき、前記検査仕様情報に関連付く情報を関連外部定義情報として照合する照合部を更に有し、
    　前記生成部は、前記検査仕様情報と前記関連外部定義情報とを用いて、追加検査仕様情報を生成し、
    　前記検査部は、所定の整合性についての検査として、前記追加検査仕様情報を用いて、集合仕様情報に基づく整合性検査と、外形仕様情報に基づく整合性検査と、動作仕様情報に基づく整合性検査と、状態仕様情報に基づく整合性検査と、の１つまたは複数の組み合わせを実施する、
    　ことを特徴とする請求項１に記載の検査装置。     a collation unit that collates information associated with the inspection specification information as associated external definition information based on external definition information that is information used for the consistency check,
    The generation unit generates additional inspection specification information by using the inspection specification information and the related external definition information,
    The inspection unit uses the additional inspection specification information to perform, as an inspection for a predetermined consistency, one or more combinations of a consistency inspection based on set specification information, a consistency inspection based on external specification information, a consistency inspection based on operation specification information, and a consistency inspection based on state specification information.
    2. The inspection apparatus according to claim 1 .
  4. 　検査装置で実行される検査方法であって、
    　機器またはシステムの構成要素に関する情報である構成情報に含まれる、構造仕様情報と、集合仕様情報と、外形仕様情報と、動作仕様情報と、状態仕様情報と、の少なくとも１つを含む検査仕様情報を生成する生成工程と、
    　前記検査仕様情報に基づき、前記機器または前記システムの構成要素の仕様と前記機器または前記システムの実際の構成要素とを比較する整合性検査を行う検査工程と、
    　を含むことを特徴とする検査方法。     1. An inspection method performed by an inspection device, comprising:
    A generating step of generating inspection specification information including at least one of structural specification information, assembly specification information, external shape specification information, operation specification information, and status specification information included in configuration information, which is information related to components of the device or system;
    an inspection step of performing a consistency inspection for comparing the specifications of components of the device or the system with the actual components of the device or the system based on the inspection specification information;
    An inspection method comprising:
  5. 　機器またはシステムの構成要素に関する情報である構成情報に含まれる、構造仕様情報と、集合仕様情報と、外形仕様情報と、動作仕様情報と、状態仕様情報と、の少なくとも１つを含む検査仕様情報を生成する生成ステップと、
    　前記検査仕様情報に基づき、前記機器または前記システムの構成要素の仕様と前記機器または前記システムの実際の構成要素とを比較する整合性検査を行う検査ステップと、
    　をコンピュータに実行させることを特徴とする検査プログラム。     A generating step of generating inspection specification information including at least one of structural specification information, assembly specification information, external shape specification information, operation specification information, and status specification information included in configuration information, which is information related to components of the device or system;
    A verification step of performing a consistency verification by comparing the specifications of the components of the device or the system with the actual components of the device or the system based on the verification specification information;
    An inspection program characterized by causing a computer to execute the above steps.
PCT/JP2022/042294 2022-11-14 2022-11-14 Inspection device, inspection method, and inspection program WO2024105751A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/JP2022/042294 WO2024105751A1 (en) 2022-11-14 2022-11-14 Inspection device, inspection method, and inspection program

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2022/042294 WO2024105751A1 (en) 2022-11-14 2022-11-14 Inspection device, inspection method, and inspection program

Publications (1)

Publication Number Publication Date
WO2024105751A1 true WO2024105751A1 (en) 2024-05-23

Family

ID=91083983

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2022/042294 WO2024105751A1 (en) 2022-11-14 2022-11-14 Inspection device, inspection method, and inspection program

Country Status (1)

Country Link
WO (1) WO2024105751A1 (en)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH08212102A (en) * 1992-12-09 1996-08-20 Hitachi Ltd Inspecting method for parallel program
JP2007328583A (en) * 2006-06-08 2007-12-20 Masaya Otama Image sensing system
JP2008269022A (en) * 2007-04-16 2008-11-06 Fujitsu Ten Ltd Simulation device, simulation method, and development support method
JP2010083553A (en) * 2008-09-30 2010-04-15 Toshiba Corp Inspection system, industrial product and inspection method
WO2018207481A1 (en) * 2017-05-09 2018-11-15 古野電気株式会社 Automated inspection device
JP2021068021A (en) * 2019-10-18 2021-04-30 株式会社デンソー Extraction device, and extraction program

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH08212102A (en) * 1992-12-09 1996-08-20 Hitachi Ltd Inspecting method for parallel program
JP2007328583A (en) * 2006-06-08 2007-12-20 Masaya Otama Image sensing system
JP2008269022A (en) * 2007-04-16 2008-11-06 Fujitsu Ten Ltd Simulation device, simulation method, and development support method
JP2010083553A (en) * 2008-09-30 2010-04-15 Toshiba Corp Inspection system, industrial product and inspection method
WO2018207481A1 (en) * 2017-05-09 2018-11-15 古野電気株式会社 Automated inspection device
JP2021068021A (en) * 2019-10-18 2021-04-30 株式会社デンソー Extraction device, and extraction program

Similar Documents

Publication Publication Date Title
US10318412B1 (en) Systems, methods, and apparatus for dynamic software generation and testing
AU2014334840B2 (en) Method and system for dynamic and comprehensive vulnerability management
US8549478B2 (en) Graphical user interface input element identification
US8660833B2 (en) Method, computer program product and apparatus for providing an interactive network simulator
CN103201747B (en) For verifying the method and apparatus of multiple data handling system
JP2020522152A (en) Computer-implemented method, system and computer program product forming a blockchain for public scientific research (blockchain for public scientific research)
US11720825B2 (en) Framework for multi-tenant data science experiments at-scale
WO2014182597A1 (en) Risk prioritization and management
US10140403B2 (en) Managing model checks of sequential designs
JP2018152063A (en) Device, method, and program for evaluating learning results
US20190163547A1 (en) Dynamic cloud deployment and calibration tool
US10810332B2 (en) Method, apparatus, and computer program product for simulating client and application interface integration
Marshall Digital forensic tool verification: An evaluation of options for establishing trustworthiness
Barclay et al. Providing assurance and scrutability on shared data and machine learning models with verifiable credentials
US11494171B1 (en) Decentralized platform for deploying AI models
JP6707176B2 (en) INFORMATION PROVIDING DEVICE, INFORMATION PROVIDING METHOD, AND INFORMATION PROVIDING PROGRAM
US11321792B2 (en) Enforceable contract generation
WO2024105751A1 (en) Inspection device, inspection method, and inspection program
Zhang et al. Using knowledge-based systems to manage quality attributes in software product lines
US20230195455A1 (en) Automated Developer Governance System
CN111984268A (en) Application publishing method and application publishing platform
US20180354291A1 (en) Structure, system, method, and recording medium of implementing a directed self-assembled security pattern
Abu Talib Towards early software reliability prediction for computer forensic tools (case study)
US11782938B2 (en) Data profiling and monitoring
EP3754506B1 (en) Method and system for automatic validation of cots