JP5948263B2 - Management system, security information management device, configuration information management device, security information management method and program - Google Patents

Description

  The present invention relates to a management system, a security information management device, a configuration information management device, a security information management method, and a program.

  Systems that link various sensors and actuators with data storage functions (storage), applications, etc., and communications for linkage to realize visualization of power, energy saving control, and improvement of daily life Protocols are becoming popular. When such a system becomes large-scale, devices and functions, and the relationship between data generated there and the access destination to the data become complicated. The complexity of access relations increases the capacity of system configuration information and access authority information.

Therefore, it is conceivable to separately manage system configuration information and access authority information. For example, the IEEE 1888 protocol described in Non-Patent Document 1 defines a registry function for managing system configuration information. In the IEEE1888.3 protocol, the definition of an access control manager (Access Control Manager; ACM) function for managing access authority is being studied.
By managing system configuration information and access authority information separately, each management function can be made relatively simple, and the development burden can be reduced. In addition, a device that provides a system configuration information management function (registry function) and a device that provides an access authority information management function (access control manager function) can be arranged at remote locations. In addition, the registry function can be easily hierarchized. In addition, the storage capacity required for each information can be reduced, and the processing load such as search can be reduced.

"Basic technology that supports smart communities-Management of mass sensing points and components, Address resolution technology IEEE1888 registry overview", NTT Technology Journal, November 2012, pp. 199 38-41

When managing the system configuration information and the access authority information separately, it is conceivable to restrict access at the stage of access to other devices without limiting the search of the system configuration information. For example, IEEE 1888 does not restrict the use of the LOOKUP procedure for inquiring the system configuration to the registry and the response to such an inquiry.
On the other hand, security can be improved by limiting the search to the system configuration information. For example, by concealing information about a device, the risk of unauthorized access to the device can be reduced. Further, by concealing the presence of the device itself, the risk of an attack on the device can be reduced.

  The present invention has been made in view of such circumstances, and the purpose thereof is a management system capable of restricting retrieval of system configuration information in a system that separately manages system configuration information and access authority information, A security information management device, a configuration information management device, a security information management method, and a program are provided.

The present invention has been made to solve the above-described problem, and a management system according to an aspect of the present invention is a management system for managing a data communication system in which a plurality of nodes of a communication network perform data communication, a configuration information management device for managing the configuration information of the data communication system, the relevant node for each node of the communication network comprises a security information management device for managing security information indicating the accessible range, the security information management device In response to an inquiry from the configuration information management apparatus regarding information that can be presented to a node among the search results from the configuration information of the data communication system, responding to the range accessible by the node Features.

  A management system according to another aspect of the present invention is the management system described above, wherein the security information management device has a node access authority indicating, for each node, data held by the node and a node accessible to the node. A node access authority information storage unit for storing information, a data access authority information storage unit for storing data access authority information indicating a node capable of accessing the data for each data, and change information for receiving change information of data held by the node An acquisition unit; and a node access authority information management unit that updates the node access authority information based on the change information and the data access authority information when the change information acquisition unit acquires the change information. It is characterized by comprising.

Further, a security information management device according to another aspect of the present invention includes a node access authority information storage unit that stores, for each node of a communication network, data held by the node and node access authority information indicating a node accessible to the node A data access authority information storage unit that stores data access authority information indicating a node that can access the data for each data, a change information acquisition unit that receives data change information of the node, and the change information acquisition unit A node access authority information management unit that updates the node access authority information based on the change information and the data access authority information when the change information is acquired, and the data that the node communicates with Nodes from a configuration information management device that manages communication system configuration information Against presentable information query Te, the node is characterized in that it responds accessible range.

  A configuration information management apparatus according to another aspect of the present invention is a data communication system in which a plurality of nodes of a communication network perform data communication. A configuration information storage unit that stores configuration information indicating the configuration of the data communication system; A query acquisition unit that acquires a query about the configuration of the data communication system from a node of the communication network, a search unit that searches the configuration information for information corresponding to the query, and a node that is the source of the query An accessible range detection unit that acquires information indicating a range that can be accessed, and a response unit that responds with information on a range that can be accessed by a source node of the query as a response to the query. It is characterized by comprising.

Also, a security information management method according to another aspect of the present invention includes a node access authority information storage unit that stores, for each node of a communication network, data held by the node and node access authority information indicating a node accessible to the node And a data access authority information storage unit that stores data access authority information indicating a node that can access the data for each data, and a security information management method for a security information management apparatus comprising: Node information for updating the node access authority information based on the change information and the data access authority information when the change information is acquired in the change information acquisition step for receiving the change information and the change information acquisition step and authority information management step, the node through From configuration information management device for managing the configuration information of the data communication system performing, against presentable information query to the node, the method comprising the node responds an accessible range, by including the Features.

In addition, a program according to another aspect of the present invention includes a node access authority information storage unit that stores, for each node of a communication network, data included in the node and node access authority information indicating a node accessible to the node, and data A data access authority information storage unit that stores data access authority information indicating a node that can access the data every time, and a change information acquisition that receives data change information of a node in a computer as a security information management device a step at the change information acquiring step acquires the change information, and the change information, on the basis of said data access authority information, and node access right information managing step of updating the node access authority information, the Data communication system in which nodes communicate From configuration information management apparatus for managing configuration information for presentable information query to the node, a program for the node to execute the steps of responding accessible range.

  ADVANTAGE OF THE INVENTION According to this invention, the search of system configuration information can be restrict | limited in the system which manages system configuration information and access authority information separately.

It is a schematic block diagram which shows the structure of the data communication system in one Embodiment of this invention. It is a schematic block diagram which shows the function structure of the registry apparatus in the embodiment. It is explanatory drawing which shows the example of the component table which a structure information storage part memorize | stores in the same embodiment. It is a schematic block diagram which shows the function structure of the access control manager apparatus in the embodiment. It is explanatory drawing which shows the example of the component access authority table which the component access authority information storage part memorize | stores in the same embodiment. It is explanatory drawing which shows the example of the point access authority table which the point access authority information storage part memorize | stores in the same embodiment. It is explanatory drawing which shows the example of an update of the component table | surface in the same embodiment. It is explanatory drawing which shows the example of an update of the component access authority table | surface in the embodiment. It is a sequence diagram which shows the example of the process which a data communication system performs in the embodiment.

  Embodiments of the present invention will be described below with reference to the drawings. In the following, a case where the present invention is applied to a data communication system having a configuration based on the IEEE 1888 protocol will be described as an example, but the scope of the present invention is not limited to this. The present invention can be applied to various systems that store attributes such as data metadata and data location information and have a data search mechanism.

FIG. 1 is a schematic block diagram showing a configuration of a data communication system according to an embodiment of the present invention. In FIG. 1, a data communication system 1 includes a registry device 11, an access control manager (ACM) device 12, a gateway (GW) device 21, a storage device 22, An application (APP) 23, a sensor device 31, an actuator device 32, measurement data 33, and processing data 34 are provided.
In addition, the registry device 11, the access control manager device 12, the gateway device 21, the storage device 22, and the application 23 communicate via the communication network 90. The sensor device 31 and the actuator device 32 are connected to the gateway device 21. In addition, the measurement data 33 and the processing data 34 are data stored in the storage device 22.

  The configuration shown in FIG. 1 is an example, and the scope of application of the present invention is not limited to this. In particular, as will be described later, the data communication system 1 only needs to include one or more of the gateway device 21, the storage device 22, and the application 23. In addition, the number of the sensor device 31, the actuator device 32, the measurement data 33, and the processed data 34 included in the data communication system 1 may be any number.

  The communication network 90 mediates communication between the registry device 11, the access control manager device 12, the gateway device 21, the storage device 22, and the application 23. Various communication networks can be used as the communication network 90. For example, the communication network 90 may be the Internet, a LAN (Local Area Network), or a network dedicated to the data communication system 1.

The gateway device 21 is a device that provides a gateway function through a connection between the communication network 90 and the sensor device 31, the actuator device 32, or another communication network. The gateway function here is a function for eliminating a difference in communication protocols. Specifically, the gateway device 21 converts the measurement data of the sensor device 31 into data that can be used in the communication network 90. Further, the gateway device 21 converts an operation command for the actuator device 32 into data executable by the actuator device 32. Further, the gateway device 21 performs protocol conversion between the communication protocol of the communication network 90 and the communication protocol of another network.
The gateway device 21 is configured by a server device, for example.

  The storage device 22 provides a storage function. The storage function here is a function for storing (accumulating) various data such as measurement data of the sensor device 31 and data obtained by processing the measurement data (processing data). The storage device 22 is configured using a server device having a database function, for example.

  The application 23 provides an application function. The application function here is a function obtained when the computer executes the application program. In particular, the application 23 provides an application function involving data communication such as visualization (visual display) of measurement data of the sensor device 31.

  The sensor device 31 performs measurement and outputs measurement data. Here, various devices that perform measurement can be used as the sensor device 31. For example, the sensor device 31 may be a digital sensor or an analog sensor such as a temperature sensor or a power sensor, or may be an ON / OFF sensor such as a human sensor.

  The actuator device 32 operates in response to an operation command. Here, various devices to be controlled can be used as the actuator device 32. For example, the actuator device 32 may be a device that performs an ON / OFF operation such as a power switch, or may be a device that is numerically controlled such as a temperature adjustment function in an air conditioning device.

  The measurement data 33 is measurement data of the sensor device 31 stored in the storage device 22. The processed data 34 is processed data (data obtained by processing the measurement data of the sensor device 31) stored in the storage device 22. The measurement data 33 and the processing data 34 correspond to examples of data stored in the storage device 22. However, the data stored in the storage device 22 is not limited to this. For example, the storage device 22 may store data obtained by user input or processed data of the data.

Hereinafter, the gateway function, the storage function, and the application function are collectively referred to as “component” or “component 20”. In the notation of “component”, the gateway function and the gateway device, and the storage function and the storage device are regarded as the same. Accordingly, the gateway device and the storage device are also referred to as components. The component corresponds to a node of the communication network 90.
The number of components included in the data communication system 1 is not limited to six shown in FIG. 1 and may be one or more.

  In the following, the measurement data of the sensor device, the data as a command to the actuator device, and the data stored in the storage device are collectively referred to as “point” or “point 30”. In the notation of “point”, the measurement data of the sensor device and the sensor device, and the command to the actuator device and the actuator device are identified. Therefore, sensor devices and actuator devices are also referred to as points.

In addition, in the notation of “point”, data obtained from the same source is identified. For example, a series of time-series data obtained from one sensor device such as measurement data of the sensor device 31 and past measurement data of the sensor device 31 stored in the storage device 22 is regarded as the same point.
The number of points included in the data communication system 1 is not limited to seven shown in FIG. 1 and may be an arbitrary number.

The registry device 11 provides a registry function. The registry function here is a function that manages information about components and points as components of the data communication system 1 and provides the information to the components. The registry device 11 is configured by a server device, for example.
The registry device 11 corresponds to an example of a configuration information management device.

FIG. 2 is a schematic block diagram showing a functional configuration of the registry device 11. In the figure, the registry device 11 includes a communication unit 110, a storage unit 120, and a control unit 130. The storage unit 120 includes a configuration information storage unit 121. The control unit 130 includes a configuration information management unit 131, an accessible range detection unit 132, and a response generation unit 133.
The communication unit 110 communicates by connecting to the communication network 90. In particular, the communication unit 110 acquires (receives) an inquiry about the configuration of the communication network 90 from the component.

The storage unit 120 is configured by a storage device provided in the registry device 11 and stores various data.
The configuration information storage unit 121 stores a component table indicating the configuration of the data communication system 1. The configuration information storage unit 121 corresponds to an example of a configuration information storage unit, and the component table corresponds to an example of configuration information.

  FIG. 3 is an explanatory diagram illustrating an example of a component table stored in the configuration information storage unit 121. The component table shown in the figure has a component table body T11 and a subordinate point table T12. The component table body T11 has a “component name” column and a “link” column. One row of the component table main body T11 corresponds to one component.

The “component name” column stores the component name assigned to each component. The component name corresponds to an example of component identification information. The “link” column is a column indicating a link from the row of the component table body to the subordinate point table. The link need only be traced from the row of the component table main body to at most one subordinate point table, and various mounting methods can be used. For example, a component name may be assigned to the subordinate point table, and the correspondence between the row of the component table main body and the subordinate point table may be indicated by matching the component name. In this case, it is not necessary to provide a “link” column in the component table main body.
The component table body T11 further stores information related to the component such as component attribute information.

  The subordinate point table T12 indicates information regarding points under the component. Here, the data being under the node means that the node outputs (provides) the data, or the node accepts the data as control command data. Therefore, the point being under the component means that the component outputs the point as data, or the component receives the point as data of a control command.

The subordinate point table T12 has a “KEY” column and a “TIME” column.
The “KEY” column stores identification information of points under the component. In the example of FIG. 3, there are a point a and a point b under the gateway 1. Further, there is a point b under the storage 2.

The “TIME” column indicates the time when the data at the point is obtained. For example, the value “11:00” in the column C11 indicates that the storage 1 stores data after 11:00 at the point a.
The “TIME” column is an example of information regarding points. In the subordinate point table T12, the configuration information storage unit 121 may store other information related to points in addition to the “TIME” column or instead of the “TIME” column.
If a component does not have subordinate points or if no subordinate points are registered, a subordinate point table corresponding to the component is not provided.

The control unit 130 controls each unit of the registry device 11 and executes various functions. For example, the control unit 130 is configured by a CPU (Central Processing Unit) included in the registry device 11 reading out a program from the storage unit 120 and executing the program.
The configuration information management unit 131 manages the component table stored in the storage unit 120. In particular, when the communication unit 110 receives an inquiry about the configuration of the data communication system 1, the configuration information management unit 131 searches the component table for information corresponding to the inquiry.

Further, when the component table is updated, the configuration information management unit 131 generates update information and transmits the update information to the access control manager device 12 via the communication unit 110. For example, when the subordinate point table is updated, the configuration information management unit 131 generates point change information included in the component and transmits it to the access control manager device 12 via the communication unit 110.
The configuration information management unit 131 corresponds to an example of a search unit.

  When the communication unit 110 receives an inquiry about the configuration of the data communication system 1, the accessible range detection unit 132 acquires information indicating a range that can be accessed by the component that transmitted the inquiry. Specifically, the accessible range detection unit 132 inquires of the access control manager device 12 about the accessible range of the component.

The response generation unit 133 generates a response as a response to the inquiry from the component regarding the configuration of the data communication system 1 within a range that the inquiry transmission source node can access among the search results of the configuration information management unit 131. A response (transmission) is made via the communication unit 110.
The response generation unit 133 corresponds to an example of a response unit.

The access control manager device 12 manages security information indicating the accessible range for each component. In particular, when the access control manager device 12 receives from the inquiry registry device 11 for information that can be presented to a component, the access control manager device 12 responds with a range accessible by the component.
The access control manager device 12 corresponds to an example of a security information management device.

  FIG. 4 is a schematic block diagram showing a functional configuration of the access control manager device 12. In FIG. 2, the access control manager device 12 includes a communication unit 210, a storage unit 220, and a control unit 230. The storage unit 220 includes a component access authority information storage unit 221 and a point access authority information storage unit 222. The control unit 230 includes a component access authority information management unit 231 and a point access authority information management unit 232.

  The communication unit 210 performs communication by connecting to the communication network 90. In particular, the communication unit 210 receives update information that is generated and transmitted when the registry device 11 updates the component table. For example, the communication unit 210 receives point change information of a component that is transmitted when the registry device 11 updates the subordinate point table. The communication unit 210 corresponds to an example of a change information acquisition unit.

The storage unit 220 is configured by a storage device included in the access control manager apparatus 12 and stores various data.
The component access authority information storage unit 221 stores, for each component, a component access authority table indicating points of the component and components that can access the component. The component access authority information storage unit 221 corresponds to an example of a node access authority information storage unit, and the component access authority table corresponds to an example of node access authority information.

  FIG. 5 is an explanatory diagram illustrating an example of a component access authority table stored in the component access authority information storage unit 221. The component access authority table shown in the figure has a component access authority table body T21 and a subordinate point access authority table T22. The component access authority table main body T21 has a “component name” column, a “REGISTRATION” column, and a “link” column. Further, one row of the component access authority table main body T21 corresponds to one component.

The “component name” column stores the component name assigned to each component. The component name corresponds to an example of component identification information.
The “REGISTRATION” column indicates components that can execute the REGISRATION procedure for the component indicated by the component name. Here, the REGISTRATION procedure is a procedure for updating configuration information (for example, a component table) of the communication network 90 included in the registry device 11.

  The “link” column is a column indicating a link from the row of the component access authority table main body to the subordinate point access authority table. The link only needs to be traced from the row of the component access authority table main body to at most one subordinate point access authority table, and various mounting methods can be used. For example, a component name may be assigned to the subordinate point access authority table, and the correspondence between the row of the component access authority table main body and the subordinate point access authority table may be indicated by matching the component name. In this case, it is not necessary to provide a “link” column in the component access authority table main body.

  The subordinate point access authority table T22 shows components having the authority to access points under the component (white list). Alternatively, the subordinate point access authority table T22 may indicate a component that does not have the access authority to the points under the component (black list).

The subordinate point access authority table T22 has a “KEY” column, a “FETCH” column, a “WRITE” column, and a “TRAP” column.
The “KEY” column stores identification information of points under the component.

The “FETCH” column indicates a component capable of executing the FETCH procedure for the component. Here, the FETCH procedure is a procedure for acquiring data in which a certain component exists in another component.
The “WRITE” column indicates a component that can execute the WRITE procedure for the component. Here, the WRITE procedure is a procedure for actively sending data from one component to another component.
The “TRAP” column indicates a component that can execute the TRAP procedure for the component. Here, the TRAP procedure is a procedure for notifying other components requested in advance of changes in values and time stamps.
The “FETCH” column, the “WRITE” column, and the “TRAP” column are examples of columns indicating access authority according to the communication procedure between components. The component access authority information storage unit 221 may store information indicating access authority for other access methods in addition to or instead of the “FETCH” field, the “WRITE” field, and the “TRAP” field. .

When a component does not have a subordinate point or when a subordinate point is not registered, a subordinate point access authority table corresponding to the component is not provided.
It should be noted that the component access authority information storage unit 221 uses various formats, not limited to the table format such as the component access authority table, as the format for storing the points of the component and the information indicating the access authority to the component. Can do.

  The point access authority information storage unit 222 stores a point access authority table indicating components that can access the point for each point. The point access authority information storage unit 222 corresponds to an example of a data access authority information storage unit, and the point access authority table corresponds to an example of data access authority information.

  FIG. 6 is an explanatory diagram showing an example of a point access authority table stored in the point access authority information storage unit 222. The point access authority table shown in the figure has a “point ID” column, a “REGISTRATION” column, and a “LOOKUP” column. One row of the point access authority table corresponds to one point.

The “point ID” column stores a point ID that is identification information attached to each point.
The “REGISTRATION” column is information indicating a component in which information about points (meta information of points) possessed by the registry device 11 is registered. For example, the registry device 11 has information on points in the form of a point table in IEEE 1888, and the “REGISTRATION” column indicates the component in which the corresponding row of the point table is registered.
The “LOOKUP” column indicates a component that can execute the point LOOKUP procedure. Here, the point LOOKUP procedure is a procedure for searching for information (for example, a point table) relating to points that the registry device 11 has.

The control unit 230 controls each unit of the access control manager device 12 to execute various functions. The control unit 230 is configured by, for example, the CPU included in the access control manager device 12 reading a program from the storage unit 220 and executing it.
The component access authority information management unit 231 manages the component access authority table stored in the component access authority information storage unit 221. For example, the component access authority information management unit 231 updates the component access authority table and searches for data in the component access authority table. In particular, when the communication unit 210 receives point change information of a component from the registry device 11, the component access authority information management unit 231 generates a component access authority table based on the change information and the point access authority table. Update.
The component access authority information management unit 231 corresponds to an example of a node access authority information management unit.

The point access authority information management unit 232 manages the point access authority table stored in the point access authority information storage unit 222. For example, the point access authority information management unit 232 updates the point access authority table and searches for data in the point access authority table.
The registry device 11 and the access control manager device 12 constitute a management system that manages the data communication system 1 in which a plurality of components of the communication network 90 perform data communication.

Next, update of the component access authority table performed by the component access authority information management unit 231 will be described with reference to FIGS. 7 and 8.
FIG. 7 is an explanatory diagram of an example of updating the component table. In the component table of FIG. 7, a subordinate point table T32 is added from the component table of FIG.

When the point b is newly subordinated to the storage 2, the configuration information management unit 131 of the registry device 11 that is notified in the component REGISTERATION procedure adds the subordinate point table as shown in FIG. The point b under 2 is registered.
Furthermore, the configuration information management unit 131 generates update information indicating that the point b is under the storage 2 and transmits the update information to the access control manager device 12 via the communication unit 110.
In the access control manager device 12, when the communication unit 210 receives the update information, the component access authority information management unit 231 updates the component access authority table.

FIG. 8 is an explanatory diagram of an example of updating the component access authority table. In the component access authority table of FIG. 8, a subordinate point access authority table T42 is added to the component access authority table of FIG.
Since the update information indicates that the point b has been subordinated to the storage 2, the component access authority information management unit 231 first adds the row of the point b to the subordinate point access authority table of the storage 2. In the example of FIG. 5, since there is no subordinate point access authority table of the storage 2, in the example of FIG. 8, the component access authority information management unit 231 newly generates a subordinate point access authority table of the storage 2, and the row of the point b Is provided.

  Next, the component access authority information management unit 231 refers to the point access authority table and indicates the access authority in the procedure used in the inter-component communication such as the “FETCH” field, the “WRITE” field, and the “TRAP” field. Write the component name in the field. Referring to the point access authority table of FIG. 6, the gateway 1 is shown in the “LOOKUP” column in the row of point b. Therefore, the component access authority information management unit 231 writes the gateway 1 in the “FETCH” field, “WRITE” field, and “TRAP” field of the newly generated row of the subordinate point access authority table.

  Here, it is considered that a component to which search authority by the LOOKUP procedure is given may be given authority to exchange data by FETCH or WRITE. Therefore, the component access authority information management unit 231 uses the component name shown in the “LOOKUP” field of the point access authority table as the “FETCH” field or “WRITE” field in the newly generated row of the subordinate point access authority table. Write in the “TRAP” field.

Next, the operation of the data communication system 1 will be described with reference to FIG.
FIG. 9 is a sequence diagram illustrating an example of processing performed by the data communication system 1. Sequences S111 to S117 in the figure show examples of processing procedures for updating the component table of the registry.
In sequence S <b> 111, the component B requests the registry to update the component table in the registry using the REGISTERATION procedure.

In step S112, the registry that has received the request inquires of the access control manager whether or not the component B can access the update request location.
In sequence S113, the access control manager responds whether access is possible. In the example of FIG. 9, the access control manager responds that access is possible.

The registry that has received the response updates the component table in accordance with REGISTRATION in sequence S114.
Further, the registry notifies the component B of the result of the REGISTRATION procedure in sequence S115. In the example of FIG. 9, it is notified that the REGISTERATION is successful. Further, the registry notifies the access control manager of the change contents to the component table in sequence S116.
The access control manager that has received the notification updates the component access authority table in sequence S117.

Sequences S <b> 121 to S <b> 124 show an example of a processing procedure for an inquiry about component or point information.
In sequence S121, the component A inquires of the registry about the component or point information in the LOOKUP procedure.
In step S122, the registry that has received the inquiry inquires the access control manager about the accessible range of the component A.
In step S123, the access control manager responds with a range accessible by the component A.
In sequence S124, the registry responds to the inquiry by the LOOKUP procedure within a range in which the component A can be referred to.

Sequences S131 to S134 show examples of processing procedures for communication between components such as FETCH, WRITE, and TRAP.
In sequence S131, component A accesses component B such as FETCH, WRITE, and TRAP with respect to component B.
In step S132, the component B that has received access makes an inquiry to the access control manager as to whether or not the component A has the authority to access the component B.

The access control manager that has received the inquiry responds whether or not access is possible in sequence S133.
At this time, the access control manager returns information maintaining the configuration of the information it has to the registry. For example, the access control manager returns information maintaining the table format to the registry as in the subordinate point access authority table T22 of FIG.

This is because, when there are a plurality of the same points, only the points that can be accessed by the component are returned to the component that inquired the registry.
For example, when the information of the same point X is managed by the component B and the component C, and the component A can access only the information of the component B, the registry indicates that the component B has the point X for the component A. Notify that it has, but not notify that component C has point X.
In order to enable such distinction, the access control manager notifies the inquiry from the registry of a combination of accessible component information and subordinate point information.

  In sequence S134, the component B responds to the component A according to the response from the access control manager. If the access control manager responds that there is no access authority, component B responds that component A cannot be accessed.

As described above, the access control manager device 12 responds to the inquiry about the information that can be presented to the component from the registry device 11, and returns a range in which the component can be accessed.
Thereby, the registry device 11 can restrict the search of the system configuration information from the component according to the access authority of the inquiry source component, and can improve the security. For example, by concealing information about a device, the risk of unauthorized access to the device can be reduced. Further, by concealing the presence of the device itself, the risk of an attack on the device can be reduced.

Further, in the access control manager device 12, when the communication unit 210 receives the change information of the points under the component, the component access authority information management unit 231 uses the component access authority table based on the change information and the point access authority table. Update the subordinate point access authority table in the access authority table.
In this way, the access control manager device 12 automatically uses the access authority information about the points under the component by using the access authority information about the points to update the access authority information about the points under the component. Can be updated.

  Further, when the registry device 11 updates the component table, the update information is transmitted to the access control manager device 12, so that the registry device 11 and the access control manager device 12 can update the information in cooperation. . Accordingly, inconsistency between the configuration information of the communication network 90 included in the registry device 11 and the access authority information included in the access control manager device 12 can be avoided.

In addition, since the access control manager device 12 uses access authority information in which an attribute (a column indicating access authority information) is added to the component table or point table used by the registry device 11, the person who generates the access authority information It can be easily generated using existing information.
In the above description, the case of updating the access authority information to the component based on the access authority information to the point has been described as an example. However, the access authority to the point based on the access authority information to the component has been described. It is also possible to update the information.

A program for realizing all or part of the functions of the registry device 11 and the access control manager device 12 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into a computer system. The processing of each unit may be performed by executing. Here, the “computer system” includes an OS and hardware such as peripheral devices.
Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case, and a program that holds a program for a certain period of time are also included. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like without departing from the gist of the present invention.

DESCRIPTION OF SYMBOLS 1 Data communication system 11 Registry apparatus 12 Access control manager apparatus 21 Gateway apparatus 22 Storage apparatus 23 Application 31 Sensor apparatus 32 Actuator apparatus 33 Measurement data 34 Processed data 90 Communication network 110, 210 Communication part 120, 220 Storage part 121 Configuration information storage part 130, 230 Control unit 131 Configuration information management unit 132 Accessible range detection unit 133 Response generation unit 221 Component access authority information storage unit 222 Point access authority information storage unit 231 Component access authority information management unit 232 Point access authority information management unit

Claims (6)

A management system for managing a data communication system in which a plurality of nodes of a communication network perform data communication,
A configuration information management device for managing configuration information of the data communication system;
Security information management device for managing security information indicating a range accessible by the node for each node of the communication network,
The security information management device has a range that the node can access to an inquiry from the configuration information management device regarding information that can be presented to the node among the search results from the configuration information of the data communication system. Management system characterized by responding. The security information management device includes:
A node access authority information storage unit for storing data of the node for each node and node access authority information indicating a node accessible to the node;
A data access authority information storage unit for storing data access authority information indicating a node that can access the data for each data;
A change information acquisition unit for receiving data change information of the node;
When the change information acquisition unit acquires the change information, a node access authority information management unit that updates the node access authority information based on the change information and the data access authority information;
The management system according to claim 1, further comprising: A node access authority information storage unit that stores data of the node for each node of the communication network and node access authority information indicating a node accessible to the node;
A data access authority information storage unit for storing data access authority information indicating a node that can access the data for each data;
A change information acquisition unit for receiving data change information of the node;
When the change information acquisition unit acquires the change information, a node access authority information management unit that updates the node access authority information based on the change information and the data access authority information;
Equipped with,
In response to an inquiry about information that can be presented to a node from a configuration information management apparatus that manages configuration information of a data communication system with which the node communicates, a response range of the node is returned. Security information management device. In a data communication system in which a plurality of nodes of a communication network perform data communication,
A configuration information storage unit for storing configuration information indicating the configuration of the data communication system;
An inquiry acquisition unit for acquiring an inquiry about a configuration of the data communication system from a node of the communication network;
A search unit for searching for information corresponding to the inquiry from the configuration information;
An accessible range detection unit for acquiring information indicating a range accessible by a node that is a source of the inquiry;
As a response to the inquiry, a response unit that responds with information in a range that can be accessed by the node that transmitted the inquiry in the search result;
A configuration information management apparatus comprising: A node access authority information storage unit that stores data of the node for each node of the communication network and node access authority information indicating a node accessible to the node;
A data access authority information storage unit for storing data access authority information indicating a node that can access the data for each data;
A security information management method for a security information management device comprising:
A change information acquisition step for receiving change information of data held by the node;
When the change information is acquired in the change information acquisition step, a node access authority information management step for updating the node access authority information based on the change information and the data access authority information;
Responding to an inquiry about information that can be presented to a node from a configuration information management apparatus that manages configuration information of a data communication system in which the node communicates, and a response range of the node to be accessible;
A security information management method comprising: A node access authority information storage unit that stores data of the node for each node of the communication network and node access authority information indicating a node accessible to the node;
A data access authority information storage unit for storing data access authority information indicating a node that can access the data for each data;
In a computer as a security information management device comprising
A change information acquisition step for receiving change information of data held by the node;
When the change information is acquired in the change information acquisition step, a node access authority information management step for updating the node access authority information based on the change information and the data access authority information;
Responding to an inquiry about information that can be presented to a node from a configuration information management apparatus that manages configuration information of a data communication system in which the node communicates, and a response range of the node to be accessible;
A program for running

Images