JP6987101B2 - IoT device - Google Patents

Description

The present invention relates to an IoT device.

In recent years, IoT (Internet of Things) devices that connect to a local network or the Internet to send and receive information and controls are becoming widespread (see, for example, Patent Document 1). A default password is set at the time of shipment as an initial setting for such an IoT device. After the purchase, the user himself / herself logs in to the IoT device setting site using the default password from an information processing device such as a personal computer or a smartphone, and changes various settings and passwords.

Japanese Patent No. 6310621

Changing the password when accessing the IoT device is important for enhancing security. However, since some users continue to use the default password without changing it, it is necessary to encourage the user to change the password and enhance security.

The present invention has been made in view of such circumstances, and an object of the present invention is to provide an IoT device capable of improving security enhancement.

One aspect of the present invention is an IoT device having an authentication management function, and it is determined whether or not the permission condition for permitting login using the default password is satisfied, and it is determined that the permission condition is not satisfied. The login control unit that refuses to log in using the default password and the login control unit are operated to send a signal requesting permission to log in when the login using the default password is refused. The login control unit is an IoT device that permits login when the operation unit is operated.

According to the present disclosure, it is possible to improve the security enhancement.

It is an overall block diagram which showed schematic system structure including the IoT device which concerns on 1st Embodiment of this invention. It is a schematic block diagram which showed an example of the hardware configuration of the IoT device which concerns on 1st Embodiment of this invention. It is a functional block diagram which extracted and showed the IoT authentication management function which mainly performs the authentication management of an IoT device among various functions which the IoT device which concerns on 1st Embodiment of this invention has. It is a flowchart which showed an example of the procedure about the process about the login possibility determination in the IoT authentication management method which concerns on 1st Embodiment of this invention. It is a flowchart which showed an example of the procedure about the timer reset process in the IoT authentication management method which concerns on 1st Embodiment of this invention. It is a functional block diagram which extracted and showed the IoT authentication management function which mainly performs the authentication management of the IoT device among the various functions provided in the IoT device which concerns on the 2nd Embodiment of this invention. It is a flowchart which showed an example of the procedure about the process about the login possibility determination in the IoT authentication management method which concerns on 2nd Embodiment of this invention. It is a flowchart which showed an example of the procedure about the counter reset process in the IoT authentication management method which concerns on 2nd Embodiment of this invention.

[First Embodiment]
Hereinafter, the IoT device according to the first embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is an overall configuration diagram schematically showing a system configuration including the IoT device 3 according to the first embodiment of the present invention. As shown in FIG. 1, the IoT device 3 is connected to the network 7 via the IoT gateway 5. Further, an information processing device 15 operated by a user is connected to the network 7. Further, the IoT management server 10 is connected to the network 7.

The IoT device 3 is provided with an operation unit. The operation unit is a man-machine interface operated by the user. In the present embodiment, a push button type reset button 30 will be illustrated as a specific example of the operation unit. The operation unit is not limited to this example, and may be provided as another embodiment. For example, a touch panel type display can be mentioned as an example. Further, the IoT device 3 includes an IoT authentication management unit 20 that manages the authentication of the IoT device.
The sensor data and the like acquired by the IoT device 3 are aggregated in the IoT gateway 5 via a predetermined communication medium.

The IoT gateway 5 transmits sensor data and the like acquired from the IoT device 3 to the IoT management server 10 via the network 7.
For example, the IoT management server 10 collects and analyzes the data of the IoT device 3 acquired via the IoT gateway 5, and provides the data to the information processing apparatus 15.

The information processing device 15 is a user terminal operated by the user of the IoT device 3, and is, for example, a personal computer, a tablet terminal, a smartphone, or the like.
In FIG. 1, one each of the above-mentioned IoT device 3, IoT gateway 5, and information processing device 15 is shown, but the number of these is an example and is not limited to the number shown in FIG.

FIG. 2 is a schematic configuration diagram showing an example of the hardware configuration of the IoT device 3. As shown in FIG. 2, the IoT device 3 functions as, for example, a CPU 11, an auxiliary storage device 12 for storing a program executed by the CPU 11, a data referred to by the program, and the like, and a work area at the time of executing each program. It includes a main storage device 13, a communication unit 14 for connecting to a network, a reset button (operation unit) 30, and the like.
Each of these parts is connected via, for example, a bus 18. Examples of the auxiliary storage device 12 include a magnetic disk such as an HDD (Hard Disk Drive), a magneto-optical disk, and a semiconductor memory such as an SSD (Solid State Drive).

As an example, a series of processes for realizing various functions described later are stored in the auxiliary storage device 12 in the form of a program (for example, an authentication management program), and the CPU 11 reads this program into the main storage device 13. , Various functions are realized by executing information processing and arithmetic processing. The program is installed in the auxiliary storage device 12 in advance, is provided in a state of being stored in another computer-readable storage medium, or is distributed via a wired or wireless communication means. Etc. may be applied. The computer-readable storage medium is a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like.

FIG. 3 is a functional block diagram showing an extracted IoT authentication management function that mainly performs authentication management of the IoT device 3 from various functions included in the IoT device 3 according to the present embodiment. As shown in FIG. 3, the IoT device 3 includes, for example, an IoT authentication management unit 20.

The IoT authentication management unit 20 includes a storage unit 21, a timer (timekeeping unit) 22, a login control unit 23, and a reset unit 24.
The password of the IoT device 3 is stored in the storage unit 21. Specifically, the storage unit 21 stores a default password as initial information. If the password is set by the user, the password entered by the user is stored in the storage unit 21.

Further, the password flag is stored in the storage unit 21. This password flag is a plug for determining whether or not the currently set password is the default password. In the present embodiment, "False" is set when the default password is stored, and when the password is changed by the user, the storage unit 21 stores a non-default password. "True" is set. It should be noted that this password flag does not necessarily have to be provided, and the type of password stored in the storage unit 21 may be confirmed by using another means.

The timer 22 measures the elapsed time from the time when the login using the default password is performed from the information processing apparatus 15. The time when the timer 22 starts to be timed is not limited to this example, and for example, the elapsed time from the time when the operation of the IoT device 3 is started may be timed, or at another appropriately set timing. You may start timing.

The login control unit 23 is a means for controlling login to the IoT device 3, and for example, determines whether or not the permission condition for permitting login using the default password is satisfied, and uses the default password when satisfying the condition. Allow logins and reject logins using default passwords if not met.
For example, the login control unit 23 determines whether or not the elapsed time from the time when the login using the default password is performed is within the specified time, and if it is within the specified period, the login using the default password is permitted. However, if it is outside the specified period, login using the default password will be refused.

The reset unit 24 resets the timer 22 when the reset button 30 provided on the IoT device 3 is operated. Further, the reset unit 24 resets the timer 22 when the settings of the IoT device 3 including the registration of the password or the like are reset due to a power failure or an unexpected situation.
As a result, the elapsed time of the timer 22 is reset to zero, and then timing is started. When the timer 22 is reset in this way, it is determined by the login control unit 23 that the permission condition is satisfied within the specified time from the time of the reset, and the login with the default password becomes possible.

Next, the operation of the IoT authentication management unit 20 according to the present embodiment will be described with reference to FIGS. 4 and 5.
FIG. 4 is a flowchart showing an example of a procedure for processing for determining whether or not to log in in the IoT authentication management method according to the present embodiment.

For example, when the user wants to set or change the setting of the IoT device 3, the user accesses the IoT device 3 from the information processing device 15, and login information such as a user ID and a password is displayed on the login screen provided by the IoT device 3. Enter to perform the send operation. As a result, the login information is transmitted from the information processing device 15 to the IoT device 3.

When the IoT device 3 receives the login information (SA1: YES), the IoT device 3 determines whether or not the password stored in the storage unit 21 is the default password (SA2). Specifically, the IoT device 3 determines whether or not the password flag is the default password by confirming whether the password flag stored in the storage unit 21 is "True" or "False".

As a result, when it is the default password, that is, when "False" is set in the password flag (SA2: YES), it is determined whether or not the timer 22 is activated (SA3). As a result, if the timer 22 is not activated, that is, it can be regarded as the first login using the default password, subsequently, the password received in step SA1 and the default password stored in the storage unit 21 are used. It is determined whether or not they match (SA4). As a result, if both passwords match (SA4: YES), login is permitted (SA5), and the timer 22 is activated (SA6). As a result, time counting by the timer 22 is started.

On the other hand, in step SA4, if both passwords do not match, that is, if the entered password does not match the default password (SA4: NO), login is rejected (SA8) and login fails. A message notifying the fact is transmitted to the information processing apparatus 15 (SA9), and the process is terminated. In this case, the timer 22 is not started because the login has failed.

On the other hand, in step SA3, if the timer 22 has already been started (SA3: YES), it is determined whether or not the time counting time of the timer 22 is equal to or longer than the specified time (SA7). As a result, when the time counting time is less than the specified time (SA7: NO), it is determined whether or not the password received in step SA1 and the default password stored in the storage unit 21 match (SA10). .. As a result, if both passwords match (SA10: YES), login is permitted (SA11), and the process ends.

On the other hand, in step SA7, when the time counting time of the timer 22 is equal to or longer than the specified time (SA7: YES), it is determined that the login permission condition using the default password is not satisfied, and the login is rejected (SA8). A message notifying that the login has failed is transmitted to the information processing apparatus 15 (SA9), and the process is terminated. In this case, it is possible to send a message to the information processing apparatus 15 that the default password entered this time is invalid and that the reset button 30 is pressed.

Further, in step SA2, when the password received as the login information is not the default password, that is, when "True" is set in the password flag (SA2: NO), the password received in step SA1 and the storage unit 21 It is determined whether or not the password of the user registered in is the same (SA10). As a result, if the passwords of the two do not match (SA10: NO), the login is rejected (SA8), a message notifying that the login has failed is sent to the information processing apparatus 15 (SA9), and the process ends. do.

On the other hand, in step SA10, if the password received in step SA1 and the password of the user registered in the storage unit 21 match (SA10: YES), login is permitted (SA11), and the process is terminated. ..

Next, FIG. 5 is a flowchart showing an example of a procedure related to the timer reset process in the IoT authentication management method according to the present embodiment. The time counting time of the timer used in the above-mentioned process for determining whether or not to log in is reset by the procedure shown in FIG.

First, when the reset button 30 of the IoT device 3 is pressed (operated) by the user, it is determined that the reset button 30 has been pressed (SB1: "YES"), and the timer 22 is reset (SB2). Subsequently, the password stored in the storage unit 21 is changed to the default password (SB3), and the process is terminated.
By performing this process, when the reset button 30 is pressed by the user, the time measurement of the timer 22 is reset and the time measurement is restarted. Regarding the timing of restarting the timekeeping after the timer is reset, the timekeeping may be started immediately after the reset, or the timer may be started according to the process shown in FIG.

Further, when the password is changed to the default in step SB3, the password flag stored in the storage unit 21 is changed to "False". As a result, by checking the password flag, it is possible to easily determine whether the password stored in the storage unit 21 is the default password or the password set by the user.

The timer 22 is also reset by the reset unit 24 when the setting of the IoT device 3 is reset in the event of a power failure or an unexpected event. As a result, login using the default password is permitted until the time of the timer 22 exceeds the specified time, so that convenience can be enhanced.

As described above, according to the IoT device 3 according to the present embodiment, it is determined whether or not the permission condition for permitting login using the default password is satisfied, and it is determined that the permission condition is not satisfied. Is denied login using the default password. Specifically, according to the IoT device 3 according to the present embodiment, when the time counting time of the timer 22 is equal to or longer than a predetermined period, the login using the default password is refused.
In this way, by refusing to log in using the default password, it is possible to force the user to change the password. This makes it possible to improve security enhancement.

Further, according to the present embodiment, the IoT device 3 is provided with a reset button (operation unit) 30 operated by the user, and when the reset button 30 is pressed, the timer 22 is reset. As a result, even if the default password cannot be used for login, the user can be allowed to log in again using the default password by pressing the reset button 30. For example, since the reset button 30 is provided on the IoT device 3, the number of people who can operate the reset button 30 is limited. Therefore, for example, when the reset button 30 is pressed, it can be considered that security is ensured. Therefore, when the reset button 30 is operated, it can be considered that there is no security problem even if the login with the default password is permitted.

[Second Embodiment]
Next, the IoT device 3'according to the second embodiment of the present invention will be described with reference to the drawings. In the first embodiment described above, when the time counting time of the timer 22 exceeds the specified time, it is determined that the login permission condition by the default password is not satisfied, but the IoT device 3'related to the present embodiment is The difference is that if the login using the default password is performed consecutively more than the specified number of times, it is judged that the permission condition is not satisfied.
Hereinafter, with respect to the IoT device 3'related to the present embodiment, the functions and configurations common to the above-mentioned first embodiment are designated by common reference numerals, and the description thereof will be omitted, and the differences will be mainly described.

FIG. 6 is a functional block diagram showing an extracted IoT authentication management function that mainly performs authentication management of the IoT device 3'from among various functions included in the IoT device 3'related to the present embodiment. As shown in FIG. 6, the IoT authentication management unit 20'of the IoT device 3'provides a counter unit 26 that counts the number of logins using the default password instead of the timer 22 (FIG. 3). When the counter of the counter unit 26 is equal to or greater than the specified value, the login control unit 23'determines that the permission condition is not satisfied, and rejects the login using the default password.
The reset unit 24'resets the counter of the counter unit 26 when the reset button 30 is pressed or the like.

Next, the operation of the IoT authentication management unit 20'according to the present embodiment will be described with reference to FIGS. 7 and 8.
FIG. 7 is a flowchart showing an example of a procedure for processing for determining whether or not to log in in the IoT authentication management method according to the present embodiment.

For example, when the user wants to set or change the setting of the IoT device 3, the user accesses the IoT device 3 from the information processing device 15, and login information such as a user ID and a password is displayed on the login screen provided by the IoT device 3. Enter to perform the send operation. As a result, the login information is transmitted from the information processing device 15 to the IoT device 3.

When the IoT device 3 receives the login information (SC1: YES), the IoT device 3 determines whether or not the password stored in the storage unit 21 is the default password (SC2). Specifically, the IoT device 3 determines whether or not the password flag is the default password by confirming whether the password flag stored in the storage unit 21 is "True" or "False".

As a result, when it is the default password, that is, when "False" is set in the password flag (SC2: YES), it is determined whether or not the counter value of the counter unit 26 is equal to or more than the specified number of times (SC3). .. As a result, when the counter value is less than the specified number of times (SC3: NO), it is determined whether or not the password received in step SA1 and the default password stored in the storage unit 21 match (SC4). ). As a result, if both passwords match (SC4: YES), login is permitted (SC5), and the counter value of the counter unit 26 is incremented by 1 (SC6).

On the other hand, in step SC4, if the passwords of the two do not match (SC4: NO), the login is rejected (SC7), and a message notifying that the login has failed is transmitted to the information processing apparatus 15 (SC8). End the process. In this case, the counter value is not added because the login failed.

On the other hand, in step SC3, if the counter value is equal to or greater than the specified number of times (SC3: YES), the login is rejected (SC7), and a message notifying that the login has failed is transmitted to the information processing apparatus 15 (SC8). ), End the process. In this case, it is possible to send a message to the information processing apparatus 15 that the default password entered this time is invalid and that the reset button 30 is pressed.

Further, in step SC2, when the password received as the login information is not the default password, that is, when "True" is set in the password flag (SC2: NO), the password received in step SA1 and stored. It is determined whether or not the password of the user registered in the unit 21 matches (SC9). As a result, if the passwords of the two do not match (SC9: NO), the login is rejected (SC7), a message notifying that the login has failed is sent to the information processing apparatus 15 (SC8), and the process ends. do.

On the other hand, in step SC9, if the password received in step SC1 and the password of the user registered in the storage unit 21 match (SC9: YES), login is permitted (SC10), and the process is terminated. ..

FIG. 8 is a flowchart showing an example of a procedure related to the counter reset process in the IoT authentication management method according to the present embodiment. The counter value of the counter unit 26 used in the above-mentioned process for determining whether or not to log in is reset by the procedure shown in FIG.

When the reset button 30 of the IoT device 3 is pressed (operated) by the user, it is determined that the reset button 30 has been pressed (SD1), and the counter value of the counter unit 26 is reset (SD2). This sets the counter value to zero. Subsequently, the password stored in the storage unit 21 is changed to the default password (SD3), and the process is terminated.

Further, when the password is changed to the default in step SD3, the password flag stored in the storage unit 21 is set to "False". As a result, by checking the password flag, it is possible to easily determine whether the password stored in the storage unit 21 is the default password or the password set by the user.

Even if the setting of the IoT device 3 is reset in the event of a power failure or an unexpected event, the counter value of the counter unit 26 is reset by the reset unit 24'. As a result, login using the default password is permitted until the counter value of the counter unit 26 exceeds the specified number of times, so that convenience can be enhanced.

As described above, according to the IoT device 3 according to the present embodiment, it is determined whether or not the permission condition for permitting login using the default password is satisfied, and it is determined that the permission condition is not satisfied. Is denied login using the default password. Specifically, according to the IoT device 3 according to the present embodiment, when the counter value of the counter unit 26 is the specified number of times or more, the login using the default password is refused.
In this way, by refusing to log in using the default password, it is possible to force the user to change the password. This makes it possible to improve security enhancement.

Further, according to the present embodiment, the IoT device 3 is provided with a reset button (operation unit) 30 operated by the user, and when the reset button 30 is pressed, the counter value of the counter unit 26 is reset. As a result, even if the default password cannot be used for login, the user can be allowed to log in again using the default password by pressing the reset button 30. For example, since the reset button 30 is provided on the IoT device 3', the number of people who can operate the reset button 30 is limited. Therefore, for example, when the reset button 30 is pressed, it can be considered that security is ensured. Therefore, when the reset button 30 is operated, it can be considered that there is no security problem even if the login with the default password is permitted.

Although the above description has been made using each embodiment of the present invention, the technical scope of the present invention is not limited to the scope described in the above-described embodiment. For example, as illustrated below, various changes or improvements can be made to the above embodiment without departing from the gist of the invention, and the modified or improved embodiments are also included in the technical scope of the present invention. Will be. Further, it is also possible to appropriately combine the embodiments according to the above-described embodiments, and it is also possible to appropriately combine the embodiments according to the above-described embodiments and the embodiments shown below.

Further, the processing flow described with reference to FIGS. 4, 5, 7, and 8 in the above embodiment is also an example, and unnecessary steps may be deleted or newly added within a range not deviating from the gist of the present invention. Steps may be added or the processing order may be changed.

For example, when the configurations according to the first embodiment and the second embodiment are combined and both the timer 22 and the counter unit 26 are adopted and the time counting time of the timer 22 is equal to or longer than the specified time, or the counter unit 26 is used. If the counter value is equal to or greater than the specified number of times, it may be determined that the permission condition is not satisfied, and login using the default password may be refused.

Further, for example, in each of the above-described embodiments, when the reset button 30 is operated, the timer 22 is reset or the counter unit 26 is reset. Instead of this embodiment, for example, the time counting time of the timer 22 is set. If is longer than the specified time or the counter value is more than the specified number of times, login using the default password may be permitted only during the period when the reset button 30 is pressed. In this way, by allowing login using the default password only during the period when the reset button 30 is pressed, it is possible to further enhance the security.

Further, login using the default password is permitted without using the timer 22 and the counter unit 26 described above, that is, provided that the timer 22 and the counter unit 26 are omitted and the reset button 30 is pressed. You may do it.
As described above, when logging in using the default password, it is an essential condition that the reset button 30 is in the pressed state, so that the security can be further improved.

Further, when the reset button 30 is pressed, the input of the default password may be omitted and the login state may be automatically set. For example, since the number of people who can operate the reset button 30 is limited, it is considered that security can be maintained by the state where the reset button 30 is pressed. In this case, by omitting the password input, the security can be maintained. It is possible to ensure both safety and convenience.

Further, in the above embodiment, information is transmitted / received between the IoT device 3 and the information processing device 15 via the IoT gateway 5, but the system configuration is not limited to this example. For example, the IoT gateway 5 can be omitted, and the IoT device 3 and the information processing device 15 may directly transmit and receive via a predetermined network 7 such as the Internet.

3: IoT device 5: IoT gateway 7: Network 10: IoT management server 11: CPU
12: Auxiliary storage device 13: Main storage device 14: Communication unit 15: Information processing device 18: Bus 20: IoT authentication management unit 21: Storage unit 22: Timer (timekeeping unit)
23, 23': Login control unit 24, 24': Reset unit 26: Counter unit 30: Reset button (operation unit)

Claims (5)

It is an IoT device with an authentication management function.
A login control unit that determines whether or not the permission conditions for permitting login using the default password are satisfied, and rejects login using the default password when it is determined that the permission conditions are not satisfied.
It includes an operation unit operated to send a signal requesting permission to log in when login using the default password is refused by the login control unit.
The login control unit permits login when the operation unit is operated, and the login control unit permits login .
IoT device the login control unit, which when the login using the default password is performed continuously specified number of times or more, and determined not to satisfy the permission condition, and rejects the login by the default password. It is an IoT device with an authentication management function.
A login control unit that determines whether or not the permission conditions for permitting login using the default password are satisfied, and rejects login using the default password when it is determined that the permission conditions are not satisfied.
An operation unit operated to send a signal requesting permission to log in when login using the default password is rejected by the login control unit.
A counter unit that counts the number of logins using the default password,
A reset unit that resets the counter value by the counter unit when the operation unit is operated.
Equipped with
The login control unit permits login when the operation unit is operated, and the login control unit permits login.
The login control unit determines that the permission condition is not satisfied when the counter value by the counter unit is equal to or greater than a predetermined number of times, and refuses to log in using the default password. The login control unit determines that the permission condition is not satisfied after a predetermined period has elapsed from the time when login using the default password is performed or after a predetermined period has elapsed from the start of use of the IoT device. , The IoT device according to claim 1 or 2 , which refuses to log in with the default password. A timekeeping unit that measures the elapsed time from the time when the login using the default password is performed or the time when the use of the IoT device is started.
It is provided with a reset unit that resets the time by the time measuring unit when the operation unit is operated.
The invention according to any one of claims 1 to 3, wherein the login control unit determines that the permission condition is not satisfied when the elapsed time timed by the timekeeping unit is equal to or longer than a specified time, and refuses to log in using the default password. IoT device. The IoT device according to any one of claims 1 to 4, wherein the login control unit permits login without inputting a password when the operation unit is operated.

Images