JP7837252B2 - Trust linkage system, trust linkage method, and trust connector - Google Patents

Description

This invention relates to a trust linkage system, a trust linkage method, and a trust connector that link the results of verification from one or more perspectives.

In online services, technologies for establishing trust relationships between domain components are known (for example, Patent Document 1). Patent Document 1 discloses a computer system for online service-to-service communication in which trust relationships between domains are established using PKI (Public Key Infrastructure) or the like, and communication is determined based on the status of these trust relationships.

International Publication No. 2011/034970

However, the conventional technologies described above had the problem that inter-domain trust relationships were predicated on trust-building frameworks such as PKI, making it difficult to integrate with other trust-building functions and technologies. Furthermore, these conventional technologies had the problem that their use cases for inter-computer trust building were predetermined, making it difficult to build trust in unforeseen use cases.

Therefore, this invention has been made in view of the above problems, and aims to enable the introduction of a new trust-building method even when there are no established procedures or protocols for trust-building between computers.

The present invention relates to a trust linkage system that links data reliability between a data collection device, a trust connector, and a business device connected via a network. The data collection device collects the data, requests a trust assignment device to assign predetermined trust information to the data according to pre-configured trust settings, and transmits the data with the assigned trust information to the trust connector as trust data. The trust connector receives the trust data, extracts the trust information contained in the trust data, requests verification from a trust verification device, and if the verification result is valid, assigns a predetermined connector signature to the data extracted from the trust data to generate transfer data, which is then transmitted to the business device. The business device receives the transfer data, extracts the connector signature contained in the transfer data, verifies that the connector signature is valid, and if the connector signature is valid, extracts the data contained in the transfer data and performs predetermined processing.

Therefore, even when there are no established procedures or protocols for building trust between the data acquisition device and the business device, the present invention makes it possible to introduce a new trust-building method between the data acquisition device and the trust connector and link it to the trust relationship between the trust connector and the business device.

Details of at least one embodiment of the subject matter disclosed herein are described in the accompanying drawings and the following description. Other features, aspects, and effects of the disclosed subject matter are revealed by the following disclosures, drawings, and claims.

This block diagram shows an example of the configuration of a trust linkage system, illustrating Embodiment 1 of the present invention. This block diagram shows an example of the configuration of a trust connector, illustrating Embodiment 1 of the present invention. This is a sequence diagram illustrating Embodiment 1 of the present invention, showing an example of processing performed in a trust-linked system. This sequence diagram shows an example of the trust granting process performed in a trust linkage system, illustrating Embodiment 1 of the present invention. This sequence diagram shows an example of a trust verification process performed in a trust linkage system, illustrating Embodiment 1 of the present invention. This sequence diagram shows an example of the trust verification function list generation process performed in a trust linkage system, illustrating Embodiment 1 of the present invention. This sequence diagram shows an example of the trust setting process performed in a trust linkage system, illustrating Embodiment 1 of the present invention. This figure shows an example of collected data illustrating Embodiment 1 of the present invention. This figure shows an example of trust-assigned data, illustrating Embodiment 1 of the present invention. This figure shows an example of trust data, illustrating Embodiment 1 of the present invention. This figure shows an example of verification data for Embodiment 1 of the present invention. This figure shows an example of transferred data illustrating Embodiment 1 of the present invention. This figure shows an example of a trust granting function registration command, illustrating Embodiment 1 of the present invention. This figure shows an example of a trust verification function registration command, illustrating Embodiment 1 of the present invention. This figure shows an example of a trust granting function list data, illustrating Embodiment 1 of the present invention. This figure shows an example of trust verification function list data, illustrating Embodiment 1 of the present invention. This figure shows an example of a trust setting command, illustrating Embodiment 1 of the present invention. This figure shows an example of a trust setting input screen, illustrating Embodiment 1 of the present invention. This block diagram shows an example of the configuration of a trust linkage system, illustrating Embodiment 2 of the present invention. This is a sequence diagram illustrating an example of processing performed in a trust-linked system, showing Embodiment 2 of the present invention. This figure shows an example of a trust setting command, illustrating Embodiment 2 of the present invention. This figure shows an example of trust configuration, illustrating Embodiment 1 of the present invention. This figure shows an example of trust configuration, illustrating Embodiment 2 of the present invention.

The embodiments of the present invention will be described below with reference to the accompanying drawings.

Figure 1 is a block diagram showing an example of the configuration of a trust linkage system, illustrating Embodiment 1 of the present invention. The trust linkage system includes data acquisition devices ₁₀₁ to _10n for collecting data, trust assignment devices ₂₀₁ to _20n for assigning reliability to the collected data, a trust connector 30 for linking the reliability of the data, trust verification devices ₄₀₁ to _40n for verifying the reliability of the data at the request of the trust connector 30, business devices 50 that utilize the verified data, and a network 60 connecting each device. In the illustrated example, the business devices 50 that utilize the data are not limited to one, and a configuration in which multiple business devices 50 utilize the data is also possible.

The codes for data acquisition devices ₁₀₁ to _10n are represented by the code "10" without the subscripts "1" to "n" when individual devices are not specified. The same applies to the codes of other components. The functional elements of each device are described below.

<Data acquisition device>
The data acquisition device 10 has pre-configured trust information added to the data collected from equipment and sensors by the trust assignment device 20, and then transmits it to a predetermined business device 50 via the trust connector 30. The configurations of data acquisition devices ₁₀₁ to _10n are the same, so the subscript codes will be omitted in the following explanation (the same applies to the other devices).

Trust information is information used to ensure data reliability between devices, and can consist of, for example, digital signatures, evaluation information, verification information, timestamps, ciphertext, and hash values.

The data acquisition device 10 includes, as functional elements, a communication unit 101, a data acquisition unit 102, a trust data generation unit 103, and a trust setting unit 104. The communication unit 101 communicates with other devices (computers) via the network 60.

The data acquisition unit 102 collects data from devices (not shown) and sensors (not shown). The devices and sensors may be installed in or connected to the data acquisition device 10.

The trust data generation unit 103 transmits the collected data (hereinafter referred to as "collected data") to a predetermined trust assignment device 20 in order to assign the trust information pre-configured in the trust setting 104, and receives the trust-assigned collected data to which the trust information has been assigned.

The trust data generation unit 103 extracts verification function identification information from the trust-assigned collected data, as described later, generates trust data, and transmits it to the trust connector 30.

<Trust Granting Device>
The trust assignment device 20 assigns trust information to the data collected from the data acquisition device 10 and returns it as trust-assigned collected data. The trust assignment device 20 includes, as functional elements, a communication unit 201, a trust information assignment unit 202, and a trust assignment function registration unit 203. The communication unit 201 communicates with other devices (computers) via the network 60.

The trust assignment function registration unit 203, as described later, sets (registers) the trust information to be assigned by the trust assignment device 20 based on commands received from an external source. The trust information assignment unit 202 assigns the pre-configured trust information to the received collected data and returns it as trust-assigned collected data.

<Trust Connector>
The trust connector 30 verifies the trust-assigned collected data received from the data acquisition device 10, and if the verification result is normal, it generates signed transfer data as described later and sends it to the designated destination business device 50. The signature assigned by the trust connector 30 is a well-known or publicly available electronic certificate, and any electronic certificate that can be verified by the business device 50 is acceptable.

The trust connector 30 includes, as functional elements, a communication unit 301, an identification information recognition unit 302, a forwarding destination extraction unit 303, a forwarding information generation unit 304, a connector signature generation unit 305, a verification/assignment function list output unit 306, a verification/assignment function list update unit 307, a trust assignment function list 308, and a trust verification function list 309. The communication unit 201 communicates with other devices (computers) via the network 60.

The identification information recognition unit 302 acquires verification function identification information from the trust data received from the data acquisition device 10, as described later. The verification function identification information is an identifier for the function that verifies the trust information contained in the trust data. The forwarding destination extraction unit 303 extracts the address of the business device 50 that will use the data from the trust data received from the data acquisition device 10.

The transfer information generation unit 304, as described later, determines the trust verification device 40 that will verify the trust information using the trust verification function list 309, and transmits the trust information for verification. If the verification is successful, the transfer information generation unit 304 generates a predetermined signature using the connector signature generation unit 305, adds it to the trust information of the trust data, generates the transfer data, and transmits it to the business device 50.

The verification/assignment function list output unit 306 outputs either the trust assignment function list 308 or the trust verification function list 309. The verification/assignment function list update unit 307 updates either the trust assignment function list 308 or the trust verification function list 309. The trust assignment function list 308 is a list of trust information assigned by the trust assignment devices ₂₀₁ to _20n . The trust verification function list 309 is a list of trust information that can be verified by the trust verification devices ₄₀₁ to _40n .

<Trust Verification Device>
The trust verification device 40 verifies the trust information of the verification data received from the trust connector 30 and returns a verification result indicating whether or not the trust information is valid. The trust verification device 40 includes, as functional elements, a communication unit 401, a trust information verification unit 402, and a trust verification function registration unit 403.

The communication unit 401 communicates with other devices (computers) via the network 60. The trust information verification unit 402 verifies the trust information received from the trust connector 30 and responds whether the trust information is valid or not.

The trust verification function registration unit 403 registers the trust information verification function to be performed by the trust verification device 40 in response to an external command.

<Business equipment>
The business device 50 performs predetermined tasks using the transfer data received from the trust connector 30. The business device 50 includes, as functional elements, a communication unit 501, a business processing unit 502, a connector signature verification unit 503, a trust setting generation unit 504, and an input/output unit 505.

The communication unit 501 is connected to the network 60 and communicates with other devices (computers). The business processing unit 502 executes pre-configured tasks using the transferred data. The connector signature verification unit 503 verifies whether the connector signature of the trust connector 30 attached to the transferred data is valid information. The connector signature verification unit 503 is pre-configured with information for verifying the connector signature attached by the trust connector 30.

The trust setting generation unit 504 sets what kind of trust information to assign to the data acquired from the data acquisition device 10. The input/output unit 505 includes an input unit such as a mouse, keyboard, or touch panel, and an output unit such as a display.

<Hardware>
Next, we will describe the configuration of each device, including its hardware. Figure 2 is a block diagram showing an example of the configuration of the trust connector 30. The hardware configurations of the data acquisition device 10, the trust assignment device 20, the trust verification device 40, and the business device 50 are the same as those of the trust connector 30, so redundant explanations will be omitted.

The Trust Connector 30 is a computer that includes a communication device 11, an input/output device 12, a storage device 13, a CPU 14, and memory 15. The communication device 11 is connected to the network 60 and communicates with other devices and computers. The input/output device 12 includes input devices such as a mouse, keyboard, or touch panel, and output devices such as a display or speaker.

The storage device 13 is composed of a non-volatile storage medium and stores data and programs. The trust connector 30 stores the trust granting function list 308 and the trust verification function list 309 in the storage device 13.

A predetermined program is loaded into memory 15 and executed by the CPU 14. In the trust connector 30, the following programs are loaded into memory 15 and executed by the CPU 14: an identification information recognition program 151, a transfer destination extraction program 152, a transfer information generation program 153, a connector signature generation program 154, a verification/grant function list output program 155, and a verification/grant function list update program 156.

The CPU 14 operates as a functional unit that provides predetermined functions by processing according to the programs of each functional unit. For example, the CPU 14 functions as a transfer information generation unit 304 by processing according to the transfer information generation program 153. The same applies to other programs. Furthermore, the CPU 14 also operates as a functional unit that provides the functions of each of the multiple processes executed by each program. A computer and a computer system are devices and systems that include these functional units.

<Data>
The data used by each device is described below. Figure 22 shows an example of the trust settings 104 held by the data acquisition device 10. The trust settings 104 are set based on trust setting commands from the business device 50.

Trust setting 104 includes the device 141, verification function identification information 142, trust-assigning device address 143, and forwarding destination device address 144 in a single record.

Device 141 stores sensors or devices that identify the source of the data to be collected. If the data acquisition device 10 handles data from only one sensor or device, it can store a fixed value specific to the data acquisition device 10.

The verification function identification information 142 stores an identifier for the verification function according to the type of trust information. The verification function can consist of values or identifiers such as "electronic signature," "timestamp," or "evaluation information."

The trust assignment device address 143 stores the address or identifier of the trust assignment device 20 that assigns trust information to the collected data. The forwarding destination device address 144 stores the address of the forwarding destination business device 50. Note that if there is only one business device 50, a fixed value can be stored.

Figure 17 shows an example of a trust setting command A705 issued by the business device 50 to the data acquisition device 10. Before using data from the data acquisition device 10, the business device 50 specifies the type of trust information, etc., in the trust settings 104 of the data acquisition device 10 using the trust setting command A705.

The trust setting command A705 includes the setting destination data acquisition device address A1702, verification function identification information A1704, and the trust granting device address A1705.

The configured data acquisition device address A1702 stores the address of the data acquisition device 10 from which the business device 50 will use the data. The verification function identification information A1704 stores the identifier of the verification function corresponding to the type of trust information that the data acquisition device 10 assigns to the data. The verification function can consist of values or identifiers such as "electronic signature," "timestamp," or "evaluation information."

The trust assignment device address A1705 stores the address of the trust assignment device 20 according to the type of trust information.

Furthermore, if the data acquisition device 10 handles multiple data sets, a field for storing sensors or devices that identify the data source corresponding to device 141 in trust setting 104 may be provided in trust setting A1703.

Furthermore, if there are multiple business devices 50, a field may be provided in trust setting A1703 to store the address of the business device 50 corresponding to the forwarding destination device address 144 in trust setting 104.

Figure 8 shows an example of collected data A401 transmitted by the data acquisition device 10 to the trust assignment device 20. Collected data A401 includes the transfer destination address A802 and data A803.

The forwarding address A802 stores the address of the business device 50 that will use the data. Data A803 stores the sensor and device data collected by the data acquisition device 10. If the data acquisition device 10 handles multiple types of data, it may also collect information from the device 141 indicating the data source and add it to data A401.

Figure 9 shows an example of trust-granting data A402 that the trust-granting device 20 sends back to the data acquisition device 10. Trust-granting data A402 includes data A902 and trust information A903.

Data A902 is data A803 of collected data A401 transmitted by data acquisition device 10. Trust information A903 is information assigned by trust assignment device 20 to ensure data reliability between devices.

Figure 10 shows an example of trust data A403 transmitted by the data acquisition device 10 to the trust connector 30. Trust data A403 includes the destination device address A1002, verification function identification information A1003, data A1004, and trust information A1005.

The forwarding device address A1002 stores the address of the business device 50 that will use the data. The verification function identification information A1003 stores the identifier of the function that verifies the trust information. Data A1004 is data A803 collected by the data collection device 10. Trust information A1005 is information generated by the trust assignment device 20 to ensure data reliability between devices, and is the trust information A903 of the trust assignment collected data A402.

Figure 11 shows an example of verification data A501 transmitted by the trust connector 30 to the trust verification device 40. Verification data A501 includes the trust verification device address A1102, data A1103, and trust information A1104.

The trust verification device address A1102 stores the address of the trust verification device 40 set by the trust connector 30. Data A1103 is data A803 collected by the data acquisition device 10. Trust information A1104 is trust information A903 generated by the trust assignment device 20.

Figure 12 shows an example of transfer data A503 transmitted by the trust connector 30 to the business device 50. Transfer data A503 includes the destination device address A1202, data A1203, and connector signature A1204.

The forwarding device address A1202 stores the address of the destination business device 50. Data A11203 is data A803 collected by the data acquisition device 10. Connector signature A1204 is a predetermined electronic signature generated by the trust connector 30.

Figure 13 shows an example of a trust assignment function registration command A601 that the trust assignment device 20 sends to the trust connector 30. The trust assignment function registration command A601 includes the trust assignment function name A1302 and the trust assignment device address A1303.

The Trust Assignment Function Name A1302 stores the name or identifier of the trust information generated by the Trust Assignment Device 20. The Trust Assignment Device Address A1303 stores the address of the Trust Assignment Device 20.

The Trust Assignment Function Registration Command A601 is a command used by a trust assignment device 20 to request registration from the trust connector 30 when a new trust assignment device 20 is added or modified.

Figure 14 shows an example of a trust verification function registration command A602 that the trust verification device 40 sends to the trust connector 30. The trust verification function registration command A602 includes the trust verification function name A1402 and the trust verification device address A1403.

The Trust Verification Function Name A1402 stores the name or identifier of the trust information verified by the Trust Verification Device 40. The Trust Verification Device Address A1403 stores the address of the Trust Verification Device 40.

The Trust Verification Function Registration Command A602 is a command used when adding a new Trust Verification Device 40, allowing the Trust Verification Device 40 to request registration from the Trust Connector 30.

Figure 15 shows an example of the trust granting function list data A702 transmitted by the trust connector 30 to the business device 50. The trust granting function list data A702 is data that constitutes the trust granting function list 308 held by the trust connector 30.

The Trust Grant Function List Data A702 includes the Trust Grant Function Identification Information A1502, the Trust Grant Function Name A1503, and the Trust Grant Device Address A1504.

Trust Assignment Function Identification Information A1502 stores the identifier of the trust information generated by the trust assignment device 20. Trust Assignment Function Name A1503 stores the name of the trust information. Trust Assignment Device Address A1504 stores the address of the trust assignment device 20.

The Trust Grant Function List Data A702 is data output from the Trust Grant Function List 308 when the Trust Connector 30 notifies the Business Device 50 of a list of trust grant functions that can be set by the Trust Grant Device 20.

Figure 16 shows an example of the trust verification function list data A704 transmitted by the trust connector 30 to the business device 50. The trust verification function list data A704 is data that constitutes the trust verification function list 309 held by the trust connector 30.

Trust Verification Function List Data A704 includes Trust Verification Function Identification Information A1602, Trust Verification Function Name A1603, and Trust Verification Device Address A1604.

Trust Verification Function Identification Information A1602 stores the identifier of the trust information verified by the trust verification device 40. Trust Verification Function Name A1603 stores the name of the trust information. Trust Verification Device Address A1604 stores the address of the trust verification device 40.

Trust Verification Function List Data A704 is data output from Trust Verification Function List 309 when the Trust Connector 30 notifies the Business Device 50 of a list of trust verification functions that the Trust Verification Device 40 can perform.

<Overview of the process>
Next, an example of processing performed in the trust linkage system will be described. Figure 3 is a sequence diagram showing an example of processing performed in the trust linkage system. The sequence diagram in Figure 3 shows an overview of the processing, and during operation of the trust linkage system, a trust assignment process (S301) is performed in which trust information is added to the data collected by the data acquisition device 10 and the trust data is output to the trust connector 30, and a trust verification process (S302) is performed in which the trust connector 30 has the trust verification device 40 verify the trust information of the trust data and transmits the verified transfer data to the business device 50.

When adding or modifying the trust granting device 20 or the trust verification device 40, a trust function list generation process (S303) is performed to update the trust granting function list 308 and the trust verification function list 309 held by the trust connector 30.

Furthermore, when the business device 50 newly utilizes data from the data acquisition device 10 or changes the usage pattern, a trust setting process (S304) is performed.

<Trust Granting Process>
Figure 4 is a sequence diagram showing an example of a trust granting process performed in a trust linkage system. This process is the trust granting process shown in step S301 of Figure 3.

First, the data acquisition device 10 collects data from equipment, sensors, etc. (S401). The data acquisition device 10 then refers to the trust setting 104 to determine what kind of trust information to assign to the collected data (S402).

The data acquisition device 10, referring to the trust setting 104 in Figure 22, obtains the address of the trust assigning device 20 from the trust assigning device address 143 that matches device 141, and uses it as the transfer destination for the collected data (S403). The data acquisition device 10 also obtains the address of the business device 50 that will use the collected data from the transfer destination device address 144 of the trust setting 104.

Next, the data acquisition device 10 generates the collected data A401 shown in Figure 8, sets the address of the trust assignment device 20 to the forwarding address A802, and sets the collected data to data A803 (S404). Then, the data acquisition device 10 transmits the collected data A401 to the trust assignment device 20.

Furthermore, the data acquisition device 10 only needs to send the collected data A401 to the trust granting device 20 specified by the forwarding address A802; it does not need to broadcast to all trust granting devices 20.

Upon receiving the collected data A401, the trust assignment device 20 generates pre-configured trust information for each trust assignment device 20 and generates trust-assigned collected data A402 (S405). As shown in Figure 9, trust-assigned collected data A402 is data A902 (data A803 from collected data A401) with trust information A903 added. The trust assignment device 20 sends the generated trust-assigned collected data A402 back to the data collection device 10 that sent it.

Upon receiving the trust assignment data A402, the data acquisition device 10 refers to the trust setting 104 and obtains the verification function identification information 142 for the trust information assigned by the trust assignment device 20 (S406).

The data acquisition device 10 generates trust data A403, as shown in Figure 10, based on the acquired verification function identification information 142 and trust information A903 (S407). The data acquisition device 10 sets the address of the transfer destination business device 50 as the transfer destination device address A1002, sets the verification function identification information 142 as verification function identification information 1003, sets the collected data as data A1004, and sets the trust information A903 as trust information 1005.

The data acquisition device 10 transmits the generated trust data A403 to the trust connector 30. Through the above process, the data collected by the data acquisition device 10 is assigned the trust information specified in the trust setting 104 by the trust assignment device 20, and then transmitted to the trust connector 30 as trust data A403.

<Trust Verification Process>
Figure 5 is a sequence diagram showing an example of a trust verification process performed in the trust linkage system. This process is the trust verification process shown in step S302 of Figure 3.

When the trust connector 30 receives trust data A403 from the data acquisition device 10, it extracts verification function identification information A1003 (S501). The trust connector 30 reads the trust verification function list 309 (S502), searches for the trust verification function identification information A1602 in the trust verification function list data A704, and extracts the trust verification device address A1604 as the verification transfer destination from the data that matches the verification function identification information A1003 (S503).

Next, the trust connector 30 generates verification data A501, as shown in Figure 11, to allow the trust verification device 40 to verify the trust information A1005 of the trust data A403 (S504). The trust connector 30 sets the extracted trust verification device address A1604 to the trust verification device address A1102, sets data A902 to data A1103, sets trust information A1005 to trust information A1104, and transmits it to the designated trust verification device 40.

Upon receiving verification data A501, the trust verification device 40 verifies whether the trust information A1104 in verification data A501 is legitimate (S505). The trust verification device 40 performs verification of the trust information A1104 according to the pre-configured type of trust information.

The trust verification device 40, if the type of trust information set in the device is an electronic signature, verifies the electronic signature using the public key certificate of the signer of trust information A1104. If no errors occur, it determines that the signature is valid. Alternatively, if the type of trust information set in the trust verification device 40 is a quality evaluation, it queries the evaluation issuer with trust information A1104 to determine whether it is valid or not. The trust verification device 40 returns the verification result A502 of the validity of trust information A1104 to the trust connector 30. The verification result A502 is set to either success or failure, for example.

If the verification result A502 received from the trust verification device 40 is successful, the trust connector 30 proceeds to step S508. If the verification result A502 is unsuccessful, the process terminates in step S507.

In step S508, the trust connector 30 generates a predetermined signature, and then in step S509, it generates the transfer data A503 shown in Figure 12. The trust connector 30 sets the destination device address A1002 to the destination device address A1202 of the transfer data A503, sets data A1004 to data A1203, sets the generated signature to the connector signature A1204, generates the transfer data A503, and transmits it to the business device 50 at destination device address A1002.

Upon receiving the transfer data A503, the business device 50 verifies the connector signature A1204. If the connector signature is valid, it determines that the data is legitimate and has been verified by the trust connector 30 (S510).

The business device 50 executes predetermined processing using data A1203 of the transfer data A503, whose legitimacy is guaranteed (S511). If the connector signature is invalid, the business device 50 can discard the transfer data A503 and notify the trust connector 30 of the error.

Through the above process, the data acquisition device 10 has the trust information of the type specified in the trust setting 104 assigned by the trust assignment device 20, and then transmits the trust data A403 to the trust connector 30. The trust connector 30 verifies the trust information in the trust data A403, and if it is deemed valid, it can transmit the transfer data A503, with the connector signature attached to the data, to the business device 50. The business device 50 then determines that the data is trustworthy if the connector signature is valid and performs the predetermined task.

This allows the trust-linked system to grant reliability between the data acquisition device 10 and the trust connector 30 using one of several types of trust information, along with the trust information from the trust granting device 20 and the trust verification device 40. Furthermore, it allows for the granting of reliability between the trust connector 30 and the business device 50 using a pre-configured connector signature.

By pre-configuring the trust information type (verification function identification information) in the trust setting 104, the business device 50 can acquire legitimate data from the trust connector 30 and perform the prescribed tasks without verifying the trust information.

In other words, between the data acquisition device 10 and the trust connector 30, data reliability is assigned using multiple types of trust information via multiple trust assignment devices 20 and trust verification devices 40, while between the trust connector 30 and the business device 50, data reliability is assigned using a pre-configured connector signature.

This allows the business device 50 to ensure reliability based on the connector signature, even if the type of trust information between the data acquisition device 10 and the trust connector 30 is changed, as long as the data has been verified for reliability by the trust connector 30. Therefore, while flexibly changing the type of trust information between the data acquisition device 10 and the trust connector 30, the trust connector 30 and the business device 50 can still provide data reliability using a predetermined connector signature.

<Trust Verification Function List Generation Process>
Figure 6 is a sequence diagram showing an example of the trust verification function generation process performed in the trust linkage system. This process is the trust verification function generation process shown in step S303 of Figure 3. This process is executed when new trust information is added or modified in the trust linkage system, or when the trust granting device 20 or the trust verification device 40 is modified. In this embodiment, an example of updating the trust granting device 20 and the trust verification device 40 is shown.

First, the trust assignment device 20 to be updated generates the trust assignment function registration command A601 shown in Figure 13 (S601). The trust assignment device 20 sets the name of the trust information function to be assigned to the collected data as the trust assignment function name A1302, sets the address of the trust assignment device 20 as the trust assignment device address A1303, and transmits this to the trust connector 30.

Upon receiving the trust granting function registration command A601, the trust connector 30 updates or adds to the trust granting function list data A702 in the trust granting function list 308 (S602). This updates or adds to the information of the trust granting device 20 in the trust granting function list 308.

Next, the trust verification device 40 to be updated generates the trust verification function registration command A602 shown in Figure 14 (S603). The trust verification device 40 sets the name of the function of the trust information to be verified, which is attached to the trust data A403, as the trust verification function name A1402, sets the address of the trust verification device 40 as the trust verification device address A1403, and transmits this to the trust connector 30.

Upon receiving the Trust Verification Function Registration Command A602, the Trust Connector 30 updates or adds to the Trust Verification Function List Data A704 in the Trust Verification Function List 309.

Through the above process, the trust linkage system can introduce new trust-building methods by adding or updating the trust granting device 20 and the trust verification device 40, even if the procedures and protocols for trust building related to the granting and verification of trust information are not yet defined, as long as the trust information (verification function identification information) specified in trust setting 104 is correct.

<Trust setting process>
Figure 7 is a sequence diagram showing an example of a trust setting process performed in the trust linkage system. This process is the trust setting process shown in step S304 of Figure 3. This process is executed when a new business device 50 is added or modified in the trust linkage system.

The business device 50 sends a command (trust function list acquisition command A701) to the trust connector 30 requesting the trust function list 308. Upon receiving the trust function list acquisition command A701, the trust connector 30 reads the trust function list 308 (S701) and sends the trust function list data A702 shown in Figure 15 to the business device 50.

Next, the business device 50 sends a command (trust verification function list acquisition command A703) to the trust connector 30 requesting the trust verification function list 309. Upon receiving the trust verification function list acquisition command A703, the trust connector 30 reads the trust verification function list 309 (S702) and sends the trust verification function list data A704 in the format shown in Figure 16 to the business device 50.

The business device 50, upon acquiring the trust assignment function list data A702 and the trust verification function list data A704, outputs the trust setting input screen A1800 shown in Figure 18 to the input/output device 12. Users of the business device 50 input the trust setting 104 with a confidence level corresponding to the data they are using via the input/output device 12 (S703).

The trust setting input screen A1800 in Figure 18 includes an area for selecting the target equipment A1801 for selecting sensors and devices to be used by the business device 50, an area for selecting the trust assignment device list A1806 for selecting the trust information to be assigned to the trust data A403, and an area for selecting the trust verification device list A1810 for selecting the trust information to be verified by the trust connector 30.

The "Selection of Target Device A1801" is information specific to the data acquisition device 10 and is displayed as a list of selectable data source sensors and devices. The list for "Selection of Target Device A1801" includes the target A1802, device A1803, IP address A1804, and acquired data A1805 in a single entry.

By marking the checkbox for the target A1802 according to the collected data A1805 used by the business device 50, the settings can be reflected in the trust settings 104.

The Trust Assignment Device List A1806 is information generated from the received Trust Assignment Function List Data A702, and displays it as a selectable list of trust information to be assigned to the collected data.

Trust assignment device list A1806 includes selection A1807, trust assignment function name A1808, and trust assignment device address A1809 in a single entry. Depending on the collected data A1805 used by the business device 50, the required trust information (trust assignment function name A1808) can be reflected in the trust settings 104 by marking the corresponding checkbox in selection A1807.

The Trust Verification Device List A1810 is information generated from the received Trust Verification Function List Data A704, and displays the trust information to be verified by the Trust Connector 30 as a selectable list.

Trust verification device list A1810 includes selection A1811, trust verification function name A1812, and trust verification device address A1813 in a single entry. By marking the checkbox for selection A1811, which corresponds to the trust information (trust verification function name A1812) used in trust data A403, the information can be reflected in trust setting 104.

Once input is complete on the trust setting input screen A1800, the business device 50 generates the trust setting command A705 shown in Figure 17 (S704). The business device 50 then transmits the generated trust setting command A705 to the data acquisition device 10 at IP address A1804.

Upon receiving the trust setting command A705, the data acquisition device 10 inputs it into the trust setting 104 and uses it in the trust assignment process (S301) shown in Figure 3.

Through the above process, the business device 50 can select the data acquisition device 10, the trust assignment device 20, and the trust verification device 40 according to the data to be used.

As described above, in the trust linkage system of this embodiment, while the reliability of the data is assured by trust information, the business device 50 that uses the data does not need to verify the trust information. Therefore, the trust assignment device 20 and the trust verification device 40, which perform the assignment and verification of trust information, can be flexibly configured.

For example, by adding a trust assignment device 20 that assigns new trust information and a trust verification device 40 that verifies that trust information, and then later incorporating the new trust information into the trust settings 104 of the business device 50, the business device 50 can ensure data reliability with the new trust information regardless of the trust building procedure or protocol.

In this way, by making multiple trust information available between the data acquisition device 10 and the trust connector 30, and by assigning reliability using multiple trust assignment devices 20 and trust verification devices 40, and by ensuring reliability between the trust connector 30 and the business device 50 with a pre-configured connector signature, it becomes possible to flexibly change the trust information.

Figures 19 to 21 show Example 2, illustrating an example where multiple trust information is attached to a single collected data point. While Example 1 showed an example where one trust information point was attached to a single collected data point and transmitted, Example 2 shows an example where reliability is ensured using multiple trust information points.

Figure 19 is a block diagram showing an example of the configuration of a trust linkage system, illustrating Embodiment 2 of the present invention. The trust linkage system of Embodiment 2 has the same configuration as Embodiment 1, except that a connector signature verification unit 105 is added to the data acquisition device 10 of Embodiment 1.

The connector signature verification unit 105 is similar to the connector signature verification unit 503 of the business device 50, and verifies whether the connector signature of the trust connector 30 attached to the transfer data is valid information. The connector signature verification unit 105 is pre-configured with the connector signature information attached by the trust connector 30.

Figure 21 shows an example of a trust setting command A705 issued by the business device 50 to the data acquisition device 10. In Example 2, the data acquisition device 10 can use multiple trust information, and therefore, the trust setting command A705 also supports multiple trust information, which is a difference from Example 1.

Before using data from the data acquisition device 10, the business device 50 specifies the type of trust information, etc., using the trust setting command A705. The trust setting command A705 stores the destination data acquisition device address A1702, verification function identification information A1704 ₁ to A1704 _n , and trust granting device addresses A1705 ₁ to A1705 _n .

As described later, this embodiment shows an example where the data acquisition device 10 adds trust information using the trust assignment device 20 in ascending order of the subscript characters of the code before transmitting it to the trust connector 30.

The configured data acquisition device address A1702 stores the address of the data acquisition device 10 from which the business device 50 will use the data. The verification function identification information A1704 stores the identifier of the verification function corresponding to the type of trust information that the data acquisition device 10 assigns to the data. The verification function can consist of values or identifiers such as "electronic signature," "timestamp," or "evaluation information." The trust assignment device address A1705 stores the address of the trust assignment device 20 corresponding to the type of trust information.

Figure 23 shows an example of the trust settings 104 held by the data acquisition device 10. The trust settings 104 are configured based on the trust setting command A705 from the business device 50.

The trust setting 104 includes the device 141, the forwarding destination device address 144, the verification function identification information ₁₄₂₁ to _142n , and the trust granting device addresses ₁₄₃₁ to _143n .

Device 141 stores sensors and devices that identify the source of the data to be collected. The forwarding device address 144 stores the address of the forwarding business device 50. The verification function identification information 142 stores the identifier of the verification function according to the type of trust information. The verification function can consist of values or identifiers such as "electronic signature," "timestamp," or "evaluation information." The trust assignment device address 143 stores the address or identifier of the trust assignment device 20 that assigns trust information to the collected data.

Figure 20 is a sequence diagram showing an example of processing performed in the trust linkage system. This processing is performed during the operation of the trust linkage system, similar to the trust granting process (S301) and trust verification process (S302) shown in Figure 3 of Embodiment 1.

First, the data acquisition device 10 collects data and performs a trust assignment process (S2001). The trust assignment process (S2001) is performed in the same way as the trust assignment process (S301) in the first embodiment, but differs from the first embodiment in that the trust assignment process and the verification process by the trust connector 30 are repeated in the order of the trust assignment device addresses ₁₄₃₁ to _143n of the trust setting 104 shown in Figure 24.

In the trust assignment process (S2001), when the data acquisition device 10 collects data, it first requests the trust assignment device address ₁₄₃₁ to assign trust information, obtains the trust information, generates trust data A403, and transmits it to the trust connector 30.

When the trust connector 30 receives trust data A403 from the data acquisition device 10, it extracts verification function identification information A1003 (S2002). The trust connector 30 reads the trust verification function list 309 (S2003), searches for the trust verification function identification information A1602 in the trust verification function list data A704, and extracts the trust verification device address A1604 as the verification transfer destination from the data that matches the verification function identification information A1003 (S2004).

Next, the trust connector 30 generates verification data A501, shown in Figure 11, to allow the trust verification device 40 to verify the trust information A1005 of the trust data A403 (S2005). The trust connector 30 then transmits the generated verification data A501 to the designated trust verification device 40.

Upon receiving verification data A501, the trust verification device 40 verifies whether the trust information A1104 in verification data A501 is legitimate (S2006). The trust verification device 40 verifies the trust information A1104 according to the pre-set type of trust information, in the same manner as in the previous embodiment 1, and returns the verification result A502 of the legitimacy of the trust information A1104 to the trust connector 30.

If the verification result A502 received from the trust verification device 40 is successful, the trust connector 30 proceeds to step S2009. If the verification result A502 is unsuccessful, the process ends in step S2008 (S2007).

In step S2009, the trust connector 30 generates a predetermined signature, and then in step S2010, it generates the transfer data A503 shown in Figure 12. The data collection device 10 sets the destination address A1002 of the trust data A403 to its own address, which is the source, until the verification of reliability using multiple trust information is complete. Once the verification of reliability using multiple trust information is complete, it sets the destination address A1002 to the address of the business device 50. The trust connector 30 sets the destination specified by the data collection device 10 to the destination device address A1202 of the transfer data A503.

In step S2011, the trust connector 30 distributes the transfer data to the source data acquisition device 10 or business device 50 (other than the source in the diagram) according to the destination device address A1202, and then transmits it.

Upon receiving the transfer data A503, the data acquisition device 10 verifies the connector signature A1204. If the signature is valid, it determines that the data is legitimate and has been verified by the trust connector 30 (S2012).

Since the verification of the previous trust information was successful, the data acquisition device 10 returns to step S2001 to assign the next trust information and requests the trust information from the trust assignment device address ₁₄₃₂ of the trust setting 104 shown in Figure 23.

The data acquisition device 10 and the trust connector 30 repeatedly assign and verify trust information for the trust assignment device addresses ₁₄₃₁ to _143n of the trust setting 104. Once verification of all trust information is complete, they send the transfer data A503 to the business device 50 to execute predetermined processing.

As described above, in the trust linkage system of Example 2, by pre-specifying a combination of multiple trust information (verification function identification information 142, trust assignment device address 143) in the trust setting 104, the trust connector 30 transmits transfer data A503 to the business device 50 only after verification of all trust information is complete. This enables the business device 50 to process data with reliability assigned by combining multiple trust information.

In the above embodiments 1 and 2, examples were shown in which the trust granting device 20, the trust connector 30, and the trust verification device 40 are configured on different computers. However, the invention is not limited to this configuration, and the functions of these devices may be provided by a single computer.

Furthermore, while the above embodiment 2 shows an example where one trust assignment device 20 and trust verification device 40 handle one type of trust information, the invention is not limited to this, and one trust assignment device 20 or trust verification device 40 may handle multiple types of trust information.

<Conclusion>
As described above, the trust linkage systems of the above embodiments 1 and 2 can be configured as follows.

(1) A trust linkage system in which data reliability is linked between a data acquisition device (10), a trust connector (30), and a business device (50) connected via a network (60), wherein the data acquisition device (10) collects the data and requests a trust assignment device (20) to assign predetermined trust information (A903) to the data (A902) according to a pre-set trust setting (104), and transmits the data to the trust connector (30) as trust data (A403), and the trust connector (30) receives the trust data (A403) and the trust information ( A trust linkage system characterized by extracting A1005) and requesting verification from a trust verification device (40), and if the verification result is valid, assigning a predetermined connector signature (A1204) to the data (A1004) extracted from the trust data (A403) to generate transfer data (A503) and transmitting it to a business device (50), the business device (50) receiving the transfer data (A503), extracting the connector signature (A1204) contained in the transfer data (A503), verifying that the connector signature (A1204) is valid, and if the connector signature (A1204) is valid, extracting the data (A1203) contained in the transfer data (A503) and executing predetermined processing.

According to the above configuration, even if there are no established procedures or protocols for building trust between the data acquisition device and the business device, it becomes possible to introduce a new trust-building method between the data acquisition device and the trust connector and link it to the trust relationship between the trust connector and the business device. Specifically, between the data acquisition device 10 and the trust connector 30, data reliability is assigned using multiple types of trust information via multiple trust-assigning devices 20 and trust-verifying devices 40, while data reliability is assigned between the trust connector 30 and the business device 50 using a pre-configured connector signature. This allows the business device 50 to ensure reliability based on the connector signature, even if the type of trust information between the data acquisition device 10 and the trust connector 30 is changed, provided the data has been verified for reliability by the trust connector 30.

(2) The trust linkage system described in (1) above, wherein the trust granting device (20) includes a plurality of trust granting devices ( ₂₀₁ to _20n ) capable of granting a plurality of types of trust information (A903), and the trust verification device (40) includes a plurality of trust verification devices ( ₄₀₁ to 420n ₎ capable of verifying a plurality of types of trust information (A1104). A trust linkage system characterized in that the data acquisition device (10) selects the trust granting device (20) based on the trust information (trust granting device address 143) specified in the trust setting (104) and grants the trust information (A903), and grants the identification information (verification function identification information A1003) of the specified trust information (A1005) to the trust data (A403), and the trust connector (30) extracts the identification information (A1003) from the trust data (A403), selects the trust verification device (40) corresponding to the identification information (A1003) and requests the verification.

According to the above configuration, between the data acquisition device 10 and the trust connector 30, reliability can be assigned by the trust assignment device 20 and the trust verification device 40 using trust information selected from multiple types of trust information, and between the trust connector 30 and the business device 50, data reliability can be assigned using a pre-configured connector signature.

(3) The trust linkage system described in (1) above, wherein the trust assignment device (20) includes a plurality of trust assignment devices ( ₂₀₁ to _20n ) capable of assigning a plurality of types of trust information, the trust verification device (40) includes a plurality of trust verification devices ( ₄₀₁ to _40n ) capable of verifying a plurality of types of trust information, the data acquisition device (10) sequentially assigns identification information ( ₁₄₂₁ to _142n ) of the specified trust information to the trust data (A403) based on the plurality of trust information ( ₁₄₃₁ to _143n ) specified in the trust setting (104), the trust connector (30) extracts the identification information (A1003) of the trust data (A403) and the trust verification device ( ₄₀₁ to 40n ₎ corresponding to the identification information (A1003) A trust linkage system characterized by sequentially selecting and requesting verification for the trust information ( _{1431 to 143n) specified in the trust setting (104), and repeating the verification for each of the trust information (1431} to _143n ).

According to the above configuration, by pre-specifying multiple trust information (verification function identification information 142, trust assignment device address 143) in the trust setting 104, the trust connector 30 sends transfer data A503 to the business device 50 only after verification of all trust information is complete. This allows the business device 50 to process data that has been assigned reliability by multiple trust information.

(4) A trust linkage system as described in (1) above, wherein the trust connector (30) receives additions or changes to the trust information from the trust granting device (20) and updates the granting function list (308) that manages the trust granting device (20), and receives additions or changes to the trust information from the trust verification device (40) and updates the verification function list (309) that manages the trust verification device (40).

According to the above configuration, in the trust linkage system, even if the procedures and protocols for building trust related to the assignment and verification of trust information are not defined, it becomes possible to introduce a new trust building method by adding or updating the trust assignment device 20 and the trust verification device 40, provided that the trust information (verification function identification information) specified in the trust setting 104 is correct.

(5) A trust linkage system as described in (1) above, characterized in that the trust setting (104) is specified by the business device (50) for identification information of the trust information (A903) assigned to the data (A902) by the data acquisition device (10) and the trust information (A1003) verified by the trust verification device (40).

According to the above configuration, the business device 50 can select the trust information to be used by the data acquisition device 10, the trust assignment device 20, and the trust verification device 40 according to the data to be used. The business device 50 only needs to instruct the data acquisition device 10 to add or change the trust information, and the trust information verification can be performed by the trust connector 30. This ensures reliability between the trust connector 30 and the business device 50 through connector signatures, and ensures reliability between the data acquisition device 10 and the trust connector 30 through the desired trust information.

Furthermore, the present invention is not limited to the embodiments described above, and various modifications are included. For example, the embodiments described above are detailed for the purpose of clearly illustrating the present invention and are not necessarily limited to those that include all the configurations described. Also, it is possible to replace parts of the configuration of one embodiment with those of another embodiment, and it is also possible to add configurations from other embodiments to the configuration of one embodiment. Moreover, for parts of the configuration of each embodiment, the addition, deletion, or substitution of other configurations can be applied individually or in combination.

Furthermore, each of the above-described configurations, functions, processing units, and processing means may be implemented in hardware, either partially or entirely, for example, by designing them as integrated circuits. Alternatively, each of the above-described configurations and functions may be implemented in software by a processor interpreting and executing programs that implement each function. Information such as programs, tables, and files that implement each function can be stored in memory, a recording device such as a hard disk or SSD (Solid State Drive), or a recording medium such as an IC card, SD card, or DVD.

Furthermore, the control and information lines shown are those deemed necessary for explanatory purposes and do not necessarily represent all control and information lines in the actual product. In practice, it can be assumed that almost all components are interconnected.

10 Data acquisition device 20 Trust assignment device 30 Trust connector 40 Trust verification device 50 Business device 102 Data acquisition unit 103 Trust data generation unit 104 Trust setting 202 Trust information assignment unit 203 Trust assignment function registration unit 302 Identification information recognition unit 303 Transfer destination extraction unit 304 Transfer information generation unit 305 Connector signature generation unit 306 Verification/assignment function list output unit 307 Verification/assignment function list update unit 308 Trust assignment function list 309 Trust verification function list 402 Trust information verification unit 403 Trust verification function registration unit 502 Business processing unit 503 Connector signature verification unit 504 Trust setting generation unit

Claims (13)

A trust linkage system that links data reliability between data acquisition devices, trust connectors, and business equipment connected via a network,
The data acquisition device is
The data is collected, and a trust assignment device is requested to assign predetermined trust information to the data according to a pre-configured trust setting, and the data with the assigned trust information is transmitted to the trust connector as trust data.
The aforementioned trust connector is
The system receives the trust data, extracts the trust information contained in the trust data, requests verification from the trust verification device, and if the verification result is valid, assigns a predetermined connector signature to the data extracted from the trust data, generates transfer data, and transmits it to the business device.
The aforementioned business device is
A trust linkage system characterized by receiving the aforementioned transfer data, extracting the connector signature contained in the transfer data, verifying that the connector signature is valid, and if the connector signature is valid, extracting the aforementioned data contained in the transfer data and performing predetermined processing. A trust linkage system according to claim 1,
The trust granting device includes a plurality of trust granting devices capable of granting a plurality of types of trust information,
The trust verification device includes a plurality of trust verification devices capable of verifying a plurality of types of trust information,
The data acquisition device is
Based on the trust information specified in the trust settings, the trust granting device is selected to grant the trust information, and the identification information of the specified trust information is assigned to the trust data.
The aforementioned trust connector is
A trust linkage system characterized by extracting the identification information from the trust data, selecting the trust verification device corresponding to the identification information, and requesting verification. A trust linkage system according to claim 1,
The trust granting device includes a plurality of trust granting devices capable of granting a plurality of types of trust information,
The trust verification device includes a plurality of trust verification devices capable of verifying a plurality of types of trust information,
The data acquisition device is
Based on the multiple trust information specified in the trust settings, identification information of the specified trust information is sequentially assigned to the trust data.
The aforementioned trust connector is
A trust linkage system characterized by extracting identification information from the trust data, sequentially selecting the trust verification device corresponding to the identification information and requesting the verification, and repeating the verification for multiple trust information specified in the trust settings. A trust linkage system according to claim 1,
The aforementioned trust connector is
The trust granting device receives an addition or modification of the trust information and updates the granting function list that manages the trust granting device.
A trust linkage system characterized by receiving additions or changes to the trust information from the trust verification device and updating the verification function list that manages the trust verification device. A trust linkage system according to claim 1,
The aforementioned trust setting is,
A trust linkage system characterized in that the trust information assigned to the data by the data collection device and the identification information of the trust information verified by the trust verification device are specified by the business device. A trust linkage method that links data reliability between a data acquisition device, a trust connector, and a business device connected via a network,
The data acquisition device collects the data and requests a trust information assignment device to assign predetermined trust information to the data according to a pre-set trust setting;
The data acquisition device transmits the data to which the trust information has been added as trust data to the trust connector in a trust data transmission step,
The trust connector receives the trust data, extracts the trust information contained in the trust data, and requests verification from the trust verification device, in a trust information verification step,
The trust connector receives the verification result, and if the verification result is valid, it adds a predetermined connector signature to the data extracted from the trust data, generates transfer data, and sends it to the business device in a transfer data transmission step.
The aforementioned business device receives the transfer data, extracts the connector signature contained in the transfer data, verifies that the connector signature is valid, and if it is a valid connector signature, extracts the data contained in the transfer data and performs a predetermined process;
A trust linkage method characterized by including [a certain element]. A trust linkage method according to claim 6,
The aforementioned step of assigning trust information is:
From among a plurality of trust granting devices capable of assigning multiple types of trust information, the trust granting device is selected based on the trust information specified in the trust setting.
The aforementioned trust data transmission step is:
The trust information identification information specified in the trust settings is added to the trust data and transmitted.
The aforementioned trust information verification step is,
A trust linkage method characterized by selecting a trust verification device corresponding to the identification information of the trust data from among a plurality of trust verification devices capable of verifying multiple types of trust information, and requesting verification. A trust linkage method according to claim 6,
The aforementioned step of assigning trust information is:
From among a plurality of trust assigning devices capable of assigning multiple types of trust information, the trust assigning devices are sequentially selected based on the plurality of trust information specified in the trust setting.
The aforementioned trust data transmission step is:
The trust information identification information specified in the trust settings is added to the trust data and transmitted sequentially.
The aforementioned trust information verification step is,
A trust linkage method characterized by sequentially selecting a trust verification device corresponding to the identification information of the trust data from among a plurality of trust verification devices capable of verifying a plurality of types of the trust information, requesting the verification, and repeating the verification for a plurality of trust information specified in the trust settings. A trust linkage method according to claim 6,
The trust connector receives an addition or modification of the trust information from the trust granting device and updates the granting function list, which manages the trust granting device, in a granting function list update step.
A trust linkage method characterized in that the trust connector receives additions or changes to the trust information from the trust verification device and updates the verification function list that manages the trust verification device. A trust linkage method according to claim 6,
The trust setting is a trust linkage method characterized in that the trust information assigned to the data by the data acquisition device and the identification information of the trust information verified by the trust verification device are specified by the business device. A trust connector having a processor and memory,
The system receives trust data to which predetermined trust information has been attached, extracts the trust information contained in the trust data, requests verification from a trust verification device corresponding to the trust information, and if the verification result is valid, attaches a predetermined signature to the data extracted from the trust data, generates transfer data, and outputs it.
A trust connector characterized by extracting identification information of the trust data, selecting the trust verification device corresponding to the identification information from among a plurality of trust verification devices capable of verifying multiple types of trust information, and requesting the verification. A trust connector having a processor and memory,
The system receives trust data to which predetermined trust information has been attached, extracts the trust information contained in the trust data, requests verification from a trust verification device corresponding to the trust information, and if the verification result is valid, attaches a predetermined signature to the data extracted from the trust data, generates transfer data, and outputs it.
A trust connector characterized by extracting identification information for the trust data, selecting the trust verification device corresponding to the identification information from among multiple trust verification devices capable of verifying multiple types of trust information, and repeatedly requesting the verification for each piece of trust data. A trust connector having a processor and memory,
The system receives trust data to which predetermined trust information has been attached, extracts the trust information contained in the trust data, requests verification from a trust verification device corresponding to the trust information, and if the verification result is valid, attaches a predetermined signature to the data extracted from the trust data, generates transfer data, and outputs it.
Upon receiving the addition or modification of the aforementioned trust information, the grant function list that manages the trust granting device is updated.
A trust connector characterized by accepting additions or changes to the aforementioned trust information and updating the verification function list that manages the trust verification device.