SECURITY METHOD FOR ENGINEERING TOOLS AND INDUSTRIAL PRODUCTS, AND SECURITY SYSTEM

• US 20130031603A1
• Filed: 04/14/2010
• Published: 01/31/2013
• Est. Priority Date: 04/14/2010
• Status: Active Grant

• Current Assignee: Mitsubishi Electric Corporation
• Original Assignee: Mitsubishi Electric Corporation
• Inventors: Watanabe, Taku, Hamazaki, Hiroshi, Ooba, Kunio
• Granted Patent: US 9,672,363 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/60 Protecting data

Abstract

The invention includes a read-restriction setting step of setting read restriction on a program stored in hardware of an industrial product in response to a read restriction request, and a read requesting step of transmitting a read request for the program to the industrial product from an engineering tool that is a read request source. In the read-restriction setting step unique individual information retained in the hardware of the industrial product or unique individual information retained in hardware for executing an engineering tool that is a read-restriction request source is registered as registration individual information, and in the read requesting step, unique individual information retained in hardware for executing the engineering tool that is the read request source or unique individual information retained in the hardware of the industrial product is compared with the registration individual information.

Claims

1. A security method for engineering tools and industrial products, the security method comprising:

a read-restriction setting step of setting read restriction on a program stored in hardware of an industrial product in response to a read restriction request to the industrial product from an engineering tool that is a read-restriction request source; and

a read requesting step of transmitting a read request for the program from an engineering tool that is a read request source to the industrial product, wherein

in the read-restriction setting step, as registration individual information, unique individual information retained in the hardware of the industrial product is registered in hardware for executing the engineering tool that is a read-restriction request source, or unique individual information retained in hardware for executing the engineering tool that is the read-restriction request source is registered in the industrial product, and

in the read requesting step, unique individual information retained in hardware for executing the engineering tool that is the read request source or unique individual information retained in the hardware of the industrial product is compared with the registration individual information.

2. The security method for engineering tools and industrial products according to claim 1, wherein

in the read-restriction setting step, unique individual information retained in the hardware for executing the engineering tool that is the read-restriction request source is registered as the registration individual information in the industrial product, and

in the read requesting step, retention individual information that is unique individual information retained in the hardware for executing the engineering tool that is the read request source is transmitted together with the read request,

the registration individual information registered in the industrial product and the retention individual information transmitted from the engineering tool that is the read request source are compared with each other in the industrial product,

the hardware of the industrial product executes reading of the program in response to the read request when the registration individual information and the retention individual information match, and

the hardware of the industrial product rejects the read request when the registration individual information and the retention individual information do not match.

3. The security method for engineering tools and industrial products according to claim 1, wherein

in the read-restriction setting step, unique individual information retained in the hardware for executing the engineering tool that is the read-restriction request source is registered as the registration individual information in the industrial product, and

in the read requesting step, the engineering tool that is the read request source transmits an acquisition request for the registration individual information to the industrial product,

retention individual information that is unique individual information retained in the hardware for executing the engineering tool that is the read request source and the registration individual information received from the industrial product in response to the acquisition request are compared with each other in the engineering tool that is the read request source,

the hardware of the industrial product executes reading of the program in response to the read request transmitted from the engineering tool that is the read request source when the registration individual information and the retention individual information match, and

the engineering tool that is the read request source rejects reading of the program when the registration individual information and the retention individual information do not match.

4. The security method for engineering tools and industrial products according to claim 1, wherein

in the read-restriction setting step, unique individual information retained in the hardware of the industrial product is registered as the registration individual information in the hardware for executing the engineering tool that is the read-restriction request source, and

in the read requesting step, the engineering tool that is the read request source transmits the registration individual information together with the read request,

the registration individual information transmitted from the engineering tool that is the read request source and retention individual information that is individual information retained in the hardware of the industrial product are compared with each other in the industrial product,

the hardware of the industrial product executes reading of the program in response to the read request when the registration individual information and the retention individual information match, and

the hardware of the industrial product rejects the read request when the registration individual information and the retention individual information do not match.

5. The security method for engineering tools and industrial products according to claim 1, wherein

in the read-restriction setting step, unique individual information retained in the hardware of the industrial product is registered as the registration individual information in the hardware for executing the engineering tool that is the read-restriction request source, and

in the read requesting step, the engineering tool that is the read request source transmits to the industrial product an acquisition request for retention individual information that is individual information retained in the hardware of the industrial product,

the registration individual information registered in the hardware for executing the engineering tool that is the read-restriction request source and the retention individual information received from the industrial product in response to the acquisition request are compared with each other in the engineering tool that is the read request source,

the hardware of the industrial product executes reading of the program in response to the read request transmitted from the engineering tool that is the read request source when the registration individual information and the retention individual information match, and

the engineering tool that is the read request source rejects reading of the program when the registration individual information and the retention individual information do not match.

6. The security method for engineering tools and industrial products according to claim 1, wherein

in the read-restriction setting step, unique individual information retained in the hardware for executing the engineering tool that is the read-restriction request source is registered as first registration individual information in the industrial product, and

unique individual information retained in the hardware of the industrial product is registered as second registration individual information in the engineering tool that is the read-restriction request source, and

in the read requesting step, first retention individual information that is unique individual information retained in the hardware for executing the engineering tool that is the read request source and the second registration individual information are transmitted together with the read request,

the first registration individual information registered in the industrial product and the first retention individual information transmitted from the engineering tool that is the read-restriction request source are compared with each other in the industrial product,

the second registration individual information transmitted from the engineering tool that is the read request source and second retention individual information that is individual information retained in the hardware of the industrial product are compared with each other, and

the hardware of the industrial product rejects the read request in at least one of the case where the first registration individual information and the first retention individual information do not match and the case where the second registration individual information and the second retention individual information do not match.

7. The security method for engineering tools and industrial products according to claim 1, wherein

in the read-restriction setting step, unique individual information retained in the hardware for executing the engineering tool that is the read-restriction request source is registered as first registration individual information in the industrial product, and

unique individual information retained in the hardware of the industrial product is registered as second registration individual information in the engineering tool that is the read-restriction request source, and

in the read requesting step, the engineering tool that is the read request source transmits an acquisition request for the first registration individual information to the industrial product,

first retention individual information that is unique individual information retained in the hardware for executing the engineering tool that is the read request source and the first registration individual information transmitted from the industrial product in response to the acquisition request are compared with each other in the engineering tool that is the read request source,

the engineering tool that is the read request source transmits to the industrial product an acquisition request for second retention individual information that is individual information retained in the hardware of the industrial product,

the second registration individual information registered in the engineering tool that is the read-restriction request source and the second retention individual information transmitted from the industrial product in response to the acquisition request are compared with each other in the engineering tool that is the read request source, and

the engineering tool that is the read request source rejects reading of the program in at least one of the case where the first registration individual information and the first retention individual information do not match and the case where the second registration individual information and the second retention individual information do not match.

8. The security method for engineering tools and industrial products according to claim 2, wherein the unique individual information retained in the hardware for executing the engineering tool is a MAC address.

9. The security method for engineering tools and industrial products according to claim 4, wherein the unique individual information retained in the hardware of the industrial product is a serial number.

10. The security method for engineering tools and industrial products according to claim 4, wherein information indicating that the read restriction has been already set is registered in the industrial product in the read-restriction setting step.

11. The security method for engineering tools and industrial products according to claim 1, wherein the hardware of the industrial product or the engineering tool that is the read-restriction request source rejects the read restriction request when confirming that the registration individual information has been already registered in the read-restriction setting step.

12. The security method for engineering tools and industrial products according to claim 1, wherein the hardware of the industrial product or the engineering tool that is the read request source outputs a warning of reading impossibility when rejecting reading of the program.

13. A security system comprising an industrial product that includes hardware having a program stored therein and is capable of setting read restriction on the program in response to a read restriction request from an engineering tool that is a read-restriction request source,

the security system being configured to:

register, as registration individual information, therein unique individual information retained in the hardware of the industrial product in hardware for executing the engineering tool that is a read-restriction request source, or unique individual information retained in hardware for executing the engineering tool that is the read-restriction request source in the industrial product; and

compare, in response to a read request for the program from an engineering tool that is a read request source to the industrial product, unique individual information retained in hardware for executing the engineering tool that is the read request source or unique individual information retained in the hardware of the industrial product with the registration individual information.