Confirmation system and confirmation method

A trusted application (TA) operates on a trusted execution environment (TEE) and generates a screen. Further, the TA transmits certification information for certifying validity of the TA to a verification device. The verification device verifies whether the TA is valid on the basis of the certification information. Further, the verification device authenticates a display device when the validity of the TA is certified and when the verification device is capable of confirming the facts that a picture is being output and that a device outputting the picture is the display device. Further, the verification device outputs a random number code when the display device is authenticated. Further, the verification device transmits the random number code to the display device when the display device is authenticated. Further, the display device receives the random number code from the verification device and displays the same.

CROSS-REFERENCE TO RELATED APPLICATIONS

The present application is based on PCT filing PCT/JP2019/023971, filed Jun. 17, 2019, which claims priority to JP 2018-115575, filed Jun. 18, 2018, the entire contents of each are incorporated herein by reference.

TECHNICAL FIELD

The present invention relates to a confirmation system and a confirmation method.

BACKGROUND ART

Conventionally, in a mobile device or an embedded device (hereinafter referred to as a device), there has been known a technology to divide an execution environment for an application operating on an OS (Operating System) inside the device into a normal execution environment (REE: Rich Execution Environment) and an execution environment (TEE: Trusted Execution Environment) in which an application can be be safely executed (see, for example, NPL 1).

Further, there has been known a technology (TUI: Trusted User Interface) to cause a TEE mounted in a device to occupy an input/output screen and perform an information input operation or information output processing between a TA (Trusted Application) operating inside the TEE and a device user without the interposition of a REE (see, for example, NPL 2).

Here, in the execution of the TUI, there is sometimes a problem that a malicious application operating inside the REE disguises itself as the TA and outputs a false input/output screen. In order to address this, there has been proposed a method for confirming a state in which an input/output screen can be occupied by a TEE.

For example, there has been proposed a method for embedding a LED lamp for indicating screen output from a TEE in a device, causing the TEE to occupy the LED lamp, and informing the occupation of an input/output screen through lighting up the lamp. Further, for example, there has been proposed a method for storing secret information in a data storage region that is accessible from a TEE but not accessible from a REE and displaying the secret information in an input/output screen.

CITATION LIST

Non Patent Literature

SUMMARY OF THE INVENTION

Technical Problem

However, according to the conventional methods, there is a problem that it is sometimes difficult to easily and reliably confirm a state in which an input/output screen can be occupied by a TEE. For example, as for a method for lighting up a LED lamp, it is sometimes difficult to embed a LED that is occupiable by a TEE lamp later in a device in which the LED lamp had not been embedded at its manufacturing stage. Further, as for a method for storing secret information, a malicious person possibly steals a glance at or estimates the secret information. Therefore, there is a case that safety is not reliably ensured.

Means for Solving the Problem

In order to solve the above problems and achieve an object, a confirmation system includes: a display device that includes a first execution environment and a second execution environment that is guaranteed to be higher in safety than the first execution environment; and a verification device that verifies whether the display device works normally, wherein the display device has a generation unit that operates on the second execution environment and generates first information, a first transmission unit that transmits certification information for certifying validity of the generation unit to the verification device, a reception unit that receives third information from the verification device, and a first output unit that outputs the first information generated by the generation unit and also outputs the third information received by the reception unit, and the verification device has a verification unit that verifies whether the generation unit is valid on the basis of the certification information, an authentication unit that authenticates the display device when the validity of the generation unit is certified by the verification unit and when the verification unit is capable of confirming facts that the first information is being output and that a device outputting the first information is the display device, a second output unit that outputs second information when the display device is authenticated by the verification unit, and a second transmission unit that transmits the third information to the display device when the display device is authenticated by the verification unit.

Effects of the Invention

According to the present invention, it is possible to easily and reliably confirm a state in which an input/output screen can be occupied by a TEE.

DESCRIPTION OF EMBODIMENTS

Hereinafter, embodiments of a confirmation system and a confirmation method according to the present application will be described in detail on the basis of the drawings. Note that the present invention is not limited to the following embodiments. Further, the confirmation system of the embodiments is aimed at confirming whether a screen that is supposed to be occupied by a TEE is disguised through a REE. Then, the disguise of a screen will be first described usingFIG.1.FIG.1is a diagram for describing the disguise of a screen.

As shown inFIG.1, there is, for example, a case that a user cannot distinguish whether a screen displayed on a display device such as a smartphone has been output from a TA operating on a TEE or has been output by malware operating on a REE. In the example ofFIG.1, a picture indicating that abnormality has been found is supposed to be output to the display device by a TA, but a picture indicating that no abnormality has been found is output to the display device by malware. In this case, the user overlooks the occurrence of the abnormality.

Therefore, in the embodiments, a prescribed code or the like is displayed on a verification device30different from a display device20so that a user40can confirm the nonoccurrence of disguise as shown inFIG.2.FIG.2is a diagram for describing the outline of a confirmation system according to a first embodiment. For example, the user40confirms whether the display device20works normally by confirming the conformity between a code displayed on the display device20and a code displayed on the verification device30.

[Configuration of First Embodiment]

The configuration of the confirmation system according to the first embodiment will be described usingFIG.3.FIG.3is a diagram showing an example of the configuration of the confirmation system according to the first embodiment. As shown inFIG.3, a confirmation system1has an authentication device10, a display device20, and a verification device30.

The authentication device10is a device that realizes a function such as the issuance of a certificate at a certificate authority. The authentication device10has a key generation unit11and a signature unit12. The key generation unit11generates a pair of a public key and a secret key to create a code signing certificate or a public key certificate. The public key generated by the key generation unit11functions as a route public key. The key generation unit11generates a secret key101and a public key102as a pair, stores the secret key101, and distributes the public key102to the verification device30.

The signature unit12creates a signature using the secret key101generated by the key generation unit11. Further, the signature unit12assigns a code signing certificate issued using a created signature to a TA23that will be described later. In this manner, the confirmation system1can certify the fact that the TA23is installed in the display device20.

Further, the signature unit12issues a public key certificate corresponding to a public key acquired from the display device20after confirming the fact that the TA23is installed in the display device20with a code signing certificate.

In this manner, the authentication device10manages the installation of the TA23in the display device20. Note that the authentication device10may use a method described in NPL 3 as a method for managing the installation of the TA23.

The display device20includes a REE20aand a TEE20bthat is guaranteed to be higher in safety than the REE20a. The display device20has an output unit22, the TA23, an output unit25, an authentication unit26, a decryption unit27, and a screen28. The output unit22operates on the REE20aand outputs a picture21generated on the REE20ato the screen28. Further, the output unit25operates on the TEE20band outputs a picture24generated by the TA23to the screen28.

The TA23is an application that is installed in the TEE20b. The TA23is assigned a code signing certificate from the authentication device10at its installation. The TA23is an example of a generation unit and a first transmission unit.

The TA23operates on the TEE20band generates the picture24. The picture24is an example of first information. For example, the picture24is a picture that indicates a list of logs and the presence or absence of abnormality as shown inFIG.1. Further, the output unit25outputs the picture24generated by the TA23to the screen28.

Further, the TA23generates a pair of the secret key201and the public key202. Here, the TA23transmits a code signing certificate that is information issued by the authentication device10and certifies the validity of the TA23as an application to the verification device30. In addition, the TA23transmits a public key certificate for the public key202issued by the authentication device10to the verification device30. Note that the code signing certificate and the public key certificate are an example of certification information.

The authentication unit26receives an authentication request from the verification device30and returns an authentication response calculated on the basis of the secret key201and the authentication request to the verification device30only when the picture24is being output. A method for calculating an authentication response by the authentication unit26is only required to be a system corresponding to an authentication request from the opposite authentication unit33. For example, the authentication unit26can calculate an authentication response using a method such as an electronic signature and a challenge response system.

The decryption unit27receives a random number code encrypted by an encryption unit34of the verification device30that will be described later and decrypts the received random number code with the secret key201. Further, the decryption unit27transfers the decrypted random number code to the output unit25. Note that the decryption unit27is an example of a reception unit.

Then, the output unit25outputs a random number code decrypted by the decryption unit27. Note that the random number code is an example of second information and third information. Further, the second information and the third information may be the same as in the present embodiment, or may be different from each other. Further, the output unit25is an example of a first output unit.

The verification device30has a signature verification unit31, a certificate verification unit32, the authentication unit33, the encryption unit34, a random number code issuance unit35, and an output unit36. The signature verification unit31verifies the validity of a code signing certificate on the basis of information acquired from the authentication device10. Further, the certificate verification unit32verifies the validity of a public key certificate on the basis of information acquired from the authentication device10. In this manner, the signature verification unit31and the certificate verification unit32verify whether the TA23is valid on the basis of certification information. Note that the signature verification unit31and the certificate verification unit32are an example of a verification unit.

Note that the verification of validity in the present embodiment indicates the execution of a confirmation procedure by an issuance source in a general signature algorithm using a hash or the like. For example, when a value obtained by decrypting the signature of a code signing certificate with the public key102and a hash value of the code of the TA23match each other, the verification device30regards the code signing certificate as being valid. Further, when a value obtained by decrypting the signature of a public key with the public key102indicates a certificate authority having the authentication device10, the verification device30regards the public key certificate as being valid.

The authentication unit33authenticates the display device20when the validity of the TA23is certified by the signature verification unit31and the certificate verification unit32and when the signature verification unit31and the certificate verification unit32are capable of confirming the facts that first information is being output and that a device outputting the first information is the display device20. In the present embodiment, the authentication unit33authenticates the display device20when the validity of a code signing certificate is certified by the signature verification unit31, the validity of a public key certificate is certified by the certificate verification unit32, and a valid authentication response is returned by the authentication unit26of the display device20.

The random number code issuance unit35issues a random number code when the display device20is authenticated by the authentication unit33. The encryption unit34encrypts the random number code with the public key202and transmits the encrypted random number code to the display device20. Note that the encryption unit34is an example of a second transmission unit.

Further, the output unit36outputs a random number code when the display device20is authenticated by the authentication unit33. Note that the output unit36is an example of a second output unit.

As described above, the output unit25and the output unit36output an identical random number code when the validity of a code signing certificate and a public key certificate is certified by the verification device30. Therefore, the user40can confirm whether the TA23of the display device20works normally by confirming random number codes displayed on the display device20and the verification device30.

The verification device30certifies the fact that the TA23is installed in the display device20by verifying the validity of a public key certificate. Further, the verification device30certifies a state in which the TA23is displaying the picture24that is reliable on the display device20by verifying the validity of a code signing certificate.

For example, when a random number code is not displayed on the verification device30, it is presumed that the screen of the display device20that is being viewed by the user40is a disguised screen output from the REE20a. Further, when a random number code displayed on the display device20and a random number code displayed on the verification device30do not match each other, it is presumed that the screen of the display device20that is being viewed by the user40is a disguised screen output from the REE20aor the display device20has been replaced.

[Processing of First Embodiment]

The flow of the processing of the confirmation system1will be described usingFIG.4.FIG.4is a sequence diagram showing the flow of the processing of the confirmation system according to the first embodiment. As shown inFIG.4, the authentication device10first generates a first secret key and a first public key (step S101).

Then, the authentication device10transmits the first public key to the verification device30(step S102). Further, the authentication device10generates the signature of a TA from the first public key (step S103). Then, the authentication device10transmits a code signing certificate generated from the signature to the display device20(step S104).

The display device20installs the TA and generates a second secret key and a second public key (step S105). Then, the display device20transmits the second public key to the authentication device10and requests for the issuance of a public key certificate (step S106). Here, the authentication device10issues the public key certificate (step S107) and transmits the same to the display device20(step S108). Then, the display device20transmits the code signing certificate and the public key certificate to the verification device30(step S109).

The verification device30verifies the validity of the code signing certificate with the first public key (step S110). Further, the verification device30verifies the validity of the public key certificate with the first public key (step S111). Then, the verification device30requests the display device20to transmit authentication information when the validity is certified in each of the verification (step S112). The display device20transmits the authentication information in response to the authentication request only when a picture generated by the TA is being output (step S113).

Then, the verification device30issues a random number code (step S114) and transmits the issued random number code to the display device20after encrypting the same with the second public key (step S115). Here, the verification device30displays the random number code (step S116). Further, the display device20decrypts the random number code transmitted from the verification device30with the second secret key and displays the decrypted random number code (step S117).

[Effects of First Embodiment]

The TA23of the display device20operates on the TEE20band generates first information. Further, the TA23transmits certification information for certifying the validity of the TA23to the verification device30. Further, the display device20receives third information from the verification device30. Further, the display device20outputs the first information generated by the TA23and also outputs the received third information. The verification device30verifies whether the TA23is valid on the basis of the certification information. Further, the verification device30authenticates the display device20when the validity of the TA23is certified and when the verification device30is capable of confirming the facts that the first information is being output and that a device outputting the first information is the display device20. Further, the verification device30outputs second information when the display device20is authenticated. Further, the verification device30transmits the third information to the display device20when the display device20is authenticated.

In this manner, it is possible to confirm the fact that an input/output screen can be occupied by a TEE without the provision of hardware such as an LED dedicated to the TEE in the display device20according to the first embodiment. Further, the verification device30generates and outputs a code every time the verification device30certifies the facts that a TA has been installed in the display device20and certifies a state in which the TA is displaying a reliable picture on the display device20. Therefore, it is possible to confirm the fact that the input/output screen can be occupied by the TEE without being influenced by stealthy glancing or estimation of a code. Therefore, it is possible to easily and reliably confirm the fact that an input/output screen can be occupied by a TEE according to the confirmation system1of the first embodiment.

Further, the TA23can also generate a pair of the secret key201and the public key202. Further, the TA23can transmit the code signing certificate of the TA23and the public key certificate of the public key202to the verification device30as certification information. At this time, the verification device30verifies whether the code signing certificate and the public key certificate are valid. Further, the verification device30transmits third information after encrypting the same with the public key202. Then, the display device20decrypts the encrypted third information. In this manner, the confirmation system1of the first embodiment can perform verification using a code signing certificate or a public key certificate as the function of an existing certificate authority. Therefore, the confirmation system1is not required to add a new certificate authority.

Further, the verification device30can issue a random number code. At this time, the verification device30outputs the random number code as second information. Further, the verification device30transmits a random number code as third information. In this manner, it is possible to issue a random number code as required and confirm the same in the first embodiment. Therefore, it is possible to prevent a code for confirmation from being leaked out in advance in the first embodiment.

Second Embodiment

A second embodiment will be described. Note that points common to the first embodiment will be appropriately omitted in the description of the second embodiment. A random number code is issued after verification is performed by the verification device30in the first embodiment, whereas a random number code is set in advance before verification is performed in the second embodiment.

FIG.5is a diagram showing an example of the configuration of a confirmation system according to the second embodiment. In the second embodiment, a TA23generates a TA-ID that is identification information for identifying the TA23as shown inFIG.5. Further, a verification device30stores a TA-ID37and also stores a random number code38in advance. Further, it is assumed that the random number code38is informed to a user40in advance. For example, the random number code38may be informed to the user40by means of a seal affixed to the housing of the verification device30, the operating manual of the verification device30, or the like.

When a picture24is displayed for the first time, the TA23generates a TA-ID at the time of generating a secret key201and a public key202. Here, the TA23requests an authentication device10to issue a public key certificate in association with the TA-ID. Then, a display device20transmits the public key certificate associated with the TA-ID that is issued by the authentication device10to the verification device30. Further, when the picture24is displayed for the second and subsequent times, the TA23transmits the TA-ID that has been generated to the verification device30.

A certificate verification unit32stores identification information in a storage unit when information has not been stored in the storage unit and certifies that the TA23is valid when certification information is valid. Specifically, the certificate verification unit32stores a TA-ID transmitted from the display device20in the TA-ID37when the TA-ID37is null, that is, when the picture24is displayed for the first time.

On the other hand, when information has been stored in the prescribed storage unit of the verification device30, the certificate verification unit32certifies that the TA23is valid when certification information is valid and when the information stored in the storage unit and identification information are identical. Specifically, the certificate verification unit32identifies a TA-ID transmitted from the display device20with a TA-ID stored in the TA-ID37when the TA-ID37is not null, that is, when the picture24is displayed for the second and subsequent times.

Further, the certificate verification unit32also verifies whether a TA-ID transmitted from the display device20and a TA-ID stored in the TA-ID37match each other at the time of verifying the validity of a public key certificate. Then, the certificate verification unit32verifies that the public key certificate is valid when the TA-IDs match each other.

Like the first embodiment, an authentication unit33authenticates the display device20when the validity of a code signing certificate is certified by a signature verification unit31, the validity of a public key certificate is certified by the certificate verification unit32, and a valid authentication response is returned by an authentication unit26of the display device20.

An encryption unit34encrypts a prescribed code informed to the user40in advance with the public key202and transmits the encrypted prescribed code to the display device20when the display device20is authenticated by the authentication unit26. Further, a decryption unit27decrypts a random number code encrypted by the encryption unit34with the secret key201. Further, an output unit25of the display device20outputs the random number code decrypted by the decryption unit27.

At this time, an output unit36of the verification device30informs the user40of the fact that the TA23of the display device20works normally. The output unit36can output second information using output means that is provided in the verification device30and capable of switching the on-off state of output. For example, the verification device30may provide information by lighting up a lamp or the like.

Further, the output of a random number code by the display device20may be performed only when at least the picture24is displayed for the first time. This is because, since validity is certified at the first time display, it is guaranteed that the TA23of the display device20works normally if the output of the output unit36is performed so long as the display device20that is being used remains the same.

For example, when information (for example, lighting up a lamp) indicating that the TA23of the display device20works normally is not provided by the verification device30at the first time display, it is presumed that the screen of the display device20that is being viewed by the user40is a disguised screen output from a REE20a. Further, when a random number code displayed on the display device20does not match a random number code informed to the user40in advance, it is presumed that the screen of the display device20that is being viewed by the user40is a disguised screen output from the REE20aor the display device20has been replaced.

[Processing of Second Embodiment]

The flow of the processing of a confirmation system1will be described usingFIG.6.FIG.6is a sequence diagram showing the flow of the processing of the confirmation system according to the second embodiment. As shown inFIG.6, the authentication device10first generates a first secret key and a first public key (step S201).

Then, the authentication device10transmits the first public key to the verification device30(step S202). Further, the authentication device10generates the signature of a TA from the first public key (step S203). Then, the authentication device10transmits a code signing certificate generated from the signature to the display device20(step S204).

The display device20installs the TA and generates a second secret key, a second public key, and a TA-ID (step S205). Then, the display device20transmits the second public key and the TA-ID to the authentication device10and requests for the issuance of a public key certificate (step S206). Here, the authentication device10issues the public key certificate containing the TA-ID (step S207) and transmits the same to the display device20(step S208). Then, the display device20transmits the code signing certificate, the public key certificate, and the TA-ID to the verification device30(step S209).

The verification device30verifies the validity of the code signing certificate with the first public key (step S210). Further, the verification device30verifies the validity of the public key certificate and the TA-ID with the first public key (step S211). Then, the verification device30requests the display device20to transmit authentication information when the validity is certified in each of the verification (step S212). The display device20transmits the authentication information in response to the authentication request only when a picture generated by the TA is being output (step S213).

The following processing is performed when the picture24is displayed for the first time. The verification device30transmits a random number code set in advance to the display device20after encrypting the same with the second public key (step S214). Here, the verification device30lights up a lamp (step S215). Further, the display device20decrypts the random number code transmitted from the verification device30with the second secret key and displays the decrypted random number code (step S216).

[Effects of Second Embodiment]

The display device20outputs second information using output means that is provided in the verification device30and capable of switching the on-off state of output. Further, the display device20transmits a prescribed code informed to a user in advance as third information. In this manner, it is possible to provide a user with information by a simple method such as lighting up a lamp.

Further, the TA23of the display device20also generates identification information for identifying the TA23. Further, the TA23transmits the identification information to the verification device30together with certification information. Further, when information has been stored in a prescribed storage unit, the verification device30certifies that the TA23is valid when the certification information is valid and when the information stored in the storage unit and the identification information are identical. Further, the verification device30stores the identification information in the storage unit when information has not been stored in the storage unit and certifies that the TA23is valid when the certification information is valid. Further, when the identification information is stored in the storage unit and the display device20is authenticated, the verification device30transmits third information to the display device20. In this manner, the user40can verify the fact that a picture displayed on a screen28is the picture24that is reliable using the verification device30at the second and subsequent times display unless the display device20that is being used is changed by replacement or the like after verification at the first time display.

Third Embodiment

A third embodiment will be described. Note that points common to the first and second embodiments will be appropriately omitted in the description of the third embodiment. A TA-ID is issued by the display device20in the second embodiment, whereas a TA-ID is input by a user40in the third embodiment.

FIG.7is a diagram showing an example of the configuration of a confirmation system according to the third embodiment. In the third embodiment, a TA-ID input by the user40is stored in advance, a confirmation as to whether a TA-ID output by an output unit36matches the stored TA-ID is made as shown inFIG.7.

A TA23transmits a TA-ID input by the user40to a verification device30together with a public key certificate. Note that the TA-ID is an example of prescribed identification information. Then, the output unit36outputs the TA-ID when the validity of a code signing certificate is certified by a signature verification unit31and when the validity of the public key certificate is certified by a certificate verification unit32.

For example, when a TA-ID is not displayed by the verification device30or when a TA-ID displayed by the verification device30does not match a TA-ID stored in the user40, it is presumed that the screen of the display device20that is being viewed by the user40is a disguised screen output from a REE20a.

[Processing of Third Embodiment]

The flow of the processing of a confirmation system1will be described usingFIG.8.FIG.8is a sequence diagram showing the flow of the processing of the confirmation system according to the third embodiment. As shown inFIG.8, an authentication device10first generates a first secret key and a first public key (step S301).

Then, the authentication device10transmits the first public key to the verification device30(step S302). Further, the authentication device10generates the signature of a TA from the first public key (step S303). Then, the authentication device10transmits a code signing certificate generated from the signature to the display device20(step S304).

The display device20installs the TA and generates a second secret key and a second public key (step S305). Here, the display device20receives the input of a TA-ID from the user40(step S306) and acquires the input TA-ID (step S307). Note that a timing at which the display device20receives the input of the TA-ID may be an arbitrary timing before step S307.

Then, the display device20transmits the second public key and the TA-ID to the authentication device10to request for the issuance of a public key certificate (step S308). Here, the authentication device10issues the public key certificate containing the TA-ID (step S309) and transmits the issued public key certificate to the display device20(step S310). Then, the display device20transmits the code signing certificate, the public key certificate, and the TA-ID to the verification device30(step S311).

The verification device30verifies the validity of the code signing certificate with the first public key (step S312). Further, the verification device30verifies the validity of the public key certificate and the TA-ID with the first public key (step S313). Then, the verification device30requests the display device20to transmit authentication information when the validity is certified in each of the verification (step S314). The display device20transmits the authentication information in response to the authentication request only when a picture generated by the TA is being output (step S315). Then, the verification device30displays the TA-ID (step S316).

[Effects of Third Embodiment]

The TA23of the display device20operates on a TEE20band generates first information. Further, the TA23transmits identification information input by a user to the verification device30together with certification information for certifying the validity of the TA23. Further, the display device20outputs first information generated by the TA23. Further, the verification device30verifies whether the TA23is valid on the basis of the certification information. Further, the verification device30authenticates the display device20when the validity of the TA23is certified and when the verification device30is capable of confirming the facts that the first information is being output and that a device outputting the first information is the display device20. Further, the verification device30outputs the identification information when the display device20is authenticated. In this manner, the user40can verify the fact that a picture displayed on a screen28is the picture24that is reliable using the verification device30unless the display device20that is being used is changed by replacement or the like.

Other Embodiments

In the above embodiments, it is described that the display device20and the verification device30output respective information through visual means such as a screen display and lighting. On the other hand, the display device20and the verification device30may output information through nonvisual means. For example, the display device20and the verification device30may output sound that reads out a random number code.

[System Configuration or the Like]

Further, the respective constituting elements of the respective devices shown in the figures are functionally conceptual and are not necessarily required to be physically configured as shown in the figures. That is, the specific modes of the dispersion and integration of the respective devices are not limited to those shown in the figures, but the whole or a part of the respective devices can be configured to be functionally or physically dispersed or integrated in an arbitrary unit according to various loads, use conditions, or the like. In addition, the whole or an arbitrary part of the respective processing functions performed by the respective devices can be realized by a CPU and a program analyzed and performed by the CPU, or can be realized as hardware based on a wired logic.

Further, among the respective processing described in the present embodiment, the whole or a part of the processing described as being automatically performed can be manually performed, or whole or a part of the processing described as being manually performed can be automatically performed by a known method. Besides, the processing procedures, the control procedures, the specific names, and the information containing various data or parameters shown in the above document or the drawings can be arbitrarily changed unless otherwise particularly noted.

As an embodiment, the confirmation system1can be mounted by causing a computer to install a program according to an embodiment that performs the above processing as package software or online software. For example, an information processing device can function as the confirmation system1when caused to perform the program according to the embodiment. Here, the information processing device includes a desktop or notebook personal computer. Besides, the information processing device includes a smartphone, a mobile body communication terminal such as a mobile phone and a PHS (Personal Handyphone System), a slate terminal such as a PDA (Personal Digital assistant), or the like.

FIG.9is a diagram showing an example of a computer that performs the program according to the embodiment. A computer1000has, for example, a memory1010and a CPU1020. Further, the computer1000has a hard disk drive interface1030, a disk drive interface1040, a serial port interface1050, a video adapter1060, and a network interface1070. These respective units are connected to one another via a bus1080.

The memory1010includes a ROM (Read Only Memory)1011and a RAM1012. The ROM1011stores, for example, a boot program such as a BIOS (Basic Input Output System). The hard disk drive interface1030is connected to the hard disk drive1090. The disk drive interface1040is connected to the disk drive1100. For example, a detachable storage medium such as a magnetic disk and an optical disk is inserted into the disk drive1100. The serial port interface1050is connected to, for example, a mouse1110and a keyboard1120. The video adapter1060is connected to, for example, a display1130.

The hard disk drive1090stores, for example, an OS1091, an application program1092, a program module1093, and program data1094. That is, a program that defines the respective processing of the display device20or the verification device30is mounted as the program module1093in which a code executable by a computer is described. The program module1093is stored in, for example, the hard disk drive1090. For example, the program module1093for performing the same processing as that of a function configuration in the display device20or the verification device30is stored in the hard disk drive1090. Note that the hard disk drive1090may be replaced by a SSD.

Further, setting data used in the above embodiments is stored in, for example, the memory1010or the hard disk drive1090as the program data1094. Then, the CPU1020reads the program module1093or the program data1094stored in the memory1010or the hard disk drive1090into the RAM1012as required and performs the processing of the above embodiments.

Note that the program module1093or the program data1094is not necessarily stored in the hard disk drive1090but may be stored in, for example, a detachable storage medium and read by the CPU1020via the disk drive1100or the like. Alternatively, the program module1093and the program data1094may be stored in other computers connected via a network (such as a LAN (Local Area Network) and a WAN (Wide Area Network)). Then, the program module1093and the program data1094may be read by the CPU1020via the network interface1070from other computers.

REFERENCE SIGNS LIST