Patent Description:
In accordance with the advance of the Internet of Things (IoT) technology, various services for devices, such as services related to remote control of devices and services related to monitoring of the states of devices, are being developed on the Internet. These services involve communication between a plurality of devices and a cloud server that provides the services, and thus require identification and certification of the devices in some cases.

For example, in a service in which the cloud server monitors the states of devices of users, the cloud server is required to identify the individual devices and then associate the devices with the respective users. If the cloud server is to selectively monitor the states of only the devices fabricated by a certain manufacturer in this service, the cloud server is further required to certify the devices.

Patent Literature <NUM> discloses a technique for achieving identification and certification of a device by incorporating device certification information unique to the device into the device in its manufacturing process. Patent Literature <NUM> discloses, as an example of the device certification information, a character string configured by coupling a device identifier (ID) for identification of the device and a passphrase to be verified during certification. The confirmation of the device ID can lead to identification of the device, and the verification of the passphrase can lead to certification of the device. Document <CIT> discloses a bootstrap authentication process including validation of capability information indicating a capability of a communication apparatus. An apparatus identifier is included in an operational credential sent to the apparatus after validation.

Patent Literature <NUM>: Unexamined <CIT>.

Unfortunately, the technique disclosed in Patent Literature <NUM> suffers from the reduced productivity of devices because of the essential step of incorporating the information unique to the devices into the devices in the manufacturing process. The following description assumes an exemplary case where the device certification information is incorporated into devices by means of storage of the device certification information unique to the devices into read only memories (ROMs) provided to the respective devices. In this case, the manufacturing process of devices involves a step of storing pieces of device certification information different among the devices into the respective ROMs, resulting in an increase in the time for production of the devices. In addition, this configuration causes a risk of storing the identical piece of device certification information into the ROMs of different devices by mistake, resulting an increase in the cost for production management.

An objective of the present disclosure, which has been accomplished in view of the above situations, is to provide a device management system and the like that can achieve identification and certification of devices without a step of incorporating information unique to the devices into the devices in their manufacturing process.

The present invention provides a device management system, a network adapter, a device management method and a program, as defined in the appended claims. A device management system according to an aspect of the present disclosure includes: common certification information acquiring means for acquiring common certification information from a device including storage means for storing the common certification information, the common certification information stored in the storage means being shared with another device; certification means for certifying the device based on the common certification information; identification information generating means for generating identification information for identification of the device certified by the certification means; and setting means for setting the identification information to the device.

The device management system according to an aspect of the present disclosure certifies the device based on the common certification information shared with another device, and sets the identification information for identification of the certified device to the device. The present disclosure can therefore achieve identification and certification of devices without a step of incorporating information unique to the devices into the devices in their manufacturing process.

A device management system according to embodiments of the present disclosure is described below with reference to the accompanying drawings. In the drawings, the components identical or corresponding to each other are provided with the same reference symbol.

A device management system <NUM> according to Embodiment <NUM> is described below with reference to <FIG>. The device management system <NUM> sets identification information to a device in which information unique to the device was not embedded in its manufacturing process. The identification information serves for identification of the device. The device management system <NUM> includes a device <NUM>, a network adapter <NUM>, a router <NUM>, and a certification server <NUM>. The device management system <NUM> is an example of a device management system according to the present disclosure.

The device <NUM> is an electrical device, such as air conditioner, refrigerator, or television, installed in a house. The device <NUM> is connected to the network adapter <NUM>. The device <NUM> communicates with the Internet NT via the network adapter <NUM> and the router <NUM>. In the manufacturing process of the device <NUM>, common certification information shared with other devices is embedded in the device <NUM>, which is described in detail below. When the device <NUM> is certified on the basis of the common certification information, identification information for identification of the device <NUM> is set to the device <NUM>, which is also described in detail below. The certification of the device <NUM> means confirmation that the device <NUM> was duly manufactured, for example. The certification of the device <NUM> can exclude a device manufactured by a third party other than the manufacturer of the device <NUM> from the subjects of setting of identification information, for example. The device <NUM> has a functional configuration described below. The device <NUM> is an example of a device according to the present disclosure.

The network adapter <NUM> is used while being mounted on the device <NUM>, for example. The network adapter <NUM> is connected to the device <NUM> so as to communicate with the device <NUM> and relays the communication between the device <NUM> and the Internet NT. The network adapter <NUM> is connected to the router <NUM> so as to communicate with the router <NUM> via a wireless local area network (LAN), for example. The network adapter <NUM> communicates with the Internet NT via the router <NUM>. The network adapter <NUM> acquires the common certification information embedded in the device <NUM> from the device <NUM> and transfers the common certification information to the certification server <NUM>, which is described in detail below. The network adapter <NUM> sets the identification information received from the certification server <NUM> to the device <NUM>, which is also described in detail below. The network adapter <NUM> has a functional configuration described below. The network adapter <NUM> is an example of a network adapter according to the present disclosure.

The router <NUM> is connected to the network adapter <NUM> and the Internet NT. The router <NUM> is a wireless router installed in a house, for example.

The certification server <NUM> certifies the device <NUM> on the basis of the common certification information received from the network adapter <NUM>, generates identification information for identification of the certified device, and transmits the identification information to the network adapter <NUM>. The certification server <NUM> is managed by the manufacturer of the device <NUM>, for example. The certification server <NUM> has a functional configuration described below. The certification server <NUM> is an example of a server according to the present disclosure.

The identification information generated by the certification server <NUM> and set to the device <NUM> by the network adapter <NUM> is transmitted to a cloud server, in a service related to remote control of a device or a service related to monitoring of the state of a device by means of the cloud server, for example. The transmitted identification information enables the cloud server to identify the device <NUM>.

The identification information generated by the certification server <NUM> is, for example, an identifier configured by coupling a character string indicating the domain name of the certification server <NUM>, a character string indicating the date and time when the device <NUM> was certified by the certification server <NUM>, and a character string generated at random. The identification information generated in this manner can be made unique to each device. Alternatively, the identification information may be device IDs having serial numbers, which are issued from the certification server <NUM> in the certification of the individual devices. The identification information may also be generated by another procedure provided that the devices are fed with mutually different pieces of identification information.

The common certification information embedded in the device <NUM> in the manufacturing process is a digital certificate pursuant to the X. <NUM> standard, for example. This digital certificate is issued from a certification authority under management of the manufacturer of the device <NUM>, for example. In the manufacturing process of other devices, the common certification information identical to the common certification information embedded in the device <NUM> is embedded in the other devices. Examples of the "other devices" include devices provided by the same manufacturer, devices of the same model, and devices of the same production lot.

The certification server <NUM> certifies the device <NUM> on the basis of the received common certification information, using certification reference data. The certification reference data is identical to the common certification information, for example. In an exemplary case where the common certification information is an above-mentioned digital certificate, the certification reference data is identical to the digital certificate. In this case, the certification server <NUM> certifies the device <NUM> by determining whether the received common certification information coincides with the certification reference data. Alternatively, the certification reference data may be a hash value derived from the common certification information. In this case, the certification server <NUM> certifies the device <NUM> by determining whether the hash value derived from the received common certification information coincides with the certification reference data.

Preferably, the common certification information and the certification reference data are secretly managed by the manufacturer of the device <NUM> so as not to be leaked to the outside.

The functional configuration of the device <NUM> is described below with reference to <FIG>. The device <NUM> includes a controller <NUM>, a communicator <NUM>, and a storage <NUM>.

The controller <NUM> performs comprehensive control of the device <NUM>. The controller <NUM> has the functions described below in particular. The controller <NUM> transmits common certification information D101 stored in the storage <NUM> to the network adapter <NUM> via the communicator <NUM>. The controller <NUM> causes identification information D102 received from the network adapter <NUM> via the communicator <NUM> to be stored into the storage <NUM>. The controller <NUM> is an example of identification information retaining means according to the present disclosure.

The communicator <NUM> communicates with the network adapter <NUM>. The communicator <NUM> is achieved by a universal asynchronous receiver and transmitter (UART) for communication with the network adapter <NUM>, for example.

The storage <NUM> stores the common certification information D101 and the identification information D102. The common certification information D101 is stored into the storage <NUM> in the manufacturing process of the device <NUM>. The identification information D102 has not been stored in the storage <NUM> in the manufacturing process of the device <NUM>. Instead, the identification information D102 is stored into the storage <NUM> after reception of the identification information D102 from the network adapter <NUM>. The identification information D102 is therefore represented by a dashed line in <FIG>. The storage <NUM> is an example of storage means according to the present disclosure.

The functional configuration of the network adapter <NUM> is described below with reference to <FIG>. The network adapter <NUM> includes a controller <NUM>, a first communicator <NUM>, and a second communicator <NUM>.

The controller <NUM> performs comprehensive control of the network adapter <NUM>. The controller <NUM> includes a common certification information acquirer <NUM>, a transferer <NUM>, an identification information acquirer <NUM>, and a setter <NUM>.

The common certification information acquirer <NUM> acquires the common certification information D101 received from the device <NUM> via the first communicator <NUM>. The common certification information acquirer <NUM> is an example of common certification information acquiring means according to the present disclosure.

The transferer <NUM> transfers the data, which is received from the device <NUM> via the first communicator <NUM>, to the certification server <NUM> via the second communicator <NUM>. The transferer <NUM> also transfers the data, which is received from the certification server <NUM> via the second communicator <NUM>, to the device <NUM> via the first communicator <NUM>. In particular, the transferer <NUM> transfers the common certification information D101 received from the device <NUM> to the certification server <NUM>, and transfers the identification information D102 received from the certification server <NUM> to the device <NUM>.

The transferer <NUM> does not necessarily transfer the original received data. For example, the transferer <NUM> does not have to transfer the data transmitted and received only between the device <NUM> and the network adapter <NUM>, or the data transmitted and received only between the network adapter <NUM> and the certification server <NUM>. The transferer <NUM> may encrypt the data received from the device <NUM> and then transfer the encrypted data, for example. In an exemplary case where the data received from the certification server <NUM> is encrypted, the transferer <NUM> may decrypt the data and then transfer the decrypted data to the device <NUM>.

Alternatively, in parallel to transfer of data, the transferer <NUM> may transmit a command related to the data, for example. In an exemplary case of transfer of the common certification information D101, the command related to the data corresponds to a command for requesting the certification server <NUM> to certify the device <NUM> and transmit the identification information D102. In another exemplary case of transfer of the identification information D102, the command related to the data corresponds to a command for requesting the device <NUM> to store the identification information D102. These processes are hereinafter referred to simply as "transfer" regardless of whether the transfer accompanies transmission of a command.

The identification information acquirer <NUM> acquires the identification information D102 received from the certification server <NUM> via the second communicator <NUM>.

The transferer <NUM> transfers the identification information D102 acquired by the identification information acquirer <NUM> to the device <NUM>, and the setter <NUM> thus sets the identification information D102 to the device <NUM>. The setter <NUM> is an example of setting means according to the present disclosure.

The first communicator <NUM> communicates with the device <NUM>. The communicator <NUM> is achieved by a UART for communication with the device <NUM>, for example.

The second communicator <NUM> communicates with the router <NUM>. The communication of the second communicator <NUM> with the router <NUM> enables the network adapter <NUM> to communicate with the certification server <NUM> via the router <NUM>. The second communicator <NUM> is achieved by a wireless LAN module, which can communicate with the wireless router <NUM>, for example.

The functional configuration of the certification server <NUM> is described below with reference to <FIG>. The certification server <NUM> includes a controller <NUM>, a communicator <NUM>, and a storage <NUM>.

The controller <NUM> performs comprehensive control of the certification server <NUM>. The controller <NUM> includes a certifier <NUM> and an identification information generator <NUM>.

The certifier <NUM> certifies the device <NUM> on the basis of the common certification information D101 received from the network adapter <NUM> via the communicator <NUM>. For example, the certifier <NUM> certifies the device <NUM> by verifying the common certification information D101 using certification reference data D301, which is described below, stored in the storage <NUM>. In the above-mentioned exemplary case where the certification reference data D301 is the binary data identical to the common certification information D101, the certifier <NUM> certifies the device <NUM> by determining whether the common certification information D101 coincides with the certification reference data D301. In the above-mentioned other exemplary case where the certification reference data D301 is a hash value derived from the common certification information D101, the certifier <NUM> certifies the device <NUM> by determining whether the hash value derived from the common certification information D101 coincides with the certification reference data D301. The certifier <NUM> is an example of certification means according to the present disclosure.

The identification information generator <NUM> generates the identification information D102 for identification of the device <NUM> certified by the certifier <NUM>. As described above, devices have mutually different pieces of identification information D102. The identification information generator <NUM> can generate pieces of identification information different among the devices, for example, by yielding a character string that contains a character string indicating the domain name of the certification server <NUM>, a character string indicating the date and time when the device <NUM> was certified by the certification server <NUM>, and a character string generated at random. The identification information generator <NUM> is an example of identification information generating means according to the present disclosure.

The communicator <NUM> communicates with the network adapter <NUM> via the Internet NT and the router <NUM>. The communicator <NUM> is achieved by a network interface connected to the Internet NT, for example.

The storage <NUM> stores the certification reference data D301. The certification reference data D301 is preliminarily stored into the storage <NUM> by an administrator of the certification server <NUM>, for example.

An exemplary hardware configuration of the device <NUM>, the network adapter <NUM>, or the certification server <NUM> (which are hereinafter collectively referred to as "device <NUM> and the like") is described below with reference to <FIG>. The device <NUM> and the network adapter <NUM> illustrated in <FIG> are achieved by micro-controllers, for example. The certification server <NUM> illustrated in <FIG> is achieved by a computer for a server, for example. That is, the device <NUM> and the like illustrated in <FIG> are achieved by computers, for example.

The device <NUM> or the like includes a processor <NUM>, a memory <NUM>, an interface <NUM>, and a secondary storage unit <NUM>, which are connected to each other via buses <NUM>.

The processor <NUM> is a central processing unit (CPU), for example. The processor <NUM> loads an operational program stored in the secondary storage unit <NUM> into the memory <NUM> and executes the operational program, and thereby achieves the individual functions of the device <NUM> or the like.

The memory <NUM> is a primary storage unit including a random access memory (RAM), for example. The memory <NUM> stores the operational program loaded by the processor <NUM> from the secondary storage unit <NUM>. The memory <NUM> also serves as a working memory during execution of the operational program at the processor <NUM>.

The interface <NUM> is an input/output (I/O) interface, such as serial port, universal serial bus (USB) port, or network interface. The interface <NUM> may be connected to a communication module, such as UART or wireless LAN module. The interface <NUM> can achieve the functions of the communicator <NUM>, the first communicator <NUM>, the second communicator <NUM>, and the communicator <NUM>.

The secondary storage unit <NUM> is a flash memory, a hard disk drive (HDD), or a solid state drive (SSD), for example. The secondary storage unit <NUM> stores the operational program to be executed by the processor <NUM>. The secondary storage unit <NUM> can achieve the functions of the storage <NUM> and the storage <NUM>.

An exemplary operation of setting of identification information in the device management system <NUM> is described below with reference to <FIG>. The operation illustrated in <FIG> is started in response to activation of the device <NUM>, to which the identification information D102 has not been set, for example.

The controller <NUM> of the device <NUM> transmits the common certification information D101 stored in the storage <NUM> to the network adapter <NUM>, and the common certification information acquirer <NUM> of the controller <NUM> of the network adapter <NUM> acquires the common certification information D101 transmitted from the device <NUM> (Step T101).

The transferer <NUM> of the controller <NUM> then transfers the common certification information D101 to the certification server <NUM> (Step T102).

The certifier <NUM> of the controller <NUM> of the certification server <NUM> then certifies the device <NUM> on the basis of the common certification information D101 received from the network adapter <NUM>, using the certification reference data D301 stored in the storage <NUM> (Step T103). When the certification of the device <NUM> fails in Step T103, the controller <NUM> notifies the network adapter <NUM> of unsuccessful certification, for example. The controller <NUM> of the network adapter <NUM> provided with the notification halts the communication with the certification server <NUM>. This step interrupts the operation of setting of identification information in the device management system <NUM>.

In contrast, when the certification of the device <NUM> succeeds in Step T103, the identification information generator <NUM> of the controller <NUM> generates identification information D102 for identification of the device <NUM> (Step T104).

The controller <NUM> transmits the identification information D102 generated in Step T104 to the network adapter <NUM> (Step T105).

The transferer <NUM> of the controller <NUM> of the network adapter <NUM> transfers the identification information D102 received from the certification server <NUM> to the device <NUM>, and the setter <NUM> thereby sets the identification information D102 to the device <NUM> (Step T106).

The controller <NUM> of the device <NUM> causes the received identification information D102 to be stored into the storage <NUM> (Step T107).

The above-described operation can certify the device <NUM> on the basis of the common certification information D101 shared with other devices, and set the identification information D102 for identification of the certified device <NUM> to the device <NUM>.

The above description is directed to the device management system <NUM> according to Embodiment <NUM>. In this device management system <NUM>, the device <NUM> is certified on the basis of the common certification information D101 shared with other devices, and the identification information D102 for identification of the certified device <NUM> is set to the device <NUM>. The device management system <NUM> can thus achieve identification and certification of the device <NUM> without a step of incorporating information unique to the device <NUM> into the device <NUM> in its manufacturing process.

A device management system 1A according to Embodiment <NUM> is described below with reference to <FIG>. The device management system 1A can set identification information D102 for identification of the device 10a to the device 10a in which information unique to the device 10a was not embedded in the manufacturing process, like the device management system <NUM> according to Embodiment <NUM>.

In the device management system 1A, even when the device 10a provided with the identification information D102 is subject to replacement of the control board and becomes a device 10b after replacement, the device 10b after replacement can take over the identification information D102 set to the device 10a before replacement of the board. For example, even after replacement of the control board for repair of the device 10a, the same identification information D102 as that before replacement can be used in services provided by the cloud server. The device 10a is represented by a dashed line in <FIG> so as to indicate that the replacement of the control board of the device 10a has changed the device 10a to the device 10b after replacement.

The certification of the device 10a and the setting of the identification information D102 to the device 10a in Embodiment <NUM> are completely the same as those in Embodiment <NUM> and are not redundantly described. The following description focuses on the state after the setting of the identification information D102 to the device 10a and replacement of the board of the device 10a. Some of the components corresponding to those in Embodiment <NUM> are not redundantly described.

The device management system 1A includes the device 10b after replacement, a network adapter 20A, the router <NUM>, and a certification server 30A. The identification information D102 has already been set to the device 10a in advance of replacement of the board.

A functional configuration of the device 10a before replacement of the board is described below with reference to <FIG>. The functional configuration of the device 10a is substantially the same as that in Embodiment <NUM>, but differs from that in Embodiment <NUM> in that the device 10a includes a control board 11a, which achieves the controller <NUM>, the communicator <NUM>, and the storage <NUM>. The identification information D102 is represented by a solid line in <FIG>, unlike <FIG>, because the identification information D102 has already been set to the device 10a, as described above.

The control board 11a can be replaced with a replacement board 11b, which is described below. The device 10a of which the control board 11a is replaced with the replacement board 11b corresponds to the device 10b after replacement. The control board 11a is an example of a first component according to the present disclosure.

A functional configuration of the device 10b after replacement of the board is described below with reference to <FIG>. As described above, the device 10a of which the control board 11a is replaced with the replacement board 11b corresponds to the device 10b after replacement. That is, the device 10b after replacement differs from the device 10a in including the replacement board 11b instead of the control board 11a, and the other features of the device 10b are the same as those of the device 10a. The device 10b after replacement is an example of a device after replacement according to the present disclosure.

The replacement board 11b differs from the control board 11a in including a storage 120b instead of the storage <NUM>, and the other features of the replacement board 11b are the same as those of the control board 11a. The storage 120b has the same functions as those of the storage <NUM>, but differs from the storage <NUM> in that not the common certification information D101 but second common certification information D103A is stored into the storage 120b in the manufacturing process of the replacement board 11b. The replacement board 11b is an example of a second component according to the present disclosure. The storage 120b is an example of second storage means according to the present disclosure.

The second common certification information D103A, which is stored into the storage 120b in the manufacturing process of the replacement board 11b, is shared with other replacement boards. In other words, the second common certification information D103A on the device 10b after replacement is shared with other devices after replacement. Examples of the "other replacement boards" include replacement boards provided by the same manufacturer, replacement boards for the same model, and replacement boards of the same production lot.

The second common certification information D103A, which is shared with other replacement boards, differs from the common certification information D101 on the device 10a or the common certification information on other devices before replacement of the board. That is, the second common certification information D103A is certification information dedicated to replacement boards. The specific details of the second common certification information D103A are the same as those of the common certification information D101 and not redundantly described.

A functional configuration of the network adapter 20A is described below with reference to <FIG>. The network adapter 20A differs from that in Embodiment <NUM> in further including a storage 230A and including a controller 200A instead of the controller <NUM>.

The controller 200A differs from that in Embodiment <NUM> in further including a second common certification information acquirer 205A and a second setter 206A. The controller <NUM> also differs from that in Embodiment <NUM> in that the identification information D102 is stored into the storage 230A at the time of setting of the identification information D102 to the device 10a before replacement of the board.

The second common certification information acquirer 205A acquires the second common certification information D103A received from the device 10b after replacement. The acquired second common certification information D103A is transferred by the transferer <NUM> to the certification server 30A. The second common certification information acquirer 205A is an example of second common certification information acquiring means according to the present disclosure.

When receiving a notification of successful certification of the device 10b after replacement from the certification server 30A, the second setter 206A reads the identification information D102 stored in the storage 230A, and sets the identification information D102 to the device 10b after replacement. The second setter 206A can cause the device 10b after replacement to take over the identification information D102 set to the device 10a before replacement of the board. The second setter 206A is an example of second setting means according to the present disclosure.

The storage 230A stores the identification information D102, as described above. The storage 230A is an example of third storage means according to the present disclosure.

A functional configuration of the certification server 30A is described below with reference to <FIG>. The certification server 30A differs from that in Embodiment <NUM> in that the certification server 30A includes a controller 300A instead of the controller <NUM>, and the storage <NUM> further stores second certification reference data D302A.

The controller 300A differs from that in Embodiment <NUM> in further including a second certifier 303A. The controller <NUM> also differs from that in Embodiment <NUM> in notifying the network adapter <NUM> of whether the certification at the second certifier 303A succeeds.

The second certifier 303A certifies the device 10b after replacement on the basis of the second common certification information D103A, using the second certification reference data D302A stored in the storage <NUM>. The specific details of the certification process are the same as those at the certifier <NUM> and not redundantly described. The second certifier 303A is an example of second certification means according to the present disclosure.

The second certification reference data D302A stored in the storage <NUM> is used for certification of the device 10b after replacement on the basis of the second common certification information D103A. The specific details of the second common certification information D103A are the same as those of the certification reference data D301 and are not redundantly described.

The device 10a, the device 10b after replacement, the network adapter 20A, and the certification server 30A are achieved by the hardware configuration illustrated in <FIG>, for example, like the device <NUM> and the like in Embodiment <NUM>.

An exemplary operation of setting of identification information to the device 10b after replacement in the device management system 1A is described below with reference to <FIG>. The operation illustrated in <FIG> is started in response to activation of the device 10b after replacement, to which the identification information D102 has not been set, for example.

The controller <NUM> of the device 10b after replacement transmits the second common certification information D103A stored in the storage 120b to the network adapter 20A, and the second common certification information acquirer 205A of the controller 200A of the network adapter 20A acquires the second common certification information D103A transmitted from the device 10b after replacement (Step T201).

The transferer <NUM> of the controller 200A then transfers the second common certification information acquirer 205A to the certification server 30A (Step T202).

The second certifier 303A of the controller 300A of the certification server 30A then certifies the device 10b after replacement on the basis of the second common certification information D103A received from the network adapter 20A, using the second certification reference data D302A stored in the storage <NUM> (Step T203). When the certification of the device 10b after replacement fails in Step T203, the controller 300A notifies the network adapter 20A of unsuccessful certification. The controller 200A of the network adapter 20A provided with the notification halts the communication with the certification server 30A. This step interrupts the operation of setting of identification information in the device management system 1A.

In contrast, when the certification of the device 10b after replacement succeeds in Step T203, the controller 300A notifies the network adapter 20A of successful certification (Step T204).

When receiving the notification of successful certification from the certification server 30A, the second setter 206A of the controller 200A of the network adapter 20A reads the identification information D102 stored in the storage 230A (Step T205).

The second setter 206A transmits the identification information D102 read in Step T205 to the device 10b after replacement, and thereby sets the identification information D102 to the device 10b after replacement (Step T206).

The controller <NUM> of the device 10b after replacement causes the received identification information D102 to be stored into the storage 120b (Step T207).

The above-described operation can certify the device 10b after replacement on the basis of the common certification information D101 shared with other devices after replacement, and cause the identification information D102, set to the device 10a before replacement of the board, to be also set to the device 10b after replacement.

The above description is directed to the device management system 1A according to Embodiment <NUM>. In the device management system 1A, when the device 10a is subject to replacement of the control board 11a with the replacement board 11b and becomes the device 10b after replacement, the device 10b after replacement is certified on the basis of the second common certification information D103A shared with other devices after replacement, and the identification information D102 set to the device 10a is set to the certified device 10b after replacement. The device 10b after replacement can therefore take over the identification information D102 set to the device 10a when the device 10a is subject to replacement of the control board 11a with the replacement board 11b and becomes the device 10b after replacement.

In Embodiments <NUM> and <NUM>, the individual functional parts of the network adapters <NUM> and 20A may be provided in the certification servers <NUM> and 30A, and the individual functional parts of the certification servers <NUM> and 30A may be provided in the network adapters <NUM> and 20A, within the scope of common technical knowledge of persons skilled in the art.

For example, as illustrated in <FIG>, the network adapter <NUM> may include the certifier <NUM>, the identification information generator <NUM>, and the storage <NUM>. This network adapter <NUM> can certify the device <NUM>, generate identification information, and set the identification information to the device <NUM>, without communicating with the certification server <NUM>. This configuration can establish a device management system without a certification server. The network adapter <NUM> includes the identification information generator <NUM> and therefore excludes the identification information acquirer <NUM>. The identification information generated by the identification information generator <NUM> of the network adapter <NUM> is, for example, an identifier configured by coupling the media access control (MAC) address unique to the network adapter <NUM>, a character string indicating the date and time of certification of the device <NUM>, and a character string generated at random.

Alternatively, the network adapter <NUM> may include the identification information generator <NUM>, and the controller <NUM> of the certification server <NUM> may notify the network adapter <NUM> of whether the certification at the certifier <NUM> succeeds, for example. That is, the certification server <NUM> may be responsible for certification while the network adapter <NUM> may be responsible for generation of identification information.

In Embodiments <NUM> and <NUM>, the identification information D102 may contain individual certification information for individual certification of the devices <NUM> and 10a. For example, the identification information generated by the identification information generator <NUM> of the certification server <NUM> may be information containing an identifier generated as described above, and an electronic signature obtained by signing this identifier with a signing key retained in the certification server <NUM>. In this case, the electronic signature serves as the individual certification information. For example, a verification key corresponding to the signing key in the certification server <NUM> is preliminarily fed to the could server that provides services for the device <NUM>, and the cloud server verifies the electronic signature using the verification key, so that the electronic signature allows the could server to individually certify the device <NUM>. Alternatively, the identification information generator <NUM> of the certification server <NUM> may issue a digital certificate pursuant to the X. <NUM> standard for each device, and this digital certificate may serve as the individual certification information. In this case, the certification server <NUM> functions as a certification authority for issuing the digital certificate.

In Embodiment <NUM>, the network adapter <NUM> transmits the common certification information D101 acquired from the device <NUM> to the certification server <NUM>, and the certification server <NUM> certifies the device <NUM> on the basis of the received common certification information, using the certification reference data D301. The device <NUM> can also be certified on the basis of the common certification information D101 without transmission of the common certification information D101 itself to the certification server <NUM>. In an exemplary case where the common certification information D101 is identical to the certification reference data D301, a challenge-response system allows the certification server <NUM> to confirm that the common certification information D101 coincides with the certification reference data D301, without transmission of the common certification information D101 itself to the certification server <NUM>. The same holds true for Embodiment <NUM>.

Although the replaceable control board 11a includes the controller <NUM>, the communicator <NUM>, and the storage <NUM> in Embodiment <NUM>, the replaceable control board 11a does not have to include all the components provided that the replaceable control board 11a includes the storage <NUM>. For example, only the storage <NUM> may be provided on the replaceable control board 11a. The same holds true for the replacement board 11b and the storage 120b.

In Embodiment <NUM>, after the setting of the identification information D102, the device <NUM> may delete the common certification information D101 preliminarily stored in the storage <NUM>. The deletion of the common certification information D101 can reduce the risk of leakage of the common certification information D101.

Alternatively, the device <NUM> may have an initializing function, and may delete the identification information D102 during the initialization. In an exemplary case where the device <NUM> is associated with a user by the cloud server on the basis of the identification information D102 and then transferred to another user, the deletion of the identification information D102 during the initialization can prevent the information on the other user from being contaminated with information on the original user before transfer.

Although the device <NUM> or the like includes the secondary storage unit <NUM> in the hardware configuration illustrated in <FIG>, this configuration is a mere example. The secondary storage unit <NUM> may be provided outside the device <NUM> or the like, and the device <NUM> or the like may be connected to the secondary storage unit <NUM> via the interface <NUM>. In this modification, a removable medium, such as USB flash drive or memory card, may also serve as the secondary storage unit <NUM>. The information, such as common certification information and identification information, stored in the removable medium is preferably stored after encryption in order to avoid leakage.

Instead of the hardware configuration illustrated in <FIG>, the device <NUM> or the like may be configured by a dedicated circuit including an application specific integrated circuit (ASIC) or a field programmable gate array (FPGA), for example. Alternatively, the functions of the device <NUM> or the like in the hardware configuration illustrated in <FIG> may be partially performed by a dedicated circuit connected to the interface <NUM>, for example.

The program used in the device <NUM> or the like may be stored in a non-transitory computer-readable recording medium, such as compact disc read only memory (CD-ROM), digital versatile disc (DVD), USB flash drive, memory card, or HDD, to be distributed. This program is installed in a specific computer or general purpose computer to cause the computer to function as the device <NUM> or the like.

The program may also be stored in a storage device included in another server on the Internet and downloaded from the server into a computer.

Claim 1:
A device management system (1A) comprising:
a network adapter (20A) connected to a device (10a), the device (10a) comprising a first component (11a) that comprises first storage means (<NUM>) and is replaceable with a second component (11b) comprising second storage means (120b);
first certification means (<NUM>) for certifying the device (10a);
identification information generating means (<NUM>) for generating identification information (D102) for identification of the device (10a) certified by the first certification means (<NUM>); and
second certification means (303A) for certifying the device (10b) after replacement of the first component (11a) with the second component (11b), wherein
the network adapter (20A) comprises:
first common certification information acquiring means (<NUM>) for acquiring, from the device (10a), first common certification information (D101) stored in the first storage means (<NUM>), the first common certification information (D101) being shared with another device;
first setting means (<NUM>) for setting the identification information (D102) to the device (10a);
third storage means (230A) for storing the identification information (D102);
second common certification information acquiring means (205A) for acquiring, from the device (10b) after replacement, second common certification information (D103A) stored in the second storage means (120b), the second common certification information (D103A) being shared with another device after replacement; and
second setting means (206A) for setting the identification information (D102) stored in the third storage means (230A) to the device (10b) certified by the second certification means (303A), after replacement,
the first certification means (<NUM>) certifies the device (10a) based on the first common certification information (D101), and
the second certification means (303A) certifies the device (10b) after replacement based on the second common certification information (D103A).