AUDITING SYSTEM
An auditing system includes a processor configured to obtain system information as information about apparatus safety from an apparatus that is to be audited, the system information describing predetermined items, convert, on the basis of content of each of the items, the system information to safety-degree information indicating the degree of safety, encrypt the safety-degree information in an environment in which a measure is taken for protection against an analysis action, and output the encrypted safety-degree information and the safety-degree information in plain text.
1 . An auditing system comprising:
a processor configured to
obtain system information as information about apparatus safety from an apparatus that is to be audited, the system information describing predetermined items,
convert, on a basis of content of each of the items, the system information to safety-degree information indicating a degree of safety,
encrypt the safety-degree information in an environment in which a measure is taken for protection against an analysis action, and
output the encrypted safety-degree information and the safety-degree information in plain text.
2 . The auditing system according to claim 1 ,
wherein the processor is configured to
encrypt the safety-degree information by using an encryption key associated with the auditing system, and
perform electronic signature on the safety-degree information.
3 . The auditing system according to claim 2 ,
wherein the encryption key and a signature key used for the electronic signature are held by the auditing system so as not to be disclosed, and
wherein the processor is configured to perform the electronic signature in the environment in which a measure is taken for protection against an analysis action.
4 . The auditing system according to claim 1 ,
wherein the processor is configured to
cause a display apparatus to display information indicating whether the degree of safety which is indicated by the safety-degree information satisfies a degree of safety required for the auditing system, and
receive an instruction from a user and transmit the encrypted safety-degree information to an external apparatus.
5 . The auditing system according to claim 4 ,
wherein the processor is configured to
cause the display apparatus to perform the display and to display the safety-degree information in plain text.
6 . The auditing system according to claim 5 ,
wherein the processor is configured to
receive an instruction from a user and cause the display apparatus to display a matter necessary to achieve a state in which the degree of safety indicated by the safety-degree information satisfies the degree of safety required for the auditing system.
7 . An auditing system comprising:
means for obtaining system information as information about apparatus safety from an apparatus that is to be audited, the system information describing predetermined items;
means for converting, on a basis of content of each of the items, the system information to safety-degree information indicating a degree of safety;
means for encrypting the safety-degree information in an environment in which a measure is taken for protection against an analysis action; and
means for outputting the encrypted safety-degree information and the safety-degree information in plain text.