JP2004102408A - Information terminal management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information terminal management system capable of accurately preventing any unauthorized access to information stored in an information terminal. <P>SOLUTION: A search terminal 2 capable of acquiring its own current location and wirelessly notifying the result to a control center 3 is connected to a working terminal 1 in which predetermined information is stored so as to be freely attachable and detachable. The working terminal is able to access the predetermined information under a condition that the search terminal is put in a communicable state with the control center. The control center controls the current location information received from the search terminal. Thus, it is possible to access the predetermined information only by mounting the search terminal as the key of the working terminal, and to improve security by a simple operation for an owner. Also, the current location information received from the search terminal is managed by the control center so that the use condition of the working terminal can be monitored by the control center. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an information terminal management system for protecting information stored in an information terminal.
[0002]
[Prior art]
Secret data, such as personal information, customer information, and technical information, is often stored in work terminals used for business purposes by equipment maintenance personnel and information terminals such as personal computers and PDAs. As a method for protecting such stored information, for example, (1) setting use restrictions with a password, and (2) removing the restriction of a computer system by attaching / detaching a security card (see Patent Document 1). Proposed.
[0003]
[Patent Document 1]
Japanese Patent Application Laid-Open No. 07-56856
[Problems to be solved by the invention]
Regarding the method (1), it cannot be denied that the password is decrypted by another person and the restriction is released when the information terminal is stolen. In addition, there was a problem that the legitimate owner could not cope with the theft.
The method (2) is configured such that the security card is simply used as an ID key, and thus cannot protect information when the information terminal is stolen. For example, if both the information terminal and the security card are stolen, secret data is easily leaked. This method also has a problem that the legitimate owner cannot cope with the theft.
[0005]
In particular, when an employee steals an information terminal owned by the company, the password and the security card are also stolen together, which makes it difficult for the company to respond.
An object of the present invention is to obtain an information terminal management system that can reliably prevent unauthorized access to information stored in an information terminal and can cope with theft by employees.
[0006]
[Means for Solving the Problems]
The present invention has been made to achieve the above object. The information terminal management system of the present invention detachably connects a search terminal capable of acquiring its current location and wirelessly reporting to a management center to an information terminal storing predetermined information. The information terminal can access the predetermined information on condition that the search terminal is connected. Further, the management center manages the current position information received from the search terminal.
[0007]
According to the present invention, since the predetermined information can be accessed simply by attaching a search terminal capable of searching for the current position information as a key of the information terminal, the security can be improved by a simple operation for the owner.
That is, when the information terminal is managed by the search terminal and the management center, for example, it is possible to access an activation program, a work program, secret data, and the like, and the security is greatly improved.
[0008]
Further, by managing the position information received from the search terminal in the management center, the use state of the information terminal can be monitored in the management center. As a result, even if the information terminal is stolen, the use location can be grasped by the management center, so that a quick response can be taken and the security can be further improved.
[0009]
DETAILED DESCRIPTION OF THE INVENTION
The present invention will be described with reference to the drawings.
FIG. 1 shows the configuration of an information terminal management system to which the present invention is applied.
The system includes a work terminal 1 as an information terminal storing predetermined information, a search terminal 2 detachably connected to the work terminal 1, and a management center 3 capable of wireless communication with the search terminal 2. Composed.
[0010]
Here, the work terminal 1 is a terminal used by equipment maintenance personnel. The predetermined information is a predetermined file such as an activation management program, a work program, or secret data. Information terminals include a personal computer and a PDA in addition to the work terminal 1.
The search terminal 2 is detachably attached to the work terminal 1. And when the search terminal 2 is mounted | worn with the work terminal 1, both are connected.
[0011]
The search terminal 2 receives radio waves from a plurality of GPS satellites 4, acquires its current position, and reports the acquired position information to the management center 3.
The search terminal 2 and the management center 3 can wirelessly communicate with each other via the base station 5 and a communication network 6 such as a telephone line.
The management center 3 stores and manages the history of location information received from the search terminal 2.
[0012]
Here, the general function of the information terminal management system shown in FIG. 1 will be described.
The work terminal 1 can access predetermined information stored when the search terminal 2 is connected and the search terminal 2 can communicate with the management center 3. Therefore, the search terminal 2 functions as a kind of key.
[0013]
Since the management center 3 stores and manages the position information received from the search terminal 2, the security of the system can be further improved.
For example, when the work terminal 1 and the search terminal 2 are stolen, the work terminal 1 and the search terminal 2 can be searched based on the position information received from the search terminal 2.
[0014]
Also, by registering in the management center 3 that the work terminal 1 or the search terminal 2 has been stolen, or by registering the use area of the work terminal 1 and the search terminal 2 specified by the owner. By doing so, unauthorized use of the work terminal 1 can be made impossible. In this case, when the work terminal 1 and the search terminal 2 are stolen or taken out of the registration area, a command is transmitted from the management center 3 to delete the predetermined information from the work terminal 1.
[0015]
The configuration of the work terminal 1, the search terminal 2, and the management center 3 will be described.
The work terminal 1 is connected to the search terminal 2 by a search terminal communication I / F (interface) 11. The search terminal communication I / F 11 is an I / O port as a connection means, and for example, a general-purpose I / F by wired connection such as USB, IEEE 1394, or a data card throttle is used. The search terminal communication I / F 11 is not limited to a wired connection, and may be a general-purpose I / F that performs a wireless connection. Hereinafter, in this example, an example in which USB is adopted as the search terminal communication I / F 11 will be described.
[0016]
The work terminal 1 further includes a system activation module 12 that performs system activation processing, a file management module 13 that manages application programs and data files, an operation unit 14, a display unit 15, and a storage unit 16. It has.
[0017]
The search terminal 2 is mounted on the search terminal communication I / F 11 of the work terminal 1 and has an information terminal communication I / F 21 for connecting via USB, a communication module 22 for performing wireless communication with the management center 3, and a plurality of A position acquisition module 23 that acquires position information based on radio waves from the GPS satellite 4, an information terminal command storage unit 24 that stores commands sent from the work terminal 1, and commands sent from the management center 3. The center command storage unit 25 stores, a control module 26 that controls these modules, and a power supply battery (not shown).
[0018]
When the search terminal 2 is connected to the work terminal 1 via the information terminal communication I / F 21, the power supply battery can be charged by the power supplied from the work terminal 1.
[0019]
The management center 3 includes a communication module 31 for communicating with the search terminal 2, a terminal management module 32 that manages the ID number of each search terminal 2, and a history storage unit that accumulates information transmitted from each search terminal 2. 33, position information for determining whether or not the position information transmitted from each search terminal 2 is within the permitted range (permitted area) for each terminal The module 35 is configured.
[0020]
Hereinafter, the operation of each of the terminals 1, 2, and 3 of the information terminal management system of FIG. 1 will be described.
The operation of the work terminal 1 will be described using the flowchart of FIG.
The process of FIG. 2 is started when the work terminal 1 is turned on, that is, when the OS is started.
When the power is turned on, the operating status acquisition command is transmitted to the search terminal 2 by the system activation module 12 and the file management module 13 via the search terminal communication I / F 11 (step S1).
[0021]
It is determined whether or not there is a normal operating state response from the search terminal 2 (step S2). A typical example in which there is no normal response is when the search terminal 2 is not connected to the work terminal 1. If no normal response is made from the search terminal 2 (No in step S2), the process proceeds to step S5. If a normal response is made, the process proceeds to step S3, and it is determined whether or not the response indicates a communicable state of the search terminal 2. If No here, the process proceeds to step S5.
[0022]
If it is determined in step S3 that the search terminal 2 can communicate with the base station 5, the location information, the current time, and the terminal ID of the search terminal 2 are attached, and the activation of the information terminal 1 is indicated to the management center 3. The command is transmitted and the process proceeds to step S4. In this example, it is determined whether the search terminal 2 can communicate with the base station 5 based on the electric field strength received by the search terminal 2. This step S3 can be omitted.
[0023]
In the state of proceeding to step S4, the search terminal 2 is connected to the work terminal 1, and the search terminal 2 is in a state where it can communicate with the management center 3. In this state, the system startup module 12 starts up the system of the work terminal 1 without any function restriction (OS startup process).
[0024]
On the other hand, when there is no normal response from the search terminal 2 (No in step S2), or when the search terminal 2 is not in a communicable state with the management center 3 (No in step S3), a status for prohibiting the specific process is displayed. The setting is made (step S5), and a warning message such as “Startup is limited because communication with the management center is not possible” is displayed on the display unit (step S6). Then, the system activation module 12 activates the OS in a partially function limited state (step S7).
[0025]
The partial function restriction state is a state in which, for example, a predetermined file is set invisible and access is prohibited by the file management module 13. In place of the partial function restriction state, step S7 can be omitted and the system startup of the work terminal 1 can be completely prohibited.
[0026]
According to the process of FIG. 2, when the search terminal 2 is not attached to the work terminal 1 or is used in a state where the search terminal 2 cannot communicate with the management center 3, the specific process prohibition status is set. It is possible to prevent unauthorized access to predetermined information. Further, even when the search terminal 2 is mounted and used, since the use of the work terminal 1 can be managed by the management center, unauthorized use can be confirmed by reporting to the management center 3 or the like. A quick response can be taken. In particular, even an unauthorized use by an employee who can easily know the activation password of the work terminal 1 can be reliably detected.
[0027]
In the work terminal 1, when a predetermined file storing a predetermined application program or secret data is accessed after the system is started, it is determined whether or not to permit the access.
The flowchart shown in FIG. 3 is activated when a predetermined file is accessed.
[0028]
Steps S1 to S3, 5, and 6 are the same as the processing in FIG. If there is a normal response from the search terminal 2 and the search terminal 2 can communicate with the management center 3, a command indicating the access is transmitted to the management center 3 with the location information attached, and the process proceeds to step S14. Here, access is permitted and the file management module 13 activates the predetermined file.
[0029]
If there is no normal response from the search terminal 2 or if the search terminal 2 cannot communicate with the management center 3, a status for prohibiting the specific process is set (step S5). A warning message “This file cannot be used because communication with the center cannot be performed” is displayed (step S6), and the process ends. Therefore, according to the process of FIG. 3, when the work center 1 cannot be managed by the management center 3, the predetermined file is not used. That is, the use of the predetermined file can be managed by the management center 3, and a quick response can be taken when an unauthorized use is confirmed.
[0030]
The operation of the search terminal 2 will be described with reference to the flowcharts of FIGS. The illustrated process is executed at predetermined time intervals by the operation of the control module 26.
First, the general operation of the search terminal 2 will be described.
When the search terminal 2 receives a command from the information terminal 1 to the management center 3, the search terminal 2 transmits it if communication with the management center 3 is possible, and stores it in the storage unit 25 if it is not possible. Thereafter, when communication becomes possible, the stored command is transmitted to the management center 3. The same processing is performed when a command from the management center 3 to the work terminal 1 is received.
[0031]
When the search terminal 2 receives a command for itself from the work terminal 1 or the management center 3, the search terminal 2 performs processing according to the command. For example, when acquisition of the current position is instructed from the management center 3, the current position is acquired by the position acquisition module 23 and transmitted to the management center 3. Thereby, when there is a theft or the like, the management center 3 can track the work terminal 1 to which the search terminal 2 is attached.
[0032]
Hereinafter, it demonstrates in detail according to FIGS.
It is determined whether or not a command is received from the management center 3 in step S21 of FIG. 4, and it is determined whether or not a command is received from the work terminal 1 in step S41 of FIG. 5, and stored in step S61 of FIG. It is determined whether there is a completed command.
[0033]
If it is determined in step S21 that the command is from the management center 3, it is determined whether or not the command is a command to be transmitted to the work terminal 1 (step S22). Here, if No, it is determined whether or not the command is a position acquisition command (step S23). If Yes here, the position acquisition module 23 acquires the current position of itself (step S25), and notifies the management center 3 (step S26). As a result, the management center 3 can monitor the position of the search terminal 2.
[0034]
If No in step S23 (command is not a position acquisition command), processing according to the command is executed (step S24).
If Yes in step S22 (the command received from the management center 3 is a command to the work terminal 1), it is determined whether or not communication with the work terminal 1 is possible by the information terminal communication I / F 21 ( Step S27). If “No” here, the received command is stored in the center command storage unit 25 (step S28). When the command stored here becomes communicable with the work terminal 1, the command is transmitted to the work terminal 1 by a process described later.
[0035]
If Yes in step S27 (communicable with work terminal 1), it is determined whether or not the command is a data erasure command (step S29). If Yes, a data erasure request is output to the work terminal 1 (step S31). In response to this request, the work terminal 1 erases the data in the predetermined file and makes subsequent unauthorized access impossible. As a result, when the information terminal 1 is stolen or when unauthorized use is detected, subsequent access is impossible, and information leakage can be prevented.
[0036]
If No in step S29 (not a data erasure command), processing corresponding to the received command is executed (step S30). An example of this command is a permission command for the work terminal 1. By adopting a configuration that requires a permission command from the management center 3 for access to predetermined information by the work terminal 1, it is possible to obtain better security.
[0037]
If a permission command is received from the management center 3, it is transmitted to the work terminal 1. By receiving the permission command, the work terminal 1 can start up the system without function restriction or access a predetermined file. In this case, in the work terminal 1, Step 3 in FIGS. 2 and 3 is determined as Yes on condition that the permission command is received. This step S30 can be omitted.
[0038]
In step S41 of FIG. 5, it is determined whether or not a command is received from the work terminal 1, and if Yes, it is determined whether or not this command requires communication with the management center 3. (Step S42). If No here, it is determined whether or not it is an operation information acquisition command (step S43). If Yes here, the operating state is returned to the work terminal 1 (step S45), and if No, processing corresponding to the command is executed (step S44). The work terminal 1 performs the determinations of steps S2 and S3 in FIGS. 2 and 3 according to the response of the operating state.
[0039]
If it is determined as Yes (communication with the management center 3 is necessary) in step S42, it is determined whether or not communication with the management center 3 is possible (step S46). If “No” here, the command is stored in the information terminal command storage unit 24 (step S47). The command stored here is transmitted to the management center 3 when communication with the management center 3 becomes possible as will be described later.
[0040]
If Yes in step S46 (communication with the management center 3 is possible), a command is transmitted to the management center 3 (step S48). As this command, for example, there are notification commands such as start-up without limitation of the system function in the work terminal 1 and access to a predetermined file. The command transmitted from the search terminal 2 to the management center 3 is transmitted to the management center 3 with GPS location information, current time, and the terminal ID of the search terminal 2 attached.
[0041]
As a result, the use state of the work terminal 1 can be managed by the management center 3. In particular, even if an employee who can easily know the password of the work terminal 1 steals the work terminal 1, the use can be detected and a quick response can be taken.
[0042]
In step S61 of FIG. 6, it is determined whether or not the command is stored in the storage units 24 and 25. If Yes, it is determined whether or not the command is from the management center 3 stored in the center command storage unit 25 (step S62). Here, if No (command from the work terminal 1), it is determined whether or not communication with the management center 3 is possible (step S63). If Yes here, the stored command is transmitted to the management center 3 (step S64), and if the transmission is completed (Yes in step S65), the command stored in the information terminal command storage unit 24 is cleared (step S64). S66), the process is terminated.
[0043]
If Yes in step S62 (command from the management center 3), it is determined whether or not communication with the work terminal 1 is possible (step S67). If Yes here, the stored command is transmitted to the work terminal 1 (step S68), and if the transmission is completed (Yes in step S69), the command stored in the center command storage unit 25 is cleared (step S70). ).
[0044]
The operation of the management center 3 will be described using the flowchart of FIG. The illustrated process is started when the communication module 31 receives a report command from the search terminal 2.
As described above, the position information, the current time, and the terminal ID of the search terminal 2 are attached to the command transmitted from the search terminal 2. The management center 3 checks these received terminal IDs with the terminal management module 32 (step S81), and determines whether or not they are authentic (step S82).
[0045]
If No in step S82 (terminal ID is abnormal), the process proceeds to step S87. If Yes (terminal ID is OK), it is determined whether or not the search terminal 2 is an abnormal terminal (step S83) and whether or not the search terminal 2 is within the start-up permitted area (step S84).
[0046]
The abnormal terminal is, for example, a terminal in which the work terminal 1 is stolen and this is notified to the management center 3 and the fact is stored. Further, the activation allowable area is an area notified in advance from the owner of the work terminal 1, and the position information module 35 determines whether or not the area is within the range. This step S84 can be omitted.
If Yes in step S83 and No in step S84, the process proceeds to step S88.
[0047]
If Yes in step S84, the terminal ID is normal, the terminal has no abnormality such as theft, and is used in the activation permission area. In this case, it is determined whether or not a permission command is requested (step S85). If Yes, the permission command is transmitted to the search terminal (step S86). Note that steps S85 and 86 can be omitted together with step S30 in FIG.
[0048]
If Yes (abnormal terminal) in step S83 or No (not within the allowable area) in step S84, an erase command is transmitted to the search terminal 2 in step S88, and the process proceeds to step S87.
By transmitting the delete command in step S88, the work terminal 1 deletes the data of the predetermined file. Therefore, subsequent unauthorized access is impossible. As a result, when the information terminal 1 is stolen or when unauthorized use is detected, subsequent access is impossible, and information leakage can be prevented.
[0049]
In step S87, the history of the notification signal received from the search terminal 2 is stored in the history storage unit 33, and the process ends.
The management terminal 3 can monitor the usage status of each work terminal 1 and search terminal 2 based on the history of various information such as position information stored in the history storage unit 33.
[0050]
According to the embodiment described above, the following effects can be obtained.
By using the search terminal 2 capable of searching and reporting position information as a key for using the work terminal 1, security can be improved with a simple operation.
Only when the search terminal 2 is in a state in which the management center 3 can be monitored, the system can be used to start the work terminal 1 or access a predetermined file. Monitoring, and better security can be obtained.
[0051]
By adopting a general-purpose I / F such as USB for connection between the work terminal 1 and the search terminal 2, various information terminals other than the work terminal 1 can be supported, and versatility and convenience are improved. be able to.
Furthermore, since a plurality of work terminals 1 can be managed by a single search terminal 2, costs can be reduced.
[0052]
The present invention is not limited to the embodiment described above, and various modifications can be made.
For example, instead of starting the system in the function-restricted state in step S7 of FIG. 2, the operation unit 14 of the work terminal 1 can be locked in hardware to prohibit any input operation.
In addition, the terminal ID of the search terminal 2 is attached to the command transmitted from the search terminal 2 to the management center 3. This is the terminal ID of the work terminal 1 to which the search terminal 2 is connected. Or it is good also as a structure which transmits the user ID which a user inputs at the time of starting of the work terminal 1.
[0053]
The search terminal 2 may be provided with a data file encryption / decryption function to protect the data file. In this case, the work terminal 1 performs processing with reference to the encryption / decryption key code stored in the search terminal 2. Alternatively, the data file may be transmitted from the work terminal 1 to the search terminal 2, encrypted / decrypted by the search terminal 2, and transmitted to the work terminal 1.
[0054]
【The invention's effect】
According to the present invention, it is possible to reliably prevent unauthorized access to information stored in an information terminal, in particular, even when an information terminal is stolen by an employee, An information terminal management system that prevents use can be obtained.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a terminal management system to which the present invention is applied.
FIG. 2 is a flowchart showing processing at the time of system startup of a work terminal in the system of FIG.
FIG. 3 is a flowchart showing processing when a predetermined file is accessed by a work terminal in the system of FIG. 1;
4 is a flowchart (part 1) showing processing of a search terminal in the system of FIG. 1;
FIG. 5 is a flowchart (part 2) illustrating processing of a search terminal in the system of FIG. 1;
6 is a flowchart (No. 3) showing the processing of the search terminal in the system of FIG.
7 is a flowchart showing processing of a management center in the system of FIG.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Work terminal 2 ... Search terminal 3 ... Management center 4 ... GPS satellite 5 ... Base station 6 ... Communication network 11 ... Search terminal communication I / F
DESCRIPTION OF SYMBOLS 12 ... System start-up module 13 ... File management module 14 ... Operation part 15 ... Display part 16 ... Memory | storage part 21 ... Information terminal communication I / F
22 ... Communication module 23 ... Position acquisition module 24 ... Information terminal command storage unit 25 ... Center command storage unit 26 ... Control module 31 ... Communication module 32 ... Terminal management module 33 ... History storage unit 34 ... Input unit 35 ... Position information module

Claims (5)

An information terminal that stores predetermined information and enables access to the predetermined information on the condition that it is connected to a search terminal;
A search terminal that is detachably connected to the information terminal, capable of acquiring its current position and wirelessly reporting to the management center,
An information terminal management system comprising a management center for managing position information received from the search terminal. The information terminal management system according to claim 1, wherein the information terminal enables access to the predetermined information on a weighted condition that the search terminal is in a state capable of reporting to the management center. The information terminal management system according to claim 1 or 2, wherein when the information terminal accesses the predetermined information, the search terminal acquires its current position and notifies the management center. 2. The information terminal according to claim 1, wherein the information terminal enables access to the predetermined information when the management center receives a permission command transmitted based on a current position received from the search terminal via the search terminal. Information terminal management system. 5. The information terminal management according to claim 4, wherein the management center transmits a permission command to the search device when the current position of the search device is within a predetermined area, and transmits a data erasure command when the current position is outside the predetermined area. system.

Images