JP2006011720A - Maintenance management system for portable information terminal device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a maintenance management system for a portable information terminal device, stopping execution of a maintenance program by unjust use of the portable information terminal device to prevent an outflow of know-how. <P>SOLUTION: A maintenance computer (hereinafter called a maintecom) transmits decryption key requirement and a maintecom ID to a theft countermeasure device. The theft countermeasure device transmits the maintecom ID, its own device ID, present position information, and encryption/decryption key requirement to a maintenance management server 1. The maintenance management server 1 decides matching of a received connection state on the basis of preset terminal connection information, and transmits an encryption key and a decryption key when matched. A health check on connectivity between the maintecom and the theft countermeasure device is executed by use of the acquired encryption key and decryption key. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a maintenance management system for a portable information terminal device such as a maintenance computer as a maintenance / fault response tool for building facilities, for example.

  Conventionally, a system for displaying equipment status and setting parameters using a maintenance computer (hereinafter referred to as a maintenance computer) as a portable information terminal device, which is a tool for building equipment maintenance and failure handling, has been put into practical use. Yes. This maintenance container is equipped with software according to the target equipment. The software installed in the maintenance equipment is constantly being improved to keep the work quality constant, regardless of the technical level of the workers who are responding to the addition of building equipment and the maintenance and failure handling of building equipment. Yes. If this maintenance container is stolen, the know-how for maintenance and failure handling of building equipment will be leaked to the outside.

Therefore, by using a system that determines the current location based on the position of a base station such as a satellite positioning system (GPS: Global Positioning System), PHS (Personal Handy-phone System), or a mobile phone, the position information of the maintenance device is obtained. It can be transmitted to the maintenance management server of the maintenance management center (see, for example, Patent Document 1).
In this case, the maintenance device is connected to a positioning device such as GPS via the positioning unit, and is connected to a communication device such as PHS via the communication control unit. And, when starting the maintenance program in the maintenance device, the application execution processing unit receives the positioning data from the positioning device via the positioning unit, and transmits the positioning data from the communication processing unit to the maintenance management server via the communication device, A configuration is made so that the maintenance program can be started when communication between the maintenance device and the maintenance management server is performed normally. As a result, the current location data of the maintenance object is managed by the maintenance management server. Further, if a positioning device such as GPS or a communication device such as PHS is removed, communication between the maintenance device and the maintenance management server cannot be performed normally, so that the maintenance program cannot be started, and know-how can be prevented from leaking outside.

JP 2003-242041 A

  However, since the connection between GPS and PHS and the maintenance device uses a well-known interface, it is easy to eavesdrop, and even if GPS or PHS is removed, is GPS or PHS connected in a pseudo manner? The maintenance program can be started by connecting a device that can transmit data like this, and there is a problem that the outflow of know-how cannot be reliably prevented.

  An object of the present invention is to obtain a maintenance management system for a portable information terminal device that stops execution of a maintenance program due to unauthorized use of the portable information terminal device and prevents outflow of know-how.

  According to the maintenance management system for a portable information terminal device according to the present invention, a plurality of portable information terminal devices that perform maintenance of a facility by executing a maintenance program are connected to antitheft devices each having a positioning function and a communication function. In the maintenance management system of the portable information terminal device connected to the maintenance management server via the communication network, the portable information terminal device sends the decryption key request together with the terminal ID when the maintenance program is started. A decryption key acquisition unit that transmits to the device and acquires the decryption key and the device ID of the antitheft device from the antitheft device, and a unit that executes the maintenance program when the decryption key is acquired by the decryption key acquisition unit; The terminal ID and the transmission time are transmitted to the antitheft device, and the theft Obtaining encrypted data of the terminal ID and transmission time and the device ID from the countermeasure device, decrypting the encrypted data using the decryption key, and decrypting the decrypted terminal ID, device ID, and Health check means for determining whether the transmission time is normal, continuing the execution of the maintenance program if the determination result is normal, and stopping the execution of the maintenance program if the determination result is abnormal The anti-theft device obtains its current location by the location measurement function based on the reception of the decryption key request, and encrypts the current location, the terminal ID, and its own device ID together with the obtained current location. A decryption key request is transmitted to the maintenance management server, an encryption key and a decryption key are obtained from the maintenance management server, and the decryption key and the device ID are Encryption / decryption key acquisition and transmission means for transmitting to the band-type information terminal device, the terminal ID and transmission time transmitted from the portable information terminal device, and the device ID are encrypted using the encryption key, and the terminal ID And health check response means for transmitting the encrypted data of the device ID and the transmission time to the portable information terminal device, and the maintenance management server stores terminal connection information for each portable information terminal device. Based on the stored storage means and the terminal connection information stored in the storage means, it is determined whether the current position, the terminal ID, and the device ID transmitted from the antitheft device are normal. If the determination result is determined to be normal, the encryption key and the decryption key are transmitted to the portable information terminal device. If the determination result is determined to be abnormal, an alarm is transmitted. Encryption / decryption key transmission means for outputting a message.

According to the present invention, the maintenance information is transmitted to the maintenance management server every time the maintenance program is started, so that it is easy to identify the location where the maintenance is illegally used.
Further, when the maintenance device cannot receive the decryption key from the anti-theft device, execution of the maintenance program is prohibited. In addition, the maintenance management server determines whether or not the acquired maintenance container ID, device ID, and position information are normal based on the terminal connection information. If it is determined to be normal, the encryption key and the decryption key are stolen. Sent to the countermeasure device. Furthermore, since the maintenance device receives a health check response from the anti-theft device and determines whether to continue or stop the execution of the maintenance program, if the anti-theft device is removed while the maintenance program is running, the health check The response is not received and the execution of the maintenance program is stopped. Accordingly, it is possible to prevent outflow of know-how due to unauthorized use.
In addition, since it is determined by using the encryption key and the decryption key acquired from the maintenance management server that the maintenance program is continuously executed and stopped, wiretapping between the antitheft device and the maintenance device can be prevented.

FIG. 1 is a block diagram showing a maintenance management system for a maintenance computer according to an embodiment of the present invention.
In FIG. 1, a maintenance computer maintenance management system includes a maintenance management server 1 installed in a maintenance management center, and a plurality of maintenance computers (maintenance computers) as portable information terminal devices which are tools for maintenance and failure handling of building facilities. 3). The anti-theft device 2 is connected to each maintenance device 3 via a general-purpose interface 4 such as a USB (Universal Serial Bus). A plurality of maintenance devices 3 are connected to the maintenance management server 1 via the communication network 5.

  The maintenance management server 1 is composed of a computer having a communication function, and includes a control unit 10, storage means 11 for storing various files, a communication processing unit 12, an encryption processing unit 13, a data processing unit 14, an alarm. And a display unit 15. The storage unit 11 stores files such as a maintenance management table 16, work schedule table 17, and access log table 18. Although not shown, the maintenance management server 1 includes interface means such as a CRT (Cathode Ray Tube) and a keyboard so that various types of information can be exchanged with an operator.

The maintenance management table 16 is processed by the data processing section 14 and stored in the storage means 11 by the operator through the interface means. As shown in FIG. For every three, a maintenance control ID (terminal ID), a device ID of the antitheft device 2 to which the maintenance control 3 is connected, presence / absence of a theft flag, and management level data are provided.
The work schedule table 17 is a table in which work schedule data input by the operator through the interface means is processed by the data processing unit 14 and stored in the storage means 11. As shown in FIG. Each maintenance container 3 is provided with data of the maintenance container 3 ID, scheduled work date, scheduled work start time, scheduled work end time, and scheduled work position.
As will be described later, the access log table 18 is obtained by processing the data transmitted from the anti-theft device 2 by the data processing unit 14 and storing the data in the storage unit 11. As shown in FIG. Each maintenance control 3 includes the maintenance control ID, the device ID of the anti-theft device 2 to which the maintenance control 3 is connected, the current location of the maintenance control 3, and the access date and time.
The maintenance control ID and the device ID are unique values that cannot be changed. In addition, the maintenance container management table 16 and the work schedule table 17 serve as terminal connection information for checking the connection status of the maintenance container 3.

The antitheft device 2 includes a computer having a positioning function and a communication function, and includes a control unit 20, a positioning unit 21 having a positioning function such as GPS, a communication processing unit 22 such as a PHS, an encryption processing unit 23, A life timer 24 and storage means 25 for storing a maintenance control ID 26, a device ID 27, an encryption key 28, a decryption key 29, and the like are provided.
The maintenance container 3 is composed of a computer having a communication function, and includes a control unit 30, an application execution processing unit 31, a communication processing unit 32, an encryption processing unit 33, a data processing unit 34, a health check timer 35, and maintenance. The storage unit 36 stores data such as a file such as a program 37, a maintenance control ID 38, a device ID 39 of the antitheft device 2 to which the maintenance control 3 is connected, and a decryption key 40. Although not shown, the maintenance device 3 includes interface means such as an LCD (Liquid Crystal Display) panel and a keyboard so that various types of information can be exchanged with an operator. Data input from the interface unit is processed by the data processing unit 34 and stored in the storage unit 36. Further, the maintenance control ID uniquely identifies a terminal such as a MAC (Machine-Aided Cognition) address of a LAN (Local Area Network) card.

  Next, the overall operation of the maintenance management system of the maintenance computer will be described with reference to FIG. FIG. 5 is a diagram showing transmission and reception of data among the maintenance computer, the antitheft device, and the maintenance management server in time series. In FIG. 5, for the sake of convenience, steps 101 to 110 are shown as S101 to S110.

  First, an operator goes to a facility, for example, a building where a building facility subject to maintenance and inspection is installed, and connects the antitheft device 2 to the maintenance container 3 via the interface 4. Then, the antitheft device 2 is turned on by turning on the power of the maintenance device 3, and the maintenance device 3 and the maintenance management server 1 are connected via the communication network 5. In the maintenance management server 1, a maintenance management table 16 and a work schedule table 17 are stored in the storage unit 11 in advance.

Then, when the worker activates the maintenance program 37 in the maintenance container 3 via, for example, a keyboard, a decryption key request is transmitted from the maintenance container 3 to the antitheft device 2 together with the maintenance container ID (S101).
When receiving the decryption key request from the maintenance device 3, the anti-theft device 2 activates the positioning unit 21 to acquire its current position, and this position information, the maintenance device ID received together with the decryption key request, and the anti-theft device. 2 transmits its own device ID to the maintenance management server 1 together with the encryption / decryption key request (S102).
In the maintenance management server 1, the received location information, maintenance ID, device ID, and reception time data are processed by the data processing unit 14 and stored in the storage unit 11 as the access log table 18. Next, based on the maintenance management table 16 and the work schedule table 17 stored in the storage unit 11, it is determined whether or not the position information, maintenance control ID, device ID, and reception time data in the access log table 18 are normal. To do. If the determination result is abnormal, an alarm is output. If the determination result is normal, the encryption key and the decryption key used for encryption that are randomly generated are transmitted to the antitheft device 2 (S103). The processing operation in the maintenance management server 1 corresponds to encryption / decryption key transmission means.

Next, when receiving the encryption key and the decryption key from the maintenance management server 1, the antitheft device 2 stores the acquired encryption key and decryption key in the storage means 25, and starts the life timer 24 that defines the life of the encryption key. . Then, the obtained decryption key and its own device ID are transmitted to the maintenance device 3 (S104).
When the maintenance key 3 receives the decryption key and the device ID from the antitheft device 2, the maintenance execution program is executed by the application execution processing unit 31 and the acquired decryption key and device ID are stored in the storage unit 36. Next, a health check request is transmitted to the antitheft device 2 together with its own maintenance control ID and date and time (S105).
Then, when receiving the health check request, the antitheft device 2 encrypts the acquired maintenance container ID and date / time, and its own device ID using the encryption key. Next, the encrypted data of the maintenance control ID, date time, and device ID is transmitted to the maintenance control 3 as a health check response (S106).

When the health maintenance response is received, the maintenance device 3 decrypts the acquired data using the decryption key stored in the storage means 36. If the maintenance ID, device ID, and date / time are correct as a result of the decoding, the health check timer 35 is started and the execution of the maintenance program 37 is continued. Further, if the decoded maintenance control ID, device ID, and date / time are not correct, the execution of the maintenance program 37 is stopped.
When the health check timer 35 times out, a health check request is made from the maintenance container 3 (S107). Next, in response to this health check request, the antitheft device 2 performs predetermined processing, and a health check response is transmitted to the maintenance device 3 (S108).
When the life timer 24 times out, an encryption / decryption key request is transmitted from the antitheft device 2 to the maintenance management server 1 (S109). Then, predetermined processing is performed in the maintenance management server 1, and the encryption key and the decryption key are transmitted to the antitheft device 2 (S110). Thereafter, the application execution processing unit 31 determines whether to continue / stop execution of the maintenance program 37 using the new encryption key and decryption key.

  Here, S101 and S104 correspond to the maintenance key 3 decryption key acquisition means, and S105 and S106 correspond to the maintenance check 3 health check means. S102 to S104 correspond to the encryption / decryption key acquisition / transmission means of the antitheft device 2, and S106 corresponds to the health check response means of the antitheft device 2.

  Next, the processing operation in the maintenance container 3 will be described with reference to FIG. FIG. 6 is a flowchart showing processing in the maintenance computer. In FIG. 6, for the sake of convenience, steps 201 to 210 are shown as S201 to S210.

The control unit 30 monitors whether the maintenance program 37 has been activated (S201). When the activation of the maintenance program 37 is detected, a decryption key request is transmitted to the anti-theft device 2 via the communication processing unit 32 together with the maintenance control ID 38 stored in the storage means 36 (S202). Thereafter, the control unit 30 monitors whether or not the decryption key 29 is received from the antitheft device 2 via the communication processing unit 32 (S203). If the decryption key 29 is not received, the process proceeds to S201.
If the reception of the decryption key 29 is detected in S203, the process proceeds to S204, where the decryption key 29 and the device ID 27 are stored in the storage means 36, and the maintenance program 37 is executed by the application execution processing unit 31. Subsequently, the process proceeds to S205, and a health check request is transmitted to the antitheft device 2 together with the maintenance control ID 38, date and time (transmission time) via the communication processing unit 32. Then, the control unit 30 monitors whether or not a health check response has been received from the antitheft device 2 via the communication processing unit 32 (S206).

If the health check response is not received in S206, the process proceeds to S210, and the execution of the maintenance program 37 by the application execution processing unit 31 is stopped. If a health check response is received in S206, the process proceeds to S207. In S207, the data acquired by the encryption processing unit 33 is decrypted using the decryption key 40 stored in the storage means 36. Then, based on the data stored in the storage means 36, it is determined whether or not the decrypted maintenance container ID, device ID, date, and time are correct. If the decoded maintenance control ID, device ID, date, and time are correct, the process proceeds to S208 and the health check timer 35 is started. If the decrypted maintenance control ID, device ID, date, and time are incorrect, the process proceeds to S210, and the execution of the maintenance program 37 by the application execution processing unit 31 is stopped.
When the health check timer 35 times out (S209), the process proceeds to S205, and a health check request is transmitted to the antitheft device 2.

  S201 to S203 correspond to a decryption key acquisition unit, S204 corresponds to a unit for executing a maintenance program, and S205 to S210 correspond to a health check unit.

  Next, the processing operation in the antitheft device 2 will be described with reference to FIG. FIG. 7 is a flowchart showing processing in the antitheft device. In FIG. 7, for the sake of convenience, Step 301 to Step 313 are shown as S301 to S313.

The control unit 20 monitors whether the decryption key request is received from the maintenance unit 3 and the timeout of the life timer 24 via the communication processing unit 22 (S301).
If it is determined in S301 that the decryption key request has been received, the received maintenance control ID3 is written in the storage means 25 (S302), and the positioning unit 21 is activated to acquire the current position (S303). If the current position cannot be acquired in S303, the process proceeds to S313, and a decryption key transmission disable signal is transmitted to the maintenance device 3. If it is determined in S303 that the current position has been acquired, the process proceeds to S304, in which the maintenance device ID 28 and its own device ID 27 stored in the storage means 25, the acquired position information, the encryption / decryption key request, Is transmitted to the maintenance management server 1 via the communication processing unit 22. Then, the process proceeds to S305, where it is determined whether or not the decryption key and the encryption key can be acquired from the maintenance management server 1 via the communication processing unit 22. If the decryption key and the encryption key cannot be acquired, the process proceeds to S313. In S313, the control unit 20 transmits a decryption key non-reception signal to the maintenance device 3 via the communication processing unit 22, and proceeds to S301.

  If it is determined in S305 that the decryption key and encryption key have been acquired, the acquired encryption key and decryption key are stored in the storage means 25 (S306), and the process proceeds to S307 to define the lifetime of the encryption key. The life timer 24 is started, and the process proceeds to S308. In S308, it is determined whether or not there is a decryption key request from the maintenance device 3. If there is no decryption key request, the process proceeds to S301. When there is a decryption key request, the process proceeds to S309, where the decryption key and the device ID are transmitted to the maintenance device 3 via the communication control unit 22, and the process proceeds to S301.

If it is determined in S301 that there is no decryption key request from the maintenance container 3, the process proceeds to S310 to determine whether there is a health check request from the maintenance container 3. If it is determined in S310 that there is no health check request, the process proceeds to S301. If it is determined in S310 that there is a health check request, the process proceeds to S311 and the maintenance control ID 38, date and time data received by the encryption processing unit 23 using the encryption key 28 stored in the storage unit 25. Is encrypted. Next, the process proceeds to S312, and the encrypted data is transmitted to the maintenance container 3 as a health check response via the communication processing unit 22, and the process proceeds to S301.
If it is determined in S301 that the life timer 24 has timed out, the process proceeds to S302. On the other hand, if it is determined that the life timer 24 has not timed out, the process proceeds to S310.

  S301 to S309 correspond to encryption / decryption key acquisition / transmission means, and S310 to S312 correspond to health check response means.

  Next, the processing operation of the maintenance management server will be described with reference to FIG. FIG. 8 is a flowchart showing processing in the maintenance management server. In FIG. 8, for the sake of convenience, steps 401 to 409 are shown as S401 to S409.

  The control unit 10 monitors whether or not an encryption / decryption key request has been received from the antitheft device 2 via the communication processing unit 12 (S401). If it is determined that the encryption / decryption key request has been received, the process proceeds to S402, and the acquired maintenance control ID 26, device ID 27, and position information data are recorded in the access log table 18 of the storage unit 11. Next, the control unit 10 reads out the maintenance management table 16, and whether the received maintenance control ID and device ID are valid, or whether a theft flag is set in the maintenance control ID corresponding to the received maintenance control ID 26. Is determined (S403). The theft flag is set based on the contact with the maintenance management center when the maintenance container 3 is stolen, and the procedure is not described here.

If it is determined in S403 that the received maintenance device ID 26 and device ID 27 are not genuine or the theft flag is set, the process proceeds to S404, and an alarm output is output to the warning display unit 15. As a result, the theft of the maintenance container 3 is displayed on the alarm display unit 15 to notify the operator. At this time, the maintenance company 3 may be automatically notified to the security company of theft. Then, the process proceeds to S405, where the transmission / non-transmission signal of the encryption / decryption key is transmitted to the antitheft device 2 via the communication processing unit 12, and the process proceeds to S401.
In S403, if it is determined that the received maintenance device ID 26 and device ID 27 are authentic and the theft flag is not set, the process proceeds to S406, where the management level is “A”. Determine whether or not. If it is determined in S406 that the management level is not “A”, the process proceeds to S409. In S409, an encryption key and a decryption key are created by the encryption processing unit 13, and the encryption key and the decryption key created via the communication processing unit 12 are transmitted to the antitheft device 2, and the process proceeds to S401. At this time, the management level “B” skips the above determination when work that is temporarily scheduled to be performed such as failure handling is performed, and the management level “C” is a failure handling terminal or the like. The above determination is always skipped.

If it is determined in S406 that the management level is “A”, the process proceeds to S407, the work schedule table 17 is read, and the received position information is collated with the scheduled work position. The collation between the received position information and the planned work position is based on information such as longitude and latitude, and is determined by how far the planned work position is from the previous and next schedules and regions (differences in urban areas). For example, a small error is allowed and a certain amount of error is allowed otherwise).
If the collation result between the received position information and the planned work position is normal in S408, the process proceeds to S409. If the collation result is abnormal in S408, the process proceeds to S404.

S401 to S409 correspond to encryption / decryption key transmission means.
In addition, it is assumed that the decryption key request and the decryption key transmission are also encrypted with a separate fixed encryption key.

  In this way, each time the maintenance program 37 is started, the location information of the maintenance container 3 is transmitted to the maintenance management server 1, so that it becomes easy to specify the location of the unauthorized use of the maintenance container 3.

In addition, when the decryption key request is transmitted from the maintenance device 3 together with the maintenance device ID to the anti-theft device 2 and no decryption key is received from the anti-theft device 2, the execution of the maintenance program 37 is prohibited. The antitheft device 2 transmits the encryption / decryption key request to the maintenance management server 1 together with the maintenance control ID and the device ID based on the reception of the decryption key request. The maintenance management server 1 is provided with a maintenance management table 16 in which a maintenance container ID and a device ID are associated with each other and a work schedule table 17 having data of work schedule information of the maintenance container 3 in advance. Based on the work schedule table 17, it is determined whether or not the acquired maintenance container ID, device ID, and reception time are normal, and when it is determined normal, the encryption key and the decryption key are transmitted to the antitheft device 2. is doing. The antitheft device 2 transmits the decryption key transmitted from the maintenance management server 1 to the maintenance device 3.
Therefore, when the antitheft device 2 is removed, the decryption key is not transmitted to the maintenance device 3, and therefore the maintenance program 37 is not executed. Further, since the maintenance management server 1 refers to the work schedule table 17 to determine whether the maintenance container 3 is used normally or abnormally, when the maintenance container 3 is used at a different place and at a different time from the work schedule. Since the decryption key is not transmitted to the maintenance device 3, the maintenance program 37 is not executed. Accordingly, it is possible to prevent outflow of know-how due to unauthorized use.

Further, the maintenance device 3 transmits a health check request to the anti-theft device 2 and receives a health check response from the anti-theft device 2 to determine whether to continue or stop the execution of the maintenance program 37. Therefore, if the antitheft device 2 is removed while the maintenance program 37 is being executed, the health check response is not received and the execution of the maintenance program 37 is stopped. Accordingly, it is possible to prevent outflow of know-how due to unauthorized use.
In addition, since the determination of continuation and stop of the execution of the maintenance program 37 is performed using the encryption key and the decryption key acquired from the maintenance management server 1, wiretapping between the antitheft device 2 and the maintenance device 3 is prevented. be able to.

  Also, a health check timer 35 is provided, and a health check request is transmitted from the maintenance container 3 every time the health check timer 35 times out. Therefore, unauthorized use during execution of the maintenance program 37 can be suppressed.

  Further, a life timer 24 is provided, and an encryption / decryption key request is transmitted from the antitheft device 2 to the maintenance management server 1 every time the life timer 24 times out. Therefore, even if the maintenance container 3 is stolen during the execution of the maintenance program 37, it cannot be used for a long time without registering position information, and unauthorized use of the maintenance container 3 can be prevented.

It is a block block diagram which shows the maintenance management system of the maintenance computer which concerns on embodiment of this invention. It is a data block diagram which shows the maintenance control management table which the maintenance management server in the maintenance management system of the maintenance computer which concerns on embodiment of this invention has. It is a data block diagram which shows the work schedule table which the maintenance management server in the maintenance management system of the maintenance computer which concerns on embodiment of this invention has. It is a data block diagram which shows the access log table which the maintenance management server in the maintenance management system of the maintenance computer which concerns on embodiment of this invention has. It is a figure which shows the transmission / reception of the data between the maintenance computer in a maintenance management system of the maintenance computer which concerns on embodiment of this invention, an antitheft device, and a maintenance management server in time series. It is a flowchart which shows the process in the maintenance computer in the maintenance management system of the maintenance computer which concerns on embodiment of this invention. It is a flowchart which shows the process in the antitheft device in the maintenance management system of the maintenance computer which concerns on embodiment of this invention. It is a flowchart which shows the process in the maintenance management server in the maintenance management system of the maintenance computer which concerns on embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Maintenance management server 2 Anti-theft device 3 Maintenance computer (portable information terminal device) 5 Communication network 11 Storage means 16 Maintenance management table (terminal connection information) 17 Work schedule table (terminal connection information) 21 Positioning Part (position positioning function), 22 communication processing part (communication function), 24 life timer, 35 health check timer, 37 maintenance program.

Claims (3)

A plurality of portable information terminal devices that execute maintenance programs to maintain equipment are connected to a maintenance management server via a communication network, respectively connected to a theft countermeasure device having a positioning function and a communication function. In the maintenance management system for portable information terminal devices,
The portable information terminal device is
A decryption key acquisition means for transmitting a decryption key request together with a terminal ID to the anti-theft device when starting the maintenance program, and acquiring the decryption key and the device ID of the anti-theft device from the anti-theft device;
Means for executing the maintenance program upon obtaining the decryption key by the decryption key obtaining means;
The terminal ID and the transmission time are transmitted to the anti-theft device, the encrypted data of the terminal ID and the transmission time and the device ID is acquired from the anti-theft device, and the encrypted data is decrypted It is decrypted using the key, and it is determined whether the decrypted terminal ID, device ID and transmission time are normal. If the determination result is normal, execution of the maintenance program is continued and the determination result is abnormal. And a health check means for stopping the execution of the maintenance program in the case of
The anti-theft device
Based on the reception of the decryption key request, the current position is acquired by the position measurement function, and the encryption / decryption key request is transmitted to the maintenance management server together with the acquired current position, the terminal ID, and the own device ID. An encryption / decryption key acquisition / transmission means for acquiring an encryption key and a decryption key from the maintenance management server, and transmitting the decryption key and the device ID to the portable information terminal device;
The terminal ID, the transmission time, and the device ID transmitted from the portable information terminal device are encrypted using the encryption key, and the encrypted data of the terminal ID, the device ID, and the transmission time is stored in the portable information. A health check response means for transmitting to the terminal device,
The maintenance management server
Storage means for storing terminal connection information for each portable information terminal device;
Based on the terminal connection information stored in the storage means, it is determined whether the current position, the terminal ID, and the device ID transmitted from the antitheft device are normal, and the determination result is normal Encryption / decryption key transmitting means for transmitting the encryption key and the decryption key to the portable information terminal device when it is determined that the determination result is abnormal, and outputting an alarm when the determination result is determined to be abnormal. A maintenance management system for a portable information terminal device. The portable information terminal device further includes a health check timer,
The maintenance management system for a portable information terminal device according to claim 1, wherein the health check means is executed at intervals set by the health check timer. The anti-theft device further includes an encryption lifetime timer,
3. The maintenance management system for a portable information terminal device according to claim 1, wherein the encryption / decryption key acquisition / transmission means is executed at intervals set by the encryption lifetime timer.

Images