JP2006053740A - Lock device of information instrument and control method thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a stabilized lock device of an information instrument which never locks the information instrument in the case that the information instrument is continuously used even after authentication of a user is not performed. <P>SOLUTION: This device comprises a receiving means 206 for receiving authentication data from a portable electronic instrument 100; a determination means 212 for determining whether the authentication data are proper or not; an operation means for performing input to the information instrument; a detection means 214 for detecting whether the operation means is operated or not; and control means 201 and 213 controlling to lock the information instrument in a case that the determination means determines that received authentication data are not proper, and the detection means also detects that the operation means is not operated. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a lock device for locking an information device, and more particularly to a device for stabilizing the lock state of an information device.

  When a user uses a PC (Personal Computer) or the like to input highly confidential information or create a document, when the user leaves the PC, the data stored in the PC can be freely obtained by a third party. There is a need to prevent it from being viewed, downloaded, tampered with, or erased.

  Therefore, as shown in FIG. 12, a security system (for example, Patent Document 1) including an ID card 10 that transmits identification data and a PC terminal 20 that can receive identification data from the ID card 10, and a lock release device and lock A security system including a mobile phone that can receive identification data from a canceling device is known (for example, Patent Document 2).

  In addition, in such a security system, in order to enhance confidentiality when exchanging identification data, a common key data is shared in advance, and a method for authenticating identification data using the common key data is known. It has been. A conventional example of an identification data authentication method using such common key data will be described with reference to FIG. First, the first random number data generated by the PC terminal 20 is transmitted to the ID card 10 (S1301). Further, the transmitted first random number data is encrypted using the key data stored by itself to create first encrypted data (S1304).

  Next, the ID card 10 encrypts the received first random number data using previously shared key data to create first encrypted data (S1302). Further, the created first encrypted data is transmitted to the PC terminal 20 (S1303). The PC terminal 20 compares the received first encrypted data with the first encrypted data created by the PC terminal 20 (S1305), and if they match, the ID permission is given to the ID card 10 (S1306). That is, the PC terminal 20 can be used.

  Next, the same S is repeated for the second random number data (S1307 to S1312). As described above, in the above-described conventional example, the random number data and the encrypted data to be transmitted / received are different each time. However, as long as the key data and the encryption program are shared in advance, both encryptions can be performed based on any random number data. Since the data match, it is possible to construct an authentication method that is strong against interception of transmitted / received data. If the ciphers do not match as a result of comparing the ciphers, the use of the PC terminal 20 is disabled.

However, with such an authentication method, if an appropriate cipher cannot be received even once due to interference or minor communication failure, the PC terminal cannot be used even if a legitimate user is using the PC terminal. There was the inconvenience that it was said.
JP 2000-99187 (page 5-6, Fig. 2) JP-A-9-64967 (FIG. 1)

SUMMARY OF THE INVENTION An object of the present invention is to provide a lock device for information equipment that can solve the above problems.
In addition, the present invention provides a stabilized information device locking device in which the information device is not locked when the use of the information device is continued even when the user is no longer authenticated. For the purpose.
Furthermore, the present invention provides a locking device for an information device that provides a predetermined restriction on the continuation of use of the information device when the user continues to use the information device and the user is not authenticated The purpose is to provide.

  In order to solve the above problems, a locking device for an information device according to the present invention includes a receiving unit for receiving authentication data from a portable electronic device and a determination for determining whether the authentication data is appropriate. Determining that the authentication data received by the determining means, the detecting means for detecting whether or not the operating means is operating, and the authentication data received by the determining means And a control means for controlling the information device to be locked when the detection means detects that the operation means is not operating.

  In order to solve the above-described problem, the information device locking device according to the present invention is configured to receive the authentication data from the portable electronic device and to determine whether the authentication data is appropriate. The determination means, the operation means for inputting information to the information device, the detection means for detecting whether or not the operation means is operating, and the authentication data received by the determination means are not appropriate. And a control means for controlling to lock the information device when the detection means detects that the operation means is not operating for a predetermined period.

  Further, in the information device locking device according to the present invention, the operation means preferably includes a mouse, a keyboard, a touch panel, a trackball, and a touch pad, and the predetermined period is set differently for each operation of the mouse and the operation of the keyboard. It is preferred that Since the use interval and frequency of the mouse and keyboard differ depending on the type of application executed by the information device, an appropriate period is set.

  In order to solve the above-described problem, the information device locking device according to the present invention is configured to receive the authentication data from the portable electronic device and to determine whether the authentication data is appropriate. The determination means, the operation means for inputting information to the information device, the detection means for detecting whether or not the operation means is operated, and the authentication data received by the determination means are not appropriate. However, when the detection means detects that the operation means is operating, the information device is controlled so as not to lock, and it is detected that the operation means continues to operate beyond the first period. And control means for controlling the information device to be locked when detected.

  Even if it is determined that the authentication data is not appropriate, the operation means is operating when the operation means continues operating beyond the first period without being locked immediately. Control that does not lock indefinitely is not performed, and it is considered that no major trouble will occur even if the information device is locked once, and the information device is locked.

  Furthermore, in the information device locking device according to the present invention, it is preferable that the control means locks the information equipment so that the input by the operation means is invalid. Various locking methods such as turning off the power of the information device and shutting down the OS can be considered. However, when the reuse of the information device is taken into consideration, the control is performed so that the input is invalidated.

  Furthermore, in the information device locking device according to the present invention, it is preferable that the control means displays on the information device display means that the information device is locked. By performing a warning display or the like, it is made known that a specific information device has been locked, thereby making it possible to prevent unauthorized use.

According to the present invention, even when the user authentication cannot be obtained, the information device is not locked immediately, and when the operation means is not operating, the control is performed so that the information device is locked for the first time. While using an information device, it is possible to prevent the information device from being suddenly locked due to interference or poor communication.
Further, according to the present invention, even when the user authentication cannot be obtained, the information device is not immediately locked, and the information device is not locked if the operation unit continues to operate at a predetermined time interval. Therefore, it is possible to prevent the information device from being suddenly locked due to interference or communication failure while a legitimate user is using the information device.
Furthermore, according to the present invention, even if user authentication cannot be obtained, the information device is not locked immediately, and if it is within a predetermined time from when it is determined that user authentication cannot be obtained, the information device is continuously used. It is possible to prevent information devices from being suddenly locked due to interference or poor communication while a legitimate user is using the information devices, and to prevent unauthorized use. It became possible to do.

  Hereinafter, a locking device and a locking method for an information device according to the present invention will be described with reference to the drawings.

  A first embodiment according to the present invention will be described with reference to FIGS. FIG. 1 is a block diagram illustrating a schematic configuration of the mobile electronic device 100 and the information device 200. Here, when the portable electronic device 100 held by the authorized user enters the communicable range with the information device 200, the information device 200 is maintained in a usable state according to an authentication method described later. In addition, when a legitimate portable electronic terminal does not exist within the communication range with the information device 200, the information device 200 is maintained in a locked state by a built-in locking device or mechanism to prevent data theft or unauthorized access by a third party. Is done.

  The portable electronic device 100 mainly includes a control unit 101, a display unit 103 including a liquid crystal display connected to the control unit 101 via a bus 102, a storage unit 104 including various storage media, and a clock operation. An operation unit 105 including a push button for controlling, a transmission / reception unit 106 for receiving random number data and wirelessly transmitting encrypted data, a reference signal generation circuit 107, and a power supply circuit including a battery (not shown) ) Etc.

  The control unit 101 includes a CPU core, a ROM (Read Only Memory) for storing programs, a RAM (Random Access Memory) that is a work area, a timekeeping unit 108 that manages time information, a peripheral circuit, and an encryption unit. DES (Data Encryption Standard) encryption means 110 that is the above algorithm. In addition, the timing unit 108 and the DES encryption unit 110 may be constructed in the control unit 101 by either software, hardware, or both. Further, the storage unit 104 stores key data shared with the information device 200 in advance.

  In the present embodiment, the portable electronic device 100 is configured as a wristwatch type on the assumption that the user always carries it. It may be a mobile phone, a PDA, a small PC terminal or the like, and its size, weight, form, etc. are not particularly limited.

  The information device 200 includes a control unit 201, a display unit 203 configured by a liquid crystal or a CRT display connected to the control unit 201 via a bus 202, a storage unit 204 configured by a storage medium such as a hard disk, a keyboard, a mouse, and the like And the transmission / reception unit 206 for wirelessly transmitting random number data and receiving encrypted data.

  The control unit 201 includes a CPU core, a ROM for storing programs, a RAM as a work area, peripheral circuits, a DES encryption unit 210, a random number data generation unit 211, and a DES encryption unit 210 similar to the portable electronic device 100. Determining means 212 for comparing and comparing the encryption created in step 1 and the encryption received from the portable electronic device 100, and a lock signal generating means 213 for generating a lock signal that disables the second operation unit 205 when the compared ciphers do not match. And a detecting unit 214 for detecting the usage state of the second operation unit 205.

  Note that the DES encryption unit 210, the random number generation circuit 211, the determination unit 212, the lock signal generation unit 213, and the detection unit 214 may be constructed in the control unit 201 by either software, hardware, or both. Further, the storage unit 204 stores key data shared with the portable electronic device 100 in advance.

  The control unit 201 authenticates the portable electronic device 100 using an authentication method to be described later, and controls the operation unit 205 to be usable and maintain the information device 200 in a usable state when it is determined that authentication is permitted. To do. If the control unit 201 determines that the authentication is not possible, the control unit 201 generates a lock signal from the lock signal generation unit 213 so that the operation unit 205 cannot be used and the information device 200 is maintained in the locked state. .

  In the present embodiment, the information device 200 is configured as a PC terminal. However, the information device 200 is not limited thereto, and can be any terminal or device having an operation unit such as a mobile phone or a PDA.

  FIG. 2 is a diagram for explaining a locking method in the information device 200. The flow shown in FIG. 2 is executed by the second control unit 201 according to a program stored in advance in a ROM or the like of the second control unit 201.

  First, the second control unit 201 determines whether or not the portable electronic device 100 has been authenticated by the determination unit 212 (S201). The authentication method will be described later. If authenticated, repeat this step again. That is, while authentication continues, it is determined that a legitimate user is using the information device 200, and the second control unit 201 performs control so that the information device 200 is maintained in an available state.

  Next, when it is not authenticated, it progresses to S202 and the 2nd control part 201 judges whether the 2nd operation part 205 is operating using the detection data from the detection means 214. FIG. When any input signal is output from the keyboard or mouse included in the second operation unit 205, the detection unit 214 outputs detection data indicating that the second operation unit 205 is operating. If it is in operation, the process proceeds to S201 and the above steps are repeated.

  If it is determined in S202 that the second operation unit 205 is not in operation, the process proceeds to S203, and the second control unit 201 controls the lock signal generating unit 213 to generate a lock signal. The lock signal locks the input from the second operation unit 205, thereby invalidating any input from the second operation unit 205 by the user. That is, the information device 200 is maintained in a locked state.

  Next, an example of the authentication procedure (S201 in FIG. 2) will be described with reference to FIG.

  First, the control unit 201 defines n = 3 (S301). Next, the control unit 201 generates random number data by the random number data generation unit 211 (S302), and transmits the random number data generated via the transmission / reception unit 206 to the portable electronic device 100 (S303). Further, the control unit 201 encrypts the transmitted random number data by using the key data stored in the storage unit 204 by the DES encryption unit 210 to create 8-byte encrypted data (A) (S304).

  In the portable electronic terminal 100, the control unit 101 receives random number data (S321). Next, the control unit 101 encrypts the received random number data with the DES encryption unit 110 using the key data stored in the storage unit 104 to create 8-byte encrypted data (B) (S322). Further, the control unit 101 transmits the created 8-byte encrypted data (B) to the information device 200 via the transmission / reception unit 106 (S323).

  Next, the control unit 201 compares the received encrypted data (B) with the encrypted data (A) created by itself, and determines whether or not they match (S306). If they match, the portable electronic device is authenticated (S310).

  If the ciphers do not match in S306, it is determined in S307 whether n = 0. If n = 0 is not satisfied, n = n−1 and n are redefined, the process returns to S302, and S302 to S307 and S321 to S323 are repeated again. If n = 0, it is determined not to authenticate the portable electronic device (S309).

  That is, in the procedure of FIG. 3, when the encryption (A) created by the information device 200 and the received encryption (B) do not match three times in succession, it is determined not to authenticate the portable electronic device. Note that the authentication procedure in FIG. 3 is an example, and other authentication means may be employed.

  As described above, in this embodiment, even when it is determined not to authenticate the portable electronic device 100, the information device 200 is not immediately locked, and after confirming the operation status of the second operation unit 205, Only when the second operation unit 205 is not operated, the lock state is maintained. Therefore, even when the encryption cannot be properly received due to interference or communication failure, the information device 200 can be continuously used when the user is using the PC terminal.

  A second embodiment according to the present invention will be described with reference to FIGS. FIG. 4 is a block diagram illustrating a schematic configuration of the mobile electronic device 100 and the information device 1200. In FIG. 4, the same reference numerals are assigned to the same components as those in FIG.

  The portable electronic device 100 in FIG. 4 has the same configuration as that in FIG. The difference between the information device 1200 in FIG. 4 and the information device 1200 in FIG. 1 is that the second control unit 201 of the information device 1200 has a timer means 215. The timer means 215 can be constructed in the control unit 201 by either software, hardware or both.

  FIG. 5 is a diagram for explaining a locking method in the information device 1200. The flow shown in FIG. 5 is executed by the second control unit 201 according to a program stored in advance in a ROM or the like of the second control unit 201.

  First, the second control unit 201 determines whether the portable electronic device 100 has been authenticated by the determination unit 212 (S501). The authentication method is the same as the method shown in FIG. If authenticated, repeat this step again. That is, while authentication continues, it is determined that a legitimate user is using the information device 200, and the second control unit 201 performs control so that the information device 1200 is maintained in an available state.

  Next, when the authentication is not successful, the second control unit 201 starts a 10-second timer by the timer unit 215 (S502), and the second operation unit 205 operates using the detection data from the detection unit 214. A determination is made as to whether or not it is in progress (S503). When any input signal is output from the keyboard or mouse included in the second operation unit 205, the detection unit 214 outputs detection data indicating that the second operation unit 205 is operating.

  If it is determined in S503 that the second operation unit 205 is not operating, the second control unit 201 determines whether or not the 10-second timer is within 10 seconds (S504). If it is determined that it is not within 10 seconds, the second control unit 201 resets the 10-second timer (S507), and controls the lock signal generating means 213 to generate a lock signal (S508). The lock signal locks the input from the second operation unit 205, thereby invalidating any input from the second operation unit 205 by the user. That is, the information device 1200 is maintained in a locked state.

  If it is determined in S504 that it is within 10 seconds, the second control unit 201 determines whether or not the portable electronic device 100 is authenticated by the determination unit 212 (S505). If it is determined that the authentication is successful, the 10-second timer is reset (S506), and the process returns to step 501. On the other hand, if it is determined that the authentication has not been achieved, the 10-second timer is not reset and the process returns to step 503.

  If it is determined in step S503 that the second operation unit 205 is operating, the second control unit 201 determines whether the portable electronic device 100 has been authenticated by the determination unit 212 (S509). ). If it is determined that the authentication is successful, the 10-second timer is reset (S510), and the process returns to step 501. If it is determined that the authentication has not been obtained, the 10-second timer is reset (S511), and the process returns to step 502.

  As described above, in this embodiment, even when it is determined not to authenticate the portable electronic device 100, the information device 200 is not immediately locked, and the second operation unit 205 is checked after confirming the operation status. Only when the operation unit 205 is not operated, the locked state is maintained. However, it is difficult for the second operation unit 205 to be continuously operated. For example, the user does not continue to operate the keyboard and mouse, and usually, input from the keyboard and mouse is often performed with a predetermined pause period in between. Therefore, in this embodiment, when the second operation unit 205 does not operate for 10 seconds, the information device 1200 is controlled to shift to the locked state. In other words, if the detection unit 214 detects the operation of the second operation unit 205 within 10 seconds, the information device 1200 maintains the usable state. Therefore, even when the encryption cannot be properly received due to interference or communication failure, the information device 1200 can be used continuously when the user is using the information device 1200 in a normal state.

  In the present embodiment, the period during which the second operation unit 205 is determined not to be operated in normal use is set to 10 seconds. However, this is an example, and various modifications can be made. In the above embodiment, the information device 1200 is configured to continue to be used if either the keyboard or the mouse is operated within 10 seconds. However, the information device can be continuously used for each mouse and keyboard. It is also possible to set the period. For example, when using an application for a Japanese word processor, set the continuous use period for the keyboard to be shorter than that of the mouse (for example, 8 seconds), and set the continuous use period for the mouse while using a drawing or drawing application. It is preferable to set it shorter than the keyboard (for example, 8 seconds).

Further, for each user, the typing speed and the typing interval are detected by the detection means 214, stored in the second storage unit 204 and accumulated, and the second control unit 210 performs keyboard and mouse for each user according to the accumulated data. It is also possible to automatically set the continuous use period. For example, if the user determines from the typing speed and the typing interval that the person is an expert in input (the input interval is short), the continuous use period of the keyboard is set short (8 seconds). On the other hand, if it is determined that the person has a long typing interval, it is assumed that the period during which no input is made while looking at the screen is long, and the continuous keyboard use period is set to be long (12 seconds).

  A third embodiment according to the present invention will be described with reference to FIGS. FIG. 6 is a block diagram illustrating a schematic configuration of the mobile electronic device 100 and the information device 2200. In FIG. 6, the same reference numerals are assigned to the same components as those in FIG.

  The portable electronic device 100 in FIG. 6 has the same configuration as that in FIG. The difference between the information device 2200 in FIG. 6 and the information device 200 in FIG. 1 is that the second control unit 201 of the information device 2200 includes a timer unit 215 and a warning unit 216. The timer unit 215 and the warning unit 216 can be constructed in the control unit 201 by either software, hardware, or both.

  FIG. 7 is a diagram for explaining a locking method in the information device 2200. The flow shown in FIG. 7 is executed by the second control unit 201 according to a program stored in advance in a ROM or the like of the second control unit 201.

  First, the second control unit 201 determines whether the portable electronic device 100 has been authenticated by the determination unit 212 (S701). The authentication method is the same as the method shown in FIG. If authenticated, repeat this step again. That is, while authentication continues, it is determined that the authorized user is using the information device 2200, and the second control unit 201 performs control so that the information device 2200 is maintained in an available state.

  Next, when the authentication is not successful, the second control unit 201 starts a 2-minute timer by the timer unit 215 (S702), and further starts a 10-second timer by the timer unit 215 (S503).

  Next, the second control unit 201 uses the detection data from the detection unit 214 to determine whether the second operation unit 205 is operating (S704). When any input signal is output from the keyboard or mouse included in the second operation unit 205, the detection unit 214 outputs detection data indicating that the second operation unit 205 is operating.

  If it is determined in S704 that the second operation unit 205 is not operating, the second control unit 201 determines whether the portable electronic device 100 is authenticated by the determination unit 212 (S705). . If it is determined that the authentication is successful, the 10-second timer and the 2-minute timer are reset (S706), and the process returns to step 701.

  If it is determined in S705 that the authentication has not been obtained, the second control unit 201 determines whether or not the 10-second timer is within 10 seconds (S707). If it is determined that it is within 10 seconds, the second control unit 201 resets the 10-second timer and the 2-minute timer (S708), and performs control so that the lock signal generation means 213 generates a lock signal (S708). S709). The lock signal locks the input from the second operation unit 205, thereby invalidating any input from the second operation unit 205 by the user. That is, the information device 2200 is maintained in a locked state.

  Next, the second control unit 201 displays a warning on the second display unit 203 using the warning unit 216 (S710). An example of the warning display is shown in FIG. By making a warning display as shown in FIG. 8 on the second display unit 203, it is made known that the information device 2200 is in a locked state. FIG. 8 shows a keyboard 217 and a mouse 218 as specific examples of the second operation unit 205.

  If it is determined in S707 that it is within 10 seconds, the second control unit 201 returns to step 704.

  If it is determined in S704 that the second operation unit 205 is operating, the second control unit 201 determines whether the portable electronic device 100 is authenticated by the determination unit 212 (S711). If it is determined that the authentication is successful, the 10-second timer and the 2-minute timer are reset (S712), and the process returns to step 701.

  If it is determined in S711 that the authentication has not been obtained, the second control unit 201 determines whether or not the 2-minute timer is within 2 minutes (S713). If it is within 2 minutes, the 10-second timer is reset (S714), and the process returns to step 703. If it is greater than 2 minutes, the process proceeds to step 708.

  As described above, in this embodiment, even when it is determined not to authenticate the portable electronic device 100, the information device 2200 is not immediately locked, and the second operation unit 205 is checked after confirming the operation status. Only when the operation unit 205 is not operated, the locked state is maintained. However, since it is difficult for the second operation unit 205 to be continuously operated, when the second operation unit 205 does not operate for 10 seconds, the information device 2200 is controlled to shift to the locked state. Furthermore, it is not preferable to keep the information device 2200 available in a state where the portable electronic device 100 is not authenticated just because the operation of the second operation unit 205 is continued. In a state where the information device 2200 is not used, the information device 2200 is controlled to be usable for a maximum of 2 minutes. That is, in the state where the portable electronic device 100 is not authenticated, the information device 2200 shifts to the locked state after 2 minutes even if the second operation unit 205 continues to operate. Therefore, even if the encryption cannot be properly received due to interference or communication failure, if the user is using the information device 1200, the information device 1200 can be used continuously. It was configured to prevent unauthorized use by giving restrictions.

  In the present embodiment, the period during which the second operation unit 205 is determined not to be operated in normal use is set to 10 seconds, and the information apparatus 2200 can be used without the mobile electronic apparatus 100 being authenticated. However, 10 seconds and 2 minutes are examples, and various modifications are possible.

  Another example of the warning display in the extended example using the portable electronic device 100 and the information device 2200 described in FIG. 6 will be described with reference to FIGS.

  FIG. 9 shows a predetermined section (Room 501 on the 5th floor), and shows a portable electronic device 1000 owned by the administrator 120 and a PC terminal A220 connected to the LAN network 150. . Further, six PC terminals B230, PC terminal C240, PC terminal D250, PC terminal E260, PC terminal F270, and PC terminal G280 belonging to the same section are connected to the LAN network 150.

  Each of the PC terminals 220 to 280 has the same configuration as that of the information device 2200 described above, and further has a configuration in which data can be transmitted / received to / from each other via the LAN network 15. The administrator 120 has a portable electronic device 1000 corresponding to his / her PC terminal 220, and the configuration thereof is the same as that of the information electronic device 100 described above.

  Here, when a user having a portable electronic device 1100 that is not permitted to use the PC terminal F270 enters the reception area of the reception unit 275, a lock signal is output according to the flow of FIG. 7, and the PC terminal F270 is locked. It will be maintained in a state. In that case, it is preferable that a warning as shown in FIG. 11A is further displayed on the PC terminal 220 of the administrator 120. In the warning display, the fact that the control unit of the PC terminal F270 has output the lock signal is transmitted to the PC terminal A220 through the LAN network 150, and the control unit of the PC terminal A220 receives the signal and displays a warning. As described above, when any of the plurality of information devices 2200 connected to each other via a network such as a LAN network is locked, the other information device 2200 can confirm the fact as a warning display. As a result, unauthorized use of the information terminal 2200 can be prevented.

  FIG. 10 shows a predetermined conference room (first conference room on the 6th floor), and the PC terminal Z290 arranged in the room is connected to the LAN network 150 to which the PC terminals A220 to G280 are connected. It is connected. In addition, receivers 291 to 296 capable of receiving encrypted data from portable electronic devices are arranged at six locations in the room, and each is connected to a PC terminal Z290.

  Each PC terminal Z290 has the same configuration as that of the information device 2200 described above, and further has a configuration in which data can be transmitted / received to / from each other via the LAN network 15.

  FIG. 10 shows a state where the manager 120 shown in FIG. 9 has moved to a seat in the reception area of the fifth reception unit 292 of the first conference room on the sixth floor for the conference. Therefore, in the situation of FIG. 10, the manager 120 is not enrolled in the 501 room on the 5th floor shown in FIG. Therefore, the destination screen of the administrator 120 is displayed as a warning display on the display unit of the PC terminal A220 in FIG. That is, the location information of the reception unit 292 of the PC terminal Z 290 that has detected the portable electronic device 1000 of the administrator 120 is transmitted to the PC terminal A 220 through the LAN network 150 and managed according to the location information of the reception unit 292. A warning display that displays the destination of the person 120 is displayed. Assume that each receiving unit, position information corresponding to the receiving unit, and correspondence between each member and the portable electronic device are stored in the PC terminal A 220 in advance as a database. Here, each receiving unit 291 to 296 is connected to the PC terminal Z 290, but a device in which each receiving unit is directly connected to the LAN 150 may be used.

  FIGS. 11B and 11C show examples of warning display screens for displaying the destination of the administrator 120 displayed on the display unit of the PC terminal A220 in FIG. The name of the administrator 120 is displayed in 1101 of FIG. 11B and 1104 of FIG. 11C, and the current location of the administrator 120 is displayed in 1102 of FIG. 11B and 1106 of FIG. 11C. In FIG. 11C, the position 1105 is displayed at 1105. Also, 1103 in FIG. 11B and 1107 in FIG. 11C are display switching buttons, which are configured to be able to switch and display between FIG. 11B and FIG. 11C. As described above, it is possible to automatically display a destination of a person having a portable electronic device using a LAN network or the like.

  In the above first to third embodiments, the operating state of the second operation unit 205 is detected to determine whether or not the information device is to be locked. In response to this, it is also possible to determine whether or not the information device is to be locked. For example, in an application such as a DVD player or slide show that continues to be displayed without input from the operation unit, the display of the currently displayed content is completed even when the mobile electronic device cannot be authenticated. Until then, it is preferable not to lock the information device.

  In the above first to third embodiments, the information device is controlled to be kept locked by outputting a lock signal that invalidates the input from the operation unit of the information device. It is also possible to change the locking method of the information device according to the application currently used. For example, in an application such as a DVD player or slide show that continues to display without input from the operation unit, if the mobile electronic device cannot be authenticated, pause (pause) playback of the content. Thus, it is preferable to place the information device in a locked state. This is because when a legitimate user having a portable electronic device temporarily removes his / her seat for a toilet or the like, the user pauses for reproduction of the content and can automatically resume when returning to his / her seat. Also, in consideration of the delay time from the recognition failure to the lock, it is possible to reproduce from the place where the delay time has returned.

It is a block diagram which shows an example of schematic structure of a portable electronic device and information equipment. It is a figure for demonstrating the procedure of the locking method which concerns on the 1st Embodiment of this invention. It is a figure which shows an example of the procedure of the authentication method between a portable electronic device and an information device. It is a block diagram which shows the other example of schematic structure of a portable electronic device and information equipment. It is a figure for demonstrating the procedure of the locking method which concerns on the 2nd Embodiment of this invention. It is a block diagram which shows the further another example of schematic structure of a portable electronic device and information equipment. It is a figure for demonstrating the procedure of the locking method which concerns on the 3rd Embodiment of this invention. It is a figure which shows an example of a warning display. It is a figure which shows an example of the system in which the some portable electronic device and information apparatus which were mutually connected via the network were installed. It is a figure which shows the other example of the system by which the some portable electronic device and information apparatus which were mutually connected via the network were installed. (A)-(c) is a figure which shows the example of the warning display in the system with which the some portable electronic device and information equipment which were mutually connected via the network were installed. It is a figure which shows an example of the conventional authentication system. It is a figure which shows the outline of the conventional authentication method.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Portable electronic device 101 Control part 104 Storage part 105 Transmission / reception part 110 DES encryption means 200, 1200, 2200 Information equipment 201 Control part 204 Storage part 206 Transmission / reception part 210 DES encryption means 211 Random number data generation means 213 Lock signal generation means

Claims (10)

A locking device for information equipment,
Receiving means for receiving authentication data from the portable electronic device;
A determination means for determining whether or not the authentication data is appropriate;
Operating means for inputting to the information device;
Detecting means for detecting whether or not the operating means is operating;
Control is performed to lock the information device when it is determined that the authentication data received by the determination unit is not appropriate and the detection unit detects that the operation unit is not operating. Control means;
An information device locking device comprising: A locking device for information equipment,
Receiving means for receiving authentication data from the portable electronic device;
A determination means for determining whether or not the authentication data is appropriate;
Operating means for inputting to the information device;
Detecting means for detecting whether or not the operating means is operated;
When the determination means determines that the authentication data received is not appropriate, and the detection means detects that the operation means is not operating for a predetermined period, the information device is locked. Control means for controlling;
An information device locking device comprising:   The information device locking device according to claim 2, wherein the operation means includes a mouse and a keyboard.   The information apparatus locking device according to claim 3, wherein the predetermined period is set differently for each operation of the mouse and each operation of the keyboard. A locking device for information equipment,
Receiving means for receiving authentication data from the portable electronic device;
A determination means for determining whether or not the authentication data is appropriate;
Operating means for inputting to the information device;
Detecting means for detecting whether or not the operating means is operated;
If the detection means determines that the authentication data received by the determination means is not appropriate but the detection means detects that the operation means is operating, the information device is controlled not to be locked, and the operation Control means for controlling the information device to be locked when the detection means detects that the means continues to operate beyond the first period;
An information device locking device comprising:   6. The information device locking device according to claim 1, wherein the control unit locks the information device such that an input by the operation unit is invalid.   7. The information device locking device according to claim 1, wherein the control unit displays on the display unit of the information device that the information device has been locked. A method of locking an information device including an operation unit and a detection unit that detects whether the operation unit is operating,
Receive authentication data from portable electronic devices,
Determine whether the authentication data is appropriate,
When it is determined that the authentication data is not appropriate and the detection means detects that the operation means is not operating, the information device is controlled to be locked.
A method for locking an information device, comprising a step. A method of locking an information device including an operation unit and a detection unit that detects whether the operation unit is operating,
Receive authentication data from portable electronic devices,
Determine whether the authentication data is appropriate,
When it is determined that the authentication data is not appropriate, and the detection means detects that the operation means is not operating for a predetermined period, control is performed to lock the information device.
A method for locking an information device, comprising a step. A method of locking an information device including an operation unit and a detection unit that detects whether the operation unit is operating,
Receive authentication data from portable electronic devices,
Determine whether the authentication data is appropriate,
If it is determined that the authentication data is not appropriate, but the detection means detects that the operation means is operating, the information device is controlled not to be locked,
When the detection means detects that the operation means continues to operate beyond the first period although it is determined that the authentication data is not appropriate, the information device is controlled to be locked.
A method for locking an information device, comprising a step.

Images