JP2006338554A - Service using method and terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To adapt a configuration of a terminal to security requirement of a prescribed service. <P>SOLUTION: The terminal 30 is provided with a configuration management section 32 for holding a service category of the prescribed service and configuration information of the prescribed service in association with each other, a configuration selection section 33 for selecting the configuration information of the prescribed service associated with the service category of the prescribed service in accordance with a use request for the prescribed service, a configuration modification section 34 for modifying the configuration of the terminal based on the selected configuration information of the prescribed service, a configuration measurement section 43 for measuring the configuration information after modification, and a configuration verification section 44 for verifying whether the terminal 30 can use the prescribed service by comparing the consistency between the configuration information of the prescribed service and the configuration information after modification. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a service usage method that uses a predetermined service using a terminal, and a terminal that uses the predetermined service.

  Conventionally, in order to provide a predetermined service to the terminal in consideration of the safety of the terminal, a service provider (SP: Service Provider) has investigated using a reliable device in the terminal by a terminal verification device A technique for determining whether or not to provide the predetermined service to the terminal using the configuration of the terminal is known (see, for example, Patent Document 1).

  Here, the investigation result (configuration information indicating the configuration of the terminal) includes a list of hash values of software groups installed in the terminal. Moreover, the digital signature is given to the investigation result by the above-described reliable device.

  The service provider holds a list of valid hash values of the software group installed in the terminal, and after verifying the digital signature attached to the above-described investigation result, the service provider holds the valid hash The presence or absence of tampering is examined by comparing the value with the hash value included in the investigation result.

The service provider can refuse to provide the predetermined service to the terminal when tampering is detected in the specific software or when a hash value of software other than the valid software group is included. .
JP 2003-76585 A

  However, the above-described method has a problem that if the configuration information indicating the configuration of the terminal does not conform to the policy of the terminal verification device, use of a predetermined service using the terminal is hindered.

  For example, if software that is not included in the software list held by the terminal verification device is included in the terminal, the above-described verification fails and the terminal cannot use the predetermined service.

  Further, the conventional terminal has a problem that means for managing a configuration suitable for use of the predetermined service and means for changing the configuration of the terminal to a configuration suitable for use of the predetermined service are not provided. .

  Therefore, the present invention has been made in view of the above points, and an object of the present invention is to provide a service usage method and a terminal capable of adapting the configuration of the terminal to a security request for a predetermined service.

  A first feature of the present invention is a terminal that uses a predetermined service, and is a configuration management that holds a service type of the predetermined service and predetermined service configuration information indicating a configuration suitable for using the predetermined service in association with each other. A configuration selection unit that selects predetermined service configuration information associated with a service type of the predetermined service with reference to the configuration management unit in response to a usage request for the predetermined service, and the selected predetermined Based on service configuration information, a configuration change unit that changes the configuration of the terminal, a configuration measurement unit that measures post-change configuration information indicating the changed configuration of the terminal, the selected predetermined service configuration information, Verifies whether the terminal can use the predetermined service by comparing whether the measured configuration information after the change matches. And summarized in that comprises the that structure verification unit.

  According to this invention, since the configuration of the terminal can be changed to a configuration suitable for the use of the predetermined service, the service provider can safely use the predetermined service after verifying the changed configuration of the terminal. it can.

  Moreover, according to this invention, when it is judged by the above-mentioned verification that the configuration of the terminal has not been changed correctly, it is possible to try changing the configuration of the terminal again.

  1st characteristic of this invention WHEREIN: You may change the structure of the said terminal only when the said structure change part is permitted by the user.

  According to this invention, the user can confirm the configuration of the terminal to be changed, and can cancel the change of the configuration of the terminal when the user does not want to change the configuration of the terminal.

  In the first feature of the present invention, the terminal can use the predetermined service by transmitting a configuration certification request including the service type and the changed configuration information to an external terminal verification device. A verification requesting unit that requests verification as to whether or not.

  According to this invention, the proof that the configuration of the terminal is a configuration corresponding to the predetermined service can be acquired from the external terminal verification device.

  In the first feature of the present invention, a request to use the predetermined service is sent to the server using the configuration certificate included in the configuration certification response received from the external terminal verification device as a response to the configuration certification request. You may provide the structure certification | transmission transmission part to transmit.

  According to this invention, the server can provide the predetermined service to the terminal after confirming that the terminal adopts the configuration corresponding to the predetermined service.

  In the first aspect of the present invention, a session management unit that manages a state of a session related to the predetermined service is provided, and the configuration selection unit refers to the configuration management unit at the start of the session, and Predetermined service configuration information associated with the service type may be selected.

  According to this invention, the predetermined service can be used by changing the configuration of the terminal in synchronization with the session related to the predetermined service.

  In the first aspect of the present invention, in response to a request for use of the predetermined service, the configuration management unit is referred to, predetermined service configuration information associated with a service type of the predetermined service, and current status of the terminal A conflict detection unit that determines whether or not there is a competition relationship with the current configuration information indicating a configuration; and a conflict resolution unit that changes the predetermined service configuration information so as to eliminate the competition relationship, the configuration change unit However, the configuration of the terminal may be changed based on the predetermined service configuration information changed in order to eliminate the competitive relationship.

  According to this invention, it is possible to eliminate the conflicting relationship between the current configuration of the terminal and the configuration corresponding to the predetermined service, and use the service safely.

  In the first feature of the present invention, the predetermined service configuration information is provided with a plurality of constraints, and the contention resolution unit considers the constraints and resolves the contention relationship. The configuration information may be changed.

  According to this invention, even when a competitive relationship has occurred, it is possible to resolve the more appropriate competitive relationship, so that the availability of a predetermined service can be improved and the security requirement can be satisfied. it can.

  In the first aspect of the present invention, a configuration restoration unit is provided that restores the configuration of the terminal based on pre-change configuration information indicating the configuration of the terminal before change at the end of a session related to the predetermined service. Also good.

  According to this invention, the user can return the configuration of the terminal to the configuration before the use of the predetermined service after the use of the predetermined service is completed.

  In the first feature of the present invention, the configuration recovery unit may recover the configuration of the terminal only when it is permitted by the user.

  According to this invention, the user can confirm the configuration of the terminal to be restored, and can cancel the restoration of the configuration of the terminal that is not desired to be restored.

  In the first aspect of the present invention, a recovery conflict detection unit that determines whether or not there is a competition relationship between the current configuration information indicating the current configuration of the terminal and the configuration information before change, and eliminates the competition relationship A recovery conflict resolution unit that changes the configuration information before change, and the configuration recovery unit configures the configuration of the terminal based on the configuration information before change that is changed in order to resolve the conflict relationship. You may recover.

  According to this invention, it is possible to use a predetermined service after eliminating the competitive relationship and safely restoring the terminal configuration.

  In the first aspect of the present invention, a configuration information acquisition unit may be provided that receives the service type and the predetermined service configuration information from an external device.

  According to this invention, the terminal can appropriately acquire the predetermined service configuration information indicating the configuration of the terminal corresponding to the new service and the updated predetermined service configuration information.

  In the first aspect of the present invention, the configuration change unit may include a process control unit that controls a process.

  According to this invention, since the process can be suspended, terminated, restricted, restarted, activated, etc., the configuration of the terminal can be changed appropriately.

  In the first aspect of the present invention, the configuration change unit may include a file control unit that controls programs and data files.

  According to this invention, it is possible to delete, introduce, encrypt, decrypt, temporarily save or restore the program or data file, and to appropriately change the terminal configuration.

  In the first aspect of the present invention, the configuration change unit may include an activation control unit that controls activation of the terminal.

  According to this invention, since it is possible to select the startup mode of the terminal or to execute the startup process for starting only the designated software, the configuration of the terminal can be changed appropriately.

  According to a second aspect of the present invention, there is provided a service usage method for using a predetermined service using a terminal, comprising: a service type of the predetermined service; and predetermined service configuration information indicating a configuration suitable for use of the predetermined service. A step of associating and holding, a step of selecting predetermined service configuration information associated with a service type of the predetermined service in response to a request to use the predetermined service, and based on the selected predetermined service configuration information, The step of changing the configuration of the terminal, the step of measuring post-change configuration information indicating the changed configuration of the terminal, the selected predetermined service configuration information, and the measured post-change configuration information match And verifying whether or not the terminal can use the predetermined service by comparing whether or not to do so. To.

  As described above, according to the present invention, it is an object to provide a service utilization method and a terminal capable of adapting a terminal configuration to a security request for a predetermined service.

(Configuration of terminal according to the first embodiment of the present invention)
With reference to FIG.1 and FIG.2, the structure of the terminal 30 which concerns on the 1st Embodiment of this invention is demonstrated.

  The terminal 30 according to the first embodiment of the present invention is a mobile communication terminal such as a mobile phone, a PDA (Personal Digital Assistant), or a notebook personal computer, and includes a communication interface (not shown).

  Further, the terminal 30 provides a predetermined service to the terminal verification device 10 and the terminal 30 by wireless communication such as a cellular method, a wireless LAN method, a Bluetooth method, and an infrared method, and wired communication such as Ethernet (registered trademark) and a bus. It is possible to communicate with the server 20 that provides

  Here, the server 20 is an arbitrary device such as a PC, a workstation, a mobile communication terminal, an information home appliance terminal, a TV tuner, a fingerprint authentication device, a wireless LAN card, or a GPS device, and communicates with the terminal 30. be able to.

  As shown in FIG. 1, the terminal 30 includes a session management unit 31, a configuration management unit 32, a configuration selection unit 33, a configuration change unit 34, a process control unit 35, a file control unit 36, and an activation control unit. 37, a conflict detection unit 38, a conflict resolution unit 39, a configuration change presentation unit 40, a configuration change verification unit 41, a control unit 42, a configuration measurement unit 43, a configuration verification unit 44, and a verification request unit 45. A configuration proof transmission unit 46, a configuration recovery unit 47, a configuration storage unit 48, a recovery availability determination unit 49, a recovery availability presentation unit 50, a recovery availability inquiry unit 51, a recovery conflict detection unit 52, and a recovery A conflict resolution unit 53 and a configuration information acquisition unit 54 are provided.

  The session management unit 31 is configured to manage session state information indicating the state of a session related to a predetermined service.

  Here, the session state information indicates the start, end, interruption, etc. of the session, and is acquired by notification from an application, middleware, OS, or monitoring means of the session management unit 31 itself.

  The predetermined service is a program for using the server 20. It should be noted that the predetermined service may be implemented in any form or type so that it can take any form such as an application, middleware, or device driver.

  As shown in FIG. 2, the configuration management unit 32 includes a “service type” of a predetermined service and a “predetermined service configuration information (that is, a terminal satisfying a security request for the predetermined service) indicating an appropriate configuration for use of the predetermined service. The information indicating the configuration) ”is stored in association with each other.

  In the example of FIG. 2, the predetermined service configuration information associated with “service 1 (wireless competitive game)” includes “to end a process that does not hold a digital signature by a trusted organization (untrusted process)”, “ A terminal configuration is designated that prohibits the activation of other processes unrelated to the execution of the service 1 during the game of the battle game.

  The predetermined service configuration information associated with “service 2 (external TV tuner device)” includes “communication destination and storage destination of process on terminal and video during TV viewing session by external tuner device”. Terminal configurations such as “restrict access to the frame buffer” and “restrict drivers that can be installed” are designated.

  The predetermined service configuration information associated with “service 3 (banking application)” includes “a plurality of startup modes (normal startup mode for operating a normal application and secure execution for executing an application with high security requirements”. In the terminal having the startup mode, the terminal configuration “restart in the secure startup mode before accessing the banking server” is designated.

  In addition, the configuration management unit 32 stores the current configuration information indicating the current configuration of the terminal 30, the pre-change configuration information and the post-change configuration information indicating the configuration of the terminal 30 before and after the change by the configuration change unit 40. It is configured.

  Specifically, the configuration management unit 32 includes, as the above-described configuration information, a list of activated processes, a list of installed modules (device drivers, etc.), a list of programs and data files in the terminal 30. In addition, the current start mode is stored in a database or table.

  The configuration selection unit 33 is configured to select predetermined service configuration information associated with the service type of the predetermined service with reference to the configuration management unit 32 in response to a predetermined service usage request (service usage event). Has been.

  For example, the configuration selection unit 33 may be configured to select predetermined service configuration information associated with the predetermined service type with reference to the configuration management unit 32 at the start of a session related to the predetermined service. .

  The configuration change unit 34 is configured to change the configuration of the terminal 30 based on the predetermined service configuration information selected by the configuration selection unit 33, that is, to conform to the configuration corresponding to the predetermined service.

  In addition, the configuration change unit 34 may be configured to change the configuration of the terminal 30 in accordance with instructions from the conflict detection unit 38 and the conflict resolution unit 39.

  The configuration changing unit 34 may be configured to change the configuration of the terminal 30 based on the predetermined service configuration information changed in order to eliminate the competitive relationship by the contention solving unit 39.

  In addition, the configuration change unit 34 may be configured to change the configuration of the terminal 30 only when permitted by the user.

  In addition, the configuration change unit 34 instructs the process control unit 35 to perform control for a specific process. Further, the configuration changing unit 34 instructs the file control unit 36 to control the program and the data file. The configuration changing unit 34 also instructs the activation control unit 37 to specify the configuration for starting (restarting) the terminal 30 and to control the activation (restarting) of the terminal 30.

  The process control unit 35 can control suspension, termination, resumption, activation, authority restriction, and the like of a specific process in accordance with an instruction from the configuration change unit 34.

  In response to an instruction from the configuration changing unit 34, the file control unit 36 can control deletion, introduction, encryption, decryption, temporary saving to an external storage, restoration, and the like of programs and data files.

  The terminal activation control unit 37 can select an activation mode of the terminal 30 or execute an activation process for activating only the designated software in accordance with an instruction from the configuration changing unit 34.

  The conflict detection unit 38 refers to the configuration management unit 32 in response to a request for use of a predetermined service (service use event), the predetermined service configuration information associated with the service type of the predetermined service, and the current status of the terminal 30. It is configured to determine whether or not there is a competitive relationship with the current configuration information indicating the configuration of

  For example, the contention detection unit 38 may be configured to determine whether or not the above-described contention relationship exists at the start of a session related to a predetermined service.

  When it is determined that there is no competitive relationship (when the current configuration of the terminal 30, i.e., the configuration corresponding to the service being executed in the terminal 30 is not affected), the configuration changing unit 34 changes the configuration of the terminal. In addition to the service being executed, a predetermined service can be newly used.

  On the other hand, when it is determined that the above-described competitive relationship exists, the conflict resolution unit 38 changes the predetermined service configuration information so as to eliminate the competitive relationship.

  The conflict resolution unit 38 is configured to present the predetermined service configuration information determined to have the above-described competitive relationship to the user, and change the predetermined service configuration information in accordance with the user's instruction.

  Hereinafter, an example of a competitive relationship that may occur in the predetermined service configuration information illustrated in FIG. 2 will be described.

<Competition 1-1>
While the service 1 is being executed, the terminal cannot execute the service x that is not related to the execution of the service 1.

<Competition 1-2>
When the service 1 is activated, the terminal cannot terminate the unreliable service y and cannot activate the service 1.

<Competition 2-1>
Even if the service a is activated while the service 2 is being executed, the terminal cannot perform necessary processing for the service a due to authority restrictions.

<Competition 2-2>
When the service 2 is activated, the terminal cannot terminate the service c using the driver b and cannot activate the service 2.

<Competition 3-1>
Even if the terminal tries to start the service e while the service 3 is being executed, the terminal is operating in the secure start mode, so that a necessary library cannot be used and cannot be started.

<Competition 3-2>
Since the terminal is executing the service f, the terminal cannot be restarted in the secure mode, and the service 3 cannot be started.

  Hereinafter, an example of a means for eliminating the above-described competition relationship will be described. Here, it is assumed that the service being executed is “service i” and the service for starting a session is “service x”.

<Solution 1> Pause / end "Service i"<Solution2> Postpone the start of "Service x" until the end of "Service i"<Solution3> Temporarily restrict authority of "Service i"<Resolve Means 4> Start by restricting authority of “service x” <Resolution means 5> Start a virtual machine customized to the requested terminal configuration Furthermore, a plurality of restrictions (stepwise restrictions) are added to the predetermined service configuration information Can be selected, the terminal configuration can be selected more finely. Such restrictions include, for example, a “soft constraint” that indicates a configuration that does not necessarily need to be adapted to the configuration of the terminal 30 when a competition relationship occurs, or a configuration adaptation of the terminal 30 even when a competition relationship occurs. “Hard constraints” or the like indicating the configuration that must be performed can be considered.

  For example, in the service 1 of FIG. 2, “end an untrusted service that does not hold a digital signature by a trusted organization” and “start an untrusted process unrelated to the execution of the service 1 during a battle game session is prohibited. The configuration of “to do” is “hard constraint”, and the configuration of “prohibiting activation of other services unrelated to the execution of service 1 during the battle game session” is “soft constraint”. .

  In such a case, a part of the competitive relationship (<competition 1-1>) that “service x (unrelated to service 1) cannot be executed while service 1 is being executed” can be resolved, It can be executed only for reliable services.

  The conflict resolution unit 39 changes the predetermined service configuration information so as to eliminate the above-described competition relationship in consideration of the above-described restrictions.

  The configuration change presentation unit 40 is configured to present to the user the configuration scheduled to be changed by the configuration change unit 34.

  The configuration change inquiry unit 41 is configured to make an inquiry to the user as to whether or not the change processing may be performed.

  The configuration change inquiry unit 41 may inquire the user with two choices as to whether or not the change processing may be performed, or whether or not the change processing may be performed for each configuration of the terminal 30. You may ask about.

  The control unit 42 is configured to control each unit provided in the terminal 30. The control unit 42 controls activation of each unit and input / output between the units in accordance with a configuration change procedure and a configuration restoration procedure of the terminal 30 described later.

  The configuration measurement unit 43 is configured to measure post-change configuration information indicating the configuration of the terminal 30 changed by the configuration change unit 34.

  For example, the configuration measurement unit 43 uses a command provided by the OS or a dedicated measurement program to calculate a hash value of the program or data file, obtains a file name or attribute, or is activated by a command provided by the OS. The configuration information after the change described above is obtained by acquiring information on the active process and installed modules, and measuring the history of processes started so far and the history of modules loaded or unloaded so far. Is configured to measure.

  The configuration verification unit 44 compares the predetermined service configuration information selected by the configuration selection unit 33 with the changed configuration information measured by the configuration measurement unit 43, so that the terminal 30 (That is, whether or not the terminal 30 has a configuration corresponding to a predetermined service (a configuration that satisfies the security requirements of the predetermined service)).

  Specifically, the configuration verification unit 44 determines that the changed configuration of the terminal 30 is appropriate for using the predetermined service when there is no different portion between the predetermined service configuration information and the changed configuration information. To do.

  Note that, when it is determined that the changed configuration of the terminal 30 is appropriate for using the predetermined service, the configuration verification unit 44 may create and hold a configuration certificate that proves that fact.

  The verification request unit 45 transmits a configuration certification request including the service type and the changed configuration information to the external terminal verification device 10 to determine whether the terminal 30 can use the predetermined service. It is configured to require verification.

  In addition, the verification request unit 45 receives a configuration proof response from the external terminal verification device 10 as a response to the configuration proof request.

  The configuration certification request may include “nonce” or a digital signature in order to prevent falsification or replay of configuration information.

  When such verification is successful, the configuration certificate response includes the configuration certificate by the terminal verification device 10, and when verification fails, the configuration certificate response does not include the configuration certificate. A response message indicating that the configuration of 30 is nonconforming and a message indicating a nonconforming portion are included.

  The configuration certification transmission unit 46 is configured to transmit a use request for a predetermined service to the server 20 using the above-described configuration certificate.

  Here, by verifying the received configuration certificate, the server 20 can confirm that the terminal 30 is reliable, and can select whether or not to provide a predetermined service.

  The configuration restoration unit 47 is configured to restore the configuration of the terminal 30 based on the pre-change configuration information stored in the configuration management unit 32 at the end of the session related to the predetermined service.

  Specifically, the configuration recovery unit 47 resumes a suspended or terminated process, loads or unloads a module, sets the authority given to the process as usual, reinstalls a program or data file, The terminal 30 is configured to be restored by restarting the terminal 30 in the normal mode.

  In addition, the configuration recovery unit 47 may be configured to recover the configuration of the terminal 30 only when permitted by the user.

  Further, the configuration recovery unit 47 may be configured to recover the configuration of the terminal 30 based on the pre-change configuration information changed by the recovery conflict resolution unit 53 in order to cancel the competitive relationship as will be described later. Good.

  The recovery possibility determination unit 49 is configured to determine whether or not such recovery is possible before attempting to recover the configuration of the terminal 30.

  For example, the recovery possibility determination unit 49 determines whether or not such recovery can be executed in recovery means such as process control, module control, file control, and startup control.

  The recovery availability presentation unit 50 is configured to present to the user the configuration of the recovery target generated by the recovery availability determination unit 49.

  The restoration availability inquiry unit 51 is configured to inquire about whether or not the restoration processing may be performed to the user.

  The restoration availability inquiry unit 51 may make an inquiry to the user with two choices as to whether or not the restoration process may be performed, or inquires whether or not the restoration process may be performed for each configuration. Also good.

  The recovery conflict detection unit 52 is configured to determine whether or not there is a competitive relationship between the current configuration information and the configuration information before change.

  The recovery conflict resolution unit 53 is configured to change the pre-change configuration information so as to eliminate the above-described conflict relationship.

  The configuration information acquisition unit 54 is configured to receive a service type and predetermined service configuration information from an external device.

  For example, the configuration information acquisition unit 54 acquires a service type and predetermined service configuration information from the terminal verification device 10 through a network, an external storage, and the like, and passes them to the configuration management unit 32 for holding.

  Note that the configuration information acquisition unit 54 may periodically acquire the service type and the predetermined service configuration information. In addition, the configuration information acquisition unit 54 performs the service type and the predetermined service configuration on demand based on a request from a user, a request from an operator such as an ISP (Internet Service Provider) that manages the terminal 30, or a communication carrier. Information may be acquired.

(Operation of the service use method according to the first embodiment of the present invention)
With reference to FIGS. 3 to 7, the operation of the service utilization method according to the first embodiment of the present invention will be described.

  First, a procedure for changing the configuration of the terminal 30 in the service using method according to the first embodiment of the present invention will be described with reference to FIGS.

  As shown in FIG. 3, in step S101, the terminal 30 transmits a service connection request (not including a configuration certificate) for requesting the server 20 to provide a predetermined service. 20, it is instructed to adopt a configuration that satisfies the security requirements of a predetermined service.

  In step S <b> 102, the terminal 30 changes the configuration of the terminal 30 to a configuration that satisfies a security requirement for a predetermined service. Hereinafter, with reference to FIG. 4, the change process will be described in detail.

  As shown in FIG. 4, in step S102a, the control unit 42 is triggered by a service use event such as activation of a predetermined application, connection to a predetermined server, connection to a predetermined external device, or the like. 33 is called, and the service type of the predetermined service is passed as a parameter. Here, the configuration selection unit 33 selects predetermined service information indicating an appropriate configuration for use of the predetermined service from the configuration management unit 32 using the passed service type as a key.

  In step S102b, the configuration management unit 32 stores current configuration information indicating the current configuration of the terminal.

  In steps S102c and S102d, the configuration change unit 34 is called, the configuration change presentation unit 40 presents the configuration (change item) to be changed to the user, and the configuration change inquiry unit 41 changes the configuration. Confirm whether or not to execute.

  If the change is permitted by the user, the procedure proceeds to step S102e. If the change is rejected by the user (or if no change is necessary in the first place), the procedure does not change the configuration of the terminal. finish.

  In step S102e, the configuration changing unit 34 executes a changing process for the configuration of the terminal that is permitted to be changed by the user. In step S102f, the configuration measuring unit 43 displays changed configuration information indicating the changed configuration of the terminal. taking measurement.

  In step S102g, the configuration verification unit 44 verifies whether the configuration of the terminal 30 conforms to the predetermined service by comparing the measured post-change configuration information with the selected predetermined service configuration information. .

  If the verification result is unsuccessful, the terminal configuration change process may be attempted again (step S102i).

  If the verification result is successful, the configuration request issued by the external terminal verification device 10 is required to use the predetermined service, and therefore the verification request unit 45 sends the verification request to the terminal verification device 10 in step S103. Then, a configuration certification request including the service type of the predetermined service and the changed configuration information is transmitted to request the above-described verification. In step S104, a configuration certificate response including the configuration certificate is received from the external terminal verification device 10. Receive.

  The configuration certification transmission unit 46 transmits a service connection request including the configuration certificate to the server 20 in step S105, and receives a service connection response in step S106.

  In steps S107 to S109, the terminal 30 connects to the server 20 and uses a predetermined service in response to reception of the service connection response.

  Here, with reference to FIG. 5, a description will be given of a procedure in the case where a competitive relationship is generated between the predetermined service configuration information and the current configuration information.

  As shown in FIG. 5, in step S201, the control unit 42 is triggered by a service use event such as activation of a predetermined application, connection to a predetermined server, connection to a predetermined external device, or the like. 33 is called, and the service type of the predetermined service is passed as a parameter. Here, the configuration selection unit 33 selects predetermined service information indicating an appropriate configuration for use of the predetermined service from the configuration management unit 32 using the passed service type as a key.

  In step S202, the configuration management unit 32 stores current configuration information indicating the current configuration of the terminal.

  In steps S <b> 203 and S <b> 204, the conflict detection unit 38 compares the predetermined service configuration information with the current configuration information to determine whether there is a conflict relationship.

  When it is determined that there is no competitive relationship (when the configuration corresponding to the service being executed is not affected), the procedure proceeds to step S207.

  On the other hand, if it is determined that there is a competitive relationship, in steps S205 and S206, the conflict resolution unit 39 generates configuration information for avoiding the competitive relationship (that is, a predetermined service for avoiding the competitive relationship). Change configuration information).

  When the competitive relationship is resolved, the configuration change unit 34 is called in step S207, the configuration change presentation unit 40 presents the configuration (change item) to be changed to the user, and the configuration change inquiry unit 41 Then, it is confirmed whether or not the configuration change can be executed. Hereinafter, the procedure proceeds to S102d shown in FIG.

  On the other hand, if there is no configuration capable of eliminating the competitive relationship, the conflict resolution unit 39 presents the fact to the user in step S208, and the procedure ends.

  Secondly, with reference to FIG. 6, a procedure for restoring the configuration of the terminal 30 in the service utilization method according to the first embodiment of the present invention will be described.

  As shown in FIG. 6, in step S301, the control unit 42 is triggered by a service use event such as termination of a predetermined application, disconnection from a predetermined server, or attachment / detachment of a predetermined external device. Start up.

  Then, the configuration recovery unit 47 calls the recovery possibility determination unit 49 to determine whether recovery is possible before attempting to recover the configuration of the terminal 30.

  In step S302, the recovery availability presentation unit 50 presents the recovery availability item (recovery target configuration) generated by the recovery availability determination unit 49 to the user.

  In step S303, the recovery possibility inquiry unit 51 inquires of the user whether or not the recovery process may be performed.

  In the case where the user has rejected the restoration of the configuration of the terminal 30, this procedure ends the restoration of the configuration of the terminal 30 and ends.

  On the other hand, if the recovery of the configuration of the terminal 30 is permitted by the user, the configuration recovery unit 47 performs a recovery process on the recovery item (recovery target configuration) selected by the user in step S305.

  Thirdly, with reference to FIG. 7, a procedure for the terminal 30 to acquire the configuration information in the service usage method according to the first embodiment of the present invention will be described.

  As shown in FIG. 7, in step S401, the control unit 42 periodically or on demand based on a request from a user or a request from an operator such as an ISP or a telecommunications carrier that manages a terminal, The configuration information acquisition unit 54 is called to receive a service type and predetermined service configuration information from an external device such as the terminal verification device 10.

  After connecting to the external device, the configuration information acquisition unit 54 issues a configuration information acquisition request in step S402 to acquire configuration information including a set of service type and predetermined service configuration information.

  In step S403, the configuration management unit 32 holds the configuration information.

(Operations and effects of the terminal and service usage method according to the present embodiment)
According to the terminal 30 and the service usage method according to the present embodiment, the configuration of the terminal 30 is changed so as to conform to the predetermined service, and the changed configuration of the terminal 30 is verified, and then the predetermined service is safely used. be able to.

  According to the terminal 30 and the service usage method according to the present embodiment, the user's operation burden is reduced by performing change processing and recovery processing on the configuration of the terminal, triggered by the start and end of a session related to the predetermined service. The predetermined service can be used safely.

  According to the terminal 30 and the service usage method according to the present embodiment, a plurality of services can be safely used by detecting, avoiding, and resolving the competitive relationship related to the security request of the predetermined service.

  According to the terminal 30 and the service usage method according to the present embodiment, when it is determined that the configuration of the terminal 30 has not been changed correctly by the above-described verification, it is possible to try changing the configuration of the terminal 30 again.

  According to the terminal 30 and the service utilization method according to the present embodiment, the user can confirm the configuration of the terminal 30 to be changed, and when the user does not want to execute the configuration change of the terminal 30, the terminal 30 configuration changes can be canceled.

  According to the terminal 30 and the service usage method according to the present embodiment, it is possible to acquire from the external terminal verification device 10 proof that the configuration of the terminal 30 is a configuration corresponding to a predetermined service.

  According to the terminal 30 and the service usage method according to the present embodiment, the server 20 provides the predetermined service to the terminal 30 after confirming that the terminal 30 has a configuration corresponding to the predetermined service. be able to.

  According to the terminal 30 and the service use method according to the present embodiment, the predetermined service can be used by changing the configuration of the terminal 30 in synchronization with the session related to the predetermined service.

  According to the terminal 30 and the service usage method according to the present embodiment, even when a competitive relationship related to a security request for a predetermined service has occurred, a more appropriate competitive relationship can be resolved. Improve service availability and meet security requirements.

  According to the terminal 30 and the service use method according to the present embodiment, the user can return the configuration of the terminal 30 to the configuration before using the predetermined service after the use of the predetermined service is completed.

  According to the terminal 30 and the service utilization method according to the present embodiment, the user can confirm the configuration of the terminal 30 to be restored, and can cancel the restoration of the configuration of the terminal that is not desired to be restored.

  According to the terminal 30 and the service usage method according to the present embodiment, it is possible to use a predetermined service after eliminating the competitive relationship and safely restoring the configuration of the terminal.

  According to the terminal 30 and the service usage method according to the present embodiment, the terminal 30 appropriately acquires predetermined service configuration information indicating the configuration of the terminal 30 corresponding to a new service and updated predetermined service configuration information. be able to.

  According to the terminal 30 and the service usage method according to the present embodiment, the process can be paused or terminated, authority restricted, resumed, activated, or the like, so that the configuration of the terminal 30 can be changed appropriately.

  According to the terminal 30 and the service utilization method according to the present embodiment, the program and the data file can be deleted, introduced, encrypted, decrypted, temporarily saved to an external storage, restored, and the like. Can be changed appropriately.

  According to the terminal 30 and the service utilization method according to the present embodiment, the activation mode of the terminal 30 can be selected or the activation process for activating only the designated software can be executed. Can be changed.

(Second embodiment of the present invention)
As shown in FIG. 8, the terminal 30 according to the second embodiment of the present invention is configured to have a function of a virtual machine monitor (VMM). A plurality of virtual machines (VMs) can be activated in the terminal 30 by the function of the VMM, and FIG. 8 shows a management VM (virtual machine), a normal mode VM, and a secure mode VM.

  The terminal 30 according to the second exemplary embodiment of the present invention, except that each unit 31 to 54 of the terminal 30 is arranged in a management VM (virtual machine) and a plurality of virtual machines are started by the terminal 30. This is the same as that of the terminal 30 according to the first embodiment of the present invention.

  According to the terminal 30 according to the second embodiment of the present invention, it is possible to coexist different terminal configurations for each service by the virtual machine monitor, thereby avoiding a competitive relationship related to security requests of a plurality of services. be able to. For example, for the service 3 that requests activation in the secure activation mode, the secure mode VM can be activated and the service 3 can be executed while maintaining the configuration in the normal mode VM. That is, it is possible to avoid a competitive relationship between the service 3 and the service in the normal mode VM.

  Further, according to the terminal 30 according to the second embodiment of the present invention, when using a predetermined service, by configuring a virtual machine suitable for the predetermined service without changing the current configuration of the terminal, You can use the service safely.

It is a block diagram which shows the structure of the terminal which concerns on the 1st Embodiment of this invention. It is a figure which shows an example of the structure information which shows the structure of the terminal which concerns on the 1st Embodiment of this invention. It is a sequence diagram which shows operation | movement of the service utilization method which concerns on the 1st Embodiment of this invention. 4 is a flowchart illustrating a procedure for changing the configuration of a terminal in the service utilization method according to the first embodiment of the present invention. It is a figure which shows the procedure which cancels | releases a competitive relationship in the service utilization method which concerns on the 1st Embodiment of this invention. 5 is a flowchart showing a procedure for restoring the configuration of a terminal in the service utilization method according to the first embodiment of the present invention. 5 is a flowchart illustrating a procedure for acquiring predetermined service configuration information in the service utilization method according to the first embodiment of the present invention. It is a block diagram which shows the structure of the terminal which concerns on the 2nd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Terminal verification apparatus 20 ... Server 30 ... Terminal 31 ... Session management part 32 ... Configuration management part 33 ... Configuration selection part 34 ... Configuration change part 35 ... Process control part 36 ... File control part 37 ... Startup control part 38 ... Conflict detection Unit 39 ... Conflict resolution unit 40 ... Configuration change presentation unit 41 ... Configuration change verification unit 42 ... Control unit 43 ... Configuration measurement unit 44 ... Configuration verification unit 45 ... Verification request unit 46 ... Configuration certificate transmission unit 47 ... Configuration restoration unit 48 ... Configuration storage unit 49 ... Recoverability determination unit 50 ... Restorability display unit 51 ... Restorability reference unit 52 ... Recovery conflict detection unit 53 ... Recovery conflict resolution unit 54 ... Configuration information acquisition unit

Claims (15)

A terminal that uses a predetermined service,
A configuration management unit that associates and holds a service type of the predetermined service and predetermined service configuration information indicating a configuration appropriate for use of the predetermined service;
A configuration selection unit that selects predetermined service configuration information associated with a service type of the predetermined service with reference to the configuration management unit in response to a request for use of the predetermined service;
A configuration changing unit for changing the configuration of the terminal based on the selected predetermined service configuration information;
A configuration measurement unit for measuring post-change configuration information indicating the changed configuration of the terminal;
Configuration verification for verifying whether or not the terminal can use the predetermined service by comparing whether or not the selected predetermined service configuration information matches the measured post-change configuration information A terminal.   The terminal according to claim 1, wherein the configuration changing unit changes the configuration of the terminal only when permitted by a user.   Requesting verification of whether or not the terminal can use the predetermined service by transmitting a configuration certification request including the service type and the changed configuration information to an external terminal verification device The terminal according to claim 1, further comprising a verification request unit.   A configuration certificate transmission unit configured to transmit a request to use the predetermined service to the server by using the configuration certificate included in the configuration certificate response received from the external terminal verification apparatus as a response to the configuration certificate request; The terminal according to claim 3. A session management unit for managing a state of a session related to the predetermined service;
5. The configuration selection unit according to claim 1, wherein the configuration selection unit selects predetermined service configuration information associated with the predetermined service type with reference to the configuration management unit at the start of the session. The terminal according to one item. In response to a request for using the predetermined service, the configuration management unit is referred to between the predetermined service configuration information associated with the service type of the predetermined service and the current configuration information indicating the current configuration of the terminal. A conflict detection unit that determines whether or not there is a competitive relationship;
A conflict resolution unit that changes the predetermined service configuration information so as to resolve the conflict relationship;
The said structure change part changes the structure of the said terminal based on the said predetermined service structure information changed in order to eliminate the said competitive relationship, The Claim 1 thru | or 5 characterized by the above-mentioned. Terminal. The predetermined service configuration information is provided with a plurality of restrictions,
The terminal according to claim 6, wherein the contention resolution unit changes the predetermined service configuration information so as to resolve the contention relationship in consideration of the restriction.   8. A configuration restoration unit that restores the configuration of the terminal based on configuration information before change indicating a configuration of the terminal before change at the end of a session related to the predetermined service. The terminal as described in any one of.   The terminal according to claim 8, wherein the configuration recovery unit recovers the configuration of the terminal only when permitted by a user. A recovery conflict detection unit that determines whether or not there is a competitive relationship between the current configuration information indicating the current configuration of the terminal and the configuration information before change;
A recovery conflict resolution unit that changes the configuration information before change so as to resolve the conflict relationship;
The terminal according to claim 8 or 9, wherein the configuration recovery unit recovers the configuration of the terminal based on the pre-change configuration information that has been changed to eliminate the competitive relationship.   The terminal according to any one of claims 1 to 10, further comprising a configuration information acquisition unit that receives the service type and the predetermined service configuration information from an external device.   The terminal according to claim 1, wherein the configuration change unit includes a process control unit that controls a process.   The terminal according to claim 1, wherein the configuration change unit includes a file control unit that controls a program and a data file.   The terminal according to any one of claims 1 to 13, wherein the configuration change unit includes an activation control unit that controls activation of the terminal. A service usage method for using a predetermined service using a terminal,
Associating and holding a service type of the predetermined service and predetermined service configuration information indicating a configuration suitable for use of the predetermined service;
Selecting predetermined service configuration information associated with a service type of the predetermined service in response to a request for use of the predetermined service;
Changing the configuration of the terminal based on the selected predetermined service configuration information;
Measuring post-change configuration information indicating the changed configuration of the terminal;
Verifying whether the terminal can use the predetermined service by comparing whether the selected predetermined service configuration information matches the measured post-change configuration information; A service utilization method characterized by comprising:

Images