JP2006340224A - Apparatus and method for managing identification information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an apparatus for managing identification information capable of managing identification information to be a base of distributing communication charges, and safely generating the base of charge distribution. <P>SOLUTION: An identification information management section 10 of a communication terminal 100 comprises: a program execution request receiving part 11 for receiving an execution request of a program; a program information request transmitting part 12 for transmitting an information request of the program; a program information receiving part 13 for receiving program information; an identification information selecting part 15 for selecting identification information to be utilized by a process generated by executing the program based on the program information; and a corresponding data output part 14 for outputting the selected identification information and corresponding data of the process. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an identification information management apparatus and an identification information management method for managing identification information used by a program.

  Mobile communication services such as mobile phones and PHS are important communication media with employees who are on the road or on business trips, and companies often lend business phones contracted under the corporate name by companies. In this case, since the communication fee is charged to the contractor, the employee should use the communication service only for business purposes, but it is a problem that it cannot be confirmed whether the communication service is not used for private purposes.

  In companies that do not lend employees a business phone, the mobile phone of each employee is often used as a business communication means when going out. In this case, the employee will be responsible for paying for the use of the communication service used for work, or the charge for the communication charge will be divided into business use and private use, and both will be charged to the company. large.

As described above, in order to solve the problem caused by the fact that the service usage fee bearer and the entity that benefits from the use of the service do not necessarily match, the communication fee is charged by managing the communication service usage time for each purpose of use. There has been disclosed a communication charge distribution system that distributes and charges for minutes and private expenses (see, for example, Patent Document 1). In this system, the communication service usage day, time zone, and communication partner number are used as a basis for distributing communication charges between public and private expenses.
JP 2002-354158 A

  In actual work, it is not always possible to distinguish between business / private use by day of the week, time of day, and communication partner number. For example, in the system described in Patent Document 1, urgent business communication is required on a day of the week / time different from normal business hours, or calls to business partners that are not pre-registered are classified as business use. Instead, it will be allocated to private use.

  In addition, communication services using mobile phones are not limited to telephones, but include Internet access, email, and application downloads. However, in the above system, data communication charges other than those for telephones cannot be distributed, and the usage is limited. For example, when a business application is installed on a mobile phone terminal and the company server data is accessed from the application, the communication charge cannot be appropriately distributed.

  Therefore, in view of the above problems, the present invention provides an identification information management apparatus and an identification information management method that can manage identification information that is a basis for distributing communication charges and that can safely generate a basis for distribution of charges. With the goal.

  In order to achieve the above object, the first feature of the present invention is: (a) a program execution request receiving unit that receives a program execution request; (b) a program information request transmitting unit that transmits a program information request; (C) a program information receiving unit for receiving program information, (d) an identification information selecting unit for selecting identification information used by a process generated by executing the program based on the program information, and (e) the selected The gist of the present invention is an identification information management device including identification information and a correspondence data output unit that outputs process correspondence data.

  According to the identification information management device according to the first feature, identification information used by a process executing the program can be recorded in association with the process based on information belonging to the program. Corresponding identification information can be assigned. This makes it possible to classify the communication service usage history for each program attribute such as usage.

  The identification information management apparatus according to the first feature includes a normal operation proof request transmitting unit that transmits a normal operation proof request of a request source process of program file execution, and a normal operation proof of receiving a normal operation proof of the request source process. A reception unit and a normal operation proof verification unit for verifying the correctness of the normal operation proof may be further provided, and the corresponding data output unit may output the corresponding data when the correct normal operation proof is received.

  According to this identification information management apparatus, it is possible to verify that the operation of the process has not been altered at the time of identification information allocation. This makes it possible to prevent the use of identification information due to falsification of the program code. For example, by replacing the business program code with a malicious code, it is possible to prevent an attack that makes it possible to use the identification information assigned to the business program code.

  The correspondence data output unit of the identification information management apparatus according to the first feature may output the correspondence data between the selected identification information, the process, and the normal operation certificate when the correct normal operation certificate is received. Good.

  According to this identification information management apparatus, the normal operation proof of the process can be recorded in association with the process and the identification information. When the identification information is used by the process, the normal operation verification of the process is completed by referring to the corresponding data. Therefore, it is not necessary to refer to the verification data separately for the normal operation verification, and the identification information is efficiently obtained. Is possible.

  In the identification information management apparatus according to the first feature, the program information includes information declaring the function used by the program, and the identification information selection unit selects the identification information according to the function used by the program. Then, the correspondence data output unit may output correspondence data between the selected identification information, the process, and the function used by the program.

  According to this identification information management apparatus, even if it is a single program, identification information can be allocated for every utilization function, and it becomes possible to manage a communication service utilization log | history with a finer granularity.

  In addition, the identification information management apparatus according to the first feature further includes a usage purpose determination information receiving unit that receives determination information that is a basis for determining the usage purpose of the program, and the identification information selection unit is also based on the determination information. Identification information may be selected.

  According to this identification information management apparatus, it is possible to set allocation of identification information for each purpose of use for programs used for different purposes. As a result, it is possible to manage the communication service usage history for each usage even for the same program.

  The identification information management apparatus according to the first feature includes an identification information allocation request receiving unit that receives a request for using identification information, an identification information acquiring unit that acquires identification information corresponding to a use request source process from correspondence data, An identification information transmission unit that transmits the acquired identification information may be further included.

  According to this identification information management apparatus, identification information assigned at the time of program execution can be responded to a request for using identification information. This makes it possible to control identification information used when using a communication service or the like in accordance with the attributes of the program, and realize management of service usage history according to usage.

  The identification information management apparatus according to the first feature includes an operation history acquisition request transmission unit that transmits an operation history acquisition request of a use request source process, and an operation history acquisition start notification reception that receives an operation history acquisition start notification. And the identification information transmission unit may determine whether or not the identification information can be transmitted based on an operation history acquisition start result.

  According to this identification information management apparatus, the use of identification information can be permitted on the condition that process execution history is acquired. This makes it possible to record a communication service usage history for specific identification information. For example, it is possible to record a history when using a communication service using business identification information.

  The identification information management apparatus according to the first feature includes a normal operation proof request transmitting unit that transmits a normal operation proof request of a use request source process, a normal operation proof receiving unit that receives a normal operation proof, and a normal operation proof. A normal operation proof verification unit that verifies the validity of the identification information transmission unit, and the identification information transmission unit may determine whether or not the identification information can be transmitted based on the verification result of the verification of the operation proof.

  According to this identification information management apparatus, it is possible to verify the normal operation of the request source process prior to permission to use the identification information. If the operation of the process has been altered by altering the execution code, etc., the use of the identification information is denied. This makes it possible to prevent unauthorized use of identification information due to execution code falsification.

  The identification information management apparatus according to the first feature includes an event notification receiving unit that receives an event notification, a process of acquiring identification information corresponding to the event, and acquiring process information corresponding to the identification information from the corresponding data. An information acquisition unit, a notification target process selection unit that selects an event notification target process based on the acquired process information, and a process information transmission unit that outputs the selected process information may be further included.

  According to this identification information management apparatus, when an event to which identification information is assigned can be detected, the event notification destination process can be specified based on the identification information. As a result, the notification destination process can be selected according to the use of the identification information, such as an incoming call to the business identification information.

  The identification information management apparatus according to the first feature includes a normal operation proof request transmitting unit that transmits a normal operation proof request for a notification target process, a normal operation proof receiving unit that receives a normal operation proof, and a normal operation proof A normal operation proof verification unit that verifies the validity may further be provided, and the corresponding data output unit may output the selected process information when the validity of the operation proof can be verified.

  According to this identification information management device, the identification information management device can verify the normal operation of the notification destination process prior to event notification to the process. When the process is operating abnormally, event notification is not performed. As a result, it is possible to avoid threats such as information leakage and impersonation due to incoming calls to processes that are operating illegally due to tampering of executable code.

  In the identification information management apparatus according to the first feature, the process may use a service, and the identification information may be information for determining a billing destination for the service usage fee.

  The second feature of the present invention is that (a) a step of receiving a program execution request, (b) a step of transmitting a program information request, (c) a step of receiving program information, and (d) a program An identification information management method including a step of selecting identification information used by a process generated by execution of a program based on the information; and (e) outputting correspondence data of the selected identification information and the process. Is the gist.

  According to the identification information management method according to the second feature, the identification information used by the process executing the program can be recorded in association with the process based on the information belonging to the program. Corresponding identification information can be assigned. This makes it possible to classify the communication service usage history for each program attribute such as usage.

  ADVANTAGE OF THE INVENTION According to this invention, the identification information management apparatus and identification information management method which can manage the identification information used as the basis for distributing a communication charge, and can produce | generate the basis of a charge distribution safely can be provided.

  Next, embodiments of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals. However, it should be noted that the drawings are schematic.

<First Embodiment>
In the first embodiment, an identification information management apparatus and an identification information management method for managing identification information that is a basis for distributing communication charges will be described. This identification information is associated with the program when the program executed on the communication terminal uses the communication service, and is used to classify the use of the communication service in the communication terminal or the server on the network side. .

(Communication service billing distribution system)
In the communication service billing distribution system according to the first embodiment, as shown in FIG. 1, a communication terminal 100, a communication service management server 300, and a billing server 400 are connected via a mobile communication network 200. In this system, a plurality of identification information (telephone number, subscriber identification information, mail address, etc.) corresponding to the purpose of use is assigned to the communication terminal.

  The communication service management server 300 has a function of managing a communication service provision history for each identification information used by the communication terminal 100, and the charging server 400 has a function of distributing the communication service usage fee to a charging destination defined for each identification information. Is provided.

  On the communication terminal 100, programs for different purposes (business programs such as groupware, private programs such as communication games) and programs that can be used for a plurality of purposes (telephone programs and the like) are executed. Therefore, when a program uses a communication service, it is possible to select identification information to be assigned to the program according to its use. For example, when making a call from groupware, a business telephone number is assigned as a caller number.

  As shown in FIG. 2, a communication terminal 100 having a function of managing identification information assigned when using a communication service in accordance with program attribute information such as a usage includes an identification information management unit 10, a process 20, a file storage unit 30, and a program. A file management unit 40, identification information correspondence data 50, and an identification information storage unit 60 are provided.

  The process 20 designates an executable program file and makes an execution request for the program file. For example, in a UNIX (registered trademark) system, a specific program file can be executed (change the execution context of a process) by specifying a file path name as an argument to the exec function.

  The file storage unit 30 stores executable program files. The file storage unit 30 may be an internal storage device such as a RAM or an external storage device such as an HD.

  The identification information management unit 10 includes a program execution request reception unit 11, a program information request transmission unit 12, a program information reception unit 13, a corresponding data output unit 14, and an identification information selection unit 15.

  The program execution request receiving unit 11 receives a program execution request from the process 20. The program information request transmission unit 12 requests program information from the program file management unit 40. The program information receiving unit 13 receives program information from the program file management unit 40. The identification information selection unit 15 selects identification information used by a process generated by executing the program based on the program information. The correspondence data output unit 14 outputs correspondence data (identification information correspondence data 50) between the process and the identification information.

  The program file management unit 40 has a function of managing attribute information of a program file and transmitting designated attribute information in response to a request from the identification information management unit 10. For example, in the UNIX (registered trademark) system, a descriptor (purpose_descriptor) that can specify the purpose of the program is added to the inode structure (see FIG. 13), and the program file management unit 40 uses the descriptor as attribute information. Send as.

It is also possible to declare the type of communication service used by the program in the program information. In this case, the identification information management unit 10 can also assign identification information for each communication service used for a single process and record it in the corresponding data (see FIG. 15).
The identification information storage unit 60 stores identification information correspondence data. The identification information storage unit 60 may be an internal storage device such as a RAM or an external storage device such as an HD.

  Further, as shown in FIG. 3, the identification information management unit 10 has a function for requesting a normal operation proof of a process (a normal operation proof request transmission unit 16, a normal operation proof reception unit 17, a normal operation proof verification unit 18, a program validity A configuration further comprising a proof verification unit 19) is also possible.

  When the program execution request receiving unit 11 receives the program execution request, the normal operation proof request transmitting unit 16 requests the process 20 or the process normal operation verification unit 70 to verify the normal operation of the request source process of program file execution.

  The normal operation proof receiving unit 17 receives the normal operation proof from the process 20 or the process normal operation verification unit 70.

  The normal operation proof verification unit 18 verifies the normal operation proof and transmits it to the corresponding data output unit 14.

  The program validity proof verification unit 19 receives program information from the program information reception unit 13 and verifies the validity proof of the program.

  When the corresponding data output unit 14 receives a valid normal operation certificate, the corresponding data output unit 14 outputs the identification information corresponding data 50 including the selected identification information, the process, and the normal operation certificate.

  The normal operation of the process can be verified, for example, by checking whether the execution code arranged in the text segment of the process memory area has been tampered with. It is possible to inspect the presence or absence of falsification by calculating the hash value of the execution code in advance and comparing it with the hash value calculated at the time of normal operation verification. Further, by adding the hash value of the execution code to the correspondence data between the process and the identification information (see FIG. 15), it is possible to efficiently obtain the hash value for verifying normal operation when using the identification information described later. It becomes possible.

(Identification information management method)
The identification information management method according to the first embodiment will be described with reference to FIG. FIG. 4 is a diagram showing a sequence from a program execution request to identification information corresponding data output.

  First, in step S <b> 101, the process 20 transmits an execution request having program file specifying information such as a file path name as an argument to the identification information management apparatus 10.

  Next, in step S102, the identification information management apparatus 10 requests a normal operation proof of the process when receiving the execution request. In this case, the identification information management apparatus 10 transmits a normal operation certification request to the process 20 or the process normal operation verification unit 70.

  Next, in step S103, the process 20 generates a normal operation certificate, and transmits a normal operation certificate to the identification information management apparatus 10 in step S104.

  On the other hand, if the identification information management apparatus 10 receives the normal operation proof, the identification information management apparatus 10 verifies the validity of the normal operation proof in step S105, and continues the process when the validity is confirmed. If the normal operation proof cannot be received or the validity cannot be confirmed, the processing is interrupted.

  Next, in step S106, the identification information management apparatus 10 transmits an information request for the designated program file to the program file management apparatus 40. The program file management device 40 acquires the specified file information from the file storage unit 30 in step S107, and transmits it to the identification information management device in step S108.

  Next, in step S109, the identification information management apparatus 10 that has received the program file information selects corresponding identification information based on the program file attribute information such as usage in step S110. In step S111, correspondence data (identification information correspondence data 50) between the selected identification information and the process is output.

  Steps S102 to S105 may be omitted.

(Action and effect)
In the communication service charge distribution system according to the first embodiment, the program communicates based on the attribute information attached to the program file in order to enable the distribution of the usage fee charge destination according to the use purpose of the communication service. Identification information to be assigned when using the service can be switched. The communication service management server 300 manages the communication records for each identification information, so that it is possible to distribute charges according to the usage purpose even if the communication service is used from the same terminal.

  Further, according to the identification information management apparatus and the identification information management method according to the first embodiment, the identification information used by the process executing the program can be recorded in association with the process based on the information belonging to the program. It is possible to assign identification information according to program attributes when using a communication service by a process. This makes it possible to classify the communication service usage history for each program attribute such as usage.

  Further, by providing the normal operation proof request transmitting unit 16, the normal operation proof receiving unit 17, and the normal operation proof verifying unit 18, when the correct normal operation proof can be received, the identification information corresponding data is output. be able to. For this reason, the identification information management apparatus 10 can verify that the operation of the process has not been altered when the identification information is allocated. This makes it possible to prevent the use of identification information due to falsification of the program code. For example, by replacing the business program code with a malicious code, it is possible to prevent an attack that makes it possible to use the identification information assigned to the business program code.

  When the identification information management apparatus 10 can receive a valid normal operation certificate, it can output the correspondence data between the selected identification information, the process, and the normal operation certificate. For this reason, the identification information management apparatus 10 records the normal operation proof of the process in association with the process and the identification information. When the identification information is used by the process, the normal operation verification of the process is completed by referring to the corresponding data. Therefore, it is not necessary to refer to the verification data separately for the normal operation verification, and the identification information is efficiently obtained. Is possible.

<Second Embodiment>
(Communication service billing distribution system)
In the second embodiment, when an event that requires allocation of identification information occurs, such as when a process uses a communication service, the function of acquiring and outputting identification information allocated to the process according to the identification information corresponding data described above is provided. A communication terminal further provided will be described.

  As shown in FIG. 5, the communication terminal 100 according to the second embodiment includes an identification information management unit 10, a process 20, a file storage unit 30, a program file management unit 40, identification information correspondence data 50, and an identification information storage unit. 60. An identification information utilization event detection unit 80 is provided.

  The identification information utilization event detection unit 80 detects a communication service utilization request from the process 20 and requests the identification information management unit 10 to assign identification information.

  The identification information management unit 10 includes a program execution request reception unit 11, a program information request transmission unit 12, a program information reception unit 13, a corresponding data output unit 14, an identification information selection unit 15, an identification information transmission unit 101, and an identification information allocation request reception. Unit 102 and identification information acquisition unit 103.

  The identification information allocation request receiving unit 102 receives a request from the identification information utilization event detection unit 80, and acquires information on a process that uses the identification information.

  The identification information acquisition unit 103 acquires identification information corresponding to the process information by referring to the identification information correspondence data 50.

  The identification information transmission unit 101 transmits the identification information to the identification information utilization event detection unit 80.

  For example, consider a case where it is detected that a process with pid = 43245 has called telephony_api shown in FIG. The implementation code of telephony_api activates the identification information use event detection unit and notifies the process ID (pid) of the caller. The identification information use event detection unit 80 transmits an identification information allocation request including the received pid to the identification information management unit 10. The identification information allocation request reception unit 102 transfers the received pid to the identification information acquisition unit. The identification information acquisition unit 103 acquires identification information corresponding to pid = 43245 based on the correspondence data illustrated in FIG. 15 and notifies the identification information transmission unit 101 of the identification information. The identification information transmission unit 101 transmits the acquired identification information to the identification information utilization event detection unit 80.

  The request transmitted by the identification information use event detection unit 80 may store the communication service name requested by the process in addition to the pid. In this case, the identification information acquisition unit acquires identification information of an entry whose pid and communication service name match.

  Since the other configuration of the communication terminal 100 is the same as that of the first embodiment, the description thereof is omitted here.

(Action and effect)
According to the identification information management device and the identification information management method according to the second embodiment, the program information includes information declaring the function used by the program, and the identification information selection unit 15 uses the function used by the program. The identification information can be selected according to the information, and the correspondence data between the selected identification information, the process, and the function used by the program can be output. For this reason, even if it is a single program, identification information can be allocated for every utilization function, and it becomes possible to manage a communication service utilization history with a finer granularity.

<Third Embodiment>
(Communication service billing distribution system)
In the third embodiment, a communication terminal further including a function for requesting normal operation verification of a process using identification information will be described.

  As shown in FIG. 6, the communication terminal 100 according to the third embodiment includes an identification information management unit 10, a process 20, a file storage unit 30, a program file management unit 40, identification information correspondence data 50, and an identification information storage unit. 60, an identification information utilization event detection unit 80, and a process operation history acquisition unit 90.

  The process operation history acquisition unit 90 acquires a process operation history.

  The identification information management unit 10 includes a program execution request reception unit 11, a program information request transmission unit 12, a program information reception unit 13, a corresponding data output unit 14, an identification information selection unit 15, a normal operation certification request transmission unit 16, and a normal operation certification. Receiving unit 17, normal operation proof verifying unit 18, program validity proof verifying unit 19, identification information transmitting unit 101, identification information allocation request receiving unit 102, identification information acquiring unit 103, operation history acquisition start notification receiving unit 104, operation history An acquisition request transmission unit 105 is provided.

  The normal operation proof request transmission unit 16 transmits a normal operation proof request to the process or the process normal operation verification unit. The normal operation proof received by the normal operation proof receiving unit 17 is verified for validity by the normal operation proof verification unit 18. If a valid proof of normal operation is received, transmission of identification information is permitted. For example, the normal operation proof is a hash value of the text segment of the process, and the text segment of the process has not been tampered with since the corresponding data is set by comparing the hash value with the hash value of the corresponding entry shown in FIG. I can confirm that.

  In addition, the identification information management unit 10 further includes a function of assigning identification information on condition that the operation history is acquired.

  The operation history acquisition request transmission unit 105 transmits an operation history acquisition request for a process that uses identification information to the process operation history acquisition unit 90.

  The operation history acquisition start notification receiving unit 104 receives a history acquisition start notification from the process operation history acquisition unit 90, and permits transmission of identification information when the notification is received.

  Since the other configuration of the communication terminal 100 is the same as that of the first embodiment, the description thereof is omitted here.

(Identification information management method)
Next, an identification information management method according to the third embodiment will be described with reference to FIG. FIG. 7 is a diagram showing a sequence from a communication service use request by a process to assignment of identification information.

  First, in step S201, the identification information utilization event detection unit 80 detects generation of a communication service utilization request by a process. The communication service use request is, for example, a telephone call or a mail transmission request.

  Next, in step S202, the identification information utilization event detection unit 80 transmits an identification information allocation request for the process to the identification information management apparatus.

Next, in step S203, the identification information management apparatus 10 refers to the identification information correspondence data 50, and acquires identification information that can be assigned to the process in step S204. Next, in step S205, the identification information management apparatus 10 Requests proof of normal operation of the process. In step S206, the process 20 generates a normal operation proof. In step S <b> 207, the process 20 transmits a normal operation certificate to the identification information management apparatus 10. In step S208, the identification information management apparatus 10 verifies the normal operation proof.

  In step S209, the identification information management apparatus 10 requests the process operation history acquisition apparatus 90 to acquire the operation history of the process. In step S210, the process operation history acquisition device 90 starts acquiring operation history. In step S211, the process operation history acquisition device 90 transmits an operation history acquisition start notification to the identification information management device 10.

  Next, in step S212, an identification information allocation request response including the identification information is transmitted to the identification information utilization event detection unit 80.

  Note that the processing in steps S205 to 211 may be omitted.

(Action and effect)
According to the identification information management apparatus and the identification information management method according to the third embodiment, the apparatus further includes the operation history acquisition request transmission unit 105 and the operation history acquisition start notification reception unit 104, and is based on the operation history acquisition start result. Thus, it is possible to determine whether or not the identification information can be transmitted. As described above, the identification information management apparatus 10 permits the use of the identification information on condition that the process execution history is acquired. This makes it possible to record a communication service usage history for specific identification information. For example, it is possible to record a history when using a communication service using business identification information.

  Further, the apparatus further comprises a normal operation proof request transmission unit 16, a normal operation proof reception unit 17, and a normal operation proof verification unit 18, and determines whether or not the identification information can be transmitted based on the verification result of the operation proof. Can do. As described above, the identification information management apparatus 10 verifies the normal operation of the request source process prior to permitting the use of the identification information. If the operation of the process has been altered by altering the execution code, etc., the use of the identification information is denied. This makes it possible to prevent unauthorized use of identification information due to execution code falsification.

<Fourth embodiment>
(Communication service billing distribution system)
In the fourth embodiment, a communication terminal further including a function of acquiring identification information corresponding to event notification will be described.

  As shown in FIG. 8, the communication terminal 100 according to the fourth embodiment includes an identification information management unit 10, a process 20, a file storage unit 30, a program file management unit 40, identification information correspondence data 50, and an identification information storage unit. 60, a process activation event processing unit 91 is provided.

  The process activation event processing unit 91 transmits an event notification to the event notification receiving unit 111 and receives process information selected from the event notification transmitting unit.

  The identification information management unit 10 includes a program execution request reception unit 11, a program information request transmission unit 12, a program information reception unit 13, a corresponding data output unit 14, an identification information selection unit 15, a process information transmission unit 110, and an event notification reception unit 111. A notification target process selection unit 112 and a process information acquisition unit 113.

  The event notification receiving unit 111 receives an event notification from the process activation event processing unit 91.

  The process information acquisition unit 113 acquires identification information corresponding to the event, and acquires process information corresponding to the identification information from the identification information correspondence data 50.

  The notification target process selection unit 112 selects an event notification target process based on the acquired process information.

  The process information transmission unit 110 transmits the selected process information to the process activation event processing unit 91.

  Since the other configuration of the communication terminal 100 is the same as that of the first embodiment, the description thereof is omitted here.

  Further, as shown in FIG. 9, the identification information management unit 10 has a function for requesting a normal operation proof of a process (a normal operation proof request transmission unit 16, a normal operation proof reception unit 17, a normal operation proof verification unit 18, a program validity A configuration further comprising a proof verification unit 19) is also possible.

(Identification information management method)
An identification information management method according to the fourth embodiment will be described with reference to FIGS.

  FIG. 10 is a diagram illustrating a sequence from event notification to event processing.

  First, in step S <b> 301, the process activation event processing device 91 transmits an event notification having identification information as an argument to the identification information management device 10.

  Next, in step S302, the identification information management apparatus 10 refers to the identification information correspondence data 50, and acquires correspondence data in step S303. In step S304, the identification information management apparatus 10 selects an event notification target process based on the acquired process information.

  Next, in step S305, the identification information management apparatus 10 requests a normal operation proof of the process. In this case, the identification information management apparatus 10 transmits a normal operation certification request to the process 20 or the process normal operation verification unit 70.

  Next, in step S306, the process 20 generates a normal operation certificate, and transmits a normal operation certificate to the identification information management apparatus 10 in step S307.

  On the other hand, when the identification information management apparatus 10 receives the normal operation proof, the identification information management apparatus 10 verifies the validity of the normal operation proof in step S308, and continues the process when the validity is confirmed. If the normal operation proof cannot be received or the validity cannot be confirmed, the processing is interrupted.

  Next, in step S309, the identification information management device 10 transmits event notification process information to the process activation event processing device 91, and in step S310, the process activation event processing device 91 notifies the process 20 of the event. In step S311, the process 20 processes an event.

  Note that the processes in steps S305 to S308 may be omitted.

  FIG. 11 is a diagram showing a sequence from a program execution request to identification information corresponding data output.

  First, in step S401, the process 20 transmits an execution request having program file specifying information such as a file path name as an argument to the identification information management apparatus 10.

  Next, in step S402, the identification information management apparatus 10 requests a normal operation proof of the process when receiving the execution request. In this case, the identification information management apparatus 10 transmits a normal operation certification request to the process 20 or the process normal operation verification unit 70.

  Next, in step S403, the process 20 generates a normal operation certificate, and transmits a normal operation certificate to the identification information management apparatus 10 in step S404.

  On the other hand, if the identification information management apparatus 10 receives the normal operation proof, the identification information management apparatus 10 verifies the correctness of the normal operation proof in step S405, and continues the process when the correctness is confirmed. If the normal operation proof cannot be received or the validity cannot be confirmed, the processing is interrupted.

  Next, in step S406, the identification information management apparatus 10 transmits an information request for the designated program file to the program file management apparatus 40. The program file management device 40 acquires the specified file information from the file storage unit 30 in step S407, and transmits it to the identification information management device in step S408.

  Next, in step S409, the identification information management apparatus 10 that has received the program file information selects a corresponding caller number based on the program file attribute information such as usage in step S410. In step S411, correspondence data (caller number correspondence data 92) between the selected process and the caller number is output.

  Note that the processing in steps S402 to S405 may be omitted.

  FIG. 12 is a diagram showing a sequence from a caller ID use request until a call is made using the permitted identification information.

  First, in step S <b> 501, the process 20 transmits a caller number use request to the identification information management apparatus 10.

  Next, in step S502, the identification information management apparatus 10 refers to the caller ID corresponding data 92, and acquires the corresponding data in step S503.

  Next, in step S504, the identification information management apparatus 10 requests a normal operation proof of the process. In this case, the identification information management apparatus 10 transmits a normal operation certification request to the process 20 or the process normal operation verification unit 70.

  Next, in step S505, the process 20 generates a normal operation certificate, and transmits a normal operation certificate to the identification information management apparatus 10 in step S506.

  On the other hand, when the identification information management apparatus 10 receives the normal operation proof, the identification information management apparatus 10 verifies the validity of the normal operation proof in step S507, and continues the process when the validity is confirmed. If the normal operation proof cannot be received or the validity cannot be confirmed, the processing is interrupted.

  Next, in step S508, the identification information management apparatus 10 transmits a caller number use request response to the process 20, and in step S509, the process 20 makes a call using the permitted identification number. Etc.

(Action and effect)
According to the identification information management device and the identification information management method according to the fourth embodiment, the event notification reception unit 111, the process information acquisition unit 113, the notification target process selection unit 112, and the process information transmission unit 110 are further provided. By providing, when an event to which identification information is assigned is detected, an event notification destination process can be specified based on the identification information. As a result, the notification destination process can be selected according to the use of the identification information, such as an incoming call to the business identification information.

  Further, the apparatus further includes a normal operation proof request transmitting unit 16, a normal operation proof receiving unit 17, and a normal operation proof verification unit 18, and when the correctness of the operation proof can be verified, the selected process information can be output. it can. In this way, the identification information management apparatus verifies the normal operation of the notification destination process prior to event notification to the process. When the process is operating abnormally, event notification is not performed. As a result, it is possible to avoid threats such as information leakage and impersonation due to an incoming call to a process that performs an illegal operation due to falsification of an execution code or the like.

<Fifth embodiment>
(Communication service billing distribution system)
The communication terminal 100 according to the first embodiment selects identification information to be assigned to a program based on attribute information given to a program file, and enables communication charge allocation for each program. In the communication service billing distribution system according to the fifth embodiment, it is possible to distribute the usage fee according to the use of the communication service using a single program.

  FIG. 14 is a diagram showing a configuration of the communication terminal 100 of the communication service billing distribution system according to the fifth embodiment. In addition to the components of the communication terminal 100 described in the first embodiment (FIG. 2), a use purpose determination information acquisition unit 93 is further provided.

  The identification information management unit 10 further includes a usage purpose determination information receiving unit 115. The identification information selection unit 15 selects identification information to be assigned to the program based on the attribute information of the program and the usage purpose determination information.

  The operation functions of the constituent elements other than those described above are the same as those of the communication terminal 100 according to the first embodiment.

  The usage purpose determination information receiving unit 115 is a function called from a running program (process), for example, and is notified of a flag corresponding to user authentication information by the program. In the case of a program that requires login with a user ID in a corporate system when used for business purposes, the purpose of use of the program can be determined by whether or not the user ID is logged in. Therefore, the program notifies the usage purpose determination information acquisition unit 93 of a flag indicating the login status of the user. The use purpose determination information receiving unit 115 receives the flag and notifies the identification information selecting unit 15. The identification information selection unit 15 selects identification information according to an identification information selection rule registered in advance. For example, if the program can be used for both business use and private use, and identification information selection according to the purpose of use of the program is required, if the flag indicating that the user is logged in is true, the program It follows the rule of assigning identification information for business use and assigning private identification information if the flag is false.

(Action and effect)
The system according to the fifth embodiment makes it possible to distribute usage fee billing destinations according to usage when a single program used for different usage uses a communication service. The communication terminal 100 according to the fifth embodiment switches the identification information assigned when the program uses the communication service, based on the attribute information attached to the program file and the information acquired by the use purpose determination information acquisition unit 93. It has a function. The communication service management server 300 manages communication records for each piece of identification information, so that even if the communication service is used by the same program on the same terminal, it is possible to distribute charges according to usage.

1 is a configuration block diagram of a communication service charge distribution system according to a first embodiment. FIG. It is a block diagram of the configuration of the communication terminal according to the first embodiment (No. 1). It is a block diagram of the configuration of the communication terminal according to the first embodiment (No. 2). It is a sequence diagram which shows the identification information management method which concerns on 1st Embodiment. It is a block diagram of a communication terminal according to the second embodiment. It is a structure block diagram of the communication terminal which concerns on 3rd Embodiment. It is a sequence diagram which shows the identification information management method which concerns on 3rd Embodiment. It is a block diagram of the configuration of a communication terminal according to a fourth embodiment (part 1). It is a block diagram of the configuration of a communication terminal according to the fourth embodiment (No. 2). It is a sequence diagram which shows the identification information management method which concerns on 4th Embodiment (the 1). It is a sequence diagram which shows the identification information management method which concerns on 4th Embodiment (the 2). It is a sequence diagram which shows the identification information management method which concerns on 4th Embodiment (the 3). It is an example of the attribute information which concerns on the 1st-5th embodiment. It is a structure block diagram of the communication terminal which concerns on 5th Embodiment. It is an example of the identification information corresponding | compatible data which concern on 1st-5th embodiment.

Explanation of symbols

10: Identification information management unit (identification information management device)
DESCRIPTION OF SYMBOLS 11 ... Program execution request reception part 12 ... Program information request transmission part 13 ... Program information reception part 14 ... Corresponding data output part 15 ... Identification information selection part 16 ... Normal operation certification request transmission part 17 ... Normal operation certification reception part 18 ... Normal Operation proof verification unit 19 ... Program validity verification unit 20 ... Process 30 ... File storage unit 40 ... Program file management unit (program file management device)
DESCRIPTION OF SYMBOLS 50 ... Identification information corresponding | compatible data 60 ... Identification information storage part 70 ... Process normal operation verification part 80 ... Identification information utilization event detection part 90 ... Process operation history acquisition part (process operation history acquisition apparatus)
91 ... Process startup event processing unit (process startup event processing device)
92 ... Caller ID correspondence data 93 ... Usage purpose determination information acquisition unit 100 ... Communication terminal 101 ... Identification information transmission unit 102 ... Identification information allocation request reception unit 103 ... Identification information acquisition unit 104 ... Operation history acquisition start notification reception unit 105 ... Operation history acquisition request transmission unit 110 ... Process information transmission unit 111 ... Event notification reception unit 112 ... Notification target process selection unit 113 ... Process information acquisition unit 115 ... Usage purpose determination information reception unit 200 ... Mobile communication network 300 ... Communication service management server 400 ... Billing server

Claims (12)

A program execution request receiver for receiving a program execution request;
A program information request transmitter for transmitting an information request for the program;
A program information receiving unit for receiving the program information;
Based on the program information, an identification information selection unit that selects identification information used by a process generated by execution of the program;
An identification information management apparatus comprising: the selected identification information and a corresponding data output unit that outputs corresponding data of the process. A normal operation proof request transmission unit for transmitting a normal operation proof request of the request source process of the program file execution;
A normal operation proof receiving unit for receiving a normal operation proof of the request source process;
A normal operation proof verification unit for verifying the correctness of the normal operation proof,
The identification information management apparatus according to claim 1, wherein the correspondence data output unit outputs the correspondence data when a valid normal operation certificate is received.   The said corresponding data output part outputs the corresponding data of the said selected identification information, the said process, and the said normal operation proof, when a legitimate normal operation proof is received. Identification information management device. The program information includes information declaring functions used by the program,
The identification information selection unit selects identification information according to a function used by the program,
The identification information management according to claim 1, wherein the correspondence data output unit outputs correspondence data between the selected identification information, the process, and a function used by the program. apparatus. A use purpose determination information receiving unit for receiving determination information that is a basis for determining the purpose of use of the program;
The identification information management apparatus according to claim 1, wherein the identification information selection unit selects identification information based on the determination information. An identification information allocation request receiving unit that receives a request for using identification information;
An identification information acquisition unit that acquires identification information corresponding to the use request source process from the correspondence data;
The identification information management apparatus according to claim 1, further comprising: an identification information transmission unit that transmits the acquired identification information. An operation history acquisition request transmitter for transmitting an operation history acquisition request of the use request source process;
An operation history acquisition start notification receiving unit for receiving the operation history acquisition start notification,
The identification information management apparatus according to claim 6, wherein the identification information transmission unit determines whether or not the identification information can be transmitted based on an operation history acquisition start result. A normal operation proof request transmitter for transmitting a normal operation proof request of the use request source process;
A normal operation proof receiving unit for receiving a normal operation proof;
A normal operation proof verification unit for verifying the correctness of the normal operation proof,
The identification information management apparatus according to claim 6, wherein the identification information transmission unit determines whether the identification information can be transmitted based on a validity verification result of the operation proof. An event notification receiver for receiving event notifications;
A process information acquisition unit that acquires identification information corresponding to the event, and acquires information of a process corresponding to the identification information from the corresponding data;
A notification target process selection unit that selects a notification target process of the event based on the acquired process information;
The identification information management apparatus according to claim 1, further comprising: a process information transmission unit that outputs the selected process information. A normal operation proof request transmission unit for transmitting a normal operation proof request of the notification target process;
A normal operation proof receiving unit for receiving a normal operation proof;
A normal operation proof verification unit for verifying the correctness of the normal operation proof,
10. The identification information management apparatus according to claim 9, wherein the correspondence data output unit outputs the selected process information when the validity of the operation proof can be verified. The process uses a service,
The identification information management apparatus according to claim 1, wherein the identification information is information for determining a billing destination of a service usage fee. Receiving a program execution request;
Sending an information request for the program;
Receiving the program information;
Selecting identification information used by a process generated by execution of the program based on the program information;
An identification information management method comprising: outputting the selected identification information and correspondence data of the process.

Images