JP2006352561A - System and method for security automatic control - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a security automatic control system and a security automatic control method which carry out automatic control of security in a mobile communication terminal based on an appropriate judgmental standard. <P>SOLUTION: The schedule match discriminator 4 of the mobile communication terminal 10 discriminates whether an actual action of a user agrees to a schedule stored in a schedule storage 8 or not. When the user's action is discriminated not to agree with the schedule, a security control unit 6 controls security operation based on a security performance rule according to a security pattern defined beforehand. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an automatic security control system and an automatic security control method for performing security measures in a mobile communication terminal.

Conventional security measures such as loss, misplacement, or theft of mobile communication terminals, such as a method of accepting operations to lock the mobile communication terminal or set the answering machine mode only when a call is received from a specific phone number, A technique for locking the operation of a mobile communication terminal by a remote lock request is known (see, for example, Patent Documents 1, 2, and 3).
However, the above method should be used when the user is unaware of the loss of the mobile communication terminal or when remote control is impossible because the mobile communication terminal exists in a place where radio waves do not reach. It is not possible to prevent the mobile communication terminal from being illegally used or leaking information in the mobile communication terminal.

  As a technique for solving such a problem, for example, in Patent Document 4, when security management of a mobile communication terminal is performed, a security level is associated with a position in advance and stored in a predetermined table and detected. A technique for starting a program and controlling access to files and folders based on a security level corresponding to the specified position is described. Japanese Patent Application Laid-Open No. 2004-228561 describes a technique for canceling / setting security when the current time reaches a scheduled time.

Japanese Patent Laid-Open No. 2000-188783 JP 2003-333656 A Japanese Patent Laid-Open No. 2003-224886 JP 2003-099400 A JP 2004-040155 A

In Patent Document 4, the security is automatically controlled based on the position of the mobile communication terminal and in Patent Document 5 based on the time as a criterion. Although the user has not actually lost or misplaced the mobile communication terminal, usage restrictions such as a lock are frequently applied, and the convenience for the user is significantly reduced. Thus, it is not sufficient to perform automatic security control using only the position or only the time as a criterion.
The present invention has been made in view of the above problems, and it is an object of the present invention to provide an automatic security control system and an automatic security control method for automatically controlling security in a mobile communication terminal based on an appropriate determination criterion. And

  In order to solve the above-mentioned problem, the invention according to claim 1 is a security automatic control system including at least a mobile communication terminal, a schedule storage means for storing a schedule of a user who owns the mobile communication terminal, and an actual user It is determined by the schedule match determination means that determines whether or not the action matches the schedule stored in the schedule storage means, and the schedule match determination means determines that the actual action of the user does not match the schedule. In such a case, the mobile communication terminal is provided with a security control means for performing predetermined security control.

  According to the present invention, when it is determined that the user's actual behavior does not match the schedule, the mobile communication terminal exists outside the communication range in order to perform predetermined security control in the mobile communication terminal. In addition, even if the user who owns the mobile communication terminal does not notice the loss of the mobile communication terminal, it is possible to automatically control the security in the mobile communication terminal based on an appropriate criterion.

According to a second aspect of the present invention, in the automatic security control system according to the first aspect, a security operation for storing a security operation rule corresponding to a security pattern associated with each schedule stored in the schedule storage unit A security operation rule acquisition unit that acquires a security operation rule corresponding to a security pattern associated with a schedule determined to be not matched by the rule storage unit and the schedule match determination unit from the security operation rule storage unit The security control means controls the security operation in the mobile communication terminal based on the security action definition acquired by the security action definition acquisition means.
According to this invention, by associating an appropriate security pattern with each schedule, fine security control can be performed according to the contents of each schedule.

  According to a third aspect of the present invention, the automatic security control system according to the first or second aspect further comprises a date / time detecting means for detecting a current date / time and a position detecting means for detecting the position of the mobile communication terminal. The schedule stored in the schedule storage unit includes a date and time and a planned location of the user at the date and time, and the schedule determination unit stores the date and time detected by the date and time detection unit in the schedule storage unit. If the position of the mobile communication terminal detected by the position detection means is within the scheduled location of the user at the date and time when the date and time of the scheduled schedule are met, it is determined that the user's behavior matches the schedule It is characterized by that.

  According to this invention, when the current date and time corresponds to the date and time of the schedule stored in the schedule storage means, if the position of the mobile communication terminal is within the planned location of the user at the date and time, the schedule determination means Therefore, it is possible to determine whether or not the user's behavior exactly matches the schedule based on the date and time and the position.

According to a fourth aspect of the present invention, in the security automatic control system according to the second or third aspect, the security operation rule includes a rule relating to access restriction to data stored in the mobile communication terminal, and the movement. It includes at least one of regulations for restricting outgoing and incoming calls at a communication terminal.
According to the present invention, when the user's action does not match the schedule, the access to the data stored in the mobile communication terminal is restricted based on the security operation regulations, or the outgoing / incoming call at the mobile communication terminal If the user forgets to place the mobile communication terminal, or if it is stolen or lost, it prevents the mobile communication terminal from leaking information, and the mobile communication terminal is used illegally. Can be prevented.

  According to a fifth aspect of the present invention, in the automatic security control method for controlling security in a mobile communication terminal, a schedule of a user who owns the mobile communication terminal and a security pattern associated with the schedule are set by input from the outside. Security pattern setting step, a schedule match determination step for determining whether or not the user's actual action matches the schedule set in the schedule setting step, and the user's actual action in the schedule match determination step If it is determined that the mobile communication terminal does not match the schedule, the mobile communication terminal determines the security pattern corresponding to the security pattern associated with the schedule determined not to match in the security pattern setting step. Providing security automatic control method characterized by comprising a security control step of performing Yuriti control.

  According to the present invention, when a user's schedule and a security pattern to be associated with the schedule are set in advance, and it is determined that the user's actual behavior does not match the schedule, the mobile communication terminal becomes the security pattern. Since the corresponding security control is performed, the security control according to the preset security pattern can be finely performed based on an appropriate determination criterion.

  As described above, according to the present invention, when it is determined that the user's actual behavior does not match the schedule, the mobile communication terminal performs a predetermined security control, and therefore, an appropriate determination criterion. It is possible to perform automatic security control in the mobile communication terminal based on the above.

Embodiments of the present invention will be described below with reference to the drawings.
[1. Constitution]
FIG. 1 is a block diagram showing a configuration of an automatic security control system according to an embodiment of the present invention. In the present embodiment, the security automatic control system is configured by only the mobile communication terminal 10.
The mobile communication terminal 10 is, for example, a general mobile phone, and includes a CPU (Central Processing Unit), a volatile memory, a nonvolatile memory, an internal clock, a wireless communication interface, and the like, which are not shown, as a hardware configuration. Yes.

  Non-volatile memory includes phone book data, outgoing / incoming history, schedule table (to be described later), security operation specification table, association table of location information and location information, program for restricting access to data and outgoing / incoming calls, user A program for performing security control based on the schedule is stored. The functional configuration of the mobile communication terminal 10 shown in FIG. 1 is realized by these hardware and software included in the mobile communication terminal 10. Hereinafter, each component will be described.

  In response to input from the user, the schedule storage unit 8 sets and stores schedule data in the schedule table. FIG. 2 shows a data configuration example of schedule data. As shown in the figure, the schedule data includes “schedule subject”, “date”, “time”, “location”, and “security pattern”. Among these, “schedule subject”, “date”, “time”, and “location” correspond to the user's schedule. “Time” includes a time zone. “Location” indicates a location where the user is scheduled (hereinafter referred to as “user location planned location”) in “date” and “time” (hereinafter referred to as “date and time”).

The “security pattern” indicates the type of security operation pattern to be executed when it is determined that the user's action is different from the schedule.
The security operation rule accumulation unit 5 accumulates security operation rules corresponding to the security pattern set in the security operation rule table. FIG. 3 shows an example of a security operation rule corresponding to the security pattern. As shown in the figure, there are two types of security operation rules: a rule for restricting access to data stored in the mobile communication terminal 10 and a rule for restricting outgoing / incoming calls at the mobile communication terminal 10. Regulations relating to access restrictions include "Phonebook lock", "All data reference prohibition", "Phonebook group A reference prohibition", "All phonebook reference prohibition", and "Call history reference prohibition" . In addition, the rules for restricting outgoing / incoming calls correspond to “prohibition of outgoing / incoming calls” and “prohibition of outgoing / incoming calls other than phonebook registration numbers”. The security operation rules corresponding to these security patterns can be changed by user input.

  The location-position association accumulating unit 1 accumulates association data that is set in the association table of location information and location information and associates the location of the schedule with the location information of the mobile communication terminal 10. FIG. 4 shows an example of association data. As shown in the figure, the association data is composed of “location” and “position information”. “Position information” is composed of the latitude and longitude of the center point of “location” and the radius from the center point, and indicates a circle. By using this information, the mobile communication terminal 10 is owned by whether or not the position of the mobile communication terminal 10 is within the range of “position information” corresponding to the scheduled “location” at the scheduled date and time. It can be determined whether or not the user is located at the planned location according to the schedule.

The terminal data storage unit 7 stores data such as telephone directory data in which a telephone number and name are described, and outgoing and incoming call history.
The date and time detection unit 3 periodically acquires the current date and time from the internal clock.
The position detection unit 2 periodically detects the current position of the mobile communication terminal 10. As the position detecting means, GPS (Global Positioning System), information on the location of the mobile communication terminal 10, RFID (Radio Frequency Identification) tags installed in buildings, etc. are used.
The schedule coincidence determination unit 4 performs a schedule coincidence determination process for determining whether or not the user's actual behavior matches the schedule accumulated in the schedule accumulation unit 8.

  A specific schedule match determination process will be described. First, the schedule match determination unit 4 corresponds to the current date and time detected by the date and time detection unit 3 among the date and time of the schedule stored in the schedule storage unit 8. It is determined whether or not there is. “Applicable” means here that the current date and the date of the schedule match and the current time is included in the time zone of the schedule. At the time when it is determined that the current date / time corresponds to the date / time of the schedule, the schedule match determination unit 4 acquires the current position of the mobile communication terminal 10 from the position detection unit 2 and the current date from the schedule storage unit 8. Get the user's planned location at the date and time. Then, when the current position of the mobile communication terminal 10 is within the planned location of the user at the current date and time, the schedule match determination unit 4 determines that the user's action matches the schedule. Whether or not the position of the mobile communication terminal 10 is within the planned location of the user is determined here by referring to the “location” of the schedule in which the position of the mobile communication terminal 10 is stored in the location-position-related storage unit 1. It is judged by whether or not it is included in the range of “position information” corresponding to.

  The security operation rule acquisition unit 9 acquires the security operation rule when the schedule match determination unit 4 determines that the user action does not match the schedule. Specifically, the security operation rule acquisition unit 9 acquires a security pattern associated with a schedule determined to be inconsistent from the schedule storage unit 8 and sets the security operation rule corresponding to the security pattern as a security. Obtained from the action regulation storage unit 5.

  The security control unit 6 performs predetermined security control when the schedule match determination unit 4 determines that the actual action of the user does not match the schedule. Specifically, the security control unit 6 reflects (sets) the security operation rule acquired by the security operation rule acquisition unit 9 on the own terminal 10 and controls the operation based on the reflected security operation rule. As a method of reflecting the security operation rule on the own terminal 10, an existing technique can be used. For example, a method for storing security operation control data in a memory or starting an operation restriction program is available. Exists.

[2. Security automatic control processing]
Next, the flow of automatic security control processing will be described with reference to the flowchart shown in FIG.
First, the user who owns the mobile communication terminal 10 operates the mobile communication terminal 10, sets a schedule, and further performs input for setting a security pattern associated with the schedule (step S101). Thereby, the schedule storage unit 8 of the mobile communication terminal 10 sets and stores the data input by the user in the schedule table.
The schedule match determination unit 4 of the mobile communication terminal 10 performs a schedule match determination process for determining whether or not the user's actual behavior matches the schedule (step S102).

If it is determined that the actual action of the user matches the schedule (step S103; Yes), the process ends. On the other hand, when it is determined that the actual action of the user does not match the schedule (step S103; No), the security control unit 6 sets a security operation rule corresponding to the security pattern from the security action rule storage unit 5. Obtain (step S104).
The security control unit 6 reflects the acquired security operation rule on the own terminal 10, and controls the security operation on the own terminal 10 in accordance with the reflected security operation rule (step S105).

[3. Schedule match determination process]
Next, the schedule match determination process will be described with reference to FIG.
The schedule match determination unit 4 of the mobile communication terminal 10 acquires the current date and time from the date and time detection unit 3 (step S201), and whether or not the acquired current date and time corresponds to the date and time of the schedule stored in the schedule storage unit 8. Is determined (step S202). When the current date / time corresponds to the date / time of the schedule (step S202; Yes), the schedule match determination unit 4 acquires the current position of the mobile communication terminal 10 from the position detection unit 2 (step S203).

The schedule match determination unit 4 uses the association table of location information and location information stored in the location / position association storage unit 1, and the user should be located from the planned location of the user at the current date and time. A range is specified (step S204).
The schedule match determination unit 4 determines whether or not the position of the mobile communication terminal 10 is within the specified range (step S205). When the position of the mobile communication terminal 10 is within the specified range (step S205; Yes), the schedule match determination unit 4 determines that the user's action matches the schedule (step S206). On the other hand, when the position of the mobile communication terminal 10 is not within the specified range (step S205; No), the schedule match determination unit 4 determines that the user's action does not match the schedule (step S207).

  As described above, when it is determined that the actual action of the user does not match the schedule, the mobile communication terminal 10 performs a predetermined security control, so that the mobile communication terminal is based on an appropriate determination criterion. 10 security control can be performed. Therefore, even if the mobile communication terminal 10 exists outside the communication range, or even if the user who owns the mobile communication terminal 10 does not notice the loss of the mobile communication terminal 10, it is determined that the user's behavior is different from the schedule. In this case, it is possible to automatically control the security in the mobile communication terminal 10 and prevent leakage of information in the mobile communication terminal 10 and abuse of the mobile communication terminal 10.

[4. Modified example]
Although the embodiments of the present invention have been described above, the present invention is not limited to such embodiments, and various modifications can be made within the scope of the technical idea. As modifications, for example, the following can be considered.
(1) In the above-described embodiment, the security automatic control system has been described as being configured only by the mobile communication terminal 10, but the present invention is not limited to this, and the security automatic control system includes the mobile communication terminal and others. Or one or a plurality of communication devices.

In FIG. 7, the structural example of the security automatic control system comprised by the mobile communication terminal 10a and the server 20 which concern on a modification is shown.
Among the functions of the mobile communication terminal 10 according to the above-described embodiment, the server 20 includes a location / position association accumulating unit 1, a position detecting unit 2, a date / time detecting unit 3, a schedule match determining unit 4, and a schedule accumulating unit. 8 is provided. Further, the server 20 includes a determination result notification unit 31 that transmits the determination result by the schedule match determination unit 4 and the security pattern associated with the schedule to the mobile communication terminal 10.

  Among the functions of the mobile communication terminal 10 according to the above-described embodiment, the mobile communication terminal 10a includes the security control unit 6, the terminal data storage unit 7, the security operation definition storage unit 5, and the security operation specification acquisition unit 9. I have. Furthermore, the mobile communication terminal 10a includes a determination result acquisition unit 32 for acquiring a determination result and a security pattern. The mobile communication terminal 10a acquires the determination result from the server 20 by the determination result acquisition unit 32, and performs an operation based on the security operation rule according to the security pattern based on the determination result by the security control unit 6.

The server 20 may also be provided with the security operation rule accumulating unit 5 and the security operation rule obtaining unit 9, and the mobile communication terminal 10 receives the security operation rule notification from the server 20 and performs the security operation. May be.
When the automatic security control system is configured with a plurality of communication devices, the mobile communication terminal 10 cannot acquire information from other communication devices when the mobile communication terminal 10 is outside the communication area, and cannot perform security control. Therefore, it is preferable that the mobile communication terminal 10 has all functions.

(2) The schedule coincidence determination process in the above-described embodiment is merely an example. For example, in addition to the position and the date and time, the speed of the mobile communication terminal 10 is not more than a predetermined value during the meeting, Whether the speed of the mobile communication terminal 10 is equal to or higher than a predetermined value may be used as a criterion for determining that the actual action of the user matches the schedule.
In the above-described embodiment, there is only one method for determining whether or not the position of the mobile communication terminal 10 is within the planned location of the user. For example, the range of “position information” in the association table of location information and position information is not limited to a circle but may be a hexagon or a range in a three-dimensional space including the height.

It is a block diagram which shows the structure of the security automatic control system which concerns on embodiment of this invention. It is a figure showing an example of data composition of schedule data concerning the embodiment. It is a figure which shows an example of the security operation | movement rule according to the security pattern which concerns on the embodiment. It is a figure which shows an example of the association data which concern on the embodiment. It is a flowchart which shows the flow of the security automatic control process which concerns on the embodiment. It is a flowchart which shows the flow of the schedule coincidence determination process which concerns on the same embodiment. It is a block diagram which shows the structure of the security automatic control system which concerns on a modification.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10,10a Mobile communication terminal 1 Location location-related storage unit 2 Position detection unit 3 Date and time detection unit 4 Schedule match determination unit 5 Security operation specification storage unit 6 Security control unit 7 Terminal data storage unit 8 Schedule storage unit 9 Security operation specification acquisition Unit 20 server 31 determination result notification unit 32 determination result acquisition unit

Claims (5)

In an automatic security control system including at least a mobile communication terminal,
Schedule storage means for storing a schedule of a user who owns the mobile communication terminal;
A schedule match determination unit that determines whether or not an actual action of the user matches a schedule stored in the schedule storage unit;
Security control means for performing predetermined security control in the mobile communication terminal when the schedule match determination means determines that the actual action of the user does not match the schedule, Security automatic control system. A security operation rule storage unit that stores a security operation rule corresponding to a security pattern associated with each schedule stored in the schedule storage unit;
Security operation rule acquisition means for acquiring a security operation rule corresponding to a security pattern associated with the schedule determined not to match by the schedule match determination unit from the security operation rule storage unit;
The security control means includes
The security automatic control system according to claim 1, wherein security operation in the mobile communication terminal is controlled based on a security operation rule acquired by the security operation rule acquisition unit. A date and time detection means for detecting the current date and time;
Further comprising position detecting means for detecting the position of the mobile communication terminal;
The schedule stored in the schedule storage means includes the date and time and the planned location of the user at the date and time,
The schedule determination means includes
When the date and time detected by the date and time detection unit corresponds to the date and time of the schedule stored in the schedule storage unit, the position of the mobile communication terminal detected by the position detection unit is within the planned location of the user at the date and time. 3. The automatic security control system according to claim 1, wherein in some cases, it is determined that the user's behavior matches the schedule. 4. The security operation rules include:
4. The device according to claim 2, wherein at least one of a rule regarding access restriction to data stored in the mobile communication terminal and a rule restricting outgoing / incoming calls at the mobile communication terminal is included. Security automatic control system. In a security automatic control method for controlling security in a mobile communication terminal,
A security pattern setting step for setting a schedule of a user who owns the mobile communication terminal and a security pattern associated with the schedule by input from the outside;
A schedule match determination step for determining whether or not the actual action of the user matches the schedule set in the schedule setting step;
When it is determined that the user's actual behavior does not match the schedule in the schedule match determination step, the mobile communication terminal is associated with the schedule determined not to match in the security pattern setting step. And a security control step for performing security control according to the security pattern.

Images