JP2007074680A - Mobile terminal device, function setting change system, log analysis system, function setting changing method and log analyzing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mobile terminal device, function setting changing method and log analyzing method in which setting is performed to use a function different for each user even in the same space and even at the same time when function setting of only an authenticated user can be changed but it is difficult to change function setting only by user operation. <P>SOLUTION: A mobile terminal device includes a radio communication section 1121 for performing radio communication with a communication apparatus which transmits function setting change information for changing setting of one or more functions, and a function setting change section for changing function setting upon reception of the function setting change information in the radio communication section 1121. When changing function setting by the function setting change section, presence/absence of authority is authenticated by an authentication server 1300 which determines the presence/absence of authority to change function setting. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a mobile terminal device, a function setting change system, a log analysis system, a function setting change method, and a log analysis method.

  Conventionally, there are a manner mode and a drive mode that restrict some functions of a mobile phone. Various methods have been proposed to prevent forgetting to set the manner mode and drive mode. For example, one that sets and cancels the manner mode based on the base station ID is known (see, for example, Patent Document 1). Moreover, what is changed into the mode for every specific area is known (for example, refer patent document 2).

In addition, there is known one that automatically sets and cancels the drive mode based on position information by GPS (Global Positioning System) (see, for example, Patent Document 3). Is known (see, for example, Patent Document 4). Moreover, what sets various operation modes according to a schedule is known (for example, refer patent document 5).
JP 2000-188781 A JP 2004-207857 A JP 2002-247642 A JP 2004-349994 A JP 2001-251395 A

  On the other hand, mobile phones have evolved into high-function composite terminals in which various functions such as a camera, voice recorder, electronic money, dictionary, etc. are integrated in addition to telephone, WEB browsing, and mail functions. For this reason, even if there is a function (apparatus) prohibited from being used by TPO, since it is integrated with the mobile phone, it cannot be restricted from being brought in and cannot be used. For example, places where camera photography is prohibited include photography of books in companies, museums, membership gyms, and bookstores, and places where voice recorders are prohibited include various lectures and concerts.

  In these places, if it was a separate device as in the past, it was also possible to temporarily store the prohibited items in the entrance baggage inspection. However, if it is integrated with a mobile phone, it may not be possible to keep it, and in effect, it may not be prohibited to bring it in. For this reason, there are cases where a person working for a company purchases a mobile phone that is not equipped with a camera function. Also, copyright and privacy content is not just a matter of personal manners, but may be inadvertently done or malicious.

  However, the methods disclosed in Patent Documents 1 to 5 are auxiliary functions when the user forgets to change various function settings. Further, in order to increase security within a predetermined area, the user himself / herself is not allowed. There is a situation that it is necessary to make it impossible to change the function setting easily.

  Even in the same place, the content and necessity of function use restrictions differ if the position differs between the staff and the general public. For example, in the case of a company, employees may bring in cameras, but outside customers are prohibited from bringing in cameras. There is a situation in which not all people in the same space are restricted in the same way, but a mechanism that allows the use restriction to be changed by people even in the same space and at the same time is necessary.

  The present invention has been made in view of the above circumstances, and it is possible to change the function setting of only an authorized user, and it is difficult to change the function setting only by a user operation, and it is the same space and the same time. However, it is an object of the present invention to provide a portable terminal device, a function setting change method, and a log analysis method that perform settings that allow use of different functions for each user.

  In order to achieve the above object, a first portable terminal device of the present invention includes a wireless communication unit that performs wireless communication with a communication device that transmits function setting change information for changing setting of one or more functions, and the wireless A function setting change unit that changes the setting of the function based on reception of the function setting change information by the communication unit, and changes the function setting when the function setting change unit changes the function setting. The authentication server that determines whether or not it has authority is configured to authenticate the presence or absence of the authority.

  With this configuration, it is possible to change the function settings of only authorized users, making it difficult to change the function settings by user operation, and enabling the use of different functions for each user even in the same space and time It can be performed.

  In the second portable terminal device of the present invention, the function setting change information is function restriction setting information for restricting use of the function, and the function setting change unit is configured to store the function based on the function restriction setting information. A function restriction setting unit for restricting use is provided.

  With this configuration, use of the function is restricted without any user operation, so it is difficult to invalidate the restriction on the function setting by the user operation.

  In the third portable terminal device of the present invention, the function setting change information is function restriction release information for releasing restriction on use of the function, and the function setting change unit is configured to perform the function restriction release information based on the function restriction release information. It has a configuration including a function restriction release unit that releases the restriction on the use of the function.

  With this configuration, the use restriction of the function is released without any user operation, so it is difficult to invalidate the restriction release of the function setting by the user operation.

  The fourth portable terminal device of the present invention is configured such that the function setting change information is stored in a nonvolatile memory.

  With this configuration, even when the power is turned off, the function setting change information is not erased, and the settings can be retained.

  The fifth portable terminal device of the present invention has a non-contact IC unit for performing short-range communication, and the wireless communication unit performs short-range wireless communication by the non-contact IC unit.

  With this configuration, it is possible to enter and leave the security zone using near field communication.

  In the sixth portable terminal device of the present invention, the function restriction setting unit invalidates the operation on the function.

  With this configuration, user operations on various functions can be disabled.

  In a seventh portable terminal device of the present invention, the function restriction setting unit invalidates activation of the function.

  With this configuration, activation of various functions can be disabled.

  The eighth portable terminal device of the present invention performs wireless communication with a communication device having log acquisition start information for starting recording related to use of one or more functions and log presentation request information for requesting presentation of the record. A log acquisition start unit that starts the recording based on reception of the log acquisition start information by the wireless communication unit, a log storage unit that stores the recording started by the log acquisition start unit, A log acquisition stop unit for stopping the storage of the recording in the log storage unit based on reception of the log presentation request information by the wireless communication unit, and the wireless communication unit is stored in the log storage unit The recording is presented to the communication device.

  With this configuration, it is possible to obtain a log regarding the use of a specific function without restricting the use of the specific function.

  The first function setting changing method of the present invention includes a wireless communication step in which wireless communication is performed with a communication device that transmits function setting change information for changing setting of one or more functions, and the function setting in the wireless communication step. A function setting change step in which the setting of the function is changed based on reception of change information, and when changing the setting of the function in the function setting changing step, has an authority to change the setting of the function It is a method in which the presence or absence of the authority is authenticated by an authentication server that determines whether or not.

  With this method, it is possible to change the function settings for only authorized users, making it difficult to change the function settings by user operation, and setting that allows the use of different functions for each user even in the same space and time It can be performed.

  The first log analysis method of the present invention is a wireless communication in which wireless communication is performed with a communication apparatus having log acquisition start information for starting recording related to use of one or more functions and log presentation request information for requesting presentation of the record. A log acquisition start step in which the recording starts based on reception of the log acquisition start information in the wireless communication step; and a log storage step in which the recording started in the log acquisition start step is stored. And a log acquisition stop step in which accumulation of the recording in the log accumulation step is stopped based on reception of the log presentation request information in the wireless communication step. In the wireless communication step, the log accumulation step In the method, the record stored in is presented to the communication device.

  By this method, it is possible to obtain a log relating to the use of the function without restricting the use of the specific function.

  As described above, according to the present invention, it is possible to change the function setting of only the authorized user, and it is difficult to change the function setting only by the user operation. It is possible to provide a mobile terminal device, a function setting change method, and a log analysis method that perform settings that enable use of different functions.

Hereinafter, a function setting change system according to an embodiment of the present invention will be described with reference to the drawings.
(First embodiment)

FIG. 1 is a schematic diagram of a function setting change system 1000 according to the first embodiment of the present invention. The function setting change system 1000 includes a mobile terminal device 1100, an entrance / exit management device 1200, and an authentication server 1300. Communication is performed between the mobile terminal device 1100 and the entrance / exit management device 1200, and between the entrance / exit management device 1200 and the authentication server 1300, but in particular, a short distance between the mobile terminal device 1100 and the entrance / exit management device 1200. Wireless communication is performed.
Hereinafter, each configuration will be described in detail.

  FIG. 2 is a block diagram of the mobile terminal device 1100 according to the first embodiment of the present invention. The mobile terminal device 1100 includes a control unit 1110, a wireless unit 1121, an operation unit 1122, a display unit 1123, a nonvolatile memory 1124, a digital certificate 1131, a public key 1132, a private key 1133, a camera function unit 1141, a recorder function unit 1142, An electronic dictionary function unit 1143, a game function unit 1144, a non-contact communication control unit 1151, and a non-contact communication wireless unit 1152 are provided.

  The control unit 1110 controls other components in the portable terminal device 1100 and further includes an authentication unit 1111, a function restriction setting unit 1112, and a function restriction release unit 1113. The authentication unit 1111 authenticates whether various data transmitted from the authentication server 1300 to the mobile terminal device 1100 is valid. The function restriction setting unit 1112 restricts the use of functions such as the camera function unit 1141, the recorder function unit 1142, the electronic dictionary function unit 1143, and the game function unit 1144. The function restriction release unit 1113 releases the function restriction by the function restriction setting unit 1112.

  The wireless unit 1121 performs wireless communication between the mobile terminal device 1100 and the authentication server 1300. The operation unit 1122 performs various settings for the mobile terminal device 1100 by the user. The display unit 1123 displays various information on a display or the like. The nonvolatile memory 1124 is a memory in which recorded information is not erased even when the power is turned off, and stores function restriction information for restricting some functions of the mobile terminal device 1100.

  The digital certificate 1131 has a digital signature for authenticating the mobile terminal device 1100. The public key 1132 is an encryption unit disclosed from the authentication server 1300 so that the mobile terminal device 1100 communicates with the authentication server 1300. The secret key 1133 is an encryption unit that is kept secret from the authentication server 1300 in order for the mobile terminal device 1100 to communicate with the authentication server 1300.

  The camera function unit 1141 performs shooting and recording (including a videophone function) by the camera. The recorder function unit 1142 performs recording and the like. The electronic dictionary function unit 1143 enables use of the electronic dictionary. The game function unit 1144 enables the use of a game.

  The non-contact communication control unit 1151 controls the non-contact communication wireless unit 1152 in order to realize wireless communication (non-contact communication) at a short distance between the mobile terminal device 1100 and the entrance / exit management device 1200. The non-contact communication wireless unit 1152 actually performs non-contact communication between the mobile terminal device 1100 and the entrance / exit management device 1200.

  FIG. 3 is a block diagram of the entrance / exit management device 1200 according to the first embodiment of the present invention. The entrance / exit management device 1200 includes a control unit 1210, a reader / writer unit 1220, a communication control unit 1230, a function restriction setting command generation unit 1240, a user information management table 1250, and a model information management table 1260.

  The control unit 1210 controls the reader / writer unit 1220, the communication control unit 1230, and the function restriction setting command generation unit 1240, and further includes a room entry interface 1211 and a room exit interface 1212. The room entry interface 1211 is a means required when the user enters the security zone. The exit interface 1212 is a means required when the user leaves the security zone.

  The reader / writer unit 1220 performs non-contact communication between the entrance / exit management device 1200 and the mobile terminal device 1100, and reads and writes data at that time. For example, user information and model information of the mobile terminal device 1100 are read. The communication control unit 1230 performs communication between the entrance / exit management device 1200 and the authentication server 1300.

  The function restriction setting command generation unit 1240 generates a function restriction setting command for the user based on the user information and model information of the mobile terminal device 1100 read by the reader / writer unit 1220. In the user information management table 1250, a user and a prohibited function for the user are registered in advance. In the model information management table 1260, a model and a function list installed in the model are registered.

  FIG. 4 is a block diagram of the authentication server 1300 according to the first embodiment of this invention. The authentication server 1300 includes a communication control unit 1310 and an authentication unit 1320. The communication control unit 1310 performs communication between the authentication server 1300 and the entrance / exit management device 1200.

  The authentication unit 1320 is a unit for authenticating whether various data transmitted from the mobile terminal device 1100 to the authentication server 1300 is valid, and further includes a digital certificate 1321, a public key 1322, and a private key 1323. The digital certificate 1321 has a digital signature for authenticating the authentication server 1300. The public key 1322 is an encryption unit disclosed by the mobile terminal device 1100 so that the authentication server 1300 can communicate with the mobile terminal device 1100. The secret key 1323 is an encryption unit that is kept secret from the portable terminal device 1100 in order for the authentication server 1300 to communicate with the portable terminal device 1100.

Next, the operation of the function setting change system 1000 when the user enters the security zone will be described. Here, the security zone is a space in which security is enhanced, and functions that can be used by the mobile terminal device 1100 can be restricted for each user in the security zone.
FIG. 5 is an operation flowchart when entering the room of the function setting change system 1000 according to the first embodiment of the present invention.

  First, when a user who owns the portable terminal device 1100 enters the room, the portable terminal device 1100 is held over the entry / exit management device 1200, so that the reader / writer unit 1220 built in the entry / exit management device 1200 and the portable terminal device 1100 Communication with the non-contact communication wireless unit 1152 is established (step S501).

  When the portable terminal device 1100 is held over the communication control unit 1230 of the entrance / exit management device 1200, the entrance / exit management device 1200 may be provided with separate interfaces for entry and exit, and whether the user enters or exits the user. There may be provided a button for selecting.

  When the mobile terminal device 1100 receives “acceptable” information from the entrance / exit management device 1200 (step S502), the mobile terminal device 1100 enters and exits a “procedure request” including terminal information such as model information and user information. It transmits to the management apparatus 1200 (step S503).

  Further, a MAC frame containing an EAP (Extensible Authentication Protocol) message requesting the start of authentication is transmitted (step S504). Receiving this, the room entry / exit management device 1200 returns an EAP message notifying the authentication method to be used (step S505).

  Thereafter, the entrance / exit management device 1200 operates as a message relay device between the mobile terminal device 1100 and the authentication server 1300, and actual authentication is performed between the mobile terminal device 1100 and the authentication server 1300.

  Next, the authentication operation will be described. Here, as an example of performing authentication in order to confirm the validity of the user who enters the room, it is assumed that authentication by EAP-TLS is performed. In the mobile terminal device 1100 and the authentication server 1300, a digital certificate 1131 of the mobile terminal device 1100 and a digital certificate 1321 of the authentication server 1300 are installed in advance, respectively. The digital certificates 1131 and 1321 include user information, a user public key, a digital signature of a certificate authority, and the like.

  First, the mobile terminal device 1100 receives the digital certificate 1321 with the digital signature of the certificate authority from the authentication server 1300. The authentication unit 1111 of the portable terminal device 1100 opens the signature with the held public key 1132 and confirms that the received digital certificate 1321 is valid (step S506).

  Next, the mobile terminal device 1100 encrypts the digital certificate 1131 of the mobile terminal device 1100 with the public key 1132, and then sends it to the authentication server 1300. The authentication unit 1320 of the authentication server 1300 that has received the digital certificate 1131 uses the private key 1323 of the authentication server 1300 to check whether the digital certificate 1131 is valid. (Step S507)

  Furthermore, the mobile terminal device 1100 uses the private key 1133 of the mobile terminal device 1100 to send all the communication contents so far encrypted. The authentication unit 1320 of the authentication server 1300 uses the public key 1322 of the mobile terminal device 1100 included in the digital certificate 1131 to compare the result of opening the received data with the data of the communication content so far, and the same If so, it is verified that the communication partner is valid (step S508).

  If the verification result of the digital certificate 1131 and the digital signature confirms that the mobile terminal device 1100 is a valid communication partner, the authentication server 1300 transmits “authentication success” to the entrance / exit management device 1200 and the mobile terminal device 1100. (Step S509).

  Upon confirming “authentication success” from the authentication server 1300, the entrance / exit management device 1200 restricts the mobile terminal device 1100 with a “function restriction setting” command corresponding to the user information and model information obtained in step S503. It is generated and transmitted by the setting command generating means 1240. When the portable terminal device 1100 receives the “function restriction setting” command from the entry / exit management device 1200 (step S510), the function restriction setting information is notified to the control unit 1110 of the portable terminal device 1100, and the function restriction setting unit 1112 functions. The function that cannot be used specified by the restriction setting information is restricted (step S511).

  As a specific example of the function restriction setting, when the function restriction setting information includes information that the camera function cannot be used, the operation or event for starting the camera function unit 1141 is controlled to be invalid.

The function restriction information is stored in the nonvolatile memory 1124 and is not erased even when the power is turned off. In addition, if it is impossible to rewrite or delete even by input from the operation unit 1122 by the user, the mobile terminal device 1100 that has received the function restriction information once restricts until the exit procedure described later is performed. The function is disabled.
The above is the processing related to the entry procedure.

Next, the operation of the function setting change system 1000 when the user leaves the room will be described.
FIG. 6 is an operation flow diagram when leaving the function setting change system 1000 according to the first embodiment of the present invention.

  The flow of processing when leaving the room is basically the same as when entering the room. The difference is that the command sent from the entry / exit management device 1200 to the portable terminal device 1100 after “successful authentication” (step S509) is not “function restriction setting” but “function restriction release”. This will be described.

  Upon confirming “successful authentication” from the authentication server 1300, the entrance / exit management device 1200 transmits a “function restriction release” command to the mobile terminal device 1100. When the mobile terminal device 1100 receives the “function restriction release” command from the entry / exit management device 1200 (step S601), the function restriction release information is notified to the control unit 1110 of the mobile terminal device 1100, and the function restriction release unit 1123 functions. The restriction on the function that has been disabled as specified by the restriction release information is released (step S602).

  As a specific example of the function restriction release, when there is information in the function restriction release information that the camera function unusable state is released, the operation for starting the camera function unit 1141 and the invalid state of the event are released. Be controlled.

  In addition, examples of setting items for setting and releasing function restrictions are shown. FIG. 7 is a specific example of setting items related to the setting and release of function restrictions that can be used by the mobile terminal device 1100 according to the first embodiment of the present invention.

  The setting items include a camera function by the camera function unit 1411 shown in FIG. 2, a voice recorder function by the recorder function unit 1412, a dictionary function by the electronic dictionary function unit 1413, a game function by the game function unit 1414, and FIG. There are TV functions and radio functions not shown. Regarding these items, by setting whether to enable or disable each function for each user, the function limitation for each user is realized.

According to the function setting change system 1000 according to the first embodiment of the present invention, the wireless communication unit 1121 that performs wireless communication with the communication device that transmits the function setting change information that changes the setting of one or more functions. A function setting change unit that changes the function setting based on reception of the function setting change information by the wireless communication unit 1121, and changes the function setting when the function setting change unit changes the function setting. By configuring the authentication server 1300 to determine whether or not the authority is authorized, it is possible to change the function setting only for the authorized user, and change the function setting only by the user operation. Therefore, it is possible to make a setting that allows the use of different functions for each user even in the same space and the same time.
(Second Embodiment)

  Next, a description will be given of a case where the use is restricted and a log is acquired with the user entering or leaving the security zone as a trigger.

  FIG. 8 is a schematic diagram of a log analysis system 9000 according to the second embodiment of the present invention. The log analysis system 9000 includes a mobile terminal device 9100, an entrance / exit management device 9200, and a log analysis server 9300. First, this embodiment will be briefly described with reference to FIG.

  When the user enters the security zone, entry registration is performed from the portable terminal device 9100 to the entry / exit management device 9200 (step S801), and log entry starts from the entry / exit management device 9200 to the portable terminal device 9100 when entering the room. A signal is transmitted (step S802). Thereby, a log regarding the use of the function of the mobile terminal device 9100 is acquired (step S803).

  In addition, in order for the user to leave the security zone, registration is performed from the portable terminal device 9100 to the entry / exit management device 9200 (step S804), and log acquisition from the entry / exit management device 9200 to the portable terminal device 9100 is stopped when leaving the room. Is transmitted (step S805). Logs acquired from entering the room to leaving the room are submitted from the mobile terminal device 9100 to the log analysis server 9300 by the mobile terminal device 9100 (step S806). The log analysis server analyzes the analysis of the log, determines whether there is a prohibited operation, and displays the result (step S807).

  As described above, the log analysis system 9000 does not limit the functions of the mobile terminal device 9100 as the function setting change system 1000 according to the first embodiment of the present invention, and operates the functions used by the mobile terminal device 9100. Get logs. In the log analysis system 9000, the portable terminal device 9100 and the entrance / exit management device 9200 cooperate to start log accumulation at the time of entrance by a signal from the outside at the time of entrance, and report when exiting.

  The log analysis system 9000 has no forcing because it does not impose usage restrictions, but instead, it is not necessary to restrict the functions of the mobile terminal device 9100, and functions can be used. In the case of inconveniences in the function setting change system 1000, such as prohibiting the use of a certain function in principle but allowing an exception, it is possible to psychologically suppress fraud simply by acquiring a log. In addition, when an abnormal situation occurs, log data can be presented as evidence, which is an effective means for preventing fraud.

  Hereinafter, a detailed configuration of the log analysis system 9000 will be described. 9 to 11, the same reference numerals are given to the same parts as those in the function setting change system 1000 according to the first embodiment, and the description thereof is omitted.

  FIG. 9 is a block diagram of a portable terminal device 9100 according to the second embodiment of the present invention. The mobile terminal device 9100 includes a control unit 9110, a log storage unit 9120, a non-contact communication control unit 1151, a non-contact communication radio unit 1152, a radio unit 1121, an operation unit 1122, a display unit 1123, a sounder 9131, an LED 9132, and various devices 9133. Have.

  The control unit 9110 controls other components in the mobile terminal device 9100, and further includes a log acquisition start unit 9111 and a log acquisition stop unit 9112. The log acquisition start unit 9111 starts acquiring the operation log of the used function. The log acquisition stop unit 9112 stops the log acquisition started by the log acquisition start unit 9111. The log accumulation unit 9120 accumulates logs that have been acquired by the log acquisition start unit 9111.

  The sounder 9131 performs audio output. The LED 9132 is a light-emitting diode, and can blink light or develop various colors. The various devices 9133 are devices that are mounted on a portable terminal device 9100 such as a camera or a recorder, and are controlled by the control unit 9110.

  FIG. 10 is a block diagram of an entrance / exit management device 9200 according to the second embodiment of the present invention. The entrance / exit management device 9200 includes a display unit 9211 in the control unit 9210 in addition to the entrance / exit management device 1200 according to the first embodiment of the present invention. The display unit 9211 displays various information on a display or the like.

  FIG. 11 is a block diagram of the log analysis server 9300 according to the second embodiment of this invention. The log analysis server 9300 includes log analysis means 9310 and a communication control unit 9320. The log analysis unit 9310 analyzes an operation log related to the function used by the mobile terminal device 9100, and further includes a log storage unit 9311, entry / exit person information 9312, and an analysis condition table 9313.

  The log storage unit 9311 stores this log when the log stored in the mobile terminal device 9100 is sent to the log analysis server 9300. The entering / leaving person information 9312 is information on a user who enters or leaves the security zone, and includes terminal information and user information of the mobile terminal device 9100 possessed by the user. In the analysis condition table 9313, an unauthorized event for each security zone corresponding to the entry / exit management device 9200 is registered through the Web or the like. The communication control unit 9320 performs communication between the log analysis server 9300 and the entrance / exit management device 9200.

Next, the operation of the log analysis system 9000 when the user who owns the mobile terminal device 9100 enters the security zone will be described.
FIG. 12 is an operation flowchart when the user enters the security zone of the log analysis system 9000 according to the second embodiment of the present invention.

  Before the user enters the security zone, the entrance / exit management device 9200 registers in advance an unauthorized event for each security zone corresponding to the entrance / exit management device 9200 in the analysis condition table 9313 of the log analysis server 9300 (step S1201).

  When the portable terminal device 9100 is held over the entrance / exit management device 9200, communication is established between the reader / writer unit 1220 built in the entrance / exit management device 9200 and the non-contact communication radio unit 1152 in the mobile terminal device 9100 ( Step S1202).

  When the mobile terminal device 710 receives “acceptable” information from the entrance / exit management device 9200 (step S1203), the mobile terminal device 9100 enters and exits a “procedure request” including terminal information such as model information and user information. It transmits to the management apparatus 9200 (step S1204).

  The room entry / exit management device 9200 that has received the “procedure request” returns a “room entry permission” command to the mobile terminal device 9100, and the mobile terminal device 9100 that has received the “room entry permission” command performs log acquisition by the log acquisition start means 9111. The process starts (step S1205), and the internal event log is stored in the log storage unit 9120 (step S1206). Further, the room entry / exit management device 9200 transmits “room entry information” to the log analysis server 9300 (step S1207).

Here, the “room entry permission” command can specify narrowing of target events (key operation only, key operation + wireless communication, etc.) to be acquired according to security zone conditions. In addition, during log acquisition, the mobile terminal device 9100 displays an icon indicating “log acquisition” on the display unit 1123.
The above is the processing related to the entry procedure.

Next, the flow of processing when leaving the security zone will be described.
FIG. 13 is an operational flow diagram of the log analysis system 9000 according to the second embodiment of the present invention when the user leaves the security zone.

  As in the case of entering the room, when the user holding the portable terminal device 9100 leaves the security zone, if the portable terminal device 9100 is held over the entry / exit management device 9200, the reader / writer unit 1220 built in the entry / exit management device 9200 and Then, communication with the non-contact communication wireless unit 1152 in the mobile terminal device 9100 is established (step S1301).

  When the mobile terminal device 9100 receives “acceptable” information from the entrance / exit management device 9200 (step S1302), the mobile terminal device 9100 enters and exits a “procedure request” including terminal information such as model information and user information. It transmits to the management apparatus 9200 (step S1303).

  The room entry / exit management device 9200 that has received the “procedure request” returns a “log submission request” command to the mobile terminal device 9100 (step S1304), and the mobile terminal device 9100 that has received the “log submission request” command acquires the log. The stop unit 9112 stops the storage of the internal event log in the log storage unit 9120 (step S1305). Further, the entrance / exit management device 9200 transmits “leaving person information” to the log analysis server 9300 (step S1306).

  Next, processing for analyzing the log data by the log analysis server 9300 and determining an unauthorized operation will be described. This process is a subsequent process of steps S1301 to S1306 described above.

  The mobile terminal device 9100 transmits the log accumulated in the log accumulation unit 9120 to the log analysis server 9300 (step S1307). The log analysis server 9300 accumulates the received log data in the log accumulation unit 9311. Based on the log data stored in the log storage unit 9311 and the contents of the analysis condition table 9313, the log analysis unit 9310 analyzes the log (step S1308) and transmits the analysis result to the entrance / exit management device 9200 (step S1308). S1309).

The entrance / exit management device 9200 receives the analysis result transmitted from the log analysis server 9300, and displays a warning on the presence or absence of fraud detection on the display unit 9210 (step S1310). When the fraud is not detected, the entrance / exit management device 9200 permits the mobile terminal device 9100 to leave the room (step S1311).
The above is the processing related to the leaving procedure including the log analysis procedure.

  According to such a log analysis system 9000 in the second embodiment of the present invention, communication having log acquisition start information for starting recording relating to use of one or more functions and log presentation request information for requesting presentation of the recording. A wireless unit 1121 that performs wireless communication with the apparatus, a log acquisition start unit 9111 that starts recording based on reception of log acquisition start information by the wireless unit 1121, and a log that accumulates records started by the log acquisition start unit 9111 Based on the reception of the log presentation request information by the wireless unit 1121, the storage unit 9120 has log acquisition stop means 9112 for stopping the recording in the log storage unit 9120, and the wireless unit 1121 includes the log storage unit 9120. By presenting the record stored in the communication device to the communication device, it is possible to use that function without restricting the use of a specific function. It is possible to get the logs for use.

  The present invention can change the function setting of only authorized users, it is difficult to change the function setting only by user operation, and different functions can be used for each user even in the same space and the same time. This is useful for portable terminal devices that perform various settings, function setting changing methods, log analysis methods, and the like.

1 is a schematic diagram of a function setting change system according to a first embodiment of the present invention. The block diagram of the portable terminal device in the 1st Embodiment of this invention The block diagram of the entrance / exit management apparatus in the 1st Embodiment of this invention Block diagram of the authentication server in the first embodiment of the present invention The operation | movement flowchart at the time of entrance of the function setting change system in the 1st Embodiment of this invention The operation | movement flowchart at the time of leaving of the function setting change system in the 1st Embodiment of this invention Specific examples of setting items relating to setting and releasing of function restrictions available for the mobile terminal device according to the first embodiment of the present invention Overview diagram of log analysis system in second embodiment of the present invention The block diagram of the portable terminal device in the 2nd Embodiment of this invention The block diagram of the entrance / exit management apparatus in the 2nd Embodiment of this invention Block diagram of the log analysis server in the second embodiment of the present invention Operation flow diagram when entering the log analysis system according to the second embodiment of the present invention Flow chart of the log analysis system in the second embodiment of the present invention when leaving the room

Explanation of symbols

1000 Function Setting Change System 1100 Mobile Terminal Device 1110 Control Unit 1111 Authentication Unit 1112 Function Restriction Setting Unit 1113 Function Limit Release Unit 1121 Radio Unit 1122 Operation Unit 1123 Display Unit 1124 Non-volatile Memory 1131 Digital Certificate 1132 Public Key 1133 Private Key 1141 Camera Function unit 1142 Recorder function unit 1143 Electronic dictionary function unit 1144 Game machine function unit 1151 Non-contact communication control unit 1152 Non-contact communication wireless unit 1200 Entrance / exit management device 1210 Control unit 1211 Entrance interface 1212 Exit interface 1220 Reader / writer unit 1230 Communication control unit 1240 Function restriction setting command generation means 1250 User information management table 1260 Model information management table 1300 Authentication server 1310 Communication control unit 1320 Authentication method Stage 1321 Digital certificate 1322 Public key 1323 Private key 9000 Log analysis system 9100 Mobile terminal device 9110 Control unit 9111 Log acquisition start unit 9112 Log acquisition stop unit 9120 Log storage unit 9131 Sounder 9132 LED
9133 Various devices 9200 Entrance / exit management device 9210 Control unit 9211 Display unit 9300 Log analysis server 9310 Log analysis unit 9311 Log storage unit 9312 Entrance / exit person information 9313 Analysis condition table 9320 Communication control unit

Claims (10)

A wireless communication unit that performs wireless communication with a communication device that transmits function setting change information that changes the setting of one or more functions;
A function setting change unit that changes the setting of the function based on the reception of the function setting change information by the wireless communication unit;
A portable terminal device that authenticates the presence or absence of the authority by an authentication server that determines whether or not it has an authority to change the setting of the function when the function setting changing unit changes the setting of the function. The mobile terminal device according to claim 1,
The function setting change information is function restriction setting information for restricting use of the function,
The function setting change unit is a mobile terminal device having a function restriction setting unit that restricts use of the function based on the function restriction setting information. The mobile terminal device according to claim 1,
The function setting change information is function restriction release information for releasing use restriction of the function,
The function setting change unit is a mobile terminal device having a function restriction release unit that releases use restriction of the function based on the function restriction release information. The mobile terminal device according to any one of claims 1 to 3,
The function setting change information is a portable terminal device stored in a nonvolatile memory. The mobile terminal device according to any one of claims 1 to 4,
It has a non-contact IC part for short distance communication
The wireless communication unit is a mobile terminal device that performs short-range wireless communication by the non-contact IC unit. The mobile terminal device according to claim 2,
The function restriction setting unit is a mobile terminal device that invalidates operations on the function. The mobile terminal device according to claim 2,
The function restriction setting unit is a portable terminal device that disables activation of the function. A wireless communication unit for performing wireless communication with a communication apparatus having log acquisition start information for starting recording related to use of one or more functions and log presentation request information for requesting presentation of the record;
Based on the reception of the log acquisition start information by the wireless communication unit, a log acquisition start unit that starts the recording;
A log storage unit that stores the recording started by the log acquisition start unit;
Based on reception of the log presentation request information by the wireless communication unit, and a log acquisition stop unit that stops accumulation of the recording in the log storage unit,
The wireless communication unit is a portable terminal device that presents the recording accumulated in the log accumulation unit to the communication device. A wireless communication step in which wireless communication is performed with a communication device that transmits function setting change information for changing the setting of one or more functions;
A function setting change step in which the setting of the function is changed based on reception of the function setting change information in the wireless communication step, and
A function setting changing method in which the presence or absence of the authority is authenticated by an authentication server that determines whether or not the user has an authority to change the setting of the function when changing the setting of the function in the function setting changing step. A wireless communication step in which wireless communication is performed with a communication device having log acquisition start information for starting recording related to use of one or more functions and log presentation request information for requesting presentation of the record;
A log acquisition start step in which the recording is started based on reception of the log acquisition start information in the wireless communication step;
A log accumulation step in which the record started in the log acquisition start step is accumulated;
A log acquisition stop step in which accumulation of the record in the log accumulation step is stopped based on reception of the log presentation request information in the wireless communication step, and
In the wireless communication step, a log analysis method in which the record accumulated in the log accumulation step is presented to the communication device.

Images