JP2009163282A - Information processor, access control method and access control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security of stored data. <P>SOLUTION: A PC has: a wireless communication part communicable with a cellphone; an HDD having a plurality of folders for storing data; association data associating device identification information for identifying the cellphone with one of the plurality of folders; and an access control part (S07) allowing access to the folder associated with the device identification information of the cellphone of the plurality of folders on the condition that the wireless communication part is communicable with the cellphone (YES in S01). <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information processing device, an access control method, and an access control program, and more particularly to an information processing device used by a plurality of users, an access control method and an access control program executed by the information processing device.

  One personal computer (hereinafter referred to as “PC”) may be shared and used by a plurality of people. In this mode of use, a plurality of people can freely access the data stored in the PC, so it is not appropriate to store highly confidential data in the PC. In International Publication No. 2002/042890 (Patent Document 1), an information processing apparatus including a first communication module capable of wireless data communication and a wireless communication link can be formed with the first communication module. And a portable information device including a second communication module, wherein the information processing apparatus is set to shift to a password input screen only when a communication link is formed between the first and second communication modules. A security system for an information processing apparatus is described in which an OS is activated only when a pre-registered password input is received from the portable information device.

However, since the OS (operating system) is activated every time the user who uses the information processing apparatus changes in the conventional security system, it is necessary to wait for the OS to start and become usable. There is a problem that time in the meantime is wasted. In addition, another person can use the information processing apparatus while away from the information processing apparatus without logging off after the OS is started. For this reason, there is a problem that data is used by others.
International Publication No. 2002/042890

  The present invention has been made to solve the above-described problems, and one of the objects of the present invention is to provide an information processing apparatus that improves the security of stored data.

  Another object of the present invention is to provide an access control method that improves the security of stored data.

  Another object of the present invention is to provide an access control program that improves the security of stored data.

  In order to achieve the above-described object, according to an aspect of the present invention, an information processing apparatus includes a communication unit capable of communicating with a mobile terminal, a storage unit having a plurality of storage areas and storing data, Associating means for associating device identification information for identifying a portable terminal with one of the plurality of storage areas, and device identification information of the portable terminal among the plurality of storage areas, provided that the communication means can communicate with the portable terminal. And an access control means for enabling access to a storage area associated with.

  According to this aspect, since it becomes possible to access the storage area associated with the device identification information of the mobile terminal on condition that communication with the mobile terminal is possible, only the user carrying the mobile terminal can access the mobile terminal. Can access data stored in a storage area previously associated with. For this reason, the information processing apparatus which improved the security of the stored data can be provided.

  Preferably, the access control means enables access to the storage area on the condition that the authentication information associated with the storage area associated with the device identification information of the mobile terminal among the plurality of storage areas is received.

  According to this aspect, the storage area associated with the device identification information of the portable terminal can be accessed on the condition that the authentication information associated with the storage area associated with the device identification information of the portable terminal is accepted. become. For this reason, only the user who carries the portable terminal and knows the authentication information can access the data stored in the storage area previously associated with the portable terminal.

  Preferably, the access control means includes an access prohibiting means for prohibiting access to the storage area when the communication means becomes unable to communicate with the portable terminal after making the storage area accessible.

  According to this aspect, if communication with the mobile terminal becomes impossible, access to the storage area is prohibited. For example, another person cannot access data while the user is away from the information processing apparatus. For this reason, access to data can be permitted only while the user can operate the information processing apparatus.

  Preferably, the access control means includes a determining means for determining any one of the plurality of mobile terminals when there are a plurality of mobile terminals capable of communication, and is associated with the device identification information of the determined mobile terminals. Make the storage area accessible.

  According to this aspect, a storage area associated with one determined from a plurality of mobile terminals capable of communication can be accessed, so that only a user carrying the determined mobile terminal can be accessed. can do.

  Preferably, the determination unit determines a mobile terminal that has transmitted predetermined information from among the plurality of mobile terminals.

  According to this aspect, the user can input an instruction for using the information processing apparatus to the mobile terminal.

  Preferably, the determination unit determines the mobile terminal corresponding to the device identification information selected from at least one device identification information associated with each of the plurality of storage areas.

  According to this aspect, the user can input an instruction for using the information processing apparatus to the information processing apparatus.

  According to another aspect of the present invention, an access control method includes a step of associating device identification information for identifying a mobile terminal with any one of the storage areas, a step of communicating with the mobile terminal, and a communication with the mobile terminal. And making the storage area associated with the device identification information of the portable terminal out of the plurality of storage areas accessible on condition that it is possible.

  According to this aspect, it is possible to provide an access control method that improves the security of stored data.

  According to still another aspect of the present invention, an access control program includes a step of associating device identification information for identifying a mobile terminal with any one of the plurality of storage areas, a step of communicating with the mobile terminal, And making the storage area associated with the device identification information of the mobile terminal accessible among the plurality of storage areas on the condition that communication is possible.

  According to this aspect, an access control program that improves the security of stored data can be provided. Access control program.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, the same parts are denoted by the same reference numerals. Their names and functions are also the same. Therefore, detailed description thereof will not be repeated.

  FIG. 1 is a diagram showing an overall outline of an information processing system in one embodiment of the present invention. Referring to FIG. 1, the information processing system includes a PC 100 and a mobile phone 200 as a mobile terminal. The PC 100 and the mobile phone 200 are each provided with a circuit for wireless communication at a short distance, and can transmit / receive data to / from each other if the other party is included in the communication range. For short-distance wireless communication, for example, a standard communication method such as Bluetooth (registered trademark) or IrDA may be used. Here, an example in which Bluetooth (registered trademark) is used will be described.

  An area 100A indicates a communicable range of the PC 100, and an area 200A indicates a communicable range of the mobile phone 200. The communicable range refers to a range in which a communication link can be formed between the PC 100 and the mobile phone 200. If mobile phone 200 is located in area 100A that is the communicable range of PC 100 and PC 100 is located in area 200A that is the communicable range of mobile phone 200, PC 100 and mobile phone 200 can communicate. However, when mobile phone 200 is located outside area 100A that is the communicable range of PC 100, or when PC 100 is located outside area 200A that is the communicable range of mobile phone 200, PC 100 and mobile phone 200 communicate with each other. Can not do it.

  Here, the mobile phone 200 will be described as an example. However, any device capable of short-range wireless communication with the PC 100 may be a PDA (Personal Digital Assistant), an IC card, or the like.

  FIG. 2 is a block diagram showing an example of an outline of the hardware configuration of the PC. Referring to FIG. 2, PC 100 is used as a CPU 101 for controlling the entire PC 100, a flash ROM (Read Only Memory) 102 for storing programs executed by CPU 100, and a work area for CPU 101. A RAM (Random Access Memory) 103, a network interface (I / F) 104 for connecting the electronic mail server 100 to the Internet, a hard disk drive (HDD) 105 as a mass storage device, and a display unit for displaying information 106, an operation unit 107 that receives an input of a user operation, and a wireless communication unit 109.

  The wireless communication unit 109 is a circuit that transmits and receives a weak wireless signal in accordance with the Bluetooth (registered trademark) communication standard. The mobile phone 200 also includes a circuit similar to the wireless communication unit 109, and the wireless communication unit 109 performs wireless communication with a circuit included in the mobile phone 200.

  FIG. 3 is a functional block diagram showing an overview of the functions of the CPU provided in the PC. Referring to FIG. 3, the CPU 101 receives a communication control unit 11 that controls the wireless communication unit 109, a device determination unit 13 that determines one of a plurality of communicable mobile phones, authentication information, and authentication. And an access control unit 17 that controls access to data stored in the HDD 105 based on the authentication result.

  The communication control unit 11 causes the wireless communication unit 109 to transmit an inquiry signal at predetermined time intervals. When the wireless communication unit 109 receives a response signal in response to the inquiry signal, the communication control unit 11 forms a communication link with the device that has transmitted the response signal. To do. The communication control unit 11 outputs the device identification information of the device that has formed the communication link to the device determination unit 13. The wireless communication unit 109 may receive a plurality of response signals. In this case, the communication control unit 11 receives the device identification information of each of the plurality of devices that respectively transmitted the plurality of response signals. Output to.

  When the mobile phone 200 becomes communicable with the PC 100, the mobile phone 200 displays a selection screen including the name of the PC stored in advance and inquires of the user whether or not to use the PC 100.

  FIG. 4 is a diagram illustrating an example of the selection screen. Referring to FIG. 4, the selection screen includes names “PC2” and “PC3” of the other two PCs in addition to the name “PC1” of PC100. The selection screen displays the names of all the PCs registered in the mobile phone 200 in advance, but displays the names of PCs in a communicable state separately from the names of PCs that are not communicable. May be. Thereby, it is possible to prevent selection of a name of a PC that is not communicable. Furthermore, the selection screen may display only the “name” of the PC in a communicable state. In this case, since the name can be received from the PC 100 when communication with the PC 100 becomes possible, it is not necessary to store the name of the PC in advance. If the name of the PC 100 is stored in advance, the selection screen can be displayed only when communication with a PC with the name stored in advance is possible, thereby preventing the selection screen from being displayed frequently. be able to.

  When the user of the mobile phone 200 indicates a name included in the selection screen, the mobile phone 200 transmits an access request signal to the PC specified by the specified name. Here, a case where the mobile phone 200 transmits an access request signal to the PC 100 will be described as an example.

  Returning to FIG. 3, when the wireless communication unit 109 receives the access request signal from the mobile phone 200, the wireless communication unit 109 forms a communication link with the mobile phone 200, and the device determination unit 13 receives the determination signal and the mobile phone 200. A pair with device identification information is output.

  Further, when the communication link is disconnected from the mobile phone 200 that has formed the communication link, the wireless communication unit 109 outputs a disconnection signal and device identification information of the mobile phone 200 to the access control unit 17. For example, the wireless communication unit 109 periodically transmits and receives control signals to and from the mobile phone 200 in which the communication link is formed in order to continue the communication link. When the wireless communication unit 109 cannot receive a control signal from the mobile phone 200 on which the communication link is formed, the wireless communication unit 109 disconnects the communication link.

  When the device identification information is input from the communication control unit 11, the device determination unit 13 detects that communication with the device specified by the device identification information is possible, but the combination of the determination signal and the device identification information is determined. Wait for input. When the combination of the determination signal and the device identification information of the mobile phone 200 is input from the communication control unit 11, the device determination unit 13 outputs the device identification information to the authentication unit 15.

  The authentication unit 15 displays an authentication screen on the display unit 106. The authentication screen is a screen that prompts the user to input a password, and includes an area for inputting the password. When the user of the mobile phone 200 operates the operation unit 107 and inputs a password, the password is accepted from the operation unit 107. The authentication unit 15 acquires the password associated with the device identification information of the mobile phone 200 input from the device determination unit 13 and the associated data 105A stored in the HDD 105, and the password input by the user is acquired. Compare the password. If the two passwords match, the authentication unit 15 outputs a set of device identification information and a permission signal to the access control unit 17, and otherwise outputs nothing to the access control unit 17.

  FIG. 5 is a diagram illustrating an example of a format of associated data. Referring to FIG. 5, association data 105A includes an item of device identification information, an item of folder information, and an item of authentication information. In the device identification information item, device identification information for identifying a mobile phone is set. In the folder information item, the name of an area (hereinafter referred to as “folder”) of the HDD 105 is set. In the authentication information item, a password is set. Is set. The association data 105A associates the area of the HDD 105 with the device identification information of the mobile phone, and the association data 105A associates the folder of the HDD 105 with the password that is authentication information. Here, the association data 105A that associates the device identification information “Mobile1” of the mobile phone 200, the folder name “Secret”, and the password “12345” is shown. In the folder information item, names of a plurality of folders may be set. In this case, a plurality of areas of the HDD 105 are associated with one device identification information.

  Returning to FIG. 3, when the pair of the device identification information and the permission signal of the mobile phone 200 is input from the authentication unit 15 to the access control unit 17, the access control unit 17 moves to the folder in which the device identification information is associated by the association data 105 </ b> A. Allow access. The user of the mobile phone 200 can access a folder that could not be accessed before, and can prevent other people from using the data stored in the folder.

  Further, when the disconnection signal and the device identification information of the mobile phone 200 are input from the communication control unit 11, the access control unit 17 prohibits access to the folder that has been permitted to be accessed. When the disconnection signal and the device identification information of the mobile phone 200 are input from the communication control unit 11, the communication link formed between the PC 100 and the mobile phone 200 is disconnected. For example, when the user of the mobile phone 200 goes out of the communicable area 100A of the PC 100, the user of the mobile phone 200 is not operating the PC 100 away from the PC 100, and another person may operate the PC 100. It is ready. In this case, since access to a folder that has been permitted access is prohibited, it is possible to prevent data stored in the folder from being used by others.

  6A and 6B are diagrams illustrating an example of a folder list screen. FIG. 6A shows an example of a folder list screen in a state where access is prohibited, and FIG. 6B shows an example of a folder list screen in a state where access is permitted. Referring to FIGS. 6A and 6B, two folders are displayed in a state where access is prohibited. In this case, the data stored in the two folders can be accessed. On the other hand, in a state where access is permitted, the folder name “Secret” is displayed, and data stored in the folder can be accessed. On the other hand, in a state where access is prohibited, the folder name “Secret” is not displayed, and thus data stored in the folder cannot be accessed.

  FIG. 7 is a flowchart illustrating an example of the flow of access management processing. The access management process is a process executed by the CPU 101 when the CPU 101 included in the PC 100 executes an access management program. Referring to FIG. 7, CPU 101 determines whether there is a mobile phone capable of communication. The process waits until a communicable mobile phone is detected. When a communicable mobile phone is detected, the process proceeds to step S02. Here, a case where communication with the mobile phone 200 becomes possible will be described.

  In step S02, it is determined whether an access request signal is received from mobile phone 200 detected in step S01. If an access request signal is received, the process proceeds to step S03; otherwise, the process returns to step S01. That is, the processing after step S03 is executed on condition that the access request new issue is received from the communicable mobile phone 200.

  In step S03, an authentication screen is displayed on display unit 106. The authentication screen is a screen that prompts the user to input a password, and includes an area for inputting the password. In step S04, it is determined whether a password has been accepted. When the user inputs a password to the operation unit 107 according to the authentication screen, the password is accepted. If a password is accepted, the process proceeds to step S05, and if not, the process proceeds to step S09.

  In step S05, it is determined whether authentication is successful. The device identification information of the mobile phone 200 that has transmitted the access request received in step S02, the password associated with the associated data 105A stored in the HDD 105, and the password input to the operation unit 107 in step S04 If the two passwords match, it is determined that the authentication has succeeded, and if they do not match, it is determined that the authentication has failed. If the authentication is successful, the process proceeds to step S06. If the authentication fails, the process proceeds to step S09.

  In step S06, access to the area associated with the device identification information of mobile phone 200 that has transmitted the access request received in step S02 and associated data 105A stored in HDD 105 is permitted. Thereby, the user who owns the mobile phone 200 can access data stored in an area associated with the device identification information of the mobile phone 200 in the area of the HDD 105 of the PC 100.

  In step S07, it is determined whether or not communication with mobile phone 200 that has transmitted the access request received in step S02 is possible. If communication is possible, the process returns to step S06. If communication is not possible, the process proceeds to step S08. In step S08, it is determined whether or not a predetermined time has elapsed since communication is no longer possible. The predetermined time is a predetermined period, and an arbitrary period is determined. If the predetermined time has elapsed, the process proceeds to step S09; otherwise, the process returns to step S06.

  In step S09, access to the areas associated with all the device identification information is prohibited by the association data 105A stored in the HDD 105. For this reason, access to data stored in areas associated with all device identification information is prohibited. If there is an area that has been permitted access until then, access to the data stored in that area is prohibited.

  Therefore, when the user of the mobile phone 200 that has transmitted the access request received in step S02 leaves the PC 100, access to the data stored in the area associated with the device identification information of the mobile phone 200 is automatically made. Prohibited. Therefore, the user does not need to input a special operation such as logoff to the PC 100 in order to prohibit access to the data. On the other hand, in order to access the data again, it is only necessary to input a password in step S04.

  Note that step S08 may not be executed, and access may be denied as soon as communication with mobile phone 200 is no longer possible.

  FIG. 8 is a flowchart illustrating an example of the flow of login processing. The login process is a process executed by a computer that controls the mobile phone 200. Referring to FIG. 8, the computer that controls mobile phone 200 determines whether or not communication with PC 100 is possible. The process waits until communication with the PC 100 becomes possible (NO in step S11). When communication is possible, the process proceeds to step S12. Then, the selection screen shown in FIG. 4 is displayed on the display (step S12). In step S13, it is determined whether an instruction to select one of the device names displayed on the selection screen has been received. If an instruction to select is accepted, the process proceeds to step S14. If not, step S14 is skipped and the process ends. Here, a case where an instruction for selecting the device name “PC1” of the PC 100 is received will be described as an example.

  In the next step S14, an access request is transmitted to the PC 100 having the device name “PC1” selected in step S13 via the short-range wireless circuit.

<Modification>
In the above-described mobile phone, the user operates the mobile phone 200 to select the PC 100. However, in a modified example, the user operates the PC 100 to select the mobile phone 200. It is. Hereinafter, differences from the PC 100 described above will be described.

  The PC 100 in the modified example has the same function as that in FIG. 3, but the mobile phone 200 in the modified example does not transmit an access request signal, so that the device determining unit 13 can perform communication from the communication control unit 11. Device identification information of the telephone 200 is input. When one piece of device identification information is input, device decision unit 13 decides the device identification information as a mobile phone and outputs the device identification information to authentication unit 15.

  In addition, when a plurality of pieces of device identification information are input, the device determination unit 13 displays a device selection screen on the display unit 106 and asks the user which mobile phone 200 is owned. The device selection screen is a screen that displays a list of device identification information of mobile phones that can communicate. When the user of the mobile phone 200 instructs one of a plurality of device identification information displayed on the device selection screen, the device determination unit 13 outputs the instructed device identification information to the authentication unit 15.

  FIG. 9 is a flowchart illustrating an example of the flow of access management processing in the modification. Referring to FIG. 9, the difference from the access management process shown in FIG. 7 is that step S02A and step S02B are executed instead of step S02. Since other processes are the same, the description will not be repeated here.

  When a communicable mobile phone is detected in step S01, CPU 101 displays a device selection screen including device identification information of the detected communicable mobile phone on display unit 106 in step S02A. And it will be in a standby state until apparatus identification information is selected (it is NO at step S02B), and if apparatus identification information is selected (it is YES at step S02), a process will be advanced to step S03.

  As described above, when the PC 100 according to the present embodiment can communicate with the mobile phone 200, the folder with the folder name “Secret” associated with the device identification information of the mobile phone 200 among the plurality of folders of the HDD 105 Therefore, only the user who carries the mobile phone 200 can access the data stored in the folder with the folder name “Secret”. Further, when communication with the mobile phone 200 is not possible, the folder name “Secret” is not displayed, so that the existence of the folder is not known to others.

  In addition, accepting the password associated with the folder associated with the device identification information of the mobile phone 200 is a condition for permitting access to the folder with the folder name “Secret”. Only the user who knows the password can access the data stored in the folder with the folder name “Secret”.

  Further, if communication with the mobile phone 200 becomes impossible, access to the folder with the folder name “Secret” is prohibited, so that, for example, another person is stored in the folder with the folder name “Secret” while the user is away from the PC 100. I can't access my data. For this reason, access to data can be permitted only while the user operates the PC 100.

  When there are a plurality of mobile phones that can communicate with the PC 100, the user of the mobile phone 200 operates either the mobile phone 200 or the PC 100, so that the PC 100 moves the mobile phone 200 carried by the user who operates the mobile phone 200. Can be identified. The user may select the PC 100 from the selection screen displayed on the mobile phone 200, or may select the mobile phone 200 on the device selection screen displayed on the PC 100. For this reason, a complicated operation is unnecessary.

  In the embodiment described above, the PC 100 has been described as an example of the information processing apparatus. However, the invention can be understood as an access control method or an access control program for causing the PC 100 to execute FIG. 7 or FIG. Needless to say.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

It is a figure showing the whole information processing system outline in one of the embodiments of the invention. It is a block diagram which shows an example of the outline | summary of the hardware constitutions of PC. It is a functional block diagram which shows the outline | summary of the function of CPU with which PC is provided. It is a figure which shows an example of a selection screen. It is a figure which shows an example of the format of association data. It is a figure which shows an example of a folder list screen. It is a flowchart which shows an example of the flow of an access management process. It is a flowchart which shows an example of the flow of a login process. It is a flowchart which shows an example of the flow of the access management process in a modification.

Explanation of symbols

  11 communication control unit, 13 device determination unit, 15 authentication unit, 17 access control unit, 100 e-mail server, 101 CPU, 102 ROM, 103 RAM, 104 network I / F, 105 HDD, 106 display unit, 107 operation unit, 109 wireless communication unit, 200 mobile phone.

Claims (8)

A communication means capable of communicating with the mobile terminal;
A storage means having a plurality of storage areas for storing data;
Association means for associating device identification information for identifying the portable terminal with any of the plurality of storage areas;
Access control means for enabling access to a storage area associated with device identification information of the mobile terminal out of the plurality of storage areas, provided that the communication means can communicate with the mobile terminal. Information processing equipment.   The access control means enables access to the storage area on the condition that an authentication information associated with a storage area associated with the device identification information of the mobile terminal is received among the plurality of storage areas. The information processing apparatus according to claim 1.   The access control means includes an access prohibiting means for prohibiting access to the storage area when the communication means becomes unable to communicate with the portable terminal after enabling the storage area. Information processing device. The access control means includes a determining means for determining any one of the plurality of mobile terminals when there are a plurality of mobile terminals capable of communication,
The information processing apparatus according to claim 1, wherein the storage area associated with the device identification information of the determined mobile terminal is accessible.   The information processing apparatus according to claim 4, wherein the determination unit determines a mobile terminal that has transmitted predetermined information from the plurality of mobile terminals.   The information processing apparatus according to claim 4, wherein the determination unit determines a mobile terminal corresponding to the device identification information selected from at least one device identification information associated with each of the plurality of storage areas. Associating device identification information for identifying a portable terminal with any of the plurality of storage areas;
Communicating with the mobile terminal;
Making the storage area associated with the device identification information of the mobile terminal out of the plurality of storage areas accessible on the condition that communication with the mobile terminal is possible. Associating device identification information for identifying a portable terminal with any of the plurality of storage areas;
Communicating with the mobile terminal;
An access control program for causing a computer to execute a step of making a storage area associated with device identification information of the mobile terminal out of the plurality of storage areas accessible on the condition that communication with the mobile terminal is possible.

Images