JP2009177262A - Portable information processor, portable information processing method and portable information processing program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a portable information processor capable of controlling access on the basis of various items by controlling the access on the basis of a control policy and appropriately suppressing communication in details by controlling the access corresponding to an application especially. <P>SOLUTION: The portable information processor controls communication loads by radio communication, a control reference storage means stores a control reference defining information relating to the communication regulation of the application for every application identifier uniquely specifying the application to perform communication, and when receiving the request of communication start from the application, a communication determination means acquires the pertinent control reference inside the control reference storage means on the basis of the identifier of the application which requests the communication start and determines whether to perform the communication by the application corresponding to the control reference. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a portable information processing device, a portable information processing method, and a portable information processing program for controlling a communication load by wireless communication.

In a communication network using a portable information processing apparatus typified by a cellular phone, communication regulation for the purpose of controlling a network load or the like is performed.
As a technique related to these, for example, in Patent Document 1, it is an object to intensively implement communication restriction while minimizing the amount of communication at the time of communication restriction, and this wireless communication terminal implements communication restriction A communication unit that receives communication restriction information including communication restriction time information relating to a time to perform communication and a communication restriction area identifier that identifies an area in which communication restriction is to be performed; a restriction information storage unit that stores communication restriction information; A position information acquisition unit that acquires an area identifier representing a position, and a position that is included in the time specified by the communication restriction time information from the communication restriction information and that is specified by the area identifier is a communication restriction area. A restriction information extraction unit that extracts communication restriction information in the area specified by the identifier, and executes communication restriction processing based on the extracted communication restriction information It is disclosed that includes a signal restricting execution unit.
JP 2005-277905 A

However, such conventional technology only implements communication restrictions based on fixed items such as time and area, and can perform communication restrictions based on various other items. There was a problem that it was not.
The present invention has been made paying attention to such problems of the conventional technology, and by performing access control based on the control policy, it is possible to perform access control based on various items, in particular, It is an object of the present invention to provide a portable information processing apparatus, a portable information processing method, and a portable information processing program that can perform appropriate and detailed communication suppression by controlling access according to an application.

The gist of the present invention for achieving the object lies in the inventions of the following items.
[1] A portable information processing apparatus for controlling a communication load by wireless communication,
For each application identifier that uniquely identifies an application that performs communication, a control reference storage unit that stores a control reference that defines information related to communication restrictions of the application;
When a communication start request is received from an application, the corresponding control reference in the control reference storage means is acquired based on the application identifier that made the communication start request, and communication by the application is performed according to the control reference. A portable information processing apparatus, comprising: a communication determination unit that determines whether or not to perform the determination.

[2] The control reference stored in the control reference storage unit includes a restriction time zone for restricting communication for each application identifier,
The communication determination unit determines whether or not to perform communication by the application by comparing a current time with a restriction time zone included in the corresponding control standard. [1] Portable information processing device.

[3] The control reference stored in the control reference storage unit includes a data size of communication to be restricted for each application identifier,
The communication determining means determines whether or not to perform communication by the application by comparing a total of data sizes to be communicated with a data size of communication included in the corresponding control standard. The portable information processing device according to [1].

[4] The control reference stored in the control reference storage means includes, for each application identifier, a domain of a communication partner to be regulated,
The communication determination means determines whether or not to perform communication by the application by comparing a domain to be communicated with a domain included in the corresponding control standard. [1] Portable information processing device.

[5] The system further comprises a control reference receiving unit that receives the control reference distributed from the control reference management apparatus that collectively manages the control reference and stores the control reference in the control reference storage unit. ] The portable information processing apparatus according to any of

[6] A portable information processing method for controlling a communication load by wireless communication by a portable information processing device,
The portable information processing apparatus includes a control reference storage unit that stores, for each application identifier that uniquely identifies an application that performs communication, a control reference that defines information related to communication restrictions of the application,
When the portable information processing apparatus receives a communication start request from an application, the portable information processing apparatus acquires a corresponding control reference in the control reference storage unit based on an application identifier that has made the communication start request, and sets the control reference as the control reference. Accordingly, it is determined whether or not to perform communication by the application.

[7] A portable information processing program for causing a portable information processing device to control a communication load by wireless communication,
For each application identifier that uniquely identifies an application that performs communication, a control reference storage unit that stores a control reference that defines information related to communication restrictions of the application;
When a communication start request is received from an application, the corresponding control reference in the control reference storage means is acquired based on the application identifier that made the communication start request, and communication by the application is performed according to the control reference. A portable information processing program that functions as communication determination means for determining whether to perform or not.

The present invention operates as follows.
The portable information processing apparatus according to the present invention controls a communication load due to wireless communication. The control reference storage unit stores a control reference that defines information related to communication restrictions of the application for each application identifier that uniquely identifies the application that performs communication, and the communication determination unit receives a communication start request from the application. And a corresponding control standard in the control standard storage means is acquired based on the application identifier that made the communication start request, and it is determined whether or not to perform communication by the application according to the control standard. This makes it possible to perform access control based on various items by performing access control based on the control policy, and in particular, by controlling access according to the application, it is much more appropriate compared to the prior art. Thus, detailed communication suppression can be performed.

  According to the portable information processing device, the portable information processing method, and the portable information processing program according to the present invention, it is possible to perform access control based on various items by performing access control based on a control policy. By controlling access according to the above, it is possible to perform more appropriate and detailed communication suppression as compared with the prior art.

Hereinafter, an example of a preferred embodiment for realizing the present invention will be described with reference to the drawings.
FIG. 1 shows a conceptual module configuration diagram of a configuration example of the present embodiment.
The module generally refers to a component such as software or hardware that can be logically separated. Therefore, the module in the present embodiment indicates not only a module in a program but also a module in a hardware configuration. Therefore, the present embodiment also serves as an explanation of a program, a system, and a method. However, for the sake of explanation, the words “store”, “store”, and equivalent terms are used. However, when the embodiment is a program, these terms are controlled to be stored in the storage device. I mean. In addition, the modules correspond almost one-to-one with the functions. However, in mounting, one module may be composed of one program, or a plurality of modules may be composed of one program. A plurality of programs may be used. The plurality of modules may be executed by one computer, or one module may be executed by a plurality of computers in a distributed or parallel environment. Note that one module may include other modules. In the following, “connection” includes not only physical connection but also logical connection (data exchange, instruction, reference relationship between data, etc.).
Further, the system or apparatus includes a configuration in which a plurality of computers, hardware, devices, and the like are connected via a network and the like, and includes a case where the system or device is realized by a single computer, hardware, devices, and the like.
Hereinafter, a mobile phone will be mainly exemplified and described as the portable information processing apparatus.

The portable information processing apparatus 100 performs communication by wireless communication while controlling a communication load, and includes an application module 110, a communication start availability determination module 120, a control policy storage module 130, and a transmission / reception module 140.
The application module 110 is connected to a communication start availability determination module 120. The portable information processing apparatus 100 performs an operation using wireless communication with the outside, and performs communication with the outside via the communication start availability determination module 120. Specifically, there are mailers, browsers, widgets, and the like.

  The communication start availability determination module 120 is connected to the application module 110, the control policy storage module 130, and the transmission / reception module 140. When a communication start request from the application module 110 is received, a corresponding control policy in the control policy storage module 130 is acquired based on the application ID (IDentification, identifier) of the application module 110 that has made the communication start request. It is determined whether to perform communication by the application module 110 according to the control policy. Further, it may be determined whether or not to perform communication by the application module 110 by comparing the current time with the restricted time zone included in the control policy. Further, it may be determined whether or not to perform communication by the application module 110 by comparing the total data size to be communicated with the data size of communication included in the control policy. Further, it may be determined whether or not to perform communication by the application module 110 by comparing the domain to be communicated with the domain included in the control policy. The application ID is an identifier that uniquely identifies the application module 110.

The control policy storage module 130 is accessed from the communication start availability determination module 120 and stores a control policy that defines information related to communication restrictions of the application for each application identifier that uniquely identifies the application that performs communication. Specific hardware for realizing the control policy storage module 130 is a memory, and may be a removable card-type memory. Further, the control policy may include, for each application ID, a restriction time zone for restricting communication, a data size of communication to be restricted, and a domain of a communication partner to be restricted. Specifically, the stored control policy will be described later with reference to FIG.
The transmission / reception module 140 is connected to the communication start availability determination module 120 and transmits / receives data to / from the outside. The transmission / reception module 140 performs communication permitted to start communication by the communication start availability determination module 120.

FIG. 2 is an explanatory diagram showing an example of a system configuration in using the present embodiment.
The entire system includes a mobile phone 210, an in-network server 220, a Web server 230, and a communication network 240. There may be a plurality of each. Further, instead of the Web server 230, another information processing apparatus or the like may be used. Note that the mobile information processing apparatus 100 shown in FIG. The communication network 240 may be, for example, the Internet.
The mobile phone 210 communicates with the Web server 230 via the in-network server 220 and the communication network 240. During this communication, communication restriction by the portable information processing apparatus 100 is performed.
The intra-network server 220 may include an NTC policy server 1100, a notification server 1200, and the like which will be described later with reference to FIG.

  In addition, as shown in FIG. 3, the mobile phone 210 is used to input characters such as a microphone 305 that can input voice so as to have a function as a telephone, a speaker 304 that can output voice, and a telephone number or application module 110. A key 302, an antenna 303 for transmitting and receiving radio waves, and a display 301 for displaying a result of character input by the key 302, reception result, processing result by the application module 110, and the like. In addition, a camera or the like may be provided. The mobile phone 210 includes hardware such as a CPU, a memory, and a communication circuit, and stores a computer program, which is software for realizing the mobile information processing apparatus 100, in the memory. The portable information processing apparatus 100 is realized in cooperation with resources.

FIG. 4 is a flowchart showing an example of processing according to this embodiment.
In step S402, the application module 110 makes a communication start request for communication with the Web server 230 to the communication start availability determination module 120 in response to a user instruction from the mobile phone 210, and determines whether or not communication can be started. The determination module 120 receives the communication start request. The communication start request may be an initial communication start when starting a series of communication, or may be a communication start request when transmitting / receiving individual packets like packet communication. Therefore, in the latter case, communication may have already occurred.
In step S <b> 404, the communication start availability determination module 120 searches for the control policy stored in the control policy storage module 130 using the application ID in the communication start request from the mobile phone 210. Then, the control policy corresponding to the application ID is acquired.

In step S406, the communication start availability determination module 120 acquires the current time using a clock built in the mobile phone 210. The time here may include not only the hour and minute but also the date.
In step S <b> 408, the communication start availability determination module 120 acquires the data size in communication that the application module 110 is to perform from the application module 110. Alternatively, after the first communication is started, the total of the data sizes transmitted and received in the previous communication is calculated. Here, the total of the data size only for transmission and the total of the data size only for reception may be calculated. This corresponds to the case where the data size to be compared in the control policy is only reception and only transmission.
In step S410, the communication start availability determination module 120 acquires the domain type of the Web server 230 with which the application module 110 is to communicate.

In step S412, the communication start availability determination module 120 compares the reference in the control policy acquired in step S404 with the data acquired in steps S406 to S410, and determines whether the application module 110 can start communication. . If permitted by such determination, the process proceeds to step S414, and if rejected, the process proceeds to step S416.
In step S414, the communication start permission determination module 120 notifies the transmission / reception module 140 that communication is permitted, and the transmission / reception module 140 starts communication with the external Web server 230.
In step S416, the communication start availability determination module 120 informs the transmission / reception module 140 or the application module 110 that communication is refused, and presents that the application module 110 cannot communicate on the display 301 of the mobile phone 210 or the like.

FIG. 5 is an explanatory diagram showing an example of the data structure of the control policy 500.
The control policy 500 has an XML version column 510 and an application list column 520.
The control policy 500 itself is described in XML (Extensible Markup Language), and the XML version column 510 indicates the version of the XML.
The application list column 520 stores parameters for determining whether or not communication restriction should be performed for each application ID of an application that is subject to communication restriction.

The application list column 520 includes an App1 column 530, an App2 column 540, and an App3 column 550.
The App1 column 530 includes an application ID column 531, a restriction time zone column 532, a data size column 533, and a domain type column 534.
The application ID column 531 stores the ID of an application subject to communication restriction. For example, the ID of an application for which communication restrictions should be strengthened, and the ID of an application that does not need to be restricted.

The restriction time zone column 532 stores a time zone in which communication restriction of the application is performed. That is, if the current time falls within that time zone, it will be subject to communication restrictions. For example, a time zone within one day can be designated, such as 1 to 3 o'clock, or a time zone can be designated after limiting the days of the week. Moreover, you may make it designate a time slot | zone using a date.
The data size column 533 stores a data size that restricts communication. If it is less than this data size, it is a value that permits communication. For example, the sum of packet sizes in one day may be used.
The domain type column 534 stores the domain type of the communication partner to be regulated. This domain is subject to communication restrictions. For example, it is used when a domain to be subjected to communication restriction is specified for each class determined by a certificate of PKI (Public Key Infrastructure). More specifically, there are an operator domain, a trusted party domain, an untrusted domain, and the like.
The App2 column 540 and the App3 column 550 also have a data structure equivalent to that of the App1 column 530.

FIG. 6 is an explanatory diagram showing an arrangement example (No. 1) of an NTC (Network Traffic Controller). That is, the module configuration shown in FIG. 1 is shown from another viewpoint (protocol layer). 7 to 9 are also shown from the same viewpoint.
That is, the portable information processing apparatus 100 includes an application layer 610, a protocol layer 620, an NTC 630, a TCP / UDP layer 640, an IP layer 650, and a radio bearer layer 660. The application module 110 corresponds to the application layer 610, the communication start availability determination module 120 corresponds to the protocol layer 620 and the NTC 630, the control policy storage module 130 corresponds to the control policy 631, and the transmission / reception module 140 corresponds to the TCP / UDP layer. 640, IP layer 650, and radio bearer layer 660.
The NTC 630 is located between the protocol layer 620 and the TCP / UDP layer 640, and the protocol layer 620 operates in the same manner as the conventional TCP / UDP layer 640. The determination result of the NTC 630 is notified to the protocol layer 620. As a result, when this embodiment is applied to the conventional mobile phone 210, it is necessary to expand the error notification received by the protocol layer 620, but it is not necessary to modify the application layer 610.

The application layer 610 includes a mailer 611, a browser 612, and a widget 613 that are applications. Any of these makes a communication start request including the application ID of itself to the protocol layer 620.
The protocol layer 620 includes SMTP 621, HTTP 622, SIP 623, and Streaming Protocols 624. A communication start request is received from the application layer 610, and one of the protocol layers 620 performs processing according to the communication protocol. Then, the communication start request (including the application ID) is passed to the NTC 630.

  The NTC 630 has a control policy 631. The NTC 630 monitors a request from the protocol layer 620 to the TCP / UDP layer 640, and makes a determination as described above using the control policy 631 in the case of a communication start request. If the determination result is permission to start communication, the communication control is passed to the TCP / UDP layer 640, which is a lower layer, in order to start communication as it is. In the case of refusal, the communication start request is rejected and an error is notified to the protocol layer 620. The error is an error for each protocol, and the protocol layer 620 returns the error to the application layer 610.

  The TCP / UDP layer 640, the IP layer 650, and the radio bearer layer 660 have a layer configuration in accordance with a communication protocol for the mobile phone 210 to communicate with the Web server 230 or the like. It may be. The TCP / UDP layer 640 has a function of managing each packet by TCP (Transmission Control Protocol) or UDP (User Datagram Protocol) and monitoring whether there is any missing data. The IP layer 650 has a function of passing packets between different networks. The radio bearer layer 660 (Radio Bearer) has a function of transmitting data as a bit string without processing information content.

FIG. 7 is an explanatory diagram showing an arrangement example (part 2) of the NTC.
The portable information processing apparatus 100 includes an application layer 710, a protocol layer 620, an NTC 730, a TCP / UDP layer 640, an IP layer 650, and a radio bearer layer 660. The application module 110 corresponds to the application layer 710, the communication start availability determination module 120 corresponds to the protocol layer 620 and the NTC 730, the control policy storage module 130 corresponds to the control policy 731, and the transmission / reception module 140 corresponds to the TCP / UDP layer. 640, IP layer 650, and radio bearer layer 660. Further, the same type of parts as those shown in FIG. The same applies to FIGS. 8 and 9 below.
The NTC 730 is located between the protocol layer 620 and the TCP / UDP layer 640 in the same manner as shown in FIG. 6, and the protocol layer 620 operates in the same manner as the conventional TCP / UDP layer 640. The determination result of the NTC 730 is notified to the protocol layer 620 and the application layer 710.

Similar to the application layer 610 illustrated in FIG. 6, the application layer 710 includes a mailer 711, a browser 712, and a widget 713. However, it differs from the application layer 610 shown in FIG. 6 in that an error notification is received from the NTC 730.
The NTC 730 has a control policy 731. The NTC 730 monitors requests from the protocol layer 620 to the TCP / UDP layer 640, and makes a determination as described above using the control policy 731 in the case of a communication start request. If the determination result is permission to start communication, the communication control is passed to the TCP / UDP layer 640, which is a lower layer, in order to start communication as it is. In the case of refusal, the communication start request is rejected and an error is notified to the protocol layer 620 and the application layer 710.

FIG. 8 is an explanatory view showing an arrangement example (part 3) of the NTC.
The portable information processing apparatus 100 includes an application layer 610, a protocol layer 820, an NTC 830, a TCP / UDP layer 640, an IP layer 650, and a radio bearer layer 660. The application module 110 corresponds to the application layer 610, the communication start availability determination module 120 corresponds to the protocol layer 820 and the NTC 830, the control policy storage module 130 corresponds to the control policy 831, and the transmission / reception module 140 corresponds to the TCP / UDP layer. 640, IP layer 650, and radio bearer layer 660.

Each protocol (SMTP 821, HTTP 822, SIP 823, Streaming Protocols 824) in the protocol layer 820 determines whether communication can be started. That is, for example, the SMTP 821 uses the NTC determination 825 to determine whether to start communication. The NTC 830 manages the control policy 831 and notifies the control policy 831 in response to an acquisition request from each protocol in the protocol layer 820.
Each protocol in the protocol layer 820 passes communication control to the TCP / UDP layer 640 which is a lower layer in order to start communication as it is when the determination result is permission to start communication. In the case of refusal, the communication start request is rejected and an error is notified to the application layer 610.
As a result, when the present embodiment is applied to the conventional mobile phone 210, the determination as to whether or not communication can be started is closed within the protocol layer 820, and the application layer 610 need not be modified.

FIG. 9 is an explanatory view showing an arrangement example (No. 4) of NTC.
The portable information processing apparatus 100 includes an application layer 910, a protocol layer 920, an NTC 930, a TCP / UDP layer 640, an IP layer 650, and a radio bearer layer 660. The application module 110 corresponds to the application layer 910, the communication start availability determination module 120 corresponds to the NTC 930, the control policy storage module 130 corresponds to the control policy 931, and the transmission / reception module 140 includes the protocol layer 920 and the TCP / UDP layer. 640, IP layer 650, and radio bearer layer 660.

Similar to the application layer 610 illustrated in FIG. 6, the application layer 910 includes a mailer 911, a browser 912, and a widget 913. However, each application confirms whether or not communication can be started with the NTC 930 before starting communication. That is, the NTC 930 is inquired about whether communication can be started, and the NTC 930 determines whether communication can be started accordingly. Each application determines whether to start communication based on the determination result of NTC 930. If the determination result is permission to start communication, communication control is passed to the protocol layer 920 which is a lower layer in order to start communication as it is. Thereafter, communication is performed based on the normal communication protocol. In the case of refusal, an error is presented to the operator of the mobile phone 210.
As a result, each application needs to be modified, but the protocol layer 920 need not be modified. That is, even in the case of refusal, processing by the protocol layer 920 does not occur. Further, since the interface with each application can be freely set, detailed control by the NTC 930 is possible.

FIG. 10 is a diagram illustrating a module configuration example of a system for distributing a control policy.
This system includes a mobile phone 210, an NTC policy server 1100, and a notification server 1200. In addition, the same code | symbol is attached | subjected to the site | part of the same kind as what was shown in FIG.

  The mobile phone 210 includes an update notification receiving module 1310, a control policy request module 1320, and a control policy download module 1330, and is connected to the NTC policy server 1100 and the notification server 1200 via a communication line. The mobile phone 210 regulates communication according to the control policy. The control policy is collectively managed by the NTC policy server 1100, receives the control policy distributed from the NTC policy server 1100, and stores it in the control policy storage module 130 shown in FIG.

The update notification receiving module 1310 receives a notification transmitted from the notification server 1200. The notification is that the control policy has been updated.
The control policy request module 1320 transmits an HTTPS Request to the URL described in the notification in response to the operation of the operator of the mobile phone 210. The URL indicates the position of the corresponding control policy in the control policy storage module 1110 of the NTC policy server 1100.
The control policy download module 1330 receives the updated control policy from the NTC policy server 1100 and stores it in the control policy storage module 130.

The NTC policy server 1100 includes a control policy storage module 1110, an update module 1120, a notification instruction module 1130, and a control policy distribution module 1140. The NTC policy server 1100 communicates with the mobile phone 210 and the notification server 1200 via a communication line. Connected.
The control policy storage module 1110 stores a control policy and is accessed from the update module 1120 and the control policy distribution module 1140.
The update module 1120 is connected to the control policy storage module 1110 and the notification instruction module 1130, and updates the control policy stored in the control policy storage module 1110. Further, the notification instruction module 1130 is notified that the update has been made.
When the notification instruction module 1130 is connected to the update module 1120 and receives a notification that the control policy has been updated from the update module 1120, the notification instruction module 1130 identifies the mobile phone 210 to be controlled by the control policy, and sends it to the notification server 1200. A request to notify the corresponding mobile phone 210 is transmitted.
The control policy distribution module 1140 is connected to the control policy storage module 1110, receives an HTTPS request from the mobile phone 210, and distributes the control policy stored in the control policy storage module 1110 using an HTTPS response.

The notification server 1200 includes an instruction reception module 1210 and an update notification module 1220, and is connected to the mobile phone 210 and the NTC policy server 1100 via a communication line. Note that the NTC policy server 1100 and the notification server 1200 may be integrated. However, by consolidating the NTC policy server 1100 and the notification server 1200, control policy distribution congestion is reduced.
The instruction receiving module 1210 receives notification that the control policy has been updated from the NTC policy server 1100 and creates data for notifying the instructed mobile phone 210. In the notification data, the fact that the control policy has been updated and the URL of the updated control policy (the storage location of the control policy in the control policy storage module 1110) are described.
The update notification module 1220 transmits the notification data created by the instruction receiving module 1210 to the mobile phone 210. Specifically, the method of notifying the update notification module 1220 to the mobile phone 210 includes, for example, e-mail, IMS (IP Multimedia Subsystems), and the like.

Here, a processing example when the control policy is updated by the NTC policy server 1100 itself will be described.
(1) The control policy is updated by the update module 1120 of the NTC policy server 1100, and the notification instruction module 1130 transmits a notification to that effect to the notification server 1200.
(2) A notification that the control policy has been updated is transmitted from the update notification module 1220 of the notification server 1200 to the mobile phone 210.
(3) The mobile phone 210 receives the notification from the notification server 1200 and transmits an HTTPS Request to the URL in the notification.
(4) The control policy distribution module 1140 of the NTC policy server 1100 distributes the control policy updated by the HTTPS Response to the mobile phone 210.

Next, a processing example when the control policy is updated mainly by the mobile phone 210 will be described.
(1) The mobile phone 210 transmits an HTTPS request to the NTC policy server 1100.
(2) The latest control policy is distributed from the NTC policy server 1100 using HTTPS Response.

  Note that the hardware configuration of a computer on which the program according to the present embodiment is executed is a general computer as shown in FIG. 11, and more specifically, many processes other than the process according to the present embodiment. It is a computer that can be a server that can execute the above. CPU 1110 for executing programs such as update module 1120, notification instruction module 1130, control policy distribution module 1140, instruction reception module 1210, update notification module 1220, RAM 1130 for storing the programs and data, and for starting up the computer A ROM 1120 for storing programs and the like, an HD 1140 as an auxiliary storage device, a keyboard, a mouse, and the like to input data by an operator's operation or output data to a CRT, a liquid crystal display, etc., and serve as an interface with the operator UI / F 1150, removable media reader / writer 1160 for reading and writing to removable media such as CD-R, communication line I / F 1170 for connecting to a communication network, and And a bus 1180 for exchanging data by connecting. A plurality of these computers may be connected to each other via a network.

  In the above description of the embodiment, a mobile phone has been mainly described as an example of the mobile information processing apparatus. However, it is obvious that the present invention can be applied to a system that provides various different services in line use. is there. Therefore, the present invention can be applied to satellite communication, WLAN service, so-called PHS, and the like.

Note that the described program can be stored in a recording medium.
The “computer-readable recording medium on which a program is recorded” refers to a computer-readable recording medium on which a program is recorded, which is used for program installation, execution, program distribution, and the like.
The recording medium is, for example, a digital versatile disc (DVD), which is a standard established by the DVD Forum, such as “DVD-R, DVD-RW, DVD-RAM,” and DVD + RW. Standards such as “DVD + R, DVD + RW, etc.”, compact discs (CDs), read-only memory (CD-ROM), CD recordable (CD-R), CD rewritable (CD-RW), etc. MO), flexible disk (FD), magnetic tape, hard disk, read only memory (ROM), electrically erasable and rewritable read only memory (EEPROM), flash memory, random access memory (RAM), etc. It is.
The program or a part of the program can be recorded on the recording medium and stored or distributed. Also, by communication, for example, a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a wired network used for the Internet, an intranet, an extranet, etc., or wireless communication It can be transmitted using a transmission medium such as a network or a combination thereof, and can also be carried on a carrier wave.
Furthermore, the program may be a part of another program, or may be recorded on a recording medium together with a separate program.

It is a figure which shows the module structural example of the portable information processing apparatus of one embodiment of this invention. It is explanatory drawing which shows the example of the system form at the time of utilizing this Embodiment. It is explanatory drawing which shows the structural example of a mobile telephone. It is a flowchart which shows the process example by this Embodiment. It is explanatory drawing which shows the data structure example of a control policy. It is explanatory drawing which shows the example of arrangement | positioning of NTC (the 1). It is explanatory drawing which shows the example of arrangement | positioning (the 2) of NTC. It is explanatory drawing which shows the example of arrangement | positioning (the 3) of NTC. It is explanatory drawing which shows the example of arrangement | positioning (the 4) of NTC. It is a figure which shows the module structural example of the system which distributes a control policy. It is a block diagram which shows the hardware structural example of the computer which implement | achieves this Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Mobile information processing apparatus 110 ... Application module 120 ... Communication start availability judgment module 130 ... Control policy storage module 140 ... Transmission / reception module 210 ... Mobile phone 220 ... In-network server 230 ... Web server 240 ... Communication network 1100 ... NTC policy server 1110 ... control policy storage module 1120 ... update module 1130 ... notification instruction module 1140 ... control policy distribution module 1200 ... notification server 1210 ... instruction reception module 1220 ... update notification module 1310 ... update notification reception module 1320 ... control policy request module 1330 ... control policy Download module

Claims (7)

A portable information processing device for controlling a communication load by wireless communication,
For each application identifier that uniquely identifies an application that performs communication, a control reference storage unit that stores a control reference that defines information related to communication restrictions of the application;
When a communication start request is received from an application, the corresponding control reference in the control reference storage means is acquired based on the application identifier that made the communication start request, and communication by the application is performed according to the control reference. A portable information processing apparatus, comprising: a communication determination unit that determines whether or not to perform the determination. The control reference stored in the control reference storage means includes a restriction time zone for restricting communication for each application identifier,
The communication determination unit determines whether or not to perform communication by the application by comparing a current time with a restriction time zone included in the corresponding control standard. Portable information processing device. The control reference stored in the control reference storage means includes the data size of communication to be restricted for each application identifier,
The communication determining means determines whether or not to perform communication by the application by comparing a total of data sizes to be communicated with a data size of communication included in the corresponding control standard. The portable information processing apparatus according to claim 1. The control reference stored in the control reference storage means includes, for each application identifier, a domain of a communication partner to be regulated,
The communication determination unit determines whether or not to perform communication by the application by comparing a domain to be communicated with a domain included in the corresponding control standard. Portable information processing device. The control reference receiving unit for receiving the control reference distributed from the control reference management apparatus that collectively manages the control reference and storing the control reference in the control reference storage unit. Portable information processing device. A portable information processing method for controlling a communication load by wireless communication by a portable information processing device,
The portable information processing apparatus includes a control reference storage unit that stores, for each application identifier that uniquely identifies an application that performs communication, a control reference that defines information related to communication restrictions of the application,
When the portable information processing apparatus receives a communication start request from an application, the portable information processing apparatus acquires a corresponding control reference in the control reference storage unit based on an application identifier that has made the communication start request, and sets the control reference as the control reference. Accordingly, it is determined whether or not to perform communication by the application. A portable information processing program for causing a portable information processing device to control a communication load by wireless communication,
For each application identifier that uniquely identifies an application that performs communication, a control reference storage unit that stores a control reference that defines information related to communication restrictions of the application;
When a communication start request is received from an application, the corresponding control reference in the control reference storage means is acquired based on the application identifier that made the communication start request, and communication by the application is performed according to the control reference. A portable information processing program that functions as communication determination means for determining whether to perform or not.

Images