JP2011059922A - Management server device, device management system, and device management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To overcome the problem in a conventional operation management system of devices such as a plurality of secure devices used by a user, wherein the devices have no function of executing processing to the plurality of devices in a batch, and configured to individually execute processing to each device, when executing the same processing to the plurality of devices, thereby the processing is time consuming and processing omission occurs. <P>SOLUTION: A secure device management server 30 stores a database A300a in which user ID and secure device ID are associated with each other, in advance. When acquiring the user ID, processing content and a parameter input by a terminal 10, the secure device management server acquires secure device ID from the database A300a by using the user ID as a key, and registers the command set of each secure device ID in a database D300d on the basis of the acquired secure device ID, processing content and the parameter. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to management of devices such as an IC card (Integrated Circuit Card) that can execute an application, and in particular, a management server device, a device management system, and the like for executing specific processing on a plurality of devices at once. And a device management method.

  Conventionally, there is a system for operating and managing secure devices such as an IC card and a human body communication device (Non-Patent Document 1) that can execute a predetermined application. For example, the IC card operation management system disclosed in Non-Patent Document 2 is used in conjunction with a function for downloading an application corresponding to a specific service to an IC card held by a user or an application. It has a function for setting / updating data, a function for stopping use of application, and a function for canceling use stop. In addition, the secure device itself has a function to stop use, cancel use stop, and end use.

Nippon Telegraph and Telephone Corporation, NTT Electronics Corporation, “New Human Area Network Technology“ RedTacton ”with Surface of Human Body as Transmission Line”, [online], Nippon Telegraph and Telephone Corporation , NTT Electronics Corporation [Search August 21, 2009], Internet <URL: http://www.ntt.co.jp/news/news08/0804/080423a.html> Nippon Telegraph and Telephone Corporation, “Information and Communication Glossary“ NICE ””, [online], Nippon Telegraph and Telephone Corporation, [Search August 21, 2009], Internet <URL: http: //www.ntt-review .jp / yougo / word.php? word_id = 1447>

  Incidentally, a user of a secure device may have a plurality of secure devices. When the user wants to execute the same processing for multiple secure devices, the conventional secure device operation management system does not have the function to execute the processing for multiple secure devices at once, but for each secure device individually. It was necessary to execute processing. As a result, problems such as time-consuming execution of processing and omission of processing have occurred. The same problem may occur not only in a secure device but also in other devices having a function of executing an application.

  Therefore, the present invention provides a management server device, a device management system, and a device management method capable of solving the above-described problems and collectively executing a specific process for a plurality of devices used by a user. The purpose is realization.

  In order to solve the above problems, the present invention provides a management server device (for example, the secure device management server in FIG. 1) that manages a device having a function of executing an application (for example, the secure device in FIG. 1), User identification information (for example, “user ID” in FIG. 1) that is information for identifying a user who uses the device, and information for identifying at least one device used by the user. User identification information holding means (for example, database A 300a in FIG. 1, user identification information holding unit 301 in FIG. 3) that holds certain device identification information (for example, “secure device ID” in FIG. 1) in association with each other; , From the outside of the device itself, the user identification information and processing information (for example, “processing of FIG. Content ”and“ parameter ”) (for example, the communication function unit 310 in FIG. 1, the user identification information acquisition unit 302 in FIG. 3), and the acquired user identification information. Processing information holding means for acquiring associated device identification information from the user identification information holding means and holding the acquired device identification information and the processing information in association with each other (for example, user information in FIG. 1) A management server device characterized by having a management unit 320, a command management unit 330, a database D300d, and a processing information holding unit 303) of FIG. 3 is proposed.

  According to this configuration, when a user executes a specific process for a plurality of devices used by the user, the user does not register the process information in the management server device for each device, By simply inputting processing information to the management server device, it is possible to register the processing to be executed for a plurality of devices in a batch. In other words, it is not necessary to execute processing for each device, and therefore it is possible to save time and trouble in executing processing.

  Also, device identification information acquisition means (for example, the communication function unit 310 in FIG. 1 and the device identification information acquisition unit 304 in FIG. 3) that acquires the device identification information from the device, and the acquired device identification information. Processing information transmission means (for example, the communication function unit 310 in FIG. 1 and the processing information transmission unit 305 in FIG. 3) that obtains processing information from the processing information holding unit and transmits the processing information to the device. It may be.

  According to this configuration, when a user connects a device to the management server device, the processing information registered in advance in the management server device is similarly transmitted to the plurality of devices of the user, and is the same in each device. Can be executed.

  In addition, it further includes determination means (for example, database B300b, database C300c, and command management unit 330 in FIG. 1, and determination unit 306 in FIG. 3) for determining the device type of the device (for example, the secure device type in FIG. 1). Then, the processing information transmission means may transmit processing information (for example, the command set of FIG. 1) corresponding to the determined device type to the device.

  Generally, there are various types of devices such as an IC card and a mobile phone, and processing commands to be transmitted to the device may differ depending on these types. According to the above configuration, even if a plurality of devices held by the user are of different types, it is possible to transmit an appropriate processing command or the like according to the type of each device.

  Also, the present invention provides a device management having a device (for example, the secure device in FIG. 1) having a function of executing an application and a management server device (for example, the secure device management server in FIG. 1) that manages the device. In the system, the management server device uses user identification information (for example, “user ID” in FIG. 1) that is information for identifying a user who uses the device, and the user uses the information. User identification information holding means (for example, database A300a in FIG. 1, FIG. 1), which associates and holds device identification information (eg, “secure device ID” in FIG. 1) that is information for identifying at least one device. 3 user identification information holding unit 301), and the user identification information and the device are executed from outside the own apparatus. User identification information acquisition means (for example, the communication function unit 310 in FIG. 1 and the user in FIG. 3) that acquires processing information (for example, “processing contents” and “parameters” in FIG. 1), which is information indicating processing. The identification information acquisition unit 302) acquires device identification information associated with the acquired user identification information from the user identification information holding unit, and associates the acquired device identification information with the processing information. The device identification information is acquired from the processing information holding means (for example, the user information management unit 320, the command management unit 330, and the database D300d in FIG. 1, the processing information holding unit 303 in FIG. 3) and the device. Device identification information acquisition means (for example, the communication function unit 310 in FIG. 1, the device identification information acquisition unit 304 in FIG. 3), and the acquired device identification information. Processing information transmission means (for example, the communication function unit 310 in FIG. 1 and the processing information transmission unit 305 in FIG. 3) that acquires processing information associated with information from the processing information holding unit and transmits the processing information to the device; The device includes device identification information transmission means (for example, device identification information transmission unit 401 in FIG. 3) for transmitting device identification information for identifying the device itself, and the processing information transmission of the management server device. Proposed is a device management system comprising processing information acquisition means (for example, processing information acquisition unit 402 in FIG. 3) for acquiring the processing information transmitted by the means.

  According to this configuration, when a user executes a specific process for a plurality of devices used by the user, the user does not register the process information in the management server device for each device, By simply inputting processing information to the management server device, it is possible to register the processing to be executed for a plurality of devices in a batch. When a user connects a device to the management server device, the processing information registered in advance in the management server device is sent to the user's multiple devices in the same way, and the same processing is executed in each device. can do. Therefore, the user can save time and effort when executing the same processing for a plurality of devices used by the user, and can prevent processing omission.

  Further, the present invention is a management server device (for example, the secure device management server in FIG. 1) that manages a device (for example, the secure device in FIG. 1) having a function of executing an application, and a user who uses the device User identification information (for example, “user ID” in FIG. 1) and device identification information (for example, information for identifying at least one device used by the user) 1 is executed by a management server apparatus having user identification information holding means (for example, database A 300a in FIG. 1, user identification information holding unit 301 in FIG. 3). A device management method for indicating the user identification information and the processing to be executed on the device from the outside of the device. Information (for example, “processing contents” and “parameters” in FIG. 1), and a user identification information acquisition step (for example, step S100 in FIG. 4) to acquire, and the acquired user identification information. A processing information holding step for acquiring associated device identification information from the user identification information holding unit and holding the acquired device identification information and the processing information in association with each other (for example, steps S102 to S102 in FIG. 4). And a device management method characterized by comprising S108).

  According to this configuration, when a user executes a specific process for a plurality of devices used by the user, the user does not register the process information in the management server device for each device, By simply inputting processing information to the management server device, it is possible to register the processing to be executed for a plurality of devices in a batch. In other words, it is not necessary to execute processing for each device, and therefore it is possible to save time and trouble in executing processing.

  Further, the device management method acquires a device identification information acquisition step (for example, step S206 in FIG. 5) for acquiring the device identification information and processing information associated with the acquired device identification information from the device. And a processing information transmission step (for example, steps S208 and S210 in FIG. 5) to be transmitted to the device.

  According to this configuration, when a user connects a device to the management server device, the processing information registered in advance in the management server device is similarly transmitted to the plurality of devices of the user, and is the same in each device. Can be executed.

  The present invention also includes a device having a function of executing an application (for example, the secure device in FIG. 1) and a management server device (for example, the secure device management server in FIG. 1) that manages the device. User identification information (for example, “User ID” in FIG. 1) that is information for identifying a user to be used and device identification that is information for identifying at least one device used by the user Management server having user identification information holding means (for example, database A 300a in FIG. 1, user identification information holding unit 301 in FIG. 3) that holds information (for example, “secure device ID” in FIG. 1) in association with each other A device management method executed by an apparatus, wherein, in the management server apparatus, the user identification is performed from outside the own apparatus. A user identification information acquisition step (for example, FIG. 4) that acquires information and processing information (for example, “processing content” and “parameter” in FIG. 1) indicating information to be executed on the device. In step S100), in the management server device, device identification information associated with the acquired user identification information is acquired from the user identification information holding means, and the acquired device identification information, the processing information, , A processing information holding step (for example, steps S102 to S108 in FIG. 4), and a device identification information transmitting step for transmitting device identification information for identifying the device itself to the management server apparatus in the device. (For example, in step S204 of FIG. 5), in the management server device, from the device, The device identification information acquisition step (for example, step S206 in FIG. 5) for acquiring the device identification information and the processing information associated with the acquired device identification information in the management server device are acquired from the processing information holding means. Then, a processing information transmission step (for example, steps S208 and S210 in FIG. 5) to be transmitted to the device, and a processing information acquisition step (for example, to acquire the processing information transmitted from the management server device in the device) And a device management method characterized by comprising: step S212) of FIG.

  According to this configuration, when a user executes a specific process for a plurality of devices used by the user, the user does not register the process information in the management server device for each device, By simply inputting processing information to the management server device, it is possible to register the processing to be executed for a plurality of devices in a batch. When a user connects a device to the management server device, the processing information registered in advance in the management server device is sent to the user's multiple devices in the same way, and the same processing is executed in each device. can do. Therefore, the user can save time and effort when executing the same processing for a plurality of devices used by the user, and can prevent processing omission.

  The present invention is also a device management program for managing a device having a function of executing an application (for example, the secure device in FIG. 1), and is a user that is information for identifying a user who uses the device. Identification information (for example, “user ID” in FIG. 1), device identification information (for example, “secure device ID” in FIG. 1) that is information for identifying at least one device used by the user, and , The user identification information holding means (for example, the database A300a in FIG. 1, the user identification information holding unit 301 in FIG. 3), the user identification information, and the device from the outside of the own device. User identification information for acquiring processing information (for example, “processing contents” and “parameters” in FIG. 1) that is information indicating processing to be executed for The acquisition unit (for example, the communication function unit 310 in FIG. 1 and the user identification information acquisition unit 302 in FIG. 3) and the device identification information associated with the acquired user identification information are obtained from the user identification information holding unit. Processing information holding means (for example, the user information management unit 320, the command management unit 330, and the database D300d in FIG. 1), which stores the acquired device identification information and the processing information in association with each other. We propose a device management program that causes a computer (for example, the secure device management server in FIG. 1) to function as a processing information holding unit 303).

  According to this configuration, when a user executes a specific process for a plurality of devices used by the user, the user does not register the process information in the computer for each device, but the user identification information and the process information. Can be registered in a lump by simply inputting to the computer. In addition, when a user connects a device to the computer, processing information registered in the computer in advance is transmitted to a plurality of devices of the user in the same manner, and the same processing is executed in each device. Can do. Therefore, the user can save time and effort when executing the same processing for a plurality of devices used by the user, and can prevent processing omission.

  As described above, according to the present invention, when a user executes a specific process for a plurality of devices used by the user, the user does not register the processing information in the management server device for each device. By simply inputting the user identification information and the processing information to the management server apparatus, it is possible to register the processes to be executed for a plurality of devices at once. Thereby, the trouble at the time of performing a process can be saved, and a process omission can be prevented.

It is a figure which shows the structural example of a secure device management system. 5 is a diagram illustrating a specific example of a command set 200. FIG. It is a figure which shows another example of a structure of a secure device management system. FIG. 10 is a sequence diagram showing a flow of processing when processing to be executed on the secure device 40a and the like is registered in the secure device management server 30. It is a sequence diagram which shows the flow of a process when a process is performed in the secure device 40a etc. FIG.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In addition, in each figure referred below, an equivalent part is shown with the same code | symbol.

(Secure device management system configuration)
First, the configuration of the secure device management system according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram showing a configuration of a secure device management system.

  The secure device management system shown in FIG. 1 includes a terminal 10, a reader / writer 20, and a secure device management server 30. When a secure device owner or a secure device administrator (hereinafter referred to as a user) executes a specific process on the secure devices 40a, 40b, and 40c that the secure device 40a, 40b, and 40c use, the user uses the terminal 10 first. The user ID and processing contents are input. The input information is transmitted to the secure device management server 30, and the secure device management server 30 registers an execution command for executing the processing contents for each of the plurality of secure devices 40a used by the user. The Thereafter, when the user connects any one of the plurality of secure devices 40a and the like to the reader / writer, the secure device management server 30 securely executes the execution command corresponding to the secure device 40a and the like via the reader / writer 20. It transmits to the device 40a etc. Then, the secure device 40a or the like executes processing based on the transmitted execution command. When the user connects the secure devices 40a and the like to the reader / writer 20 in order, the same processing is repeated each time. With such a mechanism, a user can execute a specific process for a plurality of secure devices 40a and the like used by the user at once by simply inputting a user ID and processing contents into the terminal 10 once. Can do. Hereinafter, each configuration of the secure device management system will be described.

(Terminal configuration)
The terminal 10 is a terminal operated by a user of the secure device, and is connected to the secure device management server 30 via a network. When a user of the secure device 40a or the like executes a specific process on the secure device 40a or the like used by the user, first, on the input screen displayed on the screen of the terminal 10, the user ID, the processing content, and the parameter Enter. Here, the user ID is identification information for identifying a user who uses the secure device 40a and the like, and is information assigned to each user in advance in the secure device management system.

  Here, the secure device is a device having a function of executing an application, and specifically includes an IC card, a mobile phone having an IC card function, a human body communication device, and the like.

  Further, the processing content is information indicating processing to be executed on the secure device 40a and the like. Specifically, the process executed on the secure device 40a and the like includes downloading of an application corresponding to a specific service, setting / updating of data used accompanying the application, suspension of use of the application, and suspension of use of the application. Processing such as release, use stop of the secure device 40a itself, release of use stop, use end, and the like are applicable. The parameter is data to be executed along with the processing content. For example, when the processing content is application download, information such as an application ID indicating the application to be downloaded corresponds to the parameter.

  When receiving an input from the user, the terminal 10 transmits the input user ID, processing content, and parameters to the secure device management server 30. Specifically, the terminal 10 is realized by, for example, a PC (personal computer) or a mobile phone.

(Configuration of reader / writer)
The reader / writer 20 has a function of reading / writing information from / to the secure devices 40a, 40b, 40c. The reader / writer 20 is connected to the secure device management server 30 via a network, and the secure device 40a and the like can communicate with the secure device management server 30 by connecting to the reader / writer 20. Become. That is, the reader / writer 20 plays a role of mediating communication between the secure device management server 30 and the secure device 40a. However, when the secure device 40a or the like is a mobile phone or the like and has a communication function with the secure device management server 30, the mobile phone that is the secure device 40a or the like may also have the function of the reader / writer 20.

(Secure device management server configuration)
The secure device management server 30 is a server device that manages secure devices. The secure device management server 30 includes a database 300, a communication function unit 310, a user information management unit 320, and a command management unit 330.

  The database 300 includes four databases 300a, 300b, 300c, and 300d. The database A 300a is a database that holds a user ID and a secure device ID in association with each other. The secure device ID is identification information for identifying at least one secure device used by each user, and is identification information assigned in advance for each secure device in the secure device management system.

  The database B 300b is a database that holds a secure device type and a secure device ID in association with each other. The secure device type is information indicating the type of the secure device 40a and the like, and specifically, is information such as an IC card, a mobile phone, and a human body communication device. The secure device type is defined in advance in the secure device management system.

  The database C300c is a database that holds a combination of a secure device type, processing contents, and parameters and a command set in association with each other. The command set is a command for executing processing indicated by “processing content” and “parameter”, and is arranged in the order of transmitting commands to be transmitted to each secure device 40a and the like. The contents of the command set also differ depending on the type of secure device such as the secure device 40a.

  FIG. 2 is a diagram illustrating a specific example of a command set. The command set 200 includes a plurality of commands 210, 220, 230, and 240. The commands 210 and the like are arranged from the top of the command set in the execution order, and the secure device management server 30 transmits the commands 210 and the like to the secure device 40a and the like in the arranged order. . When the secure device 40a and the like receive the commands 210 and the like in order from the secure device management server 30, the secure device 40a and the like execute them in their own device. Thereby, the target process is executed in the secure device 40a or the like.

  The database D300d is a database that holds a secure device ID, a process number, and a command set in association with each other. The process number is a number indicating the execution order of the command set to be executed in the secure device 40a or the like specified by the “secure device ID”. That is, in order to execute a specific process, there may be a plurality of command sets to be executed in the secure device 40a or the like. In this case, a plurality of command sets are associated with one secure device ID in the database D300d. It is done. Further, the process number starts from number 1, and each time a combination of a secure device ID, a process number, and a command set is added to the database D300d, a number incremented by 1 is input.

  Further, the database A 300a, the database B 300b, and the database C 300c are held in the secure device management server 30 in advance before the service provision by the secure device management system of this embodiment is started. The database D300d is a database that is updated each time a specific process is executed on the secure device 40a or the like.

  The functions of the communication function unit 310, the user information management unit 320, and the command management unit 330 will be described in detail later.

  FIG. 3 is a diagram showing another example of the configuration of the secure device management system. The secure device management system includes a terminal 10, a secure device management server 30, and secure devices 40a, 40b, and 40c. Although not shown in FIG. 3, the secure device management system further includes a reader / writer, and as in FIG. 1, the secure device 40a and the like are connected to the secure device management server 30 via the reader / writer. May be.

  The configuration of the terminal 10 is the same as the configuration described in FIG. The secure device management server 30 also includes a user identification information holding unit 301, a user identification information acquisition unit 302, a processing information holding unit 303, a device identification information acquisition unit 304, and a processing information transmission unit 305. Part 306.

  The user identification information holding unit 301 includes user identification information that is information for identifying a user who uses the secure device 40a and the like, and device identification information that is information for identifying the secure device 40a and the like. Hold it in association. Here, the user identification information corresponds to, for example, the user ID shown in FIG. The device identification information corresponds to, for example, the secure device ID in FIG. Moreover, the user identification information holding | maintenance part 301 is implement | achieved by database A300a of FIG. 1, for example.

  The user identification information acquisition unit 302 acquires user identification information and processing information that is information indicating processing to be executed on the secure device 40a and the like from the terminal 10. For example, the processing information and parameters in FIG. 1 correspond to the processing information. Further, the user identification information acquisition unit 302 is realized by, for example, the communication function unit 310 of FIG.

  The processing information holding unit 303 acquires device identification information associated with the acquired user identification information from the user identification information holding unit 301, and holds the acquired device identification information and processing information in association with each other. The processing information holding unit 303 is realized by, for example, the user information management unit 320, the command management unit 330, and the database D300d in FIG.

  The device identification information acquisition unit 304 acquires device identification information from the secure device 40a and the like. The device identification information acquisition unit 304 is realized by, for example, the communication function unit 310 of FIG.

  The processing information transmission unit 305 acquires processing information associated with the acquired device identification information from the processing information holding unit 303 and transmits the processing information to the secure device 40a and the like. The processing information transmission unit 305 is realized by, for example, the communication function unit 310 in FIG.

  The determination unit 306 determines a device type such as the secure device 40a. The device type corresponds to, for example, the secure device type shown in FIG. The determination unit 306 is realized by, for example, the database B 300b, the database C 300c, and the command management unit 330 in FIG. Further, the processing information transmission unit 305 described above transmits processing information corresponding to the device type determined by the determination unit 306 to the secure device 40a and the like. The processing information corresponding to the device type corresponds to, for example, a command set shown in FIG.

  The secure device 40a and the like include a device identification information transmission unit 401 and a processing information acquisition unit 402.

  The device identification information transmission unit 401 transmits device identification information for identifying the own device to the secure device management server 30. The transmitted device identification information is received by the device identification information acquisition unit 304 of the secure device management server 30.

  The processing information acquisition unit 402 acquires processing information transmitted by the processing information transmission unit 305 of the secure device management server 30. In addition, the secure device 40a and the like execute specific processing in the own device based on the processing information acquired by the processing information acquisition unit 402.

  Note that the functions of the components described above are executed by a terminal (not shown) of the terminal 10, the reader / writer 20, and the secure device management server 30 (Central Processing Unit) reading and executing a program stored in a recording medium such as a memory. This is a function realized by. Further, the user ID, secure device ID, secure device type, processing content, parameter, command set, processing number, user identification information, device identification information, device type, and processing information are illustrated in the secure device management server 30. This data is stored in a recording medium such as a memory that is not read, and is read into a work area on the memory as needed and used by the CPU. The database 300, the user identification information holding unit 301, and the processing information holding unit 303 of the secure device management server 30 are databases provided on a recording medium in the secure device management server 30 (not shown).

(Operation of secure device management system)
Next, the operation of the secure device management system according to the present embodiment will be described with reference to FIGS. FIG. 4 is a sequence diagram showing a flow of processing from when a user ID or the like is input at the terminal 10 to when the command set 200 is registered at the secure device management server 30. FIG. 5 is a sequence diagram showing a processing flow from when the secure device 40a or the like is connected to the reader / writer 20 until processing is executed in the secure device 40a or the like.

  First, processing from when a user ID or the like is input at the terminal 10 to when the command set 200 is registered at the secure device management server 30 will be described with reference to FIG.

  The terminal 10 accepts input of a user ID, processing contents, and parameters from the user. This input is executed by, for example, inputting into a text input box on the input screen displayed on the screen of the terminal 10 or clicking an input button. Upon receiving the user input, the terminal 10 transmits the information input to the secure device management server 30. Then, the communication function unit 310 of the secure device management server 30 receives the user ID, processing contents, and parameters (step S100). The communication function unit 310 transmits the received user ID and the like to the user information management unit 320. Then, the user information management unit 320 searches the database A 300a using the user ID as a key, and acquires a secure device ID associated with the user ID (step S102).

  The user information management unit 320 transmits the secure device ID acquired from the database A 300 a and the processing contents and parameters received from the communication function unit 310 to the command management unit 330. The command management unit 330 searches the database B 300b using the secure device ID as a key, and acquires the secure device type associated with the secure device ID (step S104). Further, the command management unit 330 searches the database C300c using the secure device type acquired from the database B 300b and the processing content and parameters received from the user information management unit 320 as keys, and the secure device type, processing content, and A command set associated with the parameter is acquired (step S106). Then, the secure device ID and the command set are associated and registered in the database D300d (step S108). At this time, if there are a plurality of command sets, the command sets are registered with processing numbers in the order of processing. The command management unit 330 repeats Steps S104 to S108 for all the secure device IDs received from the user information management unit 320. As a result, a command set for each secure device ID is registered in the database D300d.

  Next, the flow of processing from when the secure device 40a or the like is connected to the reader / writer 20 until processing is executed in the secure device 40a or the like will be described with reference to FIG.

  The user connects either the secure device 40a or the like used by the reader / writer 20 (step S200). Here, connecting the secure device 40a or the like to the reader / writer 20 means that the secure device 40a or the like is inserted into the reader / writer 20 if it is a contact type, or the secure device 40a or the like is placed over the reader / writer 20 if it is a non-contact type. Means close.

  The reader / writer 20 transmits a secure device ID acquisition command to the connected secure device 40a or the like (step S202). As the secure device ID acquisition command, generally, a GET DATA command or a READ RECORD command of an IC card command is used. When the secure device 40a or the like receives the secure device ID acquisition command from the reader / writer 20, the secure device 40a or the like transmits the secure device ID held in the own device to the reader / writer 20 (step S204). The reader / writer 20 transmits this secure device ID to the secure device management server 30 (step S206).

  Upon receiving the secure device ID, the communication function unit 310 of the secure device management server 30 searches the database D300d using the secure device ID as a key, and acquires a command set associated with the secure device ID (step S208). ). When there are a plurality of command sets, the command sets are acquired in ascending order of process number values.

  Then, the communication function unit 310 reads out commands one by one from the acquired command set and transmits them to the reader / writer 20 (step S210). The reader / writer 20 transmits the received command to the secure device 40a or the like (step S212), and the secure device 40a or the like executes the received command (step S214). When executing the command, the secure device 40a and the like transmit a reception response to the reader / writer 20 (step S216), and the reader / writer 20 transmits the received reception response to the secure device management server 30 (step S218). Steps S210 to S218 are repeated for all the commands included in the command set.

  When the communication function unit 310 of the secure device management server 30 executes step S210 to step S218 for all commands included in the command set, the communication function unit 310 transmits the secure device ID and the processing number of this command set to the command management unit 330. . The command management unit 330 searches the database D300d using the secure device ID and the process number as keys, and deletes the combination of the stored secure device ID, process number, and command set (step S220).

  Steps 210 to S220 are executed for all the command sets acquired in step S208, and the processing to the secure device 40a and the like is completed.

  Note that while the secure device 40a and the secure device management server 30 are communicating, the connection state between the reader / writer 20 and the secure device 40a and the like is maintained.

(Other embodiments)
In the above embodiment, only one terminal 10 is shown, but a plurality of terminals 10 may exist. As a result, a plurality of users can simultaneously connect to the secure device management server 30 from the plurality of terminals 10 and register processing to be executed on their own secure device 40a and the like in the database D300d.

  In the above embodiment, the same processing is executed for all the secure devices 40a and the like used by the user (that is, the secure device ID associated with the user ID in the database A 300a). Processing may be executed only for a specific secure device among the secure devices 40a and the like used by the user. For example, when the user accepts that the application download process is to be executed, the application may not be downloaded to the secure device 40a or the like whose use is suspended. Specifically, information indicating whether or not the use is suspended for each secure device 40a or the like is held in the secure device management server 30 or the secure device 40a and the download execution command set based on the information. May be determined in the secure device management server 30 as to whether or not to be registered in the database D300d.

(Summary)
As described above, according to the present invention, when a user executes a specific process for a plurality of secure devices used by the user, the user does not register process information in the management server device for each secure device. By simply inputting own user identification information and processing information to the management server device, it is possible to register the processing to be executed for a plurality of secure devices in a batch. Thereby, the trouble at the time of performing a process can be saved, and a process omission can be prevented.

10 terminal 20 reader / writer 30 secure device management server 40a, 40b, 40c secure device 300 database 200 command set 210, 220, 230, 240 command 300a database A
300b Database B
300c Database C
300d Database D
DESCRIPTION OF SYMBOLS 310 Communication function part 320 User information management part 330 Command management part 301 User identification information holding part 302 User identification information acquisition part 303 Processing information holding part 304 Device identification information acquisition part 305 Processing information transmission part 306 Judgment part 401 Device identification Information transmission unit 402 Processing information acquisition unit

Claims (8)

A management server device that manages a device having a function of executing an application,
Use that associates and holds user identification information, which is information for identifying a user who uses the device, and device identification information, which is information for identifying at least one device used by the user Person identification information holding means,
User identification information acquisition means for acquiring the user identification information and processing information which is information indicating processing to be executed on the device from outside the own device;
Processing information holding means for acquiring device identification information associated with the acquired user identification information from the user identification information holding means, and holding the acquired device identification information and the processing information in association with each other; ,
A management server device characterized by comprising: Device identification information acquisition means for acquiring the device identification information from the device;
Processing information transmitting means for acquiring processing information associated with the acquired device identification information from the processing information holding means and transmitting the processing information to the device;
The management server device according to claim 1, further comprising: A determination means for determining a device type of the device;
The management server apparatus according to claim 2, wherein the processing information transmission unit transmits processing information corresponding to the determined device type to the device. A device management system comprising a device having a function of executing an application, and a management server device that manages the device,
The management server device
Use that associates and holds user identification information, which is information for identifying a user who uses the device, and device identification information, which is information for identifying at least one device used by the user Person identification information holding means,
User identification information acquisition means for acquiring the user identification information and processing information which is information indicating processing to be executed on the device from outside the own device;
Processing information holding means for acquiring device identification information associated with the acquired user identification information from the user identification information holding means, and holding the acquired device identification information and the processing information in association with each other; ,
Device identification information acquisition means for acquiring the device identification information from the device;
Processing information transmitting means for acquiring processing information associated with the acquired device identification information from the processing information holding means and transmitting the processing information to the device;
The device is
Device identification information transmitting means for transmitting device identification information for identifying the own device;
A device management system comprising: processing information acquisition means for acquiring the processing information transmitted by the processing information transmission means of the management server device. A management server device that manages a device having a function of executing an application, and identifies user identification information that is information for identifying a user who uses the device and at least one device used by the user A device management method executed by a management server device having user identification information holding means for holding device identification information in association with the device identification information,
A user identification information acquisition step for acquiring the user identification information and processing information which is information indicating processing to be executed on the device from outside the own apparatus;
A processing information holding step for acquiring device identification information associated with the acquired user identification information from the user identification information holding means, and holding the acquired device identification information and the processing information in association with each other; ,
A device management method comprising: A device identification information obtaining step for obtaining the device identification information from the device;
A process information transmission step of acquiring process information associated with the acquired device identification information and transmitting the process information to the device;
The device management method according to claim 5, further comprising: A device having a function of executing an application; a management server device that manages the device; user identification information that is information for identifying a user who uses the device; and at least one used by the user A device management method executed by a management server device having user identification information holding means for holding device identification information that is information for identifying two devices in association with each other,
In the management server device, from the outside of the device itself, a user identification information acquisition step for acquiring the user identification information and processing information which is information indicating processing to be executed on the device;
In the management server device, device identification information associated with the acquired user identification information is acquired from the user identification information holding means, and the acquired device identification information and the processing information are stored in association with each other. Processing information holding step to perform,
In the device, a device identification information transmission step of transmitting device identification information for identifying the own device to the management server device;
In the management server device, a device identification information acquisition step for acquiring the device identification information from the device;
In the management server device, a processing information transmission step of acquiring processing information associated with the acquired device identification information from the processing information holding means and transmitting the processing information to the device;
In the device, a processing information acquisition step of acquiring the processing information transmitted from the management server device;
A device management method comprising: A device management program for managing a device having a function of executing an application,
Use that associates and holds user identification information, which is information for identifying a user who uses the device, and device identification information, which is information for identifying at least one device used by the user Person identification information holding means,
User identification information acquisition means for acquiring the user identification information and processing information which is information indicating processing to be executed on the device from outside the own device;
Processing information holding means for acquiring device identification information associated with the acquired user identification information from the user identification information holding means, and holding the acquired device identification information and the processing information in association with each other; ,
Device management program for causing a computer to function.

Images