JP2011188005A - Portable electronic device and operation control method of the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a portable electronic device in which operations of a main processing unit can be limited without using a password. <P>SOLUTION: The portable electronic device includes a radio LAN (Local Area Network) function unit 20, and a main processing unit 10 which originally operates independently from the radio LAN function unit 20. A control means 21 controls the following: when radio connection with the radio LAN access point device is established by the radio LAN function unit, the main control unit is controlled to be in an operable state and when the radio connection with the radio LAN access point device is disconnected by the radio LAN function unit, the main processing unit is controlled to be in an operation-prohibited state. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a portable electronic device such as a USB (Universal Serial Bus) memory, and an operation control method for the portable electronic device.

  As a usage form of a portable data storage device such as a USB memory, there is a case where data shared by a plurality of specific persons such as persons in one section in a company is stored. In such a case, in order to ensure the security of the stored data, the USB memory is generally used only in the relevant section of the company, and measures for prohibition of taking outside are taken. By thoroughly managing the storage location of the USB memory and the return after use, the USB memory is prohibited from being taken out of the company.

  However, if the USB memory is stolen after such thorough management, the data is easily read unless security measures are taken for the data in the USB memory. There is a problem.

  Therefore, various methods using a password have been proposed as a method for solving such a security problem. For example, Japanese Patent Application Laid-Open No. 2007-125717 discloses a printer that can print data stored in a USB memory only when a predetermined password is input by a user. Has been.

  That is, when applying the method of Patent Document 1 to the above-described example, only the members of the section of the company are taught the password in advance. A member of the section can print data stored in the USB memory by connecting the USB memory to a personal computer (hereinafter abbreviated as PC) and inputting the password from the PC.

  Further, in Patent Document 2 (Japanese Patent Laid-Open No. 2009-237778), a specific password is written in advance to the USB memory by the management apparatus, and in the personal computer, the password written in the USB memory A security management method is disclosed in which a USB memory can be used as an external memory of the PC when the passwords stored in the above are compared and matched.

  When the method of Patent Document 2 is applied to the above example, a specific password is input to the USB memory for the section by the management device, and the same password is also applied to the PC used in the section. Should be entered.

JP 2007-125717 A JP 2009-237778 A

  However, in the method of Patent Document 1, the user can use the USB memory by inputting the password, and the user must store the password and input the password every time the user tries to use the USB memory. There is a drawback that the password input operation is troublesome.

  According to the method of Patent Document 2, there is an advantage that the user does not need to input a password. However, even the method of Patent Document 2 uses a password, so if the password is known, it is taken out of the company due to theft or the like, and the USB memory is accessed and stored anywhere. There is a problem that the read data can be read.

  In view of the above, an object of the present invention is to provide a portable electronic device that can restrict the operation of a main processing unit such as a USB memory without using a password.

In order to solve the above problems, the present invention provides:
A wireless LAN (Local Area Network) function unit;
A main processing unit that operates independently of the wireless LAN function unit,
When the wireless LAN function unit establishes wireless connection with the access point device for wireless LAN, the main processing unit is controlled to be operable, and the wireless connection with the access point device for wireless LAN is disconnected. Control means for controlling the main processing unit to the operation prohibited state when being performed,
A portable electronic device is provided.

  According to the portable electronic device of the present invention configured as described above, the main processing unit is operable only when the wireless LAN function unit establishes a wireless connection with the wireless LAN access point device. . Wireless connection with a wireless LAN access point device is possible when the same connection information as the wireless LAN connection information set in the access point device is set in the portable electronic device.

  Therefore, the main processing unit of the portable electronic device according to the present invention can operate only within the range where the radio wave of the access point device in which the same connection information for wireless LAN as the own device is set can reach, and outside the range. Then, the operation is disabled.

  Therefore, for example, the same connection information as the wireless LAN connection information set in the access point device that makes the room in a specific section of the company within the reach of radio waves is set in the portable electronic device according to the present invention. In this way, the portable electronic device is operable only in the room of the specific section.

  According to the portable electronic device of the present invention, it is controlled so that an operation for inputting a password or the like is not required and can be operated only in a wireless connection environment with a specific access point device. It is possible to manage the operation of the device.

It is a figure which shows the use environment of embodiment of the portable electronic device by this invention. It is a figure for demonstrating the example of a sequence of the wireless connection in wireless LAN. It is a figure for demonstrating the example of a sequence of the wireless connection in wireless LAN. It is a block diagram which shows the structural example of embodiment of the portable electronic device by this invention. It is a figure which shows the example of a sequence of operation | movement control of embodiment of the portable electronic device by this invention. It is a figure which shows a part of flowchart for demonstrating the operation example of embodiment of the portable electronic device by this invention. It is a figure which shows a part of flowchart for demonstrating the operation example of embodiment of the portable electronic device by this invention. It is a figure which shows a part of flowchart for demonstrating the operation example of embodiment of the portable electronic device by this invention.

  Hereinafter, an embodiment of a portable electronic device according to the present invention will be described with reference to the drawings, taking as an example the case where the main processing unit is a USB memory unit.

  FIG. 1 is a diagram showing an environment in which a portable electronic device according to an embodiment of the present invention is used. As shown in FIG. 1, the portable electronic device 1 of this embodiment is connected to a PC by inserting the USB connection terminal portion 1a into the USB terminal 2a of the PC 2, similarly to a general USB memory. The

  However, the USB memory unit of the portable electronic device 1 according to this embodiment does not accept access from the PC 2 only by being connected to the PC 2.

  As will be described later, the portable electronic device 1 of this embodiment includes a wireless LAN function unit, and by this wireless LAN function unit, an access point device for wireless LAN (hereinafter, the access point device is abbreviated as AP) 3 is used. Only when a wireless connection can be established within a radio wave reachable range (hereinafter, this range is referred to as a wireless LAN connection range), access from the PC 2 to the USB memory unit as the main processing unit is permitted. .

  In this case, in the wireless LAN, the same information is set in both the AP 3 and the portable electronic device 1 as predetermined wireless LAN connection information (hereinafter referred to as wireless LAN connection information). Only when the connection sequence is successful, the connection sequence described later is successful, and the wireless connection between the AP 3 and the portable electronic device 1 can be established. Conversely, even if the portable electronic device 1 exists within the wireless LAN area of AP3, if the wireless LAN connection information is different from the wireless LAN connection information set in AP3, the connection sequence described later is unsuccessful. The wireless connection is not established.

  Further, as shown in the lower side of FIG. 1, when the portable electronic device 1 is outside the wireless LAN area where the radio waves of the AP 3 do not reach, it goes without saying that the wireless connection cannot be made.

[Example of wireless LAN connection sequence]
In order to facilitate understanding of the embodiment of the present invention, a wireless connection is started between a terminal having a wireless LAN function (hereinafter referred to as a wireless LAN terminal) such as the portable electronic device 1 of this embodiment and an AP. An example of a processing sequence for performing the above will be described.

  In a wireless LAN system, an identifier for each group (in this specification, referred to as a network identifier) consisting of one AP and a plurality of wireless LAN terminals that communicate with the AP is set in advance, and the network identifier is used for communication. By using it, the wireless LAN can be distinguished from other groups. In the wireless LAN of the IEEE 802.11 standard, the network identifier is called ESSID (Extended Service Set Identifier).

  In the wireless LAN system, in order to ensure security, in addition to the network identifier, communication data between the AP and the wireless LAN terminal is encrypted, and this encryption key is also stored in advance. I am trying to set it.

  In the wireless LAN of the IEEE 802.11 standard, a WEP (Wired Equivalent Privacy) system is used for encryption. This is a secret key encryption method (also called a shared key encryption method) that uses the same key (encryption key) for encryption and decryption. In the following description, an encryption key used for the WEP method is referred to as a WEP key. In this example, the aforementioned wireless LAN connection information is configured by the aforementioned ESSID and WEP key.

  In order for a terminal having a wireless LAN function to be included in a wireless LAN group including an AP, it is necessary to register the terminal by requesting connection to the AP. At the time of the registration, the AP and the wireless LAN terminal need to mutually authenticate the ESSID and WEP key set in both.

  For this reason, in order to ensure security when registering a wireless LAN terminal in the AP, the ESSID and the WEP key need to be set in advance in both the AP and the wireless LAN terminal.

  The flow of ESSID and WEP key setting and wireless LAN terminal registration processing (connection processing) for the AP will be described with reference to the sequence diagrams of FIGS.

  After the setting of the ESSID and the WEP key is completed, when the wireless LAN terminal is turned on and registration with the AP is started, the terminal requests the probe request Probe including the ESSID set in itself as shown in FIG. req. Is sent to the AP.

  The AP requests the probe request Probe req. Is received, the ESSID included in the device is compared with the ESSID stored in the device itself, and when it is confirmed that the two are the same, the probe response Probe res. Is returned to the wireless LAN terminal.

  In addition, as shown in FIG. 3, AP transmits beacon Beacon regularly (for example, 100 msec period). This beacon can include an ESSID.

  The wireless LAN terminal transmits a probe response Probe res. Is received, the identification information about the AP (eg, MAC (Media Access Control) address, etc.) included in the list is held in the list. Then, the wireless LAN terminal specifies an AP with an ESSID that matches the ESSID stored in the terminal from the list, and waits for a beacon from the specified AP. When a beacon from the identified AP is received, the process proceeds to the next authentication process (Authentication).

  At the time of registration, the wireless LAN terminal transmits the probe response Probe res. If the ESSID is included in the beacon even if the beacon is not received, the information (MAC address or the like) about the AP such as the ESSID included in the beacon is held in the list when the beacon is received. Then, the wireless LAN terminal specifies an access point having an ESSID that matches the ESSID stored in the terminal from the list, and waits for a beacon from the specified AP. When a beacon from the identified AP is received, the process proceeds to the next authentication process (Authentication) in the same manner as described above.

  In this case, the probe request Probe req. And the probe response Probe res. The process of receiving ESSID and authenticating the ESSID can be omitted.

  Even when the beacon beacon does not include an ESSID, and even when the wireless LAN terminal does not receive a beacon including an ESSID, the probe request Probe req. / Probe response Probe res. Thus, the ESSID of the AP and the wireless LAN terminal can be authenticated.

  Therefore, for mutual authentication of ESSID, beacon Beacon and probe request Probe req. / Probe response Probe res. Can use both or one.

  That is, the probe response Probe res. From the AP matches the ESSID of the wireless LAN terminal. Or it can transfer to an authentication process (Authentication) by receiving beacon Beacon twice. That is, the probe response Probe res. 2 times for the wireless LAN terminal to shift to the authentication process (Authentication). Alternatively, there are the following three ways to receive the beacon Beacon.

(A) A beacon Beacon that matches the ESSID of the wireless LAN terminal is received twice.
(B) Probe request Probe req. / Probe response Probe res. After receiving and transmitting, beacon Beacon that matches the ESSID of the wireless LAN terminal is received.
(C) After receiving the beacon Beacon that matches the ESSID of the wireless LAN terminal, the probe request Probe req. / Probe response Probe res. Send and receive.

  Next, in the authentication process (Authentication), first, the wireless LAN terminal sends authentication information Authentication 1 to the AP.

  Upon receiving this authentication information Authentication1, the AP checks whether or not the wireless LAN terminal can be registered, and sends the authentication information Authentication2 including temporary data created with a random value to the wireless LAN terminal device.

  Upon receiving the authentication information Authentication 2 from the AP, the wireless LAN terminal sends authentication information Authentication 3 including data obtained by encrypting the temporary data with the WEP key set in the wireless LAN terminal itself to the AP.

  When the AP receives this authentication information Authentication3, the AP decrypts the encrypted temporary data included in the AP with the WEP key held by the AP itself, and compares them with the original temporary data. Check whether or not. Then, when confirming that the temporary data is the same, the AP sends authentication information Authentication 4 to the wireless LAN terminal.

  By receiving this authentication information Authentication4, the wireless LAN terminal confirms that the WEP key has been authenticated by the AP. Thus, the mutual authentication of the WEP key between the AP and the wireless LAN terminal is completed.

  Next, the wireless LAN terminal transmits a connection request Association req. Including data to which the authenticated ESSID is added. To the AP.

  The AP requests this connection request Association req. Is received, the ESSID included in the device is compared with the ESSID stored in the device itself, and when it is confirmed that they are the same, the connection response Association res. Is returned to the wireless LAN terminal.

  The wireless LAN terminal transmits the connection response Association res. Is received, the AP confirms that the connection request has been accepted.

  Through the above processing, the wireless LAN terminal completes registration with the AP, and wireless communication with the registered AP becomes possible.

  When the mobile electronic device 1 according to this embodiment executes the connection sequence as described above and establishes a wireless connection with the AP 3, the portable electronic device 1 is allowed to access from the PC 2. When a wireless connection cannot be established, access from the PC 2 is prohibited.

  Therefore, for example, the AP 3 is installed so that the room allocated to a specific section of the company is within the wireless LAN connection area, and the same information as the wireless LAN connection information for the specific section set in the AP 3 is set. By setting the wireless LAN connection information in the portable electronic device 1, the portable electronic device 1 can use the USB memory unit as the main processing unit only in the room.

  Thereby, the use place of the USB memory part which is the main processing part of the portable electronic device 1 can be restricted only to the room of the specific section, and use outside the room of the section can be prohibited. Therefore, even if the portable electronic device 1 of this embodiment is taken outside due to theft or the like, wireless connection with the AP 3 is not possible, and thus security of information in the USB memory unit can be realized.

  In the wireless LAN function unit of the portable electronic device 1, for example, if the administrator sets in advance the same wireless LAN connection information as the wireless LAN connection information set in AP3 by the administrator, the user can wirelessly There is no need to set and input LAN connection information. In other words, in this embodiment, the user does not need to perform troublesome operations such as inputting a password each time the mobile electronic device 1 is used in a specific room.

  As shown in FIG. 1, in this example, the AP 3 is connected to the server 5 and other terminals not shown through the wired LAN 4. In this embodiment, the AP 3 has a function of receiving wireless LAN connection information from the server 5 and setting the received wireless LAN connection information in its own device. Therefore, when changing the wireless LAN connection information set in the AP 3, the administrator may send the changed wireless LAN connection information from the server 5 to the AP 3.

  On the other hand, in this embodiment, setting of wireless LAN connection information to the portable electronic device 1 can be performed by an administrator inputting through the PC 2 when the portable electronic device 1 is connected to the PC 2. . In particular, in this embodiment, in order to prevent the wireless LAN connection information of the portable electronic device 1 from being changed by a person other than the administrator, the wireless LAN connection information in the portable electronic device 1 is changed. Is configured so that it is possible only when the operator of the PC 2 inputs a predetermined password known only to the administrator.

  In the configuration of FIG. 1, when the portable electronic device 1 is plugged into the PC 2 and connected, and the wireless LAN connection between the portable electronic device 1 and the AP 3 is established, the wireless electronic device 1 is connected to the PC 2 through the wireless LAN and the wired LAN 4. Communication with the server 5 and other terminals is possible. That is, the wireless LAN function unit of the portable electronic device 1 is not used only for controlling the operation of the USB memory unit, but can operate in the same manner as a normal wireless LAN function unit.

  Next, a more detailed configuration example of the portable electronic device 1 of this embodiment will be described.

[Hardware configuration example of portable electronic device 1]
FIG. 4 is a block diagram illustrating a hardware configuration example of the portable electronic device 1 of this embodiment. As shown in FIG. 4, the portable electronic device 1 of this embodiment includes a USB memory unit 10 as an example of a main processing unit, a wireless LAN function unit 20, and an interface unit 30 for connecting to an external device such as a PC. It consists of.

  The USB memory unit 10 includes a data memory unit 11 made of, for example, a semiconductor memory, and a memory control unit 12 that executes and controls memory access for reading and writing data with respect to the data memory unit 11. As will be described later, in this example, the memory control unit 12 of the USB memory unit 10 performs data read / write access to the data memory unit 11 in accordance with a control signal CTL from a control unit included in the wireless LAN function unit 20. Configured to prohibit or allow.

  The interface unit 30 is connected to the USB connection terminal unit 1 a inserted into the USB terminal of the external device, and is connected to the USB memory unit 10 and the wireless LAN function unit 20. The interface unit 30 supplies a memory access request for writing or reading from an external device such as the PC 2 connected to the USB connection terminal unit 1 a to the USB memory unit 10 and the wireless LAN function unit 20. The interface unit 30 also sends data read from the USB memory unit 10 permitted to access the memory to an external device, and allows memory access to data sent from the external device such as the PC 2. Transfer to the USB memory unit 10.

  In this embodiment, the wireless LAN function unit 20 includes a control unit 21 formed of a microcomputer. That is, the wireless LAN function unit 20 is configured by using, for example, a microcomputer. A CPU (Central Processing Unit) 201, a ROM (Read Only Memory) 202 for storing programs, and the like with respect to the system bus 200, A RAM (Random Access Memory) 203 serving as a work area is connected. The CPU 201, ROM 202, and RAM 203 constitute the main part of the control means 21.

  In this example, a packet processing unit 204, a wireless LAN connection information storage unit 205, and I / O ports 206, 207, and 208 are further connected to the system bus 200.

  The CPU 201 controls the overall operation of the portable electronic device 1. The ROM 202 stores programs for executing control processing such as connection sequence processing with the AP by the wireless LAN function unit 20 in the portable electronic device 1 and memory access permission / prohibition control processing of the USB memory unit 10. . The CPU 201 uses the RAM 203 as a work area memory and executes the above-described control processing according to the program stored in the ROM 202.

  The packet processing unit 204 has a function of decomposing a received IP packet and converting and generating information to be transmitted into a transmission packet. The packet processing unit 204 also has a function of analyzing the packet header and the packet data, and can perform various kinds of information decoding processing when the terminal 6 is registered with the AP. The CPU 201 executes the connection sequence described above based on the analysis result of the received packet.

  The connection information storage unit 205 stores wireless LAN connection information for wireless connection with the AP, in this example, ESSID and WEP key. Under the control of the CPU 201, when the information obtained by disassembly by the packet processing unit 204 is wireless LAN connection information sent from a PC that is an external device through the interface 30, the wireless LAN connection information is wireless. The data is supplied to and stored in the LAN connection information storage unit 205.

  In this embodiment, the setting and changing of the wireless LAN connection information in the wireless LAN function unit 20 is executed by the control means 21 only when a predetermined password is sent from the PC 2 as described above. Is done. The password is also stored in the wireless LAN connection information storage unit 5, and the CPU 201 of the control means 21 stores the password stored in the wireless LAN connection information storage unit 5 and the password sent from the PC 2. When the two match, the setting and changing of the wireless LAN connection information is executed.

  The I / O port 206 is connected to the interface 30 and exchanges data with an external device through the interface 30. The I / O port 207 is connected to the USB memory unit 10. This I / O port 207 is for supplying a control signal CTL for memory access permission / prohibition control to the USB memory unit 10.

  A wireless LAN transmission / reception circuit 210 is connected to the I / O port 208. The wireless LAN transmission / reception circuit 210 includes a transmission processing circuit 211, a reception processing circuit 212, a transmission amplifier 213, a reception amplifier 214, an antenna distribution circuit 215, a transmission antenna 216, and a reception antenna 217. Is done.

  The transmission antenna 216 and the reception antenna 217 are for transmitting and receiving packets through the wireless LAN. In the portable electronic device 1 of this example, transmission data from the PC 2 obtained through the interface 30 is converted into a transmission packet by the packet processing unit 204, and the transmission packet is converted into an I / O port 208 according to the control of the CPU 201. To the transmission antenna 216 via the transmission processing circuit 211 and the amplifier 213 and the antenna distribution circuit 215 and wirelessly transmit to the wirelessly connected terminals.

  A packet received through the reception antenna 217 is supplied to the reception processing circuit 212 through the antenna distribution circuit 215 and the amplifier 214. The received packet from the reception processing circuit 212 is sent to the system bus 200 through the I / O port 208. The received packet is disassembled by the packet processing unit 204 and then transferred to an external device such as a PC through the I / O port 206 and the interface 30.

  Note that the packet processing unit 204 can be configured not as a hardware configuration but as a software function unit in which the CPU 201 executes processing according to the program in the ROM 202 using the RAM 203 as a work area.

  In the example of FIG. 4, the control unit 21 including a microcomputer including the CPU 201 is provided in the wireless LAN function unit 20, but the portion of the wireless LAN function unit 20 excluding the wireless LAN transmission / reception circuit 210 is independent as a control unit. You may make it provide in. Alternatively, the control unit 21 including the CPU 201 other than the wireless LAN transmission / reception circuit 210 of the wireless LAN function unit 20 as a main part may be provided in the USB memory unit 10.

[Sequence Example of Operation Control of Portable Electronic Device 1 of Embodiment]
FIG. 5 is a diagram showing a sequence example of the operation control of the portable electronic device 1 in the usage environment as shown in FIG. Note that the sequence example in FIG. 5 is an example of the case where the portable electronic device 1 is connected to the PC 2 in a state where the wireless LAN connection information is not set in the portable electronic device 1.

  As shown in FIG. 5, when the portable electronic device 1 is inserted into the PC 2, the PC 2 supplies a connection notification to the USB memory unit 10 and the wireless LAN function unit 20 through the interface unit 30 of the portable electronic device 1.

  Each of the USB memory unit 10 and the wireless LAN function unit 20 receives the connection notification from the PC 2, recognizes the connection with the PC 2, and returns the recognition notification to the PC 2 through the interface unit 30.

  In this example, since wireless LAN connection information is not stored in the wireless LAN connection information storage unit 205 of the wireless LAN function unit 20 at this time, the portable electronic device 1 has established a wireless connection with the AP 3. Absent. Therefore, at this time, the USB memory unit 10 is controlled to be in an access-prohibited state by the control signal CTL from the control unit of the wireless LAN function unit 20. Therefore, even if there is a memory access from the PC 2 to the USB memory unit 10, the USB memory unit 10 cannot be accessed.

  In this state, as shown in FIG. 5, when a password for authentication of setting change of the wireless LAN connection information is input by the administrator or the like in the PC 2, the password is wirelessly transmitted from the PC 2 through the interface unit 30. It is sent to the LAN function unit 20.

  The CPU 201 of the control means 21 of the wireless LAN function unit 20 compares the password sent from the PC 2 with the password stored in the wireless LAN connection information storage unit 205. The wireless LAN connection information is set or changed, and “authentication OK” is notified to the PC 2 through the interface unit 30.

  In the PC 2 that has received this “authentication OK” notification, the same wireless LAN connection information as the wireless LAN connection information set in the AP 3 is input by the administrator or the like. Then, the input wireless LAN connection information is sent to the wireless LAN function unit 20 of the portable electronic device 1. In the wireless LAN function unit 20 of the portable electronic device 1, the CPU 201 stores the received wireless LAN connection information in the wireless LAN connection information storage unit 205.

  Then, the wireless LAN function unit 20 of the portable electronic device 1 sends a connection request to the AP 3 through the transmission antenna 216 when the wireless LAN function unit 20 is within a wireless LAN connection area where radio waves from the AP 3 reach. Thereby, the connection sequence for the wireless LAN connection shown in FIG. 2 is automatically executed between the portable electronic device 1 and the AP 3.

  Then, in the connection sequence based on the connection request from the portable electronic device 1, the AP 3 includes the wireless LAN connection information set and registered therein and the wireless LAN connection information sent from the portable electronic device 1. When the coincidence detection is performed and the connection information matches, the connection response is determined to be successful, and a connection response is wirelessly transmitted to the wireless LAN function unit 20 of the portable electronic device 1.

  The wireless LAN function unit 20 of the portable electronic device 1 receives the connection response from the AP 3 through the reception antenna 217, the antenna distribution circuit 215, the amplifier 214, and the reception processing circuit 212. Then, the wireless connection is completed between the AP 3 and the wireless LAN function unit 20 of the portable electronic device 1.

  When the wireless connection with the AP 3 is established in this way, the CPU 201 of the wireless LAN function unit 20 of the portable electronic device 1 changes the control signal CTL for the USB memory unit 10 to a state in which memory access in the USB memory unit 10 is permitted. . Upon receiving this control signal CTL, the USB memory unit 10 receives a memory access from the PC 2 and enters a state in which data reading or data writing operation is enabled.

  Accordingly, when a memory access request is subsequently made from the PC 2 to the USB memory unit 10 of the portable electronic device 1, the USB memory unit 10 receives the memory access from the PC 2 and executes the requested memory access. . For example, when the memory access in the example of FIG. 5 is a data read access, the USB memory unit 10 transfers the read data to the PC 2 through the interface unit 30.

  Next, when the user carries the portable electronic device 1 and moves out of the wireless LAN connection area of the AP 3, the wireless connection between the wireless LAN function unit 20 of the portable electronic device 1 and the AP 3 is disconnected. That is, the wireless LAN function unit 20 of the portable electronic device 1 monitors the strength of the radio wave from the AP 3, and when the strength of the radio wave becomes weak enough that the wireless connection cannot be maintained, the AP 3 transmits the transmission antenna 216. Send a disconnect request through. Upon receiving this disconnection request, the AP 3 returns a disconnection response as a response to the disconnection request to the wireless LAN function unit 20. The wireless LAN function unit 20 receives this disconnection response through the receiving antenna 217 and disconnects the wireless connection with the AP 3.

  When the wireless connection with the AP 3 is disconnected, the CPU 201 of the wireless LAN function unit 20 of the portable electronic device 1 changes the control signal CTL for the USB memory unit 10 to a state in which memory access in the USB memory unit 10 is prohibited. . In response to the control signal CTL, the USB memory unit 10 does not accept memory access from the PC 2 and disables data reading or data writing operations.

[Operation Example of Portable Electronic Device 1]
Next, refer to the flowcharts of FIGS. 6 to 8 for the processing operation example of mainly the control means of the portable electronic device 1 when the operation state of the USB memory unit 20 is controlled as shown in the sequence example of FIG. While explaining. The processing operation of each step in the flowcharts of FIGS. 6 to 8 is executed by the CPU 201 using the RAM 203 as a work area according to the program of the ROM 202.

  First, the CPU 201 determines whether or not the portable electronic device 1 is connected to the PC 2 based on whether or not a connection notification is received from the PC 2 (step S101). In step S101, when the connection notification is received and it is determined that the portable electronic device 1 is connected to the PC 2, the CPU 201 recognizes the connection with the PC 2 by the USB memory unit 10 and the wireless LAN function unit 20, and the PC 2 recognizes the connection. A notification is returned (step S102). Then, the CPU 201 controls the USB memory unit 10 to the access prohibited state by the control signal CTL supplied to the USB memory unit 10 (step S103).

  Next, the CPU 201 determines whether or not the memory access from the PC 2 has been received (step S104). When the memory access is received, the USB memory unit 10 is inoperative, and therefore rejects the memory access (step S104). S105). Note that the PC 2 may notify the user of this memory access refusal on the display screen.

  Then, the CPU 201 determines whether or not the wireless LAN connection information is stored and set in the wireless LAN connection information (step S106). Also, when it is determined in step S104 that the memory access from the PC 2 has not been received, the CPU 201 proceeds to step S106.

  When it is determined in step S106 that the wireless LAN connection information has been set, the CPU 201 determines whether or not the wireless LAN connection area of AP3 is within the wireless LAN connection area (step S107). Then, it is determined whether or not the portable electronic device 1 is disconnected from the PC 2 (step S108).

  When it is determined in step S108 that the portable electronic device 1 has been removed from the PC 2, the CPU 201 ends this processing routine. If it is determined in step S108 that the portable electronic device 1 has not been removed from the PC 2, the CPU 201 returns to step S104 and repeats the processes in and after step S104.

  If it is determined in step S106 that the wireless LAN connection information has not been set, the CPU 201 determines whether an authentication password for setting or changing the wireless LAN connection information has been received (see FIG. 7 step S111). When determining in step S111 that the password has not been received, the CPU 201 determines whether or not the portable electronic device 1 is disconnected from the PC 2 (step S112).

  When it is determined in step S112 that the portable electronic device 1 has been removed from the PC 2, the CPU 201 ends this processing routine. If it is determined in step S112 that the portable electronic device 1 has not been removed from the PC 2, the CPU 201 returns to step S104 and repeats the processing from step S104 onward.

  If it is determined in step S111 that the password has been received, the CPU 201 compares the password stored in the wireless LAN connection information storage unit 208 and determines whether or not the passwords match. It is determined whether or not there is (step S113). If it is determined in step S113 that the received password does not match the stored password and authentication is NG, the CPU 201 notifies the PC 2 of an authentication error (step S114). Then, in step S114, the process proceeds to step S112, and the processes after step S112 are repeated.

  If it is determined in step S113 that the received password matches the stored password and authentication is OK, the CPU 201 receives the wireless LAN connection information that will be sent from the PC 2. It is determined whether or not it has been done (step S115). When determining in step S115 that the wireless LAN connection information has been received, the CPU 201 stores and sets the received wireless LAN connection information in the wireless LAN connection information storage unit 208 (step S116). Then, the process returns to step S107 in FIG. 6, and the processes after step S107 are repeated.

  If it is determined in step S115 that the wireless LAN connection information has not been received, the CPU 201 determines whether or not the portable electronic device 1 is disconnected from the PC 2 (step S117).

  If it is determined in step S117 that the portable electronic device 1 has been removed from the PC 2, the CPU 201 ends this processing routine. If it is determined in step S117 that the portable electronic device 1 has not been disconnected from the PC 2, the CPU 201 returns to step S115 and repeats the processing from step S115 onward.

  When it is determined in step S107 in FIG. 6 that the wireless LAN connection area of AP3 is within range, the CPU 201 sends a wireless LAN connection request to AP3 (step S121), and the wireless LAN connection with AP3 is performed. A connection sequence is executed (step S122). Then, it is determined whether or not a wireless connection response sent from the AP 3 when this connection sequence is successful (step S123). If no wireless connection response is received, in this example, the wireless LAN connection to the PC 2 is established. Is notified of the failure (step S124).

  When the wireless connection response is received in step S123, the CPU 201 establishes a wireless connection with the AP 3 (step S125), and accesses the USB memory unit 10 with the control signal CTL supplied to the USB memory unit 10. The permission state is controlled (step S126). In step S126, the CPU 201 may notify the PC 2 that the USB memory unit 10 is in an access-permitted state.

  Next, the CPU 201 determines whether or not a memory access from the PC 2 has been received (step S127). When it is determined that the memory access has been received, the USB memory unit 10 receives the memory access and writes or reads data. Is executed (step S128). Next, the CPU 201 determines whether or not the cutting environment has become weak enough that the radio wave from the AP 3 cannot maintain the wireless connection (step S129).

  If it is determined in step S129 that the wireless connection is not disconnected, the CPU 201 returns to step S127 and repeats the processes in and after step S127. If it is determined in step S129 that the wireless connection cutting environment has been established, the CPU 201 sends a wireless connection cutting request to the AP 3 (step S130), and executes a wireless connection cutting process (step S131). . And it returns to step S103 of FIG. 6, and repeats the process after this step S103.

  If it is determined in step S127 that no memory access has been received, the CPU 201 determines whether or not the portable electronic device 1 is disconnected from the PC 2 (step S132).

  When it is determined in step S132 that the portable electronic device 1 has been removed from the PC 2, the CPU 201 ends this processing routine. If it is determined in step S132 that the portable electronic device 1 has not been removed from the PC 2, the CPU 201 proceeds to step S129 and executes the processes after step S129.

[Effect of the embodiment]
According to the portable electronic device 1 of the above-described embodiment, the USB memory unit only in the wireless LAN connection area of the AP 3 in which the same wireless LAN connection information as the wireless LAN connection information set in the wireless LAN function unit 20 is set. 10 can perform a memory access operation. Therefore, for example, by installing the AP 3 so that a specific place such as a room of a specific section of the company is within the wireless LAN connection area, and setting the same wireless LAN connection information as the AP 3 in the portable electronic device 1 The portable electronic device 1 can be restricted to be used only in the room of the section. That is, the use place of the portable electronic device 1 can be limited according to the installation place of the AP 3.

  Since the user does not need to input a password or the like when using the portable electronic device 1, the user does not need to remember the password and does not need to input the user. The burden can be reduced.

  Further, the operation of the portable electronic device 1 can be controlled by changing the wireless LAN connection information set in the AP 3. That is, when the operation of the portable electronic device 1 is prohibited, wireless LAN connection information different from the wireless LAN connection information set in the portable electronic device 1 is set, and the operation of the portable electronic device 1 is permitted. In this case, the same wireless LAN connection information as the wireless LAN connection information set in the portable electronic device 1 may be set. For example, by controlling the wireless LAN connection information set in the AP 3 by the server 5 according to a predetermined time, the mobile electronic device 1 can be controlled to be operable only in a specific time interval. it can.

  Furthermore, in the above-described embodiment, since the wireless LAN connection information of the wireless LAN function unit 20 of the portable electronic device 1 is limited to be changeable only when a specific password is input, the portable electronic device 1 Even if the wireless LAN connection information is changed and used in another place, it can be prevented. Therefore, even when the portable electronic device 1 is stolen and taken out of the wireless LAN connection area of the AP 3, it is difficult to change the information for wireless LAN connection by the specific password, and security is improved.

  In addition, as described above, the wireless LAN function unit of the portable electronic device 1 according to the above-described embodiment can be used not only for limiting the operation of the main processing unit but also for normal wireless LAN communication.

[Other Embodiments and Modifications]
In the above-described embodiment, the main processing unit is the USB memory unit. However, the memory unit may be a card-type memory unit or a hard disk device. Further, the main processing unit is not limited to the memory, and can be various other processing function means.

  Moreover, although the portable electronic device of the above-mentioned embodiment was used by connecting to an external device such as a PC, the present invention is not limited to a device used by connecting to an external device, and is used alone. It is also applicable to portable electronic devices. That is, for example, information such as an image, sound, or electronic book is stored in a storage medium, and the stored image, sound, or electronic book is played back only at a predetermined location where wireless LAN connection is possible, and the user The present invention can also be applied to a terminal device that allows a user to view the video.

  In the above-described embodiment, the operation state of the main processing unit of the portable electronic device is controlled only by whether or not the wireless LAN connection is established. However, as in Patent Document 1 described at the beginning, a password is used. The operation of the portable electronic device may be permitted only when the password is further input, or only when the stored password match authentication is obtained as in Patent Document 2.

  DESCRIPTION OF SYMBOLS 1 ... Portable electronic device, 2 ... PC, 3 ... AP, 10 ... USB memory part, 20 ... Wireless LAN function part

Claims (5)

A wireless LAN (Local Area Network) function unit;
A main processing unit that operates independently of the wireless LAN function unit,
When the wireless LAN function unit establishes wireless connection with the access point device for wireless LAN, the main processing unit is controlled to be operable, and the wireless connection with the access point device for wireless LAN is disconnected. Control means for controlling the main processing unit to the operation prohibited state when being performed,
A portable electronic device comprising: The portable electronic device according to claim 1, wherein
With a connection with external equipment,
The main processing unit has a function of performing a predetermined processing operation in response to an access from the external device when connected to the external device by the connection unit;
When the wireless connection with the access point device for wireless LAN is established, the control means accepts access to the main processing unit from the external device, and puts the main processing unit into an operable state. When the wireless connection with the access point device for wireless LAN is disconnected, the main processing unit is controlled to be in an operation prohibited state by not accepting access to the main processing unit from the external device. A portable electronic device characterized by that. The portable electronic device according to claim 2,
The main processing unit includes a storage medium, and writes data from the external device in response to read / write access from the external device when connected to the external device by the connection unit. , Having a function of transferring data read from the storage medium to the external device,
When the wireless connection with the access point device for wireless LAN is established, the control means enables read / write access to the storage medium from the external device, and wirelessly communicates with the access point device for wireless LAN. When the connection is disconnected, read / write access to the storage medium from the external device is prohibited. The portable electronic device according to any one of claims 1 to 3,
The portable electronic device, wherein the control means permits rewriting of information for connection with an access point device for wireless LAN only when receiving predetermined authentication information. An operation control method for a portable electronic device comprising a wireless LAN (Local Area Network) function unit, a main processing unit that essentially operates independently of the wireless LAN function unit, and a control means,
A determining step in which the control means determines whether or not a wireless connection with a wireless LAN access point device is established by the wireless LAN function unit;
A first control step of controlling the main processing unit to an operable state when the control unit determines that a wireless connection with a wireless LAN access point device is established by the wireless LAN function unit;
A second control step for controlling the main processing unit to an operation prohibited state when the control unit determines that the wireless LAN function unit has disconnected the wireless LAN access point device;
A method for controlling the operation of a portable electronic device.

Images