JP2012199751A - Management server, communication system, management method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To limit usage of a communication terminal by a remote control operation even when the communication terminal with a detachable storage medium having a unique identifier such as a SIM card mounted to the communication terminal is lost or stolen.SOLUTION: A management server according to the present invention manages a communication terminal actuated by mounting a detachable storage medium having a unique identifier. The management server comprises a user management part for associating and managing the identifier of the communication terminal and an identifier of the storage medium mounted to the communication terminal; a terminal information collecting part for collecting the identifier of the communication terminal and the identifier of the storage medium mounted to the communication terminal from the communication terminal when a condition set in the management server is satisfied; a collation part for collating information managed by the user management part with the information collected from the communication terminal; and a terminal limiting part for limiting usage of the communication terminal when the collation results are not matched.

Description

  The present invention relates to a management server, a communication system, a management method, and a program for managing communication terminals.

  As a countermeasure against loss or theft of a mobile terminal, there is a service for locking or initializing the mobile terminal by remote control. In general, such services are processed using information recorded in a SIM (Subscriber Identity Module) card mounted on a mobile terminal as a key. In this case, if the SIM card of the portable terminal is replaced, there is a problem that it is not possible to lock or initialize by remote operation.

  As a technique for solving such a problem, for example, techniques described in Patent Document 1 and Patent Document 2 are cited.

  In Patent Document 1, the combination of the ID of the mobile terminal and the ID of the SIM card being used is stored in the mobile terminal, so that the SIM card can be replaced without permission from the owner of the mobile terminal or the management side. Techniques for preventing this are described.

  Patent Document 2 describes the following technique. First, at the time of purchasing a mobile terminal, the dealer notifies the carrier (administrator) of the combination of the ID of the mobile terminal and the SIM card ID, and the carrier registers information. When the user turns on the mobile terminal, the ID of the mobile terminal and the ID of the SIM card are transmitted to the carrier and collation is performed on the carrier.

  Patent Document 2 also describes how to handle a SIM card when handing over a portable terminal to an acquaintance. When the mobile terminal is handed over, the SIM card information of the new user is transmitted to the carrier and registered when the SIM card used by the original owner of the mobile terminal is inserted. Next, when the mobile terminal is powered on, the new user's SIM card information is collated.

JP 2007-267006 A JP 2010-263544 A

  However, in the technique described in Patent Document 1, if the SIM card is lost or stolen, the mobile terminal is authenticated as the owner if the SIM card mounted on the mobile terminal is used as it is. There was a problem of continuing.

  Also in the technique described in Patent Document 2, if the SIM card is lost or stolen, the SIM card installed in the mobile terminal can be used to register a new SIM card. There was a problem that it would end up.

  The objective of this invention is providing the management server, communication system, management method, and program which can solve the subject mentioned above.

  The management server according to the present invention is a management server that manages a mobile terminal that operates by mounting a removable storage medium having a unique identifier, and is mounted on the mobile terminal identifier and the mobile terminal. A user management unit for managing the storage medium identifier in association with each other, and when a condition set in the management server is satisfied, the mobile terminal identifier, and the storage medium identifier installed in the mobile terminal; A terminal information collection unit that collects information from the portable terminal, a collation unit that collates information managed by the user management unit with information collected from the portable terminal, and the portable information when the collation result does not match A terminal restriction unit that restricts the use of the terminal.

  A communication system according to the present invention is a communication system including a portable terminal that operates by mounting a removable storage medium having a unique identifier, and a management server that manages the portable terminal, wherein the management server includes: A user management unit that manages the identifier of the portable terminal in association with the identifier of the storage medium installed in the portable terminal, and the identifier of the portable terminal when a condition set in the management server is satisfied And a terminal information collection unit that collects identifiers of storage media mounted on the portable terminal from the portable terminal, information managed by the user management unit, and information collected from the portable terminal A collation unit, and a terminal restriction unit that requests the portable terminal to restrict use when the collation result does not match, and the portable terminal requires the use restriction. If it is, it characterized in that it comprises a terminal usage restriction part for restricting the use of the portable terminal.

  The communication method according to the present invention, when a condition set in a management server that manages a mobile terminal that operates by mounting a removable storage medium having a unique identifier is satisfied, Collecting the identifier of the storage medium mounted on the mobile terminal from the mobile terminal, and managing the user in association with the identifier of the mobile terminal and the identifier of the storage medium mounted on the mobile terminal A step of collating information managed by a section with information collected from the portable terminal, and a step of restricting the use of the portable terminal when the collation result does not match, To do.

  When a condition set in a management server that manages a mobile terminal that operates by mounting a removable storage medium having a unique identifier is satisfied, the program according to the present invention includes the identifier of the mobile terminal, A user management unit that manages a process of collecting an identifier of a storage medium mounted on a mobile terminal from the mobile terminal, an identifier of the mobile terminal, and an identifier of a storage medium mounted on the mobile terminal And causing the computer to execute a process of collating the information managed by the mobile terminal with the information collected from the mobile terminal and a process of restricting the use of the mobile terminal when the collation result does not match Features.

  Even when a communication terminal is lost or stolen together with a removable storage medium having a unique identifier such as a SIM card mounted on the communication terminal, the use of the communication terminal can be restricted by remote operation.

It is a block diagram which shows the structure of the management server by 1st Embodiment. It is a flowchart which shows the operation | movement by 1st Embodiment. It is a block diagram which shows the structure of the communication system by 2nd Embodiment. It is a block diagram which shows the structure of DM server by 2nd Embodiment. It is a figure which shows the example of the user management part by 2nd Embodiment. It is a block diagram which shows the structure of the portable terminal by 2nd Embodiment. It is a sequence chart which shows the operation | movement by 2nd Embodiment. It is a sequence chart which shows the operation | movement by 2nd Embodiment. It is a sequence chart which shows the operation | movement by 2nd Embodiment. It is a block diagram which shows the structure of DM server by 3rd Embodiment. It is a figure which shows the example of the user management part by 3rd Embodiment. It is a figure which shows the example of the user management part by 3rd Embodiment. It is a block diagram which shows the structure of DM server by 4th Embodiment. It is a block diagram which shows the structure of the portable terminal by 4th Embodiment. It is a sequence chart which shows the operation | movement by 4th Embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

<First Embodiment>
First, a first embodiment of the present invention will be described.

  FIG. 1 is a block diagram showing a configuration of a communication system according to the first embodiment. According to FIG. 1, the communication system according to the first embodiment includes a management server 1000 and a communication terminal 1100.

  The management server 1000 includes a terminal information collection unit 1001, a user management unit 1002, a collation unit 1003, and a terminal restriction unit 1004.

  The user management unit 1002 manages the identifier of the portable terminal 1100 and the identifier of a removable storage medium that is mounted on the portable terminal 1100 and has a unique identifier.

  The operation according to the first embodiment will be described below with reference to FIG.

  First, when the conditions set in the management server 1000 are satisfied (step S101), the terminal information collection unit 1001 starts from the communication terminal 1100 with the identifier of the communication terminal 1100 and the storage medium mounted on the communication terminal 1100. Are collected (step S102).

  The collation unit 1003 collates the identifier of the communication terminal 1100 and the storage medium identifier managed by the user management unit 1002 with the identifier of the communication terminal 1100 and the identifier of the storage medium collected by the terminal information collection unit 1001 (step S103).

  The terminal restriction unit 1004 restricts use of the communication terminal 1100 when the collation result by the collation unit 1003 does not match (step S104).

  If the collation result by the collation unit 1003 is coincident, the processing is terminated as it is (step S103: Yes).

(effect)
According to the first embodiment, the terminal information collection unit 1001 collects communication terminal information when the set condition is satisfied, collates the collected information, and performs communication if the collation result does not match. Use restrictions on the terminal.

  Therefore, according to the above configuration, even when the communication terminal is lost or stolen together with the removable storage medium currently used, the use of the communication terminal can be restricted by remote operation.

<Second Embodiment>
Next, a second embodiment of the present invention will be described.

(Configuration of communication system)
FIG. 3 shows a configuration of a communication system according to the second embodiment. According to FIG. 3, the communication system according to the second embodiment includes a DM (Device Management) server 100, a mobile terminal 200, and a management terminal 300. The DM server 100 and the mobile terminal 200 are connected via a wireless network 400. Similarly, the DM server 100 and the management terminal 300 are connected via an in-house network 500.

  The management terminal 300 is connected to the DM server through the in-house network 500, and is a terminal used for managing the communication system. Examples of the management terminal 300 include a personal computer equipped with a web browser.

  By sending a request from the management terminal 300 to the DM server 100, the mobile terminal 200 can be remotely managed. The management terminal 300 can also display or check management information of the portable terminal held in the DM server database (described later).

  The DM server 100 is a management server or a control server that sends a remote instruction request to the mobile terminal 200. For example, the DM server may be provided with a protocol stack conforming to an OMA-DM (Open Mobile Alliance-Device Management) protocol for communication with the mobile terminal 200. OMA-DM is a communication protocol whose main purpose is the management of mobile terminals, which is being standardized by Open Mobile Alliance (OMA).

  The DM server 100 can remotely control the portable terminal 200 using the OMA-DM in response to a request from the portable terminal 200 or the management terminal 300.

  The portable terminal 200 is a portable terminal that includes an OMA-DM protocol stack. The portable terminal 200 is equipped with a SIM card or a storage medium similar to a SIM card. The mobile terminal 200 may be any communication terminal having a unique identifier. For example, a mobile phone, a desktop personal computer, a notebook personal computer, a PDA (Personal Digital Assistance), a tablet terminal, and the like can be given. The storage medium mounted on the portable terminal 200 may be any storage medium as long as it has an identifier unique to the storage medium and can be attached and detached. For example, in addition to the SIM card, other storage media such as an IC (Integrated Circuit) card can be used. In the following, for simplicity, a SIM card will be described as an example.

  The portable terminal 200 is equipped with a SIM card in which the owner's subscriber information is recorded, and has an identification number of the portable terminal main body and a SIM card, respectively. The mobile terminal 200 and the DM server 100 are connected via a wireless network such as a 3G (3rd Generation) network or a wireless LAN (Local Area Network).

  In the example of FIG. 3, the case where the number of mobile terminals is one is illustrated, but there may be a plurality of mobile terminals.

(Configuration of DM server 100)
FIG. 4 is a block diagram showing a configuration of the DM server 100 according to the second embodiment. 4, the DM server 100 includes a terminal information collection unit 101, a user management unit 102, a collation unit 103, a terminal restriction unit 104, and a communication control unit 110.

  The terminal information collection unit 101 collects information on the identifier of the mobile terminal 200 and the identifier of the SIM card stored in the mobile terminal 200. The user management unit 102 manages the identifier of the mobile terminal 200 and the SIM card identifier information in association with each other.

  The collation unit 103 collates information stored in the mobile terminal 200 collected by the terminal information collection unit 101 and information managed by the user management unit 102. The terminal restriction unit 104 restricts the use of the mobile terminal 200 when the collation result by the collation unit 103 does not match.

  The communication control unit 110 is an interface that controls communication between the DM server 100, the mobile terminal 200, and the management terminal 300.

  FIG. 5 is an example of information related to the management target portable terminal managed by the user management unit 102. The user management unit 102 holds a management table in which an identification number unique to a mobile terminal to be managed is associated with an identification number unique to a SIM card in which subscriber information mounted on a mobile phone is recorded.

  In the example of FIG. 5, IMEI (International Mobile Equipment Identity), which is a unique identification number of the portable terminal, is held as the portable terminal identification number. Further, as an identification number of the SIM card, an IMSI (International Mobile Subscriber Identity) which is a subscriber identification number is held. In FIG. 5, IMEI and IMSI are given as the identification numbers of the mobile terminals, but are not limited thereto. Hereinafter, unless there is a special reason, the identification number unique to the mobile terminal including IMEI is referred to as “terminal unique identifier”, and the SIM card identification number including IMSI is referred to as “SIM card identifier”.

(Configuration of mobile terminal 200)
FIG. 6 is a block diagram showing the configuration of the mobile terminal 200. According to FIG. 6, the mobile terminal 200 includes a SIM card 201, a terminal information management unit 202, a terminal usage restriction unit 203, a processing restriction unit 204, and a communication control unit 210.

  The SIM card 201 is a SIM card that records subscriber information of the current owner of the mobile terminal 200.

  The terminal information management unit 202 collects and manages the terminal unique identifier and the SIM card identifier of the mobile terminal 200.

  The terminal use restriction unit 203 restricts use of the mobile terminal 200 in response to a request.

  The process control unit 204 controls processes performed in the mobile terminal 200. The processing here includes, for example, usage restriction of the mobile terminal 200 performed by the terminal usage restriction unit 203.

  The communication control unit 210 is an interface that controls communication between the mobile terminal 200, the DM server 100, and the management terminal 300.

(Operation)
Hereinafter, the operation of the communication system according to the second embodiment will be described with reference to the drawings.

  FIG. 7 is a sequence chart when information is transmitted from the mobile terminal 200 to the DM server 100. Note that the communication between the portable terminal 200 and the DM server 100 is based on the above-described communication using the OMA-DM protocol.

  First, the DM server 100 determines whether or not a preset condition is satisfied. As this condition, for example, a condition assumed when the mobile terminal 200 leaves the original owner can be considered. More specifically, there may be a case where the data communication amount or call time of the mobile terminal 200 exceeds a set threshold value.

  Further, the portable terminal 200 may satisfy the above condition by making a communication start request to the DM server 100 (step S01-2). In addition, although the cycle for performing the communication in step S01-1 is set in advance, it can be changed.

  The DM server 100 that satisfies the setting condition requests the mobile terminal 200 to transmit the terminal information of the mobile terminal 200 (step S02). This terminal information indicates a terminal unique identifier and a SIM card identifier.

  The terminal information management unit 202 of the mobile terminal 200 that has received the transmission request notifies the terminal unique identifier and the SIM card identifier of the SIM card 201 (step S03). Since the terminal unique identifier is also included in the communication start request in step S01, step S03 can be omitted.

  Finally, the DM server 100 that has received the terminal information records the information in the user management unit 102 and notifies the mobile terminal 200 of the communication end (step S04).

  FIG. 8 shows a sequence when a process start request is issued from the management terminal 300 instead of from the portable terminal 200.

  First, the management terminal 300 makes a process start request to the DM server 100 (step S11). When making a process start request, information that can identify a terminal to be processed, such as a telephone number of the mobile terminal 200 and a terminal unique identifier, is transmitted.

  Upon receiving the process start request, the DM server 100 transmits a communication start request to the mobile terminal 200 (step S12). The communication start request is made using a short message service (SMS), E-mail, HTTP (Hypertext Transfer Protocol), or the like. Here, when there is no guarantee that the mobile terminal 200 is always connected to the network, a communication start request by SMS is desirable.

  The sequence (step S13 to step S16) in which the portable terminal 200 receives a communication start request and transmits terminal information to the DM server 100 is the same as step S02 to step S04 in FIG. The DM server 100 that has received the terminal information notifies the management terminal 300 that the terminal information collection processing of the mobile terminal 200 has been completed (step S17).

  The terminal information of the portable terminal 200 collected by the operations shown in FIGS. 7 and 8 is accumulated in the user management unit 102 of the DM server 100. As described above, the collating unit 103 collates the accumulated information with the terminal information of the newly collected mobile terminal 200. By this collation, it is possible to detect whether the owner of the mobile terminal 200 is an official owner or an unauthorized user.

  FIG. 9 shows an operation sequence for restricting the use of the mobile terminal 200 when it is detected that the mobile terminal 200 is illegally used.

  First, the management terminal 300 transmits a use restriction request for the mobile terminal 200 in which unauthorized use is detected by the matching unit 103 (step S21).

  The DM server 100 that has received the use restriction request makes a communication start request to the target mobile terminal 200 (step S22).

  When the mobile terminal 200 starts communication in response to the communication start request (step S23), the terminal restriction unit 104 of the DM server 100 transmits a terminal use restriction request to the mobile terminal 200 (step S24).

  When the mobile terminal 200 receives the terminal use restriction request, the process control unit 204 starts the terminal use restriction process, and the terminal use restriction unit 203 restricts the use of the mobile terminal 200. After the terminal use restriction unit 203 restricts the use of the mobile terminal 200, the mobile terminal 200 transmits a response to the effect that the terminal use restriction has ended to the DM server 100 (step S25).

  In addition, various methods can be considered as the use restriction of the mobile terminal 200. For example, the function stop of the mobile terminal, the lock of the mobile terminal, and the initialization of the mobile terminal are typical operation examples. Among these, by stopping the function of the mobile terminal or locking the mobile terminal, it becomes possible to prohibit the use other than the original owner of the mobile terminal. In addition, by initializing the mobile terminal, it is possible to protect the data stored in the mobile terminal by the original owner of the mobile terminal. Furthermore, it is possible to stop the function of the portable terminal by forcibly upgrading or downgrading the firmware of the portable terminal.

  Thereafter, the DM server 100 transmits a communication end notification (step S26) to the mobile terminal 200 and a process completion notification (step S27) to the management terminal 300, and ends the process.

(effect)
According to the second embodiment, the terminal information collection unit 101 collects mobile terminal information when the conditions set in the DM server 100 are satisfied, collates the collected information, and the collation result does not match In some cases, usage restrictions are imposed on mobile terminals.

  Therefore, according to the above configuration, even when the mobile terminal is lost or stolen together with the currently used SIM card, the use of the mobile terminal can be restricted by remote operation.

<Third Embodiment>
Subsequently, a third embodiment of the present invention will be described. In the third embodiment, in addition to the terminal information managed by the user management unit 102 in the second embodiment, collation is performed using information on the user of the mobile terminal.

  FIG. 10 is a block diagram showing the configuration of the DM server 100 according to the third embodiment. In addition, since the structure and operation | movement of the portable terminal 200 and the management terminal 300 are the same as that of 2nd Embodiment, description below is abbreviate | omitted.

  10, the DM server 100 includes a terminal information collection unit 101, a user management unit 102, a collation unit 103, a terminal restriction unit 104, a collation request unit 105, and a communication control unit 110.

  The operations of the terminal information collection unit 101, the user management unit 102, the collation unit 103, the terminal restriction unit 104, and the communication control unit 110 are the same as those in the second embodiment, and thus description thereof is omitted.

  The difference from the second embodiment is that information managed by the user management unit 102 is added and a verification request unit 105 is added.

  First, an example of information managed by the user management unit 102 according to the third embodiment is shown in FIG. According to FIG. 11, the user management unit 102 manages user contract information in addition to the terminal unique identifier and the SIM card identifier. The user contract information is information related to individual users who have contracts with corresponding mobile terminals. As the user contract information, for example, the user's date of birth, address, and other information registered at the time of the mobile terminal contract can be used.

  In addition, the verification request unit 105 requests the mobile terminal 200 to input user contract information. As a timing of the collation by the collation request unit 105, for example, a case where a condition set in the DM server 100 in the second embodiment is satisfied can be considered.

  According to the above operation, even when the mobile terminal 200 is lost or stolen, it is possible to verify whether or not the owner of the mobile terminal 200 is a contractor.

  Furthermore, the timing of collation by the collation request unit 105 may be started when a request is made from the mobile terminal 200 when the mobile terminal 200 is transferred to an acquaintance. When registering a new SIM card, it is possible to register a SIM card that is not registered in advance in the user management unit 102 in the mobile terminal 200 by collating user contract information. FIG. 12 shows an example in which a SIM card identifier (IMSI: 5678ZZZZ) is newly registered according to the third embodiment.

<Fourth Embodiment>
Next, a fourth embodiment will be described. In 4th Embodiment, when the collation result of the owner of the portable terminal 200 corresponds, SIM lock cancellation | release of the SIM card 201 of the portable terminal 200 is performed.

  FIG. 13 is a block diagram showing the configuration of the DM server 100 according to the fourth embodiment. Note that the configuration and operation of the management terminal 300 are the same as those in the second embodiment and the third embodiment, and a description thereof will be omitted here. The operations of the terminal information collection unit 101, the user management unit 102, the collation unit 103, the terminal restriction unit 104, the collation request unit 105, and the communication control unit 110 of the DM server 100 are the second embodiment or the third embodiment. The description here is omitted. Note that a configuration in which the verification request unit 105 is not provided in the DM server 100 may be employed.

  According to the fourth embodiment, the SIM lock release request unit 106 is added in the DM server 100. The SIM lock release request unit 106 requests the mobile terminal 200 to release the SIM lock of the mobile terminal 200 when it is detected that the verification results of the user of the mobile terminal 200 by the verification unit 103 match. To do.

  FIG. 14 is a block diagram showing the configuration of the mobile terminal 200 according to the fourth embodiment. The operations of the SIM card 201, the terminal information management unit 202, the terminal usage restriction unit 203, the processing restriction unit 204, and the communication control unit 210 are the same as those in the second embodiment or the third embodiment. Description of is omitted.

  According to the fourth embodiment, the SIM lock release unit 205 is added in the mobile terminal 200. The SIM lock release unit 205 releases the SIM lock according to an instruction from the processing control unit 204 in response to a SIM lock release request from the SIM lock release request unit 106 of the DM server 100.

  FIG. 15 is a sequence chart illustrating the SIM unlocking operation of the mobile terminal 200 according to the fourth embodiment.

  First, the management terminal 300 transmits a SIM lock release request of the mobile terminal 200, for example, when a preset condition is satisfied (step S31). The timing for permitting the SIM lock release request may be, for example, a certain period of time since the purchase of the mobile terminal 200 as described above, or a case where the user has paid for a certain amount.

  Further, before step S31, the mobile terminal 200 may make a request to the DM server 100 to release the SIM lock.

  When receiving the SIM lock release request from the management terminal 300, the DM server 100 transmits a communication start request to the mobile terminal 200 (step S32).

  In response to the communication start request from the DM server 100, the portable terminal 200 starts communication (step S33).

  When communication is started, the SIM lock release request unit 205 of the DM server 100 transmits a SIM lock release request to the mobile terminal 200 (step S34).

  When receiving the SIM lock release request, the portable terminal 200 requests the SIM lock release unit 205 to perform the SIM lock release process via the process control unit 204. Upon receiving the request, the SIM lock release unit 205 releases the SIM lock of the mobile terminal 200. When the SIM lock release of the mobile terminal 200 is completed, the mobile terminal 200 transmits a SIM lock release completion notification to the DM server 100 (step S35).

  When receiving the SIM lock release completion notification, the DM server 100 transmits a communication end notification (step S36) to the mobile terminal 200 and a process completion notification (step S37) to the management terminal.

  The timing for permitting the SIM lock release request may be, for example, a certain period of time since the purchase of the mobile terminal 200 as described above, or a case where the user has paid for a certain amount. The activation of the mobile phone market can be expected by providing an option of releasing the SIM card lock for an authorized user who has been used for a certain period of time.

  While the present invention has been described with reference to the embodiments, the present invention is not limited to the above embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

  In addition, the DM server (management server) according to the above-described embodiment can realize the functions of the DM server (hardware), or can be realized by a computer and a program executed on the computer. . The program is provided by being recorded on a recording medium such as a magnetic disk or a semiconductor memory, and is read by the computer when the computer is started up. In this way, the operation of the computer is controlled, and the computer is caused to function as the DM server or the management server in each of the above-described embodiments, and the above-described processing is performed.

  Further, a part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
A management server that manages a communication terminal that operates by mounting a removable storage medium having a unique identifier,
A user management unit that manages the identifier of the communication terminal and the identifier of the storage medium installed in the communication terminal in association with each other;
A terminal information collection unit that collects an identifier of the communication terminal and an identifier of a storage medium mounted on the communication terminal from the communication terminal when a condition set in the management server is satisfied;
A collation unit that collates information managed by the user management unit and information collected from the communication terminal;
A terminal restriction unit that restricts the use of the communication terminal when the verification result does not match;
A management server comprising:

(Appendix 2)
2. The management server according to claim 1, wherein the condition set in the management server is a case where a data communication amount or a call time of the communication terminal exceeds a threshold value.

(Appendix 3)
The user management unit manages the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user who owns the communication terminal in association with each other,
The management server further includes:
A matching request unit that requests the communication terminal to collate with contract information of a user who owns the communication terminal managed by the user management unit,
The terminal information collection unit further collects the contract information of the user of the communication terminal input in response to the verification request,
The verification unit includes an identifier of the communication terminal managed by the user management unit, an identifier of a storage medium installed in the communication terminal, contract information of the user, and the user collected from the communication terminal. The management according to appendix 1 or 2, wherein the identifier of the communication terminal managed by the management unit, the identifier of the storage medium installed in the communication terminal, and the contract information of the user are collated. server.

(Appendix 4)
The management server further includes:
4. The storage medium unlock request unit that requests the communication terminal to unlock the storage medium when the collation result by the collation request unit is identical. 5. Management server described in one.

(Appendix 5)
The use limitation includes at least one of a function stop of the communication terminal, a lock of the communication terminal, an initialization of the communication terminal, and a firmware upgrade or downgrade of the communication terminal. 5. The management server according to any one of 4 to 4.

(Appendix 6)
A communication system comprising a communication terminal that operates by mounting a removable storage medium having a unique identifier, and a management server that manages the communication terminal,
The management server is configured to associate and manage an identifier of the communication terminal and an identifier of a storage medium mounted on the communication terminal;
A terminal information collection unit that collects an identifier of the communication terminal and an identifier of a storage medium mounted on the communication terminal from the communication terminal when a condition set in the management server is satisfied;
A collation unit that collates information managed by the user management unit and information collected from the communication terminal;
A terminal restriction unit for requesting use restriction to the communication terminal when the verification result does not match;
With
The communication terminal is
A communication system comprising: a terminal use restriction unit that restricts use of the communication terminal when the use restriction is requested.

(Appendix 7)
The communication system according to appendix 6, wherein the condition set in the management server is a case where a data communication amount or a call time of the communication terminal exceeds a threshold value.

(Appendix 8)
The user management unit manages the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user who owns the communication terminal in association with each other,
The management server further includes:
A matching request unit that requests the communication terminal to collate with contract information of a user who owns the communication terminal managed by the user management unit,
The terminal information collection unit further collects the contract information of the user of the communication terminal input in response to the verification request,
The verification unit includes an identifier of the communication terminal managed by the user management unit, an identifier of a storage medium installed in the communication terminal, contract information of the user, and the user collected from the communication terminal. The communication according to appendix 6 or 7, wherein an identifier of the communication terminal managed by a management unit, an identifier of a storage medium installed in the communication terminal, and the contract information of the user are collated. system.

(Appendix 9)
The management server further includes:
A storage medium unlock request unit that makes a request to unlock the storage medium to the communication terminal when the collation result by the collation request unit matches;
The communication terminal further includes:
According to any one of appendices 6 to 8, further comprising a storage medium lock release unit that performs lock release of the storage medium mounted on the communication terminal in response to the lock release request of the storage medium. Communications system.

(Appendix 10)
The use restriction includes at least one of a function stop of the communication terminal, a lock of the communication terminal, an initialization of the communication terminal, and a firmware upgrade or downgrade of the communication terminal. The communication system according to any one of 1 to 9.

(Appendix 11)
When a condition set in a management server that manages a communication terminal that operates by mounting a removable storage medium having a unique identifier is satisfied, the communication terminal identifier and the communication terminal Collecting the identifiers of the storage media from the communication terminal;
Collating the information managed by the user management unit managing the identifier of the communication terminal with the identifier of the storage medium mounted on the communication terminal and the information collected from the communication terminal;
A step of restricting the use of the communication terminal when the verification result does not match;
The management method characterized by including.

(Appendix 12)
The management method according to appendix 11, wherein the condition set in the management server is a case where a data communication amount or a call time of the communication terminal exceeds a threshold value.

(Appendix 13)
The user management unit manages the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user who owns the communication terminal in association with each other,
The management method further includes:
Requesting the communication terminal to collate with contract information of a user who owns the communication terminal managed by the user management unit;
Collecting contract information of a user of the communication terminal input in response to the verification request;
Managed by the user management unit collected from the communication terminal, the identifier of the communication terminal managed by the user management unit, the identifier of the storage medium installed in the communication terminal, the contract information of the user, Checking the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user;
The management method according to appendix 11 or appendix 12, characterized by comprising:

(Appendix 14)
The management method further includes:
14. The method according to any one of appendix 11 to appendix 13, further comprising a step of requesting the storage medium to be unlocked with respect to the storage medium mounted on the communication terminal when the collation result is coincident. Management method.

(Appendix 15)
The use restriction includes at least one of a function stop of the communication terminal, a lock of the communication terminal, an initialization of the communication terminal, and a firmware upgrade or downgrade of the communication terminal. 15. The management method according to any one of 1 to 14.

(Appendix 16)
When a condition set in a management server that manages a communication terminal that operates by mounting a removable storage medium having a unique identifier is satisfied, the communication terminal identifier and the communication terminal Collecting the identifier of the storage medium being stored from the communication terminal;
A process of collating the information managed by the user management unit that manages the identifier of the communication terminal and the identifier of the storage medium mounted on the communication terminal in association with the information collected from the communication terminal;
A process of restricting the use of the communication terminal when the verification result does not match;
A program that causes a computer to execute.

(Appendix 17)
The program according to appendix 16, wherein the condition set in the management server is a case where a data communication amount or a call time of the communication terminal exceeds a threshold value.

(Appendix 18)
The user management unit manages the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user who owns the communication terminal in association with each other,
The program further includes:
A process for requesting the communication terminal to collate with contract information of a user who owns the communication terminal managed by the user management unit;
Processing for collecting contract information of the user of the communication terminal input in response to the verification request;
Managed by the user management unit collected from the communication terminal, the identifier of the communication terminal managed by the user management unit, the identifier of the storage medium installed in the communication terminal, the contract information of the user A process of collating the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user;
The program according to appendix 16 or appendix 17, characterized by including:

(Appendix 19)
The program further includes:
The program according to any one of supplementary note 16 to supplementary note 18, which includes a process of making a request to unlock the storage medium to the communication terminal when the collation result is coincident.

(Appendix 20)
The use restriction includes at least one of function stop of the communication terminal, lock of the communication terminal, initialization of the communication terminal, and upgrade or downgrade of firmware of the communication terminal. The program according to any one of 1 to 19.

DESCRIPTION OF SYMBOLS 100 DM server 101,1001 Terminal information collection part 102,1002 User management part 103,1003 Collation part 104,1004 Terminal restriction part 105 Collation request part 106 SIM lock release request part 110 Communication control part 200 Portable terminal 201 SIM card 202 Terminal information Management unit 203 Terminal use restriction unit 204 Processing restriction unit 205 SIM lock release unit 210 Communication control unit 300 Management terminal 400 Wireless network 500 Internal network 1000 Management server 1100 Communication terminal

Claims (10)

A management server that manages a communication terminal that operates by mounting a removable storage medium having a unique identifier,
A user management unit that manages the identifier of the communication terminal and the identifier of the storage medium installed in the communication terminal in association with each other;
A terminal information collection unit that collects an identifier of the communication terminal and an identifier of a storage medium mounted on the communication terminal from the communication terminal when a condition set in the management server is satisfied;
A collation unit that collates information managed by the user management unit and information collected from the communication terminal;
A terminal restriction unit that restricts the use of the communication terminal when the verification result does not match;
A management server comprising:   The management server according to claim 1, wherein the condition set in the management server is a case where a data communication amount or a call time of the communication terminal exceeds a threshold value. The user management unit manages the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user who owns the communication terminal in association with each other,
The management server further includes:
A matching request unit that requests the communication terminal to collate with contract information of a user who owns the communication terminal managed by the user management unit,
The terminal information collection unit further collects the contract information of the user of the communication terminal input in response to the verification request,
The verification unit includes an identifier of the communication terminal managed by the user management unit, an identifier of a storage medium installed in the communication terminal, contract information of the user, and the user collected from the communication terminal. The identifier of the communication terminal managed by the management unit, the identifier of the storage medium installed in the communication terminal, and the contract information of the user are collated. Management server. The management server further includes:
4. The storage medium unlock request unit that requests the communication terminal to unlock the storage medium when the collation result by the collation request unit is identical. 5. Management server described in one.   The use restriction includes at least one of a function stop of the communication terminal, a lock of the communication terminal, an initialization of the communication terminal, and a firmware upgrade or downgrade of the communication terminal. The management server according to any one of 1 to 4. A communication system comprising a communication terminal that operates by mounting a removable storage medium having a unique identifier, and a management server that manages the communication terminal,
The management server is configured to associate and manage an identifier of the communication terminal and an identifier of a storage medium mounted on the communication terminal;
A terminal information collection unit that collects an identifier of the communication terminal and an identifier of a storage medium mounted on the communication terminal from the communication terminal when a condition set in the management server is satisfied;
A collation unit that collates information managed by the user management unit and information collected from the communication terminal;
A terminal restriction unit for requesting use restriction to the communication terminal when the verification result does not match;
With
The communication terminal is
A communication system comprising: a terminal use restriction unit that restricts use of the communication terminal when the use restriction is requested.   The communication system according to claim 6, wherein the condition set in the management server is a case where a data communication amount or a call time of the communication terminal exceeds a threshold value. The user management unit manages the identifier of the communication terminal, the identifier of the storage medium installed in the communication terminal, and the contract information of the user who owns the communication terminal in association with each other,
The management server further includes:
A matching request unit that requests the communication terminal to collate with contract information of a user who owns the communication terminal managed by the user management unit,
The terminal information collection unit further collects the contract information of the user of the communication terminal input in response to the verification request,
The verification unit includes an identifier of the communication terminal managed by the user management unit, an identifier of a storage medium installed in the communication terminal, contract information of the user, and the user collected from the communication terminal. The identifier of the communication terminal managed by the management unit, the identifier of the storage medium installed in the communication terminal, and the contract information of the user are collated. Communications system. When a condition set in a management server that manages a communication terminal that operates by mounting a removable storage medium having a unique identifier is satisfied, the communication terminal identifier and the communication terminal Collecting the identifiers of the storage media from the communication terminal;
Collating the information managed by the user management unit managing the identifier of the communication terminal with the identifier of the storage medium mounted on the communication terminal and the information collected from the communication terminal;
A step of restricting the use of the communication terminal when the verification result does not match;
The management method characterized by including. When a condition set in a management server that manages a communication terminal that operates by mounting a removable storage medium having a unique identifier is satisfied, the communication terminal identifier and the communication terminal Collecting the identifier of the storage medium being stored from the communication terminal;
A process of collating the information managed by the user management unit that manages the identifier of the communication terminal and the identifier of the storage medium mounted on the communication terminal in association with the information collected from the communication terminal;
A process of restricting the use of the communication terminal when the verification result does not match;
A program that causes a computer to execute.

Images