JP2013077956A - Mobile terminal management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an MDM capable of issuing a command from a server side to a mobile terminal at an arbitrary time, without dependent on a 3G channel.SOLUTION: A management server 14 includes: a control message transmitter unit 24 for push transmitting a control message α to instruct the execution of specific processing to a mobile terminal 12 through a communication system confirming to an XMPP protocol; and a report message receiver unit 26 for receiving a report message β transmitted from the mobile terminal 12 to store into a report message storage unit 28 in association with a terminal management ID. The mobile terminal 12 includes: a control message receiver unit 16 for analyzing the control message α after the reception thereof, to identify instructed processing; a processing execution unit 20 for executing the instructed processing; and a report message transmitter unit 18 for transmitting the report message β describing a processing result to the management server 14 through the communication system confirming to the XMPP protocol.

Description

  The present invention relates to a mobile terminal management system, and more particularly to a system for centrally managing a plurality of mobile terminals remotely via wireless communication.

  In recent years, smartphones, which are multifunctional mobile phones with PDA functions, have become widespread, and in response, companies distribute smartphones to employees and use them for various tasks such as schedule management, business communication, inventory confirmation, price confirmation, etc. Examples are increasing (see Non-Patent Document 1).

  As described above, when a large number of employees carry smartphones and perform a part of business processing through this, there is a risk of information leakage due to misplacement or theft. In addition, there is a possibility that an employee may install an application (game or the like) unrelated to the business and play it during working hours or use it for private communication. Further, when a business application is updated, it is not easy to notify all employees of the fact and complete the version upgrade of the application by a predetermined time limit.

In view of such circumstances, management tools called MDM (Mobile Device Management) are currently provided by various vendors (see Non-Patent Document 2). By introducing this MDM, corporate information management departments can centrally manage smartphones of all employees, stop the function of a specific smartphone (remote lock) when it is lost or stolen, and erase confidential information (Remote wipe), audit the usage status of each employee, or check the version of the application.
Full-scale adoption of smartphones in 2011, key to popularization in the business scene MDM and security Internet URL: http://www.sbbit.jp/article/cont1/20630 Search date: September 12, 2011 Afaria Internet URL: http://www.ianywhere.jp/afaria/index.html Search date: September 12, 2011

However, the existing MDM has a problem due to the communication method.
In other words, conventional MDM often uses a “polling method” in which the smartphone side periodically inquires the MDM server and executes necessary processing in accordance with the instructions received from the server. The problem of lack of real time was pointed out.

  Of course, by shortening the inquiry interval, it is possible to produce pseudo real-time performance, but communication with the server will occur frequently, and this time the battery consumption will increase. Problems arise.

  Alternatively, by adopting an SMS (Short Message Service) method as a communication method, a control message is directly transmitted from a server side to a necessary smartphone. In this case, since it is possible to access the terminal side from the server side whenever necessary, it is possible to guarantee the real-time property itself, but since SMS is a service specific to the communication carrier, the management target is a 3G line. It will be limited to connected smartphones, causing a problem that it cannot be applied to Wi-Fi connected terminals.

  The present invention has been devised in view of the current situation as described above, and is a management that allows a server to issue a command to a managed mobile terminal at any time without depending on a 3G line. The purpose is to provide technology.

  In order to achieve the above object, a mobile terminal management system according to claim 1 includes a plurality of mobile terminals that are always connected to the Internet, and a management server that is connected to each mobile terminal via the Internet. A terminal management system, wherein the management server pushes a control message instructing execution of a specific process to a specific mobile terminal by a communication method compliant with the XMPP protocol, and the mobile A report message receiving means for receiving a report message transmitted from a terminal and storing it in a report message storage means in association with a terminal management ID, and each mobile terminal analyzes the control message after receiving the control message, Control message receiving means for specifying the commanded process, and executing the commanded process And process execution means, a report message that describes the result of the process, with respect to the terminal management server, is characterized in that a report message transmitting means for transmitting a communication scheme based on XMPP protocol.

  The mobile terminal management system according to claim 2 is the system according to claim 1, and further, the control message includes a URL of the specific content stored in the content server, and instructs the download of the content In this case, the processing execution means accesses the URL by a communication method compliant with the HTTPS protocol, requests the transmission of the corresponding content, and sends the content transmitted from the content server to a predetermined storage means. The storing process is executed, and the report message transmitting means transmits a report message indicating that the content download is completed to the management server.

In the mobile terminal management system according to the present invention, a control message is pushed from the management server to each mobile terminal based on the XMPP protocol, so that a command is issued in real time when the necessity of management occurs. It becomes possible.
Moreover, since this XMPP is not a technology that depends on the 3G network of the communication carrier, it is possible to immediately send a command to a mobile terminal connected via a Wi-Fi router.

  FIG. 1 is a block diagram showing a functional configuration of a first mobile terminal management system 10 according to the present invention. The first mobile terminal management system 10 includes a mobile terminal 12 and a management server 14. .

The mobile terminal 12 is a smartphone equipped with a mobile OS such as Android (registered trademark) or Windows Phone (registered trademark), and includes a control message receiving unit 16, a report message transmitting unit 18, and a plurality of processing execution units 20. I have.
The control message reception unit 16, the report message transmission unit 18, and the process execution unit 20 are realized by the CPU of the mobile terminal 12 operating according to a dedicated agent program or API function.
The mobile terminal 12 is always connected to the Internet 22 via a Wi-Fi router (not shown), a 3G network (not shown) provided by a communication carrier, or the like.

The management server 14 includes a control message transmission unit 24, a report message reception unit 26, and a report message storage unit 28.
The control message transmission unit 24 and the report message reception unit 26 are realized by the CPU of the server computer operating according to a dedicated management program. The report message storage unit 28 is provided in the external storage device of the computer.
The management server 14 is connected to the Internet 22 via a router (not shown).

The processing procedure of the first mobile terminal management system 10 will be described with reference to the flowchart of FIG.
First, when it becomes necessary to instruct a specific mobile terminal 12 to execute a specific process, the control message transmission unit 24 of the management server 14 transmits a control message α to the mobile terminal 12 (S10). ).

  The control message α is compliant with XMPP (eXtensible Messaging and Presence Protocol) and is described in XML (Extensible Markup Language) format. Here, “XMPP” means an XML-based protocol used by instant messenger for message exchange and login status notification. By adopting this XMPP protocol, the management server 14 can be used for any mobile terminal 12. It is possible to push-distribute the control message α.

The management server 14 identifies each mobile terminal 12 by the following method.
(1) When the mobile OS itself has a function of assigning a unique terminal identification ID to each mobile terminal 12, the management server 14 uses each terminal ID as an XMPP user ID so that the management server 14 Identify 12
(2) If the mobile OS does not have a function for assigning a unique terminal identification ID to each mobile terminal 12, it is managed by setting the unique terminal ID uniquely defined by the administrator as the XMPP user ID. Server 14 identifies individual mobile terminals 12. The terminal ID uniquely defined by the administrator is input when kitting the MDM agent program to each mobile terminal 12.
A hash value may be added after the terminal ID. By attaching a hash value, it becomes difficult to guess the terminal ID, so safety can be improved.

The control message receiving unit 16 of the mobile terminal 12 that has received the control message α analyzes the control message (S11), and activates the process execution unit 20 that matches the content of the message (S12).
For example, when the content of the control message is “inventory collection”, the control message receiving unit 16 calls the inventory acquisition API and activates the process execution unit 20 for inventory collection.

  The inventory collection processing execution unit 20 collects various terminal information (terminal model name, OS version, installed application program name, version, etc.) related to the mobile terminal 12, and then passes it to the report message transmission unit 18. Processing is executed (S13).

The report message transmission unit 18 transmits the terminal information passed from the process execution unit 20 to the management server 14 as a report message β (S14).
This report message β is also described in XML format, and is transmitted by a communication method compliant with the XMPP protocol.

  Upon receiving this report message β, the report message receiving unit 26 associates it with the terminal management ID and stores it in the report message storage unit 28 (S15).

As described above, in the case of the first mobile terminal management system 10, the control message α is pushed and transmitted to the mobile terminal 12 from the management server 14 based on the XMPP protocol. It is possible to issue commands in real time.
Moreover, since this XMPP is not a technology that depends on the 3G network of the communication carrier, it is possible to immediately send a command to the mobile terminal 12 connected via the Wi-Fi router.

  In the above, an example in which a control message is transmitted to one mobile terminal 12 has been shown, but it goes without saying that the management server 14 can simultaneously issue the same message to many mobile terminals 12.

Specific processing executed in the mobile terminal 12 includes, for example, the following in addition to the above inventory collection.
(1) Remote lock: Processing to lock the terminal screen.
(2) Remote password release: Processing to release the password set on the terminal.
(3) Remote wipe: Processing to initialize terminal data.
(4) Remote GPS information acquisition: Processing to acquire terminal location information by GPS and return it to the server (if the GPS function is OFF, it acquires network location information and returns it to the server).
(5) Bookmark setting: Processing to add a predetermined bookmark to the bookmark of the standard browser of the terminal.
(6) Camera use prohibition: Processing to disable the camera function of the terminal.
(7) USB access prohibition: Processing to disable access to data in the terminal via USB connection.
(8) SD card access prohibition: Processing to disable access to the SD card.
(9) Wi-Fi connection destination setting: Processing to set (update) the Wi-Fi connection destination of the terminal.

  FIG. 3 is a block diagram showing a functional configuration of the second mobile terminal management system 30 according to the present invention. The second mobile terminal management system 30 includes a mobile terminal 12, a management server 14, and a content server 32. It consists of.

The second mobile terminal management system 30 is focused when the content acquisition unit 20a is activated as the processing execution unit 20 in the first mobile terminal management system 10, and the mobile terminal 12 In addition to 20a, a control message receiving unit 16 and a report message transmitting unit 18 similar to those described above are provided.
In addition, a plurality of content use applications 34 are installed in the mobile terminal 12.

  As in the first mobile terminal management system 10, the management server 14 includes a control message transmission unit 24, a report message reception unit 26, and a report message storage unit 28.

The content server 32 includes a content distribution unit 36 and a content storage unit 38.
The content distribution unit 36 is realized by the CPU of the server computer operating according to a Web server program or the like. The content storage unit 38 is provided in an external storage device of the computer.

The processing procedure of the second mobile terminal management system 30 will be described according to the flowchart of FIG.
First, when a specific content needs to be distributed to a specific mobile terminal 12, the control message transmission unit 24 of the management server 14 transmits a control message to the mobile terminal 12 (S20).

  In this control message, the URL specifying the content stored in the content storage unit 38 of the content server 32 is described in the XML format, and is transmitted by a communication method compliant with the XMPP protocol as described above.

  The control message receiving unit 16 of the mobile terminal 12 that has received this control message analyzes the control message (S21), and activates the content acquisition unit 20a (S22).

The content acquisition unit 20a accesses the URL passed from the control message reception unit 16 via the Internet 22 and requests distribution of the corresponding content (S23).
Upon receiving this, the content distribution unit 36 of the content server 32 takes out the corresponding content from the content storage unit 38 and transmits it to the content acquisition unit 20a (S24).
The communication between the content acquisition unit 20a and the content distribution unit 36 is performed not by the XMPP protocol but by a communication method compliant with the HTTPS (Hypertext Transfer Protocol over Secure Socket Layer) protocol.

  The content acquisition unit 20a that has received the content 40 from the content server 32 stores it in a predetermined directory set in the memory of the terminal body or the SD card (S25).

The report message transmission unit 18 that has received the notification that content storage has been completed from the content acquisition unit 20a transmits this to the management server 14 as a report message (S26).
This report message is also described in XML format, and is transmitted by a communication method compliant with XMPP.
Upon receiving this report message, the report message receiving unit 26 stores it in the report message storage unit 28 in association with the terminal management ID (S27).

The content 40 is applied to the mobile terminal 12 by the corresponding content use application 34 (S28).
For example, when the content 40 is an image file for wallpaper, the specific content use application 34 that uses the wallpaper starts processing to check the dedicated directory and set the image file with the latest date as the wallpaper. Run.
As a result, after the application 34 is activated, a new wallpaper is reflected on the screen.

  The content 40 corresponds to an audio file, a moving image file, a text file, etc. in addition to a still image file.

  As described above, in the case of the second mobile terminal management system 30, a control message for instructing download of specific content is pushed from the management server 14 to each mobile terminal 12 on the XMPP basis. When the update occurs, a download command is issued immediately and can be reflected in the application 34 of each mobile terminal 12 all at once.

It is a block diagram which shows the function structure of the 1st mobile terminal management system which concerns on this invention. It is a flowchart which shows operation | movement of a 1st mobile terminal management system. It is a block diagram which shows the function structure of the 2nd mobile terminal management system which concerns on this invention. It is a flowchart which shows operation | movement of a 2nd mobile terminal management system.

10 First mobile terminal management system
12 Mobile devices
14 Management server
16 Control message receiver
18 Report message transmitter
20 Process execution part
20a Content acquisition unit
22 Internet
24 Control message transmitter
26 Report message receiver
28 Report message storage
30 Second mobile terminal management system
32 Content server
34 Content-use applications
36 Content Distribution Department
38 Content storage
40 content

Claims (2)

Multiple mobile devices that are always connected to the Internet,
A mobile terminal management system comprising a management server connected to each mobile terminal via the Internet,
The management server includes a control message sending means for sending a control message instructing execution of a specific process to a specific mobile terminal by a communication method compliant with the XMPP protocol,
A report message receiving means for receiving a report message transmitted from the mobile terminal and storing it in a report message storage means in association with the terminal management ID;
Each mobile terminal described above analyzes the control message after receiving the control message, and specifies a control message receiving means for specifying the instructed process;
Process execution means for executing the commanded process;
Report message transmission means for transmitting a report message describing the processing result to the terminal management server by a communication method compliant with the XMPP protocol;
A mobile terminal management system characterized by comprising: When the control message includes a URL of the specific content stored in the content server and instructs the download of the content, the processing execution means accesses the URL by a communication method compliant with the HTTPS protocol. Processing to request transmission of the corresponding content,
A process of storing the content transmitted from the content server in a predetermined storage means is executed,
The mobile terminal management system according to claim 1, wherein the report message transmission unit transmits a report message indicating that the download of the content is completed to the management server.

Images