JP2014090286A - Mobile communication terminal and terminal control program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To further improve data secrecy by inhibiting a terminal user from canceling a secret mode unless a predetermined condition is satisfied, while improving operability.SOLUTION: A mobile communication terminal 11 receives a passcode as input from a user of the mobile communication terminal (S1); performs data communication for exchanging one-time keys with a server 13 (S2 and S3); and makes a terminal ID and the passcode be encrypted together by using a one-time key and be transmitted to the server 13 (S4 and S5). The server performs authentication processing on the basis of a terminal ID and passcode obtained by decrypting reception encrypted information received from the mobile communication terminal 11 by using the one-time key (S6 to S10). When the authentication processing results in correspondence, the server determines that a mobile communication terminal of a transmission source is an authorized terminal, and transmits a decryption key encrypted using a one-time key (S11). The mobile communication terminal decrypts secret data encrypted and stored in storage means on the basis of the received decryption key.

Description

  The present invention relates to a mobile communication terminal and a terminal control program, and more particularly to a mobile communication terminal and a terminal control program capable of displaying secret-set information such as a smart device when a predetermined condition is satisfied.

  Mobile communication terminals such as smart devices that are currently widely used have not only a telephone function but also a data communication function regarding the use of e-mail and web browsers. In such a mobile communication terminal, phone book data including a telephone number and name (name) frequently used by the user, mail address information, address, etc. can be registered in a memory, and further, sent / received mail Data and data downloaded by a web browser can be stored in the built-in memory.

  When such a mobile communication terminal is transferred to a third party due to theft, loss, etc., the phone book data and other various information stored in the memory are seen or rewritten by the third party. Inconvenience arises. In particular, mobile communication terminals used for business use may store confidential data related to business in memory, so security protection to prevent confidential leakage due to memory data browsing by a third party (security protection) Is particularly important.

  In order to protect security in this type of mobile communication terminal, there are methods for performing strong authentication processing by inputting a complicated password and performing biometric authentication such as fingerprint authentication. However, in the former case, it takes time to input a password, and there is a problem in terms of user convenience. On the other hand, in the latter case, the convenience of the user is good, but on the other hand, a special recognition device for authentication is required and there is a problem in terms of terminal cost.

  Therefore, as a mobile communication terminal that does not impair the user's convenience and does not require a special recognition device, for example, specific data in a telephone directory that is not particularly viewed by a third party is set as secret data. When the set secret data is read out, the secret number is requested to be entered, and when the entered secret number matches, the secret setting is temporarily canceled and the read secret data is displayed on the display. A mobile communication terminal configured to display is known (see, for example, Patent Document 1).

  In addition, the information stored in the memory is divided into two types: secret information that the third party does not want to be known and non-secret information that may be known to the third party. There is also known a mobile communication terminal that performs screen management of a two-layer structure that displays on a secret screen and displays only non-secret information that does not include secret information on the non-secret screen in non-secret mode (normal mode) (for example, Patent Document 2). The standby screen of the mobile communication terminal is classified into a secret screen and a normal screen. In this conventional mobile communication terminal, when protecting secret information that is not desired to be disclosed to a third party, it is only necessary to switch the standby screen to the normal mode in which the normal standby screen is displayed. Secret management is easy.

JP-A-11-355417 JP 2005-348038 A

  However, in the mobile communication terminals described in Patent Documents 1 and 2 above, the third party who acquired the lost or stolen mobile communication terminal obtains and decodes the personal identification number for some reason, and obtains the personal identification number. When input, the secret is canceled for all registered data in the secret phonebook, and the secret data is read on the display unit by a third party.

  Further, in the mobile communication terminals described in Patent Documents 1 and 2 above, since the secret information is a user of the terminal, the secret mode is not affected by external factors such as the location and working hours because the secret information is known. Since it can be released and displayed and transmitted freely, especially in mobile communication terminals used for business, it is related to work from the mobile communication terminal from which the subordinate was lent by some mistake without obtaining permission from the supervisor. There is a possibility of sending secret secret data. Also, in the conventional mobile communication terminal, the secret data to be input must be encrypted and registered every time the user of the terminal inputs, and there is a problem in terms of operability.

  The present invention has been made in view of the above points. By preventing the terminal user from releasing the secret mode unless the predetermined condition is satisfied, the data confidentiality is further improved and the operability is good. An object is to provide a mobile communication terminal and a terminal control program.

  In order to achieve the above object, the mobile communication terminal of the present invention includes an input means for inputting desired information, a storage means for storing encrypted secret information, a password entered by the input means, In the transmission means for transmitting the assigned unique terminal ID to the server via the communication network and the server that has received the password and the terminal ID, the authentication matching is performed by the authentication process based on the received terminal ID and the password. A receiving means for receiving a decryption key via a communication network and a decryption key received by the receiving means, which are transmitted when a result is obtained and the server administrator satisfies a condition for passing the decryption key, And decoding means for decoding the secret information read from the storage means and obtaining stored data that has been released from the secret.

  In order to achieve the above object, the mobile communication terminal of the present invention has an input means for inputting desired information, a storage means for storing encrypted secret information, and a password entered by the input means. A one-time key acquisition means for acquiring a one-time key from a server through data communication with an external server via a communication network, a unique terminal ID assigned in advance, and an input personal identification number. In the case of an authentication match by the authentication process based on the decrypted terminal ID and the personal identification number in the server that has received the encrypted terminal ID and personal identification number and the transmission means that encrypts with the key and transmits to the server via the communication network Receiving means for receiving the decryption key encrypted with the one-time key transmitted via the communication network and the receiving means A first decryption unit that decrypts the decrypted decryption key with a one-time key, and a decryption key decrypted by the first decryption unit to decrypt the secret information read out from the storage unit, and to release the secret It has a 2nd decoding means to obtain data, and a display means to display the storage data obtained by decoding by the 2nd decoding means.

  In order to achieve the above object, the mobile communication terminal of the present invention is configured such that the encrypted secret information stored in the storage means is encrypted by the encryption key corresponding to the decryption key and is sent to the server by the administrator. The registered data is data downloaded from a server via a communication network.

  In order to achieve the above object, the mobile communication terminal according to the present invention is decrypted by the first decryption means when a certain period of time has passed since the start of display of the stored data by the display means without a secret release operation. It further comprises setting means for discarding the decryption key.

In order to achieve the above object, the terminal control program of the present invention is a terminal control for controlling the operation of a mobile communication terminal connected to a server via a communication network by a computer in the mobile communication terminal. Program for a computer,
In the transmission step of transmitting the personal identification number input by the input means for inputting desired information and the unique terminal ID assigned in advance to the server via the communication network, and in the server that has received the personal identification number and the terminal ID The decryption key is transmitted via the communication network when an authentication match result is obtained by the authentication process based on the received personal identification number and the terminal ID, and the server administrator satisfies the condition for passing the decryption key. Receiving step, and decrypting step for decrypting the secret information read from the storage means storing the encrypted secret information with the decryption key received in the receiving step, and obtaining the stored data after the secret is released. It is made to perform.

In order to achieve the above object, a terminal control program according to the present invention controls the operation of a server connected to a mobile communication terminal via a communication network by controlling a computer in the server to perform mobile communication. A terminal control program for controlling a terminal.
In the mobile communication terminal of the communication partner, a receiving step for receiving a unique terminal ID assigned in advance to the mobile communication terminal and a personal identification number input to the mobile communication terminal via the communication network; A determination step for determining whether or not a predetermined condition for permitting access to the mobile communication terminal to which the received terminal ID is assigned is satisfied, and a password stored in the database when the determination step determines that access is permitted The terminal ID is assigned when an authentication processing step is performed in which the number is read using the terminal ID as a key and the authentication processing is performed by comparing with the personal identification number received in the receiving step, and the authentication matching result is obtained by the authentication processing step. Transmission for transmitting a decryption key for a mobile communication terminal to the mobile communication terminal via the communication network Characterized in that to execute the steps.

  Here, the determination step described above is received at least within a first condition in which there is no notification of information restricting the use of the mobile communication terminal to which the terminal ID received in the reception step is assigned. In the step, it is determined that access is permitted when both of the second conditions for receiving the terminal ID and the password are satisfied, and access is determined not permitted when any of the conditions is not satisfied.

  In addition, the reception step receives a terminal ID, a personal identification number, and position information indicating the current position of the mobile communication terminal from a communication partner mobile communication terminal, and the determination step includes A first condition in which there is no notification of information restricting the use of the mobile communication terminal to which the terminal ID received in the reception step is assigned, and a terminal ID and a password in the reception step in the reception step within a preset time zone When the second condition for receiving and the third condition indicating that the position information received in the receiving step is within the preset area are all satisfied, it is determined that the access is permitted. When the above condition is not satisfied, it is determined that access is not permitted.

  According to the present invention, the secret data stored in the mobile communication terminal cannot be decrypted even if a third party decrypts the personal identification number, and the confidentiality of the data can be greatly improved compared to the conventional case. it can. In addition, according to the present invention, the secret data encrypted from the server is downloaded and stored in the mobile communication terminal, thereby eliminating the need for data input work by the terminal user and greatly improving operability. It can be improved.

1 is a schematic system configuration diagram of an example of a wireless communication system to which the present invention is applied. It is a block diagram of one embodiment of a mobile communication terminal of the present invention. It is the flowchart (the 1) for operation | movement description of the mobile communication terminal and server of this invention. It is a flowchart (the 2) for operation | movement description of the mobile communication terminal and server of this invention.

  Next, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 shows a schematic system configuration diagram of an example of a radio communication system to which a mobile communication terminal of the present invention is applied. In the figure, the wireless communication system 10 includes a mobile terminal 11 ₁ to 11 _n of the n number (n is a natural number of 1 or more), the Internet 12 is a communication network, and a server 13, the mobile terminals 11 ₁ - Bidirectional communication is possible between 11 _n and the server 13. The mobile terminals 11 _{1 to} 11 _n are mobile communication terminals of the present invention such as smart devices, and are provided with not only a telephone function but also a data communication function regarding the use of e-mail and a web browser.

  The server 13 has at least a database (DB) 131 and a central processing unit (CPU) 132, and a terminal ID and a password are stored in advance in the DB 131 in association with each other. The DB 131 stores a key (decryption key) for decrypting all encrypted phone book data. Note that a memory program (not shown) stores a control program for performing operation control of the CPU 132 described later. The wireless communication system 10 to which the present invention is applied has a “decryption key” stored in the server 13, not a password (password) entered by the user for calling the phone book data or canceling the secret mode. Necessary system configuration.

FIG. 2 shows a block diagram of an embodiment of the mobile communication terminal of the present invention. In FIG. 2, the mobile terminal 11 (which corresponds to any one of the mobile terminals 11 _{1 to} 11 _{n in} FIG. 1) and the control unit 111 that collectively controls the operation of the terminal are all encrypted. A memory 112 in which secret data such as telephone directory data is written and read, an input unit 113 for inputting various information, and a microphone 114 that inputs a voice of a terminal user into an audio signal by acoustic-electric conversion. At the time of transmission, a desired voice signal or data is converted into a transmission signal of a predetermined frequency band and wirelessly transmitted to the nearest base station (not shown) via the antenna 116, and at the time of reception via the antenna 116. Radio unit 115 that converts received signals into baseband signals, display unit 117 that displays various types of information, vibrators that notify incoming calls by vibrations, and electro-acoustic conversion of received voice signals of other parties And a notifying unit 118 composed of a speaker or the like that produces a sound or produces a ringtone. The mobile terminal 11 also has a data communication function related to the use of an e-mail for bidirectional mail communication by connecting to a mail server via the Internet (not shown) and the use of a web browser.

  Here, in FIG. 2, the input unit 113 constitutes input means for inputting desired information, and the memory 112 constitutes storage means for storing encrypted secret information. Further, as will be described later, the control unit 111 obtains a one-time key from the server 13 by performing data communication with the external server 13 via the Internet 12 as a communication network when a personal identification number is input. One-time key acquisition means, which constitutes the transmission means of the present invention that encrypts a unique terminal ID and personal identification number assigned in advance with the one-time key and transmits them to the server 13. Further, the control unit 111 encrypts with a one-time key that is transmitted in the case of an authentication match by the authentication process based on the decrypted terminal ID and password in the server 13 that has received the encrypted terminal ID and password. Receiving means for receiving the decrypted key, first decrypting means for decrypting the encrypted decryption key received by the receiving means with a one-time key, and decrypting by the first decrypting means The secret information read from the memory 112 is decrypted with the decrypted key so as to constitute the second decryption means of the present invention for obtaining the secret-stored storage data. The display unit 117 constitutes display means of the present invention that displays stored data obtained by decoding by the second decoding means.

  Note that the storage area of the memory 112 includes a personal normal area and a secret area, and the secret area includes a personal area and a common area. When the mobile terminal 11 is supplied from a company, the secret data of the present embodiment includes a private area (data area such as phone book data registered by an individual) and a common area (registered in advance by the company). Data stored in the data area (phonebook data etc. distributed to all employees by the general affairs etc. in advance for the convenience of the employees) such as the telephone number of the employee who has made it and the telephone number of the customer of the company. Is encrypted with an encryption key corresponding to the decryption key, and is distributed from the server 13 and stored. Note that the memory 112 also stores in advance a terminal control program of the present invention for controlling the control unit 111 constituted by a central processing unit (CPU) to control the data transmission / reception operation of the mobile terminal 11 in an integrated manner. Yes.

  The present invention has a novel feature in the operation described later by the control unit 111. That is, as will be described below, the mobile terminal 11 of the present embodiment transmits a terminal ID, which is unique identification information assigned to itself, and a predetermined personal identification number to the server 13, and the server 13 uses the user ID. After receiving the decryption key transmitted as a response, the secret data such as the phone book data that is encrypted and stored in the memory 112 (hereinafter referred to simply as “phone book data” is representative for convenience of explanation). In other words, the decryption key is decrypted using the decryption key received.

  Next, operations of the mobile communication terminal and the server according to the present invention will be described with reference to the flowcharts of FIGS. In addition, each processing operation of step S1, S2, S4, S5 of FIG. 3 and step S13-S20 of FIG. 4 is the control comprised by the computer (CPU) of the mobile terminal 11 based on the terminal control program of this invention. This is performed under the control of the unit 111.

  First, the control unit 111 of the mobile terminal 11 receives a password (hereinafter also referred to as “passcode”) by the operation of the input unit 113 by the user (step S1 in FIG. 3) via the Internet 12. One-time key exchange data communication is performed with the server 13 (steps S2 and S3 in FIG. 3). Subsequently, the control unit 111 encrypts the unique terminal ID previously assigned to the mobile terminal 11 and the passcode input in step S1 with the one-time key received from the server 13 via the Internet 12. (Step S4 in FIG. 3). Next, the control unit 111 causes the wireless unit 115 to transmit the encrypted terminal ID and passcode to the server 13 (step S5 in FIG. 3).

  Upon receiving the encrypted terminal ID and passcode from the mobile terminal 11 (step S6 in FIG. 3), the server 13 decrypts it with the one-time key (step S7 in FIG. 3). Subsequently, the server 13 determines whether or not the terminal is permitted to access data based on the terminal ID obtained by decryption (step S8 in FIG. 3). The determination in step S8 is: (1) Notification to the server 13 of information restricting the use of the mobile terminal 11 to which the terminal ID is assigned (for example, notification from the terminal user that the terminal has been lost, administrator (2) The time when the server 13 received the encrypted information of the terminal ID and the passcode from the mobile terminal 11 is not a predetermined time zone (business hours, etc.), etc. If any one of the conditions is satisfied, it is determined that access is not permitted. If all the conditions are not satisfied, it is determined that access is permitted. Further, when the mobile terminal 11 is provided with means for acquiring current position information of its own terminal such as a known GPS (Global Positioning System) receiving device in the determination in step S8, it is obtained from that means. A condition for determining access permission may be added when the current position of the mobile terminal 11 indicated by the terminal ID is within a predetermined area (such as a company). As a result, even higher security can be ensured.

  Subsequently, when it is determined that access is permitted, the server 13 refers to the DB 131 using the terminal ID as a key and calls a regular passcode stored in advance corresponding to the terminal ID (step in FIG. 3). S9). Subsequently, the server 13 compares the called regular passcode with the passcode obtained by decoding in step S7, and performs an authentication process to determine whether or not they match (step S10 in FIG. 3). If the mobile terminal 11 of the transmission source is valid, the decryption key assigned to the mobile terminal 11 is encrypted with the one-time key, and the encrypted decryption key is transmitted via the Internet 12. (Step S11 in FIG. 3). On the other hand, when a mismatch result is obtained in the authentication process in step S10, or when it is determined that access is not permitted in step S8, the server 13 sends a passcode mismatch message to the transmission source mobile terminal 11 in one time. The data is encrypted with the key and transmitted (step S12 in FIG. 3).

  When the mobile terminal 11 receives the inquiry result (that is, the encrypted decryption key or the encrypted message) transmitted from the server 13 in step S11 or S12 via the Internet 12 (step S13 in FIG. 4). The inquiry result received by the control unit 111 is decrypted with the same one-time key as that of the server 13 (step S14 in FIG. 4). Subsequently, the control unit 111 determines whether or not the data decrypted in step S14 is a decryption key (step S15 in FIG. 4). When it is determined that the key is not a decryption key in step S15, the control unit 111 returns to the process of step S1, but when it is determined that the key is the decryption key, the control unit 111 decrypts the secret data stored in the memory 112 with the decryption key ( Step S16 in FIG.

  Here, the secret data stored in the memory 112 is encrypted data downloaded from the server 13 and is telephone directory data and various data encrypted with an encryption key corresponding to the decryption key. Accordingly, by decrypting the secret data stored in the memory 112 with the decryption key, the phone book data is decrypted, and various data for which the secret setting has been canceled are displayed. Note that the various types of data for which the secret setting has been canceled is data that originally requires a secret, such as secret business data and privacy-related data. As described above, the secret data stored in the memory 112 includes telephone book data registered by an individual.

  Subsequently, the control unit 111 causes the display unit 117 to display the decrypted phonebook data (or the data whose secret has been canceled) (step S17 in FIG. 4). Thereafter, the control unit 111 determines whether or not the user has reset the secret mode by operating the input unit 113 (step S18 in FIG. 4). When the secret mode is reset (YES in step S18), the process proceeds to step S20, which will be described later. When the secret mode is not reset (NO in step S18), the state is set for a predetermined time. It is determined whether or not it has elapsed (step S19 in FIG. 4). If the predetermined time has not elapsed (NO in step S19), the process returns to step S17 and continues to display the secret-released data such as phonebook data.

  On the other hand, if control unit 111 determines that the predetermined time has elapsed without resetting the secret mode (YES in step S19), or determines that the secret mode reset operation has been performed in step S18 even before the predetermined time has elapsed. Then, the decryption key held in the mobile terminal 11 is discarded, various data such as telephone directory data is set to the secret mode (step S20 in FIG. 4), the process returns to the first step S1 and returns to the first standby screen. Various data such as telephone directory data displayed once the secret mode is canceled is set to the secret mode again in step S20, and cannot be decrypted unless a new decryption key can be obtained from the server 13 again.

  Thus, in the present embodiment, the time during which the user of the mobile terminal 11 can view and transmit the data whose secret has been released is limited to the “certain time” in step S19 described above at the longest. The This “certain time” is set to an arbitrary time by the administrator when the mobile terminal 11 is for business use. This is possible because if the decryption key is stored in the mobile terminal 11, various data such as telephone directory data may be browsed by a third party who has acquired the mobile terminal 11 by some method. This is to eliminate sex.

  As described above, according to the present embodiment, the memory 112 in the mobile terminal 11 stores various data such as encrypted telephone directory data, and the stored data is acquired from the server 13 by data communication. Since it cannot be decrypted without using a decryption key, even if a third party illegally obtains the mobile terminal 11 due to loss or theft and decrypts the passcode, it is impossible to decrypt the encrypted data with the passcode alone. It is not possible, and the confidentiality of data can be greatly improved as compared with the conventional case. In addition, when a right holder who is aware of the loss or theft of the mobile terminal 11 notifies the business owner of the server 13 of the fact, the decryption key is invalidated or the transmission of the decryption key is stopped. By taking measures such as this, it is possible to build even higher security.

  Further, according to the present embodiment, in the case of the business mobile terminal 11, the company administrator sets the terminal ID to be unusable, so that the server 13 determines that access is not permitted in step S8. As a result, since the mobile terminal 11 having the terminal ID cannot receive the decryption key, it is possible to eliminate the possibility that secret business data and telephone directory data decrypted without the permission of the administrator will be transmitted. Strengthen protection.

Furthermore, according to the present embodiment, various data such as phone book data registered in advance in the company and written in the common area of the memory 112 are registered in advance on the server 13 by the administrator of the server 13. Is downloaded from the server 13 to the mobile terminals 11 _{1 to} 11 _n from the server 13 via the Internet 12 as necessary, and distributed over the common area. For this reason, data can be automatically updated without manual input by the user, and an input operation for encrypting each input data as in the prior art is unnecessary, and operability can be improved as compared with the conventional case.

  The present invention is not limited to the above embodiment. For example, the decryption key differs for each mobile terminal, but when the number of decryption keys becomes enormous, the decryption key is assigned to each group of mobile terminals. It may be different. Also, it is not always necessary to encrypt or decrypt the terminal ID and passcode or the decryption key using a one-time key.

  The present invention also includes a terminal control program that causes the CPU 132 of the server 13 to execute the operations of steps S3 and S6 to S12 of FIG. The terminal control program of the mobile terminal 11 and the terminal control program of the server 13 are reproduced from the recording medium or distributed through the network and stored in the memory 112 or the DB 131.

10 the wireless communication system 11, 11 ₁ to 11 _n mobile terminal 12 Internet 13 server 111 controller 112 memory 113 input section 114 microphone 115 radio unit 117 display unit 118 notification unit 131 database (DB)
132 Central processing unit (CPU)

Claims (8)

An input means for inputting desired information;
Storage means for storing encrypted secret information;
Transmitting means for transmitting the personal identification number input by the input means and the unique terminal ID assigned in advance to the server via a communication network;
The server that has received the personal identification number and the terminal ID, a condition that an authentication match result is obtained by the authentication processing based on the received terminal ID and the personal identification number, and the administrator of the server passes the decryption key Receiving means for receiving, via the communication network, the decryption key transmitted when satisfying
A mobile communication terminal comprising: decrypting means for decrypting the secret information read from the storage means with the decryption key received by the receiving means, and obtaining stored data that has been released from the secret. An input means for inputting desired information;
Storage means for storing encrypted secret information;
One-time key acquisition means for acquiring a one-time key from the server by performing data communication with an external server when a personal identification number is input by the input means;
A transmitting means for encrypting the unique terminal ID assigned in advance and the inputted personal identification number with the one-time key and transmitting the encrypted data to the server via the communication network;
In the server that has received the encrypted terminal ID and the code number, an authentication match result is obtained by the authentication process based on the decrypted terminal ID and the code number, and the server administrator uses the decryption key. Receiving means for receiving, via the communication network, the decryption key encrypted with the one-time key, transmitted when satisfying the condition for passing
First decryption means for decrypting the encrypted decryption key received by the reception means with the one-time key;
Second decryption means for decrypting the secret information read from the storage means with the decryption key decrypted by the first decryption means to obtain stored data that has been released from the secret;
And a display means for displaying the stored data obtained by decoding by the second decoding means.   The encrypted secret information stored in the storage means is encrypted with an encryption key corresponding to the decryption key and registered in the server by an administrator from the server via the communication network. 3. The mobile communication terminal according to claim 1, wherein the mobile communication terminal is downloaded data.   A setting unit for discarding the decryption key decrypted by the first decryption unit when a predetermined time has passed without a secret release operation from the display start time of the stored data by the display unit; The mobile communication terminal according to claim 2. A terminal control program for controlling the operation of a mobile communication terminal connected to a server via a communication network by a computer in the mobile communication terminal,
In the computer,
A transmitting step of transmitting a personal identification number input by an input means for inputting desired information and a unique terminal ID assigned in advance to the server via the communication network;
The server that has received the personal identification number and the terminal ID, a condition that an authentication match result is obtained by the authentication processing based on the received personal identification number and the terminal ID, and the administrator of the server passes the decryption key Receiving the decryption key transmitted via the communication network, which is transmitted when satisfying
Decrypting the secret information read from the storage means storing the encrypted secret information with the decryption key received in the receiving step, and executing a decrypting step of obtaining the stored data that has been released from the secret. Characteristic terminal control program. A program for controlling the mobile communication terminal by controlling the operation of a server connected to the mobile communication terminal via a communication network by a computer in the server,
In the computer,
In the mobile communication terminal of the communication partner, a receiving step of receiving, via the communication network, a unique terminal ID pre-assigned to the mobile communication terminal and a personal identification number input to the mobile communication terminal;
A determination step of determining whether or not a predetermined condition for permitting access to the mobile communication terminal assigned with the terminal ID received in the reception step is satisfied;
An authentication processing step of reading out a personal identification number stored in a database using the terminal ID as a key and comparing the personal identification number stored in the database with the personal identification number received in the reception step when the determination step determines that access is permitted When,
When an authentication match result is obtained by the authentication processing step, a transmission step of transmitting a decryption key for the mobile communication terminal to which the terminal ID is assigned to the mobile communication terminal via the communication network is executed. A terminal control program. The determination step includes
At least a first condition in which there is no notification of information restricting the use of the mobile communication terminal to which the terminal ID assigned in the reception step is assigned, and the terminal ID in the reception step within a preset time zone. 7. The access is determined to be permitted when both of the second conditions for receiving the code number are satisfied, and the access is determined to be disapproved when any of the conditions is not satisfied. The program for terminal control described. The receiving step includes
Receiving, via the communication network, the terminal ID, the personal identification number, and position information indicating the current position of the mobile communication terminal from the mobile communication terminal of the communication partner;
The determination step includes
A first condition in which there is no notification of information restricting the use of the mobile communication terminal assigned with the terminal ID received in the receiving step, and the receiving step in the receiving step within a preset time zone; When all of the second condition for receiving the terminal ID and the personal identification number and the third condition indicating that the location information received in the receiving step is within a preset area are satisfied. 7. The terminal control program according to claim 6, wherein access is determined to be permitted, and the access is determined to be not permitted when any of the conditions is not satisfied.

Images