JP2014235718A - Information terminal and information processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information terminal capable of preventing secret information from being taken out to outside of an area where the secret information is managed (information management area) so as to eliminate the risk of leakage of the secret information to a third party if an image is taken, by a camera installed in the information terminal, in the information area and the information terminal is taken out to the outside of the information management area.SOLUTION: An information terminal 11 according to an embodiment of the present invention transmits data to a file server 71 in place of storing an image in a flash memory 22 of the information terminal if a photograph is taken in an information management area SA. On the other hand, if a photograph is taken outside of the information management area SA, the information terminal 11 stores an image in the flash memory 22 of a main body similarly to a well-known information terminal.

Description

  The present invention relates to an information terminal having a data generation function and an information processing program applied to the terminal.

  2. Description of the Related Art Input devices such as cameras and microphones, and information terminals (hereinafter also referred to as “terminals”) such as mobile phones and smartphones having a data communication function are in widespread use. Data such as still images, moving images, and audio generated using an input device is generally stored in a data storage medium (storage unit) included in the terminal.

  By the way, for example, an employee takes a picture including confidential information using a terminal in a place where confidential information is handled (hereinafter also referred to as “information management area”) such as an office, a research facility, and a factory. If the terminal where the photos are stored is taken out of the information management area, confidential information may be leaked to a third party. For this reason, it is often prohibited to bring employee terminals into the information management area.

  However, if a terminal is brought into the information management area, confidential information can be leaked. Therefore, one of the conventional terminals (hereinafter also referred to as “conventional terminal”) transmits a device unique ID to the gate of the secure area using an IC tag when brought into the secure area (information management area). As a result, the camera function is temporarily stopped in response to a camera power cutoff request signal transmitted from the gate (see, for example, Patent Document 1). According to this, since the camera function is stopped in the information management area, leakage of “still image data and moving image data” including secret information can be prevented. Furthermore, if such a function stop process is extended to a data generation function that does not use a camera (for example, an audio data generation function that uses a microphone), leakage of secret information can be prevented more reliably.

Japanese Patent Laid-Open No. 2005-20758

  However, according to the above conventional terminal, for example, image data and audio data generated in the information management area may be useful for checking product quality, reporting work progress, etc. There was a problem that such data could not be used.

  The present invention has been made to address the above-described problems. That is, one of the objects of the present invention is to make “data including confidential information” generated in a specific area (for example, an information management area) not leaked and usable for a specific person. It is to provide an information terminal that can be used.

  In order to achieve the above object, an information terminal of the present invention (hereinafter also referred to as “present invention terminal”) includes a data generation unit that generates data and transmits the generated data to another device by data communication. A data communication unit that can perform the storage, and a storage unit (for example, a flash memory and a micro SD card) that can store the generated data.

Furthermore, the information terminal includes a data management unit.
This data management department
(1) When the data generation unit generates the data when the information terminal is not within a predetermined specific area, the generated data is stored in the storage unit;
(2) On the other hand, when the information terminal is within the specific area, when the data generation unit generates the data, the generated data is stored in the storage unit without storing the generated data in the storage unit. Send to.
Such a function is also referred to as a “data management function”.

  According to the terminal of the present invention, when data such as a still image and a moving image is generated in a specific area, the generated data is transmitted to a specific device (for example, a file server) by data communication. The specific device is generally within a specific area, but may be outside the specific area as long as only a specific person can access it. As a result, the data generated in the specific area can be used while maintaining confidentiality among those who can access the specific device.

  In addition, since the data generated in the specific area does not remain in the information terminal, even if the terminal is taken out of the specific area, secret leakage does not occur. On the other hand, data generated outside the specific area is stored in the information terminal. That is, outside the specific area, the data generation function of the information terminal can be used without restriction.

  By the way, when the data management unit transmits data to a specific device, data transmission may fail due to a temporary failure of the data communication network and congestion of processing of the specific device. When data transmission fails, generally, the transmitted data is stored in a storage unit. However, if the terminal is taken out of the specific area in this state, there is a risk that secret information will be leaked.

Therefore, the data management unit
When the data generation unit generates the data when the information terminal is in the specific area, the data is stored in the storage unit if the generated data cannot be transmitted to the specific device through the data communication. It is preferable that the discarding process is performed as part of the data management function.

  According to this aspect, even if data transmission to a specific device fails, no data remains on the terminal, so even if the terminal is taken out of the specific area, leakage of confidential information is avoided. can do.

  By the way, information terminals that are widely used in recent years generate various data such as still images, moving images, and voices by executing application programs that are distributed in the market and installed in the terminals. In general, such an application is programmed to store data generated by the application in a storage unit included in the terminal body.

  Therefore, when data is generated by a general application, the data is automatically saved in the storage unit, and thus the above-described data management function cannot be realized. For this reason, it is necessary to incorporate the data management function in an application installed in the terminal. However, since the terminal user can install an arbitrary application, it is practically difficult to incorporate the data management function in all applications that can generate data and can be installed in the terminal.

Therefore, the present invention terminal
The data generator is
An application storage unit for storing an application program for generating the data;
An application execution unit capable of executing the application program stored in the application storage unit;
Including
The data management unit
A file control unit providing a “file operation interface used when the application program stored in the application storage unit stores the data in the storage unit”, and the file control unit has the data management function It is preferred that it is configured to be realized.

  The file control unit is also referred to as a “file system”, and can be included in the OS (Operating System) of the terminal. The file operation interface is also referred to as “library” or “API (Application Programming Interface)”.

  An application for generating general data is constructed so as to use a file operation interface (file operation API) when storing the generated data. Therefore, according to the above aspect, when the application uses the file operation interface provided by the file control unit to store the generated data, the file control unit executes the data management function. Therefore, even if the data management function is not incorporated in the application, the data generated in the specific area is transmitted to the specific device without being stored in the storage unit, and the data generated outside the specific area is stored in the storage unit. Stored in. Therefore, for example, the user can freely install an application distributed in the market on his / her terminal. In other words, even if the user brings “the terminal whose application is freely installed” into the specific area, leakage of confidential information and utilization of data generated in the specific area can be realized.

  The data communication performed by the data communication unit of the terminal of the present invention is not limited to a specific method. For example, wireless data communication, wired data communication, infrared data communication, or the like may be used.

  By the way, there is a terminal having both a wireless data communication function and a wired data communication function. When a terminal performs wireless data communication, shielding by an obstacle between the terminal and a base station (for example, a wireless LAN base unit) and other terminals that perform wireless data communication with a signal transmitted by the terminal transmit There may be a case where the speed of the wireless data communication decreases or the wireless data communication is temporarily interrupted due to interference with a signal or the like. On the other hand, when a terminal performs wired data communication (for example, communication by Ethernet (registered trademark)), in general, since it is not affected by interference from other terminals, the speed of wired data communication is faster than wireless data communication and stable.

Therefore, the data communication unit
A wireless data communication unit for performing wireless data communication;
A wired data communication unit for performing wired data communication;
Including
When transmitting the generated data to the specific device,
If it can be transmitted by the wired data communication, transmit by the wired data communication,
If it cannot be transmitted by the wired data communication, it is transmitted by the wireless data communication.
It is preferable to be configured as described above.

  According to this aspect, when wired data communication is available, wired data communication is preferentially used over wireless data communication. Therefore, the terminal of the present invention can perform data transmission to the specific device at higher speed and more reliably.

  The present invention also relates to a program executed by the information terminal, and further extends to a method used by the information terminal.

It is a schematic block diagram of the information terminal (1st terminal) which concerns on 1st Embodiment of this invention. It is a schematic block diagram of the network with which a 1st terminal communicates. It is a flowchart showing the process performed when the camera application which concerns on a 1st terminal preserve | saves image data. It is a schematic block diagram of the information terminal (2nd terminal) which concerns on 2nd Embodiment of this invention. It is a flowchart showing the process performed when the virtual file system which concerns on a 2nd terminal preserve | saves generated data. It is a schematic block diagram of the information terminal (3rd terminal) which concerns on 3rd Embodiment of this invention. It is a flowchart showing the process performed when the network driver which concerns on a 3rd terminal transmits generation data.

  Hereinafter, an information terminal according to each embodiment of the present invention will be described with reference to the drawings.

(First embodiment)
The information terminal 11 according to the first embodiment illustrated in FIG. 1 includes hardware 20 and various software 30 to 50.

  The hardware 20 includes a CPU 21, a flash memory 22, and a RAM 23. The CPU 21 executes programs included in the software 30-50. The flash memory 22 holds (stores) software 30 to 50 and predetermined data. The flash memory 22 includes a storage medium built in the information terminal 11 and exchangeable storage media such as a micro SD card and a USB memory.

  The hardware 20 includes a liquid crystal display device 24, a touch panel 25, operation keys 26, a camera 27, and a wireless communication device 28. The liquid crystal display device 24 includes a liquid crystal panel that displays characters, images, and the like. The touch panel 25 is embedded on the liquid crystal display device 24. The operation key 26 is a physical button disposed on the casing of the information terminal 11. The camera 27 is provided on the back surface of the information terminal 11. The wireless communication apparatus 28 performs data communication with a wireless LAN access point (hereinafter also simply referred to as “AP”).

  Next, various software included in the information terminal 11 will be described. The OS 30 that manages the entire information terminal 11 includes a kernel 31, a camera driver 32, a file system 33, and a network driver 34.

  The kernel 31 manages the execution status of other programs such as the hardware 20 and the library 40. The camera driver 32 is a driver for driving the camera 27. The file system 33 is a driver for accessing the flash memory 22 (reading and / or writing data). The network driver (NW driver) 34 is a driver for using the wireless communication device 28. In this example, the OS 30 is Android (registered trademark).

  The library 40 is a group of programs that are executed on the OS 30. The library 40 complements the function provided by the OS 30 and provides an interface function to the application 50 so that the application 50 can use the function of the hardware 20. Some programs included in the library 40 are also referred to as runtimes.

  More specifically, the library 40 includes a camera API 41, a file operation API 42, and a CIFS client 43.

  The camera API 41 provides an API for the application 50 to acquire an image captured by the camera 27 via the camera driver 32. The file operation API 42 provides an API for accessing the flash memory 22 via the file system 33. The CIFS client 43 provides an API for using a CIFS (Common Internet File System), which is a well-known file sharing service. The CIFS client 43 enables the application 50 to access an external CIFS server via the network driver 34 and the wireless communication device 28.

  The application 50 is an application group installed in the information terminal 11. In the present embodiment, a camera application 51 is installed. The camera application 51 is a camera application that takes an image using the function of the camera 27 (acquires image data). Although the operation of the camera application 51 will be described in detail later, the camera application 51 is an application obtained by improving a known camera application. The application 50 can include well-known applications such as a Web browser and e-mail browsing software in addition to the camera application 51.

  Next, an environment in which the information terminal 11 is used will be described with reference to FIG. This environment is divided into an information management area (specific area) SA and an outside of the information management area SA. A network 60 is installed in the information management area SA. A general network environment is established outside the information management area SA.

  The network 60 includes APs 61 to 66, a local area LAN 67, and a file server 71.

  Each of the APs 61 to 66 provides the information terminal 11 with a base station function based on the wireless LAN standard. SSIDs (Service Set Identifiers), which are unique identifiers, are set in the APs 61 to 66, respectively. In this embodiment, a character string beginning with “SA_” is set in the SSID of the AP installed in the information management area SA. Specifically, “SA_AP01” to “SA_AP06” are set in the SSIDs of the APs 61 to 66, respectively.

  The local LAN 67 implements mutual communication between each of the APs 61 to 66 connected to the network 60 and the file server 71. That is, the information terminal 11 can perform data communication with the file server 71 by establishing a wireless connection with any one of the APs 61 to 66. The local area LAN 67 allows each device connected to the network 60 to communicate with the Internet 80. The local LAN 67 includes a known router, a LAN switch, a firewall, and the like.

  The file server 71 is a CIFS server. That is, the file server 71 provides a file storage service by CIFS to clients connected to the local area LAN 67. Specifically, the file server 71 executes new file creation, update, and deletion processing on the file server 71 in accordance with a request from a CIFS client including the information terminal 11.

  “A large number of devices including the AP 81” are connected to the Internet 80 outside the information management area SA. In the AP 81, “abcdef” is set as the SSID.

  Next, the operation of the information terminal 11 when taking an image using the camera application 51 installed in the information terminal 11 will be described.

  When the camera application 51 is activated, the camera application 51 (actually, the CPU 21 that operates in accordance with the camera application 51) requests the image data from the camera 27 by requesting image data from the camera API 41. Obtained via the driver 32. The camera application 51 displays the acquired image on the liquid crystal display device 24 continuously, that is, in real time together with the shooting button. The camera application 51 starts the routine processing shown in the flowchart of FIG. 3 when it is detected by an event on the touch panel 25 that the user has tapped the shooting button. That is, the CPU 21 (hereinafter also simply referred to as “CPU”) starts processing from step 300 and proceeds to step 305.

  In step 305, the CPU acquires the SSID of the AP to which the wireless communication device 28 is connected. Now, it is assumed that the information terminal 11 exists in the information management area SA and is connected to the AP 61. In this case, the SSID is “SA_AP01”.

  Next, the CPU proceeds to step 310 to determine whether or not the information terminal 11 is in the information management area SA. Specifically, the CPU determines whether or not the SSID character string acquired in step 305 starts with the determination character string “SA_”. If the SSID starts with this determination character string, the CPU determines that the information terminal 11 is in the information management area SA.

  According to the above assumption, the SSID starts with “SA_”. Therefore, the CPU makes a “Yes” determination at step 310 to proceed to step 315.

  In step 315, the CPU stores the image (acquired image data) taken by the camera 27 in the “shared directory published by the file server 71 through CIFS”. That is, the CPU requests the CIFS client 43 to save image data. In other words, the CPU transmits a CIFS request to the file server 71 via the local LAN 67 using the functions of the network driver 34 and the wireless communication device 28. As a result, a new file including image data is created in the file server 71. That is, the image data is stored in the file server 71. Thereafter, the CPU proceeds directly to step 395 without saving the image data in the flash memory 22 and once ends this routine.

  As described above, if the acquired character string of the SSID starts with the determination character string “SA_”, the CPU determines that the information terminal 11 is in the information management area SA and acquires the information using the camera 27. The image data is stored (transmitted) in the file server 71 without being stored in the flash memory 22. In addition, as described above, an AP in the information management area SA is given an SSID whose character string starts with the determination character string “SA_”. Therefore, as long as the information terminal 11 is in the information management area SA, the image data is stored in the file server 71 without being stored in the flash memory 22.

  Next, it is assumed that the information terminal 11 exists outside the information management area SA and is connected to the AP 81. In this case, the SSID acquired in step 305 is “abcdef”. Accordingly, since the SSID does not start with “SA_”, the CPU makes a “No” determination at step 310 to proceed to step 320. In step 320, the CPU stores the image data in the flash memory 22. Thereafter, the CPU proceeds to step 395 to end the routine once.

  When the wireless communication device 28 of the information terminal 11 is not connected to any AP (that is, when the CPU cannot acquire the SSID), the information terminal 11 is likely to be outside the information management area SA. Therefore, in such a case, the CPU makes a “No” determination at step 310 to proceed to step 320.

  Thus, if the information terminal 11 is not in the information management area SA, the information terminal 11 stores the image data acquired using the camera 27 in the flash memory 22. Therefore, the user saves an image photographed using the camera application 51 in the information terminal 11 (actually, the flash memory 22) in the same manner as when using a known camera application outside the information management area SA. can do.

  Note that when the CPU transmits a CIFS request in step 315, image data storage may fail due to problems with the APs 61 to 66, the local area LAN 67, the file server 71, and the like. In this case, the CPU displays a message indicating that image data storage has failed on the liquid crystal display device 24 and discards the image data without storing it in the flash memory 22. Thereafter, the CPU proceeds to step 395 to end the present routine tentatively.

As described above, the information terminal 11
A data generation unit (camera application 51) for generating data;
A data communication unit (network driver 34 and wireless communication device 28) capable of transmitting the generated data to other devices by data communication; and
A storage unit (flash memory 22) capable of storing the generated data;
An information terminal comprising:
When the data generation unit generates the data when the information terminal is not in a predetermined specific area (information management area SA), the generated data is stored in the storage unit (step 320 in FIG. 3), When the information terminal is in the specific area, when the data generation unit generates the data, the generated data is stored in the storage unit without storing the generated data in the data communication unit. A data management unit (camera application 51) that realizes a data management function that is transmitted to the specific device (file server 71) (step 315 in FIG. 3) is provided.

Furthermore, the data management unit
When the data generation unit generates the data when the information terminal is in the specific area, the data is stored in the storage unit if the generated data cannot be transmitted to the specific device through the data communication. This is configured so as to be realized as a part of the data management function (step 315 in FIG. 3).

  According to the information terminal 11, when a picture is taken in a specific area (information management area), the image data is stored in the file server without being stored in the main body. The leakage of confidential information due to the information terminal 11 storing) being taken out of the information management area can be avoided.

(Second Embodiment)
Next, the information terminal 12 according to the second embodiment of the present invention will be described. In the first embodiment, when the camera application 51 determines that the information terminal 11 is in the information management area, the captured image is stored in a specific device (file server). On the other hand, the information terminal 12 according to the second embodiment is the information terminal 11 only in that when the file system determines that the information terminal 12 is in the information management area, the generation data of the application is transmitted to the specific device. Is different. Hereinafter, this difference will be mainly described.

  The information terminal 12 whose schematic configuration is shown in FIG. 4 includes a virtual file system 35 in the OS 30. The information terminal 12 includes an HTTP (Hypertext Transfer Protocol) client 44 in the library 40. The information terminal 12 includes a camera application 52 in the application 50.

  The operation of the virtual file system 35 will be described in detail later. The HTTP client 44 provides an API for accessing an HTTP server (transmitting an HTTP request and acquiring an HTTP response). The HTTP client 44 enables the application 50 to access an external HTTP server via the network driver 34 and the wireless communication device 28. Unlike the camera application 51, the camera application 52 is a known camera application that always tries to save image data in the flash memory 22.

  The file server 72 stores data included in the HTTP request received from the information terminal 12 as a file. When the file server 72 completes storing the file, it returns an HTTP response to that effect to the information terminal 12.

  In the information terminal 12, the virtual file system 35 provides the data management function. A specific operation of the virtual file system 35 will be described using an example of processing of the information terminal 12 when an image is captured using the camera application 52.

  The camera application 52 tries to save the image data captured by the camera 27 in the flash memory 22 when the user taps the capture button. Specifically, the camera application 52 requests the file operation API 42 to “write image data to the flash memory 22”. The file operation API 42 requests the virtual file system 35 to create a new file including image data in accordance with the request from the camera application 52.

  At this time, the virtual file system 35 (actually, the CPU 21 operating in accordance with the virtual file system 35) starts the processing of the routine shown in the flowchart of FIG. That is, the CPU 21 (hereinafter also simply referred to as “CPU”) starts processing from step 500 and proceeds to step 505.

  In step 505, the CPU acquires the SSID of the AP to which the wireless communication apparatus 28 is connected by the same processing as in step 305 in FIG. Now, it is assumed that the information terminal 12 exists in the information management area SA and is connected to the AP 61. In this case, the SSID is “SA_AP01”.

  Next, the CPU proceeds to step 510 and determines whether or not the information terminal 12 is in the information management area SA by the same processing as step 310 in FIG. That is, the CPU determines whether or not the SSID character string acquired in step 505 starts with the determination character string “SA_”. If the SSID starts with this determination character string, the CPU determines that the information terminal 12 is in the information management area SA. According to the above assumption, the SSID starts with “SA_”. Therefore, the CPU makes a “Yes” determination at step 510 to proceed to step 515.

  In step 515, the CPU stores the image data captured by the camera 27 in the file server 72. More specifically, the CPU does not write the contents of the image data in the flash memory 22 and sends a “POST format HTTP request including the image data in the body” to the file server 72 to the HTTP client 44. Request to send. In other words, the virtual file system 35 behaves as an application program included in the application 50 with respect to the HTTP client 44.

  The HTTP client 44 transmits an HTTP request to the file server 72 via the network driver 34 and the wireless communication device 28 in accordance with the request of the virtual file system 35. When receiving an HTTP response to the HTTP request from the file server 72, the HTTP client 44 notifies the virtual file system 35 to that effect.

  When receiving a notification from the HTTP client 44, the virtual file system 35 (actually, a CPU that operates according to the virtual file system 35) notifies the file operation API 42 that the file storage has been completed. The file operation API 42 notifies the camera application 52 that the file storage is completed. As a result, the camera application 52 recognizes that the storage of the image data in the flash memory 22 has been completed. Thereafter, the CPU proceeds to step 595 to end the present routine tentatively.

  In this way, if the acquired SSID character string starts with the determination character string “SA_”, the CPU determines that the information terminal 12 is in the information management area SA, and the camera application 52 transfers to the flash memory 22. The image data requested to be stored is transmitted to the file server 72 without being stored in the flash memory 22.

  Next, it is assumed that the information terminal 12 exists outside the information management area SA and is connected to the AP 81. In this case, the SSID acquired in step 505 is “abcdef”. Therefore, since the SSID does not start with “SA_”, the CPU makes a “No” determination at step 510 to proceed to step 520. In step 520, the CPU stores the image data in the flash memory 22. Thereafter, the CPU proceeds to step 595 to end the routine once.

  When the wireless communication device 28 of the information terminal 12 is not connected to any AP (that is, when the CPU cannot acquire the SSID), the information terminal 12 is likely to be outside the information management area SA. Accordingly, in such a case, the CPU makes a “No” determination at step 510 to proceed to step 520.

  As described above, if the information terminal 12 is not in the information management area SA, the virtual file system 35 stores the data requested by the camera application 52 to be stored in the flash memory 22 in the same manner as a known file system. Accordingly, outside of the information management area SA, the user can capture an image captured using the camera application 52 installed in the information terminal 12 in the same manner as when using a known terminal. It can be stored in the memory 22).

  Note that when the CPU transmits an HTTP request in step 515, image data storage may fail due to problems with the APs 61 to 66, the local area LAN 67, the file server 72, and the like. In this case, the CPU returns a response to the file operation API 42 indicating that the data storage has failed. As a result, the camera application 52 recognizes that the image data storage to the flash memory 22 has failed. Thereafter, the CPU proceeds to step 595 to end the routine once.

  The function (data management function) of the virtual file system 35 described here is a file-related event (for example, storage of a file in the flash memory 22) in a FUSE (Filesystem in Userspace) (not shown) included in the virtual file system 35. ) Is notified to the newly developed program, and the program executes the above-described processing. In other words, the virtual file system 35 is configured by replacing known file system processing with processing executed by this program.

  As described above, when the information terminal 12 is in the information management area SA, the virtual file system 35 does not save the image data requested by the camera application 52 to be saved in the flash memory 22 without saving it in the flash memory 22. Send to server 72. On the other hand, if the information terminal 12 is not in the information management area SA, the virtual file system 35 stores the image data requested by the camera application 52 to be stored in the flash memory 22 in the flash memory 22. The operation of the virtual file system 35 is not limited to the case where the application is the camera application 52. In other words, whatever application is included in the application 50 (ie, an application installed in the information terminal 12), when the application attempts to save the generated data in the flash memory 22, the above-described processing (ie, data management) is performed. Function) is executed. The generated data is not limited to image (still image) data, and may be moving image data, audio data, text data, or the like.

As described above, the information terminal 12
A data generation unit (application 50) for generating data;
A data communication unit (network driver 34 and wireless communication device 28) capable of transmitting the generated data to other devices by data communication; and
A storage unit (flash memory 22) capable of storing the generated data;
An information terminal comprising:
When the data generation unit generates the data when the information terminal is not in a predetermined specific area (information management area SA), the generated data is stored in the storage unit (step 520 in FIG. 5). When the information terminal is in the specific area, when the data generation unit generates the data, the generated data is stored in the storage unit without storing the generated data in the data communication unit. A data management unit (virtual file system 35 and file operation API 42) that implements a data management function that is transmitted to the specific device (file server 72) (step 515 in FIG. 5) is provided.

Furthermore, the data management unit
When the data generation unit generates the data when the information terminal is in the specific area, the data is stored in the storage unit if the generated data cannot be transmitted to the specific device through the data communication. It is configured so as to realize this as part of the data management function (step 515 in FIG. 5) without discarding.

Further, the data generation unit
An application storage unit (flash memory 22) for storing an application program (application 50) for generating the data;
An application execution unit (library 40) capable of executing the application program stored in the application storage unit;
Including
The data management unit
A file control unit (virtual file system 35 and file operation API 42) that provides a file operation interface used when the application program stored in the application storage unit stores the data in the storage unit; The control unit is configured to realize the data management function.

  According to the information terminal 12, it was generated in the information management area even when using an application distributed in the market without using a dedicated application such as the camera application 51 for preventing information leakage. It is possible to realize an environment in which data is stored in a file server without being stored on the terminal.

(Third embodiment)
Next, the information terminal 13 according to the third embodiment of the present invention will be described. In the second embodiment, when the information terminal 12 determines that the information terminal 12 is in the information management area, the information terminal 12 stores the generated data in a specific device by wireless data communication. On the other hand, when the information terminal 13 according to the third embodiment determines that the information terminal 13 is in the information management area, if the wired data communication is possible, the generated data is stored in the specific device by the wired data communication. It is different from the information terminal 12 only in the point to do. Hereinafter, this difference will be mainly described.

  The information terminal 13 schematically shown in FIG. 6 includes a wired communication device 29 in the hardware 20. The wired communication device 29 includes an Ethernet (registered trademark) port, and performs data communication with a known router, LAN switch, and the like. The wired communication device 29 may be realized by a device connected to a USB port (not shown) included in the hardware 20.

  When the network driver 34 performs data communication with an external device (for example, a specific device, more specifically, the file server 72) in response to a request from the library 40 (for example, the HTTP client 44), the wireless communication device 28 is used. Alternatively, the wired communication device 29 is controlled.

  At this time, the network driver 34 (actually, the CPU 21 operating in accordance with the network driver 34) starts the routine processing shown in the flowchart of FIG. That is, the CPU 21 (hereinafter also simply referred to as “CPU”) starts processing from step 700 and proceeds to step 705.

  In step 705, the CPU determines whether data communication by the wired communication device 29 is possible. Specifically, when the port of the wired communication device 29 is linked up and the wired communication device 29 is assigned an IP address, the CPU determines that data communication by the wired communication device 29 is possible. That is, in this case, the CPU makes a “Yes” determination at step 705 to proceed to step 710. In step 710, the CPU controls the wired communication device 29 to perform data communication with an external device. In other words, the CPU performs data communication with an external device by wired data communication.

  On the other hand, if data communication by the wired communication device 29 is not possible, that is, if the port of the wired communication device 29 is not linked up or an IP address is not assigned to the wired communication device 29, the CPU proceeds to step 705. It determines with "No" and progresses to step 715. In step 715, the CPU controls the wireless communication device 28 to perform data communication with an external device. In other words, the CPU performs data communication with an external device by wireless data communication.

As described above, the information terminal 13
A data generation unit (application 50) for generating data;
A data communication unit (network driver 34, wireless communication device 28 and wired communication device 29) capable of transmitting the generated data to other devices by data communication; and
A storage unit (flash memory 22) capable of storing the generated data;
An information terminal comprising:
When the data generation unit generates the data when the information terminal is not in a predetermined specific area (information management area SA), the generated data is stored in the storage unit (step 520 in FIG. 5). When the information terminal is in the specific area, when the data generation unit generates the data, the generated data is stored in the storage unit without storing the generated data in the data communication unit. A data management unit (virtual file system 35 and file operation API 42) that implements a data management function that is transmitted to the specific device (file server 72) (step 515 in FIG. 5) is provided.

Further, the data communication unit
A wireless data communication unit (wireless communication device 28) for performing wireless data communication;
A wired data communication unit (wired communication device 29) for performing wired data communication;
Including
When transmitting the generated data to the specific device,
If it can be transmitted by the wired data communication, it transmits by the wired data communication (step 710 in FIG. 7),
If the data cannot be transmitted by the wired data communication, the data is transmitted by the wireless data communication (step 715 in FIG. 7).
It is configured as follows.

  According to the information terminal 13, when wired data communication is available, wired data communication is preferentially used over wireless data communication. Therefore, the information terminal 13 can perform data transmission to the specific device faster and more reliably.

  As mentioned above, although embodiment of the control apparatus which concerns on this invention was described, this invention is not limited to the said embodiment, A various change is possible unless it deviates from the objective of this invention. For example, the information terminal 11 according to the first embodiment stores a file in the file server 71 using CIFS. However, the information terminal 11 may store the file in the file server 71 using another protocol. For example, the information terminal 11 can use a file sharing function, such as SMB (Server Message Block) and NFS (Network File System). Alternatively, the information terminal 11 may transmit data to the file server 71 by HTTP or HTTPS (Hypertext Transfer Protocol Secure) or FTP (File Transfer Protocol).

  In addition, the information terminal 12 according to the second embodiment transmits data to the file server 71 using HTTP. However, the information terminal 12 may transmit data to the file server 72 using another protocol. For example, the information terminal 12 may transmit data to the file server 71 by HTTPS or FTP. Alternatively, the information terminal 12 may store the file using a file sharing function such as CIFS, SMB, and NFS.

  Further, in each embodiment, the APs 61 to 66 in the network 60 are all in the information management area SA. However, some APs in the network 60 may not be in the information management area SA. For example, the APs 64 to 66 may not be in the information management area SA, and the SSIDs may be set as “AP04” to “AP06”, respectively. In addition, in this case, the information terminals (information terminals 11 to 13 and well-known information terminals) connected to the APs 64 to 66 are not in the information management area SA. Each device in the network 60 may be configured so that the image data stored in 72 can be browsed.

  Furthermore, in the information terminal 11 according to the first embodiment, the camera application 51 realizes the data management function. However, the application for realizing the data management function may be a moving picture recording application, an audio recording application, or the like.

  In addition, the camera application 51 according to the first embodiment and the virtual file system 35 according to the second embodiment store data in the flash memory 22 when the information terminal 11 or the information terminal 12 is outside the information management area SA. Was. However, even in this case, the camera application 51 and the virtual file system 35 may store data in the file server 71 when a predetermined operation is performed by the user.

  Alternatively, the file server 72 according to the second embodiment stores the data received by the HTTP request in the form of a file. However, the file server 72 may store the received data in the database as binary data.

  In addition, the virtual file system 35 according to the second embodiment has not determined whether or not an external storage medium such as a micro SD card and a USB memory is connected to the information terminal 12. However, the virtual file system 35 may execute the routine of FIG. 5 only when the external storage medium is not connected, and may always perform processing of writing a file to this medium when the external storage medium is connected.

  Alternatively, the virtual file system 35 according to the second embodiment is described as “a pseudo micro SD card that the OS 30 secures on the flash memory 22 when the micro SD card is not connected to the information terminal 12 (that is, the information terminal 12 The routine shown in FIG. 5 may be executed when the application 50 tries to save a file for the “micro SD card emulated on the flash memory of the main body”.

  In addition, the camera application 51 according to the first embodiment and the virtual file system 35 according to the second embodiment determine whether or not they are in the information management area SA based on the character string of the SSID of the connected AP. However, the camera application 51 and the virtual file system 35 may determine whether they are in the information management area using other methods. For example, the camera application 51 and the virtual file system 35 may determine whether or not the terminal is in the information management area using a GPS (Global Positioning System) function. Alternatively, the camera application 51 and the virtual file system 35 determine whether or not the terminal is in the information management area by using a short-range wireless communication function such as RFID (Radio Frequency IDentification) and NFC (Near Field Communication). May be.

  In addition, the data management function is realized by the camera application 51 in the first embodiment, and is realized by the virtual file system 35 in the second embodiment. However, the data management function may be realized by other parts included in the terminal. Alternatively, the data management function may be realized by a plurality of parts. For example, whether the application attaches position information to the generated data (for example, information such as latitude and longitude attached to the image data), and the file system refers to the position information and stores the generated data in the storage unit, Or you may determine whether it transmits to a specific apparatus.

  In addition, the camera application 51 according to the first embodiment and the virtual file system 35 according to the second embodiment store generated data in the flash memory 22 when they are not in the information management area. However, in this case, the camera application 51 and the virtual file system 35 may be discarded without saving the generated data.

  Alternatively, in the first embodiment and the second embodiment, the specific device is a file server. However, the specific device may be a device other than the file server. In other words, the specific device may be a device that receives a data storage request via a network and stores data according to the request.

  In addition, the information terminal 13 according to the third embodiment determines whether the network driver 34 transmits the generated data using wireless data communication or wired data communication. However, the camera application 51 according to the first embodiment may determine whether to transmit the generated data using wireless data communication or wired data communication. Alternatively, the virtual file system 35 according to the second embodiment may determine whether to transmit the generated data using wireless data communication or wired data communication.

  In addition, the information terminal 13 according to the third embodiment can perform data communication with the wired communication device 29 when the port of the wired communication device 29 is linked up and an IP address is assigned to the wired communication device 29. It was determined that. However, the information terminal 13 may determine whether data communication by the wired communication device 29 is possible by another method. For example, the information terminal 13 transmits an “echo request” message of ICMP (Internet Control Message Protocol) to the file server 72, and “echo reply” is returned from the file server 72 to the information terminal 13 in response to the message. In this case, the information terminal 13 may determine that data communication by the wired communication device 29 is possible.

  Alternatively, the information terminal 13 according to the third embodiment performs wired data communication using the wired communication device 29 having an Ethernet (registered trademark) interface. However, wired data communication may be performed using a USB port (not shown) included in the information terminal 13. For example, the file server 72 may have a USB host function or a USB device function, and wired data communication may be realized by connecting the information terminal 13 and the file server 72 with a USB cable.

  In addition, when sending the generated data to the file server 72, the information terminal 13 according to the third embodiment may use only wired data communication and not use wireless data communication. For example, at this time, if transmission cannot be performed by wired data communication, the information terminal 13 may discard the generated data. Alternatively, even if wired data communication is possible, the information terminal 13 may transmit the generated data by wireless data communication when a predetermined operation is performed by the user.

  In addition, the information terminals 11 to 13 according to each embodiment perform wireless data communication using a wireless LAN. However, the information terminals 11 to 13 may perform wireless data communication using a data communication service provided by the mobile phone operator.

  DESCRIPTION OF SYMBOLS 11 ... Information terminal, 61-66 ... Wireless LAN access point, 67 ... Local LAN, 71 ... File server, SA ... Information management area.

Claims (5)

A data generator for generating data,
A data communication unit capable of transmitting the generated data to other devices by data communication; and
A storage unit capable of storing the generated data;
An information terminal comprising:
When the data generation unit generates the data when the information terminal is not in a predetermined specific area, the generated data is stored in the storage unit, and when the information terminal is in the specific area, the data terminal Data that realizes a data management function in which, when the data generation unit generates the data, the generated data is transmitted to the predetermined specific device by the data communication using the data communication unit without being stored in the storage unit An information terminal equipped with a management unit. The information terminal according to claim 1,
The data management unit
When the data generation unit generates the data when the information terminal is in the specific area, the data is stored in the storage unit if the generated data cannot be transmitted to the specific device through the data communication. An information terminal configured to realize discarding without being performed as part of the data management function. In the information terminal according to claim 1 or 2,
The data generator is
An application storage unit for storing an application program for generating the data;
An application execution unit capable of executing the application program stored in the application storage unit;
Including
The data management unit
A file control unit that provides a file operation interface used when the application program stored in the application storage unit stores the data in the storage unit, and the file control unit realizes the data management function Information terminal configured as follows. In the information terminal according to any one of claims 1 to 3,
The data communication unit is
A wireless data communication unit for performing wireless data communication;
A wired data communication unit for performing wired data communication;
Including
When transmitting the generated data to the specific device,
If it can be transmitted by the wired data communication, transmit by the wired data communication,
If it cannot be transmitted by the wired data communication, it is transmitted by the wireless data communication.
Configured as
Information terminal. A data generator for generating data,
A data communication unit for performing data communication with other devices, and
A storage unit capable of storing the generated data;
An information terminal comprising
When the data generation unit generates the data when the information terminal is not in a predetermined specific area, the generated data is stored in the storage unit, and when the information terminal is in the specific area, the data terminal An information processing program for causing a function to transmit the generated data to a predetermined specific device through the data communication without storing the generated data in the storage unit when the data generation unit generates the data.

Images