JP2015216561A - Protector for information processor, and protection program for information processor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To protect an information processor at a high security level while saving power consumption in a security key device.SOLUTION: An information processing system 1 comprising an information processor 2 and protector 3 determines whether or not the protector 3 is close to the information processor 2. The information processor 2, when it is determined that the protector 3 is close to the information processor 2, determines whether or not the information processor 2 is in use or in an available state; and, when it is determined that the information processor 2 is in use or in an available state, transmits a stop instruction for instructing to stop transmission of a radio wave from the protector 3, to the protector 3. The protector 3, when having received the stop instruction from the information processor 2, stops transmission of a radio wave from the protector 3; determines whether or not the protector 3 is in the course of migration; and, when it is determined that the protector 3 is in the course of migration, starts transmission of a radio wave from the protector 3.

Description

  The present invention relates to a protection device for an information processing device and a protection program for the information processing device.

Various techniques for protecting an information processing apparatus such as a personal computer (PC) have been developed.
As one of such technologies, there is a method in which a user of an information processing apparatus carries a portable security key device equipped with a short-range wireless technology such as Bluetooth (registered trademark) or wireless local area network (WLAN). Exists.

For example, a security key device is registered in advance in the information processing apparatus, and when the distance between the security key device and the information processing apparatus exceeds a predetermined value, it is determined that the user has removed his / her seat and the information processing apparatus is locked. Thus, unauthorized use of the information processing apparatus is prevented.
Thereafter, when the distance between the security key device and the information processing apparatus becomes equal to or smaller than a predetermined value, it is determined that the user is seated and the information processing apparatus is unlocked.

In the above technique, in order for the information processing apparatus to recognize the distance between the security key device and the information processing apparatus, for example, the information processing apparatus detects the reception sensitivity of radio waves emitted by the security key device.
Protection using a security key device can effectively prevent unauthorized use of a user who does not have a security key device, and is highly secure. However, since the security key device always transmits radio waves, the built-in battery of the security key device is quickly consumed. When the battery of the security key device is completely exhausted, no radio waves are emitted from the security key device, and the user cannot use the information processing apparatus.

Note that the reception sensitivity also decreases due to factors other than distance, such as radio wave interference and shielding. For this reason, when communication between the security key device and the information processing apparatus is disconnected due to a decrease in reception sensitivity due to factors other than distance, a user who can use the information processing apparatus properly uses the information processing apparatus at his / her seat. However, the information processing apparatus is locked.
The decrease in reception sensitivity is often temporary, but if the information processing device is locked each time the reception sensitivity is decreased, the availability of the information processing device is significantly reduced.

  Therefore, there is a need for a technology that can protect the information processing apparatus at a high security level while suppressing the power consumption of the security key device and maintaining the availability of the information processing apparatus.

JP 2004-252552 A JP 2013-42249 A

  In view of the above problems, an object of one aspect of the present invention is to protect an information processing apparatus at a high security level while reducing power consumption of a security key device.

  Therefore, the protection device that protects the information processing device includes a movement determination unit that determines whether or not the protection device is moving, and when the movement determination unit determines that the protection device is moving. When the protection device determines that the protection device is moving by the radio wave control unit that starts transmitting radio waves from the protection device and the movement determination unit, the information processing device confirms whether or not the information processing device is being used. A reception unit that receives a stop notification from the information processing device when the information processing device is in use or in a usable state, and the radio wave control unit sends the stop notification from the information processing device. When receiving, the transmission of the radio wave is stopped.

  Further, the protection program of the information processing device determines whether or not the protection device is moving. When it is determined that the protection device is moving, the protection program of the information processing device starts transmission of radio waves. When the information processing device is confirmed to be used or not, and when the information processing device is in use or in a usable state, a stop notification is received from the information processing device, and the stop notification is received from the information processing device. A computer is caused to execute processing for stopping the transmission of the radio wave.

  According to the disclosed technology, it is possible to protect the information processing apparatus at a high security level while reducing the power consumption of the security key device.

It is a figure which shows the structure of the information processing system as an example of 1st Embodiment. It is a figure which shows the structure of the information processing apparatus as an example of 1st Embodiment. It is a figure which illustrates the receiving sensitivity threshold value table as an example of 1st Embodiment. It is a figure which illustrates the unlock login screen of the information processing apparatus as an example of the first embodiment. It is a figure which shows the structure of the portable communication terminal as an example of 1st Embodiment. It is a flowchart which shows the terminal protection process by the information processing apparatus as an example of 1st Embodiment. It is a flowchart which shows the electromagnetic wave transmission control process by the portable communication terminal as an example of 1st Embodiment. It is a figure which shows the structure of the information processing system as an example of 2nd Embodiment. It is a figure which shows the structure of the portable communication terminal as an example of 2nd Embodiment. It is a flowchart which shows the electromagnetic wave transmission control process which cooperates the entrance / exit management reader as an example of 2nd Embodiment.

DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments of a protection device for an information processing device and a protection program for the information processing device will be described with reference to the drawings. However, the embodiment described below is merely an example, and there is no intention to exclude application of various modifications and techniques not explicitly described in the embodiment. That is, the present embodiment can be implemented with various modifications without departing from the spirit of the present embodiment. Each drawing is not intended to have only the components shown in the drawing, but may include other functions.
(A) 1st Embodiment First, the structure of the information processing system 1 as an example of 1st Embodiment is demonstrated using FIGS.

FIG. 1 is a diagram illustrating a configuration of an information processing system 1 as an example of the first embodiment.
In the information processing system 1, the information processing apparatus 2 is protected at a high security level by allowing use of the information processing apparatus 2 only to a user carrying a wireless security key device that transmits radio waves. The
Specifically, in the information processing system 1, when the reception sensitivity S of the radio wave from the security key device detected by the information processing apparatus 2 is lower than the sensitivity threshold T _S (S <T _S ), the information processing apparatus 2 by the user. Is interrupted, and the screen of the information processing apparatus 2 is locked.

Further, in the information processing system 1, transmission of radio waves from the security key device is started only when a legitimate user carrying the security key device comes close to the information processing apparatus 2. When it is determined that the user has started using the information processing apparatus 2, the transmission of radio waves from the security key device is stopped.
Note that the security key device and the user name and password of the user carrying the security key device are registered in advance in the information processing apparatus 2 by a system administrator or the like.

The security key device and its communication method can be arbitrarily selected. In the first embodiment, a portable communication terminal (protection device) 3 is used as a security key device. As a communication method for the security key device, for example, Bluetooth, WLAN, and a unique wireless communication method are used.
The information processing apparatus 2 is, for example, a PC, such as a notebook PC, a laptop PC, a desktop PC, or a tablet PC. The detailed configuration and function of the information processing apparatus 2 will be described later with reference to FIG. In the present specification, the information processing apparatus 2 may also be referred to as PC2.

The information processing apparatus 2 performs wireless communication with the mobile communication terminal 3 as a security key device via Bluetooth connection or WLAN via a wireless communication unit 16 and a wireless antenna 17 described later.
The mobile communication terminal 3 is a mobile terminal that can be carried by the user, such as a mobile phone or a smartphone. In an example of the present embodiment, the mobile communication terminal 3 is used as a security key device for the information processing apparatus 2 to detect that the user has approached or separated from the information processing apparatus 2. The detailed configuration and function of the mobile communication terminal 3 will be described later with reference to FIG.

FIG. 2 is a diagram illustrating a configuration of the information processing apparatus 2 as an example of the first embodiment.
The information processing apparatus 2 includes a processing unit 11, a storage unit 12, a display unit 13, an operation unit 14, a power supply unit 15, a wireless communication unit 16, a wireless antenna 17, and a reception sensitivity monitoring unit 18.
The processing unit 11 executes an operating system (OS) (not shown) that is system software that realizes basic functions of the information processing apparatus 2. The processing unit 11 executes various processes by executing programs stored in a hard disk drive (HDD) (not shown) of the information processing apparatus 2.

The storage unit 12 stores a program executed by the processing unit 11, various data, data obtained by the operation of the processing unit 11, and the like. The storage unit 12 functions as a storage unit that stores a reception sensitivity threshold table 41 described later.
Receiver sensitivity threshold table 41 is a table for each type and communication method of the security key device stores a threshold value T _A of the reception sensitivity.

FIG. 3 is a diagram illustrating a reception sensitivity threshold table 41 as an example of the first embodiment.
FIG. 3 shows an example in which a smartphone type mobile communication terminal 3 is used as a security key device. Further, in this embodiment, as a communication system for a smart phone (mobile communication terminal 3), Bluetooth, the sensitivity threshold _{T S in} per WLAN and its own wireless communication system are stored.

In this example, when the information processing apparatus 2 performs Bluetooth communication with the smartphone-type mobile communication terminal 3, the reception sensitivity S detected by the reception sensitivity monitoring unit 18 is T _S = −80 dBm or more (S ≧ T _S ). In this case, the sensitivity monitoring unit 33 described later determines that the user is close to the information processing device 2.
Incidentally, it is also shown sensitivity threshold T _{S in} the case of using the security card as a security key device in FIG. The case of using a security card will be described later with reference to FIGS.

As the storage unit 12, for example, various existing memories such as a random access memory (RAM) and a read only memory (ROM) can be used. A plurality of types of memories may be provided.
The display unit 13 is a display device that can display various information, and is, for example, a liquid crystal display. In FIG. 1, the display unit 13 is illustrated as a built-in display of the information processing apparatus 2, but the display unit 13 may be externally attached to the information processing apparatus 2. When the operation unit 14 described later is a touch panel, the display unit 13 may also operate as the operation unit 14.

  The operation unit 14 is an input device for the user of the information processing device 2 to perform various inputs and selection operations, and is, for example, a keyboard, a mouse, a touch panel, or a microphone. In FIG. 1, the operation unit 14 is displayed as a built-in keyboard of the information processing apparatus 2, but the operation unit 14 may be externally attached to the information processing apparatus 2 through a universal serial bus (USB) interface or the like. When the operation unit 14 is a touch panel, a part of the operation unit 14 (excluding keys and the like) also functions as the display unit 13.

The power supply unit 15 uses power supplied from an external power source (Alternating Current; AC) or the like of the information processing device 2, and the processing unit 11, the storage unit 12, the display unit 13, and the operation unit in the information processing device 2. 14, a power supply voltage is supplied to each component such as the wireless communication unit 16, the wireless antenna 17, and the reception sensitivity monitoring unit 18.
The wireless communication unit 16 is an interface that communicates with the mobile communication terminal 3 via a wireless antenna 17 described later, for example, via a Bluetooth link or WLAN.

The radio antenna 17 transmits and receives radio signals (radio waves) to and from the mobile communication terminal 3 via, for example, a Bluetooth link or WLAN.
The reception sensitivity monitoring unit 18 measures the reception sensitivity S of the radio signal transmitted from the mobile communication terminal 3.
In the first embodiment, the processing unit 11 executes a program, thereby causing the movement notification receiving unit 31, the operation determining unit 32, the sensitivity monitoring unit 33, the presence confirmation unit (use determining unit) 34, and the radio wave stop notification. It functions as a transmission unit (stop instruction transmission unit) 35.

The movement notification receiving unit 31 transmits a movement notification for notifying that the mobile communication terminal 3 has started transmitting radio waves due to the proximity of the user to the information processing apparatus 2 via the wireless communication unit 16 and the wireless antenna 17. Receive from the communication terminal 3.
The operation determination unit 32 determines whether the user is operating the information processing device 2 based on the state of the operation unit 14 of the information processing device 2. The operation determination unit 32 determines that the user is operating the information processing apparatus 2 when the operation unit 14 is operated (for example, when a key on the keyboard is pressed or a mouse is operated).

The sensitivity monitoring unit 33 confirms the reception sensitivity S of the radio signal from the mobile communication terminal 3 measured by the reception sensitivity monitoring unit 18. Then, the sensitivity monitoring unit 33 determines whether the user is in proximity based on the reception sensitivity S of the wireless signal detected by the reception sensitivity monitoring unit 18 and the reception sensitivity threshold value table 41 (see FIG. 3). .
Specifically, the sensitivity monitoring unit 33 determines that the reception sensitivity S detected by the reception sensitivity monitoring unit 18 is equal to or higher than the sensitivity threshold T _S stored in the reception sensitivity threshold table 41 (S ≧ T _S ). It is determined that the user is close. On the other hand, when the reception sensitivity S is lower than the sensitivity threshold value T _S (S <T _S ), the sensitivity monitoring unit 33 determines that the user is not in proximity.

The presence confirmation unit 34 displays the unlock login screen 7 on the display unit 13 and makes the user perform a login operation using the operation unit 14 to determine whether the user is present or not. Here, “present” means that the user is using the information processing apparatus 2 or is in a usable state, and the user does not necessarily have to be seated.
FIG. 4 is a diagram illustrating an unlock login screen 7 of the information processing apparatus 2 as an example of the first embodiment.

The unlock login screen 7 includes, for example, a box 71 for a user to input a user name and a box 72 for a user to input a password.
When the user inputs a user name and password, and the user name and password input by the user match a value stored in, for example, an HDD (not shown) of the information processing apparatus 2, the presence confirmation unit 34 Determines that the user is present.

Even when the user inputs the user name and password, if the user name and password are different from the values stored in advance, the presence confirmation unit 34 determines that the user is not present.
When the presence confirmation unit 34 determines that the user is present, the presence confirmation unit 34 deletes the unlock login screen 7 and permits the user to use the information processing apparatus 2.

The radio wave stop notification transmitter 35 transmits a radio wave stop notification to the mobile communication terminal 3. As will be described later, when receiving the notification, the radio wave control unit 52 of the mobile communication terminal 3 stops the transmission of radio waves from the wireless antenna 27.
Detailed operations of the movement notification reception unit 31, the operation determination unit 32, the sensitivity monitoring unit 33, the presence confirmation unit 34, and the radio wave stop notification transmission unit 35 will be described later with reference to FIG.

FIG. 5 is a diagram illustrating a configuration of the mobile communication terminal 3 as an example of the first embodiment.
The mobile communication terminal 3 includes a processing unit 21, a storage unit 22, a display unit 23, an operation unit 24, a power supply unit 25, a wireless communication unit 26, a wireless antenna 27, and an acceleration sensor 28.
The processing unit 21 executes an OS (not shown) that is system software that realizes the basic functions of the mobile communication terminal 3. The processing unit 21 executes various processes by executing a program stored in the storage unit 22 or the like of the mobile communication terminal 3.

The storage unit 22 stores programs executed by the processing unit 21 and various data, data obtained by the operation of the processing unit 21, and the like. The storage unit 22, the movement determining unit 53 which will be described later, also stores acceleration threshold T _A used in the determination of the presence or absence of the movement of the user. Setting acceleration threshold T _A are the known, a detailed description thereof will be omitted in the art.
As the storage unit 22, for example, various existing memories such as a RAM and a ROM can be used. A plurality of types of memories may be provided.

The display unit 23 is a display device that can display various information, and is, for example, a touch display.
The operation unit 24 is an input device for the user of the mobile communication terminal 3 to perform various inputs and selection operations, and is, for example, a button, a touch display, or a microphone.
The power supply unit 25 supplies power supply voltage to each component such as the processing unit 21, the storage unit 22, the display unit 23, the operation unit 24, the wireless communication unit 26, the wireless antenna 27, and the acceleration sensor 28 in the mobile communication terminal 3. For example, a rechargeable battery.

The wireless communication unit 26 is an interface that communicates with the information processing apparatus 2 via, for example, a Bluetooth link or a WLAN via a wireless antenna 27 described later.
The radio antenna 27 is an antenna that transmits and receives radio signals to and from the mobile communication terminal 3 by, for example, a Bluetooth link or a WLAN.
The acceleration sensor 28 is an acceleration sensor that detects the acceleration A of the mobile communication terminal 3. Specifically, the acceleration sensor 28 is used when the user carrying the mobile communication terminal 3 and using the information processing apparatus 2 takes the first step to walk away from the seat and the foot touches the ground. The movement of the user is detected by detecting the acceleration of the impact. As the acceleration sensor 28, for example, a three-axis acceleration sensor used for a pedometer or the like can be used. Since the triaxial acceleration sensor is known in the art, a detailed description thereof will be omitted.

In the first embodiment, the processing unit 21 executes a program, thereby receiving a radio wave stop notification receiving unit (reception unit) 51, a radio wave control unit 52, a movement determination unit 53, an exclusion unit 54, and a movement notification transmission unit 55. Function as.
The radio wave stop notification receiving unit 51 receives a radio wave stop notification from the information processing apparatus 2 via the radio communication unit 26 and the radio antenna 27.

  The radio wave control unit 52 controls communication with the information processing apparatus 2 via the wireless communication unit 26 and the wireless antenna 27. Specifically, when the movement determination unit 53 and the exclusion unit 54 described later determine that the user carrying the mobile communication terminal 3 is moving, the radio wave control unit 52 starts to transmit radio waves. On the other hand, when the radio wave stop notification receiving unit 51 receives the radio wave stop notification from the information processing apparatus 2, the radio wave control unit 52 stops the transmission of the radio wave.

The movement determination unit 53 determines whether a user carrying the mobile communication terminal 3 and using the information processing apparatus 2 is moving based on the acceleration A of the mobile communication terminal 3 detected by the acceleration sensor 28. To do. For example, the move judgment unit 53 compares the acceleration A and the acceleration threshold T _A of the mobile communication terminal 3, when the acceleration A of the mobile communication terminal 3 exceeds a first acceleration threshold T _A (A> T _A) It is determined that the user who has used the information processing apparatus 2 is moving.

  The excluding unit 54 determines whether or not an excluding operation is performed in the mobile communication terminal 3, and determines that the user is not moving when the excluding operation is performed. Here, the exclusion operation refers to an operation of the mobile communication terminal 3 by the user, vibration due to a vibration function of the mobile communication terminal 3, or the like. Specifically, the exclusion unit 54 determines that an exclusion operation has been performed on the mobile communication terminal 3 by determining whether an operation of the operation unit 24, a call, or an incoming mail has been performed. The exclusion unit 54 also performs an exclusion operation (sending or receiving mail or sending or receiving a call at the mobile communication terminal 3) even when radio waves are received or transmitted from a wireless WAN communication unit (not shown). It is determined that When the exclusion operation is performed, the exclusion unit 54 determines that the user is not moving and prevents the radio wave control unit 52 from starting the transmission of radio waves.

The movement notification transmission unit 55 transmits a movement notification notifying that the user has started moving to the information processing apparatus 2 via the wireless communication unit 26 and the wireless antenna 27.
Detailed operations of the radio wave stop notification receiving unit 51, the radio wave control unit 52, the movement determination unit 53, the exclusion unit 54, and the movement notification transmission unit 55 will be described later with reference to FIG.
Next, the operation of the information processing system 1 as an example of the first embodiment will be described with reference to FIGS.

FIG. 6 is a flowchart (steps S1 to S8) illustrating terminal protection processing by the information processing apparatus 2 as an example of the first embodiment.
This process is repeatedly executed after the information processing apparatus 2 is activated until the information processing apparatus 2 is powered off.
In step S <b> 1, the movement notification receiving unit 31 determines whether a movement notification is received from the movement notification transmitting unit 55 of the mobile communication terminal 3 via the wireless antenna 17 and the wireless communication unit 16. As will be described later (see step S16 in FIG. 7), this movement notification is transmitted from the portable communication terminal 3 to the information processing apparatus 2 when the portable communication terminal 3 detects that the user has started moving.

When the movement notification is not received (see NO route in step S1), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S1, and the movement notification receiving unit 31 monitors the reception of the movement notification again. .
On the other hand, when a movement notification is received (see YES route in step S1), in step S2, the operation determination unit 32 determines whether or not the information processing apparatus 2 is operated by the user. Specifically, the operation determination unit 32 determines that the operation of the information processing device 2 is being performed when the operation of the operation unit 14 (keyboard or mouse) of the information processing device 23 is detected.

If it is determined that the information processing apparatus 2 is being operated (see YES route in step S2), the process returns to step S1 after waiting for a predetermined time (for example, several tens of ms), and the movement notification receiving unit 31 Monitor movement notifications again.
On the other hand, when it is determined that the information processing apparatus 2 is not operated (see the NO route in step S2), the sensitivity monitoring unit 33 starts monitoring the reception sensitivity S in step S3.

In Step S4, the sensitivity monitor 33 comprises a reception sensitivity S detected by the reception sensitivity monitoring section 18, based on the threshold T _{S in} which is stored in the receiver sensitivity threshold table 41, whether the user is in proximity Determine. Specifically, the sensitivity monitoring unit 33 determines that the reception sensitivity S detected by the reception sensitivity monitoring unit 18 is equal to or higher than the sensitivity threshold T _S stored in the reception sensitivity threshold table 41 (S ≧ T _S ). It is determined that the user is close. On the other hand, when the reception sensitivity S is lower than the sensitivity threshold value T _S (S <T _S ), the sensitivity monitoring unit 33 determines that the user is not in proximity.

If it is determined that the user is not in proximity (see NO route in step S4), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S4, and the sensitivity monitoring unit 33 determines the proximity of the user again. Is done.
On the other hand, if it is determined that the user is approaching (see YES route in step S4), the presence confirmation unit 34 displays the unlock login screen 7 (see FIG. 4) in step S5.

In step S6, the presence confirmation unit 34 determines whether the user has completed the login operation on the unlock login screen 7 displayed in step S5. That is, in this step, the presence confirmation unit 34 determines whether the user is present.
If the user has not completed the login operation (NO route of step S6), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S4, and the proximity of the user is determined again by the sensitivity monitoring unit 33. .

On the other hand, when the user completes the login operation (YES route in step S6), it is determined that the user is present, and in step S7, the sensitivity monitoring unit 33 stops monitoring the reception sensitivity S.
In step S <b> 8, the radio wave stop notification transmission unit 35 transmits a radio wave stop notification to the mobile communication terminal 3. In the mobile communication terminal 3, when the radio wave stop notification receiving unit 51 receives this radio wave stop notification, the radio wave control unit 52 stops transmitting radio waves from the wireless antenna 27.

Thereafter, after a predetermined time (for example, several tens of ms) has elapsed, the process returns to step S1, and the processes of steps S1 to S8 described above are repeated.
FIG. 7 is a flowchart (steps S11 to S16) illustrating radio wave transmission control processing by the mobile communication terminal 3 as an example of the first embodiment.
In step S <b> 11, it is determined whether the radio wave stop notification receiving unit 51 of the mobile communication terminal 3 has received a radio wave stop notification from the information processing apparatus 2.

If it is determined that the radio wave stop notification has not been received (see the NO route in step S11), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S11, and the reception of the radio wave stop notification is monitored again. .
On the other hand, when it is determined that the radio wave stop notification has been received (see YES route in step S11), in step S12, the radio wave control unit 52 of the mobile communication terminal 3 controls the radio communication unit 26 to Stop sending radio waves.

In step S13, it determines the movement judgment unit 53, by comparing the acceleration A of the mobile communication terminal 3 and the acceleration threshold T _A, the user of the mobile communication terminal 3 whether starts moving. Specifically, it is determined that the acceleration A exceeds the acceleration threshold value T _A (A> T _A) when the movement judgment unit 53, the user is moving.
If it is determined that the user is not moving (see NO route in step S13), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S13 to monitor the user's movement again.

On the other hand, when it is determined that the user has started moving (see YES route in step S13), in step S14, the exclusion unit 54 determines whether an exclusion operation has been performed.
When the exclusion operation is performed (see YES route in step S14), it is determined that the user has not moved, and after waiting for a predetermined time (for example, several tens of ms), the process returns to step S13, and the user's movement is again performed. Monitor.

On the other hand, when the exclusion operation has not been performed (see NO route in step S14), it is determined that the user is moving, and in step S15, the radio wave control unit 52 starts transmitting radio waves.
Next, in step S <b> 16, the movement notification transmission unit 55 transmits a movement notification to the information processing apparatus 2.

Thereafter, after a predetermined time (for example, several tens of milliseconds) has elapsed, the process returns to step S11, and the processes of steps S11 to S16 described above are repeated.
According to an example of the above embodiment, the movement determination unit 53 of the mobile communication terminal 3 determines whether or not the user holding the mobile communication terminal 3 has approached the information processing apparatus 2. When the movement determination unit 53 detects the proximity of the user to the information processing device 2, the radio wave control unit 52 starts to transmit radio waves from the mobile communication terminal 3. At this time, the movement notification transmission unit 55 transmits a movement notification to the information processing apparatus 2 to cause the information processing apparatus 2 to confirm the presence of the user. When the information processing apparatus 2 confirms the presence of the user, the information processing apparatus 2 transmits a radio wave stop notification to the mobile communication terminal 3. When the radio wave stop notification is received, the radio wave stop notification receiving unit 51 of the mobile communication terminal 3 stops the radio wave transmission.

  Thus, since the radio wave of the security key device is stopped while the user is present, the power consumption of the security key device can be reduced. As a result, it is possible to avoid the situation where the power of the security key device is consumed and radio waves cannot be transmitted, and the information processing apparatus 2 cannot be unlocked and cannot be used. Thereby, the fall of the availability of the information processing apparatus 2 can be prevented.

In addition, when the information processing apparatus 2 confirms the presence of the user, the information processing apparatus 2 stops monitoring the radio wave reception sensitivity.
In this way, since the information processing apparatus 2 can stop monitoring the reception sensitivity S, the screen of the information processing apparatus 2 is locked even if the reception sensitivity S temporarily decreases due to radio wave interference or shielding, or communication is disconnected. Is avoided. Thereby, the fall of the availability of the information processing apparatus 2 can be prevented.

Further, the movement determination unit 53 detects the movement of the user based on the acceleration sensor 28.
Further, the exclusion unit 54 prevents erroneous detection of the user's movement by the user's operation or vibration function.
Thereby, since the situation where the user's movement is erroneously detected and the information processing apparatus 2 is locked can be avoided, the availability of the information processing apparatus 2 can be maintained.
(B) Second Embodiment FIG. 8 is a diagram illustrating a configuration of an information processing system 1 ′ as an example of a second embodiment.

  In the second embodiment, the entrance / exit management reader 4 provided at the entrance of the room where the information processing apparatus 2 is installed is used for detecting the proximity of the user. If the user brings the security key device (mobile communication terminal 3 ′ or security card 5) closer to or in contact with the entrance / exit management reader 4 in order for the user to enter the room where the information processing apparatus 2 is installed, the security key device Starts sending radio waves.

On the other hand, when the user leaves the room, if the security key device is brought close to or brought into contact with the entry / exit management reader 4, the security key device stops transmitting radio waves.
The information processing system 1 ′ includes an information processing device 2, a mobile communication terminal 3 ′, an entrance / exit management reader 4, and a security card 5.
The entry / exit management reader 4 uses a protocol such as FeliCa (registered trademark), ISO / IEC 14443 (MIFARE), ISO / IEC 18092, etc., and a built-in communication unit (not shown) and a mobile communication terminal 3 ′ and a security card. 5 and near field communication (NFC). Thereby, the entry / exit management reader 4 permits only the user who owns the mobile communication terminal 3 or the security card 5 to enter the room. The entry / exit management reader 4 also manages the exit from the room by the user. The entrance / exit management reader 4 is installed, for example, at the entrance of a room where the information processing apparatus 2 is installed.

  The security card 5 is an IC card that performs short-distance wireless communication with the entrance / exit management reader 4 and includes a power supply unit 25 and an NFC unit 29 (see FIG. 9). It communicates with a non-illustrated NFC unit in a non-contact manner. The security card 5 can communicate with the entry / exit management reader 4 only by being brought close to the entry / exit management reader 4. The security card 5 is, for example, an employee ID card of a company or group in which the user who uses the information processing apparatus 2 works.

Since the other configuration of the information processing system 1 ′ as an example of the second embodiment is the same as that of the information processing system 1 as an example of the first embodiment, detailed description thereof is omitted.
FIG. 9 is a diagram illustrating a configuration of a mobile communication terminal 3 ′ as an example of the second embodiment.
The mobile communication terminal 3 ′ includes an NFC unit 29 and an NFC antenna 30 in addition to the components of the mobile communication terminal 3 as an example of the first embodiment described above, and includes a processing unit 21 ′ instead of the processing unit 21. . Since the functions and configurations of the components of the mobile communication terminal 3 ′ are the same as those of the mobile communication terminal 3, description thereof is omitted.

  The NFC unit 29 is an NFC reader / writer that performs short-range wireless communication with another NFC reader / writer in a contact or non-contact manner via an NFC antenna 30 described later. NFC is a very short-distance communication with a communication distance of about several tens of centimeters in accordance with protocols such as FeliCa (registered trademark), ISO / IEC 14443 (MIFARE), ISO / IEC 18092, and the like. Since NFC is well known in the art, a detailed description is omitted.

The NFC antenna 30 is an antenna that transmits and receives radio waves used in NFC communication.
The portable communication terminal 3 ′ also has functions as an entry / exit determination unit 56 and a PC confirmation unit 57 when the processing unit 21 ′ executes the program.
The entrance / exit determination unit 56 determines whether the user has entered the room in which the information processing apparatus 2 is installed or has left the room.

Specifically, the entry / exit determination unit 56 determines that the user has entered the room when the security key device is brought close to or in contact with the entry / exit management reader 4 while the user has not entered the room.
On the other hand, the entry / exit determination unit 56 determines that the user has left the room when the security key device is brought close to or in contact with the entry / exit management reader 4 while the user is entering the room. To do.

  The PC confirmation unit 57 determines whether or not wireless connection via the wireless communication unit 26 and the wireless antenna 27 is possible with the information processing apparatus 2. For example, the PC confirmation unit 57 performs connection confirmation of the wireless communication method adopted by the security key device and the information processing device 2 via the wireless communication unit 26 and the wireless antenna 27, thereby Whether or not wireless connection is possible is determined.

The portable communication terminal 3 ′ is the same as the portable communication terminal 3 as an example of the first embodiment of FIG. 5 except that the processing unit 21 ′ has functions as the entry / exit determination unit 56 and the PC confirmation unit 57. The description is omitted.
Further, since the security card 5 has the same configuration and function as the mobile communication terminal 3 ′, description and illustration are omitted.

FIG. 10 is a flowchart (steps S <b> 21 to S <b> 36) illustrating a radio wave transmission control process for linking the entrance / exit management reader 4 as an example of the second embodiment.
In this process, transmission of radio waves from the mobile communication terminal 3 or the security card 5 as a security key device is controlled based on entry / exit detection by the entry / exit management reader 4. In the following description, the mobile communication terminal 3 and the security card 5 are collectively referred to as a security key device.

In step S <b> 21, the security key device entry / exit determination unit 56 determines whether the user has entered the room in which the information processing apparatus 2 is installed. Specifically, when the security key device is brought close to or in contact with the entry / exit management reader 4, the entry / exit determination unit 56 of the security key device determines that the user has entered the room.
If it is determined that the user has not entered the room (see the NO route in step S21), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S21, and the user's entry is monitored again.

On the other hand, when it is determined that the user has entered the room (see YES route in step S21), in step S22, the radio wave control unit 52 of the security key device starts transmitting radio waves from the security key device.
In step S <b> 23, the PC confirmation unit 57 of the security key device determines whether or not a wireless connection via the wireless communication unit 26 and the wireless antenna 27 is possible with the information processing apparatus 2.

If the information processing apparatus 2 is not connectable (see NO route in step S23), in step S24, the movement determination unit 53 of the security key device determines whether the user is moving.
If the user is not moving (see NO route in step S24), in step S25, the radio wave control unit 52 of the security key device stops the transmission of radio waves.

In step S26, the movement determination unit 53 of the security key device determines whether or not the user has started movement.
If it is not determined that the user has started moving (see NO route in step S26), the process returns to step S26, and the user's movement is monitored again.
On the other hand, if it is determined that the user has started moving (see YES route in step S26), in step S27, the security key device exclusion unit 54 determines whether an exclusion operation has been performed by the user.

When the exclusion operation is performed (see YES route in step S27), it is determined that the user has not moved, and after waiting for a predetermined time (for example, several tens of milliseconds), the process returns to step S26, and the user's movement is again performed. Monitor.
On the other hand, if the exclusion operation has not been performed (see NO route in step S27), it is determined that the user is moving, the process returns to step S22, and the radio wave control unit 52 of the security key device transmits the radio wave. Start.

  If it is determined in step S24 that the user is moving (see YES route in step S24), in step S28, the security key device entry / exit determination unit 56 determines whether the user has left the room. Specifically, when the security key device is brought close to or in contact with the entry / exit management reader 4, the entry / exit determination unit 56 of the security key device determines that the user has left the room.

When it is determined that the user has not left the room (NO route of step S28), the process returns to step S24, and the movement of the user is monitored again after a predetermined time (for example, several tens of ms).
On the other hand, when it is determined that the user has left the room (YES route of step S28), the process moves to step S36 described later, and the radio wave control unit 52 of the security key device stops the transmission of the radio wave. Thereafter, the process returns to step S21.

If it is possible to connect to the information processing device 2 in step S23 (see YES route in step S23), whether or not the radio wave stop notification receiving unit 51 of the security key device has received the radio wave stop notification from the information processing device 2 in step S29. Is determined.
In an example of the second embodiment, when the user completes the login operation on the unlock login screen 7, the information processing device 2 transmits a radio wave stop notification to the security key device and stops radio wave transmission of the security key device. This will reduce power consumption.

If it is determined that a radio wave stop notification has not been received (see NO route in step S29), the process returns to step S29 after a predetermined time (for example, several tens of ms).
On the other hand, when it is determined that a radio wave stop notification has been received (see YES route in step S29), in step S30, the radio wave control unit 52 of the security key device controls the wireless communication unit 26 to Stop sending radio waves.

In step S31, the acceleration sensor 28 detects the movement of the security key device, the move judgment unit 53, by comparing the acceleration A security key devices and acceleration threshold T _A, the user of the security key device starts to move Determine whether or not. Specifically, it is determined that when the acceleration A exceeds the acceleration threshold value T _A, the move judgment unit 53, the user is moving.

If it is determined that the user has not moved (see NO route in step S31), after waiting for a predetermined time (for example, several tens of ms), the process returns to step S31, and the movement of the user is monitored again.
On the other hand, when it is determined that the user has started moving (see YES route in step S31), in step S32, the exclusion unit 54 determines whether an exclusion operation has been performed by the user.

If an exclusion operation is performed (see YES route in step S32), it is determined that the user has not moved, and after waiting for a predetermined time (for example, several tens of ms), the process returns to step S31, and the user's movement is again performed. Monitor.
On the other hand, when the exclusion operation has not been performed (see NO route in step S32), it is determined that the user is moving, and in step S33, the radio wave control unit 52 starts transmitting radio waves.

Next, in step S <b> 34, the movement notification transmission unit 55 transmits a movement notification to the information processing apparatus 2.
In step S35, the security key device entry / exit determination unit 56 determines whether the user has left the room.
If it is determined that the user has not left the room (NO route of step S35), the process returns to step S23.

On the other hand, when it is determined that the user has left the room (YES route of step S35), in step S36, the radio wave control unit 52 of the security key device stops the transmission of radio waves.
As described above, in one example of the second embodiment, by cooperating with the entrance / exit management reader 4, when the user enters / exits the room in which the information processing apparatus 2 is installed, transmission / stop of the radio wave of the security key device is performed. Can be controlled.

Thereby, in addition to the effect of the example of the first embodiment described above, the example of the second embodiment reliably prevents unnecessary radio waves from being transmitted from the security key device in the place where the information processing apparatus 2 is not provided. The power consumption of the security key device can be further reduced.
(C) Others Regardless of the embodiment described above, various modifications can be made without departing from the spirit of the first and second embodiments.

For example, in the example of the first embodiment, the example in which the mobile communication terminal 3 is used as the security key device has been taken up. However, in the example of the first embodiment, the security card as shown in FIG. Note that in the example of the first and second embodiments, the processing unit 11 of the information processing apparatus 2 executes a program, whereby the movement notification receiving unit 31 and the operation determination unit 32 described above are executed. , Function as a sensitivity monitoring unit 33, presence confirmation unit 34, and radio wave stop notification transmission unit 35.

  The program for realizing the functions as the movement notification receiving unit 31, the operation determining unit 32, the sensitivity monitoring unit 33, the presence confirmation unit 34, and the radio wave stop notification transmitting unit 35 described above is, for example, a flexible disk, a CD ( CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD + R, DVD-RW, DVD + RW, HD DVD, etc.), Blu-ray disc, magnetic disc, optical disc, optical It is provided in a form recorded on a computer-readable recording medium such as a magnetic disk. The computer reads the program from the recording medium using a medium reader (not shown), transfers the program to an internal storage device or an external storage device, and uses it. The program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to the computer via a communication path.

  When realizing the functions as the movement notification receiving unit 31, the operation determination unit 32, the sensitivity monitoring unit 33, the presence confirmation unit 34, and the radio wave stop notification transmission unit 35 described above, an internal storage device (in this embodiment, information A program stored in an HDD (not shown) of the processing device 2 is executed by a microprocessor of the computer (the processing unit 11 of the information processing device 2 in this embodiment). At this time, the computer may read and execute the program recorded on the recording medium.

  In the example of the first and second embodiments, the mobile communication terminals 3 and 3 ′ as security key devices and the processing unit 21 of the security card 5 execute the program, thereby receiving the radio wave stop notification described above. It functions as a unit 51, a radio wave control unit 52, a movement determination unit 53, an exclusion unit 54, a movement notification transmission unit 55, an entry / exit determination unit 56, and a PC confirmation unit 57.

  The above-described functions of the radio wave stop notification receiving unit 51, the radio wave control unit 52, the movement determination unit 53, the exclusion unit 54, the movement notification transmission unit 55, the entry / exit determination unit 56, and the PC confirmation unit 57 are realized. The protection program is, for example, a flexible disk, CD (CD-ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD + R, DVD-RW, DVD + RW, HD DVD, etc.) , Provided in a form recorded on a computer-readable recording medium such as a Blu-ray disc, a magnetic disc, an optical disc, or a magneto-optical disc. The computer reads the program from the recording medium using a medium reader (not shown), transfers the program to an internal storage device or an external storage device, and uses it. Further, the protection program may be recorded on a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk and provided to the computer from the storage device via a communication path.

When realizing the functions as the radio wave stop notification receiving unit 51, the radio wave control unit 52, the movement determination unit 53, the exclusion unit 54, the movement notification transmission unit 55, the entry / exit determination unit 56, and the PC confirmation unit 57 described above, A protection program stored in the internal storage device (in this embodiment, the portable communication terminals 3 and 3 'and the storage unit 22 of the security card 5) is stored in a microprocessor of the computer (in this embodiment, the portable communication terminals 3 and 3' and the security card). 5 processing units 21, 21 '). At this time, the computer may read and execute the program recorded on the recording medium.
(D) Additional remarks The following additional remarks are disclosed regarding the above embodiment.

(Appendix 1)
An information processing system,
An information processing device;
A protective device;
A proximity determination unit that determines whether the protection device is close to the information processing device;
With
The information processing apparatus includes:
When the proximity determination unit determines that the protection device is close to the information processing device, a use determination unit that determines whether the information processing device is in use or in a usable state;
When the use determination unit determines that the information processing apparatus is in use or in an available state, a stop instruction for instructing to stop transmission of radio waves from the protection apparatus is transmitted to the protection apparatus. An instruction transmission unit,
The protective device is
When receiving the stop instruction from the information processing device, a radio wave control unit for stopping the transmission of the radio wave from the protection device;
A movement determination unit for determining whether the protection device is moving; and
With
The information processing system, wherein the radio wave control unit starts transmitting the radio wave from the protection device when the movement determination unit determines that the protection device is moving.

(Appendix 2)
A protection device for protecting an information processing device,
A movement determination unit for determining whether the protection device is moving; and
When the movement determination unit determines that the protection device is moving, a radio wave control unit that starts transmission of radio waves from the protection device;
When the movement determination unit determines that the protection device is moving, the information processing device is checked to determine whether the information processing device is used, and the information processing device is in use or in a usable state. A receiving unit for receiving a stop notification from the information processing apparatus;
With
The protection apparatus for an information processing apparatus, wherein the radio wave control unit stops the transmission of the radio wave when receiving the stop notification from the information processing apparatus.

(Appendix 3)
The supplementary note 2, further comprising a movement notification transmission unit for notifying the information processing device that the transmission of the radio wave from the protection device is stopped when the radio wave control unit stops the transmission of the radio wave. Protection device for information processing device.
(Appendix 4)
The protection apparatus for an information processing apparatus according to appendix 2 or 3, wherein the movement determination unit determines whether the protection apparatus is moving based on an acceleration of the protection apparatus.

(Appendix 5)
When movement of the protection device is detected by the movement determination unit, it is determined whether the protection device is in operation, and when it is determined that the protection device is in operation, the radio wave control unit The protection apparatus for an information processing apparatus according to any one of appendices 2 to 4, further comprising an exclusion unit that blocks the start of transmission of the radio wave.

(Appendix 6)
When the proximity of the protection device to a place where the information processing device is installed is detected, the radio wave control unit starts transmission of the radio wave, and when the separation of the protection device from the location is detected, the radio wave control The information processing apparatus protection device according to any one of appendices 2 to 5, further comprising an entry / exit determination unit for stopping transmission of the radio wave in the unit.

(Appendix 7)
A protection program for an information processing device,
Determine if the protective device is moving,
When it is determined that the protection device is moving, the transmission of radio waves is started and at the same time, the information processing device is checked for the presence or absence of use of the information processing device,
When the information processing apparatus is in use or in a usable state, a stop notification is received from the information processing apparatus,
When the stop notification is received from the information processing apparatus, a computer program for causing the computer to execute a process of stopping the transmission of the radio wave.

(Appendix 8)
The protection of the information processing apparatus according to appendix 7, wherein when the transmission of the radio wave is stopped, the computer is caused to execute a process of notifying the information processing apparatus that the transmission of the radio wave from the protection apparatus is stopped. program.

(Appendix 9)
9. The protection program for an information processing device according to appendix 7 or 8, wherein the computer executes a process of determining whether the protection device is moving based on an acceleration of the protection device.
(Appendix 10)
When the movement of the protection device is detected, it is determined whether or not the protection device is in operation, and when it is determined that the protection device is in operation, a process of preventing the start of transmission of the radio wave The protection program for an information processing apparatus according to any one of appendices 7 to 9, which is executed by the computer.

(Appendix 11)
When the proximity of the protection device to the place where the information processing device is installed is detected, the transmission of the radio wave is started, and when the separation of the protection device from the location is detected, the radio wave from the protection device is detected. The protection program for an information processing apparatus according to any one of appendices 7 to 10, wherein the computer is caused to execute a process for stopping transmission.

(Appendix 12)
An information processing device protected by a protection device,
A proximity determination unit that determines whether the protection device is close to the information processing device;
When the proximity determination unit determines that the protection device is close to the information processing device, a use determination unit that determines whether the information processing device is in use or in a usable state;
When the use determination unit determines that the information processing apparatus is in use or in an available state, a stop instruction for instructing to stop transmission of radio waves from the protection apparatus is transmitted to the protection apparatus. An instruction transmission unit;
An information processing apparatus characterized by comprising:

(Appendix 13)
A movement notification receiver for receiving a movement notification for notifying that the protection device has moved from the protection device;
When the proximity determination unit receives the movement notification from the movement notification reception unit, the reception determination unit monitors the reception sensitivity of the radio wave from the protection device,
The information processing apparatus according to appendix 12, wherein it is determined whether or not the protection device is in proximity based on the reception sensitivity monitored by the sensitivity monitoring unit.

(Appendix 14)
A method for protecting an information processing apparatus,
Determine whether the protection device is close to the information processing device,
When it is determined that the protection device is close to the information processing device, the protection device determines whether the information processing device is in use or in a usable state,
When it is determined that the information processing device is in use or in a usable state, a stop instruction is sent from the information processing device to the protection device to instruct to stop transmission of radio waves from the protection device,
Upon receiving the stop instruction from the information processing device, stop the transmission of the radio wave from the protection device,
Determining whether the protective device is moving by the protective device;
A method for protecting an information processing apparatus, comprising: starting transmission of the radio wave from the protection device when it is determined that the protection device is moving.

DESCRIPTION OF SYMBOLS 1 Information processing system 2 Information processing apparatus 3 Portable communication terminal (protection apparatus)
4 Entrance / exit management reader 5 Security card (protection device)
7 lock release login screen 11 processing unit 12 storage unit 13 display unit 14 operation unit 15 power supply unit 16 wireless communication unit 17 wireless antenna 18 reception sensitivity monitoring unit 21 processing unit 22 storage unit 23 display unit 24 operation unit 25 power supply unit 26 wireless communication Unit 27 wireless antenna 28 acceleration sensor 29 NFC unit 30 NFC antenna 31 movement notification receiving unit 32 operation determination unit 33 sensitivity monitoring unit 34 presence confirmation unit (use determination unit)
35 Radio stop notification transmitter (stop instruction transmitter)
41 Reception sensitivity threshold table 51 Radio wave stop notification receiver (receiver)
52 Radio wave control unit 53 Movement determination unit 54 Exclusion unit 55 Movement notification transmission unit 56 Entrance / exit determination unit 57 PC confirmation unit

Claims (6)

A protection device for protecting an information processing device,
A movement determination unit for determining whether the protection device is moving; and
When the movement determination unit determines that the protection device is moving, a radio wave control unit that starts transmission of radio waves from the protection device;
When the movement determination unit determines that the protection device is moving, the information processing device is checked to determine whether the information processing device is used, and the information processing device is in use or in a usable state. A receiving unit for receiving a stop notification from the information processing apparatus;
With
The protection apparatus for an information processing apparatus, wherein the radio wave control unit stops the transmission of the radio wave when receiving the stop notification from the information processing apparatus. 2. A movement notification transmission unit for notifying the information processing apparatus that the transmission of the radio wave from the protection device is stopped when the radio wave control unit stops the transmission of the radio wave. Protection device for information processing equipment. The protection apparatus for an information processing apparatus according to claim 1, wherein the movement determination unit determines whether the protection apparatus is moving based on an acceleration of the protection apparatus. When movement of the protection device is detected by the movement determination unit, it is determined whether the protection device is in operation, and when it is determined that the protection device is in operation, the radio wave control unit The protection device for an information processing apparatus according to any one of claims 1 to 3, further comprising an exclusion unit that blocks the start of transmission of the radio wave. When the proximity of the protection device to a place where the information processing device is installed is detected, the radio wave control unit starts transmission of the radio wave, and when the separation of the protection device from the location is detected, the radio wave control The information processing apparatus protection device according to claim 1, further comprising an entry / exit determination unit that stops the transmission of the radio wave. A protection program for an information processing device,
Determine if the protective device is moving,
When it is determined that the protection device is moving, the transmission of radio waves is started and at the same time, the information processing device is checked for the presence or absence of use of the information processing device,
When the information processing apparatus is in use or in a usable state, a stop notification is received from the information processing apparatus,
When the stop notification is received from the information processing apparatus, a computer program for causing the computer to execute a process of stopping the transmission of the radio wave.

Images