JP2021033474A - Terminal management system - Google Patents

Abstract

To provide technique capable of appropriately restricting a specific function of a terminal device.SOLUTION: A terminal control unit of a specific terminal device displays an information code for restriction, which records specific identification information and restriction-related information that is related to restricting execution of a specific function, on a display unit when the execution of the specific function is not restricted; and restricts, if a restriction instruction signal for instructing to restrict the execution of the specific function is received from a management device after the information code for restriction is displayed on the display unit, the execution of the specific function according to the received restriction instruction signal. A reading unit of the management device reads the information code for restriction displayed on the display unit to acquire the specific identification information and the restriction-related information recorded in the information code for restriction. A management control unit of the management device transmits the restriction instruction signal to the specific terminal device if the reading unit acquires the specific identification information and the restriction-related information and the acquired specific identification information is stored in the memory.SELECTED DRAWING: Figure 1

Description

The techniques disclosed herein relate to terminal management systems for limiting the execution of certain functions of a terminal device.

Camera-equipped mobile phones as described in Patent Document 1 are widely used. Such a mobile phone can perform various functions such as a telephone communication function using a public line, an image capturing function using a camera, and a communication function using the Internet.

Japanese Unexamined Patent Publication No. 2006-270131

When using a terminal device capable of executing multiple functions such as the mobile phone of Patent Document 1, there is a situation in which the execution of a specific function among the executable functions should be restricted. For example, when a visitor from the outside enters a secret area of a company (for example, a factory), the company uses a camera among the terminal devices brought in by the visitor for the purpose of preventing leakage of confidential information. In some cases, it may be desired to restrict the execution of the image shooting function or the telephone communication function using a public line.

Conventionally, in such a situation, the user of the terminal device is requested to turn off the power of the terminal device, cover the lens of the camera (for example, a sticker made of a non-transparent material), or temporarily put the terminal device on. There are restrictions on the execution of specific functions, such as by keeping them.

However, for example, it is difficult for a company or the like to completely grasp whether or not a measure for limiting the execution of a specific function has actually been taken by a user of a terminal device. Some users may neglect to take measures to limit the execution of specific functions of the terminal device, so that specific functions of the terminal device may not be appropriately restricted.

The present specification provides a technique capable of appropriately limiting a specific function of a terminal device.

This specification discloses a terminal management system. The terminal management system includes a specific terminal device capable of executing a specific function, and a management device provided so as to be able to communicate with the specific terminal device. The specific terminal device includes a display unit and a terminal control unit. The terminal control unit has specific identification information for identifying at least one of the specific terminal device and a specific user of the specific terminal device when the execution of the specific function is not restricted. The restriction-related information related to the restriction on the execution of the specific function and the restriction-related information in which the restriction-related information is recorded are displayed on the display unit, and after the restriction information code is displayed on the display unit, When a restriction instruction signal for instructing the restriction of execution of the specific function is received from the management device, the execution of the specific function is restricted according to the received restriction instruction signal. The management device includes a memory, a reading unit, and a management control unit, and the memory includes at least one of the terminal device and a user of the terminal device for each of the one or more terminal devices. One or more identification information for identifying one or more is stored. The reading unit reads the restriction information code displayed on the display unit to acquire the specific identification information and the restriction-related information recorded in the restriction information code. The management control unit is said to be specific when the specific identification information and the restriction relationship information are acquired by the reading unit and the acquired specific identification information is stored in the memory. The restriction instruction signal is transmitted to the terminal device.

According to the above configuration, a specific user restricts the execution of a specific function of a specific terminal device by causing the reading unit of the management device to read the restriction information code displayed on the display unit of the specific terminal device. can do. Therefore, for example, a reading unit is arranged at an entrance / exit of a specific place (for example, a doorway for a visitor for a visitor to enter / exit the company), and a specific user who is a visitor is sent to the display unit. If the information code for restriction is displayed and each operation of reading by the reading unit is performed, when a visitor enters a specific place, a specific function of a specific terminal device is appropriately executed. It can be restricted. Thus, according to the above configuration, a particular function of a particular terminal device can be appropriately restricted.

Further, when the execution of the specific function is restricted, the terminal control unit further records the specific identification information and the release-related information related to the release of the restriction of the specific function. A release instruction signal for instructing the management device to release the restriction on the execution of the specific function after the information code for release is displayed on the display unit and the release information code is displayed on the display unit. The restriction on the execution of the specific function may be released according to the received release instruction signal. The reading unit may further read the release information code displayed on the display unit to acquire the specific identification information and the release-related information recorded in the release information code. The management control unit further obtains the specific identification information and the release-related information by the reading unit, and the acquired specific identification information is stored in the memory. The release instruction signal may be transmitted to a specific terminal device.

According to this configuration, a specific user causes the reading unit of the management device to read the release information code displayed on the display unit when the execution of a specific function of the specific terminal device is restricted. The restriction of a specific function of a specific terminal device can be lifted. Therefore, for example, a reading unit is placed at an entrance / exit of a specific place (for example, a doorway for a visitor for a visitor to enter / exit the company), and a specific function is restricted when entering the specific place. If a specific user (that is, a visitor) of the specific terminal device is allowed to perform each operation of displaying the release information code on the display unit and reading on the reading unit, the visitor from a specific place. When the player leaves the venue, the restriction on a specific function of a specific terminal device can be appropriately lifted. As described above, according to the above configuration, the restriction of a specific function of a specific terminal device can be appropriately released.

The specific terminal device may further include a position information acquisition unit that acquires position information indicating the position of the specific terminal device. Further, when the execution of the specific function is restricted, the terminal control unit is a special release request signal including the identification information for requesting the release of the restriction on the execution of the specific function. When the special release request signal is transmitted to the management device and the special release request signal is transmitted to the management device, the position information is transmitted to the management device, and the special release request signal and the position information are transmitted. When a special release instruction signal for instructing the release of the restriction on the execution of the specific function is received from the management device after being transmitted, the specific function is according to the received special release instruction signal. You may remove the restriction on the execution of. The management control unit further receives the special release request signal and the position information from the specific terminal device, and stores the specific identification information included in the received special release request signal in the memory. Even if the special release instruction signal is transmitted to the specific terminal device when it is determined that the position of the specific terminal device indicated by the position information is outside the specific area. Good.

According to this configuration, a specific user can use a special release request signal and location information for a specific terminal device while a specific terminal device whose execution of a specific function is restricted exists outside the specific area. By inputting a predetermined operation for transmission of the above and causing a specific terminal device to transmit a special release request signal and position information, the restriction on a specific function of the specific terminal device can be released. Here, the "specific area" may include, for example, an area (for example, in a company) where the execution of a specific function should be restricted. Therefore, according to the above configuration, for example, when a terminal device whose execution of a specific function is restricted for some reason moves out of a specific area without the restriction being released (for example, a formal restriction release procedure is performed). If a specific release request signal is transmitted to the terminal device when a specific user goes out of the company without taking the action, the restriction on a specific function of the specific terminal device can be appropriately released. As described above, even in the case of the above configuration, the restriction of the specific function of the specific terminal device can be appropriately released.

The specific terminal device may further include an imaging unit capable of capturing an image. The specific function may be a photographing function by the photographing unit.

According to this configuration, the specific function whose execution is restricted is the shooting function by the shooting unit. Therefore, for example, when inviting a specific user of a specific terminal device as a visitor to a place where he / she does not want to take an image (for example, a factory dealing with secret technology), it is appropriate to prevent the visitor from taking an image. Can be restricted.

The restriction information code is a public area that is not encrypted by an encryption key, and is encrypted by the public area in which the specific identification information and the restriction-related information are recorded, and the encryption key. The private area may include the private area in which user-related information including the name of the specific user is recorded. The reading unit stores the encryption key, and when reading the restriction information code, the information recorded in the non-public area may be decrypted and acquired by using the encryption key. ..

According to this configuration, among the restriction information codes, identification information and restriction-related information are recorded in the public area, and user-related information is recorded in the non-public area. Therefore, even if the restriction information code is read by a reading device that does not store the encryption key, it belongs to significant information such as the name of a specific user (specifically, personal information). Information etc.) can be suppressed. It is possible to prevent the leakage of significant information such as the name of a specific user outside the terminal management system.

Further, when the execution of the specific function is restricted, the terminal control unit may transmit a restriction completion signal indicating that the restriction on the execution of the specific function is completed to the management device. The management device may further include a notification unit capable of executing a predetermined notification operation. When the management control unit further receives the restriction completion signal from the specific terminal device, the management control unit may cause the notification unit to execute the predetermined notification operation.

According to this configuration, when the restriction of a specific function is completed in a specific terminal device, the notification unit of the management device executes a predetermined notification operation. As a result, a person around the notification unit (for example, a user of the terminal device, a guard staff in front of the entrance, etc.) can grasp that a specific function has been restricted in the specific terminal device.

The outline of the terminal management system is shown. The block diagram of the terminal device is shown. The block diagram of the management device is shown. An example of the stored contents of the user database is shown. A sequence diagram of an example of operation when the function of the terminal device is restricted is shown. A sequence diagram of an example of operation when the restriction on the function of the terminal device is released (normally released) is shown. A sequence diagram of an example of operation when the restriction on the function of the terminal device is released (special release) is shown.

(Example)
(Configuration of terminal management system 2; FIG. 1)
The terminal management system 2 of the present embodiment shown in FIG. 1 limits and limits the execution of a specific function of the terminal device 10 possessed by a user who enters or exits a specific area (for example, a company, an event venue, etc.). It is a system for releasing. In the example of FIG. 1, the terminal management system 2 is a system installed in a specific company, and restricts the execution of the image capturing function by the terminal device 10 possessed by the user 6 who is a visitor entering or leaving the company. Acts as a system for lifting restrictions.

As shown in FIG. 1, the terminal management system 2 of this embodiment includes a terminal device 10 owned by the user 6 and a management device 50. The terminal device 10 and the management device 50 can mutually execute wireless communication via the Internet 4.

(Structure of terminal device 10; FIGS. 1 and 2)
The terminal device 10 of this embodiment is a portable terminal device possessed by a user 6 who is a visitor to a specific company. The terminal device 10 is, for example, a portable terminal device such as a mobile phone (for example, a smartphone), a PDA, a notebook PC, a tablet PC, a portable music playback device, a portable moving image playback device, or the like. The terminal device 10 may be a portable terminal device (for example, a business PDA or the like) generally called a business terminal. The terminal device 10 can execute a plurality of functions such as a telephone communication function using a public line, an image capturing function using a camera, and a communication function using the Internet. As shown in FIG. 2, the terminal device 10 includes an operation unit 12, a display unit 14, a camera 16, a speaker 18, a microphone 20, a GPS (Global Positioning System) receiver 22, and a communication interface 24. It includes a control unit 30 and a memory 32. In the following, the interface will be referred to as "I / F".

The operation unit 12 includes one or more keys. The display unit 14 is a display for displaying various information. Further, the operation unit 12 and the display unit 14 may be a touch panel in which both are integrally configured. The user can operate the operation unit 12 to input various instructions to the terminal device 10. The camera 16 is a CCD camera capable of capturing an image within a predetermined capture range. Although not shown, the camera 16 includes an external camera provided on the outside of the terminal device 10 (the surface on the side where the display unit 14 is not provided) and the outside of the terminal device 10 (the surface on the side where the display unit 14 is provided). ) May include two cameras, an internal camera and.

The speaker 18 is an output unit for outputting audio. The microphone 20 is an input unit for inputting voice. The GPS receiver 22 is a position information acquisition unit that receives radio waves from GPS satellites and acquires the position information of the terminal device 10 by calculation.

The communication I / F 24 is connected to the Internet 4 and executes wireless communication (for example, LTE (abbreviation of Long Term Evolution) communication, Wi-Fi communication, etc.) via the Internet 4 with the management device 50. It is an I / F to do.

The control unit 30 executes various processes (see FIGS. 5 to 7 described later) according to the application program 34 (hereinafter referred to as “application 34” or “application 34”) stored in the memory 32.

The memory 32 is composed of a ROM (abbreviation of Read Only Memory), a RAM (abbreviation of Random Access Memory), and the like. As described above, the memory 32 stores the application 34. The application 34 is a program for performing various processes for the terminal device 10 to function as the terminal device 10 for the terminal management system 2 of the present embodiment. The application 34 is a terminal device from an application providing server (not shown) on the Internet installed by a service provider that provides a terminal management service (that is, a service that restricts execution of a function and releases the restriction) by the terminal management system 2. It will be installed on 10. Although not shown, an OS program is also stored in the memory 32. The OS program is a program for controlling the basic operation of the terminal device 10, and is already stored in the memory 32 at the time of shipment of the terminal device 10.

Further, the memory 32 stores the user ID "U1" assigned to the user 6 as a result of the user registration process performed when the application 34 is installed. In addition to this, the memory 32 also has an area for storing various information generated in association with the processing of the control unit 30.

(Structure of management device 50; FIG. 1, FIG. 3, FIG. 4)
The management device 50 is a management device installed by an administrator of the terminal management system 2 (for example, a system administrator of a company). In this example, the management device 50 is provided in a guard station provided with an entrance for outside visitors to enter and leave the company. In this embodiment, the management device 50 is composed of two devices, a main body 60 and a reading device 90 wiredly connected to the control system of the main body 60. For example, the main body 60 is provided in the building of the guard station. The reading device 90 is provided in the vicinity of the passage port. In another embodiment, the management device 50 may be configured as one management device 50 having both the function of the main body 60 and the function of the reading device 90.

The main body 60 includes an operation unit 62, a display unit 64, a communication I / F 66, a control unit 70, and a memory 72.

The operation unit 62 includes a keyboard and a mouse. A user of the management device 50 (for example, a system administrator) can operate the operation unit 62 to input various instructions to the management device 50. The display unit 64 is a display for displaying various information.

The communication I / F 66 is an I / F that is connected to the Internet 4 and for executing wireless communication with an external device (for example, a terminal device 10) via the Internet 4.

The control unit 70 executes various processes (see FIGS. 5 to 7 described later) according to the application program 73 (hereinafter referred to as “application 73”) stored in the memory 72.

The memory 72 is composed of a ROM, a RAM, and the like. As described above, the memory 72 stores the application 73. The application 73 is a program for performing various processes for the management device 50 to function as a management device for the terminal management system 2 of the present embodiment. The content of application 73 is different from the content of application 34 for the terminal device 10. The application 73 is installed in the memory 72 from an application providing server (not shown) on the Internet installed by a service provider that provides a terminal management service. In another example, the application 73 may be installed in the memory 72 from a recording medium distributed by the service provider. Although not shown, the memory 72 also stores the OS program. The OS program is a program for controlling the basic operation of the management device 50, and is already stored in the memory 72 at the time of shipment of the management device 50.

The memory 72 further stores a user database 74 (see FIG. 4). The user database 74 is a storage area for storing various information for each user ID assigned as a result of the user registration process performed by the user when the application 34 is installed in the terminal device 10.

As shown in FIG. 4, the user database 74 stores various information for each user ID. Specifically, the user database 74 stores a plurality of user data 80A, 80B, 80C and the like that are different for each user ID. The user data 80A includes various information about the user 6 corresponding to the user ID "U1". The user data 80B includes various information about a user (not shown) corresponding to the user ID "U2". The user data 80C includes various information about a user (not shown) corresponding to the user ID "U3".

The user data 80A includes user-related information 81A, restriction history information 82A, and current status information 83A. The user-related information 81A includes various basic information of the user 6 corresponding to the user ID "U1". Specifically, for example, the name of user 6 ("Taro YAMADA"), company name ("AAA Co., Ltd."), department name ("development department"), contact telephone number ("xxx-xxxx-xxxx"). ), Contact email address ("yyy@yyy.com"), terminal ID ("T1") assigned to the terminal (for example, terminal device 10) at the time of user registration, model name of the terminal ("ZZZ") Includes various information such as. The user-related information 81A may include various information related to the user 6 other than these (for example, face image data of the user 6, blood type, gender, age, and other personal information data).

The restriction history information 82A is a history in which the user 6 identified by the user ID "U1" has been restricted from executing the image capturing function and the restriction has been lifted by the management device 50 from the time of user registration to the present. Information to represent. The restriction history information 82A includes a record (log) of the date and time when the restriction on the execution of the function is performed, the date and time when the restriction is released, and the like. A new record is added to the restriction history information 82A each time the management device 50 restricts the execution of the image capturing function and releases the restriction.

The current status information 83A is flag information indicating the current restriction status by the management device 50. In the example of FIG. 1, the current state information 83A represents a situation (“unlimited”) in which the image capturing function is not restricted by the management device 50. While the image capturing function is restricted by the management device 50, the current status information 83A is switched to "restricted" indicating that the restriction is in progress.

As shown in FIG. 3, the reading device 90 is a code reading device for reading an information code which is a two-dimensional code. The reading device 90 is wiredly connected to the control system of the main body 60. That is, the operation of the reading device 90 is also controlled by the control unit 70 of the main body 60.

The reading device 90 includes a reading unit 92 and a notification unit 94. The reading unit 92 is a device for acquiring the information recorded in the information code by optically reading the information code displayed on the display unit 14 of the terminal device 10. Since the reading unit 92 has the same configuration as a well-known information code reading device, detailed description of the configuration will be omitted. In this embodiment, the reading unit 92 stores the encryption key 93. When the information code displayed on the display unit 14 of the terminal device 10 has an encrypted private area, the encryption key 93 decrypts the private area and records it in the private area. It is a key used to acquire information. In this embodiment, since the reading unit 92 stores the encryption key 93, the information code to be read has an unencrypted public area and an encrypted private area. However, both the information recorded in the public area and the information stored in the private area can be acquired.

The notification unit 94 is a notification means including a light emitting unit, a speaker, and the like. The notification unit 94 can execute a predetermined notification operation when the execution of the function in the terminal device 10 is restricted, the restriction is released, or the like. The notification operation includes, for example, various operations such as light emission from the light emitting unit and output of a notification sound from the speaker.

(Installation and user registration)
Next, the installation and user registration that the user 6 performs in advance in order to receive the terminal management service provided by the terminal management system 2 in the terminal device 10 will be described. The user 6 who wishes to use the terminal management service by the terminal management system 2 of the present embodiment first operates the operation unit 12 of the terminal device 10 to access the application providing server (not shown) via the Internet 4. , Download the application 34 from the application providing server. The control unit 30 of the terminal device 10 installs the downloaded application 34 in the memory 32. Then, the control unit 30 activates the application 34. At this time, the control unit 30 causes the display unit 14 to display a predetermined initial setting screen (not shown). The initial setting screen includes each input field for inputting the user ID "U1" used by the user, the password used for authentication, and other user-related information (name, company name, department, telephone number, etc.). Is done.

The user 6 operates the operation unit 12 to input necessary information in each input field. The control unit 30 transmits a user registration request including each information input by the user on the initial setting screen to the management device 50.

When the control unit 70 of the management device 50 receives the user registration request from the terminal device 10, it creates new user data 80A (see FIG. 4) including the user ID "U1" included in the user registration request, and creates a memory. It is stored in the user database 74 of 72. At this time, the user data 80A includes each information included in the user registration request. By executing each of the above processes, the installation and user registration are completed, and the user 6 can receive the terminal management service provided by the terminal device 10. Once the user registration is completed, the user 6 activates the application 34 stored in the memory 32 and authenticates with the management device 50 using the registered user ID and password to perform the terminal. It becomes possible to receive the terminal management service by using the device 10.

After the installation and user registration are completed, the user 6 starts the application 34 installed in the terminal device 10 and authenticates using the registered user ID and password to receive the terminal management service. be able to. When the authentication is successful, the control unit 30 of the terminal device 10 causes the display unit 14 to display a predetermined My Page screen (not shown). A part or all of the information included in the user data 80A is displayed on the My Page screen. Further, on the My Page screen, a restriction start button for starting the restriction of the image capturing function of the terminal device 10, a release button for releasing the restriction, and a restriction for releasing the restriction after moving outside a specific company. A special release button etc. is also displayed. As will be described in detail later, the user 6 can start each process for limiting and releasing the limitation of the image capturing function of the terminal device 10 by operating a desired button according to the situation (as described in detail later). (See FIGS. 5 to 7).

(Specific example; FIGS. 5 to 7)
Subsequently, a specific example of the operation of the terminal management system 2 of this embodiment will be described with reference to FIGS. 5 to 7. Hereinafter, each process executed by the control unit 30 of the terminal device 10 will be described as an operation of the terminal device 10. Each process executed by the control unit 70 of the main body 60 of the management device 50 will be described as an operation of the main body.

(At the time of restriction; Fig. 5)
FIG. 5 shows the operation of each component when the image capturing function by the camera 16 is restricted when the user 6 who is a visitor enters the company through the entrance. At the start of the specific example of FIG. 5, the application 34 is installed in the terminal device 10, and the user registration of the user 6 has already been completed.

In S10, the user 6 inputs a predetermined application start instruction to the operation unit 12 of the terminal device 10 to start the application 34. When the application 34 is started and the predetermined authentication using the user ID "U1" and the password is performed, the above-mentioned My Page screen is displayed on the display unit 14.

In this state, in S12, the user 6 can input a predetermined restriction start operation to the operation unit 12. Specifically, the user 6 performs an operation of pressing the restriction start button displayed on the My Page screen.

In S14, the terminal device 10 transmits a restriction request signal including the user ID "U1" to the main body 60 (that is, the management device 50). The limit request signal is a request signal for requesting the management device 50 to limit the execution of the image capturing function of the terminal device 10.

In S16, the main body 60 confirms the user data 80A by using the user ID “U1” included in the received restriction request signal. Specifically, the main body 60 refers to the user database 74 of the memory 72 and confirms that the user data 80A including the user ID “U1” exists. Then, the main body 60 confirms that the current state information 83A in the user data 80A is "unrestricted" indicating a situation in which the image capturing function is not restricted by the management device 50. Although not shown, in S16, when the user data 80A including the user ID "U1" does not exist, or when the current information 83A of the user data 80A indicates "restricted", the main body 60 sends an error notification to the terminal device 10. And end the process with an error.

In S18, the main body 60 generates the restriction information code data by using the information included in the user data 80A. The restriction information code data is image data representing the restriction information code. Restriction information code The restriction information code represented by the data is a two-dimensional code. In another example, the limiting information code may be a one-dimensional code. The restriction information code includes an unencrypted public area and a private area encrypted with an encryption key (see reference numeral 93 in FIG. 3). In the public area, the user ID "U1" and the restriction-related information indicating that the image capturing function is desired to be restricted are recorded. Various user-related information such as the user's name, company name, affiliation, and contact information is recorded in the private area.

In S20, the main body 60 transmits the restriction information code data generated in S18 to the terminal device 10.

In S22, the terminal device 10 causes the display unit 14 to display the restriction information code represented by the restriction information code data received from the main body 60 (management device 50).

In S24, the user 6 brings the display unit 14 on which the restriction information code is displayed close to the reading device 90 installed near the passage port.

In S26, the reading device 90 reads the limiting information code displayed on the display unit 14 by the reading unit 92. At this time, the reading unit 92 acquires the user ID “U1” and the restriction-related information recorded in the unencrypted public area. At the same time, the reading unit 92 decrypts the encrypted non-public area using the encryption key 93, and acquires the user-related information recorded in the non-public area.

In S28, the reading device 90 supplies the reading result of S26 (user ID "U1", restriction-related information, user-related information, etc.) to the main body 60.

In S30, the main body 60 identifies the user data 80A including the user ID “U1” included in the acquired reading result.

In the following S32, the main body 60 transmits a restriction instruction signal to the terminal device 10 by using the contact information (for example, the user ID “U1”) included in the user data 80A as a destination. The restriction instruction signal is a signal for instructing the restriction of execution of the image capturing function.

In S34, the terminal device 10 limits the execution of the image capturing function according to the restriction instruction signal. As a result, even when the user 6 activates the camera 16 of the terminal device 10, the camera 16 does not capture an image.

In S36, the terminal device 10 transmits a restriction completion signal indicating that the execution of the image capturing function is restricted to the main body 60 (management device 50).

In S38, the main body 60 updates the user data 80A specified in S30. Specifically, the main body 60 newly records the date and time when the restriction on the execution of the function is started in the restriction history information 82A. Then, the main body 60 switches the current state information 83A to "restricted" indicating that the current state information 83A is being restricted.

In S40, the main body 60 supplies a predetermined notification signal to the reading device 90.

In S42, the reading device 90 causes the notification unit 94 to execute the notification operation according to the notification signal. The notification operation includes, for example, various operations such as light emission from the light emitting unit and output of a notification sound from the speaker.

As described above, in this embodiment, the user 6 of the terminal device 10 causes the reading unit 92 of the management device 50 to read the restriction information code displayed on the display unit 14 of the terminal device 10, thereby causing the terminal device 10 to read. It is possible to restrict the execution of the image capturing function of. Therefore, as in the above example, the reading device 90 is arranged at the visitor entrance for the visitor to enter and leave the company, and the user 6 of the terminal device 10 who is the visitor is sent to the display unit 14. If each operation of displaying the information code for restriction and reading by the reading device 90 is performed, the execution of the image capturing function of the terminal device 10 is appropriately restricted when a visitor enters the company. be able to. As described above, according to the above configuration, the image capturing function of the terminal device 10 can be appropriately restricted.

Further, as described above, the restriction information code includes a public area and a private area. In the public area, the user ID "U1" and the restriction-related information indicating that the image capturing function is desired to be restricted are recorded. Various user-related information such as the user's name, company name, affiliation, and contact information is recorded in the private area. The user-related information recorded in the private area can be acquired only by the reading unit 92 that stores the encryption key 93. Therefore, even if the restriction information code is read by a reading device that does not store the encryption key, significant information such as the user's name (specifically, information belonging to personal information, etc.) ) Can be suppressed. It is possible to prevent the leakage of significant information such as the user's name to the outside of the terminal management system 2.

Further, as described above, when the restriction of the image capturing function in the terminal device 10 is completed, the notification unit 94 of the reading device 90 executes a predetermined notification operation (S42). As a result, a person around the reading device 90 (in this example, a user of the terminal device 10, a guard staff in front of the entrance, etc.) can grasp that the image capturing function of the terminal device 10 has been restricted. it can. The guard staff can easily confirm that the image shooting function has been restricted.

(At the time of release (normal release); Fig. 6)
In FIG. 6, the execution of the image capturing function of the terminal device 10 is restricted by the method of FIG. 5, and after the user 6 who is a visitor enters the company, the user 6 passes through the entrance to the company. The operation of each component when the restriction of the image taking function performed at the time of entry is released when leaving from is shown. As in the example of FIG. 6, the release of the restriction performed when leaving the company through the entrance may be referred to as "normal release" below.

In S50, the user 6 inputs a predetermined application start instruction to the operation unit 12 of the terminal device 10 to start the application 34. The content of the processing of S50 is the same as that of S10 of FIG.

In this state, in S52, the user 6 can input a predetermined release operation to the operation unit 12. Specifically, the user 6 performs an operation of pressing a release button (that is, a button for instructing normal release) displayed on the My Page screen.

In S54, the terminal device 10 transmits a release request signal including the user ID "U1" to the main body 60 (that is, the management device 50). The release request signal is a request signal for requesting the management device 50 to release the restriction on the image capturing function of the terminal device 10.

In S56, the main body 60 confirms the user data 80A by using the user ID “U1” included in the received release request signal. Specifically, the main body 60 refers to the user database 74 of the memory 72 and confirms that the user data 80A including the user ID “U1” exists. Then, the main body 60 confirms that the current state information 83A in the user data 80A is "restricted" indicating a situation in which the image capturing function is restricted by the management device 50. Although not shown, in S56, when the user data 80A including the user ID "U1" does not exist, or when the current information 83A of the user data 80A indicates "unlimited", the main body 60 notifies the terminal device 10 of an error. And end the process with an error.

In S58, the main body 60 generates the release information code data by using the information included in the user data 80A. The release information code data is image data representing the release information code. In this embodiment, the release information code represented by the release information code data is also a two-dimensional code (in other examples, it may be a one-dimensional code). The unlocking information code also includes an unencrypted public area and a private area encrypted with an encryption key (see reference numeral 93 in FIG. 3). In the public area, the user ID "U1" and the release-related information indicating that the restriction on the image capturing function is desired to be released are recorded. Various user-related information such as the user's name, company name, affiliation, and contact information is recorded in the private area.

In S60, the main body 60 transmits the release information code data generated in S58 to the terminal device 10.

In S62, the terminal device 10 causes the display unit 14 to display the release information code represented by the release information code data received from the main body 60 (management device 50).

In S64, the user 6 brings the display unit 14 on which the release information code is displayed close to the reading device 90 installed near the passage port.

In S66, the reading device 90 reads the release information code displayed on the display unit 14 by the reading unit 92. At this time, the reading unit 92 acquires the user ID “U1” and the release-related information recorded in the unencrypted public area. At the same time, the reading unit 92 decrypts the encrypted non-public area using the encryption key 93, and acquires the user-related information recorded in the non-public area.

In S68, the reading device 90 supplies the reading result of S66 (user ID "U1", release-related information, user-related information, etc.) to the main body 60.

In S70, the main body 60 identifies the user data 80A including the user ID “U1” included in the acquired reading result.

In the following S72, the main body 60 uses the contact information (for example, the user ID “U1”) included in the user data 80A as a destination to transmit a release instruction signal to the terminal device 10. The release instruction signal is a signal for instructing the release of the limitation of the image capturing function.

In S74, the terminal device 10 releases the limitation of the image capturing function according to the release instruction signal. As a result, it is possible to take an image again using the camera 16 of the terminal device 10.

In S76, the terminal device 10 transmits a release completion signal indicating that the restriction on the image capturing function has been released to the main body 60 (management device 50).

In S78, the main body 60 updates the user data 80A specified in S30. Specifically, the main body 60 newly records the date and time when the restriction on the execution of the function is released in the restriction history information 82A. Then, the main body 60 switches the current state information 83A to "unrestricted" indicating that it is not restricted.

In S80, the main body 60 supplies a predetermined notification signal to the reading device 90.

In S82, the reading device 90 causes the notification unit 94 to execute the notification operation according to the notification signal. The notification operation includes, for example, various operations such as light emission from the light emitting unit and output of a notification sound from the speaker. The content of the notification operation in S82 may be different from the content of the notification operation when the restriction is completed (S42 in FIG. 5).

As described above, in the present embodiment, the user 6 of the terminal device 10 whose execution of the image capturing function is restricted reads the release information code displayed on the display unit 14 of the terminal device 10 by the management device 50. By having the unit 92 read the image, the limitation of the image capturing function of the terminal device 10 can be released. Therefore, the user 6 (that is, the visitor) of the terminal device 10 in which the reading device 90 is arranged at the entrance for the visitor for the visitor to enter and leave the company and the image capturing function is restricted when entering the company. ) Is made to display the release information code on the display unit 14 and to perform each operation of reading by the reading device 90, so that when a visitor leaves the company, the image capturing function of the terminal device 10 is performed. Can be properly lifted. As described above, according to the configuration of the present embodiment, the limitation of the image capturing function of the terminal device 10 can be appropriately released.

Further, as described above, the release information code also includes a public area and a private area. As in the case of the restriction information code, even if the release information code is read by a reader that does not store the encryption key, significant information such as the user's name (specifically). In other words, it is possible to suppress the situation where information belonging to personal information, etc.) is acquired. It is possible to prevent the leakage of significant information such as the user's name to the outside of the terminal management system 2.

Further, as described above, even when the restriction on the image capturing function is released in the terminal device 10, the notification unit 94 of the reading device 90 executes a predetermined notification operation (S82). As a result, a person around the reading device 90 (in this example, the user of the terminal device 10, the guard staff in front of the entrance, etc.) grasps that the restriction on the image capturing function has been released in the terminal device 10. be able to. Guard staff, etc. can easily confirm that the restrictions have been lifted.

(At the time of cancellation (special cancellation); Fig. 7)
In FIG. 7, after the execution of the image capturing function of the terminal device 10 is restricted by the method of FIG. 5, and after the user 6 who is a visitor enters the company, the user 6 for some reason is shown in FIG. When moving out of the company without removing the restrictions by the method of (for example, when going out of the company with an employee from other than the regular entrance), when removing the restrictions on the image shooting function performed at the time of admission The operation of each component of is shown. As in the example of FIG. 7, the release of the restriction performed after moving out of the company without the restriction being released by the method of FIG. 6 may be referred to as "special release" below.

In S90, the user 6 inputs a predetermined application start instruction to the operation unit 12 of the terminal device 10 to start the application 34. The content of the processing of S50 is the same as that of S10 of FIG.

In this state, in S92, the user 6 can input a predetermined special release operation to the operation unit 12. Specifically, the user 6 performs an operation of pressing a special release button (that is, a button for instructing special release) displayed on the My Page screen.

In S94, the terminal device 10 transmits a special release request signal including the user ID "U1" to the main body 60 (that is, the management device 50). The special release request signal is a request signal for requesting the management device 50 for special release.

In S96, the main body 60 confirms the user data 80A by using the user ID “U1” included in the received special release request signal. Specifically, the main body 60 refers to the user database 74 of the memory 72 and confirms that the user data 80A including the user ID “U1” exists. Then, the main body 60 confirms that the current state information 83A in the user data 80A is "restricted" indicating a situation in which the image capturing function is restricted by the management device 50. Although not shown, in S96, when the user data 80A including the user ID "U1" does not exist, or when the current information 83A of the user data 80A indicates "unlimited", the main body 60 notifies the terminal device 10 of an error. And end the process with an error.

In S100, the main body 60 transmits a position information request signal for requesting transmission of position information indicating the current position of the terminal device 10 to the terminal device 10.

In S102, the terminal device 10 acquires position information indicating the current position of the terminal device 10 via the GPS receiver 22. In the following S104, the terminal device 10 transmits the position information acquired in S102 and the user ID "U1" to the main body 60 (management device 50).

In S106, the main body 60 is based on the received position information and the user ID "U1", and the current position of the terminal device 10 corresponding to the user ID "U1" is outside the area of the company (that is, the terminal device is currently located). Confirm that 10 exists outside the company). Although not shown, in S106, when the current position of the terminal device 10 is within the area of the company (that is, the terminal device 10 still exists in the company at present), the main body 60 sends an error notification to the terminal. The device 10 is performed, and the process ends with an error.

In S108, the main body 60 transmits a special release instruction signal to the terminal device 10. The special release instruction signal, like the release instruction signal, is a signal for instructing the release of the limitation of the image capturing function.

In S110, the terminal device 10 releases the restriction of the image capturing function according to the special release instruction signal. As a result, it is possible to take an image again using the camera 16 of the terminal device 10.

In S112, the terminal device 10 transmits a release completion signal indicating that the restriction on the image capturing function has been released to the main body 60 (management device 50).

In S114, the main body 60 updates the user data 80A specified in S30. Specifically, the main body 60 newly records the date and time when the restriction on the execution of the function is released in the restriction history information 82A. Then, the main body 60 switches the current state information 83A to "unrestricted" indicating that it is not restricted.

As described above, in the present embodiment, the user 6 of the terminal device 10 whose execution of the image capturing function is restricted can use the terminal device 10 while the terminal device 10 is outside the specific area (that is, outside the company). By inputting the special release operation (S92) to the terminal device 10 and causing the terminal device 10 to transmit the special release request signal and the position information, the restriction on the image capturing function of the terminal device 10 can be released. Therefore, according to the present embodiment, for example, when the terminal device 10 whose execution of the image capturing function is restricted for some reason moves out of the company without being normally released by the method of FIG. 6, the terminal If the device 10 is made to transmit a special release request signal, the restriction on the image capturing function of the terminal device 10 can be appropriately released. As described above, even in the case of this embodiment, the limitation of the image capturing function of the terminal device 10 can be appropriately released.

The correspondence between this embodiment and the description of the claims will be described. The terminal device 10 is an example of a “specific terminal device”. User 6 is an example of a "specific user". The image capturing function is an example of a "specific function". The user ID is an example of "specific identification information". The control unit 30 is an example of a “terminal control unit”, and the control unit 70 is an example of a “management control unit”. Further, the camera 16 is an example of a “shooting unit”.

Although specific examples of the techniques disclosed in the present specification have been described above, these are merely examples and do not limit the scope of claims. The techniques described in the claims include various modifications and modifications of the specific examples illustrated above. For example, the following modification may be adopted.

(Modification 1) In the above embodiment, the user ID "U1" is assigned to the restriction request signal (S14 in FIG. 5), the release request signal (S54 in FIG. 6), and the special release request signal (S94 in FIG. 7). The main body 60, which is included and receives these signals, confirms the existence of the user data 80A including the user ID “U1” included in each signal (S16 in FIG. 5, S56 in FIG. 6, and S96 in FIG. 7). ). Not limited to this, the restriction request signal, the release request signal, and the special release request signal include a device ID (“T1” in FIG. 4) for identifying the terminal device 10 instead of the user ID “U1”. You may. In yet another example, the restriction request signal, the release request signal, and the special release request signal may include both a user ID and a device ID. In these modifications, the user ID and / or device ID included in each signal is an example of "specific identification information".

(Modification 2) In the above embodiment, two methods, a normal release (see FIG. 6) and a special release (see FIG. 7), are adopted as a method for releasing the restriction of the terminal device 10 having the limited image capturing function. Has been done. Not limited to this, as a method for releasing the restriction of the terminal device 10, only one of the normal release and the special release may be adopted. Further, as a method for releasing the restriction of the terminal device 10, other methods other than the normal release and the special release may be adopted.

(Modification 3) In the above embodiment, the current position of the terminal device 10 needs to be outside the company area in order for the special release (see FIG. 7) to be performed (see S106). In the modified example, when the special release request signal is transmitted from the terminal device 10, the restriction on the image capturing function of the terminal device 10 is released even if the current position of the terminal device 10 is within the area of the company. You may.

(Modification 4) In the above embodiment, when the terminal device 10 requests a special release (see FIG. 7), the special release request signal including the user ID “U1” and the position information are separately separated from the main body 60 (see FIG. 7). It is transmitted to the management device 50) (S94, S104). In the modified example, when the terminal device 10 requests the special release, the special release request signal including the user ID "U1" and the position information may be simultaneously transmitted to the main body 60. Generally speaking, when the special release request signal is transmitted to the management device, the terminal control unit may transmit the position information to the management device.

(Modification 5) In the above embodiment, the image capturing function by the camera 16 is restricted among the plurality of functions that can be executed by the terminal device 10. The function subject to the restriction is not limited to this, and may be another function. For example, the telephone communication function using a public line may be subject to restriction. In this case, the telephone communication function is an example of a "specific function".

(Modification 6) In the above embodiment, the restriction information code and the release information code are both information codes having a public area and a non-public area. Not limited to this, the restriction information code and the release information code may be an information code having only a public area. In that case, the user-related information such as the user's name may not be recorded in the restriction information code and the release information code.

(Modification 7) In the above embodiment, when the image capturing function of the terminal device 10 is restricted (S34 in FIG. 5), and when the restriction of the image capturing function of the terminal device 10 is released by normal cancellation (variation example 7). In S74) of FIG. 6, a notification operation is performed in the reading device 90 (S42, S82). In the modified example, the notification unit 94 of the reading device 90 may be omitted. The reading device 90 does not have to perform the notification operation.

The technical elements described herein or in the drawings exhibit their technical usefulness alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the techniques illustrated in this specification or drawings achieve a plurality of objectives at the same time, and achieving one of the objectives itself has technical usefulness.

2: Terminal management system 4: Internet 6: User 10: Terminal device 12: Operation unit 14: Display unit 16: Camera 18: Speaker 20: Microphone 22: GPS receiver 24: Communication I / F
30: Control unit 32: Memory 34: Application 50: Management device 60: Main unit 62: Operation unit 64: Display unit 66: Communication I / F
70: Control unit 72: Memory 73: Application 74: User database 80A: User data 80B: User data 80C: User data 81A: User-related information 82A: Restriction history information 83A: Current status information 90: Reading device 92: Reading unit 93: Encryption key 94: Notification unit

Claims (6)

It is a terminal management system
With a specific terminal device that can perform a specific function,
It is equipped with a management device provided so as to be able to communicate with the specific terminal device.
The specific terminal device includes a display unit and a terminal control unit.
The terminal control unit
Specific identification information for identifying at least one of the specific terminal device and a specific user of the specific terminal device, and the specific function, when the execution of the specific function is not restricted. The restriction-related information related to the restriction of execution of the above and the restriction information code in which is recorded are displayed on the display unit.
When the restriction instruction signal for instructing the restriction of execution of the specific function is received from the management device after the restriction information code is displayed on the display unit, the received restriction instruction signal is received. To limit the execution of the particular function according to
The management device includes a memory, a reading unit, and a management control unit.
The memory stores one or more identification information for identifying at least one of the terminal device and the user of the terminal device for each of the one or more terminal devices.
The reading unit reads the restriction information code displayed on the display unit, acquires the specific identification information recorded in the restriction information code, and the restriction-related information.
The management control unit is said to be specific when the specific identification information and the restriction relationship information are acquired by the reading unit and the acquired specific identification information is stored in the memory. Sending the restriction instruction signal to the terminal device,
Terminal management system. The terminal control unit further
When the execution of the specific function is restricted, the release information code in which the specific identification information and the release-related information related to the release of the restriction of the specific function are recorded is displayed on the display unit. Display,
When the release instruction signal for instructing the release of the restriction on the execution of the specific function is received from the management device after the release information code is displayed on the display unit, the received release is performed. According to the instruction signal, the restriction on the execution of the specific function is released, and the restriction is released.
The reading unit further reads the release information code displayed on the display unit to acquire the specific identification information and the release-related information recorded in the release information code.
The management control unit further obtains the specific identification information and the release-related information by the reading unit, and the acquired specific identification information is stored in the memory. Sending the release instruction signal to a specific terminal device,
The terminal management system according to claim 1. The specific terminal device further includes a position information acquisition unit that acquires position information indicating the position of the specific terminal device.
The terminal control unit further
When the execution of the specific function is restricted, the special release request signal including the specific identification information and for requesting the release of the restriction on the execution of the specific function is transmitted. Send to the management device
When the special release request signal is transmitted to the management device, the position information is transmitted to the management device.
The received when the special release instruction signal for instructing the release of the restriction on the execution of the specific function is received from the management device after the special release request signal and the position information are transmitted. According to the special release instruction signal, the restriction on the execution of the specific function is released, and the restriction is released.
The management control unit further receives the special release request signal and the position information from the specific terminal device, and stores the specific identification information included in the received special release request signal in the memory. When it is determined that the position of the specific terminal device indicated by the position information is outside the specific area, the special release instruction signal is transmitted to the specific terminal device.
The terminal management system according to claim 1 or 2. The specific terminal device further includes a photographing unit capable of capturing an image.
The specific function is a shooting function by the shooting unit.
The terminal management system according to any one of claims 1 to 3. The restriction information code is
A public area that is not encrypted by an encryption key and in which the specific identification information and the restriction relationship information are recorded, and the public area.
It is a private area encrypted by the encryption key, and includes the private area in which user-related information including the name of the specific user is recorded.
The reading unit stores the encryption key, and when reading the restriction information code, the reading unit decrypts and acquires the information recorded in the non-public area using the encryption key.
The terminal management system according to any one of claims 1 to 4. The terminal control unit further
When the execution of the specific function is restricted, a restriction completion signal indicating that the restriction on the execution of the specific function is completed is transmitted to the management device.
The management device further includes a notification unit capable of executing a predetermined notification operation.
When the management control unit further receives the restriction completion signal from the specific terminal device, the management control unit causes the notification unit to execute the predetermined notification operation.
The terminal management system according to any one of claims 1 to 5.