JP2022051629A - Mobile terminal management system and mobile terminal - Google Patents

Abstract

To provide a mobile terminal management system capable of suppressing unauthorized use while leaving data on a band terminal.SOLUTION: In a mobile terminal management system provided with a mobile terminal 10 and a management server capable of communicating with the mobile terminal 10, the mobile terminal 10 is provided with a status acquisition unit 24 for acquiring the status of the mobile terminal 10, a security status determination unit 25 for determining whether the status of the mobile terminal 10 acquired by the status acquisition unit 24 is a security risk occurrence status that may cause a problem relating to the security of the mobile terminal 10, and a fraud suppression process execution unit 26 for executing a fraud suppression process which is a process of restricting access to data stored in the mobile terminal 10 in order to suppress unauthorized use of the mobile terminal 10 when the security status determination unit 25 determines that the status of the mobile terminal 10 is a security risk occurrence status, and is a process determined based on the status of the mobile terminal 10 from a plurality of candidate processes.SELECTED DRAWING: Figure 2

Description

Regarding mobile terminal management systems and mobile terminals, in particular, the protection of data stored in mobile terminals.

It is necessary to prevent the mobile terminal from being used illegally by a malicious third party. Patent Document 1 describes that when a mobile terminal is lost, an instruction is given from a management terminal located away from the mobile terminal to erase the data stored in the mobile terminal.

Japanese Unexamined Patent Publication No. 2012-70020

Erasing data from a mobile terminal means that for a legitimate user, the necessary data will be lost.

The present disclosure has been made based on this circumstance, and an object thereof is to provide a mobile terminal management system and a mobile terminal capable of suppressing unauthorized use while leaving data on the mobile terminal.

The above object is achieved by a combination of the features described in the independent claims, and the sub-claims specify further advantageous specific examples. The reference numerals in parentheses described in the claims indicate the correspondence with the specific embodiments described in the embodiments described later as one embodiment, and do not limit the disclosed technical scope.

One disclosure relating to a mobile terminal management system for achieving the above objectives is
A mobile terminal management system including a mobile terminal (10) and a management server (30) capable of communicating with the mobile terminal.
The mobile terminal includes a state acquisition unit (24) for acquiring the state of the mobile terminal.
Security status determination unit (25) that determines whether the status of the mobile terminal acquired by the status acquisition unit is a security risk occurrence state that may cause a problem regarding the security of the mobile terminal. Equipped with
When the security status determination unit determines that the status of the mobile terminal is a security risk occurrence status, the mobile terminal restricts access to the data stored in the mobile terminal in order to suppress unauthorized use of the mobile terminal. The fraud suppression process execution unit (26) is provided to execute the fraud suppression process, which is a process to be performed and is a process determined from a plurality of candidate processes based on the state of the mobile terminal.

This mobile terminal management system executes fraud suppression processing when it is determined that the state of the mobile terminal is a security risk occurrence state. This fraud suppression process is a process for suppressing unauthorized use of the mobile terminal, and is a process determined based on the state of the mobile terminal. Therefore, by executing the fraud suppression process, it is possible to suppress the fraudulent use of the mobile terminal according to the specific state of the mobile terminal. The fraud suppression process is a process of restricting access to data. Therefore, even if the data is left on the mobile terminal, unauthorized use of the mobile terminal can be suppressed.

The fraud suppression process can include the following processes. That is, the fraud suppression process can include a screen lock that does not accept knowledge authentication and can be released by an instruction from the management server. Further, the fraud suppression process can include a communication prohibition process for a server other than the management server. Further, the fraud suppression process can include a process of terminating the running application program except for the application program for the management server to manage the mobile terminal. Further, the fraud suppression process can include prohibition of data transmission to the internal communication device of the mobile terminal.

The mobile terminal management system can also be as follows. That is,
Mobile terminals
Security status judgment unit and
It is equipped with a terminal communication unit (12) that communicates with the management server.
When the security status determination unit determines that a security risk has occurred, the terminal communication unit issues a risk occurrence notification that includes a notification indicating that the security risk has occurred and a notification indicating the status of the mobile terminal related to security. Send to the management server from
The management server is
The server communication unit (31) that communicates with the mobile terminal,
When a risk occurrence notification sent by a mobile terminal is acquired via the server communication unit, the processing to be executed as fraud suppression processing is determined based on the risk occurrence notification, and the processing including the content of the determined processing is determined. It is equipped with an execution processing determination unit (37) that sends an execution instruction from the server communication unit to the mobile terminal.
When the fraud suppression process execution unit acquires the process execution instruction transmitted from the management server via the terminal communication unit, the fraud suppression process execution unit executes the fraud suppression process based on the acquired process execution instruction.

In this mobile terminal management system, when the mobile terminal determines that a security risk has occurred, it sends a risk occurrence notification to the management server, so that the management server performs specific fraud suppression processing based on the risk occurrence notification. Can be determined and instructed to the mobile terminal. Therefore, it is possible to execute more appropriate fraud suppression processing according to the security risk, as compared with the case where the fraud suppression processing to be executed when a security risk occurs is set in advance in the mobile terminal.

Unlike the above, the mobile terminal management system can also be as follows. That is,
Mobile terminals
Security status judgment unit and
The mobile terminal includes a storage unit (14) that stores the correspondence between the state of the mobile terminal and the specific fraud suppression process.
The security status determination unit executes fraud suppression processing determined based on the correspondence relationship and the status of the mobile terminal acquired by the status acquisition unit.

In this way, it is not necessary to send the status of the mobile terminal to the management server in order to execute the fraud suppression process. Therefore, the fraud suppression process can be executed more quickly than in the case where the state of the mobile terminal is transmitted to the management server and the management server determines the fraud suppression process to be executed by the mobile terminal.

Further, in the mobile terminal management system, when the fraud suppression process is executed, the fraud suppression process execution unit sends a fraud suppression process execution notification including the state of the mobile terminal and the content of the executed fraud suppression process to the management server. You may send it.

In this way, the management server can confirm that the mobile terminal is in a state where a security risk has occurred and whether the executed fraud suppression process is appropriate.

The mobile terminal management system can also be as follows. That is,
Mobile terminals
Security status judgment unit and
It is equipped with a terminal communication unit (12) that communicates with the management server.
When the security status judgment unit determines that the status of the mobile terminal is no longer in the security risk occurrence status, the terminal communication unit manages the risk resolution notification including the security risk occurrence status and the mobile terminal status. Send to the server
The management server is
The server communication unit (31) that communicates with the mobile terminal,
When the risk resolution notification sent by the mobile terminal is acquired via the server communication unit, it is determined whether or not the security risk occurrence status has been resolved based on the risk resolution notification, and the security risk resolution status has been resolved. If it can be determined, the server communication unit is provided with an end determination unit (38) for transmitting an end instruction instructing the end of the fraud suppression process to the mobile terminal.
The fraud suppression process execution unit terminates the fraud suppression process being executed based on the acquisition of the end instruction via the terminal communication unit.

In this terminal management system, when it is determined that the mobile terminal is no longer in the security risk occurrence state, the mobile terminal sends a risk elimination notification to the management server. The management server determines whether the security risk occurrence state has been resolved based on the risk resolution notification. Since the management server also determines whether or not the security risk occurrence state has been resolved, it is possible to accurately determine whether or not the security risk occurrence status has been resolved.

Further, in the above mobile terminal management system, the management server is
A display unit (32) that displays information to the administrator who operates the management server, and
It is equipped with an operation unit (35) that the administrator operates to input instructions.
When the end judgment unit obtains the risk resolution notification, it displays the status of the mobile terminal on the display unit and is based on the judgment result of whether the security risk occurrence status by the administrator input from the operation unit has been resolved. , It may be determined whether or not the security risk occurrence state has been resolved.

In this way, the administrator can determine whether or not the security risk occurrence status of the mobile terminal has been resolved, so the security risk occurrence status is resolved in consideration of the status of various mobile terminals that cannot be determined automatically. You can judge whether it is.

Furthermore, in the above mobile terminal management system,
The end judgment unit requests the administrator to enter the authentication information, and sends the end instruction including the authentication information entered by the administrator.
The fraud suppression process execution unit may terminate the fraud suppression process being executed based on the fact that the authentication for the authentication information included in the end instruction is established.

By doing so, it is possible to prevent the management server from being illegally operated and the fraud suppression process being terminated illegally.

One disclosure relating to a mobile terminal for achieving the above object is the mobile terminal provided in the mobile terminal management system. That is, the mobile terminal is
The state acquisition unit (24) that acquires the state of the mobile terminal,
When the state of the mobile terminal is a security risk state that may cause problems with the security of the mobile terminal, restrict access to the data stored in the mobile terminal in order to prevent unauthorized use of the mobile terminal. It is provided with a fraud suppression processing execution unit (26) that executes fraud suppression processing, which is a processing and is a processing determined from a plurality of candidate processes based on the state of the mobile terminal.

The figure which shows the structure of the mobile terminal management system 1 of embodiment. The block diagram which shows the structure of the mobile terminal 10. It is a figure which shows the correspondence relationship between a security risk and a security action. The block diagram which shows the structure of the management server 30. The figure which shows the process which protects the data stored in a mobile terminal 10. The figure which shows an example of the specific processing of SS4 of FIG. The figure which shows the process at the end of a security action. The figure which shows the process which proceeds when ST12 of FIG. 7 is executed. The figure which shows the process to execute in place of FIG. 5 in 2nd Embodiment.

Hereinafter, embodiments will be described with reference to the drawings. FIG. 1 is a diagram showing a configuration of a mobile terminal management system 1 of the present embodiment. The mobile terminal management system 1 is configured to include a mobile terminal 10 and a management server 30.

The mobile terminal 10 is an optical information reading device for business use that optically reads an information code such as a bar code or a two-dimensional code. The mobile terminal 10 is a smartphone type and includes a display unit 11. The display unit 11 displays an operation screen, information obtained by decoding an information code, and the like. Further, the mobile terminal 10 has a wireless LAN communication function, and wirelessly communicates with the management server 30 via the access point 40 by the function.

The management server 30 is connected to the access point 40 via the public communication network 50. The management server 30 and the access point 40 are connected to each other so as to be able to communicate with each other by wire or wirelessly. Although only one access point 40 is shown in FIG. 1, there is no limit to the number of access points 40. The access point 40 connects the mobile terminal 10 and the management server 30. The access point 40 and the mobile terminal 10 communicate with each other by short-range wireless communication.

[Structure of mobile terminal 10]
Next, the configuration of the mobile terminal 10 will be described. FIG. 2 shows the configuration of the mobile terminal 10 in a block diagram. The mobile terminal 10 includes a display unit 11, a terminal communication unit 12, a camera 13, a storage unit 14, a position detection unit 15, an operation unit 16, and a terminal control unit 20.

As described above, the display unit 11 displays the operation screen, information obtained by decoding the information code, and the like. The terminal communication unit 12 directly communicates wirelessly with the access point 40. Further, the terminal communication unit 12 communicates with the management server 30 via the access point 40. Further, the terminal communication unit 12 can perform wireless communication with other devices such as the management server 30 by using wide area communication.

The camera 13 is for photographing the information code. The mobile terminal 10 may be provided with lighting in order to facilitate shooting of the information code. The storage unit 14 is a non-volatile memory such as a flash memory. The storage unit 14 can store a program executed by the terminal control unit 20. The program stored in the storage unit 14 includes an application program (hereinafter, simply an application). An application is a program that runs on an operating system. A plurality of applications can be stored in the storage unit 14.

The position detection unit 15 detects the current position of the mobile terminal 10. The specific configuration of the position detection unit 15 is, for example, a configuration including a GNSS receiver. The GNSS receiver receives a navigation signal transmitted by a navigation satellite provided in the GNSS (Global Navigation Satellite System). The position detection unit 15 sequentially detects the current position based on the navigation signal received by the GNSS receiver.

The operation unit 16 is a touch panel or the like superimposed on the display surface of the display unit 11, and is operated when the user inputs various information to the mobile terminal 10. A part or all of the operation unit 16 may be a mechanical key.

The terminal control unit 20 can be realized by a computer including a processor, a non-volatile memory, RAM, an I / O, a bus line connecting these configurations, and the like. The terminal control unit 20 is communicably connected to the display unit 11, the terminal communication unit 12, the camera 13, the storage unit 14, the position detection unit 15, and the operation unit 16 and controls them.

The non-volatile memory stores a program for operating a general-purpose computer as a terminal control unit 20. The processor executes a program stored in the non-volatile memory or the storage unit 14 included in the terminal control unit 20 while utilizing the temporary storage function of the RAM. When the processor executes these programs, the terminal control unit 20 operates as a read processing unit 21, a terminal management unit 22, and a security-related unit 23. Performing these actions means that the method corresponding to the program is performed.

The reading processing unit 21 acquires image data representing an image taken by the camera 13, analyzes the image data, and decodes a code stored in an information code included in the image.

The terminal management unit 22 manages the mobile terminal 10 in various ways. For example, the terminal management unit 22 performs position management of the mobile terminal 10, kitting processing, transmission / reception of business data to / from the management server 30, and the like.

The security-related unit 23 is a part that executes a function for protecting the mobile terminal 10, and includes a state acquisition unit 24, a security state determination unit 25, and a fraud suppression process execution unit 26. Although the security-related unit 23 is shown separately from the terminal management unit 22 in FIG. 1, the security-related unit 23 may be a part of the terminal management unit 22.

The state acquisition unit 24 acquires the state of the mobile terminal 10. The state of the mobile terminal 10 acquired here is a state necessary for determining whether or not a security risk described below has occurred. The specific state acquired by the state acquisition unit 24 is, for example, the position of the mobile terminal 10, the login history to the mobile terminal 10, the IP address of the external device accessing the mobile terminal 10, the running application, and communication permission. Includes internal communication devices that have been logged in. The internal communication device means an internal device and a peripheral device of the mobile terminal 10 and is a device capable of transmitting data. For example, memory cards and cable-connected storage devices are included in internal communication devices. The terminal communication unit 12 is also an example of an internal device capable of transmitting data.

The security state determination unit 25 sequentially determines whether or not the state of the mobile terminal 10 acquired by the state acquisition unit 24 is a security risk occurrence state. The security risk occurrence state is a state in which a problem may occur regarding the security of the mobile terminal 10.

FIG. 3 shows an example of security risk. FIG. 3 shows "terminal has gone out of the specified range", "illegal login", "unintentional external access", "illegal application activation", and "permission of unauthorized device" as security risks.

"The terminal has gone out of the designated range" means that the position of the mobile terminal 10 is outside the preset designated range. The mobile terminal 10 is for business use, and the range of use may be limited to a certain range such as a store or a factory. If the mobile terminal 10 whose range of use is limited is outside the specified range, it may have been stolen. Therefore, "the terminal goes out of the specified range" is an example of a security risk.

"Unauthorized login" means that there was a login by a non-legitimate user or machine, or an attempt was made to log in by a non-legitimate user or machine. Various methods can be set as the method for determining that there has been an unauthorized login. For example, if there are a certain number of login authentication failures within a certain period of time, it can be assumed that there is an unauthorized login. In addition, if there is login authentication outside the specified range, it can be regarded as an unauthorized login.

"Unintentional external access" means that an attempt was made to communicate with a preset unauthorized access destination. Alternatively, an attempt to communicate with a destination other than the preset permitted access destination may be regarded as "unintentional external access". "Unauthorized application startup" means that a non-predetermined permitted application has been started or has been instructed to start. "Allow unauthorized devices" means that data transmission is permitted to a device that prohibits data transmission among a plurality of internal communication devices.

When the security state determination unit 25 of the present embodiment determines that a security risk has occurred, a risk including a notification indicating that the security risk has occurred and a notification indicating the state of the mobile terminal 10 regarding security. The occurrence notification is transmitted from the terminal communication unit 12 to the management server 30. In addition, when the security status determination unit 25 determines that the security risk occurrence status has disappeared after transmitting the risk occurrence notification, the security risk occurrence status has disappeared and the risk resolution notification including the status of the mobile terminal 10 has been eliminated. Is transmitted from the terminal communication unit 12 to the management server 30.

The explanation is returned to FIG. The fraud suppression process execution unit 26 executes the fraud suppression process when the security state determination unit 25 determines that a security risk has occurred. In the following, fraud suppression processing will be referred to as a security action. The security action is a process of restricting access to data stored in the mobile terminal 10 in order to suppress unauthorized use of the mobile terminal 10.

As shown in FIG. 3, there are a plurality of types of specific security risks. Therefore, as also shown in FIG. 3, the security action is also determined according to the specific security risk. The plurality of security actions shown in FIG. 3 are candidate processes to be executed according to a specific security risk. In the present embodiment, the correspondence relationship between the security risk and the security action shown in FIG. 3 is not set in the mobile terminal 10, but is referred to by the administrator who operates the management server 30. In the present embodiment, a specific security action is instructed from the management server 30 to the mobile terminal 10. An embodiment in which this correspondence is set in the mobile terminal 10 will also be described later.

Next, the contents of the security action shown in FIG. 3 will be described. The "terminal position search" is a process of acquiring the current position of the mobile terminal 10 from the position detection unit 15 and transmitting the current position to the management server 30. The "operation guard" is to put the mobile terminal 10 in a screen lock state that does not accept knowledge authentication. However, this operation guard can be released by an instruction from the management server 30. Knowledge authentication includes password authentication, pattern authentication, image authentication, and the like.

The "communication guard" is a communication prohibition process that prohibits communication with an external communication device other than the management server 30. The "application forced termination" is a process of forcibly terminating the running application except for the application for managing the mobile terminal 10 by the management server 30. The application for the management server 30 to manage the mobile terminal 10 includes an application for operating the terminal control unit 20 as the terminal management unit 22. "Device prohibition" is prohibition of data transmission to the internal communication device of the mobile terminal 10.

[Configuration of management server 30]
Next, the configuration of the management server 30 will be described. FIG. 4 shows the configuration of the management server 30 in a block diagram. The management server 30 includes a server communication unit 31, a display unit 32, a storage unit 33, an operation unit 35, and a server control unit 36. The management server 30 can be realized by, for example, a general personal computer.

The server communication unit 31 wirelessly communicates with the terminal communication unit 12 included in the mobile terminal 10 via the access point 40. The server communication unit 31 may wirelessly communicate with the mobile terminal 10 by wide area communication. The display unit 32 displays an operation screen when a person who operates the management server 30 (hereinafter referred to as an administrator) operates the management server 30, a security risk transmitted from the mobile terminal 10, and the like.

The storage unit 33 includes a non-volatile storage medium. The non-volatile storage medium is a flash memory, a hard disk, or the like. A program executed by the server control unit 36 is stored in the storage medium. One of the stored programs is the terminal management program 34. The terminal management program 34 is a program for the management server 30 to execute various managements on the mobile terminal 10 in cooperation with the terminal management unit 22 of the mobile terminal 10. The operation unit 35 is a mechanical keyboard, a software keyboard, or the like, and is operated when the administrator inputs various information to the management server 30.

The server control unit 36 is configured to include a processor, a non-volatile memory, RAM, an I / O, a bus line connecting these configurations, and the like. The server control unit 36 is communicably connected to the server communication unit 31, the display unit 32, the storage unit 33, and the operation unit 35, and controls these.

The processor included in the server control unit 36 operates as an execution process determination unit 37 and an end determination unit 38 by executing the terminal management program 34 stored in the storage unit 33 while using the temporary storage function of the RAM.

When the risk occurrence notification transmitted from the mobile terminal 10 is acquired, the execution process determination unit 37 determines the process to be executed as the fraud suppression process based on the risk occurrence notification. Then, a process execution instruction including the content of the determined process is transmitted from the server communication unit 31 to the mobile terminal 10.

When the end determination unit 38 obtains the risk elimination notification, it determines whether or not the security risk occurrence state has been eliminated based on the risk elimination notification. This judgment may be substantially made by the administrator. When the administrator makes a substantive judgment, the termination judgment unit 38 displays the state of the mobile terminal 10 in the risk elimination state included in the risk elimination notification on the display unit 32, and then from the operation unit 35. Based on the input signal, it is determined whether or not the risk occurrence state has been resolved.

When a signal indicating that the security risk occurrence state has been determined is input from the operation unit 35, the termination determination unit 38 determines that the security risk occurrence state has been resolved. When a signal indicating that it is determined that the security risk occurrence state has not been resolved is input from the operation unit 35, the termination determination unit 38 resolves the security risk occurrence status even if the risk resolution notification is received. I do not judge.

When it can be determined that the security risk occurrence state has been resolved, the termination determination unit 38 transmits an termination instruction to the mobile terminal 10. The end instruction is an instruction meaning to end the security action.

[Flow of processing related to protection of data stored in mobile terminal 10]
Next, the flow of processing executed by the terminal control unit 20 and the server control unit 36 regarding the protection of the data stored in the mobile terminal 10 will be described with reference to the flowcharts shown in FIGS. 5 to 8. In FIGS. 5 to 8, SS is a process executed by the security-related unit 23, ST is a process executed by the terminal management unit 22, and SM is a process executed by the server control unit 36 of the management server 30. ..

First, SS1 shown in FIG. 5 will be described first. SS1 is a process executed by the state acquisition unit 24. The state acquisition unit 24 sequentially executes SS1 in a state where the security risk monitoring condition is satisfied. The security risk monitoring condition is, for example, the condition that the power is turned on. In SS1, the state of the mobile terminal 10 is acquired.

The security status determination unit 25 executes SS2 and SS3. In SS2, it is determined whether or not a security risk has occurred based on the state acquired in SS1. If the judgment result of SS2 is NO, the process returns to SS1, and if the judgment result of SS2 is YES, the process proceeds to SS3. SS3 notifies the terminal management unit 22 that a security risk has occurred.

The terminal management unit 22 executes ST1 after receiving this notification. In ST1, the current position of the mobile terminal 10 is acquired from the position detection unit 15. In the following ST2, the risk occurrence notification is transmitted from the terminal communication unit 12 to the management server 30. As described above, the risk occurrence notification includes a notification indicating that a security risk has occurred and a notification indicating the status of the mobile terminal 10 regarding security.

When the server control unit 36 of the management server 30 acquires the risk occurrence notification via the server communication unit 31, the server control unit 36 executes SM1 or less. The execution processing determination unit 37 executes the SM1 to SM4 shown in FIG.

The SM1 displays on the display unit 32 what kind of security risk is occurring in the mobile terminal 10 based on the acquired risk occurrence notification.

The administrator inputs a security action to be executed by the mobile terminal 10 to the management server 30 using the operation unit 35 based on the correspondence as shown in FIG. The SM2 acquires a signal indicating a security action input by the administrator.

Here, the correspondence relationship shown in FIG. 3 will be described. Security risk "Terminal location search" is indispensable as a security action for "the terminal has gone out of the specified range". This is because when the mobile terminal 10 goes out of the designated range, it is necessary to confirm whether or not the mobile terminal 10 has returned to the designated range. Other security actions are "enabled". "Valid" means that it may be executed as appropriate according to the state of the mobile terminal 10.

"Operation guard" is indispensable for "illegal login". Since the operation guard is a screen lock that does not accept knowledge authentication, even if a third party acquires the mobile terminal 10, if this operation guard is executed, unauthorized login can be suppressed. "Communication guard" is indispensable for "unintentional external access". Since the communication guard makes it impossible to communicate with an external communication device other than the management server 30, it is possible to suppress unintended external access. "Forced termination of application" is mandatory for "Launching unauthorized application". Except for the application for managing the mobile terminal 10 by the management server 30, if the running application is forcibly terminated, the application is illegally executed and the application suppresses the illegal processing. can. "Device prohibition" is mandatory for "permitting unauthorized devices". By prohibiting data transmission to the internal communication device of the mobile terminal 10, it is possible to prevent unauthorized data leakage and inflow of unauthorized data through the internal device.

In SM3, it is determined whether or not the process execution instruction can be acquired. It is conceivable that the administrator looks at the display of the display unit 32 and determines that it is not necessary to execute any security action. The administrator who determines that it is not necessary to execute the security action inputs from the operation unit 35 that it is not necessary to execute the security action, or even if the security risk is displayed on the display unit 32, nothing is performed in the operation unit. Do not operate 35. In these cases, the SM determination result is NO. If the determination result of SM3 is NO, the process shown in FIG. 5 is terminated. On the other hand, if the determination result of SM3 is YES, the process proceeds to SM4.

The SM4 transmits a process execution instruction to the mobile terminal 10. The process execution instruction instructs the execution of the security action acquired by SM2.

When the terminal communication unit 12 of the mobile terminal 10 receives this processing execution instruction, the security-related unit 23 executes SS4. The SS4 is executed by the fraud suppression processing execution unit 26. FIG. 6 shows an example of the processing executed by SS4. The process shown in FIG. 6 is a process when an operation guard, a communication guard, a forced termination of an application, and a device prohibition are instructed as security actions.

In SS41, the dedicated application is started and the operation guard described above is executed. In SS42, one running application is confirmed. The SS43 determines whether or not the application confirmed by the SS42 is other than the terminal management application. The terminal management application is an application that manages the mobile terminal 10, and includes an application that operates the terminal control unit 20 as the terminal management unit 22 and an application that is started by SS41. If the determination result of SS43 is YES, the process proceeds to SS44.

In SS44, the application confirmed in SS42 is forcibly terminated. If SS44 is executed and if the determination result of SS43 is NO, the process proceeds to SS45.

The SS45 determines whether or not an application other than the terminal management application is running. If the judgment result of SS45 is YES, the process returns to SS42, and if NO, the process proceeds to SS46.

In SS46, the communication setting is set to prohibit communication with an external communication device other than the management server 30. Subsequent SS47 prohibits data transmission to the internal communication device.

After executing the security action, the terminal management unit 22 and the security-related unit 23 execute the process shown in FIG. 7 in order to cancel the curity action. SS11 and SS12 are the same as SS1 and SS2. In SS11, the state of the mobile terminal 10 is acquired, and in SS12, it is determined whether or not the security risk has disappeared based on the state acquired in SS11. If it is determined that there is a security risk, it returns to SS11. On the other hand, if it is determined that the security risk has disappeared, the process proceeds to SS13. SS13 notifies the terminal management unit 22 that the security risk has disappeared.

The terminal management unit 22 executes ST11 after receiving this notification. In ST11, the current position of the mobile terminal 10 is acquired from the position detection unit 15. In the following ST12, the risk elimination notification is transmitted from the terminal communication unit 12 to the management server 30. The risk elimination notification includes a notification indicating that the security risk has not occurred and the status of the mobile terminal 10 regarding security.

When ST12 is executed, the end determination unit 38 of the management server 30 executes SM11 in FIG. SM12 to SM16 are also processes executed by the end determination unit 38. In SM11, the risk elimination notification is acquired from the server communication unit 31.

In the following SM12, the state of the mobile terminal 10 is displayed on the display unit 32 based on the risk elimination notification acquired by the SM11. The administrator looks at the content displayed on the display unit 32 and determines whether or not the security risk has disappeared. Then, when it is determined that the security risk has disappeared, an end instruction is input from the operation unit 35. However, if it is determined that the security risk has not disappeared by looking at the contents displayed on the display unit 32, the administrator does not input the end instruction or inputs the instruction that the security action is not ended. .. In SM13, the instruction input by the administrator is acquired.

The SM14 determines whether or not the instruction acquired by the SM13 is an end instruction. If the administrator's instruction is not an end instruction, the determination result of SM14 becomes NO. If the determination result of SM14 is NO, the process shown in FIG. 8 is terminated. Even if the administrator does not input anything, the determination result of SM14 is set to NO.

If the determination result of SM14 is YES, the process proceeds to SM15. The SM15 acquires a password, which is an example of authentication information, includes the password in the termination instruction, and transmits the password to the mobile terminal 10. The password is obtained by requesting the administrator to input the password in SM15.

When the terminal communication unit 12 of the mobile terminal 10 receives this end instruction, the fraud suppression processing execution unit 26 executes SS14 to SS17. In SS14, the end instruction is acquired from the terminal communication unit 12. In SS15, it is determined whether or not the password included in the termination instruction matches the password set in the mobile terminal 10.

If the passwords match, proceed to SS16. SS16 terminates the security action being executed. Then proceed to SS17. On the other hand, if it is determined by the judgment of SS15 that the passwords do not match, the process proceeds to SS17 without executing SS16. SS17 notifies the terminal management unit 22 whether or not the security action has been completed.

After acquiring the notification, the terminal management unit 22 generates an instruction acquisition result in ST13. When the security-related unit 23 executes SS16, the instruction acquisition result includes a content meaning that the security action has been completed. When the security-related unit 23 does not execute SS16, the instruction acquisition result includes a content meaning that the security action is ongoing. In ST13, the generated instruction acquisition result is further transmitted to the management server 30.

When the server communication unit 31 of the management server 30 receives this instruction acquisition result, the end determination unit 38 determines in the SM16 whether or not the security action has ended based on the instruction acquisition result. If the determination result of SM16 is NO, SM15 is executed again, and if the determination result of SM16 is YES, the process shown in FIG. 8 is terminated.

[Effect of Embodiment]
In the mobile terminal management system 1 of the present embodiment described above, when it is determined that the state of the mobile terminal 10 is a security risk occurrence state (SS2: YES), a security action is executed (SS4). The security action is a process for suppressing unauthorized use of the mobile terminal 10, and is a process determined based on the state of the mobile terminal 10 as illustrated in FIG. Therefore, by executing the security action, it is possible to suppress unauthorized use of the mobile terminal 10 according to the specific state of the mobile terminal 10.

For example, if an operation guard is executed as a security action, even if a third party acquires the mobile terminal 10, unauthorized login can be suppressed. In addition, if communication guard is executed as a security action, unintended external access can be suppressed. In addition, if the application is forcibly terminated as a security action, it is possible to prevent the application from being executed illegally and the application from performing illegal processing. Further, if the internal communication device prohibition is executed as a security action, it is possible to prevent unauthorized data leakage and inflow of unauthorized data through the internal device.

The security action is a process of restricting access to data stored in the mobile terminal 10. Therefore, even if the data is left in the mobile terminal 10, unauthorized use of the mobile terminal 10 can be suppressed. Then, since the data remains in the mobile terminal 10, when the security risk of the mobile terminal 10 disappears, such as when the mobile terminal 10 returns, it becomes easy to return the mobile terminal 10 to the previous operation again.

Further, in the mobile terminal management system 1 of the present embodiment, when the mobile terminal 10 determines that a security risk has occurred (SS2: YES), the mobile terminal 10 transmits a risk occurrence notification to the management server 30 (ST2). Then, based on the risk occurrence notification, the management server 30 determines a specific security action (SM2), and instructs the mobile terminal 10 of the determined security action (SM4). In this way, since the management server 30 determines a specific security action, a more appropriate security action according to the security risk can be performed in the mobile terminal 10 as compared with the case where the security action to be executed is set in advance. Can be executed.

Further, in the mobile terminal management system 1 of the present embodiment, when the mobile terminal 10 determines that the security risk has disappeared (SS12: YES), the mobile terminal 10 transmits a risk elimination notification to the management server 30 (ST12). The management server 30 confirms whether the security risk has disappeared, and if it is determined that the security risk has disappeared, the management server 30 sends an instruction to end the security action to the mobile terminal 10. (SM15). If the mobile terminal 10 does not receive this termination instruction, the mobile terminal 10 does not terminate the security action.

In this way, since the mobile terminal 10 and the management server 30 determine whether or not the security risk has disappeared, the security action can be terminated after accurately determining whether or not the security risk has disappeared.

Further, when the management server 30 acquires the risk elimination notification, the management server 30 displays the status of the mobile terminal 10 on the display unit 32 based on the risk elimination notification. Then, the administrator determines whether the security risk has been eliminated in the mobile terminal 10 based on the display content displayed on the display unit 32. By determining whether the security risk of the mobile terminal 10 has been eliminated, it is possible to determine whether the security risk has been eliminated in consideration of the states of various mobile terminals 10 that cannot be automatically determined. ..

When the management server 30 obtains the end instruction (SM14: YES), the management server 30 requests the administrator to input the password, and sends the end instruction including the password (SM15). After acquiring the termination instruction, the fraud suppression processing execution unit 26 of the mobile terminal 10 terminates the security action being executed when the passwords match, that is, when the authentication is established (SS16). As a result, it is possible to prevent the management server 30 from being illegally operated and the security action being illegally terminated.

<Second Embodiment>
Next, the second embodiment will be described. In the following description of the second embodiment, the element having the same number as the code used so far is the same as the element having the same code in the previous embodiments, unless otherwise specified. Further, when only a part of the configuration is described, the embodiment described above can be applied to the other parts of the configuration.

In the second embodiment, the correspondence relationship between the security risk and the security action illustrated in FIG. 3 is set in advance and stored in the storage unit 14 of the mobile terminal 10. Then, the security-related unit 23 of the mobile terminal 10, the terminal management unit 22, and the server control unit 36 of the management server 30 execute the process shown in FIG. 9 instead of the process shown in FIG.

In FIG. 9, SS21 and SS22 are the same as SS1 and SS2 in FIG. 5, and acquire the state of the mobile terminal 10 to determine whether or not a security risk has occurred. If it is determined that a security risk has occurred, proceed to SS23.

In SS23, it is determined whether or not the security action has been set. This determination is to determine whether or not the correspondence between the security risk and the security action illustrated in FIG. 3 is stored in the mobile terminal 10. If the determination result of SS23 is NO, the process of FIG. 9 is terminated. On the other hand, if the determination result of SS23 is YES, the process proceeds to SS24.

The SS 24 executes a security action determined by the correspondence stored in the storage unit 14 and the security risk determined to have occurred in the SS 22. In the following SS25, the terminal management unit 22 is notified that the security action has been executed.

The terminal management unit 22 executes ST21 after receiving this notification. In ST21, the current position of the mobile terminal 10 is acquired from the position detection unit 15. In the following ST22, the security action execution notification, which is the fraud suppression processing execution notification, is transmitted from the terminal communication unit 12 to the management server 30. The security action execution notification is a notification including the state of the mobile terminal 10 and the content of the executed security action.

The execution process determination unit 37 of the server control unit 36 of the management server 30 executes the SM21 when the security action execution notification is acquired via the server communication unit 31. Based on the acquired security action execution notification, the SM 21 displays on the display unit 32 the state of the mobile terminal 10 and what kind of security action is being executed by the mobile terminal 10.

After the mobile terminal 10 executes the security action, the processes shown in FIGS. 7 and 8 are also executed in the second embodiment in order to terminate the executed security action.

[Summary of the second embodiment]
In this second embodiment, the correspondence relationship between the security risk (that is, the state of the mobile terminal 10) occurring in the mobile terminal 10 and the security action is stored. Then, when it is determined that a security risk has occurred (SS22: YES), a security action determined by using the corresponding relationship is executed (SS24). By doing so, security actions can be executed quickly.

Further, after executing the security action, the mobile terminal 10 transmits a security action execution notification including the state of the mobile terminal 10 and the executed security action to the management server 30 (ST22). Therefore, the management server 30 can confirm that the mobile terminal 10 is in a security risk occurrence state and whether the executed security action is appropriate.

Although the embodiments have been described above, the disclosed technology is not limited to the above-described embodiment, and the following modifications are also included in the disclosed scope, and further, within the scope not deviating from the gist other than the following. It can be changed in various ways.

<Modification 1>
In the embodiment, the mobile terminal 10 includes a security state determination unit 25. However, if the state of the mobile terminal 10 is transmitted to the management server 30, the management server 30 can determine whether or not the mobile terminal 10 is in a security risk occurrence state. Therefore, the management server 30 may include the security state determination unit 25.

<Modification 2>
In the embodiment, the management server 30 requests the administrator for the password when transmitting the termination instruction. However, in consideration of the case where the management server 30 is less likely to be operated illegally, the termination instruction may be transmitted without requesting the administrator for the password. Further, instead of requesting a password, other authentication information such as biometric information may be requested.

Further, the management server 30 may automatically confirm whether or not the security risk has been resolved based on the risk resolution notification.

1: Mobile terminal management system 10: Mobile terminal 11: Display unit 12: Terminal communication unit 13: Camera 14: Storage unit 15: Position detection unit 16: Operation unit 20: Terminal control unit 21: Read processing unit 22: Terminal management unit 23: Security-related unit 24: Status acquisition unit 25: Security status determination unit 26: Fraud suppression processing execution unit 30: Management server 31: Server communication unit 32: Display unit 33: Storage unit 34: Terminal management program 35: Operation unit 36 : Server control unit 37: Execution processing determination unit 38: Termination judgment unit 40: Access point 50: Public communication line network

Claims (12)

A mobile terminal management system including a mobile terminal (10) and a management server (30) capable of communicating with the mobile terminal.
The mobile terminal includes a state acquisition unit (24) for acquiring the state of the mobile terminal.
A security state in which either the mobile terminal or the management server determines whether the state of the mobile terminal acquired by the state acquisition unit is a security risk occurrence state in which a problem may occur with respect to the security of the mobile terminal. Equipped with a judgment unit (25)
The mobile terminal is stored in the mobile terminal in order to suppress unauthorized use of the mobile terminal when the security state determination unit determines that the state of the mobile terminal is the security risk occurrence state. A mobile terminal including a fraud suppression processing execution unit (26) that executes fraud suppression processing that is a processing that restricts access to data and is a processing that is determined based on the state of the mobile terminal from a plurality of candidate processes. Management system. The mobile terminal management system according to claim 1.
A mobile terminal management system in which the fraud suppression process includes a screen lock that does not accept knowledge authentication and can be released by an instruction from the management server. The mobile terminal management system according to claim 1 or 2.
A mobile terminal management system in which the fraud suppression process includes a communication prohibition process for a server other than the management server. The mobile terminal management system according to any one of claims 1 to 3.
A mobile terminal management system, wherein the fraud suppression process includes a process of terminating an application program that is running, excluding an application program for the management server to manage the mobile terminal. The mobile terminal management system according to any one of claims 1 to 4.
A mobile terminal management system in which the fraud suppression process includes prohibition of data transmission to the internal communication device of the mobile terminal. The mobile terminal management system according to any one of claims 1 to 5.
The mobile terminal is
The security status determination unit and
It is equipped with a terminal communication unit (12) that communicates with the management server.
When the security state determination unit determines that the security risk has occurred, the risk occurrence notification includes a notification indicating that the security risk has occurred and a notification indicating the state of the mobile terminal regarding security. Is transmitted from the terminal communication unit to the management server,
The management server
The server communication unit (31) that communicates with the mobile terminal and
When the risk occurrence notification transmitted by the mobile terminal is acquired via the server communication unit, the processing to be executed as the fraud suppression processing is determined based on the risk occurrence notification, and the determined processing is performed. It is provided with an execution process determination unit (37) for transmitting a process execution instruction including contents from the server communication unit to the mobile terminal.
When the fraud suppression process execution unit acquires the process execution instruction transmitted from the management server via the terminal communication unit, the fraud suppression process execution unit executes the fraud suppression process based on the acquired process execution instruction. Mobile terminal management system. The mobile terminal management system according to any one of claims 1 to 5.
The mobile terminal is
The security status determination unit and
The mobile terminal includes a storage unit (14) that stores a correspondence relationship between the state of the mobile terminal and a specific fraud suppression process.
The security state determination unit is a mobile terminal management system that executes the fraud suppression process determined based on the correspondence relationship and the state of the mobile terminal acquired by the state acquisition unit. The mobile terminal management system according to claim 7.
When the fraud suppression process is executed, the fraud suppression process execution unit transmits a fraud suppression process execution notification including the state of the mobile terminal and the content of the executed fraud suppression process to the management server. Terminal management system. The mobile terminal management system according to any one of claims 1 to 5.
The mobile terminal is
The security status determination unit and
It is equipped with a terminal communication unit (12) that communicates with the management server.
When the security state determination unit determines that the state of the mobile terminal is no longer in the security risk occurrence state, the security state determination unit sends a risk resolution notification including the security risk occurrence state and the state of the mobile terminal. It is transmitted from the terminal communication unit to the management server, and is transmitted.
The management server
The server communication unit (31) that communicates with the mobile terminal and
When the risk elimination notice transmitted by the mobile terminal is acquired via the server communication unit, it is determined based on the risk resolution notification whether or not the security risk occurrence state has been resolved, and the security risk is determined. When it can be determined that the occurrence state has been resolved, an end determination unit (38) for transmitting an end instruction instructing the end of the fraud suppression process from the server communication unit to the mobile terminal is provided.
The fraud suppression process execution unit is a mobile terminal management system that terminates the fraud suppression process being executed based on the acquisition of the end instruction via the terminal communication unit. The mobile terminal management system according to claim 9.
The management server
A display unit (32) that displays information to the administrator who operates the management server, and
The operation unit (35) operated by the administrator for inputting an instruction is provided.
When the end determination unit acquires the risk resolution notification, whether the status of the mobile terminal is displayed on the display unit and the security risk occurrence status by the administrator input from the operation unit has been resolved. A mobile terminal management system that determines whether or not the security risk occurrence state has been resolved based on the determination result. The mobile terminal management system according to claim 10.
The end determination unit requests the administrator to input the authentication information, and sends the end instruction including the authentication information input by the administrator.
The fraud suppression process execution unit is a mobile terminal management system that terminates the fraud suppression process being executed based on the establishment of authentication for the authentication information included in the end instruction. It ’s a mobile terminal,
The state acquisition unit (24) for acquiring the state of the mobile terminal and
When the state of the mobile terminal is a security risk occurrence state in which a problem may occur with respect to the security of the mobile terminal, the data stored in the mobile terminal in order to suppress unauthorized use of the mobile terminal A mobile terminal including a fraud suppression processing execution unit (26) that executes fraud suppression processing that is a process of restricting access and is a process determined from a plurality of candidate processes based on the state of the mobile terminal.

Images