JP4065921B1 - Mobile device management system - Google Patents

Abstract

When a mobile device is used to provide various services, even if the mobile device is lost or stolen, unauthorized use by a malicious third party can be more reliably prevented. Ensure sufficient security and minimize damage to users.
A first position notified by a first notification means of a portable device and a second notification means of a portable position detecting device when the portable device accesses the service providing means. When the distance from the second position notified by 255 is within a predetermined range, provision of a predetermined service by the service providing means 61 and 71 is permitted, while when the distance is outside the predetermined range, Providing a predetermined service is prohibited, and a predetermined process is executed on personal information existing in the portable device.
[Selection] Figure 1

Description

  The present invention provides various services (for example, an electronic money function, a credit card function, a debit card function, an electronic periodicity) by various portable devices such as a mobile phone (portable device), a PDA (Personal Digital Assistant), and an IC (Integrated Circuit) card. The present invention relates to a portable device management technique suitable for use in providing a user with a ticket function, an electronic ticket function, a financial institution transaction function, an electronic commerce function, an electronic passport function, and the like.

  In recent years, mobile phones are equipped with non-contact ICs (Integrated Circuits), and by using the non-contact ICs, electronic money function, credit card function, debit card function, electronic commuter pass function, electronic ticket function, financial Institutional transaction functions, electronic commerce functions, electronic passport functions, etc. can be provided. As a result, it is possible to provide users with various functions and services in addition to the conventional functions such as telephone, e-mail, and internet browsing using a mobile phone.

  However, if the cellular phone is provided with various functions as described above, the damage caused when the cellular phone is lost or stolen and used illegally becomes extremely large. End up.

  Therefore, for example, in Patent Document 1 below, in order to ensure the security of a mobile phone having a debit card function, the current position detected by a position sensor provided in the mobile phone is compared with the position of a pre-registered location. A technique for enabling the debit card function when these positions match is disclosed. As a result, the places where the debit card function added to the mobile phone can be used are restricted, and even if the mobile phone is lost or stolen, unauthorized use by others can be prevented.

Further, in Patent Document 2 below, it is determined and authenticated whether or not the user is a valid user based on the relationship between the personal identification number of the card possessed by the user and the location information of the portable terminal possessed by the user. Technology is disclosed. For example, when a user inserts a card such as a cash card into an authentication device such as an ATM (Automatic Teller Machine) and inputs a personal identification number, authentication based on the personal identification number is performed. When the user is authenticated by the personal identification number, the user accesses a portable terminal possessed by the user and requests location information of the portable terminal. Then, when the position information (latitude / longitude information) of the mobile terminal measured by the GPS (Global Positioning System) function or the like is transmitted from the mobile terminal to the authentication device, the distance between the authentication device and the mobile terminal is calculated, When the distance is within the authorized distance, that is, when the user who owns the mobile terminal is near the authentication device, it is possible to use services such as bank account inquiry, deposit, withdrawal, etc., while within the authorized distance. If not, a message indicating that authentication is rejected is displayed and the process is terminated. This prevents unauthorized use of the card due to theft or counterfeiting and improves security.
JP 2003-242428 A JP 2005-316524 A

According to the technique disclosed in Patent Document 1, the place where the debit card function added to the mobile phone can be used is limited, and according to the technique disclosed in Patent Document 2, when using the authentication device, If the user does not have a specific mobile terminal, the user cannot receive the service, and the debit card function and the unauthorized use of the card in the mobile phone can be prevented.

  However, as described above, in recent years, functions and services provided by mobile devices such as mobile phones with built-in contactless ICs and contactless IC cards are extremely diverse, and mobile phones and contactless IC cards are lost. Damage caused by unauthorized use by being stolen or stolen is extremely large, and it is difficult to say that the technology disclosed in Patent Documents 1 and 2 alone can ensure sufficient security. For this reason, when a user receives provision of various services using a mobile device such as a mobile phone, a PDA, an IC card, etc., even if the mobile device is lost or stolen, it is malicious. It is desired to be able to prevent unauthorized use by the three parties more reliably, to ensure sufficient security and to minimize damage to the user.

  In addition, a general mobile phone device is provided with a mail transmission / reception function, and a large amount of various personal information such as contents of transmitted / received mails and mail addresses are accumulated. In addition, an Internet connection function is also provided, and personal information such as a web browsing history, an address input on the web, a name, an ID, and a password is also stored in the mobile phone device. For this reason, even if the mobile phone device is lost or stolen, unauthorized use by a malicious third party can be prevented more reliably, ensuring sufficient security and minimizing damage to the user. It is desired to be limited to the limit.

  The present invention was devised in view of such a situation, and when receiving various services using a portable device, the portable device is malicious even if it is lost or stolen. It aims to prevent unauthorized use by the three parties more reliably, to ensure sufficient security, and to minimize damage to the user.

In order to achieve the above object, the present invention is configured as follows.
(1) The invention according to claim 1 is a database in which information relating to a combination of a portable device and a portable position detection device carried by the same user is held, and a portable by the same user held in the database. Management means for managing the portable device based on information of the combination of the portable device and the portable position detection device, and first position detection means carried by the user and detecting the current position as the first position, And a portable device having a transmitting / receiving means for notifying the management means of the first position and identification information and receiving an instruction from the management means, and detecting the current position as the second position carried by the user. Second position detection means, the biometric sensor mounted on a part of the user's body detects the biometric data value from the user An operating state detecting means for detecting whether or not the moving operation is being performed, a detection result indicating whether the detecting operation is being performed, the second position and identification information are notified to the managing means, and an instruction from the managing means is given A transmission / reception means for receiving, and a biometric sensor for detecting a biometric data value of the user, and a portable position detection device separate from the portable device that should be always carried by the user. A distance between the first position notified by the transmission / reception means of the portable device and the second position notified by the transmission / reception means of the portable position detection device is outside a predetermined range; or When at least one of the cases where the operation state detection means detects that the biosensor is not performing the detection operation, the management means The portable type corresponding to the combination by referring to the combination of the portable device and the portable position detecting device by the database based on the identification information and executing a predetermined process on the portable device. If the portable position detection device receives a response of approval or does not receive a response of non-approval, the personal information existing in the mobile device corresponding to the combination is displayed. A portable device management system characterized in that predetermined processing is executed.

  (2) In the invention according to claim 2, the management means makes a call with a telephone number to the portable device through a portable telephone line, and establishes a communication state between the portable device and the management means. And means for instructing execution of the requested operation by transmitting a predetermined signal corresponding to the requested operation of the administrator to the portable device with the establishment of the communication state, and An automatic response means for automatically responding to the management means to establish the communication state between the management means and the portable device in response to a call made by the calling means of the management means; And an execution means for receiving the predetermined signal from the operation instruction means of the management means and executing the requested operation in accordance with the predetermined signal in accordance with establishment of a communication state. Function as a means An application program to be realized in the portable device is installed in the portable device before the portable device is supplied to each user, and the requested operation is an operation of collecting information in the portable device and notifying the management means. And the execution unit of the portable device searches for personal information in the data held in the portable device and notifies the management unit of the search result as information on the portable device. Alternatively, at least one of a character string and a characteristic character or characteristic character string that appears characteristically in personal information is a name, date of birth, address, residence, telephone number, e-mail address, title, personal identification information The number of times the feature character or the feature character string appears in the data, and When the result of the search is notified to the management means, and the search result is notified that the portable device holds personal information, the operation instruction means of the management means 2. The portable device management system according to claim 1, wherein erasure is instructed as the requested operation, and the execution unit of the portable device executes a predetermined process on the personal information.

(3) In the invention according to claim 3, the management means makes a call by telephone number to the portable device through a portable telephone line, and establishes a communication state between the portable device and the management means. And means for instructing execution of the requested operation by transmitting a predetermined signal corresponding to the requested operation of the administrator to the portable device with the establishment of the communication state, and An automatic response means for automatically responding to the management means to establish the communication state between the management means and the portable device in response to a call made by the calling means of the management means; And an execution means for receiving the predetermined signal from the operation instruction means of the management means and executing the requested operation in accordance with the predetermined signal in accordance with establishment of a communication state. Function as a means An application program to be realized in the portable device is installed in the portable device before the portable device is supplied to each user, and the requested operation is an operation of collecting information in the portable device and notifying the management means. And the execution means of the portable device searches the personal data in the data held in the portable device and sends the text data of the data to notify the management means of the search result as information in the portable device. Extracting means for extracting, cutting means for cutting out character sections delimited by delimiters from the text data extracted by the extracting means, and a character string in the character section cut out by the cutting means is a preset telephone Determine whether one of the number judgment condition, e-mail address judgment condition, and address judgment condition is satisfied A determination means for determining whether it corresponds to any one of a telephone number, an e-mail address and an address which is a personal information element other than the name, and the determination means determines the telephone number and the e-mail address. , Character determining means for determining whether the number of characters in the character section determined not to correspond to any of the addresses is within a predetermined range and whether the character in the character section is a Chinese character, the character determining means by the character determining means Inappropriate characters or characters that have been set in advance as kanji or character strings that cannot appear in the characters or character strings and names included in the character segments for character segments that are within the specified range and that are determined to be kanji A collating means for judging whether or not the character section includes the inappropriate character or the inappropriate character string by collating with a string; and The number of character sections determined to correspond to any one of a telephone number, an e-mail address, and an address by the determining means, and the matching means determined not to include the inappropriate character or the inappropriate character string The counting means counts the number of character sections respectively, and notifies the management means of the counting result by the counting means as the search result, and the portable device holds personal information as the search result. The operation instruction means of the management means instructs the erasure of the personal information as the requested operation, and the execution means of the portable device performs a predetermined process on the personal information. The mobile device management system according to claim 1, wherein the mobile device management system is executed.

  (4) The portable device according to any one of claims 1 to 3, wherein the predetermined processing is erasure of the personal information in the portable device. It is a management system.

  (5) The invention described in claim 5 is characterized in that the predetermined processing is copying of the personal information in the portable device to the management means and erasing in the portable device. A portable device management system according to claim 3.

  (6) The invention according to claim 6 is characterized in that the predetermined processing is setting or changing a password for the personal information in the portable device. The portable device management system according to claim 1.

  (7) The invention according to claim 7 is characterized in that the predetermined processing is executed after notification from the management device to the portable position detection device. The portable device management system according to claim 1.

  (8) The invention according to claim 8 is that the predetermined processing is executed when a distance between the first position and the second position is out of a predetermined range for a predetermined time or more. The mobile device management system according to claim 1, wherein the mobile device management system is a mobile device management system.

  (9) In such a mobile device management system, the mobile device may be a mobile phone or a card-type device. The portable position detection device may be provided in a wristwatch, or may be provided in a physical condition management portable terminal device having a biometric sensor that detects a biometric data value of the user so as to manage the physical condition of the user. Good.

At this time, as shown in the following items (a1) to (a3), management by the management means, warning means, or authentication means may be provided.
(a1) When the distance is outside the predetermined range, the management unit prohibits the service providing unit from providing the predetermined service.

(a2) When the distance is out of the predetermined range for a predetermined time or longer, a warning means is further provided for notifying a system administrator or the user of a warning.
(a3) The user is authenticated based on authentication information about the user input by the user when the user receives provision of the predetermined service, and the authentication result is stored in the management means. Authentication means for notifying the user, and the management means is a user authentication result indicating that the user is authenticated when the distance is within the predetermined range and the user is authenticated. When notified from the means, the provision of the predetermined service by the service providing means is permitted.

  In particular, when the portable position detection device is provided in the physical condition management portable terminal device, as shown in the following items (a4) to (a7), management by the management means, Various means may be provided.

  (a4) further comprising an operation state detection means for detecting whether or not the biosensor is performing the detection operation of the biometric data value, wherein the management means performs the detection operation by the operation state detection means. When it is detected that the service is not being performed, the provision of the predetermined service by the service providing means is prohibited.

  (a5) In the item (a4), a statistical value of the biological data value detected by the biological sensor before the detection operation is interrupted is calculated as a statistical value before interruption, and after the detection operation is restarted by the biological sensor. Statistical value calculation means for calculating the statistical value of the detected biometric data value as a post-resumption statistical value, and comparing the pre-interruption statistical value calculated by the statistical value calculation means and the post-resumption statistical value, these A statistical value judging means for judging whether or not the statistical value is a statistical value of biometric data values of the same user, wherein the management means is a case where the distance is within the predetermined range, When the statistical value determining means determines that the statistical value before interruption and the statistical value after restart are statistical values of the same user's biometric data values, the predetermined service by the service providing means To allow the provision of the scan.

  (a6) In the item (a5), until the management unit calculates the post-resumption statistical value by the statistical value calculation unit after the detection operation is restarted and obtains a determination result by the statistical value determination unit, Providing the predetermined service by the providing means is prohibited.

  (a7) In the above item (a6), when the management means determines that the statistical value before interruption and the statistical value after restart are not statistical values of biometric data values of the same user by the statistical value determination means The prohibition of the provision of the predetermined service by the service providing means is continued.

  (10) Furthermore, when the portable position detecting device is provided in the physical condition management portable terminal device, various means and functions such as the following items (b1) to (b6) are provided in the physical condition management portable terminal device. May be provided.

  (b1) In the physical condition management portable terminal device, a weather sensor for detecting weather data in the user's atmosphere and a biometric data threshold value for managing the user's physical condition are set in advance for each weather condition. A threshold value table that is stored in the threshold value table, a threshold value reading unit that searches and reads out the biometric data threshold value set for the weather condition corresponding to the weather data detected by the weather sensor, and the threshold value reading unit. A comparison means for comparing the measured biometric data threshold value with the biometric data value detected by the biometric sensor, and a warning to the user when a physical condition abnormality of the user is detected as a result of the comparison by the comparison means It is equipped with a physical condition abnormality warning means that emits.

  (b2) Physical condition abnormality notifying means for notifying a predetermined contact when a physical condition abnormality of the user is detected as a result of comparison by the comparison means on the physical condition management portable terminal device of the item (b1) And an inquiry means for inquiring the user as to whether or not to perform the notification operation by the physical condition abnormality notification means when an operation for stopping the warning operation by the physical condition abnormality warning means is executed by the user within a predetermined time. And an operation to stop the warning operation by the physical condition warning means is not executed by the user for a predetermined time or more, or a reply that the notification operation by the physical condition notification means is executed in response to the inquiry by the inquiry means Control means for controlling the physical condition abnormality notification means so as to cause the physical condition abnormality notification means to perform a notification operation when the user performs the operation. Obtain.

  (b3) In the portable terminal device for physical condition management of the item (b2), when the user refuses to execute the notification operation by the physical condition abnormality notification unit for a predetermined number of times in response to the inquiry by the inquiry unit, the control The means forcibly causes the physical condition abnormality notification means to perform a notification operation.

  (b4) In the physical condition management portable terminal device of the above item (b3), when the operation for stopping the warning operation by the physical condition abnormality warning unit is not executed for a predetermined time or more, and the operation for stopping the warning operation by the physical condition abnormality warning unit Is executed within a predetermined time, and when the user refuses to execute the notification operation by the physical condition abnormality notification means for a predetermined number of times in response to the inquiry by the inquiry means, the physical condition abnormality notification means , Notify the user of the physical condition abnormality of the user to different contacts.

  (b5) In the portable terminal device for physical condition management of the above items (b2) to (b4), the biological data detected by the biological sensor when the physical condition abnormality notification unit notifies the physical condition abnormality of the user Also notify the value.

  (b6) In the portable terminal device for physical condition management of the items (b2) to (b5), the physical condition abnormality notification means is detected by the portable position detection device when notifying the physical condition abnormality of the user. The second position is also notified.

  (11) In such a mobile device management system having a mobile phone function, the request operation is information collection / notification in the terminal, and the execution means of the terminal collects information about the terminal The mobile device may be notified, and at that time, the execution unit of the terminal may notify the mobile device of information related to the terminal using electronic mail, or the operation instruction unit of the mobile device may The terminal may be instructed to perform a request operation according to the notification content from the terminal.

In addition, as information in the terminal that is collected and notified by the execution unit of the terminal, the following items (c1) to (c6) may be mentioned.
(c1) Model information of the terminal or a serial number that can identify the terminal.

(c2) Phonebook registration status of the terminal. Specifically, the registration status includes the number of registrations in the telephone directory or the free space.
(c3) URL (Uniform Resource Locator) information accessed by the terminal.

(c4) The outgoing / incoming history or mail transmission / reception history at the terminal.
(c5) Information on application programs held in the terminal. At this time, when the terminal recognizes that it holds an unnecessary application program registered in advance based on the information related to the application program notified from the terminal, the operation instruction means of the portable device However, it may be instructed to prohibit the activation of the unnecessary application program as the requested operation, and the execution means of the terminal may prohibit the activation of the unnecessary application program.

  (c6) Personal information / customer information / confidential information. At this time, the execution means of the terminal may search for personal information / customer information / confidential information in the data held in the terminal and notify the portable device of the search result. Further, when it is notified as a result of the search that the terminal has personal information / customer information / confidential information, the operation instruction means of the portable device deletes the personal information / customer information / confidential information. May be instructed as the request operation, and the execution means of the terminal may execute deletion of personal information / customer information / confidential information.

  In the item (c6), when searching for personal information / customer information / confidential information in the data, the execution means of the terminal uses the character or character string included in the data and the personal information / customer information / confidential information. Is compared with a character or character string preset as a character or character string that appears characteristically, and counts the number of times that the character character or the character character string appears in the data. You may make it notify this portable apparatus as a search result.

  Further, in the item (c6), when searching for personal information / customer information, the execution unit of the terminal extracts the text data of the data, the delimiter from the text data extracted by the extraction unit Cutout means for cutting out character sections delimited by characters, and a character string in the character section cut out by the cutout means is one of a preset telephone number determination condition, e-mail address determination condition, and address determination condition. Determining means for determining whether or not any one of a telephone number, an e-mail address, and an address, which is a personal information element other than a name, is determined by The number of characters in the character section determined by the means as not corresponding to any of the telephone number, e-mail address, and address is within a predetermined range And character determination means for determining whether or not a character in the same character section is a kanji, and for the character section determined by the character determination means to be in the predetermined range and to be a kanji, the characters included in the character section Or, the character section includes the above-mentioned inappropriate character or inappropriate character string by collating the character string with a Chinese character that cannot appear in the name or an inappropriate character or inappropriate character string preset as the Chinese character string. Collating means for judging whether or not, and the number of character sections determined by the judging means to correspond to any one of a telephone number, an e-mail address, and an address, and the inappropriate character by the collating means Alternatively, it functions as a counting means for counting the number of character sections determined not to contain inappropriate character strings, and the counting result by the counting means is It may be notified to the mobile device as the search result.

According to the present invention, the following effects can be obtained.
(1) According to the portable device management system of the first aspect, for example, when the portable device accesses the service providing means, the first position and the portable position detection device notified by the transmitting / receiving means of the portable device. When the distance from the second position notified by the transmitting / receiving means is within a predetermined range, provision of the predetermined service by the service providing means is permitted, while when the distance is outside the predetermined range, the predetermined Providing services is prohibited. That is, two types of devices to be carried by a user (for example, a portable device such as a mobile phone and a card-type device, a wristwatch having a function as a portable position detection device, and a device such as a portable terminal device for physical condition management) (2 types) of the current position is within the predetermined range, in other words, the predetermined service is provided only when it is possible to determine that the two types of devices are owned and carried by the same person. Is allowed.

  Therefore, even if the portable device is lost or stolen, it is impossible to receive the predetermined service provided by the service providing means unless the portable position detecting device is possessed. Unauthorized use by users can be more reliably prevented, sufficient security can be ensured, and damage to the user can be minimized. When the portable device is a mobile phone or a card-type device (IC card, etc.), a device that is always worn on the user's body, such as a wristwatch or a portable terminal device for physical condition management, has a function as a portable position detection device. As a result, the system of the present invention functions more effectively and contributes to ensuring sufficient security.

According to the portable device management system of the first aspect, for example, when the portable device accesses the service providing means, the first position and the portable position detecting device notified by the transmitting / receiving means of the portable device. When the distance from the second position notified by the transmission / reception means is out of the predetermined range, a predetermined process is executed on the personal information existing in the portable device, that is, carried by the user. Between the current positions of two types of devices (for example, two types of devices such as a portable device such as a mobile phone and a card-type device and a wristwatch having a function as a portable position detecting device and a device such as a portable terminal device for physical condition management) Exists within the portable device only when the distance is within the predetermined range, in other words, when it is possible to determine that the same person is carrying and carrying two types of devices. Personal information is maintained.

  Therefore, even if the portable device is lost or stolen, if you do not have a portable position detection device, the personal information in the portable device will be erased or password locked, and a malicious third party Unauthorized use by users can be more reliably prevented, sufficient security can be ensured, and damage to the user can be minimized. When the portable device is a mobile phone or a card-type device (IC card, etc.), a device that is always worn on the user's body, such as a wristwatch or a portable terminal device for physical condition management, has a function as a portable position detection device. As a result, the system of the present invention functions more effectively and contributes to ensuring sufficient security.

  In addition, when the distance between the first position and the second position is out of the predetermined range, or when at least one of the cases where the biosensor is not performing the detection operation, the management unit Personal information that is present in the portable device when the message indicating that the predetermined processing is to be executed is notified and displayed, and there is a reply of approval or no reply of disapproval from the portable terminal device for physical condition management A predetermined process is executed on Therefore, even if a portable device is lost or stolen, if you do not have a portable position detection device, personal information in the portable device will be erased and unauthorized use by a malicious third party Can be reliably prevented, sufficient security is ensured, and damage to the user can be minimized.

  (2) According to the portable device management system described in claim 2, the portable device provided for business use to each employee (employee) in various companies, etc., has a function as an automatic response means and an execution means. An application program to be realized in the device is installed in advance, and an administrator who manages the portable device makes a call to the portable device to be managed and inputs a signal corresponding to a desired operation when he / she desires ( By simply inputting a number, the portable device can execute a desired operation (collection of personal information). In other words, the administrator uses the calling device of the portable device to make a call with the telephone number to the portable device through the portable telephone line, establishes a communication state between the portable device and the portable device, and operates the portable device. By simply sending a predetermined signal (for example, a tone signal generated by pressing a push button of a predetermined number on the telephone) to the portable device and instructing the execution of the requested operation according to the administrator's requested operation, It is possible to cause the portable device to execute an operation of collecting personal information. On the portable device side, the communication state is automatically established between the portable device and the portable device by automatically responding to the call by the calling device of the portable device by the automatic response means, and the operation of the portable device A request operation corresponding to a predetermined signal from the instruction means is executed by the execution means.

  Thus, the administrator can cause the portable device to execute a desired operation regardless of the will of the user of the portable device. That is, by collecting personal information in the data held in the mobile device (for example, in the body of the email), the administrator can use the mobile device provided by the company, the personal information registration status, and the personal information email. It is possible to grasp and manage exchanges at the site. Then, if necessary, the administrator can instruct deletion of personal information as a request operation for the portable device, and the personal information in the portable device can be erased regardless of the intention of the user of the portable device. Can be surely prevented from leaking or leaking personal information.

(3) According to the portable device management system described in claim 3, the portable device, which is provided for business use to each employee (employee) in various companies, etc., has a function as an automatic response means and an execution means. An application program to be realized in the device is installed in advance, and an administrator who manages the portable device makes a call to the portable device to be managed and inputs a signal corresponding to a desired operation when he / she desires ( By simply inputting a number, it is possible to cause the portable device to execute a desired operation (collecting personal information by cutting out character data). In other words, the administrator uses the calling device of the portable device to make a call with the telephone number to the portable device through the portable telephone line, establishes a communication state between the portable device and the portable device, and operates the portable device. By simply sending a predetermined signal (for example, a tone signal generated by pressing a push button of a predetermined number on the telephone) to the portable device and instructing the execution of the requested operation according to the administrator's requested operation, It is possible to cause the portable device to execute an operation of collecting personal information. On the portable device side, the communication state is automatically established between the portable device and the portable device by automatically responding to the call by the calling device of the portable device by the automatic response means, and the operation of the portable device A request operation corresponding to a predetermined signal from the instruction means is executed by the execution means.

  Thus, the administrator can cause the portable device to execute a desired operation regardless of the will of the user of the portable device. That is, by collecting personal information in the data held in the mobile device (for example, in the body of the email), the administrator can use the mobile device provided by the company, the personal information registration status, and the personal information email. It is possible to grasp and manage exchanges at the site. Then, if necessary, the administrator can instruct deletion of personal information as a request operation for the portable device, and the personal information in the portable device can be erased regardless of the intention of the user of the portable device. Can be surely prevented from leaking or leaking personal information.

  (4) In the invention of the portable device management system according to claim 4, the distance between the first position notified by the transmission / reception means of the portable device and the second position notified by the transmission / reception means of the portable position detection device is When it is outside the predetermined range, the personal information is erased as a predetermined process for the personal information existing in the portable device. Therefore, even if a portable device is lost or stolen, if you do not have a portable position detection device, personal information in the portable device will be erased and unauthorized use by a malicious third party Can be reliably prevented, sufficient security is ensured, and damage to the user can be minimized.

  (5) In the invention of the portable device management system according to claim 5, the distance between the first position notified by the transmitting / receiving means of the portable device and the second position notified by the transmitting / receiving means of the portable position detecting device is If it is out of the predetermined range, copying to the management means and erasing in the portable device are executed as predetermined processing for the personal information existing in the portable device. Therefore, even if a portable device is lost or stolen, if you do not have a portable position detection device, personal information in the portable device will be erased and unauthorized use by a malicious third party Can be reliably prevented, sufficient security is ensured, and damage to the user can be minimized.

  (6) In the invention of the portable device management system according to claim 6, the distance between the first position notified by the transmission / reception means of the portable device and the second position notified by the transmission / reception means of the portable position detection device is When it is outside the predetermined range, a password for personal information is set or changed as a predetermined process for the personal information existing in the portable device. Therefore, even if a portable device is lost or stolen, if you do not have a portable position detection device, personal information in the portable device will be erased and unauthorized use by a malicious third party Can be reliably prevented, sufficient security is ensured, and damage to the user can be minimized.

(7) In the invention of the portable device management system according to claim 7, the distance between the first position notified by the transmission / reception means of the portable device and the second position notified by the transmission / reception means of the portable position detection device is If it is outside the predetermined range, the management device notifies the physical condition management portable terminal device, and then executes predetermined processing (deletion and password setting / change) on the personal information existing in the portable device. . Therefore, even if a portable device is lost or stolen, if you do not have a portable position detection device, personal information in the portable device will be erased and unauthorized use by a malicious third party Can be reliably prevented, sufficient security is ensured, and damage to the user can be minimized.

  (8) In the invention of the portable device management system according to claim 8, the distance between the first position notified by the transmission / reception means of the portable device and the second position notified by the transmission / reception means of the portable position detection device is When it is outside the predetermined range for a predetermined time or longer, a predetermined process (erase or password setting / change) is executed on the personal information existing in the portable device from the management device. Therefore, even if a portable device is lost or stolen, if you do not have a portable position detection device, personal information in the portable device will be erased and unauthorized use by a malicious third party Can be reliably prevented, sufficient security is ensured, and damage to the user can be minimized.

(9) Further, according to the present invention, the following effects can be obtained.
At this time, if the distance is outside the predetermined range for a predetermined time or more, a warning notification is given to a system administrator or a user, so that the misplacement or theft of the portable device can be reliably prevented, or the portable device It is possible to immediately take action against misplacement or theft (such as suspension of provision of various services). Moreover, in addition to the permission / prohibition of the predetermined service according to the distance as described above, unauthorized authentication of the predetermined service can be more reliably prevented by performing personal authentication based on the authentication information input by the user. Sufficient security will be ensured.

  In addition, when the portable terminal device for physical condition management is provided with a function as a portable position detection device, if the biometric sensor in the portable terminal device for physical condition management is performing the detection operation of the biometric data value, While providing is permitted, if the detection operation is not performed, the provision of the predetermined service is prohibited, and if the user is not wearing the physical condition management portable terminal device, the predetermined service is provided. Thus, unauthorized use of a predetermined service can be prevented more reliably, and sufficient security can be ensured.

  At that time, if the user removes the physical condition management portable terminal device from the body and the detection operation by the biometric sensor is interrupted and restarted, the statistical value before interruption and the statistical value after restart are calculated. If these statistical values are statistical values of the same user's biometric data values, the provision of the predetermined service is permitted, but if the statistical values of the same user are not the statistical values of the same user, the provision of the predetermined service is prohibited. Therefore, it is possible to statistically determine whether or not the user before and after the interruption of the detection operation by the biometric sensor is the same person based on the biometric data value. Provision can be prohibited, unauthorized use of a predetermined service can be prevented more reliably, and sufficient security can be ensured. In this case, the provision of the predetermined service is prohibited until the judgment based on the statistical value is confirmed after the detection operation of the biometric data value is interrupted. Use is reliably prevented and sufficient security is ensured.

(10) Further, according to the present invention, the following effects can be obtained.
Furthermore, a biological data threshold value for managing the physical condition of the user is set in advance in the threshold value table for each weather condition in the physical condition management portable terminal device, and the weather condition corresponding to the weather data detected by the weather sensor Used when the set biometric data threshold is searched from the threshold table and read out, and when the detected biometric data threshold is compared with the biometric data value detected by the biosensor, the user's physical condition is detected. A warning is issued to a user, or a user's physical condition is notified to a predetermined contact.

As a result, it is possible to manage and judge the physical condition of the user based on the biometric data threshold corresponding to the weather data in the user's location atmosphere. Management / judgment is possible, and according to the judgment result, the user can be appropriately warned and notified to the manager, etc., according to the physical condition of the user without relying on the user's self-judgment. Appropriate measures can be taken immediately.

  At this time, when a warning of abnormal physical condition is given to the user, if the operation for stopping the warning operation is not performed for a predetermined time or more by the user, the user is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a notification of the user's physical condition, the user can immediately take action. In that case, it is possible to immediately arrange an emergency vehicle such as an ambulance by notifying the fire department etc., and at the same time notifying the biometric data value detected by the biometric sensor, according to the biometric data value Appropriate treatment can be performed more quickly. Furthermore, by simultaneously notifying the user's location (second position) detected by the portable position detection device (second position detection means), the user's location can be immediately confirmed, and the user The emergency vehicle or the like can be immediately directed to the place where the vehicle is located, and a quick initial response can be realized.

  In addition, when an operation to stop the warning operation is executed by the user within a predetermined time, the user is inquired about whether or not to execute the physical condition abnormality notification, and the physical condition abnormality notification is executed according to the user's answer. Thus, after alerting the user and notifying the user himself / herself, the physical condition abnormality is notified, so that it is possible to prevent the automatic notification from being performed unnecessarily. When the user wishes, a notification is made. At that time, by making a telephone call to the attending doctor as a notice, the user can ask the attending doctor for an appropriate treatment, and the biosensor can detect it. By simultaneously notifying the biometric data values that have been set, the attending physician can make an appropriate determination and an instruction for an appropriate treatment.

  If the user refuses to execute the physical condition abnormality notification for the above inquiries continuously, that is, if the abnormality is repeatedly detected even if the user stops and cancels the warning by self-judgment, It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the location of the user (second position) detected by the portable position detection device (second position detection means) By simultaneously notifying the user, the location of the user can be confirmed immediately, and a friend or close relative can immediately go to the location where the user is located.

(11) Furthermore, according to the present invention, the following effects can be obtained.
In addition, according to the present invention described above, a terminal having a mobile phone function, which is provided to each employee (employee) in various companies, etc., realizes functions as an automatic response means and an execution means in the terminal. The application program to be installed is pre-installed, and the manager who manages the terminal makes a call to the managed terminal and inputs a signal corresponding to the desired operation (number input) when he / she desires Thus, the terminal can perform a desired operation.

  In other words, the administrator makes a call by telephone number to the terminal through the mobile phone line by the calling means of the mobile device, establishes a communication state between the terminal and the mobile device, and by the operation instruction means of the mobile device, A desired signal (for example, a tone signal generated by pressing a push button having a predetermined number on a telephone) according to an operation requested by an administrator is transmitted to the terminal to instruct the terminal to execute the requested operation. Can be executed.

On the terminal side, the communication state is automatically established between the portable device and the terminal by automatically responding to the call by the calling device of the portable device by the automatic response means, and the operation instruction means of the portable device A requesting operation corresponding to a predetermined signal is executed by the executing means.

  Thereby, the administrator can cause the terminal to execute a desired operation regardless of the will of the user of the terminal. In particular, by using such a function, the administrator causes the terminal to collect and notify the information as a request operation by the execution means of the terminal, so that the information on the terminal [for example, see the above items (c1) to (c6) ] Can be reliably collected and grasped, and the terminal can be reliably managed based on the information.

  For example, as described in item (c2) above, by collecting the phone book registration status of the terminal (for example, the number of phone book registrations and free space), the administrator can supply it from the company regardless of the will of the user of the terminal. It is possible to grasp and manage the usage status of registered terminals and the registration status of personal information.

  By collecting URL information accessed from the terminal as described in items (c3) and (c4) above, and outgoing / incoming call history / email transmission / reception history, the administrator can supply it from the company regardless of the will of the user of the terminal. It is possible to grasp and manage the usage status of the terminal.

  In recent mobile phones (terminals), the built-in ID chip is taken out, and the ID chip is inserted into another mobile phone, so that the mobile phone itself can be changed (model change) with the same telephone number. Is possible. In such a situation, when the user changes the main body (model change) of the mobile phone supplied from the company without permission, the mobile phone after the change is made to function as an automatic response means and an execution means. Since the application program is not installed, the mobile phone after the change responds to the mobile device, or the requested operation instructed by the mobile device (for example, collection of model information and serial number such as item (c1) above) Notification can not be executed, and the administrator can recognize whether or not the main body of the mobile phone provided by the company is being used by recognizing the presence or absence of a response through the mobile device Become.

  Further, the administrator gives further instructions by the operation instruction means of the portable device based on the information (notification contents) collected as described above, and at the terminal, regardless of the will of the user of the terminal, It is also possible to execute a requested operation according to information.

  For example, by collecting information related to application programs as described in item (c5) above, it is possible to recognize whether or not the terminal has an unnecessary application program based on that information. When it is recognized, the unnecessary application program can be prohibited from starting. As a result, the administrator can reliably prohibit each user (employee) from using an application program that is considered unnecessary for work at a terminal provided by the company.

  By collecting personal information / customer information / confidential information in the data held in the terminal (for example, in the text of the email) as in item (c6) above, the administrator can check the usage status of the terminal provided by the company, personal information It is possible to grasp and manage the registration status of / customer information / confidential information and the exchange of personal information / customer information / confidential information via email. Then, if necessary, the administrator instructs the terminal to delete personal information / customer information / confidential information as a request operation for the terminal, and the personal information / customer information / confidential information in the terminal regardless of the intention of the user of the terminal. The personal information / customer information / confidential information can be reliably prevented from being leaked or leaked through the terminal.

  At this time, by counting the number of appearances of characteristic characters and characteristic character strings in the retained data and notifying the portable device, the administrator can store the personal information / customer information / confidential information included in the data retained in the terminal. It is possible to grasp the amount and manage personal information / customer information / confidential information in the terminal.

  In addition, if the character section extracted from the possessed data contains an inappropriate character or inappropriate character string, the character section is considered not to be related to personal information, but the character section that does not contain an inappropriate character or inappropriate character string Is related to personal information. When it is determined that even one inappropriate character or inappropriate character string is included in the character section, the matching process between the character or character string in the character section and the inappropriate character or inappropriate character string ends. Therefore, compared with a technique for performing collation processing with all name character strings included in the name list, collation processing, that is, personal information search processing can be performed at a very high speed.

  In addition, character sections that do not correspond to personal information elements other than names and that include inappropriate characters or inappropriate character strings are not considered to be related to personal information, but do not correspond to personal information elements other than names and are inappropriate. Character sections that do not contain characters or inappropriate character strings are considered to be related to personal information, particularly name. Therefore, for character sections determined to correspond to personal information elements other than names (for example, any one of phone numbers, e-mail addresses, and addresses), the determination process is terminated when the determination is made, and other than the name Only character sections that are determined not to fall under the personal information element of the above are checked against inappropriate characters or inappropriate character strings, and it is determined that even one inappropriate character or inappropriate character string is included in the character section Since the collation process can be terminated at the time of being performed, the name collation process can be performed at a higher speed than the method of collating with all the name character strings included in the name list.

  In addition, by further providing the character determination means, the character section does not correspond to a personal information element other than a name and does not include an inappropriate character or an inappropriate character string, and the number of characters in the character section is within a predetermined range. In addition, it is possible to consider that the characters in the character section are kanji characters as information related to the name, so that the accuracy of name matching can be improved and the name matching process Can be performed at high speed. At this time, by setting the predetermined range to a general (appropriate) number range for the number of characters of the name, for example, 1 to 6, the name collation accuracy can be further improved, and the name collation process Can be performed at a higher speed. In addition, since a long character section exceeding the predetermined range can be excluded from the verification target by the verification unit, it contributes to further speeding up the name verification process.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of portable device management system of this embodiment:
FIG. 1 is a block diagram showing the configuration of a mobile device management system as an embodiment of the present invention. The mobile device management system 1 of this embodiment shown in FIG. 1 is a mobile device such as a mobile phone, a PDA, and an IC card. When providing various services (for example, electronic money function, credit card function, debit card function, electronic commuter pass function, electronic ticket function, financial institution transaction function, electronic commerce function, electronic passport function) to users Hereinafter, in the present embodiment, a case where the mobile device is the mobile phone 10 will be described.

  The mobile device management system 1 of this embodiment includes a network 3, a base station 4, a mobile phone device 10, a physical condition management mobile terminal device 20, an administrator terminal 30, a contact terminal 40, a doctor terminal 50, a service providing server. 60, a service providing terminal device 70, a physical condition management server 80, and a management server 90.

The mobile phone 10 is carried and carried by a user, is configured to be able to communicate directly with the service providing terminal device 70, and can communicate with at least the service providing server 60 via the base station 4 and the network 3. It is configured. The mobile phone 10 is a terminal having a mobile phone function that is provided to each user (employee) for business use at least in various companies (company, etc.). The management server 90 also functions to manage the mobile phone 10.

  The network 3 includes a base station 4, a mobile phone 10, a physical condition management mobile terminal device 20, terminals 30, 40, 50, a service providing server 60, a service providing terminal device 70, a physical condition management server 80, and a management server 90. In this case, it includes a network of various communication systems such as an intranet, the Internet, a public telephone line, a wireless local area network (LAN), and at least a mobile phone 10 and a portable terminal device for physical condition management. 20, terminals 30, 40, and 50 can communicate and communicate with each other via a telephone line, and can also send and receive electronic mail.

Configuration of mobile phone 10:
The mobile phone 10 also has functions as automatic response means 10a1 and execution means 10a2. The application program for realizing these functions in the mobile phone 10 is installed in the mobile phone 10 before the mobile phone 10 is provided to each user, and the CPU 10a in the mobile phone 10 executes the application program. It has come to be realized by.

  The automatic response means 10a1 establishes a communication state between the management server 90 and the mobile phone 10 in response to a call made by the call means 91 of the management server 90, regardless of the will of the user of the mobile phone 10. It automatically responds to the management server 90. Note that the automatic response means 10a1 automatically responds, for example, when the communication operation (connection state) does not occur even if a predetermined number of calls are made after an incoming call. At this time, the communication state (connection state) is established by the user of the mobile phone 10 before the above-mentioned predetermined number of calling operations are performed for the incoming call accompanying the call by the call means 91 of the management server 90. In this case, the function by the automatic response means 10a1 does not operate.

  The execution unit 10a2 receives a predetermined signal (tone signal) from the operation instruction unit 92 of the management server 90 with the establishment of a communication state between the management server 90 and the mobile phone 10, and performs a requested operation according to the predetermined signal. It is something to execute.

  In the mobile device management system 1 of the present embodiment, the request operation includes, for example, collection / notification of various information in the mobile phone 10, deletion of information (for example, personal information, customer information, and confidential information) in the mobile phone 10, The specified application program is prohibited from starting. More specifically, examples of the requested operation include the following items (A1) to (A8).

(A1) Collection and notification of model information of the mobile phone 10 and serial numbers that can identify the mobile phone 10.
(A2) Collection / notification of the phone book registration status of the mobile phone 10 (for example, the number of phone book registrations and free space).

(A3) Collection and notification of URL information accessed by the mobile phone 10.
(A4) Collection / notification of outgoing / incoming history and email transmission / reception history in the mobile phone
(A5) Collection and notification of information about application programs held in the mobile phone 10.

  (A6) Collection / notification (exploration) of personal information / customer information / confidential information. For example, the personal information / customer information / confidential information included in the mail text is searched, and the number of personal information / customer information / sensitive information (for example, the count result of the number of elements) obtained as a result of the search is notified.

  (A7) Unnecessary application program startup prohibited. Based on the information related to the application program notified from the mobile phone 10 by the operation of the item (A5), the mobile phone 10 stores an unnecessary application program (for example, music playback software unnecessary for business) registered in advance. When the management server 90 recognizes that it is held, the operation instruction unit 92 of the management server 90 instructs the prohibition of activation of the unnecessary application program as a request operation, so that the execution unit 10a2 of the mobile phone 10 Executed.

  (A8) Deletion of personal information / customer information / confidential information, or deletion of data units (file or mail text) containing these information. When the mobile phone 10 is notified by the operation of the item (A6) that the mobile phone 10 has personal information / customer information / confidential information as a search result (counting result), the operation instruction means of the management server 90 92 is executed by the execution means of the mobile phone 10 by instructing the deletion of the personal information / customer information / confidential information as a request operation.

  Note that predetermined signals for specifying these operations (A1) to (A8) are set in advance. For example, when an operation is designated by pressing a push button as described above, a specific operation is assigned for each button number (for each tone signal). More specifically, the items (A1) to (A8) are assigned to “1” to “8”, respectively.

  In addition to the storage unit 10b (see FIG. 2) that holds various data including mail text and phonebook registration data, the mobile phone 10 searches for personal information / customer information / confidential information as described later. There is also a quarantine table 10c (see FIG. 2) in which conditions for performing collection / notification; operation of item (A6)] are set. This quarantine table 10c may be installed in the mobile phone 10 together with the above application program in the mobile phone 10 or may be installed through the mobile phone line by the management server 90 when searching. Further, when the quarantine table is stored on the management server 90 side and the mobile phone 10 searches, the search table in the management server 90 is referred to and read through the mobile phone line in which the mobile phone 10 is in communication. You may make it perform.

  By the way, two search methods used when searching for personal information / customer information / confidential information [collection / notification; operation of the above item (A6)] by the execution means 10a2 of this embodiment will be described.

  In the first exploration technique, the execution means 10a2 is a character / character string included in the data (for example, the mail text) held in the storage unit 10b and characters that appear characteristically in personal information / customer information / confidential information. / Characteristic character / characteristic character string set in advance as a character string is collated, the number of times the characteristic character / characteristic character string appears is counted, and the result of the counting and the characteristic character / characteristic character string that appears as necessary The management server 90 is notified of information regarding the search result. Here, since collation / recognition using character strings greatly increases the load on the CPU 10a, it is assumed that collation / recognition is performed character by character. When the arithmetic processing capability of the CPU 10a is sufficiently high, collation / recognition using character strings may be performed.

More specifically, in the first exploration method, the number of appearances of an address, a telephone number, a mail address, and a name is counted as follows.
Characters extracted from the stored data are collated with the character characters one by one, and if they match, it is determined that the character character has appeared and the count value of the character character is counted as “1”. Up. In this way, the number of appearances of characteristic characters in all characters included in the possessed data is counted.

  Here, the preset characteristic characters will be specifically described. In general personal information, an address is usually required. Therefore, a character that appears characteristically in an address in Japan is set and registered in the above condition as a characteristic character. For example, the address information may include “city”, “road”, “fu”, “prefecture”, “city”, “ward”, “town”, “village”, “county”, etc. In the case of “Tokyo”, the characters “East” and “Kyo” appear in ordinary documents, but in the case of address information, they will appear in combination with “City”. It becomes possible to regard the number of appearances as the number of addresses. Similarly, “prefecture”, “prefecture”, and “road” are considered as address information, and “@” can be used as e-mail address information.

Specifically, the following characteristic characters and points are set.
(B1) “East”, “Kyo”, “Metro”, “Large”, “Osaka”, “Fu”, “North”, “Sea”, “Road” are set as address information (characters). The total of the count values of these characteristic characters is counted / calculated as the address point 1.

  (B2) As presumed address information (characters), prefecture names other than address point 1, that is, “mountain”, “form”, “god”, “na”, “river”, “saki”, “tama”, ..., "Fuku", "Oka", "Prefecture", etc. are set, and the total of the count values of these characteristic characters is counted and calculated as address point 2.

(B3) “City”, “District”, “Town”, “Village”, and “County” are set as address disregard information (characteristic characters), and the total of the count values of these characteristic characters is calculated as address point 3 Is done.
(B4) “@” is set as the e-mail address deemed information (characters), and the count value of “@” is used as the e-mail address point.

(B5) “N” (numeric string with a predetermined number of digits consisting of numbers and hyphens) is set as the telephone number deemed information (characteristic character string), and the count value is used as the telephone number point. More specifically, the phone number is a specific number string corresponding to the mobile phone area code or area code, such as “090-XXXX-XXXX”, “03-XXXX-XXXX”, “048-XXX-XXXX”. It consists of “090”, “03”, “048” followed by an 8-digit or 7-digit numeric string. When such a numeric string appears, the telephone number point is incremented by “1”. . At this time, the count-up is performed regardless of the presence or absence of a hyphen in the numeric string.

  (B6) As name disregard information (characters), for example, the characters “sa”, “wisteria”, “ta”, “middle”, “high”, “bridge”, etc. included in the best 50 of last names in Japan. , “Mountain”, and “field” are set, and the sum of the count values of these characteristic characters is calculated as a name point.

(B7) As the total points, the total value of each point of the items (B1) to (B6) described above is counted and calculated.
The counting results as described above may be counted / calculated as the entire retained data, or may be counted / calculated for each data unit (for example, for each file or each mail text) in the retained data. In the latter case, information that can identify the data unit and the count result for the data unit are associated with each other and notified to the management server 90 so that the count result for each data unit can be understood. In addition, as a count result, you may notify only the total value of the said item (B7), and you may notify each value of the said item (B1)-(B6). Alternatively, the notification may be made only when the count result exceeds a preset threshold value.

Note that characters / character strings that appear characteristically in addresses, mail addresses, telephone numbers, and names are set as characteristic characters / character strings, but the present invention is not limited to these and Characters / character strings that appear characteristically in the date, title, and personal identification information (for example, Basic Resident Register Number, Account Number, Credit Card Number, License Number, Passport Number, etc.) are set as characteristic characters / character strings May be.

  In the second exploration technique, the execution means 10a2 functions as a text extraction engine that converts the data held in the storage unit 10b into a text file, and uses the quarantine table 10c to store personal information (individual) from the data held in the storage unit 10b. It functions as an exploration engine for exploring information elements. That is, the execution unit 10a2 searches and counts personal information elements by referring to various data existing in the storage unit 10b of the mobile phone 10 in accordance with the condition (quarantine table 10c) instructed from the management server 90, and the count. The result is notified to the management server 90.

  Here, FIG. 2 is a block diagram showing a detailed functional configuration of the execution means 10a2 that performs the personal information search function in the mobile phone 10 of the present embodiment. As shown in FIG. 2, the execution means that performs the personal information search function. 10a2 has functions as an extracting unit 121, a cutting unit 122, a determining unit 123, a character determining unit 124, a collating unit 125, and a counting unit 126. These functions are also applications installed by the CPU 10a in advance. This is realized by executing the program.

The extraction means 121 extracts text data of retained data in the storage unit 10b [for example, data in CSV (Comma Separated Value) format], and functions as the text extraction engine.

  The cutout unit 122 cuts out character sections delimited by delimiters from the text data extracted by the extraction unit 121 and sequentially writes them in a buffer (not shown) as a determination target / collation target. Here, the delimiter is, for example, a half-width space, a half-width comma (half-width comma + half-width space is also regarded as a half-width comma), a tab character (half-width), CR (Carrige Return), or LF (Line Feed).

  Further, symbols other than alphanumeric characters, katakana, hiragana, kanji characters, such as hyphens, underbars, parenthesis symbols, and the like are removed from the character section cut out by the cutting means 122. In the present embodiment, it is assumed that the cutting means 122 has a function of removing the symbol characters as described above.

  The determination unit 123 is configured such that a character string (hereinafter simply referred to as a character string) in a character section cut out by the cutout unit 122 and from which symbol characters are removed is a personal information element other than a name (specifically, in the present embodiment, a telephone number, In order to determine whether it corresponds to any one of an e-mail address and an address), it has functions as a telephone number determination unit 123a, an e-mail address determination unit 123b, and an address determination unit 123c. It should be noted that the determination unit 123 of the present embodiment performs the character string determination process in order of lighter determination processing load, that is, in the order of telephone number, e-mail address, and address.

  The telephone number determination means 123a determines whether or not the character string corresponds to a telephone number. If the character string satisfies a telephone number determination condition set in the quarantine table 10c, the character string is a telephone number. It judges that it corresponds to the number, notifies the fact to the counting means 126, and ends the judgment processing by the judgment means 123 for the character string. In the present embodiment, it is assumed that the telephone number determination condition includes a 9-15 digit number in the character string.

The e-mail address determination unit 123b determines whether or not the character string corresponds to a telephone mail address when the telephone number determination unit 123a determines that the character string does not correspond to a telephone number. If the character string satisfies the e-mail address determination condition set in the quarantine table 10c, it is determined that the character string corresponds to the e-mail address, the fact is notified to the counting means 126, and the determination for the character string is performed. The determination process by the means 123 is terminated. In the present embodiment, the e-mail address determination condition is as follows: “One or more ASCII (American Standard Code for Information Interchange)” + “@ (at sign)” + “One or more ASCII characters” + “. It is assumed that a character string “dot)” + “ASCII of one or more characters” is included. In this case, the shortest e-mail address is “a @ aa”, for example.

  The address determination unit 123c determines whether or not the character string corresponds to an address (residence) when the e-mail address determination unit 123b determines that the character string does not correspond to an e-mail address. When the character string satisfies the address determination condition set in the quarantine table 10c, it is determined that the character string corresponds to an address, and the fact is notified to the counting means 126. In the present embodiment, the address determination condition includes a character string of “one or more double-byte characters” + “city” or “city” or “county” + “one or more double-byte characters” in the character string. Suppose that At this time, if the arithmetic processing capability of the CPU 10a is sufficiently high, it may be added to the address determination condition that a 7-digit number corresponding to the postal code is included in addition to the character string. In addition, the address determination condition is that the character string includes a 7-digit numeric string corresponding to the postal code or “3-digit numeric string” + “− (−” instead of the above-described conditions. Hyphens) ”+“ a digit string of four digits ”may be included.

  When the determination unit 123 determines that the character string does not correspond to any of a telephone number, an e-mail address, and an address, the character determination unit 124 sets the character string in the quarantine table 10c. It is determined whether or not the character determination condition is satisfied. Specifically, it is determined whether or not the number of characters in the character string is within a predetermined range and all the characters in the character string are kanji. In the present embodiment, the character determination condition is that, as described above, the number of characters in the character string is within a predetermined range and all the characters in the character string are kanji characters. Is set to a general (appropriate) number range, for example, 1 to 6 as the number of characters of the name (including only the last name and only the name).

  The collating unit 125 is a character section determined by the determining unit 123 as not corresponding to any of a telephone number, an e-mail address, and an address, and is further within the predetermined range by the character determining unit 124 and all For character sections that are determined to be Kanji characters, collate characters / character strings included in the character sections with inappropriate characters / unsuitable character strings that are preset as characters / character strings that cannot appear in the name Thus, it is determined whether or not the character section includes an inappropriate character / unsuitable character string, and the result of the collation determination is notified to the counting means 126.

Here, the inappropriate character / unsuitable character string is preset in the quarantine table 10c. For example, Tokyo, Osaka, Yokohama, Kyushu, Hokkaido, Kyoto, capital, individual, school, store, stock, prefecture, university , Gakuin, Tokyo Stock Exchange, Research, Administration, General Affairs, Accounting, Sales, Administration, Pharmaceutical, Sales, School, Education, Specialty, Architecture, Machine, Corporation, Factory, Manufacturing, Technology, Commerce, Books, Unknown, Deputy Director, Public, Publication , Advertising, Broadcasting, Target, Wholesale, Retail, Planning, HR, Information, Department, President, Regulatory, General Manager, Section Manager, Section Manager, Officer, Head Office, Branch Office, Business, Business, Education, Precision, Oil, Transportation, Management, Strategy , Materials, engineer, electricity, production, tax, public relations, transportation, chief, computer, finance, office work, development, policy, production, economy, industry, finance, banking, research, English, quality, warranty, equipment, charge, chief , Director, Audit, Support, Design, Insurance, Safe, Business, Representative, Transportation, First, No. , Third, Fourth, Fifth, Sixth, Seventh, Eighth, Ninth, Special Sales, Facility, Name, Mail, Name, Name, City Hall, Affiliation, Characteristic, Childhood, Christianity, Association, Church, Union , Cult, commerce, nationwide, branch, contact, parliament, life, consumption, promotion, city hall, ward office, general, modification, function, overview, composition, company, organization, association, deletion, document, deadline, valid A character / character string that cannot appear in a full name, that is, a character / character string that is inappropriate as a name.

  The counting unit 126 receives the notification of the determination result from the telephone number determination unit 123a, the e-mail address determination unit 123b, and the address determination unit 123c, and the number of character sections regarded as corresponding to each of the telephone number, e-mail address, and address. And the character section determined not to contain an inappropriate character / inappropriate character string by the verification means 125 is regarded as corresponding to the name, and the number is counted. Then, these count results are notified to the management server 90.

  In this second exploration method, the counting result by the counting means 126 may be counted / calculated as the entire retained data, or counted / calculated for each data unit (for example, file unit or mail text) in the retained data. May be. In the latter case, information that can identify the data unit and the count result for the data unit are associated with each other and notified to the management server 90 so that the count result for each data unit can be understood. In addition, as a counting result, you may notify the counting result (four count values; the number of telephone numbers, the number of e-mail addresses, the number of addresses, the number of names) about each of a telephone number, an e-mail address, an address, and a name. Then, the sum of these four count values may be notified. Alternatively, the notification may be made only when the count result exceeds a preset threshold value.

  The mobile phone 10 has a general mobile phone function (call function, e-mail function, etc.) and at least functions as a GPS position detection unit 11, a transmission / reception unit 12, and an access unit 13. .

  Here, the GPS position detection unit (first position detection means) 11 is carried in response to a first position request from the service providing server 60 (management means 62) and the service providing terminal device 70 (management means 72) as described later. The current position (location position; latitude / longitude information) of the telephone 10 is detected as the first position by the global orientation measurement system (GPS). At that time, the altitude and depth may be detected as the current location of the mobile phone 10. In that case, an altimeter that measures altitude based on atmospheric pressure and a depth meter that measures depth based on water pressure are provided as the first position detection means.

  The transmission / reception means (first notification means) 12 notifies the service providing server 60 (management means 62) and the service providing terminal device 70 (management means 72) of the first position detected by the GPS position detection unit 11. When notifying the service providing server 60 (management unit 62), transmission / reception is performed via the network 3, while when notifying the service providing terminal device 70 (management unit 72), the transmitting / receiving unit 12 and the service providing terminal device are transmitted. Direct transmission / reception to / from 70 is performed. The transmission / reception unit 12 also functions to receive various requests and notifications (first location request, error notification, warning, etc.) from the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72). .

  The access means 13 is for accessing service providing means 61 and 71 (to be described later) in order to receive provision of a predetermined service. When accessing the service providing server 60 (service providing means 61), For example, in addition to performing a function of inputting various information by operating a keyboard (not shown) in the mobile phone 10 and accessing a service providing site (site operated by the service providing server 60) via the network 3, a service providing terminal When access is made to the device 70 (service providing means 71) and the mobile phone 10 has, for example, a non-contact IC, the non-contact IC functions as the access means 13. Become.

As communication between the mobile phone 10 and the service providing terminal device 70 by the transmission / reception means 12, for example, infrared communication or Bluetooth (registered trademark) communication may be used, or the above-described non-contact IC (access means) 13) and wireless communication executed between the IC card reader / writer 75 described later may be used.

Configuration of portable terminal 20 for physical condition management:
The physical condition management portable terminal device (portable position detection device) 20 is separate from the mobile phone 10 and is worn like a wristwatch on a part of the user's body (for example, an arm) of the mobile phone 10. It is always carried and carried by being configured so as to be able to communicate directly with the service providing terminal device 70, and via the network 3, the administrator terminal 30, the contact terminal 40, the attending doctor terminal 50, the service It is configured to be able to communicate with the providing server 60 and the physical condition management server 80. The physical condition management portable terminal device 20 has at least functions as the GPS position detection unit 23, the transmission / reception means 255, and the biosensor 21. The detailed configuration of the physical condition management portable terminal device 20 including functions other than these functions will be described later with reference to FIG.

  Here, the GPS position detection unit (second position detection unit) 23 is similar to the GPS position detection unit 11 of the mobile phone 10 described above, as described later, the service providing server 60 (management unit 62) and the service providing terminal device 70 ( In response to the second position request from the management means 72), the current position (location position; latitude / longitude information) of the physical condition management portable terminal device 20 is detected as the second position by the global orientation measurement system (GPS). is there. At that time, the altitude or depth may be detected as the current location of the physical condition management portable terminal device 20. In that case, an altimeter that measures altitude based on atmospheric pressure (which can be replaced by the atmospheric pressure measurement function of the meteorological sensor 22 described later) or a depth meter that measures depth based on water pressure (which is replaced by the water pressure measuring function of the meteorological sensor 22 described later) Possible) is provided as the second position detecting means. The GPS position detector 23 in the physical condition management mobile terminal device 20 not only detects the position in response to the second position request, but also detects the current location of the physical condition management mobile terminal apparatus 20 in a predetermined cycle, It is also configured to notify a CPU 25 described later.

The function as the second notification means by the transmission / reception means 255 is a function related to service provision management realized by the CPU 25 as will be described later, and the second position detected by the GPS position detection unit 23 is the mobile phone 10 described above. In the same way as the transmission / reception means 12, the service providing server 60 (management means 62) and the service providing terminal device 70 (management means 72) are notified. When the service providing server 60 (management means 62) is notified, the network 3 On the other hand, when notifying the service providing terminal device 70 (management unit 72), direct transmission / reception is performed between the transmitting / receiving unit 12 and the service providing terminal device 70. In addition, as communication between the physical condition management portable terminal device 20 and the service providing terminal device 70 by the transmission / reception means 255, for example, infrared communication or Bluetooth (registered trademark) communication may be used. The transmission / reception unit 255 also receives various requests and notifications (second position request, operation status request, error notification, warning, etc.) from the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72). Also fulfills the function of receiving.

  The biometric sensor 21 is in contact with and worn on a part of the user's body (for example, an arm) and detects the biometric data value of the user in order to manage the physical condition of the user. In this embodiment, at least one of blood pressure, heart rate, respiratory rate, pulse wave, electrocardiogram, blood oxygen saturation concentration, blood oxygen concentration, and muscle tissue oxygen concentration is detected in a predetermined cycle. Body temperature, blood pressure, heart rate and respiratory rate shall be detected. As will be described later, the biometric data values detected by the biometric sensor 21 are accumulated in the memory 28 (see FIG. 3), and are used as biometric data values before and after the interruption in response to a request from the service providing server 60. The information is read from the memory 28 and notified / transmitted to the service providing server 60 via the network 3 using the function of the transmission / reception means 255 described above.

  Further, in the physical condition management portable terminal device 20, a function as a control unit 256 (see FIG. 3) realized by a CPU 25 described later also functions as an operation state detection unit. This operation state detection means determines whether or not the biosensor 21 is performing an operation of detecting a biometric data value from the user, that is, the physical condition management portable terminal device 20 is actually attached to the user's body. Whether or not a biometric data value is being detected from an operation state is detected as an operation state. As will be described later, from the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72). In response to the operation state request, the operation state is detected, and the detection result is notified / transmitted to the service providing server 60 via the network 3 by using the function as the transmission / reception means 255 described above, or directly the service It is configured to be notified / transmitted to the providing terminal device 70.

  The administrator terminal 30 is provided in a management center or the like, and is registered in advance in the physical condition management mobile terminal device 20 as one of contact points to which various notifications as described later are to be performed. It is a terminal [PC (personal computer) etc.] for managers who manages a user's physical condition using.

  The contact terminal 40 is registered in advance in the physical condition management portable terminal device 20 as one of contact points to be notified as described below. For example, the friend, relative, spouse, etc. of the user A terminal (such as a PC) used by a close relative.

  The attending doctor terminal 50 is registered in advance in the physical condition management portable terminal device 20 as one of the contact points to which various notifications as described later are to be performed, and is a terminal (such as a PC) used by the attending doctor of the user.

Configuration of service providing server 60:
The service providing server 60 provides and manages various services provided to the user of the mobile phone 10, and includes a service providing unit 61, a managing unit 62, an authentication unit 63, a warning unit 64, a statistical value calculating unit 65, and A function as the statistical value judging means 66 is provided.

  As described above, the service providing means 61 operates a service providing site accessible by the mobile phone 10 and provides various services to users who have accessed the site through the network 3 from the mobile phone 10. . Services provided to the user of the mobile phone 10 by the service providing means 61 of the service providing server 60 include an electronic money charge service, an electronic regular purchase / renewal service, an electronic ticket purchase / reservation service, and a financial institution. Various services such as transfer / transfer services and stock trading services can be listed.

  The management means 62 manages various services provided by the service providing means 61, and uses the functions of an authentication means 63, a warning means 64, a statistical value calculation means 65, and a statistical value determination means 66, which will be described later. The management functions shown in (C1) to (C8) are performed.

(C1) When the user accesses the service providing means 61 by the access means 13 of the mobile phone 10, the user requests the mobile phone 10 and the physical condition management mobile terminal device 20 for the first position and the second position, respectively. The distance between the first position notified by the transmission / reception means 12 of the mobile phone 10 and the second position notified by the transmission / reception means 255 of the physical condition management mobile terminal device 20 is calculated, and the calculated distance is within a predetermined range. The management unit 62 permits the service providing unit 61 to provide the service. However, in the present embodiment, in addition to the distance being within the predetermined range, the authentication unit 63 notifies the user authentication result that the user of the service is authenticated by the authentication unit 63 described later, In addition, when the operation state notified from the physical condition management mobile terminal device 20 in response to the operation state request is in the detection operation (the state where the physical condition management mobile terminal device 20 is worn on the user's body), the management means 62 permits the service providing means 61 to provide the service.

  (C2) If the user does not input or transmit authentication information in response to an authentication information request from the management means 62 (authentication means 63 to be described later), the management means 62 notifies the mobile phone 10 (user). On the other hand, an error notification for notifying the fact is given, and the provision of service by the service providing means 61 is prohibited. In this case, only the error notification may be performed without prohibiting the provision of the service.

  (C3) If it is determined in the above item (C1) that the user is not the identity as a result of the identity authentication by the authentication means 63, the management means 62 will ask the mobile phone 10 (user) or system administrator to An error notification for notifying the fact is performed, and the provision of service by the service providing means 61 is prohibited.

  (C4) If there is no response to any of the requests for the first position, the second position, and the operation state in the item (C1), the management means 62 uses the mobile phone 10 and the physical condition management mobile terminal device 20. It is determined that there is an abnormality in at least one of them, and a warning operation by a warning means 64 described later is executed, and the mobile phone 10 / physical condition management portable terminal device 20 and the system administrator are notified of this. Error notification is performed, and service provision by the service provision unit 61 is prohibited.

  (C5) When the operation state notified from the physical condition management portable terminal device 20 in response to the operation state request in the item (C1) is not in the detection operation, that is, the biological sensor 21 performs the detection operation by the operation state detection means. Is detected (or the physical condition management portable terminal device 20 is not worn on the user's body), the management means 62 is the mobile phone 10 / physical condition management portable terminal device 20 or system administrator. In response to this, an error notification for notifying the fact is given, and the provision of service by the service providing means 61 is prohibited. In addition, the management unit 62 informs the user (identification information, etc.) that the operation of detecting the biometric data value in the user's physical condition management mobile terminal device 20 is suspended in the service providing server 60. Register and save in association.

  (C6) When the distance calculated in the item (C1) is out of the predetermined range, the management means 62 exists in a place where the mobile phone 10 and the physical condition management mobile terminal device 20 are different, and the mobile phone 10 is in physical condition. It is determined that there is a high possibility of being used by a person different from the person wearing the management portable terminal device 20, and a warning operation by the warning means 64 described later is executed, and the mobile phone 10 / physical condition management portable terminal device 20 and an error notification for notifying the system administrator to that effect, and the provision of service by the service providing means 61 is prohibited.

(C7) A function of periodically checking whether or not the distance between the mobile phone 10 and the physical condition management mobile terminal device 20 is within a predetermined range (a function described later with reference to FIG. 10). For each predetermined period, the mobile phone 10 and the physical condition management mobile terminal device 20 are requested to request the first position and the second position, respectively, and the first position and the physical condition management mobile terminal notified by the transmission / reception means 12 of the mobile phone 10. The distance to the second position notified by the transmission / reception means 255 of the apparatus 20 is calculated, and it is determined whether or not the calculated distance is within a predetermined range (for example, within 1 m), and a predetermined time or longer (for example, 30) If the mobile phone 10 is out of the predetermined range, the management means 62 determines that the mobile phone 10 and the physical condition management mobile terminal device 20 exist in different places due to misplacement, theft, etc. of the mobile phone 10. Then, a warning operation by the warning means 64 described later is executed, and the service providing means 6
1 is prohibited from providing services.

  (C8) A function of periodically performing a detection operation check on whether or not a biological data detection operation by the biological sensor 21 is performed in the physical condition management portable terminal device 20 (a function described later with reference to FIG. 11). At each predetermined period, the mobile terminal device 20 for physical condition management (the target device 20 for detection operation check) is requested for the operation state, and the operation state notified from the target device 20 is being detected (the target device 20 is in the user's state). It is determined whether it is in a state of being worn on the body.

    (C8-1) When the detection operation is not being performed, the management means 62 performs an error notification for notifying the mobile phone 10 / target device 20 and the system administrator of the same as the item (C5), Service provision by the service providing means 61 is prohibited, and the suspended state is registered.

    (C8-2) When the detection operation is being performed, the management unit 62 searches for registration of the suspended state for the target device 20, and the target device 20 that has entered the detection operation from the suspended state (at this time, the target device 20 is (The service provision is prohibited), it is determined that the detection operation has been resumed, and the biometric data value over a predetermined period (for example, 1 hour) accumulated before and after the interruption to the target device 20 as described later. (Eg body temperature, blood pressure, heart rate, respiratory rate). Then, a statistical value calculation means 65 described later calculates a statistical value before interruption and a statistical value after restart (for example, an average value) for the biometric data values obtained from the target device 20 before and after interruption, and statistical value determination means 66 described later. By comparing the calculated statistical value before interruption with the statistical value after restart, whether these statistical values are within a predetermined range or not, these statistical values are statistical values of the same user's biological data values. It is determined whether or not. If the biometric data value after restart (after interruption) is not detected for the predetermined period, the post-resumption statistical value is calculated when the biometric data value for the predetermined period is detected and accumulated. Will do.

    (C8-3) When it is determined that they are the same user (when the difference is within the predetermined range), the management means 62 performs the same location check as the items (C1) and (C7) above, and the mobile phone If the distance between the device 10 and the target device 20 is within a predetermined range, the prohibition of service provision is canceled and the service provision is permitted. On the other hand, when it is determined that they are not the same user (when the above difference is outside the predetermined range; that is, the user wearing the target device 20 on the body is a different person before and after the biometric data value detection operation is interrupted) When it is determined that the possibility is high), the management unit 62 performs a warning operation by the warning unit 64 described later, and notifies the mobile phone 10 / physical condition management portable terminal device 20 and the system administrator to that effect. Error notification is performed, and service provision by the service provision unit 61 is maintained in a prohibited state.

In the above items (C2) to (C8), when the service providing unit 61 prohibits the provision of the service, naturally, the service provided by the service providing terminal device 70 (service providing unit 71) described later is also prohibited. Further, when the prohibition of service provision is canceled in the above item (C8-3) and the service provision is permitted, the service provision terminal device 70 (service provision means 71) described later together with the provision of the service by the service provision means 61 The prohibition on the provision of services will also be lifted. Further, the management means 62 described in the items (C7) and (C8) above.
The regular check function according to may be realized not by the service providing server 60 but by a management server (not shown) provided separately from the service providing server 60.

The authentication means 63 authenticates the user based on the authentication information about the user input by the user when the user of the mobile phone 10 receives provision of various services, and the authentication result of the user Is sent to the management means 62. Here, examples of the authentication information include a password (passphrase) or biometric information such as a fingerprint, an iris, a palm vein pattern, and a face. When the service providing server 60 is accessed from the mobile phone 10, the service providing server 60 can recognize the phone number of the mobile phone 10, so that for each user, the phone number and the registered authentication information of the user. Are stored as a database in association with each other. Then, the authentication means 63 reads the registered authentication information associated with the telephone number from the database, and compares the registered authentication information with the authentication information input by the user at the time of access, thereby identifying the user's identity. It is configured to perform authentication.

As described in the above items (C4), (C6) to (C8), the warning unit 64 responds to a request from the management unit 62 when there is no response from the mobile phone 10 or the physical condition management mobile terminal device 20, When the distance between the mobile phone 10 and the physical condition management mobile terminal device 20 is out of a predetermined range, or when the users are different before and after the biometric data value detection operation is interrupted, a warning notification is sent to the system administrator or the user. Is. In the service providing server 60, the warning notification is made by displaying on the display of the service providing server 60. In the mobile phone 10 or the physical condition management portable terminal device 20, a buzzer or the like is sounded or an LED lamp is used. This is done by blinking. In the case of the warning notification, the physical condition management portable terminal device 20 uses a warning means 254 described later. The warning notification may also serve as the error notification described above.

  The statistical value calculation means 65 calculates the average value of the biological data values (data accumulated in the memory 28 described later) detected by the biological sensor 21 before the interruption of the detection operation of the biological data value as the statistical value before interruption. The average value of the biometric data values (data accumulated in the memory 28 described later) detected by the biometric sensor 21 after the biometric data value detection operation is resumed is calculated as a post-resumption statistical value.

  The statistical value judging means 66 compares the statistical value before interruption calculated by the statistical value calculating means 65 with the statistical value after restart, and determines whether these statistical values are within a predetermined range. Is a statistical value of biometric data values of the same user.

  As described above, in the portable device management system 1 of the present embodiment, when the provision of service is prohibited due to the interruption of the detection operation of the biometric data value, the biometric data value is obtained by the function described in the item (C8). The service provision prohibition state is canceled by the same user judgment at the time of restarting the detection operation, but if the service provision is prohibited for other reasons, the prohibition state is canceled For this purpose, the user of the mobile phone 10 needs to perform a predetermined procedure on the service providing server 60.

Configuration of the service providing terminal device 70:
The service providing terminal device 70 is used by a user to provide various services by using the mobile phone 10 instead of a card. For example, for an ATM of various financial institutions, a terminal for electronic money, a credit card / debit card A terminal, an electronic commuter pass / electronic ticket gate device, an electronic ticket terminal, an electronic passport terminal, and the like. The service providing terminal device 70 of this embodiment is configured to have functions as service providing means 71, management means 72, authentication means 73, warning means 74, and an IC card reader / writer 75. The service providing means 71, the management means 72, the authentication means 73, and the warning means 74 perform the same functions as the service providing means 61, the management means 62, the authentication means 63, and the warning means 64 in the service providing server 60 described above, respectively. Is.

In the present embodiment, the mobile phone 10 incorporates a non-contact IC (not shown) that can function as the access means 13 described above, and the IC card reader / writer 75 and the mobile phone 10 in the service providing terminal device 70. Information required for providing services can be exchanged with the non-contact type IC. The IC card reader / writer 75 is in a communication-on (ON) state when the mobile phone 10 (non-contact type IC) comes close to perform wireless communication with the non-contact type IC and is stored in the non-contact type IC. Identification information (ID information) and other various information are read out, and information such as electronic money is written.

  The service providing means 71 provides various services to a user who has accessed through the card reader / writer 75 from the mobile phone 10 (non-contact type IC). Services provided to the user of the mobile phone 10 by this service providing means 71 include bank account deposit / withdrawal / transfer / transfer services, electronic money charge / use services, credit card / debit card use services, electronic subscriptions Various services such as purchase / renewal / use services for electronic tickets, use services for electronic tickets, purchase / reservation / use services for electronic tickets, and authentication services for electronic passports.

  The management unit 72 manages various services provided by the service providing unit 71, and uses the functions of the authentication unit 73 and the warning unit 74 described later to perform management functions shown in the following items (D1) to (D6). Fulfill.

  (D1) Similar to the above item (C1), when the user accesses the service providing means 71 by the access means 13 (non-contact type IC) of the mobile phone 10, the mobile phone 10 and the physical condition management mobile terminal device 20 requests the first position and the second position respectively, and the first position notified by the transmission / reception means 12 of the mobile phone 10 and the second position notified by the transmission / reception means 255 of the physical condition management portable terminal device 20 The distance between the two is calculated, and it is determined whether or not the calculated distance is within a predetermined range (for example, within 1 m). If the calculated distance is within the predetermined range, the management unit 72 provides the service by the service providing unit 71. to approve. However, in the present embodiment, in addition to the above distance being within a predetermined range, the authentication means 73 notifies the user authentication result that the user of the service is authenticated by the authentication means 73 described later, In addition, when the operation state notified from the physical condition management mobile terminal device 20 in response to the operation state request is in the detection operation (the state where the physical condition management mobile terminal device 20 is worn on the user's body), the management means 72 permits the service providing means 71 to provide the service.

  (D2) As in the above item (C2), when the user does not input authentication information in response to an authentication information request from the management means 72 (or authentication means 73 described later), the management means 72 An error display for notifying this is performed on the display (not shown) of the service providing terminal device 70 to notify the user, and the service providing means 71 prohibits the provision of the service. In this case, only the error notification may be performed without prohibiting the provision of the service.

  (D3) As in the above item (C3), when it is determined in the item (D1) that the user is not the person as a result of the authentication by the authentication unit 73, the management unit 72 notifies the system administrator to that effect. The service providing means 71 provides the service by notifying the user of the error on the display (not shown) of the service providing terminal device 70 and notifying the user. Is prohibited.

  (D4) Similar to the item (C4), when there is no response to the request for the first position, the second position, and the operation state in the item (D1), the management unit 72 And at least one of the physical condition management portable terminal device 20 is determined to be in a state of some kind of abnormality, a warning operation by a warning means 74 described later is executed, and a notification to that effect is given to the system administrator In addition to notifying the error, an error display for notifying the fact is displayed on the display (not shown) of the service providing terminal device 70 to notify the user, and the service providing means 71 is prohibited from providing the service.

(D5) Similar to the item (C5), when the operation state notified from the physical condition management mobile terminal device 20 in response to the operation state request in the item (D1) is not in the detection operation, that is, by the operation state detection means. When it is detected that the biosensor 21 is not performing the detection operation (or when the physical condition management portable terminal device 20 is not worn on the user's body), the management means 72 notifies the system administrator to that effect. The service providing means 71 provides the service by notifying the user of the error on the display (not shown) of the service providing terminal device 70 and notifying the user. Is prohibited. In addition, the management unit 72 notifies the service providing server 60 (management unit 62) that the biometric data value detection operation in the user's physical condition management portable terminal device 20 has been suspended, and uses the user. Registered / saved in association with a person (identification information, etc.).

  (D6) Similarly to the item (C6), when the distance calculated in the item (D1) is outside the predetermined range, the management unit 72 is a place where the mobile phone 10 and the physical condition management mobile terminal device 20 are different. The mobile phone 10 is likely to be used by a person other than the person wearing the physical condition management portable terminal device 20, and a warning operation by the warning means 74 described later is executed and system management is performed. An error notification for notifying the user of the error is given to the user, and an error display for notifying the error is displayed on the display (not shown) of the service providing terminal device 70 to notify the user, and the service providing means The provision of the service by 71 is prohibited.

  In the above items (D2) to (D6), when the service providing unit 71 prohibits the provision of the service, the service provided by the service providing server 60 (service providing unit 61) is also prohibited.

  In the mobile device management system 1 of the present embodiment, the mobile phone 10 is connected to the service providing terminal device 70 when using electronic money or when using an electronic commuter pass or electronic ticket (passing through the ticket gate device). Only the position check at the time when the IC card reader / writer 75 is brought close to the IC card reader / writer 75 is performed, and the authentication means 73 does not perform the personal authentication or the operation state detection means.

  The authentication unit 73 authenticates the user based on authentication information about the user input by the user when the user of the mobile phone 10 receives provision of various services, and the authentication result of the user Is notified to the management means 72. Here, examples of the authentication information include a password (passphrase) or biometric information such as a fingerprint, an iris, a palm vein pattern, and a face. On the service providing terminal device 70 side, for each user, the ID information registered in the contactless IC of the mobile phone 10 and the registered authentication information of the user are stored in association with each other as a database. Then, the authentication unit 73 reads the registration authentication information associated with the ID information read from the non-contact type IC of the mobile phone 10 by the IC card reader / writer 75, and the registration authentication information and the user at the time of access by the user The user is authenticated by comparing the input authentication information.

As described in the items (D4) and (D6), the warning means 74 is used when there is no response from the mobile phone 10 or the physical condition management mobile terminal device 20 to the request from the management means 72, When the distance from the physical condition management portable terminal device 20 is out of the predetermined range, a warning notification is given to the system administrator or the user. In the service providing terminal device 70, the warning notification is made by displaying on the display (touch panel operated by the user) of the service providing terminal device 70, and in the mobile phone 10 or the physical condition management portable terminal device 20. This is performed by sounding a buzzer or the like or blinking an LED lamp or the like. In the case of the warning notification, the physical condition management portable terminal device 20 uses a warning means 254 described later. The warning notification may also serve as the error notification described above.

Configuration of the physical condition management server 80:
The physical condition management server 80 provides a contractor (a person who has contracted and registered in advance to receive the service of the physical condition management server 80) with a service as described later with reference to FIGS. Therefore, the physical condition management server 80 accumulates the biological data, weather data, and position data periodically received from each physical condition management portable terminal device 20, and associates the biological data, weather data, and position data with the detection time. In addition to storing graphs and maps obtained by graph processing and map generation, it also has a function to provide stored data and graph / map browsing services (public services) to contractors. The contractor who wants to provide the service is authenticated, and the above browsing service is provided to the contractor who has been authenticated. It has been.

The contractor may be the same person as the user, or may be a person different from the user (for example, an administrator or a friend / relative / main doctor of the user).
Each of the terminals 30, 40, and 50 has a telephone line communication / communication function and an e-mail transmission / reception function. Notification from the physical condition management portable terminal device 20 (notification by a transmission / reception means 255 described later) ).

Configuration of the management server 90:
Here, the management server 90 has functions as a calling unit 91 and an operation instruction unit 92. These functions are realized by a CPU (Central Processing Unit) or the like executing an application program preinstalled in the management server 90.

  The calling unit 91 makes a call by a telephone number to a specific mobile phone 10 through the network 30 and the base station 4 forming a mobile phone line, and the communication state (connection) between the mobile phone 10 and the management server 90 State).

In response to the establishment of the communication state, the operation instruction unit 92 transmits a predetermined signal corresponding to the operation requested by the administrator to the mobile phone 10 and instructs the execution of the requested operation.
The calling by the calling means 91 may be performed at a timing when an administrator who manages the mobile phone 10 manually inputs a desired telephone number, or for a telephone number registered in the management server 90 in advance. It may be automatically performed at a predetermined timing, or may be automatically performed at a timing instructed by the administrator to a telephone number registered in advance in the management server 90.

  The instruction by the operation instruction unit 92 may be performed by transmitting a tone signal to the mobile phone 10 that is generated by pressing the push button after the administrator manually inputs a desired telephone number. Then, after making an automatic call to a telephone number registered in advance in the management server 90 and establishing a communication state, a predetermined signal (for example, a tone signal) corresponding to the operation requested by the administrator is automatically generated and transmitted. It may be done depending on the situation.

Detailed configuration of portable terminal 20 for physical condition management:
Next, the configuration of the physical condition management portable terminal device 20 used in the above-described portable device management system 1 will be described with reference to FIG. FIG. 3 is a block diagram showing the configuration of the physical condition management mobile terminal device 20 in the mobile device management system 1 of the present embodiment. As shown in FIG. 3, the physical condition management mobile terminal device 20 of the present embodiment As described above, it is always carried and carried by the user together with the mobile phone 10, and in addition to the above-described biosensor 21 and GPS position detection unit 23, the weather sensor 22, the threshold table 24, the CPU 25, and the stop operation unit 26. , An answer input unit 27 and a memory 28 are provided.

The weather sensor 22 predetermines at least one of temperature, water temperature, humidity, atmospheric pressure, water pressure, sunshine situation, and ultraviolet light amount as weather data in the user's location atmosphere (where the user is located). In this embodiment, the temperature (or water temperature), humidity, and atmospheric pressure (or water pressure) are detected.

  The biometric sensor 21, the weather sensor 22, and the GPS position detection unit 23 are built in or externally attached to the main body of the portable terminal device 20, and are wired or wirelessly connected via a cable or the like. As described later with reference, the result detected at a predetermined cycle is transmitted to the main body of the portable terminal device 20.

The threshold value table 24 stores biological data threshold values for managing the physical condition of the user in advance for each weather condition, and is created and set by a function as a threshold setting unit 251 of the CPU 25 described later. Thus, for example, a RAM (Random) constituting the mobile terminal device 20
It is stored and stored in a storage unit such as an access memory (ROM), a read only memory (ROM), or a hard disk.

  At this time, the biometric data threshold value differs depending on the user and also varies depending on the living environment, and is set for each user according to the weather conditions corresponding to the environment. For example, when the user is in a hot and humid environment based on the normal body temperature T0, blood pressure P0, and heart rate N0 of the user, the weather conditions are air temperature 25-30 ° C. and humidity 80% or more. The body temperature T1, blood pressure P1, and heart rate N1 are set as biological data threshold values for the time (weather condition 1), and the biological data threshold values when the weather condition is 30 to 35 ° C. and the humidity is 60% or more (the weather condition 2) Body temperature T2, blood pressure P2, and heart rate N2 are set, and body temperature T3, blood pressure P3, and heart rate N3 are set as biometric data threshold values when the weather conditions are 35 ° C. or higher and humidity is 50% or higher. And when it is the weather condition 1 (weather condition 3), when any one or all of a user's actual body temperature T, blood pressure P, and heart rate N exceeds threshold value T1, P1, N1, When the weather condition is 2, any one or all of the user's actual body temperature T, blood pressure P, and heart rate N exceed the thresholds T2, P2, and N2, and when the weather condition is 3, the user's When any one or all of the actual body temperature T, blood pressure P, and heart rate N exceed the thresholds T3, P3, and N3, it is determined that the user's physical condition is abnormal (heat stroke etc.).

  When the user is in a low temperature environment, body temperature T4 is set as a biometric data threshold when the weather condition is air temperature 0 to 10 ° C. (weather condition 4), and the weather condition is air temperature −10 to 0 ° C. The body temperature T5 is set as the biological data threshold value when the weather condition is (weather condition 5), and the body temperature T6 is set as the biological data threshold value when the weather condition is air temperature −10 ° C. or less (the weather condition 6). If the actual body temperature T of the user falls below the threshold value T4 when the weather condition is 4, and if the actual body temperature T of the user falls below the threshold value T5 when the weather condition is 5, the weather condition If the actual body temperature T of the user falls below the threshold value T6 when it is 6, it is determined that the user's physical condition is abnormal (such as hypothermia).

  Furthermore, when the user is in a high altitude (low atmospheric pressure) environment, the heart rate N7 and the respiratory rate K7 are set as biometric data thresholds when the weather conditions are atmospheric pressures A2 to A1 (weather conditions 7), When the weather condition is atmospheric pressure A3 to A2 (meteorological condition 8), the heart rate N8 and the respiration rate K8 are set as biometric data thresholds, and the weather condition is a temperature of 35 ° C. or higher and a humidity of 50% or higher (weather condition 9 The heart rate N9 and the respiration rate N9 are set as biometric data threshold values. When the weather condition 7 is met, when one or both of the user's actual heart rate N and respiration rate K exceed the thresholds N7 and K7, and when the weather condition 8 is met, the user's actual heart rate When one or both of the number N and the respiratory rate K exceed the thresholds N8 and K8, and when the weather condition is 9, either or both of the user's actual heart rate N and respiratory rate K are the thresholds When N9 and K9 are exceeded, it is determined that the user's physical condition is abnormal (such as altitude sickness).

  In addition, when the user is bathing in the sea, bathing, etc., the body temperature T10, heart rate as the biometric data threshold when the weather conditions are water pressure W1-W2 and the water temperature is L2-L1 (meteorological condition 10) N10 is set, body temperature T11 and heart rate N11 are set as biometric data thresholds when the weather conditions are water pressure W2 to W3 and the water temperature is L3 to L2 (meteorological condition 11), the weather condition is water pressure W3 or higher and the water temperature is Body temperature T12 and heart rate N12 are set as biological data threshold values when L3 or less (weather condition 12). When the weather condition 10 is met, either or both of the user's actual body temperature T and heart rate N falls below the thresholds T10 and N10. When the weather condition 11 is met, the user's actual body temperature T , When one or both of the heart rate N falls below the threshold value T11, N11, and when the weather condition is 12, the user's actual body temperature T, either one or both of the heart rate N is set to the threshold value T12, N12. If it falls below, it is determined that the user's physical condition is abnormal.

A CPU (Central Processing Unit) 25 executes a predetermined application program, whereby threshold setting means 251, threshold reading means 252, comparison means 253, warning means 254, transmission / reception means 255, control means 256, and inquiry means 257 are described later. It functions as.

  The stop operation unit 26 is used to stop a warning operation (sounding operation, blinking operation, etc.) executed by a warning unit 254 described later by a user's conscious operation. 20, an operation switch, a touch panel on a display screen (display), and the like.

  The answer input unit 27 is for a user to answer whether or not a notification by a transmission / reception means 255 (to be described later) is executed in response to an inquiry by the inquiry means 257 (to be described later). 20 and the touch panel on the display screen (display).

  The memory 28 is a storage unit such as a non-volatile RAM, and stores and saves biometric data values detected by the biometric sensor 21 at a predetermined period. The transmission / reception means 255 described later includes the item (C8-2). In response to the request from the management means 62 of the service providing server 60 described above, the biometric data values for a predetermined period (for example, 1 hour) before and after the detection operation interruption of the biometric sensor 21 are read from the memory 28 and read from the service providing server. It is configured to transmit / notify to 60 management means 62.

  The threshold value setting means 251 creates and sets the above-described threshold value table 24 for each user and for each weather condition corresponding to the living environment. The normal temperature T0, blood pressure P0, and heart rate N0 of the user. Is used for inputting and setting a pair of weather conditions and a predetermined biological data threshold as described above, and may be configured to be input manually by a user, administrator, supervisor, or the like. Then, it may be configured to automatically input the user's normal body temperature T0, blood pressure P0, heart rate N0, and competition / working environment.

  The threshold value reading means 252 searches the threshold value table 24 and reads out the biometric data threshold value set for the weather conditions corresponding to the weather data (temperature / water temperature, humidity, pressure / water pressure) detected by the weather sensor 22. .

  The comparison means 253 compares the biometric data threshold value read by the threshold value reading means 252 with the biometric data values (body temperature, blood pressure, heart rate, respiration rate) detected by the biometric sensor 21, and uses them according to the above-described criteria. This is to judge and detect the physical condition of the person.

The operation of the warning means (physical condition warning means) 254 is controlled by a control means 256 described later, and when the user's physical condition is detected as a result of comparison by the comparison means 253, or when the warning means 64, 74 described above gives a warning. When the notification is received by the transmission / reception means 255, a warning is issued to the user. In this embodiment, for example, a buzzer or the like in the portable terminal device 20 is sounded or an LED lamp or the like is blinked. . Such a warning operation (ringing operation or blinking operation) is stopped via the control unit 256 described later when the user operates the stop operation unit 26 as described above. When a mobile phone is used as the main body of the mobile terminal device 20 as will be described later, the alerting unit 254 may cause the mobile phone to perform a calling operation as a ringing operation.

  As described above, the transmission / reception unit 255 functions as a second notification unit (a function of notifying the service providing server 60 and the service providing terminal device 70 of the second position) and the operation state of the service providing server 60 and the service providing terminal device. 70, and the function of notifying the biometric data value of the memory 28 to the service providing server 60. In addition, the operation is controlled by the control unit 256 described later, and as a result of the comparison by the comparison unit 253, the user's physical condition When detecting a physical condition abnormality notification means for notifying a predetermined contact to that effect, the biometric data value detected by the biometric sensor 21 is used to notify the user of the physical condition abnormality. , Meteorological data detected by the meteorological sensor 22 and the location of the user detected by the GPS position detecting unit 23 To be notified. At that time, the transmission / reception means 255 may notify the user of the physical condition abnormality by automatically calling a pre-registered telephone number, or automatically transmit an e-mail to a pre-registered mail address. By doing so, the user's physical condition abnormality may be notified.

  The predetermined contact information is switched by the control means 256, and details will be described later. Further, the transmission / reception means 255 uses the above-described physical condition to detect the biometric data value detected by the biometric sensor 21, the meteorological data detected by the meteorological sensor 22, and the location of the user detected by the GPS position detecting unit 23. A function of transmitting to the management server 80 at a predetermined cycle is assumed. The transmission / reception means 255 transmits / receives data to / from the outside (the network 3 or the service providing terminal device 70), and not only a notification function (transmission function) as described later but also notification from the outside, etc. (For example, requests from the service providing server 60 and the service providing terminal device 70, error notifications, warning notifications, etc.).

  The control unit 256 functions as the above-described operation state detection unit, and controls the notification operation of the transmission / reception unit 255 and the warning operation of the warning unit 254 as in the following items (E1) to (E4). Here, the inquiry means 257 is also controlled by the control means 256, and when the operation of stopping the warning operation of the warning means 254 is executed within a predetermined time, the inquiry means 257 performs the notification operation of the physical condition abnormality by the transmission / reception means 255. Whether or not the answer is actually displayed on the display of the portable terminal device 20 and operated by the user by operating the touch panel or the operation switch (answer input unit 27). It is configured to receive by the control means 256.

(E1) If a user's physical condition is detected as a result of the comparison by the comparison unit 253, a warning operation for the user is executed via the warning unit 254.
(E2) When an operation for stopping the warning operation of the warning means 254 (operation of the stop operation unit 26) is not executed even after a predetermined time has elapsed since the start of the warning operation, a physical condition abnormality notification is executed by the transmission / reception means 255 Let In this case, for example, an emergency vehicle such as an ambulance is immediately arranged by notifying a fire department or the like.

(E3) When the user makes a reply to the inquiry by the inquiry means 257 that the physical condition abnormality notification operation by the transmission / reception means 255 is executed, the physical condition abnormality notification operation by the transmission / reception means 255 is executed. In this case, for example, by making an automatic call to a pre-registered doctor's telephone (for example, the attending doctor's terminal 50), the user can ask the attending doctor for an appropriate treatment.

  (E4) When the user refuses to execute the physical condition abnormality notification operation by the transmission / reception means 255 continuously for the inquiry by the inquiry means 257, the physical condition abnormality notification operation by the transmission / reception means 255 is forcibly executed. In this case, for example, notification is made to a friend or a close relative (for example, the contact terminal 40).

[2] Operation of portable device management system of this embodiment:
Here, the operation of the present embodiment will be described with reference to time charts and flowcharts shown in FIG.

[2-1] Personal information collection operation:
Next, the operation of the portable device management system 1 according to the present embodiment will be described with reference to FIGS. Here, FIG. 4, FIG. 5 and FIG. 6 are sequence diagrams for explaining the operation of the mobile device management system of this embodiment, and FIG. 7 is an execution means 10a2 that performs the personal information search function in the mobile phone 10 of this embodiment. It is a flowchart for demonstrating operation | movement of.

  When the administrator requests the mobile phone 10 to perform the operations of the items (A1) to (A6) described above, that is, the collection and notification of various types of information, by the management server 90, for example, the procedure shown in FIG. 4 or FIG. Is executed.

  In the procedure shown in FIG. 4, the calling means 91 of the management server 90 makes a call by the telephone number of the mobile phone 10 to the mobile phone 10 subject to the operation request through the mobile phone line (network 30 and base station 4). If the automatic response means 10a1 on the mobile phone 10 side makes an automatic response to the management server 90 in response to the call (see arrow A12 in FIG. 4), the management server 90 and the mobile phone 10 (See arrow A13 in FIG. 4).

  In this state, the operation instruction unit 92 of the management server 90 transmits a predetermined signal (tone signal) corresponding to the requested operation desired by the administrator to the mobile phone 10 through the mobile phone line, and instructs the execution of the requested operation. (See arrow A14 in FIG. 4). By this predetermined signal, for example, one or a plurality of operations of the items (A1) to (A6) described above are designated, and an operation corresponding to the predetermined signal is performed by the execution means 10a2 of the mobile phone 10. This is executed (see step S1 in FIG. 4).

  When the execution means 10a2 collects / searches information [any one or more of the items (A1) to (A6) described above] according to the instruction from the management server 90 side, The information is notified from the mobile phone 10 to the management server 90 through a mobile phone line in a communication connection state, for example, by a tone signal (see arrow A15 in FIG. 4).

  When the management server 90 receives the notification of information from the mobile phone 10, the management server 90 issues a request for disconnecting the communication state to the mobile phone 10 (see arrow A16 in FIG. 4), and automatically receives the disconnect request from the mobile phone 10 side. In response to the response (see arrow A17 in FIG. 4), the communication state between the management server 90 and the mobile phone 10 is disconnected (see arrow A18 in FIG. 4).

The management server 90 that has received the information notification from the mobile phone 10 as described above grasps the status of the mobile phone 10 based on the notified information, and manages the mobile phone 10.
On the other hand, in the procedure shown in FIG. 5, similar to the procedure shown in FIG. 4, the management server 90 sends a predetermined signal to the mobile phone 10 to instruct execution of the requested operation desired by the administrator (FIG. 5). When the management server 90 receives a notification that the predetermined signal has been received from the mobile phone 10 (see arrow A21 in FIG. 5), the management server 90 transmits a communication state disconnection request to the mobile phone 10 (see arrows A11 to A14) (see FIG. In response to an automatic response (see arrow A23 in FIG. 5) from the mobile phone 10 side to this disconnection request, the communication state between the management server 90 and the mobile phone 10 is temporarily disconnected. (See arrow A24 in FIG. 5).

  In parallel with the disconnection operation or after the end of the disconnection operation, the mobile phone 10 performs an operation corresponding to the predetermined signal by the execution unit 10a2 of the mobile phone 10 (see step S1 in FIG. 5). ). When the execution means 10a2 collects / searches information [any one or more of the items (A1) to (A6) described above] according to the instruction from the management server 90 side, The information is notified from the mobile phone 10 to the management server 90 by e-mail, for example (see arrow A25 in FIG. 5).

  Various methods other than e-mail can be considered as a method for collecting the collected information. For example, information collected by the mobile phone 10 is temporarily stored in the base station 4 from the mobile phone 10, and the management server 90 collects the information stored in the base station 4 through the network 30 at an appropriate timing. Also good.

  In addition, the administrator performs the operations of the items (A5) and (A7) described above (that is, collection / notification of application program information and prohibition of unnecessary application activation), and the operations of the items (A6) and (A8) described above. When requesting the mobile phone 10 to collect (notify and delete personal information / customer information / confidential information), for example, the processing is executed in the procedure shown in FIG.

  In the procedure shown in FIG. 6, in the same way as the procedure shown in FIG. 4, a predetermined signal is transmitted from the management server 90 to the mobile phone 10, and the requested operation desired by the administrator [here, the item (A5) or ( A7) is executed (see arrows A11 to A14 in FIG. 6), and is executed by the execution means 10a2 of the mobile phone 10 (see step S1 in FIG. 6).

  When the execution means 10a2 collects and searches for information [information in the above item (A5) or (A7)] according to the instruction from the management server 90 side, the collected information is obtained by, for example, a tone signal, etc. The management server 90 is notified from the mobile phone 10 through the mobile phone line in the communication connection state (see arrow A15 in FIG. 6).

  When the management server 90 receives a notification of information from the mobile phone 10, the management server 90 refers to the content of the information and recognizes that the mobile phone 10 has an unnecessary application program registered in advance. (Refer to step S2 in FIG. 6) The operation instruction means 92 transmits a predetermined signal to the mobile phone 10, and instructs the activation prohibition of the unnecessary application program [operation of the item (A7) described above] ( (See arrow A31 in FIG. 6).

  Further, the management server 90 refers to the contents of the information, and the mobile phone 10 holds personal information / customer information / confidential information as a search result (count result) from the mobile phone 10 by the operation of the item (A6). (See step S2 in FIG. 6), the operation instruction means 92 of the management server 90 instructs the deletion of the personal information / customer information / confidential information [the operation of the item (A8) described above]. (See arrow A31 in FIG. 6).

  An operation according to an instruction from the management server 90 side is executed by the execution means 10a2 (see step S3 in FIG. 6). When the operation is completed, an operation completion notification is sent through the mobile phone line in the communication connection state. The management server 90 is notified from the mobile phone 10 (see arrow A32 in FIG. 6).

  When the management server 90 receives the operation completion notification from the mobile phone 10, the management server 90 issues a communication state disconnection request to the mobile phone 10 (see arrow A <b> 33 in FIG. 6), and the mobile phone 10 automatically responds to this disconnection request. In response to the response (see arrow A34 in FIG. 6), the communication state between the management server 90 and the mobile phone 10 is disconnected (see arrow A35 in FIG. 6).

  In this way, under the management of the management server 90, the management-target mobile phone 10 prohibits activation of application programs that are not necessary for business, erases personal information / customer information / confidential information, or stores these information. It is possible to cause the mobile phone 10 to delete the included data unit (file or mail text) regardless of the will of the user of the mobile phone 10.

  By the way, in the execution means 10a2 which fulfills the personal information search function by the second search method, the appearance frequency of the telephone number, e-mail address, address and name is counted. At this time, if the character section cut out by the cutting means 122 includes an inappropriate character / unsuitable character string preset as a character / character string that cannot appear in the personal information, the character section is As a character / character string that cannot be seen in the personal information in advance in the character section cut out by the cutting means 122, it is excluded because it is regarded as not corresponding to the personal information element (name in this embodiment). If the specified inappropriate character / inappropriate character string is not included, the character section is regarded as corresponding to the personal information element constituting the personal information, that is, the personal information element appears. , Count up the number of appearances.

  Here, an operation when the execution means 10a2 of the mobile phone 10 searches and collects personal information (customer information) using the second search method (functional configuration shown in FIG. 2) is shown in the flowchart (FIG. 7). A description will be given according to steps S902 to S916).

  From the data held in the storage unit 10b of the mobile phone 10, one of the data units (e-mail text, electronic file, etc.) that has not yet been determined is selected and read as a determination target (step S902). Then, text data is extracted from the data unit to be determined by the extraction means (text extraction engine) 121 (step S903).

  From the text extracted in this way, the character section delimited by the delimiter described above is extracted by the extraction means 122, and sequentially written in a buffer (not shown) as a determination target / collation target (step S904). When cutting out a character section, as described above, the cutting means 122 removes symbols other than alphanumeric characters, katakana, hiragana, kanji characters, such as hyphens, underbars, and parenthesis symbols from the character section. .

  Whether a character string (hereinafter simply referred to as a character string) in the character section cut out by the cutting means 122 and from which the symbol character has been removed corresponds to any one of a telephone number, an e-mail address, and an address. Are sequentially determined by the telephone number determination unit 123a, the e-mail address determination unit 123b, and the address determination unit 123c (steps S905, S907, and S909).

  First, the telephone number determination unit 123a determines whether or not the character string corresponds to a telephone number (step S905). At that time, if the character string satisfies the telephone number determination condition set in the quarantine table 10c, that is, if the character string includes 9 to 15 digits, the character string is converted to the telephone number. (YES route in step S905), the fact is notified to the counting means 126, and the counting means 126 increments the count value corresponding to the number of appearances of the telephone number by 1 (step S906). ), The process proceeds to step S914.

  If it is determined that the character string does not correspond to a telephone number (NO route in step S905), the e-mail address determination unit 123b determines whether the character string corresponds to a telephone mail address (step S907). ). At that time, if the character string satisfies the e-mail address determination condition set in the quarantine table 10c, that is, “one or more ASCII” + “@” + “one or more ASCII” + If the character string “.” + “ASCII of one or more characters” is included, it is determined that the character string corresponds to the e-mail address (YES route in step S907), and the fact is notified to the counting means 126. The count means 126 increments the count value corresponding to the number of appearances of the e-mail address by 1 (step S908), and the process proceeds to step S914.

  If it is determined that the character string does not correspond to an e-mail address (NO route in step S907), the address determination unit 123c determines whether the character string corresponds to an address (location) (step S909). ). At that time, if the character string satisfies the address determination condition set in the quarantine table 10c, that is, “one or more double-byte characters” + “city” or “city” or “county” + If a character string that is “one or more double-byte characters” is included, it is determined that the character string corresponds to an address (YES route in step S909), and that is notified to the counting means 126. In the means 126, the count value corresponding to the number of appearances of the address (residence) is incremented by 1 (step S910), and the process proceeds to step S914.

  When it is determined that the character string does not correspond to an address (NO route in step S909), that is, the determination means 123 determines that the character string does not correspond to any of a telephone number, an e-mail address, and an address. In this case, the character determination unit 124 determines whether or not the character string satisfies the character determination condition (the number of characters is 1 or more and 6 or less and all characters are kanji) set in the quarantine table 10c. (Step S911). When this character determination condition is not satisfied (NO route in step S911), the process proceeds to step S914.

  On the other hand, if this character determination condition is satisfied (YES route in step S911), the collation unit 125 determines whether the character / character string included in the character section (the character string) and the name set in the quarantine table 10c are incorrect. The appropriate character / unsuitable character string is collated, and it is determined whether or not the character section includes the unsuitable character / unsuitable character string (step S912). If at least one character / character string that matches the inappropriate character / inappropriate character string exists in the character section (YES route in step S912), matching with the inappropriate character / inappropriate character string at that time The process is immediately terminated, and the process proceeds to step S914.

  If the character section does not contain inappropriate characters / unsuitable character strings (NO route in step S912), the result of the collation determination is notified to the counting means 126. The count value corresponding to the name appearance count is incremented by 1 (step S913), and the process proceeds to step S914.

In step S914, it is determined whether or not there is a character section that has not yet been extracted from the text data extracted from the determination target data unit. If there is a character section (YES route), the process returns to step S904, and processing similar to that described above (step S904). To S913) are repeatedly executed. When all the character sections are cut out from the text data in this way and the determination process, the collation process, the counting process, etc. for all the character sections are finished (NO route in step S914), all the data in the storage unit 10b of the mobile phone 10 is obtained. It is determined whether or not personal information has been searched for (step S915). If unexplored data still exists (NO route of step S915), the process returns to step S902, and the same processing as described above is executed. When the search is completed for the data (YES route of step S915), the count result by the counting means 126 is notified to the management server 90 as the search result of the personal information / customer information (step S916).

[2-2] Service providing operation:
Next, the service providing operation of the portable device management system of this embodiment will be described with reference to FIG.

  When the user receives various services from the service providing terminal device 70 using the mobile phone 10 with a built-in non-contact IC, the user uses the IC card reader / cell in the service providing terminal device 70. It is brought close to the reading unit of the writer 75. Thus, when the non-contact type IC of the mobile phone 10 enters the magnetic field generated from the IC card reader / writer 75, the non-contact type IC and the IC card reader / writer 75 are in a communication-on (ON) state. (YES route of step S10).

  When the communication is turned on, the ID information stored in the non-contact type IC is read by the IC card reader / writer 75 and notified to the authentication means 73 (step S11), and the authentication means 73 is notified. The registered authentication information associated with the ID information is read from the database or the like (step S12).

  On the display (operation screen, touch panel) of the service providing terminal device 70, the user is requested to input authentication information (step S13), and the authentication information is not input even after a predetermined time has elapsed (step S14). NO route), the function of the item (D2) of the management means 72 is used to notify the user of an error that authentication information is not entered by displaying an error on the display (step S15). Service provision is prohibited and service provision by the service provision means 61 of the service provision server 60 is also prohibited (step S16), and the process returns to step S10. When authentication information is not input, only error notification may be performed until the service provision is prohibited.

  When authentication information is input by the user (YES route in step S14), the authentication information 73 compares the registered authentication information read in step S12 with the authentication information input by the user, and the user Is authenticated (step S17). If these pieces of authentication information do not match, it is determined that the user is not the user (NO route of step S18), and the function of the item (D3) of the management means 72 causes the error of user authentication NG to the system administrator. In addition to the notification, the error display on the display notifies the user of the error of the personal authentication NG (step S19), and the provision of the service by the service providing means 71 is prohibited and the service providing server 60 Service provision by the service providing means 61 is also prohibited (step S20), and the process returns to step S10.

If the two authentication information matches, the user is authenticated (YES route in step S18), and the function of the item (D1) of the management means 72 allows the same user to carry and carry the user. The first position and the second position are required for the two devices that should be provided, that is, the mobile phone 10 and the portable terminal device 20 for physical condition management, respectively. The operating state of the sensor 21 is requested (step S21). At this time, the information regarding the combination of the mobile phone 10 and the physical condition management portable terminal device 20 that should be possessed and carried by the same user corresponds to the ID information (stored in the non-contact type IC). The management means 72 searches the database and the like using the ID information read in step S11 as a key, and stores 2 corresponding to the ID information. Information (request destination information) related to one device (the mobile phone 10 and the physical condition management mobile terminal device 20) can be acquired.

  Note that, as in the example shown in FIG. 8, when the user uses the mobile phone 10 to receive service with the service providing terminal device 70, at least the mobile phone 10 with built-in non-contact IC is located at the position of the service providing terminal device 70. Since it is obvious that the service providing terminal device 70 exists as the first position, the second position and the operation with respect to the physical management mobile terminal device 20 without using the first position request to the mobile phone 10 without using the first position request. Only the status request may be made.

  If there is no response to any of the requests for the first position, the second position, and the operation state (NO route in step S22), the function of the item (D4) of the management means 72 enables the mobile phone 10 and the physical condition management. It is determined that at least one of the mobile terminal devices 20 is in a state of some sort of abnormality, and the warning means 74 sends a warning notification to the system administrator or user (the mobile phone 10 and the physical condition management mobile terminal device 20). In addition, an error notification without response is sent to the system administrator, and an error notification without response is sent to the user by displaying an error on the display (step S24). Service provision by the provision means 71 is prohibited and the service provision means 61 of the service provision server 60 is prohibited. The service provision by is also prohibited (step S25), and the process returns to step S10.

  When there is an answer / notification of the first position, the second position, and the motion state in response to the request in step S21 (YES route in step S22), first, the motion state notified from the physical condition management mobile terminal device 20 is detected. Determine whether it is in operation.

  When it is detected that the operating state is not operating, that is, when it is detected that the biosensor 21 is not performing the detecting operation (or when the physical condition management portable terminal device 20 is not worn on the user's body; NO in step S26) Route), the function of the item (D5) of the management means 72 notifies the system administrator of an error that the biosensor 21 is not operating, and notifies the user by displaying the error on the display. On the other hand, notification that the biometric sensor 21 is not operating is performed (step S27), the provision of service by the service providing unit 71 is prohibited and the provision of service by the service providing unit 61 of the service providing server 60 is also prohibited. (Step S28), and further, biometric data in the portable terminal device 20 for physical condition management of the user After the value detection operation is interrupted, the service providing server 60 (management means 62) is notified and registered and stored in association with the user (identification information, etc.) (step S29). The process returns to step S10.

  When the operation state notified from the physical condition management portable terminal device 20 is in the detection operation (YES route of step S26), the notification is sent by the transmission / reception means 12 of the mobile phone 10 by the function of the item (D1) of the management means 72 The distance between the determined first position and the second position notified by the transmission / reception means 255 of the physical condition management portable terminal device 20 is calculated (step S30), and whether or not the calculated distance is within a predetermined range. Is determined (step S31).

If the distance is out of the predetermined range (NO route of step S31), the mobile phone 10 and the physical condition management mobile terminal device 20 exist in different places by the function of the item (D6) of the management means 72, and the mobile phone 10 is determined to be used by a person different from the person wearing the physical condition management portable terminal device 20, and the warning means 74 causes the system administrator or user (mobile phone 10 and mobile phone for physical condition management) to A warning notification is sent to the terminal device 20) (step S32). Further, an error notification is sent to the system administrator, and an error notification is given to the user by displaying the error on the display (step S33). Service provision by the service provision unit 71 is prohibited and the service provision unit 61 of the service provision server 60 is prohibited. The service provision by is also prohibited (step S34), and the process returns to step S10.

  When the distance calculated in step S30 is within the predetermined range (YES route in step S31), the service providing unit 71 is allowed to provide the service by the function of the item (D1) of the management unit 72 (step S35). After the predetermined service desired by the user is provided to the user (mobile phone 10), the process returns to step S10.

  In the mobile device management system 1 of the present embodiment, the mobile phone 10 is connected to the service providing terminal device 70 when using electronic money or using an electronic commuter pass or electronic ticket (passing through the ticket gate device). Only the position check when the IC card reader / writer 75 is brought close is performed. That is, in such a case, the processing of steps S12 to S20 and steps S26 to S29 in FIG. 8 is omitted, and the first position and the second position are requested in step S21 in FIG. The service provision is permitted only when the distance between the first position and the second position is within a predetermined range.

[2-3] Service providing operation of service providing server:
The service providing operation of the service providing server 60 in the mobile device management system 1 of the present embodiment will be described according to the flowchart (steps S41 to S65) shown in FIG.

  When a user accesses a service providing site operated by the service providing terminal device 70 from the mobile phone 10 through the network 3 and receives various services, the user first operates the mobile phone 10 to perform service. Access (log in) the site for provision. When accessed from the mobile phone 10 (YES route in step S41), the service providing server 60 recognizes the telephone number of the mobile phone 10 that has been accessed, and the authentication means 63 registers it in association with the telephone number. Authentication information is read from a database or the like (step S42).

  Further, when the service providing terminal device 70 requests the mobile phone 10 (user) to input and transmit authentication information (step S43), the authentication information is not transmitted even after a predetermined time has elapsed (in step S44). NO route), the function of the above item (C2) of the management means 62 notifies the mobile phone 10 of an error that authentication information has not been entered (step S45), and the provision of service by the service providing means 61 is prohibited. Service provision by the service provision means 71 of the service provision terminal device 70 is also prohibited (step S46), and the process returns to step S41. When authentication information is not input, only error notification may be performed until the service provision is prohibited.

  When the authentication information is transmitted from the mobile phone 10 (YES route in step S44), the authentication information 63 compares the registered authentication information read in step S42 with the authentication information transmitted from the mobile phone 10. The user is authenticated (step S47). If these pieces of authentication information do not match, it is determined that the user is not the user (NO route in step S48), and the function of the item (C3) of the management means 62 causes the error of user authentication NG to the system administrator. In addition to the notification, an error notification of personal authentication NG is made to the mobile phone 10 (step S49), the provision of the service by the service providing means 61 is prohibited and the service by the service providing means 71 of the service providing terminal device 70. Is also prohibited (step S50), and the process returns to step S41.

  If the two authentication information matches, the user is authenticated (YES route in step S48), and the function of the item (C1) of the management means 62 allows the same user to carry and carry the user. The first position and the second position are required for the two devices that should be provided, that is, the mobile phone 10 and the portable terminal device 20 for physical condition management, respectively. The operating state of the sensor 21 is requested (step S51). At this time, information relating to the combination of the mobile phone 10 and the physical condition management mobile terminal device 20 that should be possessed and carried by the same user is associated with the telephone number of the mobile phone 10 in advance in a database or the like. The management means 62 searches the database and the like using the telephone number of the mobile phone 10 as a key, and thereby searches for two devices corresponding to the ID information (for the mobile phone 10 and physical condition management). Information (request destination information) related to the portable terminal device 20) can be acquired.

  When there is no response to any of the requests for the first position, the second position, and the operation state (NO route of step S52), the function of the item (C4) of the management means 62 allows the mobile phone 10 and the physical condition management. It is determined that at least one of the mobile terminal devices 20 is in a state of some kind of abnormality, and the warning means 64 sends a warning notification to the system administrator and the user (the mobile phone 10 and the physical condition management mobile terminal device 20). (Step S53), an error notification without a response is made to the system administrator, and an error notification without a response is sent to the mobile phone 10 / physical condition management mobile terminal device 20 (step S54). The provision of service by the service providing means 61 is prohibited and the service providing means 71 of the service providing terminal device 70 is used. Service is also prohibited (step S55), and the process returns to step S41.

  When there is an answer / notification of the first position, the second position, and the motion state in response to the request in step S51 (YES route in step S52), first, the motion state notified from the physical condition management mobile terminal device 20 is detected. Determine whether it is in operation.

  When the operation state is not in operation, that is, when it is detected that the biosensor 21 is not performing the detection operation (or when the physical condition management portable terminal device 20 is not worn on the user's body; NO in step S56) Route), the function of the item (C5) of the management means 62 notifies the system administrator of an error that the biosensor 21 is not operating, and the mobile phone 10 / physical condition management mobile terminal device 20 On the other hand, a notification that the biosensor 21 is not operating is made (step S57), the provision of service by the service provision unit 61 is prohibited, and the provision of service by the service provision unit 71 of the service provision terminal device 70 is also performed. It is prohibited (step S58), and the biometric data value in the user's physical condition management portable terminal device 20 is further reduced. The fact that the detection operation is suspended is registered and stored in association with the user (telephone number, identification information, etc.) (step S59), and the process returns to step S41.

  When the operation state notified from the physical condition management mobile terminal device 20 is in the detection operation (YES route of step S56), the function of the item (C1) of the management unit 62 notifies the transmission / reception unit 12 of the mobile phone 10 The distance between the calculated first position and the second position notified by the transmission / reception means 255 of the physical condition management portable terminal device 20 is calculated (step S60), and whether or not the calculated distance is within a predetermined range. Is determined (step S61).

If the distance is out of the predetermined range (NO route of step S61), the mobile phone 10 and the physical condition management mobile terminal device 20 exist in different places by the function of the item (C6) of the management means 62, and the mobile phone 10 is determined to be used by a person different from the person wearing the physical condition management portable terminal device 20, and the warning means 64 causes the system administrator or user (mobile phone 10 and mobile phone for physical condition management) to A warning notification is sent to the terminal device 20) (step S62), an error notification is sent to the system administrator, and an error notification is sent to the mobile phone 10 / physical condition management mobile terminal device 20 (step S63). ), The provision of service by the service providing means 61 is prohibited and the service providing means 71 of the service providing terminal device 70 Service is also prohibited (step S64), and the process returns to step S41.

  When the distance calculated in step S60 is within the predetermined range (YES route in step S61), the service providing means 61 is permitted to provide the service by the function of the item (C1) of the management means 62 (step S65). After the predetermined service desired by the user is provided to the user (mobile phone 10), the process returns to step S41.

[2-4] Service providing server location check function:
The position check function of the service providing server 60 in the portable device management system 1 of the present embodiment (the function of the item (C7) of the management means 62) will be described with reference to the flowchart (steps S71 to S80) shown in FIG.

  As described above, the position check function described with reference to FIG. 10 is not performed by the service providing server 60, but by a management server (not shown) provided separately from the service providing server 60 or a position check dedicated server. It may be realized.

  When the position check timing of a predetermined cycle is reached (YES route of step S71), the two devices that should be possessed and carried by the same user, that is, the cellular phone 10 and the physical condition management portable terminal device 20, respectively. A first position and a second position are requested (step S72). At this time, the information on the combination of the mobile phone 10 and the physical condition management mobile terminal device 20 that should be possessed and carried by the same user is associated with the telephone number of the mobile phone 10 as described above, for example. Are stored in advance in a database or the like, and the management means 62 searches the database or the like using the telephone number of the mobile phone 10 as a key, thereby providing two devices (the mobile phone 10 and the mobile phone 10 and the ID) corresponding to the ID information. Information on the physical condition management portable terminal device 20) (request destination information) is acquired.

  When there is no response to any of the requests for the first position and the second position (NO route in step S73), a state in which some abnormality has occurred in at least one of the mobile phone 10 and the physical condition management mobile terminal device 20 The warning means 64 notifies the system administrator and the user (the mobile phone 10 and the physical condition management portable terminal device 20) of the warning (step S74), and the service providing means 61 of the service providing server 60 is provided. Service provision by the service provision unit 71 of the service provision terminal device 70 is prohibited (step S75), and the process returns to step S71.

  When there is an answer / notification of the first position and the second position in response to the request in step S72 (YES route in step S73), the first position and physical condition management portable terminal notified by the transmission / reception means 12 of the mobile phone 10 The distance to the second position notified by the transmission / reception means 255 of the apparatus 20 is calculated (step S76), and it is determined whether or not the calculated distance is within a predetermined range (step S77). If the distance is within the predetermined range (YES route of step S77), it is determined that the mobile phone 10 and the physical condition management mobile terminal device 20 are carried and carried by the same user, and the process of step S71 Return to.

When the distance calculated in step S76 is outside the predetermined range (NO route of step S77), when the state outside the predetermined range does not exceed a predetermined time (for example, 30 minutes) (NO route of step S78) Then, it is temporarily determined that the distance between the mobile phone 10 and the physical condition management mobile terminal device 20 is long, and the process returns to step S71. On the other hand, when the mobile phone 10 is out of the predetermined range for a predetermined time or longer (for example, 30 minutes or longer) (YES route in step S78), the mobile phone 10 and the physical condition management mobile terminal device 20 may be misplaced or stolen. And the warning means 64 sends a warning notification to the system administrator and the user (the mobile phone 10 and the physical condition management portable terminal device 20) (step S79). Service provision by the service provision unit 61 of the server 60 and the service provision unit 71 of the service provision terminal device 70 is prohibited (step S80), and the process returns to step S71.

[2-5] Biosensor detection operation check function of service providing server:
The biosensor detection operation check function [function of the above item (C8) of the management means 62] of the service providing server 60 in the portable device management system 1 of the present embodiment will be described according to the flowchart (steps S81 to S109) shown in FIG. . As described above, the biosensor detection operation check function described with reference to FIG. 11 is not the service providing server 60 but a management server (not shown) or biosensor detection provided separately from the service providing server 60. It may be realized by a server dedicated to operation check.

  When the biometric sensor detection operation check timing of a predetermined cycle is reached (YES route of step S81), the operation state is requested to the physical condition management portable terminal device 20 (step S82), and there is no response of the operation state (NO of step S83) Route), it is determined that some abnormality has occurred in the physical condition management portable terminal device 20, and the warning means 64 warns the system administrator and the user (the mobile phone 10 and the physical condition management portable terminal device 20). Notification is made (step S84), and further, error notification without response is made to the system administrator, and error notification without response is made to the mobile phone 10 / physical condition management mobile terminal device 20 (step S85). ), Service providing means 61 and service providing terminal device 70 of the service providing server 60 Provided by the service providing unit 71 of the service is prohibited (step S86), the process returns to step S81.

  When there is a response / notification of the operation state in response to the request in step S82 (YES route in step S83), it is determined whether or not the operation state notified from the physical condition management mobile terminal device 20 is in the detection operation.

  When it is detected that the operating state is not operating, that is, when it is detected that the biosensor 21 is not performing the detecting operation (or when the physical condition management portable terminal device 20 is not worn on the user's body; NO in step S87) Route), an error notification to the effect that the biosensor 21 is not operating is sent to the system administrator, and the biosensor 21 is not operating to the mobile phone 10 / physical condition management portable terminal device 20. Notification is made (step S88), service provision by the service provision unit 61 of the service provision server 60 and the service provision unit 71 of the service provision terminal device 70 is prohibited (step S89), and further for the physical condition management of the user That the detection operation of the biometric data value in the mobile terminal device 20 is in an interrupted state indicates that the user Telephone number, associated with the registered and stored in the identification information) (step S90), the process returns to step S81. However, when interruption registration has already been performed for the physical condition management portable terminal device 20, the processes of steps S88 to S90 are omitted.

  When the operation state notified from the physical condition management mobile terminal device 20 is in the detection operation (YES route in step S87), it is determined whether or not the physical condition management mobile terminal device 20 has been registered for interruption. However, if the registration is not interrupted, the physical condition management portable terminal device 20 does not restart the operation of the biosensor 21 from the interrupted state, and the biosensor 21 is operating continuously (NO in step S91). Route), the process returns to step S81.

  If the physical condition management mobile terminal device 20 is registered to be interrupted, it is determined that the operation of the biosensor 21 has been resumed from the interrupted state (YES route of step S91), and the physical condition management mobile terminal device 20 On the other hand, biometric data values (for example, body temperature, blood pressure, heart rate, respiration rate) over a predetermined period (for example, 1 hour) accumulated before and after interruption of the detection operation by the biosensor 21 are requested (step S92).

  When the biometric data value is notified from the physical condition management portable terminal device 20 in response to this request, the statistical value calculation means 65 causes the pre-interruption statistical value and post-resumption statistical value (for example, average value) for the biometric data values before and after the interruption. Is calculated (step S93), and the calculated statistical value before interruption is compared with the calculated statistical value after restart (step S94), and whether or not the difference between these statistical values is within a predetermined range. Whether or not these statistical values are statistical values of biometric data values of the same user is determined (step S95).

  If the difference between these statistical values is outside the predetermined range and it is determined that these statistical values are not the statistical values of the biometric data values of the same user (NO route in step S95), the physical condition management portable terminal device 20 is removed from the body. It is determined that there is a high possibility that the user attached to the user is a different person before and after the biometric data value detection operation is interrupted, and the warning means 64 causes the system administrator or user (mobile phone 10 and portable terminal device for physical condition management) to 20) (step S96), an error notification is made to the system administrator, and an error notification is made to the mobile phone 10 / physical condition management portable terminal device 20 (step S97). Prohibition of service provision by service providing means 61 of service providing server 60 and service providing means 71 of service providing terminal device 70 There is maintained (step S98), the process returns to step S81.

  If it is determined that the difference between the statistical values calculated in step S93 is within a predetermined range and these statistical values are the statistical values of the biometric data values of the same user (YES route in step S95), the operation state is checked. The physical position management mobile terminal device 20 and the mobile phone 10 that the user using the physical condition management mobile terminal device 20 should carry and carry are respectively in the first position and the second position. A position is requested (step S99). At this time, the information related to the combination of the mobile phone 10 and the physical condition management mobile terminal device 20 that should be carried and carried by the same user is associated with the identification information of the physical condition management mobile terminal device 20, for example. The management unit 62 searches the database and the like by using the identification information of the physical condition management portable terminal device 20 as a key, so that the physical condition that is currently subject to the operation state check is stored in the database and the like. Information (request destination information) related to the mobile phone 10 paired with the management mobile terminal device 20 is acquired.

  When there is no response to any of the requests for the first position and the second position (NO route of step S100), a state in which some abnormality has occurred in at least one of the mobile phone 10 and the physical condition management mobile terminal device 20 The warning means 64 notifies the system administrator and the user (the mobile phone 10 and the physical condition management portable terminal device 20) of the warning (step S101), and further does not respond to the system administrator. Error notification is performed, and an error notification without response is sent to the mobile phone 10 / physical condition management mobile terminal device 20 (step S102), and the service providing means 61 of the service providing server 60 and the service providing terminal device 70 The service provision prohibited state by the service providing means 71 is maintained (step S103). , The process returns to step S81.

When there is an answer / notification of the first position and the second position in response to the request in step S99 (YES route in step S100), the first position and physical condition management portable terminal notified by the transmission / reception means 12 of the mobile phone 10 The distance to the second position notified by the transmission / reception means 255 of the apparatus 20 is calculated (step S104), and it is determined whether or not the calculated distance is within a predetermined range (step S105).

  If the distance is outside the predetermined range (NO route in step S105), the mobile phone 10 and the physical condition management mobile terminal device 20 are located in different places, and the mobile phone 10 wears the physical condition management mobile terminal device 20 It is determined that there is a high possibility that it is used by a person different from the above, and the warning means 64 notifies the system administrator and the user (the mobile phone 10 and the physical condition management mobile terminal device 20) of a warning (step S106). In addition, an error notification is sent to the system administrator, and an error notification is sent to the mobile phone 10 / physical condition management mobile terminal device 20 (step S107), and the service providing means 61 of the service providing server 60 and the service are notified. The service providing prohibition state by the service providing means 71 of the providing terminal device 70 is maintained (step S108), the process returns to step S81.

  When the distance calculated in step S104 is within a predetermined range (YES route in step S105), it is determined that the mobile phone 10 and the physical condition management mobile terminal device 20 are carried and carried by the same user. The service provision prohibition state by the service provision unit 61 of the service provision server 60 and the service provision unit 71 of the service provision terminal device 70 is released, and the service provision is permitted (step S109).

[2-6] Mobile phone operation:
The operation of the mobile phone 10 in the mobile device management system 1 of the present embodiment will be described with reference to the flowchart (steps S111 to S117) shown in FIG. In the mobile phone 10, a normal call function and e-mail function are used by a user. Apart from these functions, service provision is provided by the service providing server 60 and the service providing terminal device 70 using the mobile phone 10. When receiving, the mobile phone 10 performs the function shown in FIG. 12 according to the location request, error notification, and warning notification from the service providing server 60 and the service providing terminal device 70.

  When the transmission / reception means 12 of the mobile phone 10 receives a request for the first position from the service providing server 60 or the service providing terminal device 70 (YES route in step S111), the GPS position detecting unit 11 receives the current position (of the mobile phone 10). (Location position) detection request is made (step S112), and the current position detected by the GPS position detector 11 is notified to the service providing server 60 or the service providing terminal device 70 as the first position by the transmitting / receiving means 12 (step S112). S113), the process returns to step S111.

  Further, when an error notification is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 12 of the mobile phone 10 (from the NO route in step S111 to the YES route in step S114), information corresponding to the content of the error notification Is displayed as image information on the display (not shown) of the mobile phone 10 and notified to the user or notified to the user as voice information (step S115), and the process returns to step S111.

  Furthermore, when a warning notification is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 12 of the mobile phone 10 (from the NO route in step S114 to the YES route in step S116), information corresponding to the content of the warning notification Is displayed as image information on the display (not shown) of the mobile phone 10 to notify the user, or is notified to the user as voice information and a warning operation is performed (step S117), and then the process of step S111 is performed. Return to. It is assumed that the warning operation performed in step S117 is performed as an operation more emphasized than the error display performed in step S115. For example, as the warning operation, not only the warning content is notified by the display, but also the user is notified more strongly by using the vibration function and the calling function of the mobile phone 10.

[2-7] Operation of physical condition management portable terminal device:
13, 14, and 15 are flowcharts for explaining the operations of the biosensor 21, the weather sensor 22, and the GPS position detection unit 23 in the physical condition management portable terminal device 20 of the present embodiment, respectively. As shown in FIG. 4, the biosensor 21 detects a user's biometric data values (body temperature, blood pressure, heart rate, respiration rate) at a predetermined cycle (step S121), and transmits the detected biometric data values to the CPU 25 ( Step S122).

  Similarly, as shown in FIG. 14, the meteorological sensor 22 detects meteorological data (temperature / water temperature, humidity, pressure / water pressure) in the atmosphere where the user is located at a predetermined period (step S131). The meteorological data is transmitted to the CPU 25 (step S132).

  Further, as shown in FIG. 15, the GPS position detection unit 23 detects the current location (longitude / latitude information) of the user at a predetermined cycle by the global orientation measurement system (step S141), and the detected location The position is transmitted to the CPU 25 (step S142).

  Here, it is assumed that the transmission operation to the CPU 25 by the living body sensor 21, the weather sensor 22, and the GPS position detection unit 23 is controlled to be simultaneously executed in synchronization with the predetermined period.

  FIG. 16 is a flowchart (steps S201 to S229) for explaining the operation of the CPU 25 in the physical condition management portable terminal device 20 of the present embodiment. As shown in FIG. 16, the biosensor 21, the weather sensor 22, and the GPS When the biometric data value, the weather data, and the location are received from the position detection unit 23 (YES route of step S201), the received biometric data value, the meteorological data, and the location are received by the transmission / reception means 255 via the network 3. The biometric data value transmitted to the management server 80 is stored in the memory 28 (step S202), and the weather conditions corresponding to the weather data (temperature / water temperature, humidity, pressure / water pressure) detected by the weather sensor 22 are described above. The biometric data threshold set as shown in FIG. More, it reads is retrieved from the threshold table 24 (step S203).

  Then, the comparison means 253 compares the biological data threshold value read by the threshold value reading means 252 with the biological data values (body temperature, blood pressure, heart rate, respiratory rate) detected by the biological sensor 21 (step S204). The user's physical condition abnormality is determined and detected in accordance with the criteria as described above (step S205). If the biometric data value does not exceed or falls below the biometric data threshold, it is determined that there is no abnormality (NO route in step S205), and the process returns to step S201.

  On the other hand, if the biometric data value exceeds or falls below the biometric data threshold value, it is determined that there is an abnormality (YES route in step S205), and the warning unit 254 performs a warning operation for the user. (Step S206). Specifically, a buzzer or the like in the mobile terminal device 20 is sounded, or an LED lamp or the like is blinked.

  After the warning operation is started, the control unit 256 detects whether or not the stop operation unit 26 is operated by the user (step S207), and the warning operation of the warning unit 254 is performed even after a predetermined time has elapsed after the warning operation is started. When the operation to stop the operation (operation of the stop operation unit 26) is not executed (NO route from step S207 to YES route from step S208), the transmission / reception unit 255 performs notification to the first contact via the network 3. (Step S209).

  At this time, as described above, the situation in which the operation of the stop operation unit 26 is not executed even after a predetermined time has elapsed is considered to be a considerably dangerous state such as the user losing consciousness. In addition to the fire fighting etc., the manager terminal 30, the contact terminal 40, and the attending physician terminal 50 are notified of the abnormal condition of the user together with the biometric data value, the weather data, and the location at the occurrence of the abnormality. In addition, in the state as described above, it is considered that the user himself / herself is not in a state that can be handled by telephone or e-mail. By attaching the value, weather data, and location, automatic call by voice or automatic transmission of e-mail is performed to notify the physical condition abnormality.

  When the operation of the stop operation unit 26 is executed by the user within a predetermined time and the warning operation of the warning unit 254 is stopped (YES route in step S207), whether the notification by the transmission / reception unit 255 is executed by the inquiry unit 257 The user is inquired of whether or not (step S210). In response to this inquiry, when the user makes a response to execute notification by the transmission / reception means 255 (YES route in step S211), the transmission / reception means 255 performs notification to the second contact via the network 3. (Step S212).

  At this time, a call to the attending physician's telephone (for example, attending physician terminal 50) as the second contact is automatically made, and if there is a response from the attending physician (YES route in step S213), the user (mobile terminal device 20) And the attending physician (the attending physician terminal 50) are in a call state (step S214) so that the user can ask the attending physician for an instruction for an appropriate treatment. At this time, the biometric data value, the weather data, and the location at the time of occurrence of the abnormality are also notified to the attending doctor terminal 50 simultaneously by e-mail, for example (step S212).

  If there is no response from the attending physician (NO route in step S213), it is determined whether or not a contact other than the attending physician is registered (step S215). If there is no contact other than the attending physician (NO route in step S215), Returning to step S212, a call to the second contact (primary physician) is executed again. On the other hand, when a contact other than the attending physician (for example, an administrator, an organizer / operator, etc.) is registered (YES route in step S215), an automatic call or email is automatically sent to the contact ( Step S216).

  When the user makes a reply to the inquiry by the inquiry means 257 that the notification by the transmission / reception means 255 is not executed (NO route in step S211), whether or not the user has continuously refused the notification a predetermined number of times. Is determined (step S217). If the notification refusal is not continuously performed a predetermined number of times (NO route of step S217), the process returns to the process of step S201, while the execution of the notification by the transmission / reception unit 255 is continuously rejected a predetermined number of times (step S201). The YES route of S217), the notification to the third contact is forcibly executed via the network 3 by the transmission / reception means 255 (step S218). In other words, if abnormalities are repeatedly detected even if the user stops and cancels the warning by self-judgment, it is determined that the user is in a considerably dangerous state, and a friend or close relative as the third contact person Notification of physical condition abnormality is forcibly performed to (contact terminal 40). At this time, the manager terminal 30 and the attending doctor terminal 50 are also notified of the physical condition abnormality.

  On the other hand, when a request for the second position is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 255 (NO route in step S201 to YES route in step S219), the current position (mobile) A request for detection of the location of the terminal device 20 is made (step S220), and the current location detected by the GPS location detector 23 is sent to the service providing server 60 or the service providing terminal device 70 as the second location by the transmission / reception means 255. Notification is made (step S221), and the process returns to step S201.

  When a request for the detection operation state of the biometric sensor 21 is received from the transmission / reception unit 255 from the service providing server 60 or the service providing terminal device 70 (NO route of step S219 to YES route of step S222), as an operation state detection unit of the control unit 256 Whether or not the biosensor 21 is currently performing an operation of detecting a biometric data value from the user (ie, the physical condition management portable terminal device 20 is actually attached to the user's body and the user Whether or not the data value is being detected is detected as an operating state (step S223), and the detection result is notified to the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 255 ( Step S224), the process returns to step S201.

  When the biometric data value request before and after the interruption of the detection operation of the biometric sensor 21 is received from the service providing server 60 by the transmission / reception means 255 (NO route of step S222 to YES route of step S225), the detection operation by the biosensor 21 The biometric data value over a predetermined period (for example, 1 hour) accumulated in the memory 28 before and after the interruption is read (step S226), and the read biometric data value is serviced via the network 3 by the transmission / reception means 255. The providing server 60 is notified (step S227), and the process returns to step S201.

  Further, when a warning operation request including an error notification or warning notification is received from the transmission / reception means 255 (from the NO route in step S225 to the YES route in step S228), the warning means 254 is controlled by the control means 256 according to the content of the notification. The warning unit 254 executes a warning operation for the user (step S229), and the process returns to step S201. Specifically, a buzzer or the like in the mobile terminal device 20 is sounded, or an LED lamp or the like is blinked. If the mobile terminal device 20 has a display function such as a display, the content of the error notification or warning notification is displayed on the display as in the case of the mobile phone 10. If it is determined in step S228 that a warning operation request has not been received (NO route), the process returns to step S201.

[2-8] Operation of physical condition management server:
FIGS. 17 and 18 are flowcharts (steps S151 to S153, S161 to S165) for explaining the operation (browsing service) of the physical condition management server 80 of this embodiment. First, as shown in FIG. When the physical condition management server 80 periodically receives the biological data value, weather data, and location from the portable terminal device 20 (YES route in step S151), the biological data, weather data, and position data are accumulated. At the same time (step S152), the biometric data, the weather data, and the position data are processed into a graph while being associated with the detection time, reflected on the map, and stored together with the original data (step S153).

  Then, as shown in FIG. 18, in the physical condition management server 80, when there is a data browsing request from the terminal of the contractor (a person who has contracted and registered in advance to receive the service of the physical condition management server 80) ( In step S161, the YES route) requests authentication information (ID number and password) set / issued at the time of contract / registration to the contractor's terminal. When the authentication information is received, the authentication is performed by comparing and collating the authentication information with the contract / registration authentication information stored in advance on the physical condition management server 80 side (step S162). If this is the case (YES route in step S163), a service for browsing stored data, processed graphs and maps (public service) is provided to a contractor who wants to provide a service (step S164). On the other hand, when the personal authentication is not performed (NO route of step S163), an error notification is made to the contractor's terminal (step S165).

By providing such a physical condition management server 80 and using a service provided by the physical condition management server 80, when notifying the user's physical condition abnormality, the biometric data value, the weather data, and the location at the time of occurrence of the abnormality are obtained. Even if not notified at the same time, if the administrator, the attending physician, and the contact who have received the notification of the physical condition abnormality have contracted with the physical condition management server 80 in advance, the biometric data value and the weather data for the user who has experienced the physical condition abnormality And the location can be grasped by accessing the physical condition management server 80.

  In addition, since the biological data value, the weather data, and the location are transmitted from the physical condition management portable terminal device 20 to the physical condition management server 80 in a predetermined cycle (see step S202 in FIG. 16), the biological data value is stored. By using this function, the physical condition management server 80 can realize the function as the operation state detection means (the function provided in the control means 256 of the physical condition management portable terminal device 20 in the above-described embodiment). Therefore, in the physical condition management server 80, based on the biometric data value from the physical condition management mobile terminal device 20, is the biometric sensor 21 of the physical condition management mobile terminal device 20 performing an operation of detecting the biometric data value from the user? No, that is, whether or not the physical condition management portable terminal device 20 is actually attached to the user's body and is in a state of detecting a biometric data value from the user, as an operating state, You may comprise so that the physical condition management server 80 may fulfill the said biosensor detection operation check function according to the flowchart shown in FIG. 11 using a result.

[2-9] Personal information protection operation:
Hereinafter, the operation of personal information protection by the management server 90 will be described with reference to the flowchart of FIG.

  When the position check timing of a predetermined cycle comes (YES route of step S171), the two devices that should be possessed and carried by the same user, that is, the mobile phone 10 and the physical condition management portable terminal device 20 are respectively A first position and a second position are requested (step S172).

  At this time, the information on the combination of the mobile phone 10 and the physical condition management mobile terminal device 20 that should be possessed and carried by the same user is associated with the telephone number of the mobile phone 10 as described above, for example. The management server 90 searches the database and the like by using the telephone number of the mobile phone 10 as a key to search for two devices (the mobile phone 10 and the mobile phone 10 and the ID information). Information on the physical condition management portable terminal device 20) (request destination information) is acquired.

  When there is no response to any of the requests for the first position and the second position (NO route of step S173), a state in which some abnormality has occurred in at least one of the mobile phone 10 and the physical condition management mobile terminal device 20 The management server 90 issues a warning notification to the system administrator and the user (the mobile phone 10 and the physical condition management mobile terminal device 20) (step S174). In addition, the management server 90 executes a predetermined process on the personal information existing inside the mobile phone 10 (step S175), and returns to the process of step S171.

Here, the personal information in the mobile phone 10 means personal information or customer information searched or collected according to FIG.
Further, the predetermined processing for protecting personal information includes deletion of personal information in the mobile phone 10, copying of personal information to the management server and deletion in the mobile phone 10, password lock with a new password, This includes password locks that change existing passwords to new ones.

Therefore, even if the mobile phone 10 is lost or stolen, the personal information in the mobile phone 10 is erased, and unauthorized use by a malicious third party can be more reliably prevented. Sufficient security is ensured, and damage to the user can be minimized.

  When there is an answer / notification of the first position and the second position in response to the request in step S172 (YES route in step S173), the first position and the physical condition management portable terminal notified by the transmission / reception means 12 of the mobile phone 10 The distance to the second position notified by the transmission / reception means 255 of the device 20 is calculated (step S176), and it is determined whether or not the calculated distance is within a predetermined range (step S177). If the distance is within the predetermined range (YES route of step S177), it is determined that the mobile phone 10 and the physical condition management mobile terminal device 20 are possessed and carried by the same user, and the process of step S171 Return to.

  When the distance calculated in step S176 is outside the predetermined range (NO route of step S177), when the state outside the predetermined range does not exceed a predetermined time (for example, 30 minutes) (NO route of step S178) Then, it is determined that the distance between the mobile phone 10 and the physical condition management mobile terminal device 20 is temporarily separated, and the process returns to step S171.

  On the other hand, when it is out of the predetermined range for a predetermined time or longer (for example, 30 minutes or longer) (YES route in step S178), the mobile phone 10 and the physical condition management mobile terminal device 20 due to misplacement, theft, etc. And the management server 90 sends a warning notification to the system administrator and the user (the mobile phone 10 and the physical condition management mobile terminal device 20) (step S179). Then, the management server 90 performs a predetermined process on the personal information existing inside the mobile phone 10 (step S180), and returns to the process of step S171.

Here, the personal information in the mobile phone 10 means personal information or customer information searched or collected according to FIG.
Further, the predetermined processing for protecting personal information includes deletion of personal information in the mobile phone 10, copying of personal information to the management server and deletion in the mobile phone 10, password lock with a new password, This includes password locks that change existing passwords to new ones. That is, predetermined processing related to such personal information is executed from the management server 90 side.

  Before executing predetermined processing on the personal information existing in the mobile phone 10, a message for erasing the physical condition management mobile terminal 20 may be displayed. Further, in response to the erasure notice message, the management server 90 responds to the personal information when there is a response of “erasure approval” or no response of “erasure disapproval” from the mobile terminal device 20 for physical condition management. Then, a predetermined process (erase or password setting / change) may be executed.

  Therefore, even if the mobile phone 10 is lost or stolen, the personal information in the mobile phone 10 is erased if the mobile phone 10 for physical condition management as a portable position detecting device is not possessed. Thus, unauthorized use by a malicious third party can be more reliably prevented, sufficient security can be ensured, and damage to the user can be minimized.

[3] Effects of the portable device management system of this embodiment:
Thus, according to the mobile device management system 1 as an embodiment of the present invention, when the mobile phone 10 accesses the service providing means 61 and 71, the transmission / reception means (first notification means) of the mobile phone 10 is provided. ) The distance between the first position notified by 12 and the second position notified by the transmission / reception means (second notification means) 255 of the physical condition management portable terminal device (portable position detection device) 20 is within a predetermined range. And that the user is authenticated by the authentication of the authentication means 63 and 73, and the biometric sensor 21 in the physical condition management portable terminal device 20 is performing a detection operation of a biometric data value. In addition, provision of a predetermined service by the service providing means 61 and 71 is permitted, but if the distance is outside the predetermined range, or if the user is not the person. If it is, or, if the biological sensor 21 in physical condition managing portable terminal device 20 is not performed the detection operation of the biometric data values, provides the predetermined service is prohibited.

  That is, in the system 1 of the present embodiment, when the distance between the current positions of the two types of devices 10 and 20 that should always be carried and carried by the user is within a predetermined range, in other words, the two types of devices 10 and 20. In the situation where it can be determined that the same person is possessed / carried, and when the user is authenticated by the authentication information as being pre-registered, and Unless the user is wearing the physical condition management portable terminal device 20 on the body, provision of the predetermined service is not permitted.

  Therefore, even if the mobile phone 10 is lost or stolen, it is impossible to receive provision of a predetermined service by the service providing means 61 and 71 unless the portable terminal device 20 for physical condition management is possessed. Unauthorized use by a malicious third party can be more reliably prevented, sufficient security can be ensured, and damage to the user can be minimized. By providing a function as a portable position detection device to a device that is always worn on the user's body, such as the physical condition management portable terminal device 20, the system 1 of the present embodiment functions more effectively and has sufficient security. It will contribute to securing.

  At this time, if the distance is outside the predetermined range for a predetermined time or longer, a warning notification is given to a system administrator or a user, so that misplacement or theft of the mobile phone 10 can be reliably prevented, It is possible to immediately take action against misplacement or theft of the telephone 10 (such as suspension of provision of various services).

  In the present embodiment, since the portable terminal device 20 for physical condition management is provided with a function as a portable position detection device, the biological sensor 21 in the portable terminal device 20 for physical condition management performs an operation of detecting a biological data value. If it is, the provision of the predetermined service is permitted. If the detection operation is not performed, the provision of the predetermined service is prohibited, so that the user must be wearing the physical condition management portable terminal device 20 on the body. Therefore, it is impossible to receive provision of a predetermined service, and unauthorized use of the predetermined service can be prevented more reliably, and sufficient security can be ensured.

  At that time, if the user removes the physical condition management portable terminal device 20 from the body and the detection operation by the biosensor 21 is interrupted and restarted, the statistical value calculation means 65 causes the pre-interrupt statistics of the biometric data value. Values and post-resumption statistical values are calculated, and if these statistical values are statistical values of the same user's biometric data values, the provision of a predetermined service is permitted, but if the statistical values of the same user are not statistical values By prohibiting provision of the predetermined service, it is possible to statistically determine whether or not the user before and after the interruption of the detection operation by the biometric sensor 21 is the same person, and thus clearly different. In the case of a person, provision of the predetermined service can be prohibited, and unauthorized use of the predetermined service can be prevented more reliably, and sufficient security can be ensured. In this case, the provision of the predetermined service is prohibited until the judgment based on the statistical value is confirmed after the detection operation of the biometric data value is interrupted. Use is reliably prevented and sufficient security is ensured.

Further, in the system 1 of the present embodiment, when authentication information is not input / transmitted in response to an authentication information request from the service providing server 60 or the service providing terminal device 70, or when the authentication means 63 and 73 fail to authenticate the user. When there is no response to the request for the first position, the second position and the operation state from the service providing server 60 or the service providing terminal device 70, or when the biosensor 21 is not performing the detection operation, When it is determined that the users before and after the interruption of the biosensor 21 are not the same person, or when the distance between the mobile phone 10 and the physical condition management mobile terminal device 20 is outside the predetermined range, the user (mobile phone 10 / Health management mobile terminal 20) and the system administrator are notified of errors, so that the mobile phone 10 and physical management mobile terminal device are provided to the user and system administrator. You can notify the situation where the possibility of some abnormal or illegal use occurs in 20.

  Furthermore, when there is no response to the request for the first position, the second position, and the operation state from the service providing server 60 or the service providing terminal device 70, or the users before and after the interruption of the biometric sensor 21 are not the same person. If it is determined, or if the distance between the mobile phone 10 and the physical condition management mobile terminal device 20 is out of the predetermined range, a warning is given to the user or system administrator by the warning means 64, 74. The mobile phone 10 and the physical condition management mobile terminal device 20 can surely cope with a situation in which any abnormality or possibility of unauthorized use occurs, so that unauthorized use is surely prevented and sufficient security is ensured.

  In the present embodiment, since the physical condition management portable terminal device 20 having the biosensor 21 is used, the biometric data value detected by the biosensor 21 in the management means 62 and 72 is used to permit / provide service provision. It can also be used as an element for determining prohibition. For example, when the mobile phone 10 accesses the service providing means 61 and 71, the management means 62 and 72 detect the physical condition management mobile terminal device 20 by the biosensor 21 at that time. Requesting notification / transmission of biometric data values (blood pressure, heart rate, respiratory rate), and using the transmitted biometric data values as general reference values or user-specific criteria set in advance for the user If the reference value is exceeded, it is determined that the user may be accessing in a tense state due to intimidation, etc., and the service providing means 61, 71 provides the service. Ban. As a result, when the user is accessing in an extremely tense state (in a state where the blood pressure, heart rate, and respiratory rate are high) in response to intimidation or wire fraud, the service providing means 61, 71 Can be prohibited from providing services and prevent financial damage from threats and wire fraud.

  On the other hand, in the mobile terminal device 20, a biometric data threshold value for managing the physical condition of the user is set in advance in the threshold value table 24 for each weather condition, and meteorological data detected by the weather sensor 22 (for example, temperature, water temperature). , Humidity, atmospheric pressure, water pressure), the biometric data threshold set for the weather condition is retrieved from the threshold table 24 and read out, and the read biometric data threshold and the biometric data value detected by the biosensor 21 (for example, body temperature) , Blood pressure, heart rate, respiration rate), as a result of detecting a user's physical condition abnormality, warning of the user's physical condition abnormality (for example, sounding operation of buzzer, blinking operation of LED lamp, etc.) , A warning due to a mobile phone call operation) is issued, or a user's physical condition is notified to a predetermined contact (for example, by telephone or e-mail). Notification) is or.

  As a result, it is possible to manage and judge the physical condition of the user based on the biometric data threshold corresponding to the weather data in the user's location atmosphere. Management / judgment is possible, and according to the judgment result, the user can be appropriately warned and notified of physical condition abnormalities to the administrator, etc., without relying on the user's self-judgment. Appropriate measures and responses according to the physical condition can be immediately executed.

At this time, when a warning of abnormal physical condition is given to the user, if the operation for stopping the warning operation is not performed for a predetermined time or more by the user, the user is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a notification of the user's physical condition, the user can immediately take action. At that time, by notifying a fire department or the like as the first contact point, an emergency vehicle such as an ambulance can be arranged immediately, and the biometric data value detected by the biosensor 21 can be notified at the same time. Thus, an appropriate treatment according to the biometric data value can be performed more quickly. Further, by simultaneously notifying the user's location by the GPS position detector 23, the user's location can be immediately confirmed, and the emergency vehicle or the like can be immediately directed to the location where the user is located. It is possible to realize a quick initial response.

  In addition, when an operation to stop the warning operation is executed by the user within a predetermined time, the user is inquired about whether or not to execute the physical condition abnormality notification, and the physical condition abnormality notification is executed according to the user's answer. Thus, after alerting the user and notifying the user himself / herself, the physical condition abnormality is notified, so that it is possible to prevent the automatic notification from being performed unnecessarily. Then, a notification is made if the user desires. At that time, by making a telephone call to the attending doctor as the notice, the user can ask the attending doctor for an appropriate treatment, and the biosensor 21 By notifying the detected biometric data value at the same time, the attending physician can make an appropriate determination and an instruction for an appropriate treatment.

  If the user refuses to execute the physical condition abnormality notification for the above inquiries continuously, that is, if the abnormality is repeatedly detected even if the user stops and cancels the warning by self-judgment, It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the location location of the user is immediately confirmed by the GPS location detection unit 23, thereby immediately confirming the location location of the user. A friend or close relative can immediately go to the place where the user is located.

  Even if the mobile phone 10 is lost or stolen, the personal information in the mobile phone 10 is erased if the distance from the physical condition management mobile terminal 20 as the portable position detection device is more than a certain distance. Thus, unauthorized use by a malicious third party can be more reliably prevented, sufficient security can be ensured, and damage to the user can be minimized.

  As described above, according to the portable device management system 1 as one embodiment of the present invention, the mobile phone 10 provided for business use to each employee (employee) in various companies or the like is provided with an automatic response means. Application programs for realizing the functions of 10a1 and execution means 10a2 in the mobile phone 10 are installed in advance, and an administrator who manages the mobile phone 10 calls the mobile phone 10 to be managed when he / she desires. It is possible to cause the mobile phone 10 to execute a desired operation simply by making a call and inputting a signal corresponding to the desired operation (number input). That is, the administrator makes a call with the telephone number to the mobile phone 10 through the mobile phone line (network 30 and base station 4) by the calling means 91 of the management server 90, and between the mobile phone 10 and the management server 90. The communication state is established, and the operation instruction means 92 of the management server 90 sends a predetermined signal corresponding to the operation requested by the administrator (for example, a tone signal generated by pressing a push button having a predetermined number on the telephone) to the mobile phone 10. It is possible to cause the mobile phone 10 to execute a desired operation simply by making a call to and instructing the execution of the requested operation.

  On the mobile phone 10 side, the automatic response means 10a1 automatically establishes a communication state between the management server 90 and the mobile phone 10 by automatically responding to a call made by the call means 91 of the management server 90. The requesting operation corresponding to a predetermined signal from the operation instruction unit 92 of the management server 90 is executed by the execution unit 10a2.

Thereby, the administrator can cause the mobile phone to execute a desired operation regardless of the will of the mobile phone user. In particular, by using such a function, the administrator collects and notifies information on the mobile phone as a request operation by the execution means of the mobile phone, so that the information on the mobile phone [for example, the items (A1) to ( A6)] can be reliably collected and grasped, and the mobile phone can be reliably managed based on the information.

  For example, as described in item (A2) above, by collecting the registration status of the phone book of the mobile phone 10 (for example, the number of phone book registrations and free space), the administrator can manage the mobile phone 10 regardless of the user's will. It is possible to grasp and manage the usage status of the mobile phone 10 supplied from the company and the registration status of personal information.

  By collecting the URL information and the outgoing / incoming call history / email transmission / reception history accessed by the mobile phone 10 as in the above items (A3) and (A4), the administrator is independent of the will of the user of the mobile phone 10. It is possible to grasp and manage the usage status of the mobile phone 10 supplied from the company.

  Also, in recent mobile phones 10, it is possible to change the main body (model change) of the mobile phone with the same telephone number by taking out the built-in ID chip and inserting the ID chip into another mobile phone It is. In such a situation, when the user changes the main body (model change) of the mobile phone 10 supplied from the company without permission, the mobile phone 10 after the change has an automatic response means 10a1 and execution means 10a2. Since the application program that realizes the function is not installed, the mobile phone after the change responds to the management server 90, or requests requested from the management server 90 [for example, model information such as the above item (A1) Or collecting / notifying the serial number], the administrator recognizes whether or not there is a response through the management server 90, so that the main body of the mobile phone 10 provided by the company is used. In other words, it is possible to recognize whether the user has not changed the model without permission.

  Further, the administrator gives further instructions by the operation instruction means 92 of the management server 90 based on the information (notification contents) collected as described above, and the user of the user of the mobile phone 10 in the mobile phone 10 Regardless of the will, the requested action according to the information can be executed.

  For example, by collecting information related to the application program as in the above item (A5), it is possible to recognize whether or not the mobile phone 10 has an unnecessary application program based on the information. When the program is recognized, the unnecessary application program can be prohibited from starting as described in the item (A7). Thus, the administrator can reliably prohibit each user (employee) from using an application program that is considered unnecessary for work on the mobile phone 10 provided by the company.

  By collecting personal information / customer information / confidential information in data (for example, in the mail text) held in the storage unit 10b of the mobile phone 10 as in the above item (A6), the administrator can provide the mobile phone provided by the company. 10 usage status, registration status of personal information / customer information / confidential information, and exchange of personal information / customer information / confidential information by e-mail can be grasped and managed. Then, if necessary, the administrator instructs the mobile phone 10 to delete the personal information / customer information / confidential information as requested by the item (A8), regardless of the user's will. The personal information / customer information / confidential information in the mobile phone 10 can be erased, and the outflow / leakage of personal information / customer information / confidential information through the mobile phone 10 can be reliably suppressed.

At this time, by counting the number of appearances of characteristic characters and characteristic character strings in the retained data and notifying the management server 90, the administrator can store the personal information / customer information / The amount of confidential information can be grasped, and personal information / customer information / confidential information in the mobile phone 10 can be managed.

  In addition, if the character section extracted from the possessed data contains an inappropriate character or inappropriate character string, the character section is considered not to be related to personal information, but the character section that does not contain an inappropriate character or inappropriate character string Is related to personal information. When it is determined that even one inappropriate character or inappropriate character string is included in the character section, the matching process between the character or character string in the character section and the inappropriate character or inappropriate character string ends. Therefore, compared with a technique for performing collation processing with all name character strings included in the name list, collation processing, that is, personal information search processing can be performed at a very high speed.

  In addition, character sections that do not correspond to personal information elements other than names and that include inappropriate characters or inappropriate character strings are not considered to be related to personal information, but do not correspond to personal information elements other than names and are inappropriate. Character sections that do not contain characters or inappropriate character strings are considered to be related to personal information, particularly name. Therefore, for character sections determined to correspond to personal information elements other than names (for example, any one of phone numbers, e-mail addresses, and addresses), the determination process is terminated when the determination is made, and other than the name Only character sections that are determined not to fall under the personal information element of the above are checked against inappropriate characters or inappropriate character strings, and it is determined that even one inappropriate character or inappropriate character string is included in the character section Since the collation process can be terminated at the time of being performed, the name collation process can be performed at a higher speed than the method of collating with all the name character strings included in the name list.

  Further, by further providing the character determination means 124, the character section does not correspond to the personal information element other than the name and does not include the inappropriate character or the inappropriate character string, and the number of characters in the character section is within a predetermined range. In addition, it is possible to consider that the characters in the character section are Kanji characters as information about the name, so that the accuracy of name verification can be improved and the name verification process Can be performed at high speed. At this time, by setting the predetermined range to a general (appropriate) number range for the number of characters of the name, for example, 1 to 6, the name collation accuracy can be further improved, and the name collation process Can be performed at a higher speed. In addition, since a long character section exceeding the predetermined range can be excluded from the verification target by the verification unit, it contributes to further speeding up the name verification process.

[4] Other:
The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  For example, in the above-described embodiment, the case where the mobile device is the mobile phone 10 and the mobile position detection device is provided in the physical condition management mobile terminal device 20 has been described, but the present invention is not limited thereto. Instead, the portable device may be, for example, a PDA, an IC card, or the like, or a portable position having functions as a GPS position detection unit (second position detection unit) 23 and a transmission / reception unit (second notification unit) 255. The detection device may be provided in a device such as a wristwatch that is always worn on a part of the user's body and can be carried or carried. In either case, the same effect as that of the above-described embodiment can be obtained.

By the way, functions as the threshold setting means 251, threshold reading means 252, comparison means 253, warning means 254, transmission / reception means 255, control means 256 and inquiry means 257 in the above-described physical condition management portable terminal device 20 (all or Some functions are realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program. Further, functions as the service providing means 61, the management means 62, the authentication means 63, the warning means 64, the statistical value calculation means 65, and the statistical value judgment means 66 in the management server 60 (all or a part of the functions of each means). In addition, the functions (all or part of the functions of each means) as service providing means 71, management means 72, authentication means 73, and warning means 74 in the service providing terminal device 70 are also computers (CPU, information processing device, various terminals). Is implemented by executing a predetermined application program.

  For example, in the above-described embodiment, a specific search method in the case of searching for personal information / customer information has been described. However, the present invention searches and manages confidential information (information with confidentiality obligation) within a company or the like. In this case, it is applied in the same manner as described above, and the same effects as those of the above-described embodiment can be obtained, and the inadvertent leakage / leakage of confidential information and unauthorized use of confidential information can be reliably prevented. In that case, as an inappropriate character or inappropriate character string, a character or a character string that cannot appear in the confidential information is set.

  In the above-described embodiment, the case where the personal information elements other than the name are the three elements of the telephone number, the e-mail address, and the address has been described. However, the present invention is not limited to this, and other than the name. As the personal information element, for example, date of birth, basic resident register number, account number, credit card number, license number, passport number, etc. may be used.

  Furthermore, in the above-described embodiment, the requested operation for the mobile phone 10 is the collection / notification of information of the items (A1) to (A6), prohibition of unnecessary application program activation, personal information / customer information / confidentiality. Although the case of erasing information has been described, the present invention is not limited to these, and collection / notification of various information other than the above information and various operations other than the above operations from the management server 90 to the mobile phone 10. The mobile phone 10 can execute the operation regardless of the will of the user of the mobile phone 10.

In the above-described embodiment, the case where the terminal having the mobile phone function is the mobile phone itself has been described. However, the present invention is not limited to this, and any terminal having a mobile phone function may be used. It may be a desktop type PC (Personal Computer), or a portable notebook PC (Personal Computer) or PDA (Personal Digital Assistant). The same effect as the embodiment can be obtained.

  Furthermore, in the above-described embodiment, the count result for these information elements is notified from the terminal (mobile phone 10) to the management server 90 as the search result of personal information / customer information / confidential information. On the basis of the counting result obtained for each file held in the file, it is determined whether each file is a personal information file, a customer information file or a confidential information file, and the determination result, that is, the personal information file or The presence or absence of a customer information file or a confidential information file may be notified as a search result.

  By the way, as described above, the computer (including the CPU, the information processing apparatus, and various terminals) performs the functions (all or a part of the functions) of the mobile phone 10 as the automatic response means 10a1 and the execution means 10a2. This is realized by executing a predetermined application program installed. Similarly, the functions (all or some of the functions of each unit) as the above-described calling unit 91 and operation instruction unit 92 in the management server 90 are also computers (including a CPU, an information processing apparatus, and various terminals) as described above. Is realized by executing a predetermined application program installed in advance.

These application programs are, for example, flexible disks, CDs (CD-
ROM, CD-R, CD-RW, etc.), DVD (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.) etc. Is done. In this case, the computer reads the application program from the recording medium, transfers it to an internal storage device or an external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The application program includes program code for causing the above-described computer to realize the functions as the various means 251 to 257, 61 to 66, and 71 to 74 described above. Also, some of the functions may be realized by the OS instead of the application program.

  In addition to the above-described flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk, the recording medium in the present embodiment includes an IC card, ROM cartridge, magnetic tape, punch card, computer internal storage device (RAM). In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.

[5] Note:
Each supplementary note described below also represents an embodiment of the present invention.
(Appendix A1)
A service providing means capable of providing a predetermined service to the user;
Management means for managing the predetermined service provided by the service providing means;
First position detecting means carried by the user and detecting the current position as the first position; first notifying means for notifying the managing means of the first position detected by the first position detecting means; and A portable device having access means for accessing the service providing means to receive provision of the predetermined service;
Second position detecting means carried by the user and detecting the current position as the second position; and second notification means for notifying the management means of the second position detected by the second position detecting means. A portable position detection device separate from the portable device,
When the portable device accesses the service providing means by the access means, the first position notified by the first notification means of the portable device and the second notification of the physical condition management portable terminal device When the distance from the second position notified by the means is out of a predetermined range, or when the operation state detection means detects that the biosensor is not performing the detection operation, the management The means prohibits the provision of the predetermined service by the service providing means, and executes predetermined processing on personal information existing in the portable device.
(Appendix A2)
The management means is
The portable device management system according to appendix A1, wherein when the distance is outside the predetermined range, the service providing unit prohibits the provision of the predetermined service.
(Appendix A3)
Appendix A further comprising warning means for notifying a system administrator or the user when the distance is outside the predetermined range for a predetermined time or more.
The portable device management system according to 1 or appendix A2.
(Appendix A4)
The user authenticates the user based on authentication information about the user input by the user when the user receives provision of the predetermined service, and notifies the management means of the identity authentication result. Provide further authentication means,
The management means is
When the distance is within the predetermined range, and the authentication unit notifies the user that the user is authenticated, the predetermined unit by the service providing unit The portable device management system according to any one of Supplementary Note A1 to Supplementary Note A3, wherein the provision of a service is permitted.
(Appendix A5)
The mobile device management system according to any one of appendices A1 to A4, wherein the mobile device is a mobile phone.
(Appendix A6)
The portable device management system according to any one of appendices A1 to A4, wherein the portable device is a card-type device.
(Appendix A7)
The portable device management system according to any one of appendices A1 to A6, wherein the portable position detection device is provided in a wristwatch.
(Appendix A8)
Appendix A1 wherein the portable position detection device is provided in a physical condition management portable terminal device having a biometric sensor for detecting a biometric data value of the user so as to manage the physical condition of the user. The portable device management system according to any one of to A6.
(Appendix A9)
Further comprising an operation state detection means for detecting whether or not the biosensor is performing the detection operation of the biometric data value;
The management means is
The mobile device management according to appendix A8, wherein when the operation state detection unit detects that the biometric sensor is not performing the detection operation, the service providing unit prohibits the provision of the predetermined service. system.
(Appendix A10)
A statistical value of the biometric data value detected by the biometric sensor before the interruption of the detection operation is calculated as a statistical value before interruption, and a statistical value of the biometric data value detected by the biometric sensor after the detection operation is resumed A statistical value calculating means for calculating as a statistical value after restarting,
Statistical value for comparing the statistical value before interruption calculated by the statistical value calculating means with the statistical value after restart, and determining whether these statistical values are statistical values of biometric data values of the same user With more judgment means,
The management means is
The distance is within the predetermined range, and the statistical value determination means determines that the statistical value before interruption and the statistical value after restart are statistical values of biometric data values of the same user. In this case, the mobile device management system according to appendix A9, wherein provision of the predetermined service by the service providing unit is permitted.
(Appendix A11)
The management means is
The provision of the predetermined service by the service providing unit is prohibited until the post-resumption statistical value is calculated by the statistical value calculating unit and the determination result by the statistical value determining unit is obtained after the detection operation is restarted. The portable device management system according to appendix A10.
(Appendix A12)
The management means is
When the statistical value determination means determines that the statistical value before interruption and the statistical value after restart are not statistical values of biometric data values of the same user, the service providing means continues to prohibit the provision of the predetermined service. A portable device management system according to appendix A11, characterized in that:
(Appendix B1)
A terminal having a mobile phone function to be provided to each user;
A management server for managing the terminal;
The management server
Calling means for making a call by telephone number to the terminal through a mobile phone line and establishing a communication state between the terminal and the management server;
Along with the establishment of the communication state, it is configured with operation instruction means for transmitting a predetermined signal corresponding to an operation requested by an administrator to the terminal and instructing execution of the requested operation,
The terminal
Automatic response means for automatically responding to the management server to establish the communication state between the management server and the terminal in response to a call made by the calling means of the management server;
An execution unit configured to receive the predetermined signal from the operation instruction unit of the management server with the establishment of the communication state and execute the requested operation in accordance with the predetermined signal;
An application program for realizing the functions as the automatic response means and the execution means in the terminal is installed in the terminal before the terminal is provided to each user, and has a mobile phone function Mobile device management system.
(Appendix B2)
The request operation is information collection / notification in the terminal,
The mobile device management system having a mobile phone function according to appendix B1, wherein the execution unit of the terminal collects information about the terminal and notifies the management server of the information.
(Appendix B3)
The mobile device management system having a mobile phone function according to appendix B2, wherein the execution unit of the terminal notifies the management server of information related to the terminal using electronic mail.
(Appendix B4)
The mobile device having the mobile phone function according to appendix B2 or appendix B3, wherein the operation instructing unit of the management server instructs the terminal of a requested operation according to the content of notification from the terminal Management system.
(Appendix B5)
Any one of appendix B2 to appendix B4, wherein the execution means of the terminal collects model information of the terminal or a serial number that can identify the terminal as information in the terminal and notifies the management server A mobile device management system having the mobile phone function according to claim 1.
(Appendix B6)
The execution means of the terminal collects the registration status of the phone book of the terminal as information in the terminal and notifies the management server of the information, according to any one of appendix B2 to appendix B5, A mobile device management system having a mobile phone function.
(Appendix B7)
The terminal having the mobile phone function according to appendix B6, wherein the execution means of the terminal collects the number of registrations or free space in the phone book as the registration status of the phone book and notifies the management server Management server.
(Appendix B8)
Any one of appendix B2 to appendix B7, wherein the execution means of the terminal collects URL (Uniform Resource Locator) information accessed by the terminal as information on the terminal and notifies the management server A mobile device management system having the mobile phone function according to claim 1.
(Appendix B9)
Any one of appendix B2 to appendix B8, wherein the execution means of the terminal collects the outgoing / incoming history or mail transmission / reception history at the terminal as information at the terminal and notifies the management server A portable device management system having the described cellular phone function.
(Appendix B10)
Any one of appendix B2 to appendix B9, wherein the execution unit of the terminal collects information on an application program held in the terminal as information in the terminal and notifies the management server A mobile device management system having the mobile phone function described in 1. (Appendix B11)
When the terminal recognizes that the terminal has an unnecessary application program registered in advance based on the information related to the application program notified from the terminal, the operation instruction unit of the management server Instructing prohibition of unnecessary application programs as the requested operation,
The mobile device management system having a mobile phone function according to appendix B10, wherein the execution means of the terminal prohibits activation of the unnecessary application program.
(Appendix B12)
The execution means of the terminal searches personal information / customer information / confidential information as information in the terminal and notifies the management server of the search result, any one of appendix B2 to appendix B11 A portable device management system having the cellular phone function according to the item.
(Appendix B13)
The mobile phone according to appendix B12, wherein the execution unit of the terminal searches personal information / customer information / confidential information in data held in the terminal and notifies the management server of the search result Mobile device management system with functions.
(Appendix B14)
When it is notified that the terminal has personal information / customer information / confidential information as the search result, the operation instruction means of the management server deletes the personal information / customer information / confidential information. Instructed as request action,
The mobile device management system having a mobile phone function according to appendix B12 or appendix B13, wherein the execution unit of the terminal executes deletion of personal information / customer information / confidential information.
(Appendix B15)
The execution unit of the terminal collates a character or character string included in the data with a character or character string preset as a character or character string that appears characteristically in personal information / customer information / confidential information. The mobile phone function according to appendix B13, wherein the number of times the feature character or the feature character string appears in the data is counted and the count result is notified to the management server as the search result. Mobile device management system.
(Appendix B16)
The execution means of the terminal is
Extraction means for extracting text data of the data;
Cutting means for cutting out character sections delimited by delimiters from the text data extracted by the extracting means;
By determining whether or not the character string in the character section cut by the cutting means satisfies any one of the preset telephone number determination condition, e-mail address determination condition, and address determination condition, A determination means for determining whether or not any one of a telephone number, an e-mail address, and an address which is a personal information element other than the name;
It is determined whether or not the number of characters in the character section determined not to correspond to any of the telephone number, the e-mail address, and the address is within a predetermined range and whether the character in the character section is a Chinese character. Character judgment means,
A character section that is determined by the character determining means to be within the predetermined range and to be a kanji character is a character or character string included in the character section and a kanji or kanji character string that is not set in advance in the name. Collating means for determining whether or not the character section includes the inappropriate character or the inappropriate character string by verifying the appropriate character or the inappropriate character string, and
The number of character sections determined to correspond to any one of a telephone number, an e-mail address, and an address by the determining means, and the matching means determined not to include the inappropriate character or inappropriate character string. Functions as a counting means for counting the number of each character section,
The mobile device management system having a mobile phone function according to appendix B13, wherein the count result by the counting means is notified to the management server as the search result.

It is a block diagram which shows the structure of the portable apparatus management system as one Embodiment of this invention. It is a block diagram which shows the structure of the mobile telephone in the portable apparatus management system of this embodiment. It is a block diagram which shows the structure of the portable terminal device for physical condition management in the portable device management system of this embodiment. It is a sequence diagram for demonstrating operation | movement of the portable apparatus management system of this embodiment. It is a sequence diagram for demonstrating operation | movement of the portable apparatus management system of this embodiment. It is a sequence diagram for demonstrating operation | movement of the portable apparatus management system of this embodiment. It is a flowchart for demonstrating operation | movement of the execution means which performs a personal information search function in the mobile telephone of this embodiment. It is a flowchart for demonstrating the operation | movement (service provision operation | movement of a service provision terminal device) of this embodiment. It is a flowchart for demonstrating operation | movement (service provision operation | movement of a service provision server) of this embodiment. It is a flowchart for demonstrating the operation | movement (location check function of a service provision server) of this embodiment. It is a flowchart for demonstrating the operation | movement (the biosensor detection operation check function of a service provision server) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement of a mobile telephone) of this embodiment. It is a flowchart for demonstrating operation | movement (operation | movement of the biosensor in the portable terminal device for physical condition management) of this embodiment. It is a flowchart for demonstrating operation | movement (operation | movement of the weather sensor in the portable terminal device for physical condition management) of this embodiment. It is a flowchart for demonstrating operation | movement (operation | movement of the GPS position detection part in the portable terminal device for physical condition management) of this embodiment. It is a flowchart for demonstrating operation | movement (Operation | movement of CPU in the portable terminal device for physical condition management) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement / browsing service of a physical condition management server) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement / browsing service of a physical condition management server) of this embodiment. It is a flowchart for demonstrating the operation | movement (protection of personal information) of this embodiment.

Explanation of symbols

1 Mobile device management system 3 Network (cell phone line)
4 Base station 10 Mobile phone (mobile device)
10a CPU
10b Storage unit 10c Quarantine table 10a1 Automatic response unit 10a2 Execution unit 11 GPS position detection unit (first position detection unit)
12 Transmission / reception means (first notification means)
13 Access means 20 Physical condition management portable terminal device (portable position detection device)
21 Biological sensor 22 Weather sensor 23 GPS position detector (second position detector)
24 threshold value table 25 CPU
251 Threshold value setting means 252 Threshold value reading means 253 Comparison means 254 Warning means (physical condition abnormality warning means)
255 Transmission / reception means (second notification means, physical condition notification means)
256 Control means (operation state detection means)
257 Inquiry means 26 Stop operation part 27 Answer input part 28 Memory 30 Manager terminal 40 Contact terminal 50 Primary doctor terminal 60 Service providing server 61 Service providing means 62 Management means 63 Authentication means 64 Warning means 65 Statistical value calculation means 66 Statistical value judgment Means 70 Service providing terminal device (ATM, various terminals, etc.)
71 Service Providing Means 72 Management Means 73 Authentication Means 74 Warning Means 75 IC Card Reader / Writer 80 Physical Condition Management Server 90 Management Server 91 Calling Means 92 Operation Instruction Means 121 Extraction Means 122 Extraction Means 123 Determination Means 123a Telephone Number Determination Means 123b E-mail address determination means 123c Address determination means 124 Character determination means 125 Verification means 126 Counting means

Claims (8)

A database that holds information about a combination of a portable device and a portable position detection device carried by the same user;
Management means for managing the portable device based on information of a combination of the portable device and the portable position detecting device carried by the same user held in the database;
First position detecting means that is carried by the user and detects the current position as the first position, and transmitting / receiving means for notifying the management means of the first position and identification information and receiving an instruction from the management means A portable device having:
Second position detecting means that is carried by the user and detects a current position as a second position, and the biometric sensor mounted on a part of the user's body detects the biometric data value from the user An operating state detecting means for detecting whether or not a detecting operation is being performed, a detection result indicating whether the detecting operation is being performed, the second position and identification information are notified to the managing means and an instruction from the managing means A portable position detection device that is separate from the portable device and has a biological sensor that detects the user's biological data value and should be always carried by the user. In addition,
When the distance between the first position notified by the transmission / reception means of the portable device and the second position notified by the transmission / reception means of the portable position detection device is out of a predetermined range, or When it corresponds to at least one of the cases where the operation state detection means detects that the biological sensor is not performing the detection operation,
The management means refers to the combination of the portable device and the portable position detection device by the database based on the identification information, and sets a message to the effect that a predetermined process is executed on the portable device. Present in the portable device corresponding to the combination when there is a response of approval from the portable position detection device and when there is a response of approval or no response of disapproval Execute predetermined processing on personal information
A portable device management system. The management means is
Calling means for making a call by telephone number to the portable device through a portable telephone line and establishing a communication state between the portable device and the management means;
Along with the establishment of the communication state, it is configured with operation instruction means for transmitting a predetermined signal corresponding to the operation requested by the administrator to the portable device and instructing execution of the requested operation,
The portable device is
An automatic response means for automatically responding to the management means to establish the communication state between the management means and the portable device in response to a call made by the calling means of the management means;
And an execution unit configured to receive the predetermined signal from the operation instruction unit of the management unit in accordance with the establishment of the communication state and execute the requested operation in accordance with the predetermined signal.
An application program for realizing the functions as the automatic response means and the execution means in the portable device is installed in the portable device before the portable device is provided to each user,
The request operation is an operation of collecting information in the portable device and notifying the management means,
The execution means of the mobile device searches for personal information in the data held in the mobile device and notifies the management means of the search result as information in the mobile device. And at least one of name, date of birth, address, residence, telephone number, e-mail address, job title, personal identification information as a characteristic character or characteristic character string that appears characteristically in personal information In comparison with such, count the number of times the feature character or the feature character string appears in the data, and notify the management means of the count result as the search result,
When it is notified that the portable device holds personal information as the search result, the operation instruction unit of the management unit instructs the erasure of the personal information as the request operation,
The execution means of the portable device executes a predetermined process on the personal information;
The portable device management system according to claim 1. The management means is
Calling means for making a call by telephone number to the portable device through a portable telephone line and establishing a communication state between the portable device and the management means;
Along with the establishment of the communication state, it is configured with operation instruction means for transmitting a predetermined signal corresponding to the operation requested by the administrator to the portable device and instructing execution of the requested operation,
The portable device is
An automatic response means for automatically responding to the management means to establish the communication state between the management means and the portable device in response to a call made by the calling means of the management means;
And an execution unit configured to receive the predetermined signal from the operation instruction unit of the management unit in accordance with the establishment of the communication state and execute the requested operation in accordance with the predetermined signal.
An application program for realizing the functions as the automatic response means and the execution means in the portable device is installed in the portable device before the portable device is provided to each user,
The request operation is an operation of collecting information in the portable device and notifying the management means,
The execution means of the portable device comprises:
In order to search personal information in the data held in the portable device and notify the management means of the search result as information in the portable device,
Extraction means for extracting text data of the data;
Cutting means for cutting out character sections delimited by delimiters from the text data extracted by the extracting means;
By determining whether or not the character string in the character section cut by the cutting means satisfies any one of the preset telephone number determination condition, e-mail address determination condition, and address determination condition, A determination means for determining whether or not any one of a telephone number, an e-mail address, and an address which is a personal information element other than the name;
It is determined whether or not the number of characters in the character section determined not to correspond to any of the telephone number, the e-mail address, and the address is within a predetermined range and whether the character in the character section is a Chinese character. Character judgment means,
A character section that is determined by the character determining means to be within the predetermined range and to be a kanji character is a character or character string included in the character section and a kanji or kanji character string that is not set in advance in the name. Collating means for determining whether or not the character section includes the inappropriate character or the inappropriate character string by verifying the appropriate character or the inappropriate character string, and
The number of character sections determined to correspond to any one of a telephone number, an e-mail address, and an address by the determining means, and the matching means determined not to include the inappropriate character or inappropriate character string. Functions as a counting means for counting the number of each character section,
Notifying the management means as the exploration result of the counting result by the counting means,
When it is notified that the portable device holds personal information as the search result, the operation instruction unit of the management unit instructs the erasure of the personal information as the request operation,
The execution means of the portable device executes a predetermined process on the personal information;
The portable device management system according to claim 1, wherein: The predetermined process is erasure of the personal information in the portable device;
The portable device management system according to any one of claims 1 to 3. The predetermined processing is copying to the personal information management means in the portable device and erasing in the portable device.
The portable device management system according to any one of claims 1 to 3. The predetermined process is setting or changing a password for the personal information in the portable device.
The portable device management system according to any one of claims 1 to 3. The predetermined processing is executed after notifying the portable position detection device from the management device.
The portable device management system according to any one of claims 4 to 6, wherein The predetermined process is executed when a distance between the first position and the second position is out of a predetermined range for a predetermined time or more.
The portable device management system according to any one of claims 1 to 6, wherein