JP4140310B2 - Communication device, communication management device, communication program, and communication management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent data from being stolen when a client itself to be connected to a communication system is stolen. <P>SOLUTION: The client 3 for storing radio LAN card ID for identifying a normal radio LAN card and client ID for identifying the client 3 itself transmits information such as the client ID to office servers 1A, 1B or a head office server 2 through an external access point 1AI, 1BI, 2I, 1AE, 1BE, or 2E when the radio LAN card ID of an inserted radio LAN card coincides with the stored radio LAN card ID. When the transmitted information is transmitted from the normal client 3 and the transmitting place and time are not illegal, the office servers 1A, 1B or the head office server 2 permits the start of the client 3. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a communication device and a communication program that perform data transmission and reception, and a communication management device and a communication management program that manage communication of the communication device.
[0002]
[Prior art]
Conventionally, as security for access to a wireless LAN (Local Area Network), a communication device having the same keyword, for example, a configuration in which the wireless LAN cannot be accessed only by a personal computer, and prevention of wiretapping of radio waves by data encryption are provided. There was a measure.
[0003]
In addition, to prevent the PC itself from being stolen, it was connected with a chain or the like to make it impossible to carry out the PC itself, or the PC itself was put in a storage and locked.
[0004]
[Problems to be solved by the invention]
However, although the security of the conventional wireless LAN is effective for unauthorized access and eavesdropping, the personal computer itself can be started up freely without being connected to the wireless LAN. There is a possibility that files and data in the personal computer can be viewed, and there is a possibility that data of devices on the LAN may be stolen by connecting to the wireless LAN using the stolen personal computer itself.
[0005]
In addition, the conventional configuration in which the personal computers themselves are connected in a chain or stored in a storage has a problem that the management work burden on the administrator is large.
[0006]
An object of the present invention is to prevent data from being stolen when a communication device itself for communication connection is stolen.
[0007]
[Means for Solving the Problems]
  The communication apparatus according to claim 1, wherein communication is performed using a detachable communication connection unit, wherein the communication connection unit includes first identification information.And movement range information usable by the communication deviceComprising first storage means for storingPosition detecting means for detecting the current position of the communication device;Second storage means for storing second identification information; second identification information stored in the second storage means;Mounted saidStored in the first storage means of the communication connection meansFirstWhether the identification information matchesAnd whether or not the current position detected by the position detection means is within the range of usable movement range information stored in the first storage means of the attached communication connection meansDetermining means for determining whether the second identification information and the first identification information match.And the current position is determined to be within the range of the usable movement information.And a control means for starting the communication device.
[0008]
  The communication apparatus according to claim 2, wherein the communication apparatus performs communication using a detachable communication connection means.
  The communication connection means includes first storage means for storing first identification information and use time zone information of the communication device,
  A time measuring means for measuring the current time;
  Second storage means for storing second identification information;
  Whether or not the second identification information stored in the second storage means matches the first identification information stored in the first storage means of the attached communication connection means, and Discriminating means for discriminating whether or not the current time detected by the time measuring means is within the range of use time zone information stored in the first storage means of the attached communication connection means;
When it is determined by the determination means that the second identification information and the first identification information match, and the current time is determined to be within the range of the use time zone information, a communication device And a control means for activating.
[0009]
  The communication management device according to claim 3 is a communication management device that manages communication of a communication device, and stores first identification information of the communication device from the communication device and second identification information. A storage unit; a determination unit that determines whether or not the first identification information received by the reception unit matches the second identification information stored in the storage unit; and If it is determined that the identification information of the first identification information and the second identification information do not match, inquiry means for inquiring the communication management device whether or not to allow activation of the communication device of the first identification information, and the inquiry When the response information permitting activation of the communication device is received from the communication management device or when the first identification information and the second identification information match with each other by the determination means If Transmitting means for transmitting activation permission information to the communication device.
[0018]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below with reference to the accompanying drawings.
[0019]
First, the features of the apparatus according to the present embodiment will be described with reference to FIGS. FIG. 1 is a block diagram showing the configuration of the LAN system α in the present embodiment, FIG. 2 is a diagram showing areas managed by the office server and the head office server, and (I) is the office server 1A. (II) is a diagram showing an area managed by the office server 1B, and (III) is a diagram showing an area managed by the headquarter server 2. 3 is a diagram showing the internal configuration of the office servers 1A and 1B, FIG. 4 is a diagram showing the internal configuration of the headquarter server 2, and FIG. 5 is a diagram showing the internal configuration of the client 3. As shown in FIG.
[0020]
As shown in FIG. 1, the LAN system α of the present embodiment is a client-server system by LAN connection of a company, and the company has two offices A and B, each of which employees belong, Offices A and B are assumed to be managed by the headquarters. Furthermore, the headquarters functions in the same manner as the business office, employees also belong to it, and the headquarters centrally manages itself and the business offices A and B.
[0021]
The LAN system α includes a business office server 1A that manages clients in the business office A, a business office server 1B that manages clients in the business office B, and a head office server that manages clients in the business office servers 1A and 1B and the head office. 2 and a client 3 which is a portable terminal owned by an employee, and the office servers 1A and 1B and the headquarter server 2 are communicatively connected by a wired LAN 4. The client 3 is a portable terminal such as a notebook personal computer, and is a device capable of wireless LAN communication.
[0022]
Further, the LAN system α performs internal wireless LAN communication with the client 3 and includes an internal access point 1AI and an external access point 1AE connected to the office server 1A, and an internal access point 1BI connected to the office server 1B. And an external access point 1BE.
[0023]
Here, the internal access points 1AI, 1BI, 2I and the external access points 1AE, 1BE, 2E will be described with reference to FIG. The internal access point 1AI is a wireless LAN communication repeater in the internal area 51A, which is an area in the establishment A shown in FIG. The external access point 1AE is a wireless LAN communication repeater in the external area 52A, which is an area near the outside of the internal area 51A, and is used to detect unauthorized wireless LAN connections.
[0024]
In addition, employees belonging to a company are divided into a plurality of groups according to their job titles, job descriptions, and the like, and each group has different areas where wireless LAN communication is permitted. Assuming that groups a, b, c, d, and e exist now, as shown in FIG. 2 (I), employees belonging to group a can legitimately access the wireless LAN in the group areas 53a1 and 53a2. Employees belonging to group b can legitimately access the wireless LAN within group area 53a1, and employees belonging to group c can legitimately access the wireless LAN within group area 53c.
[0025]
For example, a general employee can belong to a group with a small group area or a narrow group, and an employee who is a system administrator or manager can belong to a group with a large group area or a wide group. Moreover, the structure which makes one employee belong to a some group may be sufficient, and the structure where group area | regions overlap may be sufficient.
[0026]
Further, as shown in FIG. 2 (II), the internal access point 1AI also for the office B similarly relays wireless LAN communication in the internal area 51B, which is an area within the office B that is legally capable of wireless LAN communication. It is a vessel. The external access point 1BE is a wireless LAN communication repeater in the external area 52B.
[0027]
The office B is provided with an internal area 51B and an external area 52B near the outside of the internal area 51B, and the internal area 51B includes a group area in which employees belonging to the group a can access the wireless LAN properly. 53a3, a group area 53b2 corresponding to employees belonging to group b, and a group area 53d corresponding to employees belonging to group d are included.
[0028]
Similarly, the LAN system α includes an internal access point 2I connected to the headquarter server 2 and an external access point 2E. As shown in FIG. 2 (III), the internal access point 2I is also a repeater for wireless LAN communication in the internal area 51, which is an area in the headquarters where wireless LAN communication can be legally performed. The external access point 2 </ b> E is a wireless LAN communication repeater in the external area 52.
[0029]
The headquarters is provided with an internal area 51 and an external area 52 adjacent to the outside of the internal area 51. Within the internal area 51, a group area 53a4 that allows employees belonging to the group a to access the wireless LAN properly. , A group area 53b3 corresponding to employees belonging to group b and a group area 53e corresponding to employees belonging to group e are included.
[0030]
The wired LAN 4 may include a WAN (Wide Area Network) or the like, and also includes a telephone line network, an ISDN (Integrated Services Digital Network) line network, a broadband communication line network, a dedicated line, a mobile communication network, a communication satellite line, A configuration including a CATV (Cable Television) line, an optical communication line, a wireless communication line, and an Internet service provider for connecting them may be used.
[0031]
In the present embodiment, there are two office servers. However, the number of office servers is not limited to this, and other numbers corresponding to the number of arbitrary offices may be used. The number and the arrangement configuration are not limited to the configurations shown in FIGS. Further, although each access point is represented by one unit, it is assumed that a plurality of units are installed to cover a certain area.
[0032]
As shown in FIG. 3, the office servers 1A and 1B include a CPU (Central Processing Unit) 11 that centrally controls each unit, an input unit 12 that receives input of information from a user, and a RAM (temporarily storing information). Random Access Memory) 13, a display unit 14 for displaying information to the user, a storage device 15 for storing information, a communication control unit 16 for transmitting / receiving information to / from an external device, and a clock unit 17 for outputting the current date and time. And a time recorder 18 for recording the time of employee leaving and leaving the office, and each part is connected by a bus 19.
[0033]
The CPU 11 expands in the RAM 13 application programs designated from among the system programs stored in the storage device 15 and various application programs corresponding to the office servers 1A and 1B, and is input from the input unit 12 Instructions or various data corresponding thereto are temporarily stored in the RAM 13, various processes are executed in accordance with the application program stored in the storage device 15 in accordance with the input instructions and input data, and the processing results are stored in the RAM 13. The data is stored and displayed on the display unit 14.
[0034]
The CPU 11 executes a first client activation management process. By executing the first client activation management process, the CPU 11 receives the client ID, the wireless LAN card ID, the latitude and longitude information, and the current date and time information received from the client 3, the location specifying table 71 and the individual stored in the storage unit 15. The information stored in the separate management memory 72 is used to determine whether each information is valid. If the information is valid, a determination result for permitting activation is transmitted to the client 3. Is sent to the client 3 and the administrator and the owner are notified by email of the possibility of theft.
[0035]
Further, when the received client ID is not in the location specifying table 71 and the individual management memory 72, the CPU 11 transmits the information to the headquarter server 2 and receives the determination result of the start permission of the client 3 from the headquarter server 2. To the client 3 (see FIG. 11).
[0036]
The input unit 12 includes a keyboard having a cursor key, numeric input keys, various function keys, and the like, and a pointing device such as a mouse. The input unit 12 outputs, to the CPU 11, a pressing signal pressed by the operator and a position signal of the pointing device. To do.
[0037]
The RAM 13 is a memory having a work area for storing various programs, input data, and various data such as processing results so that they can be randomly accessed and temporarily storing various information.
[0038]
The display unit 14 includes a CRT (Cathode Ray Tube), an LCD (Liquid Crystal Display), a PDP (Plasma Display Panel), or an EL (Electro Luminescence) display, and displays various display data according to display instructions input from the CPU 11. I do.
[0039]
The storage device 15 includes a recording medium (not shown) in which various programs, various data, and the like are stored or writable in advance, and the recording medium is a magnetic or optical recording medium or a nonvolatile memory such as a semiconductor. The CPU 11 is a readable recording medium. The recording medium includes a fixed type such as a fixed hard disk or a portable type such as a CD-RW, a DVD + RW, a DVD-RAM, a memory card, and a portable hard disk that can be detachably mounted.
[0040]
The RAM 13 and the storage device 15 are configured to be able to read and rewrite internal data under the control of the CPU 11. As the recording medium, a readable / writable flexible disk, a magneto-optical disk, and a flash memory may be employed. As a recording medium for recording the program, a read-only CD-ROM, DVD, ROM or the like may be adopted.
[0041]
The program, data, etc. stored in the storage device 15 may be partly or entirely received from an external device via a communication network and stored, and the storage device 15 is stored on the communication network. It may be a storage device of an external device constructed in the above. Further, the various programs may be transmitted and installed to an external device via the communication network.
[0042]
The communication control unit 16 includes a wired LAN card and the like for communicating with the headquarter server 2 via the wired LAN 4, and also has an internal access point 1AI and an external access point 1AE (in the case of the business division server 1A) (or The internal access point 1BI and the external access point 1BE (in the case of the business division server 1B) have a function of communication connection.
[0043]
The timer unit 17 outputs the current date and time including the current date and time in response to a request from the CPU 11. The time recorder 18 prints and records the date and time of the employee's entry / exit on the employee's time card, and outputs the date / time information of the employee's entry / exit to the CPU 11.
[0044]
As shown in FIG. 4, the headquarter server 2 includes a CPU 21, an input unit 22, a RAM 23, a display unit 24, a storage device 25, a communication control unit 26, a time measuring unit 27, and a time recorder 28. Each part is connected by a bus 29. The CPU 21, the input unit 22, the RAM 23, the display unit 24, the storage device 25, the communication control unit 26, the time measuring unit 27, and the time recorder 28 are respectively the CPU 11, the input unit 12, the RAM 13, the display unit 14, the office server 1A, 1B. Since the configuration is the same as that of the storage device 15, the communication control unit 16, the timing unit 17, and the time recorder 18, the same description is omitted.
[0045]
The CPU 21 executes a client activation determination process and a second client activation management process. By executing the client activation determination process, the CPU 21 stores the client ID, the wireless LAN card ID, the latitude and longitude information, and the current date and time information received from the business office servers 1A and 1B, and the all-location specifying table 81 stored in the storage unit 25. And the information stored in the management memory 72 for each business location is used to determine whether each of the received information is valid, and if it is valid, the determination result for permitting activation of the client 3 is sent to the business site server. If it is not valid, a determination result for stopping the activation is transmitted to the office servers 1A and 1B, and a message indicating the possibility of theft is sent to the manager and owner of the client 3.
[0046]
In addition, when the received client ID is not in the all-location specifying table 81 and the business management memory 82, the CPU 21 transmits the start / stop determination result to the client 3 (see FIG. 12).
[0047]
In addition, by executing the second client activation management process, the CPU 21 stores the client ID, the wireless LAN card ID, the latitude and longitude information, and the current date / time information received from the client 3 in the all-location specifying table stored in the storage unit 25. 81, the information stored in the management memory 82 for each business location is used to determine whether each information is valid. If it is valid, a determination result for permitting activation is transmitted to the client 3, and the information is not valid. In this case, the determination result for stopping the activation is transmitted to the client 3, and the administrator and the owner of the client 3 are mailed to the effect of theft.
[0048]
In addition, when the received client ID is not in the all-location specifying table 81 and the business management memory 82, the CPU 21 transmits an activation stop message to the client 3 (see FIG. 13).
[0049]
As shown in FIG. 5, the client 3, which is a portable information processing device, includes a CPU 31, an input unit 32, a RAM 33, a display unit 34, a storage device 35, a communication control unit 36, a GPS ( Global Positioning System) unit 37, and each unit is connected by a bus 38. Since the CPU 31, the input unit 32, the RAM 33, the display unit 34, and the storage device 35 have the same configuration as the CPU 11, the input unit 12, the RAM 13, the display unit 14, and the storage device 15 of the office servers 1A and 1B, respectively, The detailed explanation is omitted.
[0050]
The CPU 31 executes client activation processing. If the wireless LAN card ID 92 stored in the storage device 35 matches the wireless LAN card ID stored in the storage device of the inserted wireless LAN card F by executing the client activation process, the CPU 31 The card information is transmitted together with the client ID 91 stored in the storage device 35 and the latitude and longitude information acquired from the GPS unit 37 to the business office servers 1A and 1B of the current business office. A determination result indicating whether or not is valid information is received, and the own apparatus is started or stopped based on the determination result (see FIG. 10).
[0051]
The display unit 34 is configured by an LCD, an EL display, or the like. The GPS unit 37 acquires the latitude and longitude information of its own device using a signal from an artificial satellite or a ground station by the GPS method, and outputs the latitude and longitude information to the CPU 11.
[0052]
Further, the communication control unit 36 provides a slot for inserting the wireless LAN card F, and with the wireless LAN card F inserted in the slot, the internal access point 1AI, 1BI or 2I or the external access point 1AE, Wireless LAN communication is performed with the office servers 1A and 1B or the head office server 2 via 1BE or 2E, respectively.
[0053]
The wireless LAN card F is detachably attached to the communication control unit 36 of the client 3 and is provided with a storage device such as a ROM (Read Only Memory) or a flash memory (not shown). Each of the external access points 1AE, 1BE, 2E includes a CPU, a RAM, a storage device (ROM, flash memory, etc.) and a communication control unit (not shown), and communicates with the client 3 via the wireless communication with the client server 1A. , 1B or via the headline server 2 via wired communication.
[0054]
Next, referring to FIG. 6 to FIG. 9, the storage device 15 of the office servers 1A and 1B, the storage device 25 of the head office server 2, the storage device 35 of the client 3, the storage device of the wireless LAN card F, and the external access point Information stored in the storage devices 1AE, 1BE, and 2E will be described. FIG. 6 is a diagram illustrating information stored in the office servers 1A and 1B and the headquarter server 2, and (I) is a diagram illustrating information stored in the storage device 15 of the office servers 1A and 1B. (II) is a figure which shows the information memorize | stored in the memory | storage device 25 of the headquarters server 2. FIG. FIG. 7 is a diagram showing an internal configuration of the location specifying table 71 stored in the storage device 15, and FIG. 8 is a diagram showing an internal configuration of the individual management memory 72 stored in the storage device 15.
[0055]
FIG. 9 is a diagram illustrating information stored in the client 3, the wireless LAN card F, and the external access points 1AE, 1BE, and 2E, and (I) is a diagram illustrating information stored in the storage device 35 of the client 3. (II) is a diagram showing information stored in the storage device of the wireless LAN card F, and (III) is a diagram showing information stored in the storage device of the external access points 1AE, 1BE, 2E. It is.
[0056]
As shown in FIG. 6 (I), the storage device 15 of the office servers 1A and 1B includes a location specifying table 71 for storing information for specifying the location of the client 3 at the office corresponding to the office server; And an individual management memory 72 for storing management information of all employees belonging to the office corresponding to the office server.
[0057]
As shown in FIG. 7, the location specifying table 71 includes a client ID for identifying a client or a device ID 711 indicating an external code of an external access point, and the latitude and longitude of the group area in the office corresponding to the client ID of the device ID 711. And a location name 713 of a location corresponding to a group area or external code corresponding to the latitude and longitude 712. The location specifying table 71 stored in the office server 1A or 1B stores location data relating to the office.
[0058]
Further, as shown in FIG. 8, the location specifying table 72 includes a name 721 of an employee of the office corresponding to the office server 1A or 1B, a client ID 722 for identifying a client owned by the employee of the name 721, A wireless LAN card ID 723 for identifying a wireless LAN card to be inserted into a client corresponding to the client ID 722, a leaving / leaving flag 724 indicating an employee leaving / leaving state corresponding to the name 721, and an employee's corresponding to the name 721 The working hours 725 indicating the working hours range, the mobile phone mail address 726 of the employee corresponding to the name 721, the administrator mail address 727 of the manager of the office server, and the stop count number of the client 3 When the value becomes 3 or more, a stop counter 728 indicating that the possibility of theft is high is stored.
[0059]
The work leaving / leaving flag 724 is linked to the employee's time stamping on the time recorder, and is set to 1 if the employee is in the office and 0 if the employee is leaving. In the present embodiment, one client 3 is assigned to one employee. However, the present invention is not limited to this. One person has several kitchens or a plurality of employees. The configuration may be such that the client 3 is shared by members.
[0060]
As shown in FIG. 6 (II), the storage device 25 of the headquarter server 2 stores an all-location specifying table 81 for storing information for specifying the location of the client 3 at all the locations and the headquarters, A business management memory 82 for storing management information of all employees belonging to each headquarters is stored. The all-location specifying table 81 and the business management memory 82 have the same configuration as the location specification table 71 and the individual management memory 72, respectively, and the target of data is expanded from each business location to all business locations and headquarters. As an item, the configuration further includes an office ID, which is omitted in the drawing.
[0061]
As shown in FIG. 9I, the storage device 35 of the client 3 has a client ID 91 for identifying the client 3 as its own device and a wireless LAN card for identifying a valid wireless LAN card F inserted into the client. ID 92 is stored. Further, as shown in FIG. 9 (II), a wireless LAN card ID 101 for identifying the wireless LAN card as its own device is stored in a storage device (not shown) of the wireless LAN card F. Further, as shown in FIG. 9 (III), the external code 111 assigned to the external access point which is its own device is stored in a storage device (not shown) of the external access points 1AE, 1BE, 2E.
[0062]
Next, the operation of the LAN system α will be described with reference to FIGS. FIG. 10 is a flowchart showing client startup processing executed in the client 3, FIG. 11 is a flowchart showing first client startup management processing executed in the office servers 1A and 1B, and FIG. FIG. 13 is a flowchart showing a second client activation management process executed in the headquarter server 2, and FIG. 14 is a flowchart showing the client activation determination process executed in the external access points 1AE, 1BE, 2E. It is a flowchart which shows the external code output process to perform.
[0063]
First, with reference to FIG. 10, a client activation process for activating an application when the wireless LAN card F is inserted in the client 3 and the access is from an appropriate location will be described. For example, the CPU 31 reads a client activation process program stored in the storage device 35 and expands it in the RAM 33, triggered by the client 3 user turning on the client 3 at a place where the user wants to access the wireless LAN. The client start process is started. The program of this processing is not an application program that operates on an OS (Operating System), but is incorporated into a BIOS (Basic Input / Output System) as a system program that operates before the OS is started, for example.
[0064]
The client 3 has a configuration in which the wireless LAN card F is removed from the slot of the communication control unit 36 during storage, and the wireless LAN card F is inserted into the slot of the communication control unit 36 during use.
[0065]
The flowchart of the client activation process shown in FIG. 10 is for explaining a program for causing the computer constituting the client 3 to realize each function. This program will be described in an example where it is stored in the storage device 35 in the form of a program code readable by the CPU 31, but it is not necessary to store all the functions in the storage device 35. It may be realized by receiving all via a communication network. This description is the same for other processes.
[0066]
First, the CPU 31 of the client 3 reads the client ID 91 and the wireless LAN card ID 92 from the storage device 35 (step S11). Then, the CPU 31 reads the wireless LAN card ID 101 from the storage device of the wireless LAN card F (step S12). If the wireless LAN card F is not inserted into the communication control unit 36, the wireless LAN card ID of the wireless LAN card F cannot be read.
[0067]
Then, the CPU 31 determines whether or not the wireless LAN card ID 92 read in step S11 matches the wireless LAN card ID 101 read in step S12 (step S13). If they match (step S13; YES), the CPU 31 acquires the current latitude and longitude information from the GPS unit 37, and obtains the latitude and longitude information, the read client ID, and the matched wireless LAN card ID. Then, it transmits to the office server 1A or 1B by wireless LAN communication via the wireless LAN card F (step S14). The client 3 accesses the establishment server of the establishment via wireless LAN communication via the internal access point or the external access point of the establishment, or transmits each information from the establishment where the client is present or in the vicinity thereof.
[0068]
Then, the CPU 31 receives the determination result as to whether or not to activate its own device from the establishment server that transmitted each information in step S14 via the wireless LAN card F by wireless LAN communication (step S15). And CPU31 discriminate | determines whether the determination result was received from the establishment server in step S15 (step S16). When the determination result has not been received (step S16; NO), the CPU 31 returns to step S15.
[0069]
When the determination result is received (step S16; YES), the CPU 31 determines whether or not the received determination result is activation of the client 3 of the own device (step S17). When the determination result is activation of the client 3 of the own device (step S17; YES), the CPU 31 reads out the OS program stored in advance in the storage device 35, expands it in the RAM 33, and activates the OS (step S18). ). When the determination result is activation, it is a case where the user 3 tries to activate the client 3 of the own apparatus at an authorized place (group area) at an authorized time (working time).
[0070]
Then, the CPU 31 accepts an application designation input from the user from the input unit 32, and determines whether or not the application has been designated (step S19). If the application is not designated and input (step S19; NO), the CPU 31 determines whether or not to end the activation process of the client 3 (step S20). When the activation process of the client 3 is not terminated (step S20; NO), the CPU 31 returns to step S19. When ending the startup process of the client 3 (step S20; YES), the CPU 31 ends the client startup process.
[0071]
When the application is designated and input (step S19; YES), the CPU 31 reads the program of the designated application from the storage device 35, expands it in the RAM 33, executes the application (step S21), and executes the client activation process. finish.
[0072]
Next, referring to FIG. 11, a first client activation management process executed in the office servers 1A and 1B is executed. The first client activation management process is executed by the establishment server requested to access by wireless LAN communication from the office where the client 3 is located or in the vicinity thereof (external area) via the internal access point or the external access point, This is a process for managing activation of the client 3 that requested the access and permission or suspension of access to the wireless LAN. Here, for the sake of simplification of explanation, a case of executing in the office server 1A will be described, but the same applies to the office server 1B.
[0073]
For example, the CPU 11 uses the first client stored in the storage device 15 as a trigger when receiving information from the communication control unit 16 via the wireless LAN and the internal access point 1AI or the external access point 1AE from the client 3. The startup management processing program is read out and expanded in the RAM 13 to start execution of the first client startup management processing.
[0074]
First, the CPU 11 determines whether or not the information received from the client 3 includes the latitude and longitude information of the client 3, the client ID, and the wireless LAN card ID (step S31). In step S31, when each information is received via the external access point 1AE, an external code corresponding to the external access point 1AE is also received.
[0075]
When each information is received (step S31; YES), the CPU 11 acquires the current date and time from the timer unit 17 (step S32). Then, the CPU 11 refers to the location specifying table 71 and the individual management memory 72 stored in the storage device 15 (step S33).
[0076]
Then, the CPU 11 determines whether or not the received client ID of the client 3 is in the device ID 711 of the location specifying table 71 and the client ID 722 of the individual management memory 72 (step S34). When there is a client ID (step S34; YES), the CPU 11 receives the latitude and longitude information of the client 3 within the range of the longitude and latitude 712 in the location specifying table 71 corresponding to the same device ID 711 as the received client ID. Whether or not (step S35). If it is within the range of longitude / latitude 712, the client 3 is used in a valid group area. Further, the client ID matched in step S34 is set as the corresponding client ID.
[0077]
If it is within the range of longitude and latitude 712 (step S35; YES), the CPU 11 matches the received wireless LAN card ID with the wireless LAN card ID 723 in the individual management memory 72 corresponding to the client ID 722 of the corresponding client ID. Whether or not (step S36). If the wireless LAN card ID does not correspond to a valid client ID, the client 3 cannot send each ID to the office server, and the client ID has already been checked in step S4. Good. If there is step S36, for example, the thief modifies the stolen client 3 by some means, and the wireless LAN card ID does not correspond to a valid client ID in the remodeled client 3 and accesses the office server. It is possible to eliminate activation due to unauthorized access.
[0078]
When the wireless LAN card IDs match (step S36; YES), the CPU 11 determines that the date and time information acquired in step S32 is within the working hours 725 corresponding to the client ID 722 of the corresponding client ID in the individual management memory 72. It is determined whether or not there is (step S37). If the date and time information is not within the range (step S37; NO), the CPU 11 determines whether or not the attendance / exit flag 724 in the individual management memory 72 is 1 (step S38).
[0079]
When the entry / exit flag 724 is 1 (step S38; YES), the CPU 11 activates and accesses the wireless LAN to the client 3 (hereinafter referred to as the client 3) that is a request source for access to the wireless LAN. A determination result indicating permission is transmitted via the communication control unit 16 and the internal access point 1AI (step S39).
[0080]
The case where the work leaving / exit flag 724 is not within the range of the working hours 725 is a case of overtime or early departure or the like, which is a valid working time of the corresponding employee. When the date and time information is within the range (step S37; YES), it is a valid working time of the corresponding employee, and the CPU 11 proceeds to step S39.
[0081]
Then, the CPU 11 clears the stop counter 728 in the individual management memory 72 corresponding to the corresponding client ID to 0, and transmits the fact that the stop counter is cleared to the headquarter server 2 via the wired LAN 4 ( Step S40), the first client activation management process is terminated. After step S40, the CPU 21 of the headquarters server 2 receives the fact that the stop counter is cleared, and clears the stop counter corresponding to the client ID in the business management memory 82 in the storage device 25 to zero. .
[0082]
If it is not within the range of longitude / latitude 712 (step S35; NO), the CPU 11 determines whether reception from the client 3 in step S31 is via the external access point 1AE based on the presence or absence of the external code of the received information. (Step S41). When it is via the external access point 1AE (step S41; YES), the CPU 11 notifies the corresponding client 3 of the determination result that the activation and the access to the wireless LAN are stopped, the communication control unit 16 and the external access point 1AE. (Step S42).
[0083]
Then, the CPU 11 sets the mobile phone mail address 726 (to the owner) and the administrator mail address 727 (to the administrator) of the owner of the client 3 corresponding to the client ID 722 of the corresponding client in the individual management memory 72. Then, a message indicating that the external area 52A, the date and time information acquired in step S32, and the possibility that the client 3 has been stolen is sent by mail (step S43).
[0084]
In step S43, the CPU 11 refers to the location specifying table 71 and sets the location name 713 corresponding to the external code received by the device ID 711 as the external area 52A. In addition, since step S43 is transmitted from an external area that is an illegal location via an external access point, the possibility of being stolen is high regardless of the stop counter. Sending email.
[0085]
Then, the CPU 11 updates the stop counter 728 in the individual management memory 72 corresponding to the corresponding client ID by +1, and transmits information indicating the stop counter +1 to the headquarter server 2 via the wired LAN 4 ( Step S44), the first client activation management process is terminated. After step S <b> 44, the CPU 21 of the headquarter server 2 receives a stop counter + 1 and updates the stop counter corresponding to the client ID in the business management memory 82 in the storage device 25 by one.
[0086]
If the wireless LAN card IDs do not match (step S36; NO), if the entry / exit flag 724 is not 1 (step S38; NO) or not via the external access point 1AE (step S41; NO), the CPU 11 A determination result indicating that activation and access to the wireless LAN are to be stopped is transmitted to the client 3 via the communication control unit 16 and the internal access point 1AI (step S45).
[0087]
Then, the CPU 11 refers to the stop counter 728 in the individual management memory 72 corresponding to the client ID 722 of the corresponding client, and determines whether or not the stop counter is 2 or more (step S46). If the stop counter is 2 or more (step S46; YES), the stop counter is 3 or more, which is a condition that the possibility that the client 3 has been stolen is high, including this time. The mobile phone mail address 726 (to the owner) and the administrator mail address 727 (to the administrator) of the owner of the client 3 corresponding to the client ID 722 of the corresponding client in the memory 72 indicate the area in the office. The date and time information acquired in step S32 and the fact that the client 3 may have been stolen are sent by e-mail (step S47), and the process proceeds to step S44.
[0088]
When the stop counter is not 2 or more (step S46; NO), the CPU 11 proceeds to step S44. Step S39, S42 or S45 on the office server 1A side corresponds to step S15 on the client 3 side.
[0089]
When there is no client ID (step S34; NO), the CPU 11 transmits the date and time information acquired in step S32 and each information received in step S31 to the headquarter server 2 via the communication control unit 16 and the wired LAN 4 ( Step S48). Then, the CPU 11 receives a determination result indicating whether to start or stop the client 3 from the headquarter server 2 via the wired LAN 4 and the communication control unit 16 (step S49). And CPU11 discriminate | determines whether the determination result was received in step S49 (step S50).
[0090]
When the determination result is not received (step S50; NO), the CPU 11 returns to step S49. When the determination result is received (step S50; YES), the CPU 11 indicates the determination result indicating that the corresponding client 3 is permitted or stopped to start up and access to the wireless LAN as the communication control unit 16 and the external access point 1AE. Or it transmits via internal access point 1AI (step S51), and complete | finishes a 1st client starting management process.
[0091]
When each information is not received (step S31; NO), CPU11 performs the other process corresponding to the received information (step S52), and complete | finishes a 1st client starting management process.
[0092]
Next, with reference to FIG. 12, the client activation determination process executed in the headquarter server 2 will be described. The client activation determination process is a process of transmitting the determination result of the activation of the client 3 that has accessed the establishment server 1A or 1B and the permission or stop of access to the wireless LAN to the establishment server. For example, triggered by the reception of information from the office server 1A or 1B via the wired LAN 4 and the communication control unit 26, the CPU 21 reads the client activation determination processing program stored in the storage device 25 and expands it in the RAM 23. Then, the client activation determination process is started.
[0093]
When executing the client activation determination process, in the client activation process executed by the client 3 in FIG. 10, the client 3 is located in the internal area 51 or the external area 52 of the headquarters. In step S14, the client 3 stores each piece of information. The data is transmitted to the headquarter server 2 via the internal access point 2I or the external access point 2E by wireless LAN. In step S15, the client 3 wirelessly transmits the determination result from the headquarters server 2 via the internal access point 2I or the external access point 2E. It is configured to receive via the LAN.
[0094]
First, the CPU 21 determines whether or not the information received from the office server has received the date / time information acquired by the office server, the latitude and longitude information of the client 3, the client ID, and the wireless LAN card ID. (Step S61). When the business office server receives each information via the external access point in step S31, the external code corresponding to the external access point is also received in step S61.
[0095]
When each information is received (step S61; YES), the CPU 21 refers to the all-location specifying table 81 and the business management memory 82 stored in the storage device 25 (step S62).
[0096]
Then, the CPU 21 determines whether or not the client ID of the client 3 is in the device ID and the business location management memory 82 of the all-location specifying table 81 (step S63). When there is a client ID, a business establishment ID (corresponding business establishment ID) corresponding to the client ID is also acquired. If there is a client ID (step S63; YES), the CPU 21 determines whether the received latitude and longitude information of the client 3 is within the latitude / longitude range in the all-location specifying table 81 corresponding to the received corresponding client ID. Is discriminated (step S64). If it is within the range of longitude and latitude, the client 3 is used in a valid group area.
[0097]
If it is within the range of longitude and latitude (step S64; YES), the CPU 21 determines whether or not the received wireless LAN card ID matches the wireless LAN card ID in the business management memory 82 corresponding to the corresponding client ID. Is determined (step S65). If the wireless LAN card ID does not correspond to a valid client ID, the client 3 cannot transmit each ID to the business office server. Since the client ID has already been checked in step S63, step S65 can be omitted. Good. If there is step S65, for example, it is possible to eliminate activation by unauthorized access such as accessing the office server in a state where the wireless LAN card ID does not correspond to a valid client ID in the client 3 modified as a theft. it can.
[0098]
When the wireless LAN card IDs match (step S65; YES), the CPU 21 determines whether or not the received date and time information is within the working hours corresponding to the corresponding client ID in the business management memory 82. (Step S66). When the date / time information is not within the range (step S66; NO), the CPU 21 determines whether or not the leaving / exiting flag in the business management memory 82 is 1 (step S67).
[0099]
When the leaving / leaving flag is 1 (step S67; YES), the CPU 21 activates the corresponding client 3 and connects to the wireless LAN in each of the information transmission source establishment server 1A or 1B (referred to as the transmission source establishment server). A determination result for permitting access is transmitted via the communication control unit 26 and the wired LAN 4 (step S68). When the date information is within the range (step S66; YES), the CPU 21 proceeds to step S68.
[0100]
Then, the CPU 21 clears the stop counter in the business management memory 82 corresponding to the corresponding client ID to 0, and notifies the corresponding client via the communication control unit 26 and the wired LAN 4 that the stop counter is cleared. This is transmitted to the corresponding office server 1A or 1B to which the ID belongs (step S69), and the client activation determination process is terminated. After step S69, the CPU 11 of the corresponding business establishment server 1A or 1B receives the fact that the stop counter is cleared, and clears the stop counter 728 corresponding to the corresponding client ID in the individual management memory 72 in the storage device 15. To zero.
[0101]
If it is not within the range of longitude and latitude (step S64; NO), the CPU 21 determines whether or not reception from the transmission source office server 1A or 1B in step S61 is via an external access point depending on the presence or absence of the external code of the received information. Is determined (step S70). If it is via an external access point (step S70; YES), the CPU 21 controls the transmission source office server 1A or 1B to determine whether to start the corresponding client 3 and stop access to the wireless LAN. The unit 26 transmits via the wired LAN 4 (step S71).
[0102]
Then, the CPU 21 assigns the mobile phone mail address (to the owner) and the administrator mail address (to the administrator) of the owner of the client 3 corresponding to the corresponding client ID in the business management memory 82 to the external area. The fact, the received date and time information, and the possibility that the client 3 has been stolen are sent by mail (step S72). In step S72, the CPU 21 refers to the all-location specifying table and sets the location name corresponding to the external code received by the device ID as the external area.
[0103]
Then, the CPU 21 updates the stop counter in the business management memory 82 corresponding to the corresponding client ID by +1, and updates the stop counter +1 to the corresponding business office server 1A or 1B via the wired LAN 4. (Step S73), and the client activation determination process is terminated. After step S73, the CPU 11 of the corresponding business establishment server 1A or 1B receives the stop counter +1 and increments the stop counter 728 corresponding to the corresponding client ID in the individual management memory 72 in the storage device 15. Update.
[0104]
When the wireless LAN card IDs do not match (step S65; NO), when the leaving / leaving flag is not 1 (step S67; NO), or when not via an external access point (step S70; NO), the CPU 21 The determination result indicating that the corresponding client 3 is started and the access to the wireless LAN is stopped is transmitted to the location server 1A or 1B via the communication control unit 26 and the wired LAN 4 (step S74).
[0105]
Then, the CPU 21 refers to the stop counter in the business management memory 82 corresponding to the client, and determines whether or not the stop counter is 2 or more (step S75). When the stop counter is 2 or more (step S75; YES), since the stop counter is 3 or more, which is a condition that the possibility of theft of the client 3 is high together with this time, the CPU 21 manages the management memory for each office. 82, the mobile phone email address (to the owner) and the manager email address (to the administrator) of the owner of the client 3 corresponding to the corresponding client in 82, the area in the office, the received date and time information, A message to the effect that the client 3 has been stolen is sent by e-mail (step S76), and the process proceeds to step S73.
[0106]
When the stop counter is not 2 or more (step S75; NO), the CPU 21 proceeds to step S73. Step S68, S71 or S74 on the headquarter server 2 side corresponds to step S49 on the transmission source office server 1A or 1B side.
[0107]
When there is no client ID (step S63; NO), the CPU 21 notifies the transmission source office server 1A or 1B to the communication control unit 26 and the determination result that the corresponding client 3 is activated and the access to the wireless LAN is stopped. The data is transmitted via the wired LAN 4 (step S77), and the client activation determination process is terminated. Step S77 is a case of access from an unauthorized client to which no client ID has been assigned. Data such as an email address and an unauthorized counter addressed to the owner and the administrator are not stored, and access is simply stopped. The determination result to the effect is transmitted to the client.
[0108]
When each information is not received (step S61; NO), CPU21 performs the other process corresponding to the received information (step S78), and complete | finishes a client starting determination process.
[0109]
Next, the second client activation management process in the headquarter server 2 will be described with reference to FIG. The second client activation management process in the headquarter server 2 is the headquarters requested for access by wireless LAN communication from the headquarters where the client 3 is located or in the vicinity thereof (external area) via the internal access point 2I or the external access point 2E. This process is executed by the server 2 and manages the activation of the client 3 that requested the access and the permission or stop of access to the wireless LAN.
[0110]
For example, the CPU 21 uses the second client stored in the storage device 25 as a trigger when receiving information from the communication control unit 26 via the wireless LAN and the internal access point 2I or the external access point 2E from the client 3. The startup management processing program is read out and expanded in the RAM 23, and execution of the second client startup management processing is started.
[0111]
The second client activation management process in the headquarter server 2 is the same as the first client activation management process in the office servers 1A and 1B shown in FIG. 11, and the difference will be described with reference to the flowchart in FIG. . In step S81, the CPU 21 of the headquarter server 2 determines whether each information is received from the client 3 via the internal access point 2I or the external access point 2E. Further, for the entire flow, instead of the location specifying table 71 and the individual management memory 72 in the storage device 15 of the office servers 1A and 1B, the entire location specifying table 81 and the business in the storage device 25 of the headquarter server 2 are used. The location management memory 82 is used. The headquarter server 2 transmits information to the client 3 via the internal access point 2I or the external access point 2E.
[0112]
Then, steps S81 to S94 and S99 are the same as steps S31 to S44 and S52, respectively. If there is no client ID (step S84; NO), the CPU 21 notifies the corresponding client 3 of the determination result to start and stop access to the wireless LAN, the communication control unit 26, the internal access point 2I or the external access point 2E. (Step S98), and the second client activation management process is terminated.
[0113]
Next, an external code output process executed in the external access points 1AE, 1BE, 2E will be described with reference to FIG. Here, for the sake of simplicity, a description will be given of a case where it is executed by the external access point 1AE.
[0114]
In the external code output process executed in the external access point 1AE, when the client 3 makes an access request from the external area of the business office A to the business office server 1A, the external code corresponding to the external access point 1AE is transmitted to the business office server 1A. It is processing. For example, when the information from the client 3 is received via the wireless LAN as a trigger, the CPU of the external access point 1AE reads the program of the external code output process stored in the storage device, and expands it in the RAM. The execution of external code output processing is started.
[0115]
First, the CPU of the external access point 1AE reads the external code 111 stored in the storage device, and transmits the read external code 111 to the office server 1A together with the received information (step S101). End the code output process.
[0116]
By the external code output processing, the office server 1A, 1B or the headquarter server 2 acquires an external code corresponding to the external access point when an access request is made from the client 3 via the external access point 1AE, 1BE or 2E. be able to.
[0117]
Therefore, according to the present embodiment, since the client is activated when a wireless LAN card having a regular wireless LAN card ID is installed, the wireless LAN card is removed from the client and managed when the client is not used. Therefore, if the client is stolen, the client cannot be activated unless a wireless LAN card having a valid wireless LAN card ID is attached, so that data in the client can be prevented from being stolen. Since it is sufficient to manage the wireless LAN card, the management burden on the client can be reduced.
[0118]
In addition, when the client ID received from the client and the client ID stored in the office server or the headquarter server match, the client is allowed to start, so that the wireless LAN communication cannot be performed when the client is stolen. Thus, the client can be activated to prevent the client's data from being stolen, and the stolen client can access the wireless LAN to prevent the data from being stolen from other devices on the wireless LAN.
[0119]
In addition, since the establishment server and the headquarters server allow the client to start when it is used in a regular area, the client is used in an unauthorized position when it is stolen, and the client is used in the client and on the wireless LAN. It is possible to prevent the device data from being stolen. In addition, since the office server and the headquarter server permit the activation when the client is used in a regular time zone, the client is used at an illegal time when the client is stolen. The data of the above device can be prevented from being stolen. In addition, even if the time is illegal, if the attendance / exit flag is 1 and it is used in a valid area, the client can be permitted to start up as overtime or early departure.
[0120]
In addition, the establishment server and the headquarters server will notify the owner and administrator of the client by e-mail to inform the client owners and managers when there is a high possibility of theft due to fraud counters 3 times or more. And security resetting can be encouraged. In addition, when a stolen client attempts to access a wireless LAN via an external access point, the external area can be specified, so that the theft can be secured by a method suitable for finding and securing the thief lurking in the external area. It can be performed.
[0121]
In the above embodiment, the location specifying table and the individual management memory are stored in the office server, and the entire location specifying table and the individual management memory are stored in the headquarters server. Information corresponding to the client of the insertion destination is stored in the storage device of the wireless LAN card, and it is determined on the client 3 side whether the client 3 is used at a valid position or at a valid time. However, it may be configured to be activated when used at a valid position and time.
[0122]
In the above embodiment, a detachable wireless LAN card is used, but a detachable built-in LAN board may be used. In the case where the client 3 side does not determine whether the wireless LAN card ID matches, the client 3 in which a wireless LAN unit is incorporated in a motherboard or the like may be used. Further, the present invention is not limited to the wireless LAN card, and may be configured to use communication connection means of other communication methods such as a wired LAN card.
[0123]
In the above embodiment, the mobile phone address and the administrator mail address of the owner of the client 3 are stored in the office server and the headquarter server. However, the present invention is not limited to this. It may be configured to store in a storage device.
[0124]
In the above embodiment, the client ID is used as a key to search each data in the location specifying table, the individual management memory, the all location specifying table, and the business location management memory. The LAN card ID may be used as a key.
[0125]
As described above, the embodiments of the present invention have been described. However, the present invention is not necessarily limited only to the above-described means and methods, and within the scope of achieving the object of the present invention and having the effects of the present invention. It is possible to make changes as appropriate.
[0126]
【The invention's effect】
  According to the present inventionWhen the communication device is stolen by removing the communication connection means from the communication device and managing it when the communication device is not usedSuchIf the communication connection means having the legitimate first identification information is not mounted, the communication device is activated.In addition, when using a communication device, the communication connection means having the first identification information is attached, and the position and time of the communication device are within a predetermined range.If the communication device is stolen because the communication device cannot be started without itSuchData in it can be prevented from being stolen, and it is only necessary to manage the communication connection means, so the management burden on the communication device can be reduced.At the same time, it is possible to more strictly manage data theft by limiting the position and time at which the communication device is used.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a LAN system α in an embodiment of the present invention.
FIG. 2 is a diagram showing areas managed by the establishment server and the headquarter server, (I) is a diagram showing areas managed by the establishment server 1A, and (II) is managed by the establishment server 1B. (III) is a diagram showing an area managed by the headquarter server 2.
FIG. 3 is a diagram illustrating an internal configuration of business office servers 1A and 1B.
4 is a diagram showing an internal configuration of the headquarter server 2. FIG.
FIG. 5 is a diagram showing an internal configuration of a client 3;
6 is a diagram showing information stored in the office servers 1A and 1B and the headquarter server 2. FIG. 6I is a diagram showing information stored in the storage device 15 of the office servers 1A and 1B. (II) is a figure which shows the information memorize | stored in the memory | storage device 25 of the headquarters server 2. FIG.
7 is a diagram showing an internal configuration of a location specifying table 71 stored in the storage device 15. FIG.
8 is a diagram showing an internal configuration of an individual management memory 72 stored in the storage device 15. FIG.
9 is a diagram showing information stored in the client 3, the wireless LAN card F, and the external access points 1AE, 1BE, 2E, and (I) is a diagram showing information stored in the storage device 35 of the client 3. FIG. (II) is a diagram showing information stored in the storage device of the wireless LAN card F, and (III) is a diagram showing information stored in the storage device of the external access points 1AE, 1BE, 2E. It is.
FIG. 10 is a flowchart showing client activation processing executed in the client 3;
FIG. 11 is a flowchart showing a first client activation management process executed in the office servers 1A and 1B.
12 is a flowchart showing a client activation determination process executed in the headquarter server 2. FIG.
FIG. 13 is a flowchart showing a second client activation management process executed in the headquarter server 2;
FIG. 14 is a flowchart showing an external code output process executed in the external access points 1AE, 1BE, 2E.
[Explanation of symbols]
α ... LAN system
1A, 1B ... Office server
2 ... Headquarters server
3 ... Client
11, 21, 31 ... CPU
12, 22, 32 ... input section
13, 23, 33 ... RAM
14, 24, 34 ... display section
15, 25, 35 ... storage device
16, 26, 36 ... communication control unit
17, 27 ... Timekeeping section
18, 28 ... Time recorder
37 ... GPS section
19, 29, 38 ... bus

Claims (9)

In a communication device that performs communication using a detachable communication connection means,
The communication connection means includes first storage means for storing first identification information and movement range information usable by the communication device ,
Position detecting means for detecting the current position of the communication device;
Second storage means for storing second identification information;
A second identification information stored in said second storage means, whether or not the first identification information stored in the first memory means of the mounted communication connecting means coincide, and the Determining means for determining whether or not the current position detected by the position detecting means is within the range of usable movement range information stored in the first storage means of the communication connection means attached; The communication device is activated when it is determined by the means that the second identification information and the first identification information match , and the current position is determined to be within the range of the usable movement information. And a control means. In a communication device that performs communication using a detachable communication connection means,
The communication connection means includes first storage means for storing first identification information and use time zone information of the communication device,
A time measuring means for measuring the current time;
Second storage means for storing second identification information;
Whether the second identification information stored in the second storage means matches the first identification information stored in the first storage means of the attached communication connection means, and Discriminating means for discriminating whether or not the current time detected by the time measuring means is within the range of use time zone information stored in the first storage means of the attached communication connection means;
When it is determined by the determination means that the second identification information and the first identification information match, and the current time is determined to be within the range of the use time zone information, a communication device And a control means for activating the communication device. In a communication management device that manages communication of a communication device,
Receiving means for receiving first identification information of the communication device from the communication device;
Storage means for storing second identification information;
Determining means for determining whether or not the first identification information received by the receiving means matches the second identification information stored in the storage means;
When it is determined by the determination means that the first identification information and the second identification information do not match, the communication management apparatus is inquired whether or not the activation of the communication apparatus of the first identification information is permitted. Inquiry means;
In response to the inquiry, when response information permitting activation of the communication device is received from the communication management device, or the first identification information matches the second identification information by the determination means Then, a communication management apparatus comprising: a transmission unit that transmits activation permission information to the communication apparatus when it is determined. The storage means stores movement range information usable by the communication device,
The receiving means receives the current position from the communication device;
The determining means determines whether or not the current position received by the receiving means is within the range of usable movement range information stored in the storage means;
The transmission unit, when the current position is determined to be within the scope of the usable range of movement information by the determining means, according to claim 3, wherein transmitting the start permission information to the communication device Communication management device. The storage means stores use time zone information of the communication device,
The receiving means receives a current time from the communication device;
The determining means determines whether or not the current time received by the receiving means is within the range of use time zone information stored in the storage means,
4. The transmission unit according to claim 3 , wherein the transmission unit transmits activation permission information to the communication device when the determination unit determines that the current time is within the range of the usage time zone information. 5. Communication management device. Notification means for notifying one or both of the owner and manager of the communication device of information indicating that the activation of the communication device is not permitted when the transmission permission information is not transmitted to the communication device by the transmission means. The communication management apparatus according to claim 3, further comprising: A computer of a communication device that performs communication using a detachable communication connection unit having a first storage unit that stores first identification information and movement range information usable by the communication device,
Position detecting means for detecting the current position of the communication device;
Second storage means for storing second identification information;
Whether the second identification information stored in the second storage means matches the first identification information stored in the first storage means of the attached communication connection means, and Determining means for determining whether or not the current position detected by the position detecting means is within the range of usable movement range information stored in the first storage means of the attached communication connection means;
A communication device that determines that the second identification information and the first identification information match with each other and that the current position is within the range of the usable movement information; Control means to start
Program to function as. A communication device computer for performing communication using a detachable communication connection means having a first storage means for storing first identification information and use time zone information of the communication device;
A timekeeping means for keeping the current time,
Second storage means for storing second identification information;
Whether the second identification information stored in the second storage means matches the first identification information stored in the first storage means of the attached communication connection means, and Discriminating means for discriminating whether or not the current time detected by the time measuring means is within the range of use time zone information stored in the first storage means of the attached communication connection means;
When it is determined by the determination means that the second identification information and the first identification information match, and the current time is determined to be within the range of the usage time zone information, a communication device Control means to start
Program to function as. A communication management device computer for managing communication of the communication device;
Receiving means for receiving first identification information of the communication device from the communication device;
Storage means for storing second identification information;
Discriminating means for discriminating whether or not the first identification information received by the receiving means matches the second identification information stored in the storage means;
When it is determined by the determination means that the first identification information and the second identification information do not match, the communication management apparatus is inquired whether or not the activation of the communication apparatus of the first identification information is permitted. Contact means,
In response to the inquiry, when response information permitting activation of the communication device is received from the communication management device, or the first identification information matches the second identification information by the determination means A program for causing the communication device to function as a transmission unit that transmits activation permission information when it is determined .

Images