JP4902422B2 - Terminal management system, terminal management server, terminal device, terminal management method, and terminal management program - Google Patents

Description

  The present invention relates to a terminal management system, a terminal management server, a terminal management method, a terminal management program, and a terminal device used in the terminal management system for managing terminal devices having a plurality of operation modes by remote control.

  In recent years, portable terminal devices such as mobile phone terminals have become multifunctional and highly functional, and are increasingly used not only for personal use (personal use) but also for business use (business use). is doing.

  As described above, among terminal devices used for personal use and business use, there are terminal devices having a plurality of operation modes such as a personal use operation mode (Private mode) and a business use operation mode (Official mode). To do. In the terminal device, usable interfaces (for example, wireless LAN cards), e-mail settings (managed resources), and the like are switched according to the operation mode.

  In addition, various important information such as personal information is stored in the terminal device as the application expands. Therefore, in order to prevent unauthorized use of the important information by a person who finds the lost terminal device or the like, a method of managing the terminal device by remotely controlling is known (see Patent Document 1). For example, by remote control, it is possible to photograph the surroundings of the terminal device using a camera provided in the terminal device or to prohibit operations on the terminal device.

  The OMA-DM (Device Management) WG, which is a working group of the Open Mobile Alliance (OMA), has developed a standard for terminal management systems for terminal management systems that realize such terminal device management. .

In terminal management systems based on OMA-DM, data objects that abstract managed resources (eg, user interfaces) on devices such as terminal devices are edited (ADD, REPLACE, DELETE), and executed (EXEC). As a result, the managed resource is remotely controlled. Specifically, the server that constitutes the terminal management system edits or executes the data object by transmitting a DM protocol command to the data object on the device.
Japanese Patent Laid-Open No. 2004-235771 (page 8-9, FIG. 2)

  However, the conventional terminal management system based on OMA-DM has the following problems. In other words, when a terminal device (device) has multiple operation modes, such as an operation mode for personal use (Private mode) and an operation mode for business use (Official mode), the conventional terminal management system based on OMA-DM There was a problem that management for each mode was not supported.

  Furthermore, when the operation mode of the management target (for example, Official mode) does not match the current operation mode (for example, Private mode) set in the terminal device, the management target to which access is permitted in the current operation mode Only resources can be remotely controlled.

  Therefore, the present invention has been made in view of such circumstances, and when a terminal device having a plurality of operation modes is managed by remote control, the present invention is desired regardless of the operation mode set in the terminal device. It is an object of the present invention to provide a terminal management system, a terminal management server, a terminal management method, a terminal management program, and a terminal device used in the terminal management system capable of remotely controlling a management target resource.

  In order to solve the problems described above, the present invention has the following features. First, the first feature of the present invention is that a plurality of managed resources (managed resources 240) are provided, and at least some of the manageable resources that can be managed are different from each other in a plurality of operation modes (for example, Private mode and Official Terminal management system (terminal management system 10) including a terminal device (mobile terminal 200) having a mode) and a terminal management server (terminal management server 100) for managing the terminal device by remotely controlling the management target resource The terminal management server includes a storage unit (management control database) that stores the management target resource, the content of remote control for the management target resource (for example, network setting of a wireless LAN card) and the operation mode in association with each other. 105), and a request receiving unit that receives a request for remote control for the terminal device ( Service interface 101) and when the request receiving unit receives the request, based on the content stored in the storage unit, management target information indicating the management target resource, remote control of the management target resource A transmission unit (terminal management control unit 103, terminal management server IF 107) that transmits control information indicating contents and a management message (for example, management request message M3) including operation mode information indicating the operation mode to the terminal device; And the terminal device sets the operation mode based on the operation mode information included in the management message received by the reception unit (terminal management client IF 201) that receives the management message, and the reception message, The management object information and the previous information included in the management message received by the receiving unit Control execution unit that controls the managed resources on the basis of the control information that includes a (access controller 205) and gist.

  According to such a terminal management system, the management message including the management target information indicating the management target resource, the control information indicating the content of the remote control for the management target resource, and the operation mode information indicating the operation mode of the terminal device is transmitted to the terminal. Sent from the management server to the terminal device. Further, the terminal device controls the management target resource based on the management message.

  Therefore, it is possible to remotely control a desired managed resource regardless of the operation mode set in the terminal device.

  A second feature of the present invention relates to the first feature of the present invention, wherein the transmitting unit is configured to perform a current operation mode currently set in the terminal device and a target operation mode indicated by the operation mode information. Is sent to the terminal device, and the management information in the case where the current operation mode and the target operation mode do not match is transmitted to the terminal device. The content of the control of the resource is shown, and the control execution unit is configured to control the management target resource based on the mismatch processing information when the current operation mode and the target operation mode do not match.

  A third feature of the present invention relates to the second feature of the present invention, wherein the mismatch processing information is changed to the control information after changing the operation mode to the target operation mode and changing to the target operation mode. The gist is to indicate that the management target resource is controlled based on the above.

  A fourth feature of the present invention relates to the second feature of the present invention, wherein the mismatch processing information is obtained when the current operation mode shifts to the target operation mode based on the control information. The gist is to show that the control is performed.

  A fifth feature of the present invention relates to the second feature of the present invention, and is summarized in that the mismatch processing information indicates that access to a management target resource indicated by the management target information is controlled. .

  A sixth feature of the present invention relates to the fifth feature of the present invention, wherein the transmission unit transmits the management message including an administrator identifier for identifying an administrator of the terminal device to the terminal device, and The terminal device holds an access rule (access rule 230) indicating a relationship between the administrator identifier and whether or not the managed resource can be accessed, and the control execution unit is configured to manage the managed resource according to the mismatch processing information. In the case where it is indicated that access to the access control is indicated, the gist is to determine whether to access the management target resource based on the administrator identifier and the access rule.

  A seventh feature of the present invention relates to the second feature of the present invention, wherein the terminal device includes management information (management information 220) including an information element (for example, an information element 225) that stores the target operation mode. And the terminal management server transmits the management message for operating or editing the management information to the terminal device so that the target operation mode can be stored in the information element.

  According to an eighth aspect of the present invention, the terminal device is managed by remotely controlling a terminal device that includes a plurality of managed resources and at least some of the manageable resources that can be managed have a plurality of different operation modes. A storage unit that stores the management target resource, the content of remote control for the management target resource, and the operation mode in association with each other, and a request reception unit that receives a request for remote control for the terminal device And when the request reception unit receives the request, based on the content stored in the storage unit, management target information indicating the management target resource, control information indicating the content of remote control for the management target resource And transmitting a management message including operation mode information indicating the operation mode to the terminal device And summarized in that comprises and.

  A ninth feature of the present invention relates to the eighth feature of the present invention, wherein the transmitting unit is configured to perform a current operation mode currently set in the terminal device and a target operation mode indicated by the operation mode information. Is sent to the terminal device, and the management information in the case where the current operation mode and the target operation mode do not match is transmitted to the terminal device. The gist is to show the contents of resource control.

  A tenth feature of the present invention relates to the ninth feature of the present invention, wherein the mismatch processing information is changed to the control information after changing the operation mode to the target operation mode and changing to the target operation mode. The gist is to indicate that the management target resource is controlled based on the above.

  An eleventh feature of the present invention relates to the ninth feature of the present invention, wherein the mismatch processing information is the resource to be managed based on the control information when the current operation mode shifts to the target operation mode. The gist is to show that the control is performed.

  A twelfth feature of the present invention relates to the ninth feature of the present invention, and is summarized in that the mismatch processing information indicates that access to a management target resource indicated by the management target information is controlled. .

  A thirteenth aspect of the present invention relates to the twelfth aspect of the present invention, wherein the transmission unit transmits the management message including an administrator identifier for identifying an administrator of the terminal device to the terminal device. The gist.

  A fourteenth feature of the present invention relates to the ninth feature of the present invention, wherein the terminal device holds management information including an information element for storing the target operation mode, and the target operation mode is stored in the information element. The management message for operating or editing the management information is transmitted to the terminal device.

  A fifteenth feature of the present invention is a terminal device comprising a plurality of managed resources, wherein at least some of the manageable resources that can be managed have a plurality of operation modes different from each other, wherein the management target resources are indicated. A receiving unit for receiving management information including target information, control information indicating the content of remote control for the managed resource, and operation mode information indicating the operation mode; and the management message received by the receiving unit A control execution unit configured to set the operation mode based on the operation mode information, and to control the management target resource based on the management target information and the control information included in the management message received by the reception unit; This is the gist.

  A sixteenth feature of the present invention relates to the fifteenth feature of the present invention, wherein the inconsistency processing information includes details of control of the management target resource when the current operation mode and the target operation mode do not match. The gist of the present invention is that, when the current operation mode does not match the target operation mode, the control execution unit controls the management target resource based on the mismatch processing information.

  A seventeenth feature of the present invention relates to the sixteenth feature of the present invention, wherein the terminal device determines a relationship between an administrator identifier for identifying an administrator of the terminal device and whether or not the managed resource can be accessed. The control execution unit is configured to control access to the management target resource by the mismatch processing information, based on the administrator identifier and the access rule, The gist is to determine whether to access the managed resource.

According to an eighteenth feature of the present invention, a terminal device having a plurality of management target resources and having a plurality of operation modes in which at least some of the management target resources that can be managed are different from each other, and remote control of the management target resources A terminal management method used in a terminal management server that manages the terminal device by the terminal management server in association with the managed resource, the content of remote control for the managed resource, and the operation mode A step of storing in a storage unit; a step in which the terminal management server accepts a request for remote control for the terminal device; and when the request is accepted, based on the content stored in the storage unit, the management target Management target information indicating resources, control information indicating the contents of remote control for the managed resources, Transmitting a management message including operation mode information indicating a fine the operation mode to the terminal device, the terminal device receiving the management message,
The terminal device sets the operation mode based on the operation mode information included in the received management message, and the management target based on the management target information and the control information included in the received management message. And a step of controlling resources.

  According to a nineteenth feature of the present invention, the terminal device is managed by remotely controlling a terminal device that includes a plurality of managed resources and at least some of the manageable resources that can be managed have different operation modes. A storage management process for associating and storing in a storage unit the management target resource, the content of remote control for the management target resource, and the operation mode in a storage unit, and a remote control for the terminal device. Request acceptance processing for accepting a request, and control information indicating the content of remote control for the management target resource, management target information indicating the management target resource, based on the content stored in the storage unit when the request is received A management message including information and operation mode information indicating the operation mode. And summarized in that to execute a transmission process of transmitting the location.

  According to the features of the present invention, when a terminal device having a plurality of operation modes is managed by remote control, a desired managed resource can be remotely controlled regardless of the operation mode set in the terminal device.

  Next, an embodiment of the present invention will be described. Specifically, the first to third embodiments of the present invention, the operation and effect of the terminal management system according to the embodiment, and other embodiments will be described.

  In the first embodiment, when the operation mode (current operation mode) set in the terminal device and the operation mode to be controlled (target operation mode) do not match, it is determined whether or not the managed resource can be accessed. A mode for remotely controlling the management target resource will be described.

  In the second embodiment, a mode will be described in which when the current operation mode and the target operation mode do not match, the management target resource is remotely controlled by changing the operation mode of the terminal device to the target operation mode.

  In the third embodiment, a description will be given of a mode in which the management target resource is remotely controlled when the current operation mode shifts to the target operation mode when the current operation mode set in the terminal device does not match the target operation mode. .

  In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals. However, it should be noted that the drawings are schematic and ratios of dimensions and the like are different from actual ones.

  Accordingly, specific dimensions and the like should be determined in consideration of the following description. Moreover, it is a matter of course that portions having different dimensional relationships and ratios are included between the drawings.

(1) First Embodiment As described above, in the first embodiment, when the operation mode (current operation mode) set in the terminal device does not match the operation mode of the control target (target operation mode). A mode of remotely controlling the management target resource after determining whether or not the management target resource can be accessed will be described.

  Specifically, (1.1) terminal management system configuration, (1.2) management message configuration, and (1.3) terminal management system operation will be described.

(1.1) Configuration of Terminal Management System First, the configuration of the terminal management system according to the present embodiment will be described. Specifically, the overall schematic configuration, the functional block configuration of the terminal management server, and the functional block configuration of the terminal device will be described.

(1.1.1) Overall Schematic Configuration FIG. 1 is an overall schematic configuration diagram of a terminal management system 10 according to the present embodiment. The terminal management system 10 includes a terminal management server 100, a mobile terminal 200, and a management terminal 300. The terminal management system 10 supports the DM protocol defined by OMA-DM, which is a working group of the Open Mobile Alliance (OMA).

  The terminal management server 100 is connected to the communication network 11. A radio base station 12 is connected to the communication network 11.

  The terminal management server 100 manages the mobile terminal 200 by remotely controlling the management target resource 240 of the mobile terminal 200 (not shown in FIG. 1, see FIG. 3). The terminal management server 100 is used by a management group (such as an administrator in a corporation) that manages the mobile terminal 200. A management terminal 300 is connected to the terminal management server 100. The manager or the like uses the management terminal 300 to receive provision of a terminal management service provided by the terminal management server 100.

  The mobile terminal 200 is a terminal device that can be carried by the user and can be connected to the communication network 11, such as a smartphone, a PDA, and a notebook PC. Specifically, the mobile terminal 200 connects to the communication network 11 by executing wireless communication with the wireless base station 12.

  The mobile terminal 200 includes a plurality of management target resources 240 (for example, wireless LAN cards). The mobile terminal 200 has a plurality of operation modes (for example, a private mode and an official mode). In the plurality of operation modes, at least some of the management target resources 240 that can be managed are different from each other.

  The terminal management server 100 transmits a management message M to the mobile terminal 200 in accordance with an instruction from the management terminal 300. In addition, the terminal management server 100 receives the management message M transmitted by the mobile terminal 200. When the management message M is transmitted and received between the terminal management server 100 and the mobile terminal 200, management of the mobile terminal 200, specifically, remote control of the mobile terminal 200 is realized.

  In the present embodiment, the management message M conforms to the OMA-DM Representation Protocol. In the management message M, management information 220 (not shown in FIG. 1, refer to FIG. 3) held by the mobile terminal 200, specifically, a data object (management object) that abstracts the management target resource 240 is stored. Contains protocol commands for operation and editing.

(1.1.2) Functional Block Configuration of Terminal Management Server FIG. 2 is a functional block configuration diagram of the terminal management server 100. As illustrated in FIG. 2, the terminal management server 100 includes a service interface 101, a terminal management control unit 103, a management control database 105, and a terminal management server IF 107.

  The service interface 101 is an interface for providing a terminal management service to an administrator who uses the management terminal 300. In the present embodiment, the service interface 101 is an interface for providing a function of an application executed on the terminal management server 100 as a service. Specifically, the service interface 101 is a Web interface, a remote procedure call, or the like.

  The service interface 101 receives a request for management of the mobile terminal 200, specifically, remote control via the management terminal 300. In the present embodiment, the service interface 101 constitutes a request reception unit.

  The terminal management control unit 103 is based on the identifier of the terminal device to be managed (mobile terminal 200) acquired from the management terminal 300 via the service interface 101 and the identifier of the operation mode (target operation mode) to be managed. Determine the terminal management services available to the administrator.

  The management control database 105 is a database for specifying a terminal device to be managed and a terminal management service (for example, wireless LAN card network setting in the Official mode) that can be used by the administrator in each target operation mode.

  Specifically, the management control database 105 stores the management target resource 240 (see FIG. 3), the contents of remote control for the management target resource 240, and the operation mode in association with each other. The contents of remote control (management contents) for the management target resource 240 are the above-described terminal management services that can be used, for example, network settings of a wireless LAN card. In the present embodiment, the management control database 105 constitutes a storage unit.

  The management control database 105 may be configured to further specify the terminal management service according to the identifier of the administrator. In this case, the terminal management control unit 103 acquires an administrator identifier that identifies the administrator via the service interface 101. As the administrator identifier, for example, an identifier that uniquely identifies the administrator, an identifier that identifies a group composed of a plurality of administrators, or an identifier that identifies the role of the administrator can be used.

  The terminal management server IF 107 has an interface function for executing terminal management for the mobile terminal 200. In the present embodiment, the terminal management server IF 107 is configured by a Device Management Server defined by OMA-DM.

  The terminal management server IF 107 establishes a session for executing terminal management with the mobile terminal 200 according to the management request from the terminal management control unit 103. In the present embodiment, the terminal management server IF 107 establishes a session with the mobile terminal 200 according to the OMA-DM protocol. The terminal management server IF 107 transmits a management message M to the mobile terminal 200 using the established session.

  Further, when the service interface 101 receives a management request from the terminal management control unit 103, that is, a request for remote control for the mobile terminal 200, the terminal management server IF 107 is based on the contents stored in the management control database 105. , (I) management object information, (ii) control information, and (iii) a management message M (for example, management request message M3) including operation mode information is transmitted to the mobile terminal 200. The management target information indicates a management target resource 240 that is remotely controlled. The control information indicates the content of remote control (management content) for the management target resource 240 indicated by the management target information. The operation mode information indicates the operation mode of the mobile terminal 200.

  In the present embodiment, the terminal management control unit 103 and the terminal management server IF 107 constitute a transmission unit.

  The terminal management control unit 103 and the terminal management server IF 107 obtain mismatch processing information used when the current operation mode currently set in the mobile terminal 200 does not match the target operation mode indicated by the operation mode information. The management message M including it (specifically, the management request message M3, see FIG. 12) can be transmitted to the mobile terminal 200.

  In the present embodiment, as processing when the operation mode does not match indicated by the mismatch processing information, the operation mode is changed to the target operation mode, and after changing to the target operation mode, the management target resource 240 is controlled based on the control information Is defined.

  Further, as a process when the operation mode does not match indicated by the mismatch processing information, a process for controlling the management target resource 240 based on the control information when the current operation mode shifts to the target operation mode is defined. Furthermore, a process for controlling the management target resource 240 according to the access rule 230 included in the mobile terminal 200 is defined as a process when the operation mode does not match indicated by the mismatch process information.

  Further, the terminal management control unit 103 and the terminal management server IF 107 can also transmit a management message M including an administrator identifier for identifying the administrator of the mobile terminal 200 to the mobile terminal 200.

(1.1.3) Functional Block Configuration of Terminal Device FIG. 3 is a functional block configuration diagram of the mobile terminal 200 configuring the terminal device in the present embodiment. As shown in FIG. 3, the mobile terminal 200 includes a terminal management client IF 201, a resource management unit 203, a terminal state comparison unit 204, an access control unit 205, a state switching unit 207, a management information storage unit 209, and a state change detection unit 211. Prepare.

  The mobile terminal 200 includes management information 220, access rules 230, and management target resources 240.

  The terminal management client IF 201 has an interface function for executing terminal management by the terminal management server 100. In the present embodiment, the terminal management client IF 201 is configured by a Device Management Client defined by OMA-DM.

  The terminal management client IF 201 establishes a session for executing terminal management by the terminal management server 100 in accordance with a request from the terminal management server 100. The establishment of the session may be requested from the mobile terminal 200.

  The terminal management client IF 201 receives the management message M, specifically, the management request message M3, through the session established with the terminal management server 100. In the present embodiment, the terminal management client IF 201 constitutes a receiving unit.

  The management request message M3 follows a message format defined by the OMA-DM Representation Protocol. In DM Representation Protocol, the management content 220 (for example, Device Detail Management Object (DevDetail) and Firmware Update Management Object (FUMO) stipulated by OMA-DM) provided in the mobile terminal 200 is managed and edited. Is stipulated.

  The terminal management client IF 201 calls the resource management unit 203 in accordance with the management request message M3 received from the terminal management server 100.

  The resource management unit 203 accesses the terminal state comparison unit 204, the access control unit 205, the state switching unit 207, the management information storage unit 209, the state change detection unit 211, and the management target resource 240 in accordance with an instruction from the terminal management client IF 201. To do.

  When the instruction from the terminal management client IF 201 includes the operation mode to be managed, that is, the target operation mode, the resource management unit 203 notifies the terminal state comparison unit 204 of the target operation mode.

  The terminal state comparison unit 204 acquires an operation mode currently set in the mobile terminal 200, that is, an identifier of the current operation mode. The terminal state comparison unit 204 compares the current operation mode with the target operation mode notified from the resource management unit 203, and notifies the resource management unit 203 of the comparison result (match or mismatch).

  The resource management unit 203 accesses the management target resource 240 when the comparison result is “match”. On the other hand, when the comparison result is “mismatch”, the resource management unit 203 performs access control unit 205, state switching unit 207, management information storage unit 209 according to the mismatch processing information included in the instruction from the terminal management client IF 201. And the state change detection unit 211 is accessed.

  The access control unit 205 controls access to the management target resource 240 by the resource management unit 203 according to the current operation mode. The access control unit 205 accesses the managed resource 240 according to the management request message M3 received from the terminal management server 100.

  Specifically, the access control unit 205 sets the operation mode based on the operation mode information included in the management request message M3. Further, the access control unit 205 controls the management target resource 240 based on the management target information and control information included in the management request message M3. In the present embodiment, the access control unit 205 constitutes a control execution unit.

  When the current operation mode and the target operation mode do not match, the access control unit 205 controls the management target resource 240 based on the mismatch processing information. That is, the mismatch processing information indicates the control content (management content) of the management target resource 240 when the current operation mode and the target operation mode do not match.

  Specifically, the access control unit 205 can control the management target resource 240 based on the control information after changing the operation mode to the target operation mode and changing to the target operation mode. Further, the access control unit 205 can control the management target resource 240 based on the control information while maintaining the current operation mode.

  Further, the access control unit 205 controls the access to the management target resource 240 by the mismatch processing information, for example, if the mismatch processing information indicates that the access to the management target resource 240 is denied, Whether to access the management target resource 240 is determined based on the administrator identifier and the access rule 230.

  The state switching unit 207 switches the operation mode currently set in the mobile terminal 200 (current operation mode) to the operation mode to be managed (target operation mode).

  The management information storage unit 209 stores information specifying the management target resource 240 included in the management request message M3, control contents (management contents) for the management target resource 240, and target operation mode in association with each other in time series. .

  The state change detection unit 211 detects an event in which the operation mode of the mobile terminal 200 shifts, and temporarily interrupts the shift of the operation mode.

(1.1.3.1) Structure of Management Information 220 FIG. 7 shows a structural example of the management information 220. The management information 220 shown in FIG. 7 is used to change the setting information of the management target resource 240 (for example, a wireless LAN card) provided in the mobile terminal 200.

  The information element 221 shown in FIG. 7 stores a setting function identifier (SFID) that uniquely specifies a function used for setting change. In the present embodiment, the DM protocol command “Exec” is used for the information element 221. The DM protocol command defines that the mobile terminal 200 changes the setting using the setting change function identified by the setting function identifier.

  The subtree under Parameters is a place folder that stores parameters for the setting change function specified by SFID. The terminal management server 100 uses the protocol command “Replace” or the like for each node of the subtree to change the parameter. That is, the terminal management server 100 transmits to the mobile terminal 200 a management request message M3 for operating or editing the management information 220 so that the target operation mode can be stored in the information element.

  The management information 220 includes an information element 223 that stores an administrator identifier. Further, the management information 220 includes an information element 225 that stores an identifier that uniquely identifies the target operation mode, and an information element that stores an identifier that uniquely identifies a process when the target operation mode does not match the current operation mode. 227.

(1.1.3.2) Access rule 230
8 to 11 show examples of the access rule 230. FIG. The access rule 230 describes an administrator who can access the management target resource 240 according to the operation mode of the mobile terminal 200.

  That is, the access rule 230 indicates the relationship between the administrator identifier and whether or not the managed resource 240 can be accessed.

  As shown in FIGS. 8 to 11, in this embodiment, an official mode and a private mode are used as the operation mode of the mobile terminal 200. Furthermore, a lock mode for restricting the operation of the mobile terminal 200, a normal mode without the restriction, and the like are used.

(1.2) Configuration of Management Message Next, the configuration of the management message M according to the present embodiment will be described with reference to FIGS. In the present embodiment, a management request message M3 (see FIG. 12) and a management response message M4 (see FIGS. 13 and 14) are used as the management message M.

  As described above, in the present embodiment, the management message M conforms to the OMA-DM Representation Protocol. The OMA-DM WG employs a framework that sequentially specifies additional data objects (management objects) corresponding to resources specific to individual device management scenarios (firmware update, software configuration management, remote diagnosis, etc.). An example of a management object is a Software Component Management Object (SCOMO) that manages a software configuration.

  SCOMO is a data object that includes software operation states (general operation states such as operating, stopped, and downloading) as information elements. The terminal management server 100 can acquire or change the operating state of software operating on the mobile terminal 200 by transmitting a DM protocol command to SCOMO.

  In this way, there are Firmware Update Management Object (FUMO) and Scheduling Context Management Object as data objects including the state of management target as information elements. FUMO includes firmware installation status (downloading, installation, etc.) as information elements. The Scheduling Context Management Object includes the status of the schedule process (scheduled process, stopped schedule process, etc.) as information elements.

(1.2.1) Management request message M3
FIG. 12 shows an example of a management request message M3 for requesting management for the management information 220 shown in FIG. The management request message M3 shown in FIG. 12 is a part of a message (SyncBody part) compliant with the OMA-DM Representation Protocol. According to the management request message M3, the management information 220 is operated and edited in the following order. That is, the management information 220 includes (1) changing the value of the information element 225 to Official (part M31 in the figure), (2) changing the value of the information element 227 to Ctrl (part M32), and (3) the information element. The value of 221 is changed to NWconfig (part M33), the value of information element 225 is changed to Official (part M34), and the information element 221 is executed (part M35). .

  The values used in the portions 31 to 34 may be defined by a definition table shared between the terminal management server 100 and the mobile terminal 200.

  15A to 15D show examples of definition tables. Here, the values described as the management request message M3 shown in FIG. 12 will be described with reference to FIGS. The official part M31 indicates that the management target mode (target operation mode) is the official mode (see FIG. 15A). The part M31 can include an identifier of an operation mode that can be the target operation mode.

  The ctrl of the part M32 indicates that the process when the target operation mode and the current operation mode do not match is access control (see FIG. 15B). NWconfig in the part M33 indicates a function for performing network setting (see FIG. 15C). Official in part M34 indicates that the sender of the management request message M3 is an employee manager in the company.

(1.2.2) Management response message M4
13 and 14 show examples of the management response message M4. The management response message M4 shown in FIG. 13 indicates that the management target resource 240 can be accessed and the management contents can be executed normally. The management response message M4 illustrated in FIG. 14 indicates that the access control unit 205 determines that access is not possible.

(1.3) Operation of Terminal Management System Next, the operation of the terminal management system 10 will be described. Specifically, the message sequence, the operation of the terminal management server (including the screen transition example of the management terminal 300), and the operation of the terminal device will be described.

(1.3.1) Message Sequence FIG. 4 shows an example of a message sequence between the terminal management server 100 and the mobile terminal 200 according to this embodiment. As illustrated in FIG. 4, in step S <b> 10, the terminal management server 100 transmits a session activation message for activating a session to the mobile terminal 200. The session activation message is OMA-DM protocol package # 0 defined by OMA-DM Notification Initiation.

  In step S <b> 20, the mobile terminal 200 transmits a client initialization message to the terminal management server 100. The client initialization message includes OMA-DM protocol package # 1 defined by the OMA-DM protocol.

  In step S30, the terminal management server 100 transmits a management request message M3 (see FIG. 12) to the mobile terminal 200. The management request message M3 includes an OMA-DM protocol package # 2 defined by the OMA-DM protocol. The mobile terminal 200 executes processing according to the control information (management contents) included in the management request message M3, specifically, controls the management target resource 240.

  In step S40, the mobile terminal 200 transmits the processing result according to the management request message M3 to the terminal management server 100 as a management response message M4 (see FIG. 13). The management response message M4 includes an OMA-DM protocol package # 3 defined by the OMA-DM protocol.

  In step S50, the terminal management server 100 transmits an ACK message for the management response message M4 to the mobile terminal 200. The ACK message includes OMA-DM protocol package # 4 defined by the OMA-DM protocol.

  The session activation message is transmitted by Push from the terminal management server 100. As a transport for transmitting a session activation message, WAP Push, IP Push, or the like can be used. As a transport for transmitting and receiving the client initialization message, the management request message M3, the management response message M4, and the ACK message, for example, HTTP can be used.

  Further, the terminal management server 100 and the mobile terminal 200 may perform authentication of the sender of the received message and verification of message integrity. In this embodiment, the session is established under the initiative of the terminal management server 100, but the session does not necessarily have to be established under the initiative of the terminal management server 100. For example, the session may be established under the initiative of the mobile terminal 200. In this case, the terminal management server 100 may buffer the management request for the mobile terminal 200 from the administrator, and transmit the buffered management request together with the session establishment request from the mobile terminal 200.

(1.3.2) Operation of Terminal Management Server FIG. 5 shows an operation example of the terminal management server 100 according to the present embodiment. As shown in FIG. 5, the service interface 101 includes an available service request including an identifier (terminal identifier) of a terminal device to be managed (mobile terminal 200), an administrator identifier, and an operation mode (target operation mode) to be managed. Is notified to the terminal management control unit 103.

  The terminal management control unit 103 acquires an available terminal management service from the management control database 105 based on the terminal identifier, the administrator identifier, and the target operation mode, and uses the acquired terminal management service (available service) as the service interface 101. Notify

  Next, the administrator notifies the terminal management control unit 103 of a management request including processing information when there is a mismatch with the management content via the service interface 101.

  The terminal management control unit 103 notifies the terminal management server IF 107 of a management request including a terminal identifier, an administrator identifier, a target operation mode, management content, and mismatch processing information.

  The terminal management server IF 107 establishes a session for executing terminal management with the mobile terminal 200, and executes the message sequence shown in FIG.

  The terminal management server IF 107 transmits an ACK message to the mobile terminal 200 and then notifies the terminal management control unit 103 of a management response. The terminal management control unit 103 notifies the service interface 101 of a management response.

  Here, FIG. 16 shows a transition example of images displayed on the display (not shown) of the management terminal 300 connected to the terminal management server 100. The terminal management server 100 and the management terminal 300 include a web interface. FIG. 16 shows images 301 to 307 displayed on the web browser provided in the management terminal 300.

  As shown in FIG. 16, an image 301 displayed when specifying a terminal device to be managed, an image 303 displayed when selecting an operation mode (target operation mode) to be managed, management contents (and operations) Transition is made in the order of an image 305 displayed when the mode mismatch processing is received and an image 307 displaying the management result execution result.

  In the image 305, a combo box for selecting management contents (here, network settings) and processing when the operation modes do not match is displayed. The service interface 101 may have a function of authenticating the administrator and the management terminal 300 (for example, a function of managing login to the terminal management server 100 by the administrator).

(1.3.3) Operation of Terminal Device FIG. 6 shows an operation example of the mobile terminal 200 (terminal device) according to the present embodiment. As illustrated in FIG. 6, when the terminal management client IF 201 receives a session activation message from the terminal management server 100, the terminal management client IF 201 executes an initialization process. In addition, the terminal management server 100 transmits a client initialization message to the terminal management server 100.

  Next, the terminal management client IF 201 receives a management request message M3 (see FIG. 12) from the terminal management server 100. The terminal management client IF 201 notifies the resource management unit 203 of a management request included in the management request message M3. The management request may be notified to the resource management unit 203 by manipulating and editing the management information 220 according to the management request message M3.

  The resource management unit 203 notifies the terminal state comparison unit 204 of a state comparison request including the operation mode to be managed (target operation mode). The terminal state comparison unit 204 notifies the resource management unit 203 of the result of comparing the target operation mode and the current operation mode as a state comparison response.

  When the comparison result included in the state comparison response is “match”, the resource management unit 203 accesses the managed resource 240 according to the management content. The resource management unit 203 notifies the terminal management client IF 201 of the access result as a management response.

  On the other hand, when the comparison result is “mismatch”, the resource management unit 203 notifies the access control unit 205 of an access permission determination request according to the mismatch processing information. The access permission determination request includes an administrator identifier and management contents, that is, control contents for the management target resource 240.

  The access control unit 205 uses the access rule 230 to determine whether or not the administrator can execute the management content, and notifies the resource management unit 203 of the determination result as an access permission determination response.

  When the determination result included in the access permission determination response is “accessible”, the resource management unit 203 accesses the management target resource 240 according to the management content. Furthermore, the resource management unit 203 notifies the terminal management client IF 201 of the result of accessing the management target resource 240 as a management response.

  On the other hand, when the determination result is “inaccessible”, the resource management unit 203 notifies the terminal management client IF 201 that the managed resource 240 is inaccessible as a management response.

  The terminal management client IF 201 transmits the notified management response to the terminal management server 100 as a management response message M4. Next, the terminal management client IF 201 receives the ACK message from the terminal management server 100 and terminates the session for executing terminal management.

  Here, a more detailed operation example in the access control unit 205 will be described. For example, when the target operation mode is the Official mode and the current operation mode is the Private mode, the resource management unit 203 notifies the access control unit 205 of an access permission determination request.

  When an access permission determination request is notified, the access control unit 205 determines whether the administrator can access the management target resource 240 using the access rule 230 because the current operation mode is the private mode. When the access rule 230 shown in FIG. 8 is used, for example, when the administrator is “Official”, the access control unit 205 determines “accessible” for the setting of the wireless LAN card, and “wallpaper setting”. Is determined as “inaccessible”.

(2) Second Embodiment Next, a second embodiment of the present invention will be described. As described above, in the second embodiment, a mode in which the management target resource is remotely controlled by changing the operation mode of the terminal device to the target operation mode will be described. Hereinafter, parts different from the first embodiment described above will be mainly described, and description of parts similar to the first embodiment will be omitted as appropriate.

  In the present embodiment, the operation of the terminal device and the configuration of the management message are different from those in the first embodiment. Therefore, the operation of the terminal device and the configuration of the management message will be described below.

(2.1) Operation of Terminal Device FIG. 17 shows an operation example of the mobile terminal 200 (terminal device) according to the present embodiment. In the present embodiment, as the mismatch information, “execute management contents by switching the operation mode” is described.

  As shown in FIG. 17, the processing until the resource management unit 203 determines whether or not the comparison results included in the state comparison response match is the same as in the first embodiment (see FIG. 6). .

  When the comparison result between the target operation mode and the current operation mode included in the state comparison response is “mismatch”, the resource management unit 203 notifies the access control unit 205 of a state switching request according to the mismatch processing information.

  The state switching unit 207 switches the operation mode of the mobile terminal 200 based on the notified state switching request. After switching the operation mode, the state switching unit 207 notifies the resource management unit 203 of a state switching response.

  The operations after the status switch response is notified to the resource management unit 203 are the same as those in the first embodiment.

(2.2) Configuration of Management Message Next, the configuration of the management message M according to this embodiment will be described. In the present embodiment, a management request message M3 shown in FIG. In the present embodiment, as shown in FIG. 13, a management response message M4 (see FIG. 13) indicating that the management content has been successfully executed is used.

  According to the management request message M3, the management information 220 is operated and edited in the following order. That is, the management information 220 (1) changes the value of the information element 225 to Official (part M31 in the figure), (2) changes the value of the information element 227 to sw (part M36), (3) information element The value of 221 is changed to NWconfig (part M33), the value of information element 225 is changed to Official (part M34), and the information element 221 is executed (part M35). .

  Here, with reference to FIGS. 15A to 15D, the difference from the first embodiment will be mainly described regarding the value described as the management request message M <b> 3 illustrated in FIG. 18.

  The part M36 sw indicates that the process when the management target mode (target operation mode) and the current operation mode do not match is switching of the operation mode (see FIG. 15B).

(2.3) Modification In this embodiment, the management request message M3 including the mismatch processing information is notified from the terminal management server 100 to the mobile terminal 200, but the mismatch processing information is included in the management request message M3. Instead, the processing when the operation modes do not match may be determined by the determination of the mobile terminal 200.

  For example, when the target operation mode and the current operation mode do not match, the control content may be determined according to the context such as the time and place where the operation mode is determined to be inconsistent. Specifically, if the operation mode is determined to be inconsistent at night, the ring tone may be changed after forcibly entering the manner mode so that no sound is produced when the ring tone is changed. preferable. Therefore, the resource management unit 203 acquires time information when the target operation mode and the current operation mode do not match. When the acquired time information is nighttime, the resource management unit 203 may notify the state switching unit 207 of a state switching request for shifting to the manner mode.

(3) Third Embodiment Next, a third embodiment of the present invention will be described. As described above, in the third embodiment, when the current operation mode set in the terminal device does not match the target operation mode, the managed resource is remotely controlled when the current operation mode shifts to the target operation mode. The form which performs, ie, the form which buffers the content of remote control is demonstrated.

  In the following, portions different from the first embodiment and the second embodiment described above will be mainly described, and description of portions similar to the first embodiment or the second embodiment will be omitted as appropriate.

  In the present embodiment, the operation of the terminal management system and the configuration of management messages will be described.

(3.1) Operation of Terminal Management System First, the operation of the terminal management system 10 according to the present embodiment will be described. Specifically, the message sequence, the operation of the terminal management server, and the operation of the terminal device will be described.

(3.1.1) Message Sequence FIG. 19 shows an example of a message sequence between the terminal management server 100 and the mobile terminal 200 according to this embodiment. The processes in steps S110 to S130 and S150 shown in FIG. 19, that is, the session activation message, the client initialization message, the management request message M3, and the ACK message are the same as in the first embodiment (see FIG. 4).

  In step S130, the mobile terminal 200 receives the management request message M3 from the terminal management server 100. Since the target operation mode and the current operation mode do not match, the mobile terminal 200 maintains the operation mode set in the mobile terminal 200 according to the mismatch processing information. When the operation mode shifts to the target operation mode, the mobile terminal 200 executes the management content included in the management request message M3. Note that the mobile terminal 200 can execute the management content included in the management request message M3 even when the mobile terminal 200 shifts from the current operation mode to another operation mode and then shifts to the target operation mode.

  The mobile terminal 200 buffers the management content until the operation mode shifts to the target operation mode. Further, if the session with the terminal management server 100 is held until the operation mode is shifted to, the power consumption of the mobile terminal 200 increases. Furthermore, the load on the communication network 11 also increases. Therefore, the mobile terminal 200 once terminates the session.

  In step S140, the mobile terminal 200 transmits to the terminal management server 100 a management response message M4 indicating that the management content included in the management request message M3 has been accepted.

  When the mobile terminal 200 detects the transition of the operation mode to the target operation mode, the mobile terminal 200 executes the buffered management content and transmits a management response message M4 indicating that the management content has been executed to the terminal management server 100.

  In step S160, the mobile terminal 200 transmits a client initialization message to the terminal management server 100 in order to establish a session used for transmitting the management response message M4 indicating that the management content has been executed.

  In step S <b> 170, the terminal management server 100 transmits a server initialization message to the mobile terminal 200.

  In step S180, the mobile terminal 200 transmits to the terminal management server 100 a management response message M4 indicating that the buffered management content has been executed.

  In step S190, the terminal management server 100 transmits an ACK message for the management response message M4 to the mobile terminal 200.

(3.1.2) Operation of Terminal Management Server FIG. 20 shows an operation example of the terminal management server 100 according to the present embodiment. Specifically, FIG. 20 shows an operation after the terminal management server 100 receives a client initialization message in step S160 shown in FIG.

  As illustrated in FIG. 20, the terminal management server 100 establishes a session with the mobile terminal 200. Upon receiving the management response message M4, the terminal management server 100 notifies the terminal management control unit 103 of a management response included in the management response message. The management response includes a terminal identifier, a target operation mode, and a management content execution result.

  The terminal management control unit 103 stores the management response. In addition, when the terminal management control unit 103 receives a management request including the terminal identifier, the target operation mode, and the management content from the service interface 101, the management in which the terminal identifier and the target operation mode match among the stored management responses. The response is notified to the service interface 101.

(3.1.3) Operation of Terminal Device FIG. 21 shows an operation example of the mobile terminal 200 (terminal device) according to the present embodiment. As shown in FIG. 21, the processing until the resource management unit 203 determines whether or not the comparison results included in the state comparison response match is the same as in the first embodiment (see FIG. 6). .

  When the comparison result between the target operation mode and the current operation mode included in the state comparison response is “mismatch”, the resource management unit 203 sends a management information storage request including the target operation mode and the management content to the management information storage unit 209 is notified. Based on the notified management information storage request, the management information storage unit 209 stores the target operation mode and the management content in association with each other in time series, and notifies the resource management unit 203 of a management information storage response.

  The resource management unit 203 notifies the state change detection unit 211 of a state change detection request including the target operation mode. The state change detection unit 211 notifies the resource management unit 203 of a state change detection response to the state change detection request.

  Next, the resource management unit 203 enters a state of waiting for notification of a state change alert by the state change detection unit 211. Here, the resource management unit 203 notifies the terminal management client IF 201 of a management response indicating that a management request has been accepted in order to terminate the session with the terminal management server 100.

  The terminal management client IF 201 terminates the session by transmitting a management response message M4 to the terminal management server 100 and receiving an ACK message from the terminal management server 100.

  Next, the state change detection unit 211 detects an event in which the operation mode of the mobile terminal 200 is switched, and notifies the resource management unit 203 of a state change alert. The resource management unit 203 notifies the state change detection unit 211 indicating that the state change alert has been received. Note that the state change detection unit 211 may end the operation of detecting the state change by the notification.

  The resource management unit 203 notifies the management information storage unit 209 of a management information request. The management information storage unit 209 extracts the management contents included in the management information request in time series, and notifies the resource management unit 203 as a management information response.

  Based on the management information response, the resource management unit 203 accesses the management target resource 240 in time series and notifies the state switching unit 207 of the state switching request. The state switching unit 207 switches the operation mode of the mobile terminal 200 based on the notified state switching request. After switching the operation mode, the state switching unit 207 notifies the resource management unit 203 of a state switching response.

  The resource management unit 203 notifies the terminal management client IF 201 of the result of accessing the management target resource 240 as a management response.

  The terminal management client IF 201 transmits a client initialization message to the terminal management server 100 in order to establish a session with the terminal management server 100. Upon receiving the server initialization message from the terminal management server 100, the terminal management client IF 201 transmits a management response message M4 including the management response notified from the resource management unit 203 to the terminal management server 100. Next, the terminal management client IF 201 receives the ACK message from the terminal management server 100 and terminates the session for executing terminal management.

  It is conceivable that a new management request message M3 is notified from the terminal management server 100 to the mobile terminal 200 while the resource management unit 203 is in a state change alert waiting state. In this case, the state change detection unit 211 may determine whether or not the operation mode of the transfer destination is the target operation mode, and may restart the switching of the operation mode without notifying the state change alert if it is not the target operation mode. However, a state change alert may be notified each time an operation mode transition event occurs.

  In the former case, the state change detection unit 211 may accumulate the notified state change detection requests and may have a plurality of operation modes to be detected. When notifying the state change alert for all transition events and when there are a plurality of detection target modes, the state change alert desirably includes an identifier that uniquely identifies the operation mode of the transition destination. The resource management unit 203 notifies the management information storage unit 209 of a management information request with the identifier as the target operation mode.

In this embodiment, the session is temporarily terminated in the state change alert waiting state. However, the management response message M4 transmitted after executing the management content includes an identifier for uniquely identifying the session once terminated. You may do it. By including the identifier, the terminal management server 100 can associate the session with the management response. For this reason, it is preferable that the management information storage request, the management information response, and the management response include an identifier that uniquely identifies the session established with the terminal management server 100.

(3.2) Configuration of Management Message FIG. 22 shows an example of the management message M according to the present embodiment, specifically, the management request message M3. As shown in FIG. 22, the management request message M3 according to the present embodiment includes a portion M37 for changing the value of the information element 227 (see FIG. 7) to nosw. As shown in FIG. 15B, nosw (Nosw) indicates “maintain in the current operation mode”.

(4) Operation / Effect According to the terminal management system 10, the management target information indicating the management target resource 240, the control information indicating the remote control content (management content) for the management target resource 240, and the operation mode of the terminal device are shown. A management message M including operation mode information is transmitted from the terminal management server 100 to the mobile terminal 200. Also, the mobile terminal 200 controls the management target resource 240 based on the received management message M.

  Therefore, the desired managed resource 240 can be remotely controlled regardless of the operation mode (current operation mode) set in the mobile terminal 200.

  In the present embodiment, the management request message M3 includes mismatch processing information indicating the content of control of the management target resource 240 when the current operation mode and the target operation mode do not match. For this reason, even when the current operation mode does not match the target operation mode, the management target resource 240 can be managed, specifically, the management target resource 240 can be remotely controlled.

In the present embodiment, a process for controlling the management target resource 240 according to the access rule 230 included in the mobile terminal 200 is defined as a process when the operation mode does not match indicated by the mismatch process information. For this reason, while ensuring security against managed resource 240, the managed resources 240 can be remotely controlled. In addition, the management target resource 240 can be remotely controlled while suppressing the amount of processing necessary for access control.

  In the present embodiment, the terminal management server 100 transmits a management request message M3 for operating or editing the management information 220 to the mobile terminal 200 so that the target operation mode can be stored. Therefore, the target operation mode can be notified from the terminal management server 100 to the mobile terminal 200 using the OMA DM protocol defined by OMA-DM.

(Other embodiments)
As described above, the contents of the present invention have been disclosed through the first to third embodiments of the present invention. However, it is understood that the description and drawings constituting a part of this disclosure limit the present invention. Should not. From this disclosure, various alternative embodiments will be apparent to those skilled in the art.

  For example, in the above-described embodiment of the present invention, the terminal management server 100 transmits the management request message M3 for operating or editing the management information 220 to the mobile terminal 200 so that the target operation mode can be stored. The server 100 does not necessarily have to transmit such a management request message M3.

  In the above-described embodiment, the process for controlling the management target resource 240 according to the access rule 230 provided in the mobile terminal 200 is specified as the process when the operation mode does not match indicated by the mismatch processing information. It does not have to be.

  The functions of the terminal management server 100 described above can also be provided as a program that can be executed by a computer.

  As described above, the present invention naturally includes various embodiments that are not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

1 is an overall schematic configuration diagram of a terminal management system 10 according to an embodiment of the present invention. It is a functional block block diagram of the terminal management server 100 which concerns on embodiment of this invention. It is a functional block block diagram of the mobile terminal 200 (terminal device) which concerns on embodiment of this invention. It is a figure which shows the example of the message sequence between the terminal management server 100-mobile terminal 200 which concerns on 1st Embodiment and 2nd Embodiment of this invention. It is a figure which shows the operation example of the terminal management server 100 which concerns on 1st Embodiment and 2nd Embodiment of this invention. It is a figure which shows the operation example of the mobile terminal 200 which concerns on 1st Embodiment of this invention. It is a figure which shows the structural example of the information for management 220 which concerns on embodiment of this invention. It is a figure which shows the example of the access rule 230 which concerns on embodiment of this invention. It is a figure which shows the example of the access rule 230 which concerns on embodiment of this invention. It is a figure which shows the example of the access rule 230 which concerns on embodiment of this invention. It is a figure which shows the example of the access rule 230 which concerns on embodiment of this invention. It is a figure which shows the example of the management request message M3 which concerns on 1st Embodiment of this invention. It is a figure which shows the example of the management response message M4 which concerns on embodiment of this invention. It is a figure which shows the example of the management response message M4 which concerns on embodiment of this invention. It is a figure which shows the example of the definition table which concerns on embodiment of this invention. It is a figure which shows the example of a transition of the image displayed on the management terminal 300 which concerns on embodiment of this invention. It is a figure which shows the operation example of the mobile terminal 200 which concerns on 2nd Embodiment of this invention. It is a figure which shows the example of the management request message M3 which concerns on 2nd Embodiment of this invention. It is a figure which shows the example of the message sequence between the terminal management server 100-mobile terminal 200 which concerns on 3rd Embodiment of this invention. It is a figure which shows the operation example of the terminal management server 100 which concerns on 3rd Embodiment of this invention. It is a figure which shows the operation example of the mobile terminal 200 which concerns on 3rd Embodiment of this invention. It is a figure which shows the example of the management request message M3 which concerns on 3rd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Terminal management system, 11 ... Communication network, 12 ... Wireless base station, 100 ... Terminal management server, 101 ... Service interface, 103 ... Terminal management control part, 105 ... Management control database, 107 ... Terminal management server IF, 200 ... Mobile terminal, 201 ... terminal management client IF, 203 ... resource management unit, 204 ... terminal state comparison unit, 205 ... access control unit, 207 ... state switching unit, 209 ... management information storage unit, 211 ... state change detection unit, 220 Information for management, 221, 223, 225, 227 ... Information element, 230 ... Access rule, 240 ... Resource to be managed, 300 ... Management terminal, 301, 303, 305, 307 ... Image, M ... Management message, M3 ... Management Request message, M4 ... Management response message

Claims (19)

A terminal device comprising a plurality of managed resources and having a plurality of operation modes in which at least some of the managed resources that can be managed are different from each other;
A terminal management system comprising a terminal management server for managing the terminal device by remotely controlling the management target resource;
The terminal management server
A storage unit that associates and stores the managed resource, the content of remote control for the managed resource, and the operation mode;
A request receiving unit that receives a request for remote control of the terminal device;
When the request receiving unit receives the request, based on the content stored in the storage unit, management target information indicating the management target resource, control information indicating the content of remote control for the management target resource, and A transmission unit that transmits a management message including operation mode information indicating the operation mode to the terminal device;
The terminal device
A receiving unit for receiving the management message;
The operation mode is set based on the operation mode information included in the management message received by the reception unit, and based on the management target information and the control information included in the management message received by the reception unit. A terminal management system comprising: a control execution unit that controls the management target resource. The transmitting unit transmits the management message including mismatch processing information used when the current operation mode currently set in the terminal device does not match the target operation mode indicated by the operation mode information. To the terminal device,
The mismatch processing information indicates the content of control of the management target resource when the current operation mode and the target operation mode do not match,
The terminal management system according to claim 1, wherein the control execution unit controls the management target resource based on the mismatch processing information when the current operation mode and the target operation mode do not match.   The terminal according to claim 2, wherein the mismatch processing information indicates that the operation mode is changed to the target operation mode, and the management target resource is controlled based on the control information after the change to the target operation mode. Management system.   The terminal management system according to claim 2, wherein the mismatch processing information indicates that the management target resource is controlled based on the control information when the current operation mode shifts to the target operation mode.   The terminal management system according to claim 2, wherein the mismatch processing information indicates that access to a management target resource indicated by the management target information is controlled. The transmitting unit transmits the management message including an administrator identifier for identifying an administrator of the terminal device to the terminal device;
The terminal device holds an access rule indicating a relationship between the administrator identifier and whether or not the managed resource is accessible;
The control execution unit accesses the managed resource based on the administrator identifier and the access rule when the control processing unit indicates that access to the managed resource is controlled by the mismatch processing information. The terminal management system according to claim 5, which determines whether or not. The terminal device holds management information including an information element for storing the target operation mode,
The terminal management system according to claim 2, wherein the terminal management server transmits the management message for operating or editing the management information to the terminal device so that the target operation mode can be stored in the information element. A terminal management server for managing the terminal device by remotely controlling a terminal device having a plurality of operation modes in which at least some of the management target resources that can be managed together with a plurality of management target resources are different from each other;
A storage unit that associates and stores the managed resource, the content of remote control for the managed resource, and the operation mode;
A request receiving unit that receives a request for remote control of the terminal device;
When the request receiving unit receives the request, based on the content stored in the storage unit, management target information indicating the management target resource, control information indicating the content of remote control for the management target resource, and A terminal management server comprising: a transmission unit that transmits a management message including operation mode information indicating the operation mode to the terminal device. The transmitting unit transmits the management message including mismatch processing information used when the current operation mode currently set in the terminal device does not match the target operation mode indicated by the operation mode information. To the terminal device,
The terminal management server according to claim 8, wherein the mismatch processing information indicates a content of control of the management target resource when the current operation mode and the target operation mode do not match.   The terminal according to claim 9, wherein the mismatch processing information indicates that the operation mode is changed to the target operation mode, and the management target resource is controlled based on the control information after the change to the target operation mode. Management server.   The terminal management server according to claim 9, wherein the mismatch processing information indicates that the management target resource is controlled based on the control information when the current operation mode shifts to the target operation mode.   The terminal management server according to claim 9, wherein the mismatch processing information indicates that access to a management target resource indicated by the management target information is controlled.   The terminal management server according to claim 12, wherein the transmission unit transmits the management message including an administrator identifier for identifying an administrator of the terminal device to the terminal device. The terminal device holds management information including an information element for storing the target operation mode,
The terminal management server according to claim 9, wherein the management message for operating or editing the management information is transmitted to the terminal device so that the target operation mode can be stored in the information element. A terminal device comprising a plurality of managed resources and having a plurality of operation modes in which at least some of the managed resources that can be managed are different from each other;
A receiving unit for receiving a management message including management target information indicating the management target resource, control information indicating remote control content for the management target resource, and operation mode information indicating the operation mode;
The operation mode is set based on the operation mode information included in the management message received by the reception unit, and based on the management target information and the control information included in the management message received by the reception unit. A terminal device comprising: a control execution unit that controls the managed resource. The mismatch processing information indicates the content of control of the management target resource when the current operation mode and the target operation mode do not match,
The terminal device according to claim 15, wherein the control execution unit controls the management target resource based on the mismatch processing information when the current operation mode and the target operation mode do not match. The terminal device holds an access rule indicating a relationship between an administrator identifier for identifying an administrator of the terminal device and whether or not the managed resource can be accessed,
The control execution unit accesses the managed resource based on the administrator identifier and the access rule when the control processing unit indicates that access to the managed resource is controlled by the mismatch processing information. The terminal device according to claim 16, which determines whether or not. A terminal device comprising a plurality of managed resources and having a plurality of operation modes in which at least some of the managed resources that can be managed are different from each other;
A terminal management method used in a terminal management server that manages the terminal device by remotely controlling the management target resource,
The terminal management server stores the management target resource, the content of remote control for the management target resource, and the operation mode in association with each other in a storage unit;
The terminal management server accepting a remote control request for the terminal device;
When the terminal management server accepts the request, based on the content stored in the storage unit, management target information indicating the management target resource, control information indicating the content of remote control for the management target resource, Transmitting a management message including operation mode information indicating the operation mode to the terminal device;
The terminal device receiving the management message;
The terminal device sets the operation mode based on the operation mode information included in the received management message, and the management target based on the management target information and the control information included in the received management message. A terminal management method comprising: a step of controlling resources. A terminal management program for managing a terminal device by remotely controlling a terminal device having a plurality of operation modes in which at least some of the management target resources that can be managed together with a plurality of management target resources are different from each other,
On the computer,
A storage process for associating and storing the managed resource, the content of remote control for the managed resource, and the operation mode in a storage unit;
A request acceptance process for accepting a remote control request for the terminal device;
When the request is received, based on the contents stored in the storage unit, the management target information indicating the management target resource, the control information indicating the remote control content for the management target resource, and the operation mode are indicated. A terminal management program for executing a transmission process for transmitting a management message including operation mode information to the terminal device.

Images