JP4935120B2 - Information processing device, device use function control system, and device use function control program - Google Patents

Description

  The present invention relates to an information processing apparatus that can be used by an unspecified person, such as a portable communication terminal or a desktop personal computer, an apparatus use function control system that authenticates users of these information processing apparatuses, and The present invention relates to a device use function control program incorporated in these information processing devices in order to perform user authentication.

  There are various types of information processing devices that handle various types of information, from desktop personal computers and computers for larger arithmetic processing to small portable devices such as portable terminal devices. ing. Here, in order to simplify the explanation, the conventional technology and its problems will be considered by taking a portable terminal device as an example.

  Some portable terminal devices have not only cellular phones and PHS (Personal Handy-phone System) but also PDA (Personal Digital Assistant), notebook type or even smaller personal computers with communication functions. Yes. Many of these mobile terminal devices not only have basic functions for communication such as telephone calls and e-mails, but also create or edit a phone book and link it with the communication function, and take pictures. Or a photo management function for sending and receiving images after shooting, and a schedule management function for managing user schedules. In recent years, many portable terminal devices having an electronic money function that can be used for various payments at a store or for payments on the Internet and used as a credit card instead of cash have been used.

  Therefore, the mobile terminal device not only stores various kinds of personal information but also has a lot of property value in itself for handling electronic money. On the other hand, a mobile terminal device is a device that is always carried, unlike a stationary safe that stores information and money in a fixed place. The mobile terminal device itself is also reduced in size or weight, and may be dropped or misplaced, and there is a high risk of encountering theft.

  Moreover, many portable terminal devices do not have a function for limiting the owner to a specific person. For this reason, there is a problem that a third party who has acquired the mobile terminal device can easily impersonate the original owner. Therefore, there are cases where a third party who has acquired a mobile terminal device illegally uses a telephone or electronic money, or illegally acquires personal information such as a phone book, mail, or photo in the device. In addition, there is a possibility of making a phone call or sending a spam mail using these personal information obtained illegally, and selling the personal information to a person who performs such illegal use. As a result, the person who lost the portable terminal device may suffer more damage than the cost of replacing the device.

  As a measure to prevent the occurrence of these damages, a remote operation system is installed in the device, and a user who notices the loss of the device can perform various functions of the device by remote operation using another communication device such as a fixed telephone device. Mobile terminal devices that can stop (lock) are also widely used. In this portable terminal device, measures are taken to prevent information leakage by locking the function of the device, or the communication function is not allowed to be used by a third party without permission.

  Here, the function stop or function lock setting by remote operation refers to a remote operation function for controlling the corresponding mobile terminal device from a position away from the user. In particular, user operations by pressing a button on a mobile terminal device, and control of communication functions are targeted. There are various remote operation methods (see, for example, Patent Document 1). For example, a specific telephone number is stored in advance in the corresponding portable terminal device, and when this device is lost, a call is made from the telephone of the stored telephone number and a code number is input to lock the function. Some devices send a mail in accordance with a specific format, and the mobile terminal device receives this to lock its function.

  However, in order to lock the function of the device by remote operation in this way, it is necessary that the corresponding portable terminal device exists in the wireless service area. That is, when the corresponding mobile terminal device exists outside the service area, it cannot communicate with the device wirelessly and its function cannot be locked. Similarly, the function of the device cannot be locked even when the power of the corresponding portable terminal device is turned off. In addition, since it is necessary for only a legitimate user to lock the function of the device, it is necessary to restrict the mobile terminal device itself to react only to an incoming call from a specific telephone number.

  Further, some portable terminal devices set device ID (Identification) information using a specific IC (Integrated Circuit) card. In such a portable terminal device, it is possible to prevent the device from being locked by exchanging the IC card, or on the contrary, to unlock the device. Therefore, even if the lock function is operated so as not to cause information leakage, the lock can be prevented by another person exchanging the IC card, or the locked portable terminal device can be unlocked. As a result, there has been a problem that personal information such as a telephone directory and electronic mail can be read out from the mobile terminal device to an external device such as a personal computer.

  Therefore, a system that can deal with the loss of the mobile terminal device outside the wireless service area has been proposed as a first proposal (see, for example, Patent Document 2). In the first proposal, when the mobile terminal device is lost or stolen, the user accesses the home page of the service provider. Then, the identity of the person who has accessed is confirmed by the telephone number or personal identification number of the portable terminal device. As a result, the fact that the mobile terminal device has been lost is recorded in the loss report recording means in the location registration station. Thereafter, when the mobile terminal communicates with the base station, the location registration station sends a lost signal to the mobile terminal device. The portable terminal device invalidates the key operation when it receives a lost signal. Further, the location registration station may store the received data in the database, or erase the data in the mobile terminal device.

However, in this first proposal, the lost information processing device such as a portable terminal device needs to be connected to the Internet. In view of this, a second proposal has been made in which a computer reader is provided with a card reader / writer that reads and writes a user authentication card to prevent unauthorized use by a third party (see, for example, Patent Document 3). In the second proposal, the card reader / writer and the IC card communicate with each other by communication means such as wireless means to determine whether or not the corresponding information terminal device can be used. As a result, the information terminal device can be used only by users registered in advance.
JP 2001-177873 A (paragraph 0014, FIG. 1) JP 2001-309431 A (paragraphs 0019 to 0022, FIG. 1) JP2003-242149A (paragraphs 0009 and 0025, FIG. 1)

  According to the second proposal, the information processing apparatus cannot be used unless an authentication card is present. In addition, communication between the authentication card and the computer main body is performed by connecting a cable to be wired or using a wireless communication technology. Therefore, it is not necessary to access a special communication network such as the Internet.

  By the way, a portable type or a larger-sized information processing apparatus may be used alternately by a plurality of persons. In this way, when a plurality of persons use one information processing apparatus, all the information stored in the information processing apparatus may be used by all users. There may be information that should only be restricted from use. In some cases, only a specific person should limit the functions of the information processing apparatus. For example, one person is permitted to send an e-mail from the information processing apparatus, but the other person is permitted only to edit an image.

  Conventionally, in such a case, an upper manager instructs the range of work to be performed by each person, or a surveillance camera is arranged in the surrounding area so that each user can control the information processing device within the range of authority It was regulated to use. However, such a regulation may not function sufficiently, and a security problem has arisen particularly when highly confidential information is stored in the information processing apparatus. Further, in order to avoid such a problem, there is a problem in that highly confidential information cannot be stored in an information processing apparatus that may be used jointly, and the usability of the apparatus is deteriorated.

  SUMMARY OF THE INVENTION An object of the present invention is to provide an information processing apparatus that can be used by a plurality of persons and can reliably regulate the use range of these persons without depending on a communication network. There is.

  Another object of the present invention is to provide an information processing apparatus that makes it possible to prevent or limit the use of a third party without depending on a communication network.

In the present invention, (b) specific personal information requesting means for requesting transmission of personal information by a short-range radio to a personal information card storing personal information of a predetermined specific person; (b) the specific personal information Personal information receiving means for receiving the personal information when the personal information card transmits the above-mentioned personal information by short-range wireless in response to a request from the request means; and (c) personal information received by the personal information receiving means. Personal information matching presence / absence determining means for determining which of personal information registered in advance as a user, and (d) when this personal information matching presence / absence determining means determines that personal information matches, a key information transmission request means for requesting the personal information card described above the transmission of the corresponding key information, (e) rank personal information card described above in response to the request of the key information transmission request means to A key information receiving means for receiving the time which has transmitted the key information that has been set in advance a rank corresponding to the personal information when (to) that the personal information matched existence discrimination means has determined a match personal information and rank determining means for determining by the criteria based, (g) and rank function correspondence means that the user associates the available functions the each rank is determined in this rank determination means, and wherein (h) Rank corresponding function setting means for setting available functions with reference to the rank function corresponding means described above when the rank is determined by the rank determining means; and (i) use corresponding to the rank by the rank corresponding function setting means. and authentication information registration means for registering When possible functions are set above the key information receiving means the key information received as the authentication information of the owner of the personal information card that you said (J) and encryption means for encrypting data to be transmitted by using the key information registered by the authentication information registration means in the personal information card described above storing personal information corresponding to the key information, (Le) When the personal information matching / non-matching determining unit determines that the personal information does not match, a predetermined function having a smaller use range than the function set by the rank function corresponding setting unit is set as a usable function. The information processing apparatus includes rank non-corresponding function setting means.

In the present invention, (b) a personal information card provided with a personal information transmission means for individually transmitting personal information of each possessed person by short-range wireless; and (b) a personal information card existing around Specific personal information requesting means for requesting transmission of personal information by short-range wireless communication, and when the personal information card transmits the personal information described above in short-range wireless in response to a request from the specific personal information requesting means Personal information receiving means for receiving the personal information, personal information matching means for determining whether the personal information received by the personal information receiving means matches personal information registered in advance as a user, and this personal information matching when the presence or absence discrimination means has discriminated matching personal information, and key information transmission request means for requesting transmission of key information corresponding to the matching personal information to the personal information cards described above, this Kagijo A key information receiving means for receiving this when an individual information card described above in response to the request transmission request means has transmitted the key information stored in this the personal information correspondence presence determination means personal information The rank discriminating means for discriminating the rank corresponding to the personal information based on a preset criterion when the coincidence is discriminated, and the function usable by the user for each rank discriminated by the rank discriminating means are associated with each other. Rank function corresponding means, rank corresponding function setting means for setting an available function with reference to the rank function corresponding means when the rank is determined by the rank determining means, and the rank corresponding function setting means holder authentication information of the personal information card that key information receiving means the available function corresponding to the rank has said if it is set in was the the key information received And an encryption unit for encrypting data to be transmitted to the personal information card storing personal information corresponding to the key information using the key information registered by the authentication information registration unit. If the personal information matching presence / absence determining means determines that the personal information does not match, it is possible to use a predetermined function having a smaller use range than the function set by the rank function correspondence setting means. An apparatus utilization function control system includes an information processing apparatus including a rank non-corresponding function setting unit that is set as a function.

The apparatus use function control program of the present invention further comprises personal information receiving means for receiving personal information from a personal information card provided with personal information transmitting means for individually transmitting personal information of each possessed person by short-range wireless communication. (B) specific personal information request processing for requesting transmission of personal information by a short-range wireless communication to a personal information card storing personal information of a predetermined specific person; In response to the request by the specific personal information request processing, the personal information card described above receives personal information when the personal information card transmits the short distance wirelessly, and (c) in this personal information reception processing A personal information matching / non-matching determining process for determining whether the received personal information matches with personal information registered in advance as a user; When it is determined matching personal information processing, and key information transmission request process for requesting transmission of key information corresponding to the matching personal information to the personal information cards described above, (e) to a request by the key information transmission request process In response, the personal information card sends the key information stored therein and receives the key information receiving process, and ( f ) discriminates the personal information match by the personal information matching / non-matching judgment process. A rank determination process for determining the rank corresponding to the personal information based on a preset criterion; and (g) when the rank is determined by the rank determination process, the rank determination process is performed. and rank corresponding menu setting processing for the user to set a reference to an available feature ranking function corresponding means which associates the available functions the per rank, (h) the rank An authentication information registration process for registering the key information received in the key information reception process as the authentication information of the holder of the personal information card when an available function corresponding to the rank is set in the corresponding function setting process; , (i) and encryption processing for encrypting data to be transmitted to the personal information card described above storing personal information corresponding to the key information using the key information registered by the authentication information registration processing, (j ) When it is determined that the personal information does not match in the personal information matching / non-matching determination process, a predetermined function having a smaller use range than the function set in the rank corresponding function setting process is set as a usable function. The rank non-corresponding function setting process is executed.

  As described above, according to the present invention, even if there is a person who uses the information processing device without permission, the personal information sending means for individually sending personal information such as a personal information card must be used collectively. Since the personal information is not registered, the person can set only a minimum function, and can prohibit the act of using the function for which security should be ensured without permission. In addition, since personal information transmission means existing in the surroundings are used, it is not necessary to use a special communication network such as the Internet, and the use of the information processing apparatus can be restricted anytime and anywhere.

  In addition, if ranking is performed based on, for example, age or income, usage exceeding the call limit and browsing of the website can be easily and reliably performed. Therefore, the information processing apparatus can be shared by a group such as a family, and an expensive information processing apparatus having various functions can be used with a reduced personal burden.

  Hereinafter, the present invention will be described in detail with reference to examples.

  FIG. 1 shows an outline of a device use function control system using a portable terminal device according to an embodiment of the present invention. The basic configuration of the device use function control system 100 includes a mobile terminal device 101 as an information processing device to be prevented from unauthorized use, and a personal information card 102 such as an employee ID card or a resident registration card. ing. It is normal for the holder of the personal information card 102 and the user 103 of the mobile terminal device 101 to match. On the other hand, when the user 103 of the mobile terminal device 101 does not match the owner of the personal information card 102, there is a possibility of unauthorized use of the mobile terminal device 101.

  Here, the personal information card 102 is, for example, a non-contact IC (Integrated Circuit) card represented by FeliCa (registered trademark), and includes a non-contact IC 104 called an RFID (Radio Frequency Identification) tag. Yes. Data is transmitted or written by exchanging magnetic flux with an antenna (not shown) on the reader / writer side using an antenna (not shown) attached to the non-contact type IC 104. In this embodiment, a non-contact type IC reader / writer control unit 105 that functions as a reader / writer is incorporated in the mobile terminal device 101. Since the personal information of the owner is written in the non-contact type IC 104, it is possible to prevent unauthorized use of the portable terminal device 101 by checking whether the owner matches the user 103.

  FIG. 2 shows the configuration of the mobile terminal device used in this embodiment. The mobile terminal device 101 is configured in the same manner as a normal mobile phone except that the above-described reader / writer for exchanging information with a non-contact type IC card is mounted. That is, the mobile terminal device 101 includes a transmission / reception processing unit 112 including an antenna 111 for performing wireless communication with a wireless base station of a mobile phone network (not shown). The transmission / reception processing unit 112 is connected to the modulation / demodulation processing unit 113, and converts data to be transmitted here into a radio signal, or generates data from the received radio signal. The modulation / demodulation processing unit 113 is connected to the bus 115 via the communication function control unit 114. Here, the communication function control unit 114 controls the wireless communication and adjusts the overall control performed by the control unit 116 connected to the bus 115.

  The control unit 116 includes a CPU (Central Processing Unit) (not shown) and a storage medium such as a ROM (Read Only Memory) that stores a control program executed by the CPU. The communication function control unit 114 and the control unit 116 may be controlled by the same CPU, or may use different CPUs.

  An infrared / USB (Universal Serial Bus) external input / output unit 118 and a non-contact type IC reader / writer control unit 105 are connected to the bus 115 as parts for realizing other communication functions. Here, the infrared / USB external input / output unit 118 is a part for exchanging data with another portable terminal device (not shown) or an information processing device such as a personal computer (not shown). Specifically, data is exchanged wirelessly using infrared rays, or data is exchanged wired using a USB port (not shown). The non-contact type IC reader / writer control unit 105 exchanges data by exchanging magnetic flux with the non-contact type IC 104 shown in FIG.

  Connected to the bus 115 is a display unit 121 that displays data input by the user 103 and various types of information such as mail to be transmitted and received. The display device may include not only a display such as a liquid crystal display that performs visual display but also a speaker that displays audio. There need not be one display. An operation unit 122 is also connected to the bus 115. The operation unit 122 is composed of a plurality of key switches and touch panels (not shown), and inputs, for example, a character string for sending an e-mail and dial information as a telephone number for a call.

  In addition, a memory 123 and a data processing unit 124 are connected to the bus 115. Here, the memory 123 stores various data such as e-mails transmitted and received as general data, data relating to registered telephone books, and data for schedule management. A part of the memory 123 constitutes a non-volatile memory backed up by a battery (not shown), for example. There are also non-volatile memories that do not require batteries. In this embodiment, a user rank management table 123A and an available function setting information table 123B are stored in the memory 123. The user rank management table 123A is a table that stores the ranking of the user 103 of the mobile terminal device 101, and the available function setting information table 123B is a user rank when using the mobile terminal device 101. Is a table in which usable functions are associated with each other. The function that can be used here refers to a process of browsing, referring to, displaying, or outputting at least a part of personal information such as a telephone directory, e-mail, and photo to an external device. The contents of the user rank management table 123A and the usable function setting information table 123B will be described in detail later.

  The data processing unit 124 inputs data obtained by converting the voice for speech input from the microphone 125 into a digital signal by the A / D converter 126, and performs predetermined data processing such as compression, The transmission / reception processing unit 112 performs processing such as decoding the received audio data for moving image reproduction. The decoded audio data is converted into an analog signal by the D / A converter 127 and output as audio data by the speaker 128.

  As already described, the portable terminal device 101 used in this embodiment includes the non-contact type IC reader / writer control unit 105 having a function of communicating with the non-contact type IC 104 (FIG. 1). This is a requirement, and other parts may be changed as appropriate. For example, a camera may be added, or a GPS processing unit for realizing a GPS (Global Positioning System) function may be provided.

  By the way, the portable terminal device 101 according to the present embodiment is configured to restrict or cancel the function in conjunction with the personal information card 102 shown in FIG. Such control is realized by the CPU constituting the control unit 116 shown in FIG. 2 executing the control program described above.

  FIG. 3 shows a confirmation process for user information when the power of the mobile terminal device of this embodiment is turned on. The description will be made with reference to FIGS. First, when the user 103 turns on a power switch (not shown) of the operation unit 122 (step S201: Y), the above-described CPU in the control unit 116 detects this, and a user ID to be described later on the mobile terminal device 101. It is determined whether information is set (step S202). If the user ID information is set (Y), it is determined whether or not personal information of the user is further registered in the mobile terminal device 101 (step S203). (Y) The personal information of the non-contact type IC 104 in the personal information card 102 shown in FIG. 1 is read through the non-contact type IC reader / writer control unit 105 (step S205). This is because it is necessary to select an available function of the mobile terminal device 101 based on the personal information read from the personal information card 102.

  FIG. 4 specifically shows the process of reading personal information from the personal information card in step S205. First, a “number of readings” described later is initialized to “0” (step S221). The CPU checks whether the non-contact IC reader / writer control unit 105 has read the personal information from the personal information card 102 (step S222). When the personal information is read (Y), it is checked whether or not the read personal information is registered in the mobile terminal device 101 (step S223). This is the identity verification as the user 103 of the mobile terminal device 101.

  If the read personal information is registered in the mobile terminal device 101 (Y), it is determined whether or not the function of the mobile terminal device 101 is currently locked (step S224). If it is locked (Y), the function is unlocked (step S225). If it is not locked (step S224: N), the personal information reading process is terminated in the unlocked state (end).

  On the other hand, the case where the reading of the personal information has failed in step S222 (N) is assumed, for example, that the personal information card 102 is not nearby. Therefore, a grace time for bringing the personal information card 102 near the mobile terminal device 101 is set, and if the personal information is read within this time, the processing proceeds to step S223 and subsequent steps. Yes.

  Specifically, it is checked whether or not the state in which the personal information card 102 cannot be read in step S222 has passed for a predetermined time (step S222: N, step S226). (Step S226: Y), "Number of readings" is incremented by "1" (Step S227). Then, it is determined whether or not the count value exceeds the specified number of times (step S228). Here, the specified number of times is a positive integer of “1” or more. If the specified number of times has not been exceeded (N), the process returns to step S222 again to attempt to read the personal information card 102. If the reading is not successful even after a predetermined time has elapsed (step S226: Y), the “number of readings” is counted up again.

  In this way, when the reading of the personal information card 102 is not successful until the “reading count” exceeds the specified number of times (step S228: Y), the personal information card 102 does not exist or even if it exists, the user That is, 103 cannot be verified. Therefore, the control unit 116 sets the user rank “no personal information” in the mobile terminal device 101 (step S229), and ends the process (END).

  Even if the personal information of the read personal information card 102 is not registered in the mobile terminal device 101 in step S223 (N), the process proceeds to step S229, and the user rank “no personal information” is set. Is done.

  Here, the user rank will be described. In the device use function control system of this embodiment, the user rank is set from “0” to “3” as the use authority for the mobile terminal device 101 according to the user 103 who possesses this. The user rank “0” means a state in which personal information read from the personal information card 102 does not exist on the mobile terminal device 101 side. The user rank “1” means a state in which personal information read from the personal information card 102 is registered as a main contractor on the mobile terminal device 101 side. The user rank “2” refers to the registration state of the contractor having the authority next to the main contractor, and the user rank “3” refers to the registration state of the contractor under the authority. Such user ranks “1” to “3” are registered in advance on the mobile terminal device 101 side.

  FIG. 5 shows the first half of the user registration process. This will be described with reference to FIGS. As a premise of starting the user registration process, the factory state in which data is not yet written in the user rank management table 123A of the mobile terminal device 101 shown in FIG. It is necessary to select the user registration processing screen from the above and instruct the start of the processing. When only the main contractor registers as the user 103 in the portable terminal device 101, the personal information card 102 of the person is prepared for registration. When a person other than the main contractor is registered as the user 103 in the mobile terminal device 101, the personal information card 102 of these persons is also required for registration.

  When the start of the user registration process of the portable terminal device 101 is instructed (step S241: Y), it is checked whether personal information has been read from the personal information card 102 (step S242). At this time, it is assumed that the personal information card 102 possessed by the main contractor exists in the vicinity of the mobile terminal device 101. This condition is satisfied when the user 103 of the mobile terminal device 101 is the primary contractor and carries the personal information card 102. In this case (step S242: Y), the read personal information is registered as the main contractor in the user rank management table 123A of the mobile terminal device 101 (step S243).

  On the other hand, if the personal information cannot be read in step S242 (N), a predetermined grace period is set, and a process is performed to determine whether or not the personal information is read within this time ( Steps S244 to S246). The processing from step S244 to step S246 is the same as the processing from step S226 to step S228 in FIG. Therefore, description of these processes is omitted. If the “number of readings” exceeds the specified number in step S246 (Y), the mobile terminal device 101 is turned off (step S247), and the user registration process is terminated (end). This is because the user cannot be registered without the personal information card 102 being detected.

  On the other hand, when the user rank “1” is registered in step 243, the key information extracted together as personal information from the personal information card 102 of the main contractor is authenticated as the main contractor of the mobile terminal device 101. It registers as information for use (step S248). When the control unit 116 finishes the above processing, the control unit 116 displays a message asking whether or not another user needs to be registered on the display unit 121 (step S249). In response to this display, when a response indicating that the registration of another user is unnecessary is made from the operation unit 122 (step S250: N, step S251: Y), the user registration process ends (end). .

  FIG. 6 shows the second half of the user registration process. This will be described with reference to FIGS. When a response indicating that registration of another user is required is performed from the operation unit 122 (step S250: Y in FIG. 5), the control unit 116 uses the other user to display the display unit 121. A display for inquiring whether or not the person rank is changed is performed (step S252). When a response indicating that the user rank needs to be changed is made from the operation unit 122 (step S253: Y), the user rank is changed according to the request (step S254). When a response indicating that the user rank change is unnecessary is made from the operation unit 122 (step S255: Y), the current user rank state is continued (step S256).

  When the user rank for the next user is determined by the processing in step S254 or step S256 in FIG. 6, the control unit 116 checks whether or not personal information has been read from the personal information card 102 of the new user ( Step S257). At this time, when the personal information is not read from the personal information card 102, the processing of step S258 to step S260 as the processing of (N) is the same as the processing of step S226 to step S228 of FIG. Therefore, description of these processes is omitted. When the “number of readings” exceeds the specified number in step S260 (Y), processing for turning off the power of the mobile terminal device 101 (step S247 in FIG. 5) is performed.

  On the other hand, when personal information is read from the new personal information card 102 in step S257 (step S257: Y), the personal information is used by the mobile terminal device 101 at the user rank determined in step S254 or step S256. It registers in person rank management table 123A (step S261). Then, the key information taken out as personal information from the personal information card 102 with the user rank determined in step S254 or step S256 is registered as authentication information (step S262). Thereafter, the process proceeds to step S249 in FIG.

FIG. 7 shows an example of the contents of the user rank management table. The user rank management table 123A includes key information K included in the personal information card 102 and an available function setting information table 123B for each user rank “1”, “2”, “3”, “0”. The pointer to the area of the corresponding user rank in is written. For example, it is assumed that three users are registered in the user rank “2”. Then, personal information D _{21 to} D ₂₃ is registered in each “user rank“ 2 ”” area of the user rank management table 123A. The personal information user rank for D ₂₁ "2" are key information K ₂₁ contained in the personal information card 102 is registered in the same manner the user rank for personal information D ₂₃ "2" The key information K ₂₃ included in the personal information card 102 is registered. When each user of these “user rank“ 2 ”” becomes the user 103 of the mobile terminal device 101, these users utilize the user-capable function common to the users of “user rank“ 2 ””. be able to. Therefore, a pointer is set in the area indicating the user-available function of “user rank“ 2 ”” in the available function setting information table 123B.

  FIG. 8 shows an example of an available function setting information table. In the usable function setting information table 123B, whether each user rank is usable or unusable for each function such as “user registration”, “voice transmission”, “voice reception”, etc. Represents. In FIG. 8, the case where the use is possible is indicated by “◯ (maru)”, and the case where the use is impossible is indicated by “x (cross)”. In addition, in the usable function setting information table 123B, in addition to the user ranks “1”, “2”, “3”, “0”, the use of each function is also performed when personal information is not set. Indicates whether it is possible.

  According to the available function setting information table 123B, for example, only the user with the user rank “1” is authorized to perform “user registration”. When the remaining user ranks “2”, “3”, “0” and personal information are not set on the mobile terminal device 101 side, there is no authority to perform “user registration”. On the other hand, the content originally built in the mobile terminal device 101 can be used with each of the user ranks “1”, “2”, “3”, “0”. Only when it is not set, it cannot be used.

  Each “user-usable function” shown in FIG. 8 is an example, and is not limited to the type of function described here. These usable functions can be freely set according to the user rank or whether personal information is not set. However, generally, the higher the user rank, the more functions that can be used.

  Returning to FIG. 3 again, the description will be continued. In step S202, the control unit 116 checks the user rank management table 123A shown in FIG. 7, and determines whether or not the mobile terminal device 101 has set user ID information. As a result, when the user ID information has been set (Y), the control unit 116 determines whether at least one user's personal information is registered in the user rank management table 123A shown in the figure (step S1). S203). If not registered (N), the user registration process described with reference to FIGS. 5 and 6 is executed (step S204), and the process is terminated (END).

  On the other hand, when at least one user's personal information is registered in the user rank management table 123A (step S203: Y), the control unit 116 uses the non-contact type IC reader / writer control unit 105. The personal information is read from the personal information card 102 (step S205). As a result, when the personal information read from the personal information card 102 is registered in the mobile terminal device 101 (step S206: Y), the user rank that matches the read personal information is obtained from the user rank management table 123A. A check is made (step S207). And the rank information acquired by this check is set as a user rank of the portable terminal device 101 (step S208). Next, an available function corresponding to this user rank is set with reference to the available function setting information table 123B shown in FIG. 8 (step S209), and the user information confirmation process is terminated (END).

  If the personal information read from the personal information card 102 in step S206 is not registered in the user rank management table 123A shown in FIG. 7 (N), a user rank in which no personal information is set is set ( Step S210). In this case, in the next step S209, a function that can be used by “personal information not set” is set as an available function of the mobile terminal device 101. In the usable function setting information table 123B of FIG. 8, there is no usable function. Therefore, even if the user 103 tries to operate the portable terminal device 101 using the personal information card 102 that is completely irrelevant, none of the various functions operate.

  If the user ID information of the mobile terminal device 101 is not set in step S202 (N), the user rank is set to “0” (step S211). Then, an available function corresponding to this user rank “0” is set with reference to the available function setting information table 123B shown in FIG. 8 (step S209), and the user information confirmation process is ended (END). . In the example of the usable function setting information table 123B shown in FIG. 8, with the user rank “0”, the mobile terminal device 101 can use the built-in content and only other functions set.

  Next, a communication sequence at the time of user registration described with reference to FIGS. 5 and 6 will be described.

  FIG. 9 shows the relationship between the personal information card and the mobile terminal device at the time of user registration. Communication between the portable terminal device 101 and the personal information card 102 is performed between the non-contact type IC 104 and the non-contact type IC reader / writer control unit 105. The control unit 116 controls the non-contact type IC reader / writer control unit 105.

  FIG. 10 shows a communication sequence at the time of user registration. This will be described with reference to FIG. Although not described in FIGS. 5 and 6, when registering users, each user rank is set when registration for the number of users is completed. At this time, the communication shown in FIG. 10 is performed.

  First, the control unit 116 of the mobile terminal device 101 sends a personal information request for the personal information card 102 to the non-contact type IC reader / writer control unit 105 in the device (step S281). When receiving the personal information request, the non-contact IC reader / writer control unit 105 transmits a personal information data request to the non-contact IC 104 in the personal information card 102 (step S282). When the non-contact type IC 104 receives the personal information data request, it transmits personal information data (step S283).

  The non-contact type IC reader / writer control unit 105 waits for reception of personal information data, and when this is received, transmits it to the control unit 116 (step S284). When the control unit 116 receives the personal information data in this way, it sends a key information request for requesting the key information stored in the personal information card 102 to the non-contact type IC reader / writer control unit 105 ( Step S285). When the non-contact type IC reader / writer control unit 105 receives the key information request, it transmits it to the non-contact type IC 104 (step S286). When the non-contact IC 104 receives the key information request, it transmits key information data describing the key information (step S287).

  The non-contact type IC reader / writer control unit 105 waits for reception of the key information data, and when receiving this, transfers it to the control unit 116 (step S288). When the control unit 116 receives the key information of the personal information card 102 by the key information data, the control unit 116 transmits the user information representing the user rank and the like to the non-contact type IC reader / writer control unit 105 as device user information. (Step S289). When the non-contact type IC reader / writer control unit 105 receives the apparatus user information, it transmits it to the non-contact type IC 104 (step S290).

  When the non-contact type IC 104 acquires the device user information, the non-contact type IC 104 sends a device user information write completion notification (step S291). When the non-contact type IC reader / writer control unit 105 receives this device user information writing completion notification, it transfers it to the control unit 116 (step S292).

  Through the above communication, the personal information card 102 acquires the device user information and stores it in a storage area (not shown) in the non-contact type IC 104. On the mobile terminal device 101 side, the personal information and key information stored in the personal information card 102 are acquired and stored in the user rank management table 123A shown in FIGS. Through such processing, authentication of the legitimate user 103 of the mobile terminal device 101 is confirmed by confirming both personal information stored in the personal information card 102 and user information on the mobile terminal device 101 side. Can be done strictly.

  Further, when the personal information read from the personal information card 102 is stored in the user rank management table 123A shown in FIG. 7, the device user information transmitted from the mobile terminal device 101 is stored in the non-contact IC 104 in the personal information card 102. When data is stored in the storage, the data stored therein is encrypted, and the exchanged data can be protected by storing the data in the respective memories or storage units. Furthermore, in the communication sequence at the time of user registration shown in FIG. 10, key information used for encryption of data communicated between the mobile terminal device 101 and the personal information card 102 is exchanged, and the personal information, key information and device are exchanged. By exchanging user information for communication, the information to be exchanged can be protected.

  Next, the flow of user authentication operation when user information is registered in the user rank management table shown in FIG. 7 will be described.

  FIG. 11 shows the flow of processing until the pointer to the available function setting information table is acquired when the personal digital assistant is turned on and personal information is read from the personal information card. This will be described with reference to FIGS. When the portable terminal device 101 reads personal information from the personal information card 102 existing around the portable terminal device 101, the control unit 116 determines that the read personal information is the personal information registered in the user rank management table 123A shown in FIG. It is checked whether or not they match (step S301). When they do not match (N), the control unit 116 sets the user rank “no personal information” in the mobile terminal device 101 (step S302), and ends the processing (END).

  On the other hand, when the personal information read from the personal information card 102 is registered in the mobile terminal device 101 (step S301: Y), the read device user information and the device users in the mobile terminal device 101 It is determined whether the information matches (step S303). If the two do not match (N), the process proceeds to step S302, where the control unit 116 sets the user rank “no personal information” in the mobile terminal device 101, and ends the process (END).

  If the personal information card 102 and the device user information in the portable terminal device 101 match (step S303: Y), the user rank on the personal information card 102 side from the user rank management table 123A shown in FIG. Is acquired (step S304). Then, key information corresponding to the personal information acquired from the user rank management table 123A is acquired (step S305). Next, the pointer in the usable function setting information table 123B shown in FIG. 8 is acquired from the user rank management table 123A (step S306).

For example, when the personal information D ₂₂ is acquired from the personal information card 102 (step S301), the user rank “2” is acquired by referring to the user rank management table 123A (step S304), and this corresponds to this. key information K ₂₂ is obtained (step S305). Then, a pointer (reference information) to the area of the corresponding user rank “2” in the available function setting information table 123B is acquired.

  FIG. 12 shows a communication sequence performed between the personal information card and the portable terminal device when the processing after reading the personal information shown in FIG. 11 is performed. This will be described with reference to FIGS. First, when a request for personal information for the personal information card 102 is generated from the control unit 116 in the portable terminal device 101, the personal information request is sent to the non-contact type IC reader / writer control unit 105 (step S321). When the non-contact type IC reader / writer control unit 105 receives the personal information request, it transmits it to the non-contact type IC 104 (step S322).

  When receiving the personal information request, the non-contact type IC 104 sends personal information data representing the personal information to the non-contact type IC reader / writer control unit 105 (step S323). When the non-contact type IC reader / writer control unit 105 receives the personal information data, it transfers it to the control unit 116 (step S324). The control unit 116 sends a request for device user information to the non-contact type IC reader / writer control unit 105 as a device user information request in order to compare the device user information in step S303 in FIG. 11 (step S325). . This is to check the authorized user. When the non-contact type IC reader / writer control unit 105 receives the apparatus user information request, it transmits it to the non-contact type IC 104 (step S326).

  When the non-contact type IC 104 receives the device user information request, it transmits the device user information (step S327). When the non-contact type IC reader / writer control unit 105 receives the device user information, it transfers it to the control unit 116 (step S328).

  As described with reference to FIG. 11, the control unit 116 compares the device user information received from the non-contact type IC 104 with the device user information in the mobile terminal device 101. If they match (step S303: Y), the user rank and key information are acquired, and further a pointer to the usable function setting information table 123B is acquired. If the device user information does not match (step S303: N), “no personal information” is set as the user rank (step S302), and the functions available on the mobile terminal device 101 side are restricted. It will be.

  FIG. 13 shows a state of control for restricting functions that can be used on the mobile terminal device side according to the user rank. When the user rank management table 123A shown in FIG. 7 is created, the portable terminal device 101 performs the processing shown in FIG. 13 and sets the available functions each time the power switch is turned on. That is, when the power switch of the mobile terminal device 101 is turned on (step S341: Y), the control unit 116 shown in FIG. 2 checks the user rank for the personal information card 102 that has communicated at that time (step S341). S342).

  As a result, when the user rank is “1” (step S343: Y), the usable function information of the usable rank “1” shown in FIG. 8 is acquired (step S344). Then, the function is set in the mobile terminal device 101 based on the acquired usable function information. That is, the function is locked (step S345).

  When the user rank is “2” instead of the user rank “1” (step S343: N, step S346: Y), the usable function information of the usable rank “2” is acquired (step S347). . Based on the acquired usable function information, the function is locked (step S345). If the user rank is “3” (step S346: N, step S348: Y), the usable function information of the usable rank “3” is acquired (step S349). Based on the acquired usable function information, the function is locked (step S345). Further, when the user rank is “0” (step S348: N, step S350: Y), the usable function information of the usable rank “0” is acquired (step S351). Based on the acquired usable function information, the function is locked (step S345).

  Unlike the above, if the user rank “1”, the user rank “2”, the user rank “3”, and the user rank “0” do not correspond (step S350: N), the corresponding The personal information about the personal information card 102 to be set is not set. In this case, usable function information for which personal information is not set is acquired from the usable function setting information table 123B shown in FIG. 8 (step S352). Based on the acquired usable function information, the function is locked (step S345). In the example shown in FIG. 8, all functions are not available. Therefore, even if another person illegally acquires the mobile terminal device 101, the function cannot be used.

  By the way, by using the mobile terminal device 101, the user 103 can perform various data processing such as utilizing a built-in telephone directory, sending / receiving e-mail, taking a picture, and sending / receiving the picture. . When performing the data processing, if the original data is encrypted, the portable terminal device 101 of the present embodiment uses the user rank management table 123A to obtain the key information for each personal information card 102 as described above. Keep in. Therefore, the data can be encrypted using this to ensure security.

  FIG. 14 shows the flow of processing using key information when registering personal information. This will be described with reference to FIGS. When the power switch of the portable terminal device 101 is turned on (step S361: Y), the control unit 116 checks whether key information is set in the authorized user authentication process by the personal information card 102 (step S362). . When the key information is set (Y), the user 103 of the mobile terminal device 101 checks whether or not the data is stored after being encrypted (step S363).

  When the user 103 selects to store data after performing encryption (Y), the control unit 116 uses the key information acquired from the user rank management table 123A shown in FIG. The personal information stored in the internal storage device (not shown) connected to the mobile terminal device 101 is encrypted (step S364). Then, the encrypted personal information is stored in a storage area in the mobile terminal device 101 or an external storage device connected to the mobile terminal device 101 (step S365).

  On the other hand, if the key information is not set in the authentication process of the authorized user by the personal information card 102 at the time of power-on in step S362 (N), or the user 103 of the portable terminal device 101 saves the data by encryption in step S363. If N is not selected (N), the personal information is not encrypted. In these cases, personal information is stored in the storage area in the mobile terminal device 101 or the external storage device connected to the mobile terminal device 101 without encryption (step S366).

  Data protection by encryption may be performed for each piece of personal information, at the time of storing a specific folder, or in the mobile terminal device 101 by individual determination of the user 103 or according to predetermined setting contents. However, the present invention may be applied to an external storage device connected to the storage area or the mobile terminal device 101.

  FIG. 15 shows a state of decryption processing of personal information encrypted and stored in a storage area in the mobile terminal device or an external storage device connected to the mobile terminal device. When a request for referring to personal information such as a phone book, mail, or photo is generated (step S381: Y), the control unit 116 is a storage area in the mobile terminal device 101 or an external storage device connected to the mobile terminal device 101. It is checked whether or not the personal information as the target data stored in is protected by encryption (step S382). If the corresponding data is encrypted (Y), then it is checked whether key information is set (step S383).

  When the key information is set (Y), the reference data is decrypted using the key information set for the corresponding personal information in the user rank management table 123A shown in FIG. (Step S384). Then, it is confirmed whether the data protected by encryption has been correctly decrypted with the currently set key information (step S385). If the decryption is successful (Y), the decrypted data is set in the display unit 121 (step S386), and the data is displayed (step S387).

  On the other hand, when the data to be referenced is not protected by encryption (step S382: N), it is not necessary to decrypt the data. Therefore, the reference data is set as it is on the display unit 121 (step S388), and data display is performed (step S387).

  By the way, when the data to be referenced is protected by encryption (step S382: Y) and the key information is not set (step S383: N), the data cannot be decrypted. The same applies to the case where the decryption process is performed in step S385 but the decryption is not successful (N). In such a case, warning data indicating that display is impossible is set in the display unit 121 (step S389), and the warning is displayed (step S387).

  In the embodiments described above, the mobile terminal device such as a mobile phone has been described. However, it is needless to say that the present invention can be applied to other portable information processing devices such as a personal computer. In addition, the present invention can be applied not only to such a portable information processing apparatus but also to an information processing apparatus that is fixedly installed in a place such as an office.

  Taking a desktop personal computer as an example, a contactless IC reader / writer is placed inside or externally, and the personal information and key of the personal information card are read instead of entering the account and password from the keyboard. Authentication with personal information may be performed, and data may be encrypted with key information obtained from a personal information card. By storing the encrypted data in the personal computer or in an external storage device connected to the personal computer in this manner, unauthorized reading of data by a third party and unauthorized use of the personal computer itself can be prevented. .

It is a schematic block diagram of the apparatus utilization function control system using the portable terminal device in one Example of this invention. It is a block diagram showing the structure of the portable terminal device used by a present Example. It is a flowchart showing the confirmation process about user information when the power supply of the portable terminal device of a present Example is turned ON. 5 is a flowchart specifically showing a process of reading personal information from a personal information card in the present embodiment. It is a flowchart showing the first half of the mode of a user registration process in a present Example. It is a flowchart showing the second half of the state of the user registration process in the present embodiment. It is explanatory drawing showing an example of the content of the user rank management table of a present Example. It is explanatory drawing showing an example of the usable function setting information table of a present Example. It is a block diagram showing the relationship between the personal information card at the time of user registration of a present Example, and a portable terminal device. It is sequence explanatory drawing showing the communication sequence at the time of user registration in a present Example. It is a flowchart which shows a process until it acquires the pointer to the usable function setting information table when the personal information card is turned on and personal information is read from the personal information card in this embodiment. It is sequence explanatory drawing showing the communication sequence performed between a personal information card and the portable terminal device at the time of the process after the reading of personal information being performed in a present Example. It is a flowchart showing the mode of the control for restrict | limiting the function which can be utilized according to a user rank by the portable terminal device side in a present Example. It is a flowchart showing the flow of the process using the key information at the time of registering personal information in a present Example. It is a flowchart showing the mode of the decryption process of the personal information encrypted and stored in a present Example.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Device utilization function control system 101 Portable terminal device 102 Personal information card 103 User 104 Non-contact type IC
105 Non-contact IC reader / writer control unit 116 Control unit 123A User rank management table 123B Available function setting information table

Claims (6)

Specific personal information requesting means for requesting transmission of personal information over a short distance to a personal information card storing personal information of a predetermined specific person;
Personal information receiving means for receiving the personal information when the personal information card has transmitted the personal information by short-range wireless in response to a request from the specific personal information requesting means;
Personal information matching presence / absence determining means for determining which personal information received by the personal information receiving means matches with personal information registered in advance as a user;
A key information transmission requesting unit for requesting the personal information card to transmit key information corresponding to the matched personal information when the personal information matching presence / absence determining unit determines that the personal information matches;
Key information receiving means for receiving key information stored in the personal information card in response to a request from the key information transmission request means;
Rank discrimination means for discriminating a rank corresponding to the personal information based on a preset criterion when the personal information coincidence presence / absence judging means discriminates the coincidence of the personal information;
Rank function corresponding means for associating functions available to the user for each rank determined by the rank determining means;
Rank corresponding function setting means for setting an available function with reference to the rank function corresponding means when the rank is determined by the rank determining means;
Authentication information registration means for registering the key information received by the key information receiving means as authentication information for the holder of the personal information card when an available function corresponding to the rank is set by the rank corresponding function setting means; ,
Encryption means for encrypting data to be transmitted to the personal information card storing the personal information corresponding to the key information using the key information registered by the authentication information registration means;
When the personal information matching / non-matching determining means determines that the personal information does not match, the rank function is set so that a predetermined function having a smaller use range than the function set by the rank function corresponding setting means is set as a usable function. An information processing apparatus comprising: a corresponding function setting unit.   The information processing apparatus according to claim 1, wherein the predetermined function is completely absent.   The usable function is all or part of processing for browsing, browsing, displaying or outputting at least a part of personal information such as a telephone directory, an email, and a photograph to an external device. 1. An information processing apparatus according to 1.   2. The information according to claim 1, wherein the information encrypted by the personal information specified from the personal information received by the personal information receiving means is decrypted using the key information assigned to the individual. Processing equipment. A personal information card equipped with a personal information transmission means for individually transmitting personal information of each person possessed by short-range wireless;
Specific personal information requesting means for requesting transmission of personal information to a personal information card in the vicinity by short-range wireless communication, and in response to a request from the specific personal information requesting means, the personal information card receives the personal information Personal information matching means to determine whether personal information receiving means that receives this when it is transmitted by short-range wireless and personal information received by this personal information receiving means matches personal information registered in advance as a user determining means, when the personal information correspondence presence judgment means has judged coincidence of personal information, and key information transmission request means for requesting transmission of key information corresponding to the matching personal information to the personal information card, the key information a key information receiving means for receiving this when the personal information card in response to a request transmission request means has transmitted the key information stored in this the personal information one When the presence / absence discriminating unit discriminates the coincidence of the personal information, the rank discriminating unit discriminates the rank corresponding to the personal information based on a preset criterion, and the user uses each rank discriminated by the rank discriminating unit A rank function corresponding means for associating possible functions, a rank corresponding function setting means for setting an available function with reference to the rank function corresponding means when the rank is determined by the rank determining means, and the rank An authentication information registration means for registering the key information received by the key information receiving means as the authentication information of the holder of the personal information card when an available function corresponding to the rank is set by the corresponding function setting means; Encryption of data transmitted to the personal information card storing the personal information corresponding to the key information using the key information registered by the authentication information registration means When the encryption means for performing the authentication and the personal information matching / non-matching determining means determine that the personal information does not match, it is possible to use a predetermined function having a smaller usage range than the function set by the rank function corresponding setting means And an information processing apparatus provided with a rank non-corresponding function setting means for setting as a function. In the computer of the information processing apparatus provided with the personal information receiving means for receiving the personal information from the personal information card provided with the personal information sending means for individually sending the personal information of each possessed person by short-range radio,
Specific personal information request processing for requesting transmission of personal information by a short-range wireless to a personal information card storing personal information of a predetermined specific individual;
A personal information reception process for receiving the personal information when the personal information card has transmitted the personal information by short-range wireless in response to a request by the specific personal information request process;
Personal information matching presence / absence determination processing for determining which personal information received in the personal information reception processing matches with personal information registered in advance as a user;
A key information transmission request process for requesting the personal information card to transmit key information corresponding to the matched personal information when the personal information match is determined in the personal information match determination process;
A key information reception process for receiving the key information stored in the personal information card in response to a request by the key information transmission request process;
Rank discrimination processing for discriminating a rank corresponding to personal information based on a preset criterion when it is determined that personal information matches in the personal information match presence / absence determination processing;
When a rank is determined in the rank determination process, a rank that sets an available function with reference to a rank function corresponding unit that associates a function that can be used by the user for each rank determined in the rank determination process Support function setting process,
An authentication information registration process for registering the key information received in the key information reception process as authentication information for the holder of the personal information card when an available function corresponding to the rank is set in the rank corresponding function setting process; ,
An encryption process for encrypting data transmitted to the personal information card storing the personal information corresponding to the key information using the key information registered by the authentication information registration process;
When it is determined that the personal information does not match in the personal information match / non-match determination process, a predetermined function having a smaller use range than the function set in the rank function setting process is set as a usable function. An apparatus use function control program for executing a corresponding function setting process.

Images