JP6163364B2 - Communications system - Google Patents

Description

  The present invention relates to a communication system in which a plurality of terminal devices are connected via a communication network so that data communication is possible.

  In recent years, terminal devices such as smartphones, PDAs (Personal Digital Assistants), and PCs (Personal Computers) are equipped with a wireless communication interface, and wireless communication via a communication network is possible. In addition to executing an application program by itself in a stand-alone manner, such a terminal device can cooperate with other terminal devices in a server-client manner in response to an application program being executed in the own terminal device. It is possible to operate.

  There is an authentication control technique as a technique for preventing an unauthorized communication connection when a cooperative operation is performed in another terminal apparatus corresponding to an application program executed in the own terminal apparatus. In the authentication control technique, in general, it is determined whether or not to permit the cooperative operation of a terminal device based on authentication information that can identify the terminal device (user). As the authentication information, character information such as a user ID and a password, and biological information such as a fingerprint and handwriting are used.

  In a communication system, when character information such as a user ID or a password is used as authentication information, when a user who uses another terminal device desires a cooperative operation corresponding to an application program executed in one terminal device The user needs to input character information stored by the user using an input device such as a mouse or a keyboard, which is inconvenient for the user. On the other hand, when biometric information such as fingerprints and handwriting is used as authentication information, a dedicated device for recognizing the biometric information is necessary, and the configuration of the communication system becomes complicated. In addition, the recognition of biometric information also has a problem of a high misrecognition rate (person rejection rate and other person acceptance rate).

  As a method for solving such a problem, Patent Document 1 discloses a technique for simplifying an authentication information input operation by a user. According to the technique disclosed in Patent Document 1, authentication information is transmitted and received between a plurality of terminal devices by short-range wireless communication using a non-contact IC chip, thereby enabling a wireless LAN between the plurality of terminal devices. Communication is established.

JP 2010-50905 A

  Although the technique disclosed in Patent Document 1 is a technique for simplifying the establishment of wireless LAN communication, in cooperation with an application program executed in one terminal apparatus, a cooperative operation is performed in another terminal apparatus. It does not simplify the establishment of wireless LAN communication for enabling. In other words, in the technology disclosed in Patent Document 1, the authentication information is used to authenticate whether or not to permit communication connection by wireless LAN communication, and whether or not to permit a cooperative operation during execution of the application program. It is not used to authenticate

  From the viewpoint of information security, every time an application program is started, it is important to authenticate whether or not the cooperative operation is permitted during the execution of the application program, which increases convenience for the user. For this purpose, it is necessary to simplify the authentication operation for determining whether or not to permit this cooperative operation. However, the technique disclosed in Patent Document 1 does not simplify the authentication operation for determining whether or not to allow the cooperative operation during the execution of the application program, and thus cannot improve the convenience for the user.

  An object of the present invention is to simplify an authentication operation as to whether or not to permit a cooperative operation during execution of an application program in a communication system in which a plurality of terminal devices are connected so as to be capable of data communication via a communication network. It is to provide a communication system that can.

The present invention is a communication system in which a first terminal device and a second terminal device are connected so as to be capable of data communication by communication using a first communication method and a second communication method,
The first terminal device
A storage unit for storing a plurality of application programs;
An input unit for inputting an instruction to select one application program from the plurality of application programs;
A program execution unit that executes an application program selected based on an instruction input by the input unit;
An authentication information generating unit that generates authentication information for authenticating the second terminal device so that the second terminal device operates in cooperation with an operation corresponding to the application program executed by the program execution unit;
An authentication information transmitting unit that transmits the authentication information generated by the authentication information generating unit to the second terminal device by communication according to the first communication method,
The second terminal device
An authentication information receiving unit that receives the authentication information transmitted by the authentication information transmitting unit of the first terminal device by communication according to the first communication method;
Permission request information for generating permission request information for requesting permission of a cooperative operation corresponding to the application program executed by the program execution unit of the first terminal device based on the authentication information received by the authentication information receiving unit. A generator,
A permission request information transmitting unit that transmits the permission request information generated by the permission request information generating unit to the first terminal device by communication using the second communication method;
After the permission request information is transmitted by the permission request information transmitting unit, a cooperative operation corresponding to the application program executed by the program executing unit of the first terminal device is enabled in the second terminal device . A communication establishment unit comprising: a communication establishment unit that establishes a communication connection with the first terminal device using the second communication method.

In the communication system of the present invention, the authentication information generating unit permits used in establishing a communication connection by the second communication method, the automatic startup of the selected application program to the second terminal device The authentication information including the automatic activation permission information indicating whether or not is generated.

  In the communication system of the present invention, the first communication method is a wireless communication method using a non-contact IC chip.

  In the communication system of the present invention, the authentication information generation unit generates different authentication information corresponding to the plurality of application programs.

  According to the communication system of the present invention, the first terminal device and the second terminal device different from the first terminal device are connected so as to be capable of data communication by communication using the first communication method and the second communication method. Yes.

  In the first terminal device, the program execution unit executes the application program, and the authentication information generation unit generates authentication information for authenticating the second terminal device operating in cooperation with the application program being executed. Then, in the first terminal device, the authentication information transmission unit transmits the authentication information generated by the authentication information generation unit to the second terminal device by communication using the first communication method.

  On the other hand, in the second terminal device, the authorization information receiving unit receives the authentication information by communication using the first communication method, and the permission request information generating unit requests permission of the cooperative operation corresponding to the application program being executed. Is generated. The generated permission request information is transmitted to the first terminal device by the permission request information transmitting unit. Then, in the second terminal device, the communication establishing unit allows the first terminal device and the second terminal device to perform a cooperative operation in the second terminal device corresponding to the application program being executed in the first terminal device. A communication connection is established with the second communication method.

  In the communication system of the present invention configured as described above, the first terminal device and the second terminal device, which enable cooperative operation in the second terminal device, corresponding to the application program being executed in the first terminal device, A communication connection using the second communication method is established based on the authentication information. The authentication information is generated by the authentication information generation unit of the first terminal device, and the authentication information is transmitted and received between the first terminal device and the second terminal device using the first communication method, so that the application program is being executed. Therefore, it is unnecessary to perform a complicated operation in which the user inputs authentication information using an input device such as a mouse or a keyboard. Therefore, the communication system of the present invention can simplify the authentication operation as to whether or not to permit the cooperative operation during the execution of the application program, and thus can improve the convenience for the user.

According to the present invention, authentication information generation unit of the first terminal device is used when establishing a communication connection by the second communication scheme, the second terminal device the automatic startup of the selected application program Authentication information including automatic activation permission information indicating whether or not to permit is generated. Thereby, since the communication connection by the second communication method based on the authentication information between the first terminal device and the second terminal device is automatically performed with reference to the automatic start permission information included in the authentication information , During execution of the application program in the first terminal device, the user of the second terminal device who desires a cooperative operation can cooperate with the authentication required for the second terminal device and the application program without performing complicated operations. The application program can be automatically started .

  According to the present invention, the first communication method, which is a communication method for transmitting / receiving authentication information between the first terminal device and the second terminal device, is a wireless communication method using a non-contact IC chip. . Accordingly, it is possible to easily establish a communication connection by the first communication method for transmitting and receiving authentication information.

  According to the present invention, the authentication information generation unit of the first terminal device generates different authentication information corresponding to a plurality of application programs. As a result, it is possible to authenticate whether or not to allow a cooperative operation during the execution of the application program using different authentication information for each application program, so that security can be improved.

1 is a diagram schematically showing a configuration of a communication system 1 according to an embodiment of the present invention. 4 is a block diagram showing a configuration of a host terminal device 2. FIG. 3 is a block diagram showing a configuration of a client terminal device 3. FIG. It is a figure which shows an example of authentication information. 5 is a diagram illustrating an example of an authentication service setting screen 231. FIG. 4 is a flowchart showing the operation of the host terminal device 2. 4 is a flowchart showing the operation of the client terminal device 3.

  FIG. 1 is a diagram schematically showing a configuration of a communication system 1 according to an embodiment of the present invention. FIG. 2 is a block diagram showing a configuration of the host terminal device 2. FIG. 3 is a block diagram showing a configuration of the client terminal device 3.

  In the communication system 1 of the present embodiment, a host terminal device 2 that is a first terminal device and a client terminal device 3 that is a second terminal device perform data communication via a first communication network 5 and a second communication network 6. It is a system that can be connected as possible.

  The application of the communication system 1 is not particularly limited, but can be used as a so-called electronic whiteboard system or a TV conference system, for example. When the communication system 1 is used as such a system, the host terminal device 2 becomes a main terminal device used by a conference organizer and the like, and the client terminal device 3 uses a terminal device used by a plurality of audience members participating in the conference. It becomes. The conference can be smoothly advanced by operating the client terminal device 3 in cooperation with the application program being executed in the host terminal device 2.

  When a plurality of client terminal devices 3 are operated in cooperation with an application program being executed in the host terminal device 2, the client terminal device 3 that should permit the cooperation operation in order to prevent establishment of communication due to unauthorized access. It is necessary to authenticate. The communication system 1 of the present embodiment simplifies the authentication operation for determining whether or not to permit the cooperative operation of the client terminal device 3 corresponding to the application program being executed in the host terminal device 2.

  The host terminal device 2 is a terminal device such as a smartphone, a PDA (Personal Digital Assistants), or a PC (Personal Computer), and includes a host terminal side storage unit 21, a host terminal side input unit 22, a host terminal side display unit 23, The host terminal side control unit 24, the host terminal side first communication module 25, and the host terminal side second communication module 26 are configured.

  The host terminal side storage unit 21 is realized by a semiconductor memory such as a flash memory, and stores an operating system (OS) program that realizes basic functions of the host terminal device 2 and also realizes a Web browsing function. Various application programs such as a browser program for realizing the electronic whiteboard function, an electronic whiteboard program for realizing the electronic whiteboard function, and a TV conference program for realizing the TV conference function by connecting to the TV conference server device are stored. The

  In the present embodiment, the host terminal storage unit 21 stores a program for executing an authentication control process (to be described later) (hereinafter referred to as “authentication control program”). The authentication control program may be installed in advance in the host terminal device 2, or may be acquired and installed by downloading from the Internet.

  The host terminal side input unit 22 is realized by an input device such as a mouse or a keyboard, and an instruction input operation such as an instruction to select one application program from a plurality of application programs stored in the host terminal side storage unit 21 is performed by the user. Is done.

  The host terminal side display unit 23 is realized by a known display device such as a liquid crystal display device including a liquid crystal panel and a backlight or an organic EL (Electro-Luminescence) display device, and displays an application image during execution of the application program. Display on the surface. In the present embodiment, the host terminal side display unit 23 is a so-called touch panel mounting type display device on which a touch sensor (for example, realized by a projection type capacitive sensor) is superimposed. The host terminal side display unit 23, which is a touch panel-mounted display device, has the same function as the host terminal side input unit 22. That is, the user can perform an instruction input operation such as an instruction to select an application program by a touch operation on the display surface of the host terminal side display unit 23.

  The host terminal side control unit 24 is a processing unit that controls the operation of each unit of the host terminal device 2, and is realized by, for example, a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory). The host terminal side control unit 24 executes an operating system program and application programs loaded from the host terminal side storage unit 21 to the RAM, and also executes an authentication control program.

  The host terminal side control unit 24 includes a host terminal side operation control unit 241 that functions as a program execution unit, and a host terminal side authentication processing unit 242 that functions as an authentication information generation unit and a cooperative operation determination unit. . The host terminal side control unit 24 functions as the host terminal side operation control unit 241 by executing the application program, and functions as the host terminal side authentication processing unit 242 by executing the authentication control program.

  The host terminal side operation control unit 241 executes the application program selected based on the instruction input by the host terminal side input unit 22 or the host terminal side display unit 23. When the application program is executed by the host terminal side operation control unit 241, an application image during execution of the application program is displayed on the host terminal side display unit 23.

  The host terminal side authentication processing unit 242 generates authentication information for authenticating the client terminal device 3 operating in cooperation with the operation based on the application program executed by the host terminal side operation control unit 241. The authentication information is transmitted to the host terminal side first communication module 25. Further, the host terminal side authentication processing unit 242 will be described in detail later, but based on the permission request information transmitted from the client terminal device 3 and transmitted via the host terminal side second communication module 26, the client terminal side authentication processing unit 242 It is determined whether or not the cooperative operation of the device 3 is permitted, and determination result information representing the determination result is transmitted to the host terminal side second communication module 26.

  Here, authentication information generated by the host terminal side authentication processing unit 242 will be described with reference to FIGS. 4 and 5. FIG. 4 is a diagram illustrating an example of authentication information, and FIG. 5 is a diagram illustrating an example of the authentication service setting screen 231.

  When the host terminal-side operation control unit 241 executes the application program, the host terminal-side authentication processing unit 242 causes the host terminal-side display unit 23 to display the authentication service setting screen 231 illustrated in FIG. On the authentication service setting screen 231, a UI object image representing a UI (User Interface) object for executing processing corresponding to an instruction input operation by a user is arranged.

  The host terminal side authentication processing unit 242 generates authentication information by executing processing corresponding to an instruction input operation by the user on the authentication service setting screen 231.

  The authentication service setting screen 231 includes a “general” UI object image 231 A for executing authentication control setting processing related to communication between the host terminal device 2 and the client terminal device 3, and communication in the second communication network 6. A “network setting” UI object image 231B for executing the authentication control setting process for connection and an “application setting” UI object image 231C for executing the authentication control setting process for the application program are arranged.

  In the example shown in FIG. 5A, since an instruction input operation is performed on the message image “Enable authentication service” in the “general” UI object image 231A, the host terminal device 2 and the client terminal device 3 The authentication control process is executed for the entire communication with the server. If the instruction input operation for the message image “enable authentication service” is not performed, the authentication control processing is not executed for the entire communication between the host terminal device 2 and the client terminal device 3.

  In the example shown in FIG. 5A, an instruction input operation is performed on the message image “includes network setting information” in the “network setting” UI object image 231B, so that communication in the second communication network 6 is performed. A setting process for authentication control related to connection is executed. When the instruction input operation for the message image “includes network setting information” is not performed, the authentication control setting process regarding the communication connection in the second communication network 6 is not executed.

  An “edit” operation key image 231B1 is arranged in the “network setting” UI object image 231B. When an input operation for pressing the “edit” operation key image 231B1 is performed, a network setting screen 232 shown in FIG. 5B is displayed on the host terminal side display unit 23. Connection information in the second communication network 6 regarding SSID (Service Set Identifier, identifier of access point in IEEE 802.11 standard wireless LAN), security method, and encryption key is set by an instruction input operation on the network setting screen 232 can do. The authentication information including the connection information in the second communication network 6 is information as shown in FIG. 4C, for example. In the example illustrated in FIG. 4C, “connection information” as the setting category 101, “SSID”, “security method”, and “encryption key” as the setting item 102, and “SSID” as the setting information 103. “AAA” corresponding to “Security”, “BBB” corresponding to “security method”, and “CCC” corresponding to “encryption key” are associated with each other.

  In the example shown in FIG. 5A, since an instruction input operation is performed on the message image “including application setting information” in the “application setting” UI object image 231C, setting of authentication control regarding the application program is performed. Processing will be executed. When the instruction input operation for the message image “including application setting information” is not performed, the authentication control setting process for the application program is not executed.

  In the “application setting” UI object image 231C, a message image “Use common settings” and a message image “Set individually” are arranged.

  By performing an instruction input operation on the message image “Use common settings”, processing for setting common authentication information for a plurality of application programs is executed. In the “application setting” UI object image 231C, an “edit” operation key image 231C1 corresponding to the message image “Use common settings” is arranged. When an input operation for pressing the “edit” operation key image 231C1 is performed, an application common setting screen 233 shown in FIG. 5C is displayed on the host terminal side display unit 23. Authentication information about a password common to a plurality of application programs can be set by an instruction input operation on the application common setting screen 233. Authentication information including a password common to a plurality of application programs is information as shown in FIG. 4A, for example. The example illustrated in FIG. 4A includes “connection information” and “general application” as the setting category 101, “connection destination” and “password” as the setting items 102, and “connection destination” as the setting information 103. Authentication information set in common to a plurality of application programs in which “AAA” corresponding to “AAA” and “BBB” corresponding to “password” are associated with each other.

  By performing an instruction input operation for the message image “set individually”, processing for setting authentication information individually for each application program is executed. In the “application setting” UI object image 231C, message images “application A”, “application B”, and “application C” representing each application program are arranged, and an “edit” operation corresponding to “application A” is performed. A key image 231C2, an “edit” operation key image 231C3 corresponding to “application B”, and an “edit” operation key image 231C4 corresponding to “application C” are arranged.

  For example, when an input operation for pressing the “edit” operation key image 231C3 corresponding to “application B” is performed, the application individual setting screen 234 shown in FIG. By an instruction input operation on the application individual setting screen 234, authentication information about an individual password can be set for each application program.

  In addition, by performing an instruction input operation for a message image “change every time it is activated” arranged on the application individual setting screen 234, it is possible to change the setting of the authentication information every time the application program is activated. Processing for setting authentication information including prompt change information to be executed is executed.

  In addition, the individual application setting screen 234 determines whether or not automatic activation of a later-described cooperative application program executed in the client terminal device 3 corresponding to the application program being executed in the host terminal device 2 is permitted (automatic connection is established). A message image for an input operation for setting whether to enable or disable is arranged. By performing an instruction input operation on the message image, processing for setting authentication information including automatic start permission information indicating whether to permit automatic start of the cooperative application program in the client terminal device 3 is executed.

  Authentication information including individual passwords and automatic activation permission information for each application program is information as shown in FIG. 4B, for example. In the example shown in FIG. 4B, “connection information”, “application A”, and “application B” as the setting category 101, and “connection destination”, “password”, and “automatic execution” as the setting items 102 are shown. “AAA” corresponding to “Destination” as the setting information 103, “BBB” corresponding to “Password” of “Application A”, “Valid” corresponding to “Automatic execution” of “Application A”, “Application” Authentication information set individually for each application program in which “CCC” corresponding to “Password” of “B” and “Invalid” corresponding to “Automatic execution” of “Application B” are associated with each other. .

  Returning to FIG. 2, the host terminal side first communication module 25 of the host terminal device 2 functions as a communication interface for performing wireless communication with the client terminal device 3 by the first communication method. The host terminal side first communication module 25 is a communication module that transmits and receives authentication information to and from the client terminal device 3 via the first communication network 5. The first communication module 25 on the host terminal side is a communication device capable of communication conforming to a near field communication standard such as a non-contact IC (Integrated Circuit) chip such as an RFID (Radio Frequency Identification) chip or Bluetooth (registered trademark). Etc. In the present embodiment, the host terminal side first communication module 25 is realized by a non-contact IC chip. Accordingly, it is possible to easily establish a communication connection by the first communication method for transmitting and receiving authentication information. The host terminal side first communication module 25 transmits the authentication information transmitted from the host terminal side authentication processing unit 242 to the client terminal device 3.

  The host terminal side second communication module 26 functions as a communication interface for wireless communication with the client terminal device 3 by the second communication method. The host terminal-side second communication module 26 is a communication module that transmits and receives data to and from the client terminal device 3 via the second communication network 6. The host terminal-side second communication module 26 will be described in detail later, but the application image data for the cooperative operation of the client terminal device 3 corresponding to the application program being executed by the host terminal-side operation control unit 241. Send and receive.

  The host terminal side second communication module 26 receives the permission request information transmitted from the client terminal device 3 and transmits the received permission request information to the host terminal side authentication processing unit 242 as will be described in detail later. To do. Further, the host terminal side second communication module 26 transmits the determination result information transmitted from the host terminal side authentication processing unit 242 to the client terminal device 3 via the second communication network 6.

  The second communication network 6 to which the host terminal-side second communication module 26 is connected includes a wireless local area network (LAN), the Internet, an intranet, an extranet, an ISDN, a VAN, a CATV communication network, and a virtual private network (Virtual Private Network). ), Telephone line networks, mobile communication networks, satellite communication networks, and the like. In the present embodiment, a wireless LAN is used as the second communication network 6, and a communication device corresponding to this wireless LAN is used as the host terminal side second communication module 26. The communication connection of the host terminal side second communication module 26 to the second communication network 6 is performed via the communication device 4 realized by a wireless LAN router. The connection between the host terminal side second communication module 26 and the communication device 4 may be a wired connection or a wireless connection.

  The client terminal device 3 connected to the host terminal device 2 so as to be able to perform data communication is a terminal device such as a smartphone, a PDA, or a PC. As shown in FIG. 3, the client terminal device 3 includes a client terminal side storage unit 31, a client terminal side input unit 32, a client terminal side display unit 33, a client terminal side control unit 34, and a client terminal side first unit. The communication module 35 includes a client terminal side second communication module 36.

  The client terminal side storage unit 31 is realized by a semiconductor memory such as a flash memory, and stores an operating system program that realizes basic functions of the client terminal device 3, and a browser program for realizing a Web browsing function, Various application programs such as an electronic whiteboard program for realizing the electronic whiteboard function and a TV conference program for realizing the TV conference function by connecting to the TV conference server apparatus are stored. Further, the client terminal side storage unit 31 stores a user ID for specifying a user who uses the client terminal device 3.

  In the present embodiment, the client terminal side storage unit 31 stores an authentication control program for executing an authentication control process. This authentication control program may be installed in advance in the client terminal device 3, or may be acquired and installed by downloading from the Internet.

  The client terminal side input unit 32 is realized by an input device such as a mouse or a keyboard, and an instruction input operation is performed by the user during a cooperative operation corresponding to an application program being executed in the host terminal device 2.

  The client terminal side display unit 33 is realized by a known display device such as a liquid crystal display device or an organic EL display device, and displays an application image in a cooperative operation corresponding to the application program being executed in the host terminal device 2 on the display surface. indicate. In the present embodiment, the client terminal side display unit 33 is a touch panel mounted display device. The client terminal side display unit 33, which is a touch panel-mounted display device, has the same function as the client terminal side input unit 32. That is, the user can perform an instruction input operation by a touch operation on the display surface of the client terminal side display unit 33.

  The client terminal side first communication module 35 functions as a communication interface for performing wireless communication with the host terminal device 2 by the first communication method. The client terminal side first communication module 35 is a communication module that transmits / receives authentication information to / from the host terminal device 2 via the first communication network 5. The first communication module 35 on the client terminal side performs communication conforming to a near field communication standard such as an NFC (Near Field Communication) reader / writer capable of reading information written in a non-contact IC chip or Bluetooth (registered trademark). Realized by possible communication devices. In the present embodiment, the first communication module 35 on the client terminal side is realized by an NFC reader / writer that can read information written in the non-contact IC chip. The client terminal side first communication module 35 receives the authentication information transmitted from the host terminal side first communication module 25, and transmits the received authentication information to the client terminal side control unit 34.

  The client terminal side second communication module 36 functions as a communication interface for wireless communication with the host terminal device 2 by the second communication method. The client terminal side second communication module 36 is a communication module that transmits and receives data to and from the host terminal device 2 via the second communication network 6. The client terminal side second communication module 36 transmits / receives application image data for the cooperative operation of the client terminal device 3 corresponding to the application program being executed in the host terminal device 2, as will be described in detail later.

  Further, the client terminal side second communication module 36 transmits the permission request information generated by the client terminal side authentication processing unit 342 to the host terminal device 2 as will be described in detail later. Furthermore, the client terminal side second communication module 36 receives the determination result information transmitted from the host terminal apparatus 2 in response to the permission request information, and sends the received determination result information to the client terminal side control unit 34. To transmit.

  In the present embodiment, a wireless LAN is used as the second communication network 6, and a communication device corresponding to this wireless LAN is used as the client terminal side second communication module 36. The communication connection of the client terminal side second communication module 36 to the second communication network 6 is performed via the communication device 4 realized by a wireless LAN router. The connection between the client terminal side second communication module 36 and the communication device 4 may be a wired connection or a wireless connection.

  The client terminal side control unit 34 is a processing unit that controls the operation of each unit of the client terminal device 3, and is realized by, for example, a CPU, a ROM, and a RAM. The client terminal side control unit 34 executes the operating system program and application program loaded from the client terminal side storage unit 31 to the RAM, and also executes the authentication control program.

  The client terminal side control unit 34 includes a client terminal side operation control unit 341 that functions as a cooperative operation execution unit, and a client terminal side authentication processing unit 342 that functions as a permission request information generation unit and a communication establishment unit. The The client terminal-side control unit 34 functions as the client terminal-side operation control unit 341 by executing an application program (hereinafter referred to as “cooperative application program”) that can cooperate with an application program being executed in the host terminal device 2. The client terminal side authentication processing unit 342 functions by executing the authentication control program.

  As will be described in detail later, the client terminal side operation control unit 341 provides the second communication network 6 with the host terminal device 2 that enables a cooperative operation corresponding to the application program being executed in the host terminal device 2. When the communication connection is established, the cooperative operation by the cooperative application program is executed. When the cooperative application program is executed by the client terminal side operation control unit 341, a cooperative application image during execution of the cooperative application program is displayed on the client terminal side display unit 33.

  The client terminal side authentication processing unit 342 is authentication information transmitted from the host terminal side first communication module 25 of the host terminal device 2, and is based on the authentication information transmitted from the client terminal side first communication module 35. The permission request information for requesting permission of the cooperative operation corresponding to the application program being executed in the terminal device 2 is generated. Specifically, the client terminal side authentication processing unit 342 reads the user ID stored in the client terminal side storage unit 31 and adds the user ID to the authentication information to generate permission request information. Then, the client terminal side authentication processing unit 342 transmits the generated permission request information to the client terminal side second communication module 36.

  Further, the client terminal side authentication processing unit 342 is transmitted from the host terminal side second communication module 26 of the host terminal device 2 in response to the permission request information and transmitted via the client terminal side second communication module 36. Based on the determination result information, a communication connection is established with the host terminal device 2 via the second communication network 6 that enables a cooperative operation corresponding to the application program being executed in the host terminal device 2. Specifically, the client terminal side authentication processing unit 342 performs the first operation with the host terminal device 2 that enables the cooperative operation when the determination result information is information indicating a determination result that permits the cooperative operation. 2. Establish a communication connection via the communication network 6. As described above, when the communication connection enabling the cooperative operation is established, the client terminal side operation control unit 341 executes the cooperative operation by the cooperative application program.

  On the other hand, when the determination result information is information indicating a determination result that does not permit the cooperation operation, the client terminal side authentication processing unit 342 performs the second communication network with the host terminal device 2 for the cooperation operation. 6 is cut off, and a message image of “cooperation operation communication error” is displayed on the client terminal side display unit 33.

  Next, operations of the host terminal device 2 and the client terminal device 3 in the communication system 1 of the present embodiment will be described with reference to FIGS. FIG. 6 is a flowchart showing the operation of the host terminal device 2. FIG. 7 is a flowchart showing the operation of the client terminal device 3.

  First, in step s1, the host terminal device 2 activates the application program selected by the host terminal side operation control unit 241 by an instruction input operation by the user in the host terminal side input unit 22 or the host terminal side display unit 23. As a result, an application image corresponding to the application program is displayed on the host terminal side display unit 23. Note that immediately after the application program is started, an authentication service setting screen 231 that is an initial screen of the application program is displayed on the host terminal side display unit 23.

  Next, in step s2, the host terminal side authentication processing unit 242 generates authentication information set in the activated application program (the host terminal side authentication processing unit 242 generates authentication information in advance, and the generated authentication information is It is determined whether or not the authentication information includes change information at start-up that prompts a change at each start-up. If it is determined that the authentication information includes startup change information, the process proceeds to step s3. If it is determined that the authentication information does not include startup change information, the process proceeds to step s4.

  In step s3, the host terminal side authentication processing unit 242 generates new authentication information based on an instruction input operation related to authentication information setting on the application individual setting screen 234, and the generated new authentication information is activated. Set in the program.

  In step s4, the host terminal side authentication processing unit 242 transmits the authentication information to the host terminal side first communication module 25. When transmission of authentication information to the host terminal side first communication module 25 is completed, a message image indicating that the cooperation operation can be authenticated may be displayed on the host terminal side display unit 23. Next, in step s <b> 5, the host terminal side first communication module 25 transmits authentication information to the client terminal device 3.

  When the authentication information is transmitted from the host terminal side first communication module 25 of the host terminal device 2 in Step s5, the client terminal device 3 receives the authentication information in Step a1, and the client terminal side first communication module 35 receives the authentication information. The received authentication information is transmitted to the client terminal side authentication processing unit 342.

  Next, in step a2, the client terminal side authentication processing unit 342 determines whether or not automatic activation of the cooperative application program corresponding to the application program being executed in the host terminal device 2 is permitted based on the acquired authentication information. Determine. If it is determined that automatic activation of the cooperative application program is permitted, the process proceeds to step a4. If it is determined that automatic activation is not permitted, the process proceeds to step a3.

  In step a3, when the user performs an instruction input operation on the client terminal side input unit 32 or the client terminal side display unit 33, a cooperative application program corresponding to the application program being executed in the host terminal device 2 is selected. The

  In step a4, the client terminal side operation control unit 341 activates the cooperative application program that is permitted to be automatically activated or selected by the user. In this way, when the cooperative application program is activated in the client terminal device 3, authentication control processing in the client terminal device 3 is started, and the process proceeds to step a5.

  In step a5, the client terminal side authentication processing unit 342 generates permission request information by adding the user ID stored in the client terminal side storage unit 31 to the acquired authentication information, and the generated permission request information is displayed. The data is transmitted to the second communication module 36 on the client terminal side.

  Next, in step a <b> 6, the client terminal side second communication module 36 transmits the permission request information transmitted from the client terminal side authentication processing unit 342 to the host terminal device 2.

  When the permission request information is transmitted from the client terminal side second communication module 36 of the client terminal device 3 in step a6, the host terminal device 2 receives the permission request information in step s6. The received permission request information is transmitted to the host terminal side authentication processing unit 242.

  Next, in step s7, the host terminal side authentication processing unit 242 determines whether or not to permit the cooperative operation in the client terminal device 3 that is the transmission source of the permission request information based on the acquired permission request information, Determination result information representing the determination result is transmitted to the host terminal side second communication module 26. Next, in step s8, the host terminal side second communication module 26 transmits the determination result information transmitted from the host terminal side authentication processing unit 242 to the client terminal device 3.

  When the determination result information is transmitted from the host terminal side second communication module 26 of the host terminal device 2 in step s8, the client terminal device 2 receives the determination result information in step a7. The received determination result information is transmitted to the client terminal side authentication processing unit 342.

  In step a8, the client terminal side authentication processing unit 342 can perform a cooperative operation corresponding to the application program being executed in the host terminal device 2 when the determination result information is information indicating a determination result permitting the cooperative operation. And establishing a communication connection with the host terminal device 2 via the second communication network 6. As described above, when the communication connection enabling the cooperative operation is established, the client terminal side operation control unit 341 executes the cooperative operation by the cooperative application program.

  On the other hand, when the determination result information is information indicating a determination result that does not permit the cooperation operation, the client terminal side authentication processing unit 342 performs the second communication network with the host terminal device 2 for the cooperation operation. 6 is cut off, and a message image of “cooperation operation communication error” is displayed on the client terminal side display unit 33.

  In the communication system 1 of the present embodiment configured as described above, the host terminal device 2 and the client terminal device that enable cooperative operation in the client terminal device 3 corresponding to the application program being executed in the host terminal device 2. 3 is established based on the authentication information via the second communication network 6. This authentication information is generated by the host terminal side authentication processing unit 242 of the host terminal device 2, and the authentication information is transmitted and received between the host terminal device 2 and the client terminal device 3 via the first communication network 5. Since the authentication as to whether or not to permit the cooperative operation during the execution of the application program is performed, there is no complicated operation in which the user of the client terminal device 3 inputs authentication information using an input device such as a mouse or a keyboard. Necessary. Therefore, the communication system 1 according to the present embodiment can simplify the authentication operation as to whether or not to allow the cooperative operation during the execution of the application program, and thus can improve the convenience for the user.

  In the above embodiment, the authentication control program is stored in the host terminal side storage unit 21 and the client terminal side storage unit 31 realized by a semiconductor memory, but is not limited to such a storage device. It may be recorded on a computer-readable recording medium. The recording medium may be a recording medium that can be read by providing a program reading device as an external storage device (not shown) and inserting the recording medium therein, or may be a storage device of another device. .

  Any recording medium may be used as long as the program stored in the recording medium is accessed from a computer and executed. In other words, any recording medium may be used as long as the program is read from the recording medium, the read program is stored in the program storage area of the storage device, and the program is executed. Further, it may be downloaded from another device via a communication network and stored in the program storage area. The download program is stored in advance in a storage device of a computer, or installed in a program storage area from another recording medium.

  The recording medium configured to be separable from the main body is, for example, a tape-based recording medium such as a magnetic tape / cassette tape, a disk-based recording medium such as a floppy (registered trademark) disk, or a magnetic disk such as a flexible disk / hard disk. Disc or CD-ROM (Compact Disk Read Only Memory) / MO (Magneto Optical disk) / MD (Mini Disk) / DVD (Digital Versatile Disk) or other optical disk disc recording medium, IC (Integrated Circuit) card (memory Card-type recording media such as optical cards, etc., or semiconductor memories such as mask ROM / EPROM (Erasable Programmable Read Only Memory) / EEPROM (Electrically Erasable Programmable Read Only Memory) (registered trademark) / flash ROM A recording medium that carries a fixed program, Also good.

DESCRIPTION OF SYMBOLS 1 Communication system 2 Host terminal device 3 Client terminal device 4 Communication device 5 1st communication network 6 2nd communication network 21 Host terminal side memory | storage part 22 Host terminal side input part 23 Host terminal side display part 24 Host terminal side control part 25 Host Terminal side first communication module 26 Host terminal side second communication module 31 Client terminal side storage unit 32 Client terminal side input unit 33 Client terminal side display unit 34 Client terminal side control unit 35 Client terminal side first communication module 36 Client terminal side Second communication module

Claims (4)

A communication system in which a first terminal device and a second terminal device are connected so as to be capable of data communication by communication using a first communication method and a second communication method,
The first terminal device
A storage unit for storing a plurality of application programs;
An input unit for inputting an instruction to select one application program from the plurality of application programs;
A program execution unit that executes an application program selected based on an instruction input by the input unit;
An authentication information generating unit that generates authentication information for authenticating the second terminal device so that the second terminal device operates in cooperation with an operation corresponding to the application program executed by the program execution unit;
An authentication information transmitting unit that transmits the authentication information generated by the authentication information generating unit to the second terminal device by communication according to the first communication method,
The second terminal device
An authentication information receiving unit that receives the authentication information transmitted by the authentication information transmitting unit of the first terminal device by communication according to the first communication method;
Permission request information for generating permission request information for requesting permission of a cooperative operation corresponding to the application program executed by the program execution unit of the first terminal device based on the authentication information received by the authentication information receiving unit. A generator,
A permission request information transmitting unit that transmits the permission request information generated by the permission request information generating unit to the first terminal device by communication using the second communication method;
After the permission request information is transmitted by the permission request information transmitting unit, a cooperative operation corresponding to the application program executed by the program executing unit of the first terminal device is enabled in the second terminal device . A communication establishment unit, comprising: a communication establishment unit that establishes a communication connection with the first terminal device according to the second communication method. The authentication information generation unit, the second is used when establishing a communication connection by the communication mode, the automatic activation permission indicating whether or not to permit the second terminal device the automatic startup of the selected application program communication system according to claim 1, characterized in that to generate the authentication information including the information.   The communication system according to claim 1 or 2, wherein the first communication method is a wireless communication method using a non-contact IC chip.   The communication system according to claim 1, wherein the authentication information generation unit generates different authentication information corresponding to each of the plurality of application programs.