JP6379570B2 - Function control system, terminal, function control method, and program - Google Patents

Description

  The present invention relates to a function control system, a terminal, a function control method, and a program, and more particularly, to a function control system, a terminal, a function control method, and a program that restrict terminal functions.

  Currently, private mobile terminals have become highly functional, and a BYOD (Bring Your Own Device) solution that uses a personally owned terminal to perform business is drawing attention. However, because private terminals are brought into the company for use, they can be used for private purposes during work, illegally connected to work terminals for taking in-house data, or using cameras The risk of taking important information is increasing. In order to limit the unauthorized use of these private terminals, MDM (Mobile Device Management) that remotely operates the terminals and restricts functions has attracted attention.

  In Patent Document 1, by receiving a signal from a non-contact IC (Integrated Circuit) communication unit of a terminal, the terminal is switched between a public mode (function restriction mode) and a private mode (function release mode). A system for realizing is described.

  Patent Document 2 describes a technique for enabling or disabling a plurality of individual functions of a mobile terminal device when the mobile terminal device passes an entrance / exit gate. For example, a call function, an incoming call notification function, a photographing function, and the like in the mobile terminal device are invalidated, while a connection function to a wireless communication facility or a specific network site is validated.

  Further, in Patent Document 3, while the function of the terminal is restricted to business use at work, access to the terminal management apparatus via the wireless LAN is permitted, and data and applications from the terminal management apparatus to the terminal are permitted. Describes the technology that will be downloaded.

JP 2007-221398 A JP 2008-085752 A JP 2009-0891717 A

  The entire disclosure of the above patent document is incorporated herein by reference. The following analysis was made by the present inventors.

  At present, various systems for realizing MDM (Mobile Device Management) for limiting functions of terminals such as calls, cameras, applications, and network connections have been proposed, and some of them have been commercialized.

  Patent Document 1 realizes MDM by switching a terminal between a public mode (function restriction mode) and a private mode (function release mode) by receiving a signal from a non-contact IC communication unit of the terminal. The system is described.

  However, in such a technique, for the purpose of strengthening information security and preventing undesirable operations, the user terminal is unilaterally restricted in function. As a result, the convenience of the user is impaired and the user may not be accepted.

  In the technologies described in Patent Document 2 and Patent Document 3, it is possible to restrict the functions of the terminal and provide a function to be activated separately, thereby ensuring user convenience. Become.

  By the way, in the technique described in Patent Document 2, not only the function invalidation (function control) for the terminal but also the function validation (function release) is performed on the terminal. However, according to such technology, the setting for enabling (disabling) the function of the terminal is illegally changed by the owner of the terminal, unauthorized data access using the enabled function is performed, and information leakage occurs. There is a fear.

  In the technique described in Patent Document 3, data and applications used for business are downloaded from the terminal management apparatus to the terminal when going to work, and the downloaded data and applications are uploaded from the terminal to the terminal management apparatus when leaving work. However, according to such a technique, there is a possibility that business data downloaded from the terminal management apparatus may be illegally taken out by a user of the terminal.

  Therefore, it is a problem to prevent the function released to the terminal from being used illegally by the terminal instead of restricting the function of the terminal. An object of the present invention is to provide a function control system, a terminal, a function control method, and a program that contribute to solving such a problem.

The function control system according to the first aspect of the present invention includes a first terminal and a second terminal, and the second terminal monitors the presence / absence of connection between the first terminal and the second terminal. And when the first terminal is connected to the second terminal, the first terminal is restricted from using the first function of the first terminal when the first terminal is connected to the second terminal. , A control unit that permits the second function of the second terminal to be used on the second terminal, identification information that identifies the first terminal, the first function, And a management table that holds the second function in association with each other. The monitoring unit requests the first terminal to send the identification information when the first terminal is connected to the second terminal, and sends the identification information to the first terminal. The first information and the second function are determined by collating identification information with the management table.

A second terminal according to a second aspect of the present invention includes: a monitoring unit that monitors presence / absence of connection between the first terminal and the second terminal; and the first terminal is connected to the second terminal. The second terminal has the second function of the second terminal on the second terminal while restricting the use of the first function of the first terminal to the first terminal. And a control unit that permits use in the system. When the first terminal is connected to the second terminal, the monitoring unit requests the first terminal to send identification information for identifying the first terminal, and the first terminal The identification information sent from the terminal is collated with a management table that holds the identification information for identifying the first terminal, the first function, and the second function in association with each other. A function and the second function are determined.

In the function control method according to the third aspect of the present invention, the second terminal monitors the presence or absence of connection between the first terminal and the second terminal, and the first terminal When connected to a terminal, the first function of the first terminal is restricted to the first terminal, while the second function of the second terminal is restricted to the first terminal. Permitting use on two terminals. The monitoring step requests the first terminal to send identification information for identifying the first terminal when the first terminal is connected to the second terminal; The identification information sent from one terminal is collated with a management table that holds the identification information for identifying the first terminal, the first function, and the second function in association with each other. And the second function are determined.

The program which concerns on the 4th aspect of this invention is the process which monitors the presence or absence of the connection of a 1st terminal and a said 2nd terminal with respect to the computer provided in the 2nd terminal, The said 1st terminal Is connected to the second terminal, the use of the first function of the first terminal is restricted to the first terminal, while the second of the second terminal has To permit the use of the above function on the second terminal. The monitoring process requests the first terminal to send identification information for identifying the first terminal when the first terminal is connected to the second terminal, and The identification information sent from one terminal is collated with a management table that holds the identification information for identifying the first terminal, the first function, and the second function in association with each other. And the second function are determined. The program can also be provided as a program product recorded on a non-transitory computer-readable storage medium.

  According to the function control system, the terminal, the function control method, and the program according to the present invention, it is possible to prevent the function released to the terminal from being illegally used by the terminal instead of restricting the function of the terminal. Become.

It is a block diagram which illustrates the composition of the function control system concerning one embodiment. It is a block diagram which illustrates the composition of the function control system concerning a 1st embodiment. It is a figure which illustrates the information which the terminal management table of the function control system concerning an embodiment holds. It is a block diagram which illustrates the composition of the function control system concerning a 2nd embodiment. It is a block diagram which illustrates the composition of the function control system concerning a 3rd embodiment. It is a flowchart which illustrates the operation | movement at the time of the connection start of the function control system which concerns on 3rd Embodiment. It is a flowchart which illustrates the operation | movement at the time of the completion | finish of a connection of the function control system concerning 3rd Embodiment. It is a block diagram which illustrates the composition of the function control system concerning a 4th embodiment.

  First, an outline of one embodiment will be described. Note that the reference numerals of the drawings attached to this summary are merely examples for facilitating understanding, and are not intended to limit the present invention to the illustrated embodiment.

  FIG. 1 is a block diagram illustrating the configuration of a function control system according to an embodiment. Referring to FIG. 1, the function control system includes a first terminal 50 and a second terminal 60. Although not particularly limited, the first terminal 50 may be a private terminal and the second terminal 60 may be a business terminal.

  The second terminal 60 includes a monitoring unit 62 that monitors whether the first terminal 50 and the second terminal 60 are connected, and the first terminal 50 when the first terminal 50 is connected to the second terminal 60. The second function of the second terminal 60 (for example, a network communication function, while the use of the first function (for example, a call function) of the first terminal 50 is restricted for the terminal 50 of FIG. And a control unit 64 that permits the application) to be used on the second terminal 60.

  The function control system includes identification information (terminal identification information) for identifying the first terminal 50, the first function (for example, private terminal restriction function), and the second function (for example, business terminal release function). And a management table (see FIG. 3) for holding the information in association with each other. The monitoring unit 62 requests the first terminal 50 to send the identification information when the first terminal 50 is connected to the second terminal 60, and the identification sent from the first terminal 50. The first function and the second function may be determined by collating the information with the management table.

  According to the function control system according to the embodiment, instead of restricting the use of the function of the first terminal 50, the use of the function on the second terminal 60 provided separately from the first terminal 50 is the first. 1 terminal 50 is permitted. Therefore, the functions released to the first terminal 50 instead of the function restriction by putting the management of the second terminal 60 under the management of an administrator different from the user of the first terminal 50. Can be prevented from being illegally used by the first terminal 50.

  Also, according to the function control system of the embodiment, the function released to the first terminal 50 instead of limiting the function of the first terminal 50 is the second provided separately from the first terminal 50. Can be used on the terminal 60. Therefore, data and applications used for work are downloaded from the second terminal 60 to the first terminal 50 when going to work, and the downloaded data and applications are uploaded from the first terminal 50 to the second terminal 60 when leaving work. Unlike conventional technology (Patent Document 3), there is no possibility that downloaded business data or the like is illegally taken out by the user of the first terminal 50.

  As described above, according to the function control system according to the embodiment, it is possible to prevent an unauthorized use of a function released to the terminal instead of restricting the function of the terminal.

<Embodiment 1>
Next, the function control system according to the first embodiment will be described with reference to the drawings. FIG. 2 is a block diagram illustrating the configuration of the function control system of this embodiment. Referring to FIG. 2, the function control system of this embodiment includes a private terminal 40, a trigger 10, a management system 20, and a controlled device 30.

  The private terminal 40 includes a private terminal function control unit 41, terminal identification information 42, and a private terminal controlled function 43.

  The private terminal 40 is a terminal that a user possesses for private use, and is a terminal whose functions should be restricted during business or the like. Examples of the private terminal 40 include, but are not limited to, a mobile phone including a smartphone and a tablet terminal. Although the private terminal 40 will be described here, the present invention can also be applied to a case where a business terminal whose functions are to be restricted is used instead of the private terminal 40.

  The private terminal function control unit 41 is a function installed in advance in the private terminal, and performs function restriction or function release of the private terminal controlled function 43 based on a command from the management system 20.

  The terminal identification information 42 is unique information that uniquely identifies the private terminal 40.

  The trigger 10 includes a terminal reading / monitoring unit 11. The trigger 10 is an interface for exchanging information between the private terminal 40 and the management system 20, and specific examples include an entrance / exit gate and a terminal. However, the trigger 10 is not limited to these.

  The terminal reading / monitoring unit 11 communicates with the private terminal 40 to read information of the private terminal 40 and monitor connection information. The terminal reading / monitoring unit 11 communicates with the authentication control unit 22 of the management system 20 and transmits the result to the private terminal 40.

  The management system 20 includes a terminal management table 21 and an authentication control unit 22. The management system 20 has terminal identification information of the private terminal 40, function restriction information and function release information associated therewith, and performs function control of the private terminal 40 and function control of the controlled device 30.

  The terminal management table 21 is a table that stores the terminal identification information 42 of the private terminal 40, the function control information associated with the terminal identification information 42, and the function control information of the controlled device 30 associated with the terminal identification information 42. FIG. 3 illustrates information held in the terminal management table 21.

  The authentication control unit 22 refers to and updates the information in the terminal management table 21, and transmits the information in the referenced terminal management table 21 to the private terminal 40 and the controlled device 30.

  The controlled device 30 includes a controlled device control unit 31 and a controlled device controlled function 32. The controlled device 30 is a device that cancels the function instead of restricting the function of the private terminal 40. Specific examples include permission to connect to an access point in 802.1X authentication, an IP (Internet Protocol) telephone system such as SIP (Session Initiation Protocol), login to a business terminal, and function release. However, the controlled device 30 is not limited to these.

  The controlled device control unit 31 communicates with the authentication control unit 22 and performs function control of the controlled device controlled function 32 based on the function restriction information of the controlled device 30 stored in the terminal management table 21.

  The controlled device controlled function 32 is a function used in the controlled device 30.

  The main operation of the function control system (FIG. 2) according to the present embodiment includes a start operation and an end operation.

  First, at the start, the terminal reading / monitoring unit 11 acquires the terminal identification information 42 and transmits it to the authentication control unit 22 starting from the connection between the private terminal 40 and the trigger 10. The authentication control unit 22 collates whether there is information corresponding to the terminal management table 21 using the acquired terminal identification information 42. If the corresponding information exists, the authentication control unit 22 sends the information to the private terminal function control unit 41 via the trigger 10. The private terminal function control unit 41 controls the function of the private terminal controlled function 43 based on the sent information. When the function control is completed, the private terminal function control unit 41 transmits a completion notification to the authentication control unit 22.

  After receiving the completion notification, the authentication control unit 22 transmits information for function control to the controlled device control unit 31. The controlled device control unit 31 performs function control of the controlled device controlled function 32 based on the sent information. The controlled device control unit 31 transmits a completion notification to the authentication control unit 22 when the function control is completed. Upon receiving the completion notification, the authentication control unit 22 sets a state associated with the terminal identification information held in the terminal management table 21 to a start state.

  On the other hand, at the end, for example, the controlled device control unit 31 limits the function of the controlled device controlled function 32 from the entrance gate described later or the timer expires, and returns to the initial state. The private terminal function control unit 41 cancels the function of the private terminal controlled function 43 and returns it to the initial state.

  According to the function control system of this embodiment, instead of restricting the functions of the private terminal 40, the functions of other devices can be canceled to ensure certain convenience. Thereby, it is possible to allow the user to make a selection in view of merits and demerits instead of unilaterally limiting the convenience.

<Embodiment 2>
Next, a function control system according to a second embodiment will be described with reference to the drawings. FIG. 4 is a block diagram illustrating the configuration of the function control system of this embodiment. Referring to FIG. 4, the function control system of this embodiment includes a private terminal 100, an entrance gate 110, a management system 120, and an authentication server 130. In contrast to the function control system of the first embodiment shown in FIG. 2, in the function control system of the present embodiment, the entrance gate 110 corresponds to the trigger 10 and the authentication server 130 corresponds to the controlled device 30.

  The private terminal 100 includes a private terminal function control unit 101, terminal identification information 102, a private terminal function providing unit 103, and a supplicant 104.

  The private terminal function control unit 101 restricts functions provided by the private terminal function providing unit 103 based on information held in the terminal management table 121.

  The terminal identification information 102 is unique information for identifying the terminal. The terminal identification information 102 is used for authentication in the terminal management table 121.

  The functions provided by the private terminal function providing unit 103 are controllable functions used in the private terminal 100. The functions provided by the private terminal function providing unit 103 are, for example, a network communication unit, an application, a camera, a call function, a non-contact communication unit, and the like. However, the functions provided by the private terminal function providing unit 103 are not limited to these.

  The supplicant 104 is a supplicant function for connecting to the access point 140 by 802.1X authentication.

  The entrance gate 110 includes a terminal reading unit 111. The terminal reading unit 111 reads the terminal identification information of the private terminal 100 by non-contact communication and sends it to the management system 120.

  The management system 120 includes an authentication control unit 122 and a terminal management table 121.

  The terminal management table 121 holds terminal identification information 102 and information on function release and function restriction associated with the terminal identification information 102. FIG. 3 illustrates information stored in the terminal management table 121.

  The authentication server 130 is a server (for example, RADIUS (Remote Authentication Dial In User Service) or the like) that permits access point restriction based on authentication information.

  The access point 140 is used for connecting from the private terminal 100 to WiFi.

  Next, the operation of the function control system of this embodiment will be described. The main operations are the operation when entering the building and the operation when leaving the building.

  As an operation at the time of entering, first, the private terminal 100 performs non-contact communication with the entrance gate 110. The terminal reading unit 111 reads the terminal identification information 102 using non-contact communication, and transmits the read terminal identification information to the management system 120.

  The management system 120 collates the terminal identification information 102 sent from the entrance gate 110 with the terminal management table 121, and if there is a corresponding record, the function restriction information associated with the terminal identification information is passed through the entrance gate 110. To terminal 100. FIG. 3 illustrates information stored in the terminal management table 121.

  The private terminal function control unit 101 performs function restriction on the private terminal function providing unit 103 based on the received function restriction information. When the function restriction is completed, the private terminal 100 sends a completion notification to the management system 120 through the entrance gate 110.

  The management system 120 changes the status of the record associated with the terminal identification information 102 that has received the completion notification to the status of entering. Next, the management system 120 issues a change command to the authentication server 130 using 802.1X in order to allow the WiFi connection associated with the terminal identification information 102 to be permitted.

  The authentication server 130 permits the connection of the corresponding terminal to the access point 140 based on the terminal identification information 102. Here, as the terminal identification information 102, for example, a certificate or a MAC (Media Access Control) address of the terminal can be used. However, the terminal identification information 102 is not limited to these. Further, instead of controlling the access point 140 using the 802.1X authentication server 130, the management system 120 may directly issue a permission command to the access point based on the MAC address of the private terminal 100. . After the change is completed, the entrance gate 110 is opened, and the operation at the entrance is completed.

  On the other hand, as an operation when leaving the building, first, the private terminal 100 performs non-contact communication with the entrance gate 110. The terminal reading unit 111 reads the terminal identification information 102 using contactless communication, and transmits the read terminal identification information 102 to the management system 120.

  The management system 120 checks the terminal identification information sent from the entrance gate 110 against the terminal management table 121 and confirms that the status is the time of entrance. Next, the management system 120 issues a change command to the authentication server 130 so as not to permit access point connection from the private terminal 100. Next, the management system 120 sends information for canceling the function restriction associated with the terminal identification information 102 to the private terminal 100 through the entrance gate 110.

  The private terminal 100 releases the function to the private terminal function providing unit 103 based on the received function release information. When the function release is completed, the private terminal 100 sends a completion notification to the management system 120 through the entrance gate 110.

  The management system 120 changes the status of the record associated with the unique terminal information that has received the completion notification to the status of leaving, opens the entrance gate 110, and the operation at the time of exit is completed.

  According to the function control system according to the present embodiment, the function of the other device is canceled by using the terminal as an authentication key of the other device in exchange for restricting the function of the terminal and restricting the convenience. Thus, it is possible to ensure a certain level of convenience. Accordingly, the user can select whether to accept the function restriction in view of the disadvantages of the function restriction of the private terminal and the merits of the function release of other devices.

<Embodiment 3>
Next, a function control system according to a third embodiment will be described with reference to the drawings. FIG. 5 is a block diagram illustrating the configuration of the function control system of this embodiment. Referring to FIG. 5, the function control system includes a private terminal 200, a business terminal 210, and a management system 220. In contrast to the function control system according to the first embodiment shown in FIG. 2, in the function control system of the present embodiment, the business terminal 210 includes the trigger 10 and the controlled device 30.

  The private terminal 200 includes a private terminal function control unit 201, terminal identification information 202, and a private terminal function providing unit 203.

  The private terminal function control unit 201 restricts functions provided by the private terminal function providing unit 203 based on information held in the terminal management table 221. FIG. 3 illustrates information stored in the terminal management table 221.

  The terminal identification information 202 is unique information for identifying the private terminal 200. The terminal identification information 202 is used for authentication in the terminal management table 221. As a connection form between the private terminal 200 and the business terminal 210, USB (Universal Serial Bus), Bluetooth (registered trademark), WiFi (Wireless Fidelity), and the like are conceivable. However, the connection form is not limited to these.

  The private terminal function providing unit 203 provides a controllable function used in the private terminal 200. The functions provided by the private terminal function providing unit 203 include, for example, a lock function, a network communication unit, an application, a camera, a call function, and a non-contact communication unit. However, the functions provided by the private terminal function providing unit 203 are not limited to these.

  The business terminal 210 includes a terminal monitoring unit 211, a business terminal function control unit 212, and a business terminal function providing unit 213.

  The terminal monitoring unit 211 monitors whether the business terminal 210 is connected to the private terminal 200. When the business terminal 210 is connected to the private terminal 200, the terminal monitoring unit 211 reads the terminal identification information 202 of the private terminal 200, and the terminal identification information that matches the terminal management table 221 (FIG. 3) of the management system 220 is obtained. Check if it exists.

  The business terminal function control unit 212 restricts the functions provided by the business terminal function provision unit 213 based on the information held in the terminal management table 221.

  The function provided by the business terminal function providing unit 213 is a controllable function used in the terminal. The functions provided by the business terminal function providing unit 213 are, for example, a lock function, a network communication unit, an application, and a non-contact communication unit. However, the functions provided by the business terminal function providing unit 213 are not limited to these. The business terminal 210 is, for example, a PC (Personal Computer), a mobile terminal, a tablet terminal, or the like. However, the business terminal 210 is not limited to these.

  The terminal management table 221 holds terminal identification information 202 and function release and function restriction information associated with the terminal identification information 202. FIG. 3 illustrates information held in the terminal management table 211.

  Next, the operation of the function control system (FIG. 5) of this embodiment will be described. The main operation includes an operation at the start of connection between the private terminal and the business terminal and an operation at the end of the connection.

  FIG. 6 is a flowchart illustrating the operation of the function control system of this embodiment at the start of connection. Referring to FIG. 6, the terminal monitoring unit 211 periodically monitors whether the business terminal 210 is connected to the private terminal 200 (step S101).

  When the private terminal 200 is not connected to the business terminal 210 (No in step S102), the terminal monitoring unit 211 continues to monitor (step S101). On the other hand, when the private terminal 200 is connected to the business terminal 210 (Yes in step S102), the process proceeds to the next step S103.

  The terminal monitoring unit 211 requests the terminal identification information 202 held by the private terminal 200. If the terminal identification information 202 cannot be acquired (No in step S103), the connection with the private terminal 300 is disconnected as an error (step S104). On the other hand, when the terminal identification information 202 exists (Yes of step S103), it transfers to the following step S105.

  The terminal monitoring unit 211 sends the acquired terminal identification information 202 to the management system 220. The management system 220 collates with the terminal management table 221 whether there is a record with matching terminal identification information, and returns the collation result to the terminal monitoring unit 211. If there is no matching information (No in step S105), the connection with the private terminal 200 is disconnected as an error (step S106). On the other hand, if there is matching information (Yes in step S105), the process moves to the next step S107.

  The terminal management table 221 sends function restriction information associated with the terminal identification information 202 to the private terminal function control unit 201 of the private terminal 200 via the terminal monitoring unit 211. The private terminal function control unit 201 issues a command for restricting functions to the private terminal function providing unit 203. The terminal management table 221 also holds timer information associated with the terminal identification information 202. Private terminal function control unit 201 sets a timer for private terminal timer unit 204. The timer determines how long the release state is maintained when the private terminal 200 and the business terminal 210 are disconnected. The business terminal 210 also includes a business terminal timer unit 214, and the business terminal timer unit 214 also sets a timer having the same time as the private terminal timer unit 204 (step S107).

  Next, the connection state of the terminal management table 221 is changed to being connected (step S108).

  Next, the function of the business terminal 210 is released, and the function of the business terminal is released (connection start state). Specifically, the business terminal function control unit 212 instructs the business terminal function providing unit 213 to cancel (step S109).

  FIG. 7 is a flowchart illustrating an operation at the end of connection. As described above, the terminal monitoring unit 211 periodically checks whether the private terminal 200 is connected (step S201).

  When the private terminal 200 is connected to the business terminal 210 (Yes in step S202), the timer values of the private terminal timer unit 204 and the business terminal timer unit 214 are reset to the initial state, and the private terminal 210 continues. Is connected (step S201).

  On the other hand, when the cutting time exceeds the upper limit time of the timer (No in step S202 and Yes in S203), the process proceeds to the next step S204.

  When the upper limit time of the timer is exceeded (Yes in step S203), the function of the business terminal 210 is restricted so that the function of the business terminal 210 cannot be used (step S204).

  Thereafter, the connection state of the terminal management table 221 is changed to end (not started) (step S205).

  Since the timer for the same time is set in the private terminal 200, the function of the private terminal 200 is canceled, the timer is initialized, and the state is returned to the unstarted state (step S206).

  According to the function control system according to the present embodiment, instead of restricting the use of the function of the private terminal 200, the use of the function on the business terminal 210 provided separately from the private terminal 200 is used in the private terminal 200. Allowed. Therefore, when the administrator different from the user of the private terminal 200 manages the business terminal 210, the function released to the private terminal 200 instead of the function restriction is illegally used by the private terminal 200. Can be prevented.

  In addition, according to the function control system of the present embodiment, the functions released to the private terminal 200 instead of limiting the functions of the private terminal 200 are executed on the business terminal 210 provided separately from the private terminal 200. Can be used. Therefore, data and applications used for work are downloaded from the work terminal 210 to the private terminal 200 when going to work, and downloaded data and applications are downloaded from the private terminal 200 to the work terminal 210 when leaving work. There is no possibility that business data or the like is illegally taken out by the user of the private terminal 200.

  As described above, according to the function control system according to the present embodiment, it is possible to prevent the function released to the terminal from being illegally used by the terminal instead of restricting the function of the terminal.

<Embodiment 4>
Next, a function control system according to a fourth embodiment will be described with reference to the drawings. FIG. 8 is a block illustrating the configuration of the function control system of the present embodiment. The configuration of the function control system of the present embodiment is the same as the configuration of the function control system of the third embodiment (FIG. 5). However, in this embodiment, when the function of the private terminal 300 is restricted, the function of the SIP (Session Initiation Protocol) agent 305 is canceled.

  According to the function control system according to the present embodiment, it is possible to cancel communication with the SIP server 400 used in business and use the private terminal 300 as an IP (Internet Protocol) telephone.

  Such IP phone function release can be combined not only with the function control system of the third embodiment (FIG. 5) but also with the function control system of the second embodiment (FIG. 4).

  In addition, the connection between the private terminal using the 802.1X authentication and the access point in the function control system of the second embodiment can be combined with the function control system of the third embodiment.

  The function control system according to the first to fourth embodiments includes, for example, authentication of a computer device such as BYOD (Bring Your Own Device), MDM (Mobile Device Management), mobile phone, PC (Personal Computer), and use restriction. Etc.

In the present invention, the following modes are possible.
[Form 1]
The function control system according to the first aspect is as described above.
[Form 2]
A management table that holds identification information for identifying the first terminal, the first function, and the second function in association with each other;
The monitoring unit requests the first terminal to send the identification information when the first terminal is connected to the second terminal, and sends the identification information to the first terminal. Collating identification information with the management table to determine the first function and the second function;
The function control system according to the first aspect.
[Form 3]
The first terminal has a first timer unit for measuring time,
The second terminal has a second timer unit for measuring time,
The monitoring unit monitors whether or not the first terminal is connected to the second terminal at a predetermined timing, and detects that the first terminal is connected to the second terminal. , Reset the first timer unit and the second timer unit,
The control unit restricts use of the second function on the second terminal by the first terminal when a time measured by the second timer passes a predetermined time, Permitting the first terminal to use the first function when the time measured by one timer has passed the predetermined time;
The function control system according to Form 1 or 2.
[Form 4]
The first terminal is a private terminal;
The second terminal is a business terminal,
The function control system according to any one of Forms 1 to 3.
[Form 5]
The first function includes at least one of an imaging function, a call function, a lock function, a network communication function, an application, and a non-contact communication function,
The second function includes at least one of a lock function, a network communication function, an application, and a non-contact communication function.
The function control system according to any one of Forms 1 to 4.
[Form 6]
As in the terminal according to the second aspect.
[Form 7]
The monitoring unit requests the first terminal to send the identification information when the first terminal is connected to the second terminal, and sends the identification information to the first terminal. The first function and the second function are checked by comparing the identification information with a management table that associates and holds the identification information for identifying the first terminal, the first function, and the second function. To decide,
The terminal according to mode 6.
[Form 8]
The first terminal has a first timer unit for measuring time,
The second terminal has a second timer unit for measuring time,
The monitoring unit monitors whether or not the first terminal is connected to the second terminal at a predetermined timing, and detects that the first terminal is connected to the second terminal. , Reset the first timer unit and the second timer unit,
The control unit restricts use of the second function on the second terminal by the first terminal when a time measured by the second timer passes a predetermined time, Permitting the first terminal to use the first function when the time measured by one timer has passed the predetermined time;
The terminal according to Form 6 or 7.
[Form 9]
The function control method according to the third aspect is as described above.
[Mode 10]
The second terminal requesting the first terminal to send the identification information if the first terminal is connected to the second terminal;
The identification information sent from the first terminal is collated with a management table that associates and holds identification information for identifying the first terminal, the first function, and the second function, and Determining a first function and the second function;
The function control method according to claim 9.
[Form 11]
The first terminal measures time using a first timer unit;
The second terminal measuring time using a second timer unit;
Monitoring whether the first terminal is connected to the second terminal at a predetermined timing, and detecting that the first terminal is connected to the second terminal; Resetting the timer unit and the second timer unit;
Limiting the use of the second function on the second terminal by the first terminal when a time measured by the second timer passes a predetermined time;
Allowing the use of the first function by the first terminal when the time measured by the first timer passes the predetermined time.
The function control method according to Form 9 or 10.
[Form 12]
A program according to the fourth aspect.
[Form 13]
A process of requesting the first terminal to send the identification information when the first terminal is connected to the second terminal;
The identification information sent from the first terminal is collated with a management table that associates and holds identification information for identifying the first terminal, the first function, and the second function, and Causing the computer to execute a first function and a process for determining the second function;
The program according to Form 12.

  It should be noted that the entire disclosure of the above patent document is incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiment can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements (including each element of each claim, each element of each embodiment, each element of each drawing, etc.) are possible within the framework of the entire disclosure of the present invention. is there. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea. In particular, with respect to the numerical ranges described in this document, any numerical value or small range included in the range should be construed as being specifically described even if there is no specific description.

10 trigger 11 terminal reading / monitoring unit 20, 120, 220, 320 management system 21, 121, 221, 321 terminal management table 22, 122, 222, 322 authentication control unit 30 controlled device 31 controlled device control unit 32 controlled Device controlled function 40, 100, 200, 300 Private terminal 41, 101, 201, 301 Private terminal function control unit 42, 102, 202, 302 Terminal identification information 43 Private terminal controlled function 50, 60 Terminal 62 Monitoring Unit 64 Control unit 103, 203, 302 Private terminal function providing unit 104 Supplicant 110 Immigration gate 111 Terminal reading unit 130 Authentication server 131 Authentication server control unit 132 Authentication function 140 Access point 204, 304 Private terminal timer unit 210, 310 Business terminal 211, 311 terminal monitoring unit 212, 12 service terminal function control unit 213, 313 service terminal function providing unit 214, 314 service terminal timer unit 305 SIP agent 400 SIP server

Claims (8)

Comprising a first terminal and a second terminal;
The second terminal includes a monitoring unit that monitors presence / absence of connection between the first terminal and the second terminal;
When the first terminal is connected to the second terminal, the first terminal restricts the use of the first function of the first terminal to the first terminal, while the second terminal A control unit that permits the second function of the terminal to be used on the second terminal;
It possesses said identification information identifying the first terminal, the a first function, a management table for holding in association with the second function, and
The monitoring unit requests the first terminal to send the identification information when the first terminal is connected to the second terminal, and sends the identification information to the first terminal. Collating identification information with the management table to determine the first function and the second function;
A function control system characterized by that. The first terminal has a first timer unit for measuring time,
The second terminal has a second timer unit for measuring time,
The monitoring unit monitors whether or not the first terminal is connected to the second terminal at a predetermined timing, and detects that the first terminal is connected to the second terminal. , Reset the first timer unit and the second timer unit,
Wherein the control unit, the time the second timer to measure limits the use of the second function in the elapsed a predetermined time, before SL on the first and the second terminal by the terminal,
The first terminal permits the use of the first function by the first terminal when the time measured by the first timer has passed the predetermined time.
The function control system according to claim 1 . The first terminal is a private terminal;
The second terminal is a business terminal,
The function control system according to claim 1 or 2 . The first function includes at least one of an imaging function, a call function, a lock function, a network communication function, an application, and a non-contact communication function,
The second function includes at least one of a lock function, a network communication function, an application, and a non-contact communication function.
The function control system according to any one of claims 1 to 3 . A monitoring unit for monitoring the presence / absence of connection between the first terminal and the second terminal;
When the first terminal is connected to the second terminal, the first terminal restricts the use of the first function of the first terminal to the first terminal, while the second terminal A control unit that permits the second function of the terminal to be used on the second terminal ,
When the first terminal is connected to the second terminal, the monitoring unit requests the first terminal to send identification information for identifying the first terminal, and the first terminal The identification information sent from the terminal is collated with a management table that holds the identification information for identifying the first terminal, the first function, and the second function in association with each other. Determining a function and the second function;
The 2nd terminal characterized by the above-mentioned. The first terminal has a first timer unit for measuring time,
The second terminal has a second timer unit for measuring time,
The monitoring unit monitors whether or not the first terminal is connected to the second terminal at a predetermined timing, and detects that the first terminal is connected to the second terminal. , Reset the first timer unit and the second timer unit,
Wherein the control unit, the time the second timer to measure limits the use of the second function in the elapsed a predetermined time, before SL on the first and the second terminal by the terminal,
The first terminal permits the use of the first function by the first terminal when the time measured by the first timer has passed the predetermined time.
The second terminal according to claim 5 . A second terminal monitoring presence / absence of connection between the first terminal and the second terminal;
When the first terminal is connected to the second terminal, the first terminal restricts the use of the first function of the first terminal to the first terminal, while the second terminal It is seen containing a step of allowing the use of second functions of the terminal on the second terminal, and
The monitoring step requests the first terminal to send identification information for identifying the first terminal when the first terminal is connected to the second terminal; The identification information sent from one terminal is collated with a management table that holds the identification information for identifying the first terminal, the first function, and the second function in association with each other. Determining the second function and the second function,
And a function control method. A process of monitoring the presence or absence of connection between the first terminal and the second terminal with respect to the computer provided in the second terminal;
When the first terminal is connected to the second terminal, the first terminal restricts the use of the first function of the first terminal to the first terminal, while the second terminal Allowing the second function of the terminal to be used on the second terminal , and
The monitoring process requests the first terminal to send identification information for identifying the first terminal when the first terminal is connected to the second terminal, and The identification information sent from one terminal is collated with a management table that holds the identification information for identifying the first terminal, the first function, and the second function in association with each other. Determining the second function and the second function,
A program characterized by that.

Images