WO2006118029A1

WO2006118029A1 - Information processing system, mobile terminal device, and program

Info

Publication number: WO2006118029A1
Application number: PCT/JP2006/308174
Authority: WO
Inventors: Kengo Shinohara
Original assignee: Ixi Co., Ltd.
Priority date: 2005-04-27
Filing date: 2006-04-19
Publication date: 2006-11-09
Also published as: JP2006309379A

Abstract

[PROBLEMS] The conventional information processing system has a problem that personal information to be protected is erased and even its existence is not known by a user. [MEANS FOR SOLVING PROBLEMS] A mobile terminal device includes: a personal information storage unit for storing personal information; a protection command reception unit for receiving a protection command which is a command for protecting personal information; and an update unit for updating the personal information by overwriting a predetermined character string on the personal information in the personal information storage unit upon reception of the protection command. This enables protection of personal information stored in a terminal such as mobile telephone and a user can think of the existence of the personal information even after processing of the personal information.

Description

Specification

Information processing system, mobile terminal device, and program

Technical field

[0001] The present invention relates to an information processing system and the like for protecting personal information.

Background art

[0002] In a conventional information processing system, when a communication terminal device leaves the user due to theft or loss, a request for authentication information and information data protection is sent from the information data protection requesting device via the network. Sent to the device. The communication means of the communication terminal device receives the request regarding the protection of the information data and the authentication information and sends them to the information data processing means of the communication terminal device. The information data processing means of the communication terminal device sends authentication information to the authentication means and requests authentication of the information data protection requesting device. The authentication means authenticates the information data protection requesting device and sends the result to the information processing means. When the validity of the information data protection requesting device is confirmed, the information data processing means that has received the result erases the information data stored in the information data storage means in accordance with the information data protection request, and Is protected from reading (see, for example, Patent Document 1).

Patent Document 1: Japanese Unexamined Patent Publication No. 2003-114828 (Page 1, Fig. 1 etc.)

Disclosure of the invention

Problems to be solved by the invention

However, in the conventional information processing system, information data is erased.

Thus, for example, after the information is erased, the user of the communication terminal device has the power to determine whether the information is present or how much information is present. For example, if the information data is phonebook data, the user of the communication terminal device has no power to determine how many people have been registered. For example, until the data that has been knocked up is obtained, It was difficult to contact Moreover, in order to acquire data, it was necessary to back up without force, and the load of the server device to be knocked up was generated.

Means for solving the problem [0004] An information processing system according to the first aspect of the present invention is an information processing system including an operation terminal device, a control server device, and a mobile terminal device, wherein the operation terminal device includes the mobile terminal device. A receiving unit for receiving a control command, which is a command for protecting personal information, which is information relating to an individual, and is information having mobile terminal identification information which is information to be transmitted; and transmitting the control command to the control server device And the control server device is identified by mobile terminal identification information included in the control command receiving unit that receives the control command and the control command received by the control command receiving unit. A protection command transmission unit that transmits a protection command, which is a command for protecting personal information, to the mobile terminal device, and the mobile terminal device stores a personal information class in which personal information is stored. In response to reception of the protection command, a protection command receiving unit that receives the protection command, and overwriting a predetermined character string on the personal information stored in the personal information storage unit, An information processing system comprising: an update unit that updates information.

With this powerful configuration, personal information stored in a terminal such as a mobile phone can be protected, and the user can know that personal information exists even after processing the personal information.

[0005] In addition, the information processing system according to the second aspect of the invention relates to the fact that when the updating unit updates the personal information, the mobile terminal device updates the personal information. An update completion information transmitting unit that transmits update completion information that is information to the control server device, the control server device receiving a third update completion information receiving unit that receives the update completion information; A third update completion information transmitting unit that transmits the update completion information received by the third update completion information receiving unit to the operation terminal device, wherein the operation terminal device receives the update completion information. An information processing system further comprising: an update completion information receiving unit; and a first update completion information output unit that outputs the update completion information.

With this configuration, it is possible to notify the operator of the operation terminal device that the update of personal information has been completed.

[0006] The information processing system of the third invention is an information processing system including an operation terminal device, an authentication server device, a control server device, and a mobile terminal device, wherein the operation terminal device Is the operation terminal device identification information that is information for identifying the operation terminal device. A control that is a command for protecting personal information that is personal information that is information related to an individual, which is information having mobile terminal identification information that is information for identifying the mobile terminal device and an operation terminal device identification information storage unit that is stored A receiving unit that receives a command, a first operating terminal device identification information transmitting unit that transmits the operating terminal device identification information to the authentication server device, and a first control command transmission that transmits the control command to the authentication server device The authentication server device includes a second operation terminal device identification information reception unit that receives the operation terminal device identification information, a second control command reception unit that receives the control command, (Ii) an authentication unit that authenticates the operation terminal device based on the operation terminal device identification information received by the operation terminal device identification information reception unit, and an authentication result in the authentication unit is authentication permission. A second control command transmission unit that transmits the control command to the control server device, wherein the control server device receives the control command, and the control command reception unit receives the control command. A protection command transmitting unit that transmits a protection command that is a command for protecting personal information to the mobile terminal device identified by the mobile terminal identification information included in the control command, the mobile terminal device comprising: A personal information storage unit storing personal information, a protection command receiving unit receiving the protection command, and overwriting a predetermined character string on the personal information stored in the personal information storage unit. An information processing system comprising an update unit for updating.

This powerful configuration can further authenticate the operation terminal device and prevent malicious third parties from manipulating personal information.

In addition, the information processing system according to the fourth aspect of the present invention provides information indicating that the mobile terminal device has been updated when the update unit has updated the personal information. An update completion information transmitting unit that transmits certain update completion information to the control server device, the control server device receiving a third update completion information receiving unit that receives the update completion information, and the third update. A third update completion information transmitting unit for transmitting the update completion information received by the completion information receiving unit to the authentication server device, wherein the authentication server device receives the update completion information. A receiving unit; and a second update completion information transmitting unit that transmits the update completion information to the operation terminal device. The operation terminal device receives the first update completion information for receiving the update completion information. And a first update completion information output unit that outputs the update completion information.

[0008] Further, in the information processing system according to the fifth aspect of the present invention, the mobile terminal device according to any one of the first to fourth aspects, the personal information before the update unit updates the personal information. A personal information transmitting unit that transmits information to the control server device, wherein the control server device receives a personal information received by the third personal information receiving unit and a third personal information receiving unit that receives the personal information; An information processing system further comprising a personal information output unit for outputting information.

With this powerful configuration, personal information can be backed up and normal personal information can be acquired later. The invention's effect

[0009] According to the information processing system of the present invention, it is possible to protect personal information stored in a terminal such as a mobile phone, and the user knows that personal information exists even after processing personal information. be able to.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of an information processing system and the like will be described with reference to the drawings. Note that components having the same reference numerals in the embodiment perform the same operation, and thus the description thereof may be omitted.

(Embodiment 1)

FIG. 1 is a conceptual diagram of the information processing system in the present embodiment. The information processing system includes an operation terminal device 11, a control server device 12, and a mobile terminal device 13. The operation terminal device 11 is a terminal that receives a control command that is a command for protecting personal information and transmits the control command to the control server device 12. The control server device 12 is a device that receives a control command and transmits the control command to the mobile terminal device 13. The mobile terminal device 13 is, for example, a mobile terminal in which phone book information is stored, and is a mobile terminal having a function of updating the phone book information and preventing personal information from leaking if theft is lost. . The mobile terminal device 13 is, for example, a mobile phone, a PDA, or a portable personal computer. Etc. The operation terminal device 11 and the control server device 12 are connected by, for example, the Internet or LAN. In addition, the control server device 12 and the mobile terminal device 13 perform transmission / reception of information by, for example, peer-to-peer (P2P) communication. Peer-to-peer (P2P) communication is, for example, communication using a short message service (SMS).

FIG. 2 is a block diagram of the information processing system in the present embodiment.

The operation terminal device 11 includes a reception unit 1101, a control command transmission unit 1102, a first update completion information reception unit 1103, and a first update completion information output unit 1104.

[0013] Control server device 12 includes control command receiving unit 1201, protection command transmitting unit 1202, third update completion information receiving unit 1203, third update completion information transmitting unit 1204, third personal information receiving unit 12 05, personal information An output unit 1206 is provided.

The mobile terminal device 13 includes a personal information storage unit 1301, a protection command reception unit 1302, an update unit 1303, an update completion information transmission unit 1304, and a personal information transmission unit 1305.

[0014] The receiving unit 1101 is information having mobile terminal identification information that is information for identifying the mobile terminal device 13, and receives a control command that is a command for protecting personal information that is information related to an individual. . The personal information is information related to individuals, for example, phone book information that is phone book information, address book information that is address book information, and a customer database in which information such as customer addresses is stored. The mobile terminal identification information is, for example, a telephone number, an IP address, an IP address and port number, a nickname. The data structure of the control instruction does not matter. The control command may be composed only of mobile terminal identification information. Here, “acceptance” includes acceptance by manual input, reception of an external device, reading from a recording medium, and the like. The control command input means may be anything such as a numeric keypad, keyboard, mouse or menu screen. The accepting unit 1101 can be realized by a device driver for input means such as a numeric keypad or a keyboard, or control software for a menu screen.

The control command transmission unit 1102 transmits the control command received by the reception unit 1101 to the control server device 12. The timing and trigger at which the control command transmission unit 1102 transmits the control command does not matter. For example, when the reception unit 1101 receives a control command, the control command transmission unit 1102 immediately transmits the control command. Control command transmitter 1102 is usually wireless or wireless. Alternatively, it may be realized by a broadcasting means that is realized by a wired communication means.

[0016] First update completion information receiving section 1103 receives update completion information. The update completion information is information indicating that the update is performed when the update unit 1303 of the mobile terminal device 13 updates the personal information. The data structure and contents of the update completion information are not limited. The update completion information may include information for identifying the updated personal information, or may be information only indicating that the update has been completed. First update completion information receiving section 1103 is usually realized by a wireless or wired communication means, but may be realized by a means for receiving a broadcast.

The first update completion information output unit 1104 outputs update completion information. Here, output is a concept including display on a display, printing on a printer, sound output, transmission to an external device, storage on a recording medium, and the like. The first update completion information output unit 1104 may or may not include an output device such as a display or a speaker. The first update completion information output unit 1104 can be implemented by output device driver software, or output device driver software and an output device.

[0018] The control command receiving unit 1201 receives a control command from the operation terminal device 11. The control command receiving unit 1201 may receive the control command indirectly from the operation terminal device 11 or may directly receive the control command. The control command receiving unit 1201 is usually realized by a wireless or wired communication means, but may be realized by a means for receiving a broadcast.

[0019] The protection command transmission unit 1202 is a protection command that is a command for protecting personal information to the mobile terminal device 13 identified by the mobile terminal identification information included in the control command received by the control command receiving unit 1201. Send. The protection command transmission unit 1202 usually also performs processing for forming a protection command from a control command. The protection command transmission unit 1202 is usually realized by a wireless or wired communication means, but may be realized by a broadcasting means.

[0020] Third update completion information receiving section 1203 receives update completion information from mobile terminal device 13. The third update completion information receiving unit 1203 may receive update completion information indirectly from the mobile terminal device 13. The third update completion information receiving unit 1203 is usually realized by a wireless or wired communication means, but may be realized by a means for receiving a broadcast.

The third update completion information transmission unit 1204 transmits the update completion information received by the third update completion information reception unit 1203 to the operation terminal device 11. The third update completion information transmission unit 1204 Usually, it is realized by wireless or wired communication means, but may be realized by broadcasting means.

The third personal information receiving unit 1205 receives personal information from the mobile terminal device 13. Third personal information receiving section 1205 may receive personal information indirectly from mobile terminal device 13. The third personal information receiving unit 1205 may be realized by means for receiving power broadcasting, which is usually realized by wireless or wired communication means.

[0023] The personal information output unit 1206 outputs the personal information received by the third personal information receiving unit 1205. Output is a concept that includes display on a display, printing on a printer, transmission to an external device, storage on a recording medium, and the like. Here, the output is preferably stored in a recording medium. The personal information output unit 1206 may or may not include an output device such as a recording medium. The personal information output unit 1206 can be realized by output device driver software, or output device driver software and an output device.

[0024] The personal information storage unit 1301 stores one or more pieces of personal information. The one or more pieces of personal information are, for example, phone book information and customer DB. The personal information storage unit 1301 is preferably a non-volatile recording medium, but can also be realized by a volatile recording medium. The personal information stored in the personal information storage unit 1301 is, for example, information manually input by the user of the mobile terminal device 13. The personal information stored in the personal information storage unit 1301 is information received from an external device, for example.

The protection command receiving unit 1302 receives a protection command from the control server device 12. The protection command receiving unit 1302 may receive the protection command indirectly from the control server device 12. The protection command receiving unit 1302 is usually realized by a wireless or wired communication means, but may be realized by a means for receiving a broadcast.

In response to receiving the protection command, the update unit 1303 overwrites a predetermined character string on the personal information stored in the personal information storage unit 1301 and updates the personal information. When the personal information is phone book information and has name and phone number information, the updating unit 1303 overwrites the location of the phone number with a predetermined character string, for example. For example, the update unit 1303 may overwrite the numeric character string of the telephone number with a predetermined character (such as X) by the character string length of the number of digits of the numeric character string. Further, the updating unit 1303 may generate a code with a random number or the like and overwrite the character string of the name and the telephone number with the character of the code. In addition, the update unit 1303 For example, the telephone number of the original personal information may be acquired, a predetermined calculation may be performed using the telephone number as a parameter, and the calculation result may be overwritten as a new telephone number (numerical string). If a new phone number is generated and overwritten, a person who has stolen or picked up the mobile terminal device 13 has obtained information such as a different phone number and is aware that the information is incorrect. There is an advantage that it is not. When the protection order includes information for identifying personal information, the updating unit 1303 selects personal information based on the information for identifying personal information, and updates the selected personal information. In general, the update unit 1303 can also implement an MPU, memory, or the like. The processing procedure of the update unit 1303 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

[0027] When the update unit 1303 updates the personal information, the update completion information transmission unit 1304 transmits update completion information, which is information indicating that the update has been performed, to the control server device 12. The update completion information transmission unit 1304 is usually realized by a wireless communication means, but may be realized by a wired communication means or a broadcast means.

The personal information transmitting unit 1305 transmits the personal information to the control server device 12 before the updating unit 1303 updates the personal information. The personal information transmission unit 1305 is usually realized by a wireless communication unit, but may be realized by a wired communication unit or a broadcasting unit.

Next, the operation of the information processing system will be described.

First, the operation of the operation terminal device 11 will be described. The reception unit 1101 of the operation terminal device 11 receives a control command, and the control command transmission unit 1102 transmits the control command received by the reception unit 1101 to the control server device 12. Then, the first update completion information receiving unit 1103 of the operation terminal device 11 receives the update completion information, and the first update completion information output unit 1104 outputs the update completion information.

Next, the operation of the control server device 12 will be described using the flowchart of FIG.

(Step S301) The control command receiving unit 1201 determines whether or not it has received the control command. If a control command is received, go to step S302, and if no control command is received, go to step S305.

(Step S302) The protection command transmission unit 1202 receives the control command received in Step S301. The mobile terminal identification information it has is acquired.

(Step S303) The protection command transmission unit 1202 constitutes a protection command. The protection command transmission unit 1202 normally configures a protection command based on the control command received in step S301.

(Step S304) The protection command transmitting unit 1202 transmits the protection command configured in Step S303 to the mobile terminal device 13 specified by the mobile terminal identification information acquired in Step S302. Return to step S301.

(Step S 305) Third update completion information receiving section 1203 determines whether or not update completion information has been received from mobile terminal device 13. If update completion information is received, the process goes to step S306, and if update completion information is not received, the process goes to step S307.

(Step S306) The third update completion information transmitting unit 1204 transmits the update completion information received in step S305 to the operation terminal device 11. Return to step S301.

(Step S 307) Third personal information receiver 1205 determines whether or not personal information has been received from mobile terminal device 13. If personal information is received, the process goes to step S308, and if no personal information is received, the process returns to step S301.

(Step S308) The personal information output unit 1206 outputs the personal information received in step S307. Return to step S301.

In the flowchart of FIG. 3, the control server device 12 performs an authentication process for authenticating whether or not the operation terminal device 11 is a valid terminal. As a result of the authentication process, the authentication is permitted. Only the protection command may be sent to the mobile terminal device 13!

In the flowchart of FIG. 3, the process ends when the power is turned off or the process is terminated.

Next, the operation of the mobile terminal device 13 will be described using the flowcharts of FIG. 4 and FIG.

(Step S 401) Protection command receiving section 1302 determines whether or not a protection command has been received from control server device 12. If a protection command is received, the process proceeds to step S402. If a protection command is not received, the process returns to step S401.

[0034] (Step S402) The personal information transmission unit 1305 converts the personal information to be updated into a personal information class. Acquired from the department 1301. If personal information storage unit 1301 stores two or more personal information and the protection order has information specifying one or more personal information of the two or more personal information, personal information transmission unit 1305 Selects and obtains one or more personal information.

(Step S403) The personal information transmitting unit 1305 transmits the personal information acquired in step S402 to the control server device 12.

(Step S404) In response to the reception of the protection command, the update unit 1303 overwrites the predetermined character string on the personal information stored in the personal information storage unit 1301, and updates the personal information. Details of the update process will be described with reference to the flowchart of FIG.

(Step S405) When the update unit 1303 updates personal information, the update completion information transmission unit 1304 configures update completion information that is information indicating that the update has been performed. The configuration of the update completion information may be a process of reading update completion information stored in advance. In addition, when some of the two or more pieces of personal information are updated, the update completion information transmitting unit 1304 may constitute update completion information having information for specifying the updated personal information.

(Step S406) The update completion information transmission unit 1304 transmits the update completion information configured in step S405 to the control server device 12. Return to step S401.

Next, the update process will be described with reference to the flowchart of FIG.

(Step S501) The updating unit 1303 substitutes 1 for the counter i.

[0037] (Step S502) The update unit 1303 determines whether or not the i-th data exists in the personal information to be updated. If the i-th data exists, the process goes to step S503. If the i-th data does not exist, the process returns to the upper function.

(Step S503) The updating unit 1303 obtains the i-th data in the personal information to be updated.

(Step S504) The updating unit 1303 processes the i-th data acquired in step S503 by a predetermined process. Here, the predetermined process is, for example, an encryption process. The predetermined process is, for example, to execute an operation f “f (i-th data)” on the i-th data. Here, the i-th data is, for example, a numeric string of telephone numbers, and f is It is a predetermined arithmetic expression. F is preferably reversible.

(Step S505) The updating unit 1303 overwrites and updates the i-th data in the personal information to be updated with the data obtained by checking in step S504.

(Step S506) The updating unit 1303 increments the counter i by 1. Return to step S502.

[0039] In the flowchart of FIG. 5, in step S504, the i-th data is covered and updated using the checked data. A predetermined character string (for example, "09012345678") You can also use the to update a given location (phone number, etc.)!

Hereinafter, a specific operation of the information processing system in the present embodiment will be described. A conceptual diagram of the information processing system is shown in FIG.

[0040] Now, it is assumed that the personal information storage unit 1301 of the mobile terminal device 13 stores the phone book information shown in FIG. The phone book information has one or more records having attributes such as “ID”, “name”, “affiliation”, and “phone number”. “ID” is information for identifying the record and exists for record management in the table.

In such a case, the user of the mobile terminal device 13 loses the mobile terminal device 13, calls the operator of the operation terminal device 11, and personal information of the mobile terminal device 13 (here Now, let's say that you have requested that the phone book information be hidden from the third party. Then, it is assumed that the operator hears the telephone number “09011223456” of the mobile terminal device 13 from the user of the mobile terminal device 13 and inputs the telephone number on the screen shown in FIG.

Next, it is assumed that the operator checks the “Yes” backup check box (see FIG. 7) in order to back up the phone book information based on the user's request. Then, it is assumed that the operator presses the “Send” button on the screen of FIG.

Next, the control command transmission unit 1102 of the operation terminal device 11 configures the control command shown in FIG. 8 based on the information input by the operator of FIG. The control command includes a command “update”, a type of personal information “phone book” to be updated, and mobile terminal identification information “09011223456” of the mobile terminal device 13.

Next, the control command transmission unit 1102 transmits the control command in FIG. 8 to the control server device 12. . The control command transmission unit 1102 holds information for communicating with the control server device 12 (IP address, e-mail address, telephone number, etc. of the control server device 12).

Next, the control command receiving unit 1201 of the control server device 12 receives the control command of FIG. Then, the protection command transmission unit 1202 of the control server device 12 acquires the mobile terminal identification information “09011223456” with the control command power of FIG.

Then, the protection command transmission unit 1202 of the control server device 12 configures the protection command of FIG. 9 from the control command of FIG.

Next, the protection command transmission unit 1202 transmits the protection command of FIG. 9 to the mobile terminal device 13 that can be identified by the mobile terminal identification information “09011223456”.

Next, the protection command receiving unit 1302 of the mobile terminal device 13 receives the protection command of FIG.

Next, the personal information transmission unit 1305 of the mobile terminal device 13 acquires the phone book information of FIG. 6 from the personal information storage unit 1301 for backup of the phone book information. Then, the personal information transmission unit 1305 transmits the telephone directory information of FIG. 6 to the control server device 12.

Next, the third personal information receiving unit 1205 of the control server device 12 receives the phone book information of FIG. Then, the personal information output unit 1206 accumulates the received phone book information. The phone book information is usually stored in a pair with the mobile terminal identification information “09011223456” of the mobile terminal device 13. The stored phone book information is transmitted by a predetermined process. Note that the predetermined processing is, for example, a request from a person having a legitimate authority and transmission corresponding to the request. In addition, there are various predetermined processes.

Next, the update unit 1303 of the mobile terminal device 13 overwrites and updates the telephone directory information in accordance with the protection instruction of FIG. Here, it is assumed that the updating unit 1303 overwrites and updates the phone book information according to the following rules.

[0048] That is, the rule is that the two characters of the name are encrypted and converted to the other two characters. In addition, the rule calculates (f) a telephone number number string as a parameter, acquires another number string, and overwrites the acquired number string. In the calculation (f), for example, the numbers from the first digit to the third digit are not changed, and the numbers from the fourth digit to the eleventh digit are changed. It is an operation to be performed.

Note that the encrypted two characters of the name and the computed number string are reversible, and if decompressed, the correct name can be obtained, and the number string of the original telephone number is obtained by performing the Γ ¹ operation. It can be done.

Then, the updating unit 1303 changes the phone book information in FIG. 6 to the phone book information as shown in FIG. 10 and rewrites it.

Next, the update completion information transmission unit 1304 of the mobile terminal device 13 configures update completion information, which is information indicating that the update of the phone book information is completed, and transmits it to the control server device 12. Next, the third update completion information receiving unit 1203 of the control server device 12 receives the update completion information. Then, the third update completion information transmission unit 1204 transmits the update completion information to the operation terminal device 11.

Next, the first update completion information receiving unit 1103 receives update completion information. Then, first update completion information output section 1104 outputs update completion information as shown in FIG. Here, the update completion information includes mobile terminal identification information.

[0050] As described above, according to the present embodiment, personal information stored in a terminal such as a mobile phone can be protected, and the user can imagine the existence of personal information even after processing the personal information. In addition, according to this specific example, a part of personal information is rewritten, so that the user can easily know what kind of information exists and is convenient. On the other hand, for a third party, meaningless information remains, and protection of personal information can be ensured.

Note that, according to the specific example of the present embodiment, the phone book information of the mobile terminal device 13 is partially changed, but may be changed entirely.

Further, according to the specific example of the present embodiment, the phone book information is changed so that the phone book information can be restored. However, the phone book information may not be restored.

In the present embodiment, for example, only information acquired from the original personal information such as the number of phone book information may be left.

[0051] Furthermore, the processing in the present embodiment may be realized by software. This software may be distributed by software download or the like. In addition, this software may be recorded and distributed on a recording medium such as a CD-ROM. Note that this is This also applies to other embodiments in the book. The software that realizes the mobile terminal device in the present embodiment is the following program. In other words, this program overwrites a predetermined character string with respect to the stored personal information in response to the protection command receiving step for receiving the protection command and the reception of the protection command. And a program for executing an update step for updating the personal information.

[0052] When the personal information is updated in the update step, the program causes the computer to further execute an update completion information transmission step of transmitting update completion information that is information indicating that the personal information has been updated. It can be a program.

The program may be a program for causing a computer to further execute a personal information transmission step of transmitting the personal information before updating the personal information in the updating step.

(Embodiment 2)

The information processing system in the present embodiment is characterized in that the information processing system in the first embodiment further includes an authentication server device to authenticate the operation terminal device.

FIG. 12 is a conceptual diagram of the information processing system in the present embodiment. The information processing system includes an operation terminal device 121, an authentication server device 122, a control server device 123, and a mobile terminal device 13.

FIG. 13 is a block diagram of the information processing system in the present embodiment.

The operation terminal device 121 includes an operation terminal device identification information storage unit 12101, a reception unit 1101, a first operation terminal device identification information transmission unit 12102, a control command transmission unit 1102, a first update completion information reception unit 1103, a first An update completion information output unit 1104 is provided.

The authentication server device 122 includes a second operation terminal device identification information receiving unit 12201, a second control command receiving unit 12202, an authentication unit 12203, and a second control command transmitting unit 12204.

[0054] The control server device 123 includes a control command receiving unit 12301, a protection command transmitting unit 1202, a third update completion information receiving unit 1203, a third update completion information transmitting unit 12304, a third personal information receiving unit 1205, and a personal information output. Part 1206. The operation terminal device identification information storage unit 12101 stores operation terminal device identification information that is information for identifying the operation terminal device 121. The operation terminal device identification information is, for example, an IP address of the operation terminal device 121, a MAC address of the operation terminal device 121, a pair of an ID and password of an operator who operates the operation terminal device 121, and the like. The operation terminal device identification information may be information that indirectly identifies the operation terminal device 121. The information for indirectly identifying the operation terminal device 121 is information for identifying the user (operator) of the operation terminal device 121, for example. The operation terminal device identification information may be information stored in advance or information input by an operator. The operation terminal device identification information storage unit 12 101 is preferably a nonvolatile recording medium, but can also be realized by a volatile recording medium.

The first operation terminal device identification information transmission unit 12102 transmits the operation terminal device identification information in the operation terminal device identification information storage unit 12 101 to the authentication server device 122. First operation terminal device identification information transmitting section 12102 is usually realized by a wireless or wired communication means, but may be realized by a broadcasting means.

[0057] Second operation terminal device identification information receiving section 12201 receives operation terminal device identification information from operation terminal device 121. The second operation terminal device identification information receiving unit 12201 is usually realized by a wireless or wired communication means, but may be realized by means of receiving a broadcast. The second control command receiving unit 12202 is an operation terminal. A control command is received from the device 121. The second control command receiving unit 12202 can also be realized by a means for receiving power broadcast or a wired communication means for which a wireless communication means is suitable.

The authentication unit 12203 authenticates the operation terminal device 121 based on the operation terminal device identification information received by the second operation terminal device identification information receiving unit 12201. The authentication unit 12203 normally holds one or more operation terminal device identification information for identifying the operation terminal device to which authentication is permitted. The authentication unit 12203 normally determines whether or not the held one or more operation terminal device identification information matches the received operation terminal device identification information, and if they match, determines that the authentication is permitted. . The authentication method may be other methods. The authentication of the operation terminal device 121 may be the authentication of the operator of the operation terminal device 121. Authentication unit 122 03 can usually be realized from MPU, memory, etc. The processing procedure of the authentication unit 12203 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

The second control command transmission unit 12204 transmits the control command received by the second control command reception unit 12202 to the control server device 123 when the authentication result in the authentication unit 12203 is authentication permission. Note that the second control command transmission unit 12204 holds information for communicating with the control server device 123, for example, the IP address of the control server device 123 in advance. The second control command transmission unit 12204 may be realized by a force broadcast unit that is usually realized by a wireless or wired communication unit.

The control command receiving unit 12301 receives a control command from the authentication server device 122. The control command received by the control command receiving unit 12301 may have a data structure different from the control command transmitted by the operation terminal device 121. The control command receiving unit 12301 is usually realized by a wireless or wired communication means, but may be realized by a means for receiving a broadcast.

The third update completion information transmission unit 12304 transmits the update completion information received by the third update completion information reception unit 1203 to the authentication server device 122. The third update completion information transmission unit 1204 is usually realized by a wireless or wired communication means, but may be realized by a broadcasting means.

Next, the operation of the information processing system will be described.

First, the operation of the operation terminal device 121 will be described. The reception unit 1101 of the operation terminal device 121 receives a control command, and the control command transmission unit 1102 transmits the control command received by the reception unit 1101 to the authentication server device 122. In response to receiving the control command, the first operation terminal device identification information transmission unit 12102 reads the operation terminal device identification information from the operation terminal device identification information storage unit 121 01 and authenticates the operation terminal device identification information. Server device 122. The control command and the operation terminal device identification information may be transmitted in one bucket. Further, the first update completion information receiving unit 1103 of the operation terminal device 121 receives the update completion information, and the first update completion information output unit 1104 outputs the update completion information.

Next, the operation of authentication server device 122 will be described. Authentication server device 122 The two operation terminal device identification information receiving unit 12201 receives the second operation terminal device identification information from the operation terminal device 121. Then, the second control command receiving unit 12202 receives a control command from the operation terminal device 121. Next, the authentication unit 12203 authenticates the operation terminal device 121 based on the received second operation terminal device identification information. As a result of the authentication process, if the authentication is permitted, the second control command transmission unit 12204 transmits a control command to the control server device 123. On the other hand, if the result of the authentication process is that authentication is not permitted, the second control command transmitter 12204 does not transmit a control command to the control server device 123. Since the authentication process is a known technique, detailed description thereof is omitted.

Next, the operation of the control server device 123 will be described.

The control command receiving unit 12301 of the control server device 123 receives a control command from the authentication server device 122. Next, the protection command transmission unit 1202 configures a protection command from the control command, and transmits the protection command to the mobile terminal device 13 identified by the mobile terminal identification information included in the control command. After the personal information is updated in the mobile terminal device 13, the third update completion information receiving unit 1203 receives the update completion information, and the third update completion information transmitting unit 123 04 receives the update completion information from the authentication server. Transfer to device 122. The third personal information receiving unit 1205 and the personal information output unit 1206 perform the same operations as described above.

Now, it is assumed that the personal information storage unit 1301 of the mobile terminal device 13 stores the phone book information shown in FIG.

[0065] In such a case, the user of the mobile terminal device 13 loses the mobile terminal device 13, calls the operator of the operation terminal device 121, and personal information of the mobile terminal device 13 (here Now, let's say that you have requested that the phone book information be hidden from the third party.

Then, it is assumed that the operator hears the telephone number “09011223456” of the mobile terminal device 13 from the user of the mobile terminal device 13 and inputs the telephone number on the screen shown in FIG. In addition, the operator shall check the “None” backup check box based on the user's request (see FIG. 14). Furthermore, it is assumed that the operator inputs an operator ID “1234” for identifying the operator and a password “XYZQ”. Next, this operation Suppose that the user presses the “Send” button on the screen of FIG.

In FIG. 14, when the “Customer DB Invalidation” tag is selected, the type of personal information constituting the control command is “Customer DB”. Then, the mobile terminal device 13 overwrites and updates the customer DB.

Next, the control command transmission unit 1102 of the operation terminal device 121 configures the control command shown in FIG. 15 based on the information input by the operator of FIG. Further, the first operation terminal device identification information transmission unit 12102 configures the operation terminal device identification information shown in FIG. 15 based on the information input by the operator of FIG. Then, the operation terminal device 121 transmits information shown in FIG. 15 to the authentication server device 122.

Next, authentication server apparatus 122 receives the information of FIG. Then, the authentication unit 12203 determines whether or not the operation terminal device identification information of FIG. 15 is the registered operator ID and password. Here, if the operator ID “1234” and the password “XYZQ” are registered, the authentication unit 12203 obtains a determination that authentication is permitted.

Next, the second control command transmission unit 12204 transmits the control command in FIG.

Next, the control command receiving unit 12301 of the control server device 123 receives the control command of FIG. Then, the protection command transmission unit 1202 of the control server device 12 acquires the mobile terminal identification information “09011223456” from the control command of FIG.

Then, the protection command transmission unit 1202 of the control server device 12 configures a protection command from the control command of FIG. The protection instruction has information of “invalidation” and “phone book”.

Next, the protection command transmission unit 1202 transmits the protection command to the mobile terminal device 13 that can be identified by the mobile terminal identification information “09011223456”.

Next, the protection command receiving unit 1302 of the mobile terminal device 13 receives the protection command. Next, the updating unit 1303 of the mobile terminal device 13 overwrites and updates the phone book information in accordance with the received protection command. Here, it is assumed that the updating unit 1303 overwrites and updates the phone book information according to the following rules.

That is, the rule is that all characters are overwritten with “X”. Then, the updating unit 1303 converts the phone book information in FIG. 6 into the phone book information as shown in FIG. In addition, rewrite.

Next, the update completion information transmission unit 1304 of the mobile terminal device 13 configures update completion information, which is information indicating that the update of the phone book information is completed, and transmits it to the control server device 123. Next, the update completion information is transmitted from the control server device 123 to the operation terminal device 121 via the authentication server device 122.

[0070] Then, the first update completion information receiving unit 1103 of the operation terminal device 121 receives the update completion information. Then, the first update completion information output unit 1104 outputs the update completion information as shown in FIG. Here, the update completion information includes mobile terminal identification information.

As described above, according to this embodiment, personal information stored in a terminal such as a mobile phone can be protected. And even after processing personal information, the user can know that personal information existed. For third parties, meaningless information remains, and protection of personal information can be guaranteed. Further, by authenticating the operation terminal device 121, the personal information of the malicious third party power mobile terminal device 13 can be protected.

Needless to say, according to the present embodiment, the method for updating personal information is not limited to the method described above.

[0072] Further, according to the present embodiment, the configuration of the information processing system, the transmission / reception route of the control command or Z and the operation terminal device identification information, etc. are irrelevant! The configuration of the information processing system may be as shown in FIG. In the information processing system in FIG. 17, the operation terminal device identification information is transmitted from the operation terminal device to the control server device, and from the control server device to the authentication server device, and authentication processing of the operation terminal device is performed. Then, information related to authentication permission Z non-permission is transmitted to the authentication server device force control server device, and a control command is transmitted to the control server device force mobile terminal device only when authentication is permitted. The mobile terminal device then updates the personal information according to the control command.

[0073] Further, according to the present embodiment, the mobile terminal device updates the phone book information based on the information of the type of personal information included in the control command. In other words, when the type of personal information included in the control instruction is “customer DB”, the mobile terminal device selects information corresponding to “customer DB” and selects the personal information corresponding to “customer DB”. Update. The same applies to other embodiments. Furthermore, the processing in the present embodiment may be realized by software. This software may be distributed by software download or the like. In addition, this software may be recorded and distributed on a recording medium such as a CD-ROM. This also applies to other embodiments in this specification. The software that realizes the mobile terminal device in the present embodiment is the following program. In other words, this program overwrites a predetermined character string with respect to the stored personal information in response to the protection command receiving step for receiving the protection command and the reception of the protection command. And a program for executing an update step for updating the personal information.

[0075] When the personal information is updated in the updating step, the program causes the computer to further execute an update completion information transmitting step of transmitting update completion information that is information indicating that the personal information has been updated. Program.

The program is a program for causing a computer to further execute a personal information transmission step of transmitting the personal information before updating the personal information in the updating step.

[0076] Also, in each of the above embodiments, each process (each function) may be realized by centralized processing by a single apparatus (system) or a plurality of apparatuses. It may be realized by distributed processing by.

[0077] In the above program, the transmission step for transmitting information and the reception step for receiving information are performed by hardware, for example, a modem or an interface card in the transmission step. Does not include processing (processing that can only be done with software)! /.

Further, the computer that executes the program may be singular or plural. That is, centralized processing or distributed processing may be performed. Further, in each of the above embodiments, it goes without saying that two or more communication means (such as a control command transmission unit) existing in one apparatus may be physically realized by one medium. Although only a few exemplary embodiments of the present invention have been described in detail above, in the exemplary embodiments, the benefits of the invention and the new technical capabilities are not substantially deviated. Those skilled in the art will readily recognize that many variations are possible. Accordingly, all such modifications are intended to be included within the scope of this invention.

Industrial applicability

[0078] As described above, the information processing system and the like according to the present invention can protect personal information stored in a terminal such as a mobile phone, and the user can use the personal information even after processing the personal information. It is useful as an information processing system, etc. that has the effect of being able to know the existence of personal information and protects personal information appropriately.

Brief Description of Drawings

[0079] [FIG. 1] Conceptual diagram of the information processing system in Embodiment 1

[Figure 2] Block diagram of the information processing system

FIG. 3 is a flowchart for explaining the operation of the control server device.

FIG. 4 is a flowchart for explaining the operation of the mobile terminal device.

FIG. 5 is a flowchart for explaining the operation of the mobile terminal device.

[Figure 6] Diagram showing an example of the personal information

[Fig.7] Diagram showing the input screen of the operation terminal device

[Figure 8] A diagram showing an example of the data structure of the control instruction

[Figure 9] Diagram showing an example of the data structure of the protection instruction

[Figure 10] Diagram showing an example of the updated personal information

[Fig.11] A diagram showing an output example of the update completion information

[FIG. 12] A conceptual diagram of an information processing system in Embodiment 2.

[Figure 13] Block diagram of the information processing system

FIG. 14 is a diagram showing an input screen of the operation terminal device

[FIG. 15] A diagram showing an example of the data structure of the control instruction, etc.

[Fig.16] Diagram showing an example of the updated personal information

[Figure 17] Conceptual diagram of the information processing system

Claims

The scope of the claims

[1] An information processing system comprising an operation terminal device, a control server device, and a mobile terminal device,

The operation terminal device

A receiving unit for receiving a control command, which is a command for protecting personal information, which is information having mobile terminal identification information which is information for identifying the mobile terminal device, and which is personal information;

A control command transmission unit that transmits the control command to the control server device, and the control server device includes:

A control command receiver for receiving the control command;

A protection command transmitting unit that transmits a protection command, which is a command for protecting personal information, to a mobile terminal device identified by mobile terminal identification information included in the control command received by the control command receiving unit; Equipped,

The mobile terminal device

A personal information storage unit for storing personal information;

A protection command receiving unit for receiving the protection command;

An information processing system comprising: an update unit that overwrites a predetermined character string on the personal information stored in the personal information storage unit and updates the personal information in response to receiving the protection command.

[2] The mobile terminal device includes:

An update completion information transmission unit that transmits update completion information to the control server device when the update unit updates the personal information;

The control server device

A third update completion information receiving unit for receiving the update completion information;

A third update completion information transmitting unit that transmits the update completion information received by the third update completion information receiving unit to the operation terminal device;

The operation terminal device The information processing system according to claim 1, further comprising: a first update completion information receiving unit that receives the update completion information; and a first update completion information output unit that outputs the update completion information.

An information processing system comprising an operation terminal device, an authentication server device, a control server device, and a mobile terminal device,

The operation terminal device

An operation terminal device identification information storage unit in which operation terminal device identification information, which is information for identifying the operation terminal device, is stored;

A first operation terminal device identification information transmitting unit for transmitting the operation terminal device identification information to the authentication server device;

A control command transmission unit that transmits the control command to the authentication server device, and the authentication server device includes:

A second operating terminal device identification information receiving unit that receives the operating terminal device identification information; a second control command receiving unit that receives the control command;

An authentication unit for authenticating the operation terminal device based on the operation terminal device identification information received by the second operation terminal device identification information receiving unit;

A second control command transmission unit configured to transmit the control command to the control server device when an authentication result in the authentication unit is authentication permission;

The control server device

A control command receiver for receiving the control command;

The mobile terminal device

A personal information storage unit for storing personal information; A protection command receiving unit for receiving the protection command;

An information processing system comprising: an updating unit that overwrites a predetermined character string on the personal information stored in the personal information storage unit and updates the personal information.

[4] The mobile terminal device includes:

The control server device

A third update completion information transmitting unit that transmits the update completion information received by the third update completion information receiving unit to the authentication server device;

The authentication server device

A second update completion information receiving unit for receiving the update completion information;

A second update completion information transmission unit for transmitting the update completion information to the operation terminal device; and dfe

The operation terminal device

A first update completion information receiving unit for receiving the update completion information;

The information processing system according to claim 3, further comprising a first update completion information output unit that outputs the update completion information.

[5] The mobile terminal device includes:

A personal information transmission unit that transmits the personal information to the control server device before the update unit updates the personal information;

The control server device

A third personal information receiver for receiving the personal information;

4. The information processing system according to claim 1, further comprising: a personal information output unit that outputs personal information received by the third personal information receiving unit.

[6] The personal information is

It is information about the phone book, it is phone book information with name and phone number, The update unit

The information processing system according to claim 1, wherein the location of the telephone number is overwritten with a predetermined character string.

[7] An operation terminal device constituting the information processing system according to any one of claims 1 to 5.

[8] A control server device constituting the information processing system according to claim 1 to claim 5,

[9] A mobile terminal device constituting the information processing system according to any one of claims 1 to 5

[10] An authentication server device constituting the information processing system according to claim 3 to claim 5,

[11] a personal information storage unit for storing personal information;

A protection command receiving unit that receives a protection command that is a command for protecting personal information; and in response to receiving the protection command, the personal information in the personal information storage unit is overwritten with a predetermined character string. A mobile terminal device comprising: an update unit that updates the personal information.