WO2007108072A1

WO2007108072A1 - Terminal processing method, terminal processing program and terminal processing device

Info

Publication number: WO2007108072A1
Application number: PCT/JP2006/305419
Authority: WO
Inventors: Masanobu Tokunaga
Original assignee: Fujitsu Limited
Priority date: 2006-03-17
Filing date: 2006-03-17
Publication date: 2007-09-27

Abstract

A terminal processing method is provided to improve reliability of a network system. A sub-terminal device (1) independently has no authority to access a network (3). When the sub-terminal device (1) receives an operation to connect the network (3), the sub-terminal device (1) transmits a wireless communication request to a terminal device (2) which has an authority to access the network (3). The sub-terminal device (1) then sets up wireless communication with the terminal device (2). After setting up the wireless communication, the sub-terminal device (1) judges whether the wireless communication is continuously set up or not. When the sub-terminal device (1) judges that the wireless communication is cut off, the sub-terminal device (1) cuts off the connection with the network (1).

Description

Specification

Terminal processing method, terminal processing program, and terminal processing apparatus

Technical field

TECHNICAL FIELD [0001] The present invention relates to a terminal processing method, a terminal processing program, and a terminal processing device, and more particularly to a terminal processing method, a terminal processing program, and a terminal processing device for connecting a terminal device to a predetermined network.

Background art

[0002] In recent years, in companies, employees have been able to carry (hold) a mopile terminal that can be connected to an in-house network and use in-house services. Here, in order to prevent unauthorized access to the internal network, in order for the mopile terminal to use the internal service, corporate confidential data such as an electronic certificate or a client secret key is used to show the validity of the mopile terminal. It is necessary to install it on the mopile terminal beforehand.

[0003] Here, as an installation method to a mobile terminal when the number of mono terminals that install corporate confidential data becomes large as in a large company, corporate confidential data is transferred to a mobile terminal for which corporate confidential data is not set. A method is known in which a number of mopile terminals can be used by enabling transmission and automatic setting of the mono terminal to be connected to an in-house network (see, for example, Patent Document 1).

Patent Document 1: Japanese Patent Laid-Open No. 2002-24109

Disclosure of the invention

Problems to be solved by the invention

[0004] By the way, regardless of the user's authority, giving excessive authority to the mopile terminal may cause unauthorized access to the corporate network when the mopile terminal leaks outside. This is not preferable. Therefore, measures to prevent unauthorized use of mopile terminals and improve the reliability of network systems are required.

[0005] The present invention has been made in view of these points, and provides a terminal processing method, a terminal processing program, and a terminal processing device that improve the reliability of a network system. With the goal.

Means for solving the problem

[0006] In order to solve the above problem, the present invention provides a terminal processing method as shown in FIG. The terminal processing method according to the present invention is a terminal processing method for connecting a terminal device to a predetermined network. In this terminal processing method, when the handset terminal 1 that does not have access authority to the network 3 alone accepts an operation input for connecting to the network 3, the handset terminal 1 sends a wireless communication request for performing wireless communication alone. Then, the data is transmitted to base unit terminal 2 that has access authority to network 3. Next, the slave terminal 1 establishes wireless communication with the master terminal 2. After the wireless communication is established, handset terminal 1 determines whether the wireless communication is continuously established. When the slave terminal 1 determines that the wireless communication with the master terminal 2 is cut off, the connection with the network 3 is cut off.

[0007] According to such a terminal processing method, when an operation input for connecting to the network 3 is received by the handset terminal 1, the handset terminal 1 sends a wireless communication request for performing wireless communication to the network 3. Is transmitted to the base unit terminal 2 having the access right, and wireless communication is established with the base unit terminal 2. After the wireless communication is established, the slave terminal 1 determines whether the wireless communication is continuously established, and when it is determined that the wireless communication with the parent terminal 2 is interrupted, the network 3 Is disconnected. When it is determined that the wireless communication with the parent terminal 2 is continued, the connection with the network 3 is permitted or maintained.

[0008] Further, in order to solve the above-mentioned problem, in a terminal processing program for a terminal device to connect to a predetermined network, a handset terminal that does not have an authority to access the network alone is connected to the network. When receiving an operation input for connection to the computer, the computer transmits a wireless communication request for performing wireless communication to a parent terminal having an authority to access the network alone, and the wireless communication with the parent terminal is performed. A wireless communication means for establishing communication; a determination means for determining whether the wireless communication is continuously established after the establishment of the wireless communication; and the slave terminal is connected to the master terminal. When it is determined that the wireless communication is cut off, a terminal processing program is provided which functions as a blocking unit for cutting off the network connection.

If the computer is operated according to such a terminal processing program, the above-described terminal Processing related to the processing method is realized on a computer.

In order to solve the above problem, a terminal processing apparatus for connecting a terminal device to a predetermined network has no access right to the network alone, and a slave terminal is connected to the network. When an operation input for connection is received, a wireless communication request for performing wireless communication is transmitted to a parent terminal having an authority to access the network alone, and the wireless communication is performed with the parent terminal. A wireless communication means to be established; a determination means for determining whether or not the wireless communication is continuously established after the establishment of the wireless communication; and the slave terminal is connected to the master terminal. When the wireless communication is determined to have been interrupted, a terminal processing device is provided that includes a blocking means for blocking the network connection.

[0010] According to such a terminal processing device, the processing related to the terminal processing method described above is realized on the terminal processing device.

The invention's effect

[0011] In the present invention, since the slave unit is configured such that, after establishing wireless communication with the master unit terminal, the network connection is shut down when the wireless communication with the master unit terminal is shut down. It is possible to reliably prevent the terminal from connecting to the network without performing wireless communication with the parent terminal. In other words, it is possible to connect to the network only when the handset terminal is located at a distance that allows wireless communication with the base terminal, and the handset terminal alone connects to the network without the base terminal being in the vicinity. This can be surely prevented. As a result, unauthorized access to the network of the slave terminal can be prevented, and the reliability of the network system can be improved.

[0012] The above and other objects, features and advantages of the present invention are preferred as examples of the present invention, and will become apparent from the following description in conjunction with the accompanying drawings showing embodiments.

Brief Description of Drawings

[0013] FIG. 1 is a schematic diagram showing an invention applied to an embodiment.

FIG. 2 is a diagram showing a system configuration of the embodiment.

FIG. 3 is a diagram illustrating a hardware configuration example of a terminal device.

FIG. 4 is a block diagram showing server functions. FIG. 5 is a block diagram illustrating functions of a terminal device.

[Fig. 6] Fig. 6 is a diagram illustrating functions that are restricted by the states that the terminal device can take.

FIG. 7 is a diagram showing an example data structure of device information.

FIG. 8 is a diagram showing an example data structure of distribution rule information.

FIG. 9 is a diagram showing an example data structure of user distribution rule information.

FIG. 10 is a diagram showing an example data structure of protection monitoring restriction information.

FIG. 11 is a diagram showing an example data structure of user protection monitoring restriction information.

FIG. 12 is a diagram showing an example data structure of secret key information.

FIG. 13 is a diagram showing an example data structure of secret key distribution information.

FIG. 14 is a diagram showing an example data structure of information held by the parent device.

FIG. 15 is a diagram showing an example data structure of information held by a slave unit.

[FIG. 16] A diagram showing an example of the data structure of information held by a guest machine.

FIG. 17 is a sequence diagram showing a first change operation.

FIG. 18 is a flowchart showing a distribution availability confirmation process.

FIG. 19 is a flowchart showing authentication data creation processing by server 100 in step S9.

FIG. 20 is a flowchart showing the network connection operation of the slave unit.

FIG. 21 is a sequence diagram showing a second change operation.

FIG. 22 is a sequence diagram showing a device information table update operation.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

First, the outline of the invention applied to the embodiment will be described, and then the specific contents of the embodiment will be described.

FIG. 1 is a schematic diagram showing an invention applied to the embodiment.

The network system shown in Fig. 1 has a slave terminal 1 that does not have access authority to network 3 alone, and a master terminal that has an electronic certificate (private key) and has access authority to network 3 alone. 2 and network 3 are shown. An electronic certificate for accessing the network 3 is distributed to the handset terminal 1 in advance. [0016] When the handset terminal 1 accepts an operation input for connecting to the network 3, the handset terminal 1 sends a wireless communication request for performing wireless communication with the base terminal 2 to the base terminal 2. Send.

When the master terminal 2 receives this wireless communication request, the master terminal 2 establishes wireless communication with the slave terminal 1. This wireless communication is performed using a communication means that is separate from the communication means with the network 3. This wireless communication is preferably short-range wireless communication.

[0017] After establishing the wireless communication between the child device terminal 1 and the parent device terminal 2, whether or not the child device terminal 1 has the power to continuously establish the wireless communication with the parent device terminal 2 every predetermined period. Judging.

When the slave terminal 1 determines that the wireless communication with the master terminal 2 is interrupted, the slave terminal 1 disconnects the connection with the network 3. In other words, the slave terminal 1 can access the network 3 only while wireless communication with the master terminal is established.

[0018] According to such a terminal processing method, when an operation input for connecting to the network 3 is received by the handset terminal 1, the handset terminal 1 sends a wireless communication request for performing wireless communication to the network 3. Is transmitted to the base unit terminal 2 having the access right, and wireless communication is established with the base unit terminal 2. After the establishment, when the handset terminal 1 determines whether or not the wireless communication has been established continuously, and it is determined that the wireless communication with the base unit terminal 2 is interrupted, the connection with the network 3 is established. Is cut off.

Hereinafter, embodiments of the present invention will be specifically described.

FIG. 2 is a diagram illustrating a system configuration of the embodiment.

The network system is connected to a server 100 via an in-house network 10 composed of a plurality of terminal devices (portable terminal devices) 21, 22, 23 and a power LAN (Local Area Network).

The server 100 is a management server that manages the internal network 10 and performs various processes in response to requests from the terminal devices 21, 22, and 23.

The terminal devices 21, 22, and 23 can communicate (communicate) with each other via the in-house network 10, download necessary data from the in-house network 10, and execute (receive) in-house services. FIG. 2 shows a terminal device 24 that does not belong to the network system. The terminal device 24 can belong to the network system by performing a first change operation described later.

[0022] As a function common to these terminal devices 21 to 24, the terminal devices 21 to 24 can communicate with each other via a mail server or a telephone network (not shown), and with other terminal devices (not shown). Communication is possible via a communication line.

[0023] Further, the terminal devices 21 to 24 include a short-range wireless communication unit capable of performing one-to-one communication with each other. The short-range wireless communication unit will be described later.

Here, each of the terminal devices 21 to 24 can have four states: a parent device, a child device, a guest device, and an initial state device.

[0024] The parent device is a terminal device that can be connected to the in-house network 10 (independently) without performing short-range wireless communication with other terminal devices. The parent machine is created when the server 100 grants the authority as the parent machine to the initial state machine or the child machine. In FIG. 2, the terminal devices 21 and 23 correspond to the parent device, and the terminal devices 21 and 23 are also referred to as “parent devices 21 and 23”, respectively. Furthermore, the master unit that satisfies certain conditions changes the initial state machine to a slave or guest machine by distributing an electronic certificate for authentication (hereinafter referred to as “private key”) to the initial state machine. Or have the authority to change the child machine to the parent machine (hereinafter referred to as “approval authority”). In Fig. 2, the base unit 23 has this function. In the following, the operation to change the initial state machine to the slave or guest is called the first change action, and the action to change the slave to the master is called the second change action. One condition for terminal equipment to connect to the corporate network 10 is that a secret key is distributed.

[0025] The slave unit cannot be connected to the in-house network 10 by simply distributing the electronic certificate, and may connect to the in-house network 10 only during short-range wireless communication with the base unit. It is a terminal device that can execute (receive) in-house services. In addition, the slave unit may be restricted by the time it can be connected to the internal network 10 and the location where it can be connected to the internal network. Also, the slave unit can change its own state to the master unit by performing the second change operation.

[0026] The guest machine is connected to the in-house network 10 by simply distributing the electronic certificate. It is a terminal device that can be connected to the in-house network 10 only during short-range wireless communication means with the parent device and can execute (receive) in-house services. A guest machine cannot be changed to a parent machine unlike a child machine. In Fig. 2, the terminal device 22 corresponds to a guest machine.

The initial state machine is a terminal device that does not belong to the network system, and is given a function as a child machine or a guest machine by authentication of the parent machine. In FIG. 2, the terminal device 24 corresponds to the initial state machine. In the following, the terminal device 24 is referred to as “initial state machine 24”.

[0028] Next, the first secret key distributing operation when the base unit 23 changes the initial state machine 24 to the slave unit will be briefly described.

First, wireless communication is established between the base unit 23 and the initial state machine 24. After communication is established, base unit 23 receives a network connection authentication request (hereinafter simply referred to as “authentication request”) from initial state machine 24. Then, base unit 23 transmits the authentication request to the server. Then, the base unit 23 receives the authentication result from the server: LOO, and distributes the secret key to the initial state machine 24 if the authentication result is correct. As a result, the initial state machine 24 becomes the slave unit 24 and can be connected to the in-house network 10 while establishing the wireless communication with the master unit 23 !.

Next, a hardware configuration of the terminal device will be described. Hereinafter, the hardware configuration of the terminal device 21 will be described as a representative.

FIG. 3 is a diagram illustrating a hardware configuration example of the terminal device.

The terminal device 21 is entirely controlled by a CPU (Central Processing Unit) 101. A random access memory (RAM) 102, a read only memory (ROM) 103, a graphic processor 104, an input interface 105, and a communication interface 106 are connected to the CPU 101 via a bus 107.

The RAM 102 temporarily stores at least part of an OS (Operating System) program application program to be executed by the CPU 101. The RAM 102 stores various data necessary for processing by the CPU 101. The ROM 103 stores an OS and application programs. The ROM 103 stores a program file.

A monitor 11 is connected to the graphic processing device 104. Graphics processing unit 1 04 displays an image on the screen of the monitor 11 in accordance with a command from the CPU 101. The operation section 12 is connected to the input counter face 105. The input interface 105 transmits the signal sent from the operation unit 12 to the CPU 101 via the node 107.

The communication interface 106 is connected to the in-house network 10.

As described above, guest machines and slave units can be connected to the in-house network 10 only during short-range wireless communication with the master unit.

[0034] With the hardware configuration described above, the processing functions of the present embodiment can be realized. Although FIG. 3 shows the hardware configuration of the terminal device, the server 100 can also be realized with the same hardware configuration. In this case, a hard disk drive (HDD) is provided instead of the ROM 103, and a keyboard or a mouse is provided as an operation unit. In order to perform terminal processing in the network system including the terminal devices 21 to 24 and the server 100 having such a hardware configuration, the following functions are provided in the terminal devices 21 to 24 and the server 100.

FIG. 4 is a block diagram illustrating functions of the server.

Server 100 includes authentication unit 31, distribution permission determination unit 32, authentication data creation unit 33, approval determination unit 34, device information storage unit 35, rule information storage unit 36, restriction information storage unit 37, key An information storage unit 38 and a communication unit 39 are included.

[0036] The device information storage unit 35 stores device information that is information related to the terminal device.

The rule information storage unit 36 stores distribution rule information and user distribution rule information. Distribution rule information is information related to the distribution time and distribution location when distributing the private key. User distribution rule information is information that associates distribution rule information with terminal devices.

[0037] The restriction information storage unit 37 stores user protection monitoring restriction information and protection management restriction information. The protection management restriction information is information indicating a restriction given to the slave or guest machine under protection monitoring. The user protection monitoring restriction information is information that associates the protection management restriction information with the terminal device.

[0038] The key information storage unit 38 stores secret key information and secret key distribution information. The private key information is information regarding the electronic certificate and its storage location. The secret key distribution information is information that associates the secret key information with the terminal device. The contents of each piece of information will be described later.

[0039] Upon receipt of the user ID and password from the master unit 23 or the slave unit, the authentication unit 31 refers to the device information stored in the device information storage unit 35 and confirms that the user ID and password are correct. If it is correct, an operation request is transmitted to each part of the server 100 in accordance with the content of the request transmitted to the server 100 together with the user ID and password.

[0040] Upon receiving the determination request from the authentication unit 31, the distribution permission / inhibition determining unit 32 determines distribution permission / inhibition based on the user distribution rule information stored in the rule information storage unit 36, and determines the secret key. If it is determined that distribution is possible, a distribution permission confirmation response that permits distribution of the private key is sent to the base unit 23.

[0041] Upon receiving the authentication data creation request from the authentication unit 31, the authentication data creation unit 33 refers to the secret key information and the secret key distribution information stored in the key information storage unit 38, and corresponds to the user ID. In addition to selecting a secret key, refer to the user protection monitoring restriction information and protection monitoring restriction information, select restriction information according to the user ID, and send the selected secret key and restriction information to the base unit 23 as authentication data. Send.

[0042] Upon receiving the determination confirmation request from the authentication unit 31, the approval determination unit 34 performs an approval confirmation process V, and transmits an approval flag notification as the determination result to the child device to be approved. The communication unit 39 is an interface unit that transmits / receives data to / from each terminal device.

[0043] Next, functions of the terminal devices 21 to 24 will be described.

FIG. 5 is a block diagram illustrating functions of the terminal device.

The functions of the terminal device 23 will be described below representatively.

[0044] The terminal device 23 includes a communication unit 41, a short-range wireless communication unit 42, an authentication control unit 43, a distribution permission control unit 44, a use restriction control unit 45, a status information control unit 46, information A storage unit 47, a secret key storage unit 48, a display unit 49, a position information acquisition unit 50, and a device information change unit 51 are provided.

[0045] FIG. 6 is a diagram illustrating functions that are restricted by the states that the terminal device can take. In FIG. 6, the master unit that can set the terminal in the slave unit to the master unit state is represented by the master unit (with authorization authority), and the terminal in the slave unit can be set to the master unit state. The parent machine that cannot be used is indicated by the parent machine (without authorization). In addition, the functions of terminal devices are indicated by “O”, masked (restricted use), “X” indicates functions that are masked, and “/” indicates functions that are not used!

[0046] As shown in FIG. 6, in the case of the parent machine (parent machine (with authorization authority) and parent machine (without authorization authority)), all functions can be used (use restriction control unit 45 is Not used in the machine). In the case of slave units and guest units, in addition to the mask given to the base unit (no authorization authority), the use of the communication unit 41 is restricted except during short-range wireless communication with the base unit as described above. In the case of the initial state machine, the functions of the communication unit 41 and the use restriction control unit 45 are masked in addition to the slave unit and the guest unit.

[0047] The masks of the initial state machine, guest machine, and child machine are released according to the changed state when the state is changed.

Returning again to FIG.

The communication unit 41 is an interface unit that transmits and receives data to and from the server 100 via the in-house network 10.

When the communication unit 41 receives a cutoff signal described later from the use restriction control unit 45, the communication unit 41 cuts off the connection to the in-house network 10.

[0049] The short-range wireless communication unit 42 has a function of establishing short-range wireless communication between terminal devices. The wireless communication distance is not particularly limited, but is preferably about lm to 5 m, for example. This makes it easy to prevent unauthorized access because the user with the parent device can easily recognize which child device is performing short-range wireless communication with V. In other words, there are users with slave units within the reach of the users with the master unit, so users with slave units can use a terminal by a third party or take data without permission. In the event of suspicious behavior such as connecting an unauthorized computer to the in-house network 10 via the handset terminal, the user with the base unit can immediately recognize. The short-range wireless communication unit 42 is not particularly limited, and examples thereof include wireless communication means using infrared rays. The wireless communication is preferably one-to-one communication. By making communication one-to-one, the master unit communicates with an unspecified number of people Can be prevented, and the parent device side can easily determine the connection destination.

[0050] In the first change operation, authentication control unit 43, upon receiving a distribution permission confirmation response from server 100, transmits an ID and password request request to the initial state machine. Further, when a response to the request request with initial state capability is received, the ID and password are transmitted to the server 100.

The distribution availability control unit 44 transmits a distribution availability confirmation request to the server 100 in the first change operation.

The usage restriction control unit 45 has a function of reading the contents of the protection monitoring usage restriction information.When the own device is connected to the in-house network 10, the protection monitoring use stored in the information storage unit 47 of the own device is used. Based on the restriction information, it is determined whether or not the short distance wireless communication with the base unit is possible. If the short distance wireless communication is possible, the connection to the internal network 10 is continued. When short-range wireless communication is not possible (when short-range wireless communication is blocked), a cut-off signal for cutting off the connection to the in-house network 10 is sent to the communication unit 41.

[0052] When the protection monitoring usage restriction information includes information related to the license expiration date, the usage restriction control unit 45 monitors the license expiration date. When the license expiration date has expired, the information storage control unit 47 Delete the private key stored in.

[0053] Based on the stored information stored in the information storage unit 47, the state information control unit 46 is an initial state machine whether the state of its own terminal is a parent device, a child device, or a guest device Judge whether or not.

[0054] The information storage unit 47 stores various information received by the terminal device, such as a protection monitoring restriction ID, and possessed information indicating the identity and state of the own device.

The secret key storage unit 48 stores the secret key acquired in the first secret key distribution operation!

The display unit 49 displays an IDZPWD input screen or the like on the monitor 11.

The position information acquisition unit 50 has, for example, a GPS (Global Positioning System) and the like, acquires its own position information, and stores it in the information storage unit 47. The device information changing unit 51 includes a GUI (Graphical User Interface), and displays a device information editing screen for changing device information on the monitor 11 during a device information table update operation described later. The device information changing unit 51 changes the approval flag associated with the user ID from “not yet” to “completed”, for example, in order to change a certain terminal to the state power of the child device and the state of the parent device. This function is used when updating device information.

Next, the contents of device information, user distribution rule information, distribution rule information, user protection monitoring restriction information, protection management restriction information, secret key distribution information, and secret key information will be described in order. Each of these pieces of information is stored as a table.

First, device information will be described.

FIG. 7 is a diagram illustrating an example data structure of device information.

The device information table 351 includes columns for a device name, a user ID, a password, an approval flag, a user type, and an authorization authority, and information arranged in the horizontal direction of each column is associated with each other.

In the device name column, a device name for uniquely identifying the terminal device is set.

A user ID for uniquely identifying the user is set in the user ID column. The password for logging in to the terminal device is set in the column for the password.

[0060] In the approval flag column, a flag is set for identifying the master unit and other devices (slave unit, guest unit, initial state unit). “Completed” is set for the base unit, and “Not” is set for other devices.

[0061] In the user type column, "regular user" or "guest user" is set to identify the parent device, the child device, and the guest device. When the terminal device status is set to the parent or slave unit, a regular user is set, and when the terminal device status is set to the guest device, the guest user is set.

[0062] In the approval authority column, the presence / absence of the approval authority when the terminal device is the parent device (when the approval flag is "completed") is set. If the terminal device is a parent device by setting “Yes” in the approval authority column, it must have the approval authority according to the sequence shown in FIG. 22 described later, that is, the right to change the child device state to the parent device state. It becomes.

[0063] By checking the device information table 351, the terminal device with the device name F1 is identified as the parent device because the approval flag power S is “completed”, and the terminal devices with the device names F2 and F3 are Each user type is a legitimate user, and the approval flag is “Not”, so it is a slave unit. It can be seen that the terminal devices with device names F4 and F5 are guest machines because the user type is a guest user. Furthermore, it can be seen that the terminal device with the device name F1 has the approval authority because the approval authority is “Yes”.

Next, distribution rule information will be described.

FIG. 8 shows an example of the data structure of distribution rule information.

The distribution rule information table 361 has columns for distribution rule ID and content, and information arranged in the horizontal direction in each column is associated with each other.

In the distribution rule ID column, a number for identifying the distribution rule ID is set.

In the contents column, contents related to restrictions on the distribution position or distribution time when the master unit distributes the private key to the slave unit, guest unit or initial state unit are set.

[0066] For example, a parent machine assigned with the distribution rule ID “001” distributes a secret key to a child machine, guest machine, or initial state machine during business hours (weekdays from 9:00 to 17:30). The master unit to which the distribution rule ID “002” is assigned can distribute the private key to the slave unit, guest unit or initial state unit when in the Kawasaki factory. Also, the distribution rule ID “099” is set to disable distribution.

[0067] Next, user distribution rule information will be described.

The user distribution rule information table 362 includes columns for user ID, distribution rule ID (1), distribution rule ID (2), and distribution rule ID (3). Are related to each other.

[0068] A user ID for uniquely identifying a user is set in the user ID column.

In the distribution rule ID column, the distribution rule ID set in the distribution rule information table is set. By assigning a distribution rule ID to a user ID, the restrictions on the contents set in the contents field of the distribution rule ID are reflected in the terminal device associated with the user ID. Although FIG. 9 shows an example in which a maximum of three distribution rule ID fields are provided, the present invention is not limited to this, and the distribution rule ID can be set only for the number of distribution rules to be applied to one user ID. Needless to say, you can.

Next, the protection monitoring restriction information will be described. FIG. 10 is a diagram showing an example of the data structure of protection monitoring restriction information.

The protection monitoring restriction information table 371 has a protection monitoring restriction ID field and a content field, and the information arranged in the horizontal direction of each field is associated with each other.

A number for identifying the protection monitoring restriction ID is set in the protection monitoring restriction ID column.

In the contents column, contents related to the restrictions given to the slave or guest machine under the protection monitoring restrictions are set. For example, the slave or guest machine assigned the protection monitoring restriction ID “101” is set to 5 m in the range where the short-range wireless communication unit 42 can communicate with the parent machine, and the protection monitoring restriction ID “106”. The slave or guest machine to which is assigned can be connected to the internal network 10 for only one day. In the present invention, the present invention is not limited to the one shown in the figure, and for example, the use purpose can be set.

The user protection monitoring restriction information table 372 includes columns for user, protection monitoring restriction ID (1), and protection monitoring restriction ID (2), and the user ID and each distribution rule ID are associated with each other. .

[0072] A user ID for uniquely identifying a user is set in the user ID column.

The protection monitoring restriction ID set in the protection monitoring restriction information table 371 is set in the protection monitoring restriction ID column. By assigning the protection monitoring restriction ID to the user ID, the restriction on the contents set in the distribution rule ID contents column is reflected in the terminal device associated with the user ID. Although FIG. 11 shows an example in which two protection monitoring restriction ID fields are provided, the number of protection monitoring restriction IDs is not limited to this, and the number of protection monitoring restriction IDs to be applied to one user ID must be set. Needless to say, you can.

Next, secret key information will be described.

FIG. 12 is a diagram showing an example of the data structure of the secret key information.

The secret key information table 381 has columns for secret key ID, data type, and storage location, and information arranged in the horizontal direction in each column is associated with each other.

[0074] In the secret key ID column, a secret key ID for uniquely identifying the secret key is set. A secret key is set in the data type column. As the private key, an electronic certificate necessary for secure communication such as a CA (Certificatio n Authority) certificate, a server certificate, or a client certificate is set.

[0075] Although not shown in Fig. 12, in addition to the data types described above, various data necessary for secure communication such as a server public key and a client secret key can be set as the data type. .

In the storage location column, the storage location of the secret key in the server 100 is set.

Next, secret key distribution information will be described.

FIG. 13 is a diagram illustrating an example of the data structure of the secret key distribution information.

The secret key distribution information table 382 has columns for user and secret key ID, and information arranged in the horizontal direction in each column is associated with each other.

A user ID for uniquely identifying the user is set in the user ID column.

In the secret key ID column, the secret key ID set in the secret key information table 381 is set. Multiple private key IDs can be set for one user ID. As a result, the terminal device associated with the user ID is associated with the secret key of the terminal device.

Next, the retained information stored in each information storage unit 47 of the parent device, the child device, and the guest device will be described. Different holding information is stored in the parent device, the child device, and the guest device. FIG. 14 is a diagram showing an example data structure of information held by the parent device.

[0080] The possession information table 471 of the parent device has columns of possession information names and contents, and the information arranged in the horizontal direction of each column is associated with each other.

In the possessed information name column, the type of information provided in the parent device is set. The contents of the server connection destination store the IP address and port number required to connect to the corporate network 10. The contents of the server connection destination may be set in advance or acquired from the server 100 during the first change operation.

[0081] The user ID of the user who uses the parent device is stored in the content of the own user ID. The password corresponding to the user ID is stored in the contents of the own user password. The content of the status information is set to “parent” which is its own status. Information for checking distribution rules Information necessary for confirmation of distribution rules is stored in the contents of the information. In FIG. 14, the position information (latitude and longitude) acquired by the position information acquisition unit 50 is stored.

FIG. 15 is a diagram showing an example of the data structure of the information held by the slave unit.

Note that the description of matters similar to those in FIG. 14 is omitted.

In the possession information table 472 of the slave unit, a protection monitoring restriction ID column is provided. The protection monitoring restriction ID obtained by the first change operation is stored in the contents of the protection monitoring restriction ID.

FIG. 16 is a diagram showing an example data structure of information held by the guest machine.

In the guest machine possession information table 473, the server connection destination and distribution rule confirmation information fields are omitted.

Note that the items in FIG. 16 are the same as those in FIG. 14 and FIG.

Next, the first change operation for changing the initial state machine to the state of the slave or guest machine will be described by taking as an example the case where the base unit 23 distributes the secret key to the initial state machine 24.

FIG. 17 is a sequence diagram showing a first change operation.

First, when the user of the initial state machine 24 operates the operation unit 12 or the like, the short-range wireless communication unit 42 of the initial state machine 24 transmits a short-range wireless communication request to the base unit 23 (step S1). In response to this request, the short-range wireless communication unit 42 of the base unit 23 transmits a response notification to the initial state machine 24 (step S2). As a result, short-range wireless communication is established between base unit 23 and initial state machine 24. Thereafter, in the first change operation, data transmission / reception is performed between the parent device 23 and the initial state device 24 using short-range wireless communication. FIG. 17 illustrates the case where the initial state machine 24 side first transmits a short-range wireless communication request to the base unit 23, but the base unit 23 side first sends the short-range wireless communication request to the initial state machine 24 side. You may send it.

[0086] In this state, the distribution permission / inhibition control unit 44 of the master unit 23 has a distribution permission confirmation request for confirming whether the distribution key can be distributed to the initial state machine. The information is transmitted together with the user ID, password, and distribution rule confirmation information stored in the information table 471 (step S3).

When server 100 receives the distribution permission confirmation request, distribution permission determination unit 32 of server 100 Power Master 23 executes a process for confirming whether or not it is possible to distribute the private key to initial state machine 24 (Step S4), and sends a distribution confirmation response as a result of the process to Master 23 (Step S5). ). The distribution availability confirmation process will be described later.

[0088] As a result of the fact that the master unit 23 receives the distribution permission confirmation response, if it is determined that the own unit cannot distribute the secret key to the initial state machine, the first change operation is terminated. On the other hand, if it is determined that the distribution key can be distributed to the initial state machine, the authentication control unit 43 of the base unit 23 sends a request for requesting a user ID and password to the initial state machine 24. (Step S6). When the initial state machine 24 receives this request, it transmits the user ID and password to the parent machine 23 (step S7). In step S7, the initial state machine 24 may automatically transmit the user ID and password stored in the possession information table 473 to the main unit 23, and the user of the initial state machine 24 sends the operation unit 12 to the operation unit 12. It may be sent to the main unit 23 by typing the user ID and password.

When authentication control unit 43 of base unit 23 receives the user ID and password of initial state machine 24, it transmits the user ID and password to server 100 (step S8). Upon receiving the user ID and password of the initial state machine 24, the server 100 creates data corresponding to the user ID and performs transmission data determination processing (step S9). Then, authentication data including the user type, the secret key, and the protection monitoring restriction ID is transmitted to the base unit 23 as a processing result (step S10). When receiving the authentication data, base unit 23 transmits the authentication data to initial state machine 24 (step Sl l). When the initial state machine 24 receives the authentication data, the user type and the protection monitoring restriction ID of the authentication data are stored in the information storage unit 47, the secret key is stored in the secret key storage unit 48, and the authentication data The user type is extracted, and the contents in the status information column of the retained information are updated (step S12). Thereafter, the status information control unit 46 reads the retained information (step S13), and if the content described in the status information column of the retained information is an authorized user, the initial state machine 24 is changed to a slave. If the content described in the status information column of the possessed information is a guest user, change the initial state machine 24 to a guest machine. This completes the first change operation.

In the following description, the initial state machine 24 that has become a slave unit will be described as a slave unit 24a.

Next, the distribution permission confirmation process executed by the server 100 in step S4 will be described. The

FIG. 18 is a flowchart showing the distribution availability confirmation process.

First, the authentication unit 31 determines whether or not authentication is possible (step S21). Specifically, refer to the device information table 351 to check whether the received user ID and password are correct, and refer to the approval flag column and approval authority column of the device information table 351. Based on whether or not the transmission destination of the distribution confirmation request is the parent device and the user distribution rule information table shown in FIG. 9, the user associated with the parent device can distribute. Judgment is made. If all of these are met, it is judged that authentication is possible. If authentication is not possible (No in step S21), the authentication unit 31 does not allow the master unit 23 to distribute the distribution key to the initial state machine 24. (Step S22), and the distribution permission / inhibition confirmation process ends. On the other hand, if authentication is possible (Yes in step S21), the distribution permission determination unit 32 references the user distribution rule information table 362 and determines whether or not the distribution rule corresponding to the received user ID is “000” ( Step S23). When the distribution rule is “000” (Yes in step S23), the distribution permission determination unit 32 permits the parent device 23 to distribute the distribution key to the initial state machine 24 (distribution permission permitted). A confirmation response is transmitted (step S25), and the distribution permission confirmation process is terminated. When the distribution rule is not “000” (No in Step S23), the distribution permission determination unit 32 sets the content of the distribution rule confirmation information transmitted from the base unit 23 in the user distribution rule information table 362. It is determined whether or not the power of the distribution rule ID is satisfied (Step S24). Contents of distribution rule confirmation information If the contents of the distribution rule ID are not satisfied (No in step S24), the process proceeds to step S22, and the distribution permission determination unit 32 receives the distribution permission confirmation response indicating that distribution is not possible. Machine 23 (step S 22), and the distribution permission confirmation process is terminated. On the other hand, if the content of the distribution rule confirmation information satisfies the content of the distribution rule ID (Yes in step S24), the process proceeds to step S25, and the distribution permission determination unit 32 receives the distribution permission confirmation response as a parent. Machine 23 (step S 25), and the distribution permission confirmation process is terminated.

Next, the transmission data determination process will be described.

Figure 19 shows the flow of authentication data creation processing by the server 100 in step S9. It is a chart.

[0093] First, the authentication unit 31 refers to the device information table 351, and determines whether or not the transmitted user ID and password (hereinafter referred to as the corresponding user ID and corresponding password) are set in the device information table 351. (Step S31). If the corresponding user ID and the corresponding password are not set (No in step S31), it is determined that the corresponding user ID and the corresponding password are not correct, and the transmission data determination process is terminated. On the other hand, when the corresponding user ID and the corresponding password are set (Yes in step S31), the authentication data creation unit 33 extracts the user type set in the user type column of the device information table 351 (step S32).

Next, the authentication data creation unit 33 refers to the secret key distribution information table 382, obtains the secret key ID associated with the corresponding user ID, and then stores the secret key information table 381. Refer to the storage location where the private key ID is stored to retrieve the private key (step S33).

[0095] Next, the authentication data creation unit 33 refers to the protection monitoring restriction information table 371 and obtains the protection monitoring restriction ID associated with the user ID, and then obtains the user protection monitoring restriction. With reference to the information table 372, the contents of the protection monitoring restriction ID are extracted as restriction information (step S34).

[0096] Next, the authentication data creation unit 33 creates authentication data including the user type extracted in step S32, the secret key extracted in step S33, and the restriction information extracted in step S34 (step S35). ). This completes the authentication data creation process.

Next, the connection operation (network connection operation) of the slave unit 24a and the guest unit 22 to the in-house network 10 will be described. The following describes the network connection operation of the slave unit 24a as a representative.

First, the use restriction control unit 45 determines whether or not the own device (slave device 24a) can connect to the in-house network 10 based on the content of the protection monitoring restriction ID stored in the information storage unit 47. (Step S41). If the own unit (slave unit 24a) cannot connect to the internal network 10 (No in step S41), the network connection operation is terminated. Own machine (child machine When 24a) can connect to the in-house network 10 (Yes in step S41), the short-range wireless communication unit 42 searches for the parent device (step S42). When one of the parent devices (here, the parent device 23) is found, short-range wireless communication with the parent device 23 is established (step S43). After that, log in to the internal network 10 and start executing the internal service (step S44). After the communication is established, the use restriction control unit 45 sequentially determines, for example, at a predetermined time interval (for example, every 5 seconds) based on the protection monitoring restriction ID in the holding information table 472 of the child device 24a. It is determined whether or not the wireless communication with the device is continuously established (step S45). If the handset 24a is establishing short-range wireless communication with the base unit 23 (Yes in step S45), it is determined whether or not an in-house service end instruction is received according to an instruction from the operation unit 12 of the user (step S46). ). Receive service termination instructions! If yes (No in step S46), move to step S44 and continue to execute the internal service. If a service termination instruction is received (Yes in step S46), the establishment of short-range wireless communication is released (step S47), and the service execution operation is terminated.

[0099] On the other hand, when the slave unit 24a is not establishing short-range wireless communication with the master unit 23 (No in step S45), the use restriction control unit 45 confirms the content of the protection monitoring restriction ID in the possession information table 472. Then, it is determined whether or not the reason for disconnecting the short-range wireless communication is related to the license expiration (step S48). If the reason for disconnection is not related to the license expiration date, such as “102” (No in step S48), the service execution operation is terminated. On the other hand, if it is related to the license expiration date, such as the reason for disconnection S “106” or “107” (Yes in step S48), the secret key stored in the secret key storage unit 48 is deleted (step S49). End the service execution operation. In this case, the status of the slave unit 24a changes to the initial state machine.

[0100] In the present embodiment, it is determined in step S41 whether or not the slave unit 24a can be connected to the in-house network 10 in advance. However, the present invention is not limited to this. If it is determined whether or not the slave unit 24a cannot connect to the internal network 10, the short-range wireless communication with the slave unit 24a is not established. You can configure it.

[0101] Since the present invention operates in this way, the slave terminal cannot connect to the power network while establishing short-range wireless communication with the master terminal. Next, a second change operation for changing the slave unit to the master unit state will be described.

[0102] The second change operation is performed during the network connection operation of the slave unit 24a.

FIG. 21 is a sequence diagram showing the second change operation.

First, the status information control unit 46 of the slave unit 24a transmits an approval request including the user ID and password to the server (step S51).

[0103] Next, when the server 100 receives the approval request for the slave unit 24a, the authentication unit 31 refers to the device information table 351 and confirms whether or not the received user ID and password are correct. (Step S52). If the user ID and password are correct, the approval judgment unit 34 refers to the approval flag column corresponding to the user ID in the device information table 351, reads the value, and sends it to the slave unit 24a as an approval response. Send (step S53).

[0104] When the slave unit 24a receives the approval response, the state information control unit 46 reads the approval response. If the response is not yet completed, the second change operation is terminated. On the other hand, if it is “completed”, the status information column of the possession information table is rewritten to “parent” (step S 54). As a result, the slave unit 24a is converted to the master unit 24b. This completes the second change operation.

Next, the device information table update operation in which the parent device 23 (the parent device having the authorization authority) updates the device information table 351 stored in the device information storage unit 35 of the server 100 will be described. This operation can be performed at an arbitrary timing.

In the sequence shown in FIG. 21, the slave unit 24a simply refers to the information of the approval flag registered in the device information table 351 of the server 100, and the slave unit 24a is in the status of the slave unit. In order to change the power to the status of the main unit, it is necessary to change the approval flag information registered in the device information table 351 from “not yet” to “done” as a separate step in advance. There is. The process for updating the information in the device information table 351 is the sequence shown in FIG.

First, the base unit 23 sends an approval request to the server 100 together with the V and the user ID and password of the user that have been changed from the handset state to the base unit state (step S61).

[0108] When the server 100 receives the user ID and password, the authentication unit 31 refers to the device information table 351 to check whether the received user ID and password are correct. (Step S62). If the user ID and password are correct, the approval determination unit 34 transmits the current device information to the parent device 23 (step S63). When the main device 23 receives the device information, the device information changing unit 51 displays the device information editing screen on the monitor 11 (step S64). After that, when the device information is edited (rewritten) by the user, for example, when the approval flag information is changed from “not yet” to “done”, the device information changing unit 51 Information is created and stored in the information storage unit 47 (step S65). After that, when there is an instruction to transmit updated device information by operating the operation unit ₁₂ of the user, the device information changing unit 51 transmits the updated device information to the server 100 (step S66). When the server 100 receives the updated device information, the approval determination unit 34 reflects the updated device information in the device information table 351 (step S67). This completes the device information table update operation.

If the slave terminal corresponding to the user ID whose information of the approval flag has been changed from the “not yet” state to the “done” state by the sequence shown in FIG. 22 performs the sequence shown in FIG. It will be transferred to the machine terminal.

[0110] In the present embodiment, the case where base unit 23 performs the device information table update operation has been described. However, the present invention is not limited to this, and for example, a terminal to which authority as a base unit is to be given in advance. When the approval flag is to be set to “done” for a device, a user having approval authority may directly operate the server 100 to update the device information table 351.

[0111] As described above, according to the network system of the present embodiment, after the short-range wireless communication between the child device 24a and the parent device 23 is established, the child device 24a can be connected to the in-house network 10. Thereafter, the slave unit 24a determines whether or not the short-range wireless communication can be continuously used with the base unit 23, and if it is not usable (the short-range wireless communication with the base unit 23 is not performed). If it is not established, a cut-off signal for cutting off the connection communication to the internal network 10 is sent to the communication unit 41, and the communication unit 41 cuts off the connection to the internal network 10. As a result, it is possible to reliably prevent the slave unit 24a from connecting to the in-house network 10 without performing short-range wireless communication with the master unit 23. That is, it is possible to reliably prevent the slave unit 24a from being connected to the in-house network 10 alone (in a range where the master unit 23 does not exist in the vicinity). This It is difficult for the users of guest machine 22 and child machine 24a to hide from the user of parent machine 23 and use the internal network 10, so unauthorized access to the internal network 10 of guest machine 22 and child machine 24 can be easily prevented. can do. As a result, the safety (reliability) of the network system can be improved.

[0112] Also, the protection monitoring restriction ID is set to the slave unit 24a when the secret key is distributed, so that the short-range wireless communication between the slave unit 24a and the master unit 23 can be established within the setting range of the protection monitoring restriction ID. Therefore, it is possible to easily restrict the connection of the slave unit 24a to the in-house network 10 using the protection monitoring restriction ID. In addition, the server 100 can easily manage protection monitoring restrictions that should be set in the slave unit 24a.

[0113] After the short-range wireless communication is established, the use restriction control unit 45 of the slave unit 24a performs the short-range wireless communication with the base unit 23 based on the protection monitoring restriction ID stored in the information storage unit 47. If the communication unit 41 blocks the connection to the internal network 10, the slave unit 24a is connected to the internal network 10. However, if it falls outside the scope of protection monitoring restrictions (out of the position and time set in the protection monitoring restriction ID), the connection of the slave unit 24a to the corporate network 10 must be restricted securely. It is out.

Also, by performing the first changing operation, the initial state machine can be changed to the slave or guest machine without the secret key being known to a third party outside the company. In addition, by performing the device information table update operation and the second change operation, it is possible to change the child device that makes the private key known to a third party outside the company to the parent device.

[0115] Further, in the present embodiment, the case where the initial state machine is changed to a slave unit, guest machine, or parent unit has been described. However, the present invention is not limited to this, and the initial state machine may be changed to the parent unit. It is possible to change the state arbitrarily by changing the master unit to the slave unit or guest unit, or changing the slave unit or guest unit to the initial state unit. As a result, for example, when the user of the parent device or child device loses the portable terminal or takes it outside, the device information of the lost portable terminal on the server side can be lost by rewriting it to the initial state. It is possible to prevent unauthorized in-house access by a taken-out terminal, so that the reliability of the network system can be further improved. [0116] In the present embodiment, before the server performs the distribution permission confirmation process, the power of the parent device transmitting the position information in advance is not limited to this. For example, the server is performing the distribution permission confirmation process. Send the location information transmission request to the parent device, and the parent device will be configured to send the location information of its own device to the server.

[0117] Also, in the present embodiment, a mobile terminal device has been described as an example of a terminal device. However, the present invention is not limited to this, and the present invention can be applied to other terminal devices such as a notebook PC (Personal Computer) and a PDA (Personal It can also be applied to Digital Assistants).

[0118] The power described in detail above for the preferred embodiment of the present invention The present invention is not limited to the specific embodiment.

Note that the above processing functions can be realized by a computer (by causing the computer to execute a predetermined terminal processing program). In that case, a program that describes the processing contents of the functions that the terminal device should have is provided. By executing the program on a computer, the above processing functions are realized on the computer. The program describing the processing content can be recorded on a computer-readable recording medium. Examples of the computer-readable recording medium include a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory. Examples of the magnetic recording device include a hard disk device (HDD), a flexible disk (FD), and a magnetic tape. Examples of the optical disk include a DVD (Digital Versatile Disc), a DVD—RAM (Random Access Memory), a CD—ROM (Ompact Disc Read Only Memory), a CD R (Recordable) ZRW (Rewritable), and the like. Examples of the recording medium include an MO (Magneto-Optical disk).

[0119] When distributing a program, for example, a DVD or CD on which the program is recorded

Portable recording media such as ROM are sold. It is also possible to store the program in a storage device of the server computer and transfer the program to other computers via the network.

[0120] A computer that executes a terminal processing program stores, for example, a program recorded on a portable recording medium or a program transferred with server computer power in its own storage device. And the computer reads the program of its own storage device Execute the process according to the program. The computer can also read the program directly from the portable recording medium and execute processing according to the program. In addition, each time the server computer program is transferred, the computer can sequentially execute processing according to the received program.

[0121] The above merely illustrates the principle of the present invention. In addition, many variations and modifications are possible to those skilled in the art, and the invention is not limited to the precise configuration and application shown and described above, but all corresponding variations and equivalents are It is regarded as the scope of the present invention by the claims and their equivalents.

Explanation of symbols

[0122] 1 Slave unit

2 Master terminal

3 network

10 Internal network

21, 23 Terminal equipment (master unit)

22 Terminal equipment (guest machine)

24 Terminal equipment (initial state machine)

24a Terminal equipment (slave unit)

31 Authentication Department

32 Distribution decision section

33 Authentication data generator

34 Approval judgment section

35 Device information storage

36 Rule information storage

37 Restriction information storage

38 Key information storage

39, 41 Communication Department

42 Short-range wireless communication unit

43 Authentication control unit Distribution availability control unit Usage restriction control unit Status information control unit Information storage unit Private key storage unit Display unit Location information acquisition unit Device information change unit Server

Claims

The scope of the claims

[1] In a terminal processing method for a terminal device to connect to a predetermined network,

When a handset terminal that does not have access authority to the network alone accepts an operation input to connect to the network,

The slave terminal transmits a wireless communication request for performing wireless communication to a parent terminal having access authority to the network by itself,

The slave device establishes the wireless communication with the master device terminal,

After establishing the wireless communication, determine whether the wireless communication is continuously established, and determine whether or not the slave terminal is disconnected from the base station terminal, A terminal processing method, wherein the network connection is blocked.

[2] The terminal processing method according to claim 1, wherein the wireless communication between the child device terminal and the parent device terminal is one-to-one communication.

[3] The terminal processing method according to claim 1, wherein wireless communication between the child device terminal and the parent device terminal is short-range wireless communication.

[4] Restriction information in which a restriction on a position or time at which communication with the network is disabled is stored in the slave terminal in advance, and an operation input for the slave terminal to connect to the network is stored. The mobile device terminal determines whether or not the mobile device terminal is within a set range of the restriction information upon receiving the request, and transmits the wireless communication request if the mobile device terminal is used within the set range. The terminal processing method according to claim 1 in the range.

[5] When the slave unit is out of the position or time range set in the restriction information in a state where the wireless communication is established with the master unit terminal, 5. The terminal processing method according to claim 4, wherein the wireless communication with the terminal is cut off.

[6] The handset terminal transmits an approval request to a server in which presence or absence of access authority is stored, and receives the approval notice from the server, the other handset terminal can be accessed as the base terminal alone. Waiting for the wireless transmission request from the slave terminal, and establishing the wireless communication with the other slave terminal when receiving the wireless transmission request from another slave terminal. The terminal processing method according to claim 1, wherein the terminal processing method is characterized.

[7] In a terminal processing program for a terminal device to connect to a predetermined network, when a handset terminal that does not have access authority to the network alone receives an operation input to connect to the network,

Computer

A wireless communication means for transmitting a wireless communication request for performing wireless communication alone to a parent terminal having an authority to access the network, and establishing the wireless communication with the parent terminal;

A determination means for determining whether or not the wireless communication is continuously established after the establishment of the wireless communication;

When the slave terminal determines that the wireless communication with the master terminal has been blocked, a blocking means for blocking the network connection;

A terminal processing program that is made to function as:

[8] In a terminal processing device for a terminal device to connect to a predetermined network,

When a handset terminal that does not have access authority to the network alone accepts an operation input to connect to the network, a base station terminal that has access authority to access the network by sending a wireless communication request for wireless communication alone Wireless communication means that establishes the wireless communication with the parent terminal,

When the slave terminal determines that the wireless communication with the master terminal is interrupted, a blocking means for blocking the network connection;

A terminal processing device comprising: