JP4535946B2 - Portable terminal device and use restriction system - Google Patents

Description

  The present invention relates to a portable terminal device and a use restriction system that can restrict the use of various devices such as a mobile phone, a portable information terminal, and a personal computer when the device is misplaced or stolen.

In recent years, electronic devices such as mobile phones, PDAs, and personal computers are widely used as communication means and information processing means. However, there are many cases of loss or theft due to misplacement, etc., and there is an increased risk of unauthorized use by others and leakage of personal information such as phone books. Accordingly, technology to increase security is increasingly important It is becoming.
As a solution, the distance between the mobile terminal device and the key is more than a certain distance by communicating (polling) between the mobile terminal device and a wireless communication unit (hereinafter also referred to as “key”) that transmits an identification signal. Then, an invention is disclosed in which the mobile terminal device automatically locks and an alarm is issued on the key side (see, for example, Patent Document 1).
This use restriction device is composed of an identification signal transmission unit and a use restriction release unit provided integrally with a device subject to use restriction, and both units are provided with a receiver and a receiver, and an identification code signal from the transmission unit is received by the release unit. It receives and outputs a use restriction release signal based on the signal, and if there is a confirmation code signal sent back in the transmission unit, it will be in a normal state, and if both units are separated by a certain distance or more, the release level will decrease, and the release unit will The release signal is stopped and a warning is given to the transmission unit.
Japanese Patent No. 2931276 (FIG. 3)

  However, in the invention disclosed in Patent Document 1, if the key is lost, the portable terminal device is prohibited from being used temporarily. This may be just security considerations, but in the actual usage situation, the key is lost, the key is damaged (dropped into the toilet, etc.), the key battery is dead, or the key has been left at home. Therefore, it is desirable that a mechanism that can cope with such a situation is mounted on the mobile terminal device. In addition, a systematic mechanism including a related key management center is also required.

  The present invention has been made in order to solve the conventional problems, and aims to provide a use restriction system capable of maintaining the security of the mobile terminal device and quickly solving when the key is lost or the like. To do.

The use restriction system according to the present invention is a use restriction system comprising a mobile terminal device and a wireless communication unit for enabling the mobile terminal device to operate, wherein the mobile terminal device and the wireless communication unit When the authentication using the authentication ID can not be established, only a specific function including communication with the key management center can be used .

  According to the present invention, when the wireless communication unit cannot be authenticated due to a certain distance from the mobile terminal device or the like, the wireless communication unit can be used by limiting only to a predetermined function. It is possible to prevent the person who has picked up or obtained the mobile terminal device from using it illegally and to protect the information input to the mobile terminal device.

DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments according to the present invention will be described in detail with reference to the drawings.
FIG. 1 is an explanatory diagram showing a general configuration according to the use restriction system of the present invention.
As shown in FIG. 1, the use restriction system 10 includes a mobile terminal device 20 and a wireless communication unit 30 (hereinafter referred to as “key”) for enabling the mobile terminal device 20 to operate. . The portable terminal device 20 and the key 30 communicate with each other (polling) so that the portable terminal device 20 can be used once authentication is established. Therefore, when authentication cannot be established, for example, when the key 30 is separated from the mobile terminal device 20 by more than a predetermined amount, when the key is lost, when the key is damaged such as dropping into the toilet, or when the key is out of battery, etc. Is designed to limit security by restricting the use of the mobile terminal device 20 or sounding an alarm on the key 30 side.

  Normally, a master key is attached together with the portable terminal device 20 at the time of purchase. However, at the time of use, the portable terminal device 20 is used while holding a copy key copied from the master key. Hereinafter, when “key” is simply described, both “master key” and “copy key” are indicated.

  With the above configuration, when the wireless communication unit 30 cannot be authenticated due to a certain distance from the mobile terminal device 20 or the like, the wireless communication unit 30 can be used by limiting only to a predetermined function. For example, it is possible to prevent a person who has picked up or illegally obtained the mobile terminal device 20 from using it illegally and to protect information input to the mobile terminal device. Therefore, security can be maintained and an immediate solution can be achieved when the key is lost.

Next, the use restriction system 11 according to the first embodiment will be described.
2 is a block diagram showing the configuration of the key 31 that is a wireless communication unit, FIG. 3 is a block diagram showing the configuration of the mobile terminal device 21, and FIG. 4 is a flowchart showing the operation of the first embodiment.
Referring to FIG. 1 to FIG. 3, a use restriction system 11 including a mobile terminal device 21 and a key 31 that is a wireless communication unit for enabling the mobile terminal device 21, the mobile terminal device When the authentication between the key 21 and the key 31 cannot be established, only a predetermined specific function can be used for a certain period of time, and after that, it cannot be used at all.

As shown in FIG. 2, the key 31 includes a wireless authentication unit 311, an alarm circuit unit 312, an external output unit 313 such as a speaker, LED, and liquid crystal. The wireless authentication unit 311 includes a transmission / reception unit 311 a, A wireless authentication unit control unit 311b and an authentication ID storage unit 311c are provided.
As shown in FIG. 3, the mobile terminal device 21 includes a wireless communication unit 231, a memory 251, and a control unit 215. The wireless communication unit 231 includes a transmission unit 231 a, a reception unit 231 b, and transmission / reception switching. A portion 231c is provided.
Here, the wireless communication unit 231 is a part that performs voice communication and packet communication such as PDC, W-CDMA, CDMA2000, and PHS. Since this embodiment is an example in which the mobile terminal device 20 is applied to a mobile phone, the communication function of the mobile phone body is shown, but the mobile terminal device 20 is a PDA, notebook PC, MP3 player, HDD player. In this case, this part becomes a main body function part of these portable devices.
In addition, a wireless authentication unit 211, an alarm circuit unit 212, an external output unit 213, and a use restriction device 214 are further provided. The wireless authentication unit 211 includes a transmission / reception unit 211a, an authentication ID storage unit 211b, and a signal level detection unit 211c, and includes a wireless authentication control unit 211d that controls them. The use restriction device 214 defines a function 214a that can be used when authentication is established, a function 214b that cannot be used when authentication is not established, a function 214c that can be used at all times, and the like. A battery 216 as a power source is also provided.

  Therefore, as shown in FIG. 4, when starting (step SS), the wireless authentication unit 311 in the key 31 and the wireless authentication unit 211 of the portable terminal device 21 authenticate wirelessly (step S11), and authentication is established. If it can, it can be used normally (step S12). In this case, as an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312, and sounds, displays, lights, etc. by an external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. The mobile terminal device user may be notified that the authentication has been established, or may not be notified in particular. As for the operation on the mobile terminal device 21 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 and is carried by the external output unit 213 such as a speaker, a liquid crystal display unit, an LED, etc. The terminal device user may or may not be notified that the authentication has been established. On the other hand, a signal is transmitted from the wireless authentication unit 211 to the use restriction device 214, and the function 214a that can be used when authentication is established can be used. Alternatively, the function 214a that can be used when authentication is established may be enabled by not transmitting a signal from the wireless authentication unit 211 to the use restriction device 214.

On the other hand, when the authentication cannot be established, use of the mobile terminal device 21 is restricted (step S13). As an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312 to sound an alarm, perform display, turn on the light, etc. in the external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. To inform the user of the mobile terminal device that the authentication has not been established. Further, as an operation on the mobile terminal device 21 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 to sound and display an alarm in the external output unit 213 such as a speaker, a liquid crystal display unit, and an LED. Lights up and informs the mobile terminal device user that authentication is not established, while a signal is sent from the wireless authentication unit 211 to the use restriction device 214, and the function 214b that cannot be used when authentication is not established cannot be used. Only the specific function 214c becomes available (step S14), and the process ends (step SE).
Here, as specific functions that can be used only for a certain period of time, for example, only voice calls can be received, only mails can be received, calls can be made only to specific phone numbers (registered phone numbers), specific emails Mail can only be sent to an address, only a specific URL can be accessed, and some of these functions may be possible.

Next, the use restriction system 12 according to the second embodiment will be described.
FIG. 5 is a block diagram showing the configuration of the mobile terminal device 22, and FIG. 6 is a flowchart showing the operation of the second embodiment. In addition, the same code | symbol is attached | subjected to the site | part which is common in 1st Embodiment mentioned above, and the overlapping description is abbreviate | omitted.
Referring to FIGS. 5 and 6, the use restriction system 12 includes a mobile terminal device 22 and a key 31 which is a wireless communication unit for enabling the mobile terminal device 22, and the mobile terminal If the authentication between the device 22 and the key 31 cannot be established, it cannot be used at all, and only when a predetermined password is entered, it can be limited to a specific function. It becomes.

As shown in FIG. 5, the mobile terminal device 22 includes a wireless communication unit 231, a memory 251, and a control unit 215. The wireless communication unit 231 includes a transmission unit 231a, a reception unit 231b, and a transmission / reception switching unit 231c. It has. In addition, a wireless authentication unit 211, an alarm circuit unit 212, and an external output unit 213 are provided, and a use restriction device 221, a password authentication unit 222, and a key input unit 223 are further provided. The wireless authentication unit 211 includes a transmission / reception unit 211a, an authentication ID storage unit 211b, and a signal level detection unit 211c, and includes a wireless authentication control unit 211d that controls them. The usage restriction device 221 defines a function 221a that can be used when authentication is established, a function 221b that cannot be used when authentication is not established, a function 221c that can be used only when password authentication is established, and the like. A battery 216 as a power source is also provided.
Since the key 31 has the same configuration and operation as those of the first embodiment described above, description thereof will be omitted.

  Therefore, as shown in FIG. 6, when starting (step SS), the wireless authentication unit 311 in the key 31 and the wireless authentication unit 211 of the mobile terminal device 22 authenticate wirelessly (step S21), and authentication is established. If it can, it can be used normally (step S22). In this case, as an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312, and sounds, displays, lights, etc. by an external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. The mobile terminal device user may be notified that the authentication has been established, or may not be notified in particular. As for the operation on the portable terminal device 22 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 and is carried by the external output unit 213 such as a speaker, a liquid crystal display unit, an LED, etc. The terminal device user may or may not be notified that the authentication has been established. On the other hand, a signal is transmitted from the wireless authentication unit 211 to the use restriction device 221, and the function 221 a that can be used when authentication is established can be used. Alternatively, the function 221a that can be used when authentication is established may be usable by not transmitting a signal from the wireless authentication unit 211 to the use restriction device 221.

  On the other hand, if the authentication cannot be established, the use of the mobile terminal device 22 is restricted (step S23), and authentication using a password is performed (step S24). As an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312 to sound an alarm, perform display, turn on the light, etc. in the external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. To inform the user of the mobile terminal device that the authentication has not been established. Further, as an operation on the mobile terminal device 22 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 to sound and display an alarm in the external output unit 213 such as a speaker, a liquid crystal display unit, and an LED. While turning on and informing the user of the mobile terminal device that authentication has not been established, a signal is sent from the wireless authentication unit 211 to the use restriction device 221 so that the function 221b that cannot be used when authentication is not established cannot be used.

Thereafter, the user of the mobile terminal device 22 inputs a predetermined password from the key input unit 223 (step S25). When authentication is established by the password authentication unit 222, the specific function 221c can be used only when the password authentication is established (step S26), and the process ends (step SE). Further, the fact that the authentication has been established may be output to the external output unit 213 or may be terminated.
On the other hand, when the password authentication is not established, the screen returns to the password input screen and waits for the user to input the password.
Here, as specific functions that can be used only for a certain period of time, for example, only voice calls can be received, only mails can be received, calls can be made only to specific phone numbers (registered phone numbers), specific emails E-mails can be sent only to addresses, only specific URLs can be accessed, games, GPS, camera functions, radio functions, etc., or some of these functions are possible. It should be noted that the registration number can be limited to being an emergency call such as 110 or 119, or the telephone number of the key management center. It is also possible to set restrictions such that the mail address is addressed to the key management center, or that the specific URL is the URL of the key management center.

Next, the use restriction system 13 according to the third embodiment will be described.
FIG. 7 is a block diagram showing the configuration of the portable terminal device 23, FIG. 8 is a block diagram showing the configuration of the key management server, and FIG. 9 is a flowchart showing the operation of the third embodiment. In addition, the same code | symbol is attached | subjected to the site | part which is common in 1st, 2nd embodiment mentioned above, and the overlapping description is abbreviate | omitted.
Referring to FIGS. 7 to 9, the use restriction system 13 includes a mobile terminal device 23 and a key 31 that is a wireless communication unit for enabling the mobile terminal device 23, and the mobile terminal When the authentication between the device 23 and the key 31 cannot be established, all use except for the communication with the key management center 40 cannot be performed, and the password obtained by the communication with the key management center 40 is stored in the mobile phone. The specific function can be used by inputting to the terminal device 23. Here, a telephone call is used as the communication.

As illustrated in FIG. 7, the mobile terminal device 23 includes a wireless communication unit 231, a memory 251, a control unit 215, and a device ID storage unit 232. The wireless communication unit 231 includes a transmission unit 231 a and a reception unit. 231b and a transmission / reception switching unit 231c. In addition, a wireless authentication unit 211, an alarm circuit unit 212, and an external output unit 213 are provided, and a use restriction device 221, a password authentication unit 222, and a key input unit 223 are further provided. The wireless authentication unit 211 includes a transmission / reception unit 211a, an authentication ID storage unit 211b, and a signal level detection unit 211c, and includes a wireless authentication control unit 211d that controls them. The usage restriction device 221 defines a function 221a that can be used when authentication is established, a function 221b that cannot be used when authentication is not established, a function 221c that can be used only when password authentication is established, and the like. A battery 216 as a power source is also provided.
Since the key 31 has the same configuration and operation as those of the first and second embodiments described above, description thereof will be omitted.

  FIG. 8 shows the configuration of the key management server 41 in the key management center 40. The key management server 41 includes a device authentication unit 411 and a memory 412. Even when device authentication is performed automatically, a terminal operator may perform device authentication at the key management center 40 by computer operation. The device ID 42 is stored as data in the memory 412. The device ID 42 may be stored in association with the personal information of the owner of the mobile terminal device 23.

  Therefore, as shown in FIG. 9, when starting (step SS), the wireless authentication unit 311 in the key 31 and the wireless authentication unit 211 of the portable terminal device 23 authenticate wirelessly (step S31), and authentication is established. If it can, it can be used normally (step S32). In this case, as an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312, and sounds, displays, lights, etc. by an external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. The mobile terminal device user may be notified that the authentication has been established, or may not be notified in particular. As for the operation on the mobile terminal device 23 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 and is carried by the external output unit 213 such as a speaker, a liquid crystal display unit, an LED, etc. The terminal device user may or may not be notified that the authentication has been established. On the other hand, a signal is transmitted from the wireless authentication unit 211 to the use restriction device 221, and the function 221 a that can be used when authentication is established can be used. Alternatively, the function 221a that can be used when authentication is established may be usable by not transmitting a signal from the wireless authentication unit 211 to the use restriction device 221.

  On the other hand, when the authentication cannot be established, the use of the mobile terminal device 23 is restricted (step S33). As an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312 to sound an alarm, perform display, turn on the light, etc. in the external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. To inform the user of the mobile terminal device that the authentication has not been established. In addition, as an operation on the mobile terminal device 23 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 to sound and display an alarm in the external output unit 213 such as a speaker, a liquid crystal display unit, and an LED. While turning on and informing the user of the mobile terminal device that authentication has not been established, a signal is sent from the wireless authentication unit 211 to the use restriction device 221 so that the function 221b that cannot be used when authentication is not established cannot be used.

Even in this state, the portable terminal device 23 can make a call with the key management center 40, and the user calls the key management center 40 (step S34). In this telephone, a device ID (phone number, device model number, device serial number, etc.) signal is transmitted to the key management center 40 by the wireless communication unit 231. In the key management server 41, the device authentication unit 411 performs device authentication by comparing the received device ID 42 and information in the memory 412 (step S35). If device authentication is established, personal authentication is further performed (step S36). When personal authentication is established, the key management center 40 notifies the user of the portable terminal device 23 of a predetermined password.
The method for performing personal authentication is not particularly limited. For example, a method of confirming an address, a name, a work place, a bank where a charge is deducted, a date of birth, etc. by a call with an operator may be used.

  Thereafter, the user of the portable terminal device 23 inputs the predetermined password from the key input unit 223 (step S37). When authentication is established by the password authentication unit 222, the specific function 221c can be used for a certain period of time only when password authentication is established (step S38), and the process ends (step SE). Further, the fact that the authentication has been established may be output to the external output unit 213.

Next, the use restriction system 14 according to the fourth embodiment will be described.
FIG. 10 is a flowchart showing the movement of the fourth embodiment. The configurations of the mobile terminal device 23 and the key management center 40 are the same as those in FIGS. 7 and 8 described in the third embodiment. In addition, suppose that the same code | symbol is attached | subjected to the site | part which is common in the 1st-3rd embodiment mentioned above, and the overlapping description is abbreviate | omitted.

  Therefore, as shown in FIG. 10, when starting (step SS), the wireless authentication unit 311 in the key 31 and the wireless authentication unit 211 of the portable terminal device 23 authenticate wirelessly (step S41), and authentication is established. If it can, it can be used normally (step S42). In this case, as an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312, and sounds, displays, lights, etc. by an external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. The mobile terminal device user may be notified that the authentication has been established, or may not be notified in particular. As for the operation on the mobile terminal device 23 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 and is carried by the external output unit 213 such as a speaker, a liquid crystal display unit, an LED, etc. The terminal device user may or may not be notified that the authentication has been established. On the other hand, a signal is transmitted from the wireless authentication unit 211 to the use restriction device 221, and the function 221 a that can be used when authentication is established can be used. Alternatively, the function 221a that can be used when authentication is established may be usable by not transmitting a signal from the wireless authentication unit 211 to the use restriction device 221.

  On the other hand, when the authentication cannot be established, use of the mobile terminal device 23 is restricted (step S43). As an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312 to sound an alarm, perform display, turn on the light, etc. in the external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. To inform the user of the mobile terminal device that the authentication has not been established. In addition, as an operation on the mobile terminal device 23 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 to sound and display an alarm in the external output unit 213 such as a speaker, a liquid crystal display unit, and an LED. While turning on and informing the user of the mobile terminal device that authentication has not been established, a signal is sent from the wireless authentication unit 211 to the use restriction device 221, and the function 221 b that cannot be used when authentication is not established cannot be used.

  Even in this state, the portable terminal device 23 is allowed to email the key management center 40, and the user emails the key management server 41 of the key management center 40 (step S44). In this mail, a device ID (phone number, device model number, device serial number, etc.) signal is transmitted to the key management center 40 by the wireless communication unit 231. In the key management server 41, the device authentication unit 411 performs device authentication by comparing the received device ID 42 with information in the memory 412 (step S45). If the device authentication is established, personal authentication is further performed (step S46). When personal authentication is established, the key management center 40 notifies the user of the portable terminal device 23 of a predetermined password.

  Thereafter, the user of the portable terminal device 23 inputs the predetermined password from the key input unit 223 (step S47). When authentication is established by the password authentication unit 222, the specific function 221c can be used for a certain period of time only when password authentication is established (step S48), and the process ends (step SE). Further, the fact that the authentication has been established may be output to the external output unit 213.

Next, the use restriction system 15 according to the fifth embodiment will be described.
FIG. 11 is a block diagram showing the configuration of the mobile terminal device, FIG. 12 is a block diagram showing the configuration of the key management server, and FIG. 13 is a flowchart showing the operation of the fifth embodiment. In addition, suppose that the same code | symbol is attached | subjected to the site | part which is common in 1st-4th embodiment mentioned above, and the overlapping description is abbreviate | omitted.
Referring to FIGS. 11 to 13, a use restriction system 15 including a mobile terminal device 25 and a key 31 for enabling the mobile terminal device 25, the mobile terminal device 25 and the key. When the authentication with the key management center 40 cannot be established, all use except for the communication with the key management center 40 cannot be performed, and the key management center 40 can be used only for a specific function for a certain period of time.
As an operation from the key management center 40, there is a method of sending a mail attached with an electronic key to the user. In addition, device authentication may be performed by any one of the methods of the first to fourth embodiments.

As illustrated in FIG. 11, the mobile terminal device 25 includes a wireless communication unit 231, a memory 251, a control unit 215, and a device ID storage unit 232. The wireless communication unit 231 includes a transmission unit 231 a and a reception unit. 231b and a transmission / reception switching unit 231c. In addition, a wireless authentication unit 211, an alarm circuit unit 212, and an external output unit 213 are provided, and a use restriction device 252 and an electronic key authentication unit 253 are further provided. The wireless authentication unit 211 includes a transmission / reception unit 211a, an authentication ID storage unit 211b, and a signal level detection unit 211c, and includes a wireless authentication control unit 211d that controls them. The use restriction device 252 defines a function 252a that can be used when authentication is established, a function 252b that cannot be used when authentication is not established, a function 252c that can be used only when an electronic key is received, and the like. A battery 216 as a power source is also provided.
Since the key 31 has the same configuration and operation as those of the first to fourth embodiments described above, description thereof will be omitted.

FIG. 12 shows the configuration of the key management server 41 in the key management center 40. The key management server 41 includes a device authentication unit 411, a memory 412, and a mobile terminal device control unit 413. The memory 412 stores a device ID, an electronic key that enables temporary use, personal information including a mail address, and the like in association with each other. The device authentication unit 411 uses the personal authentication completion notification 43 as a trigger to transmit, with the mobile terminal device control unit 413, an electronic key 254 that enables temporary use associated with the mail address of the corresponding device ID 42 in the memory 412. To do.
In the mobile terminal device 25, the wireless communication unit 231 receives the email. The electronic key 254 attached to the mail is stored in the memory 251 in the mobile terminal device 25. The electronic key authentication unit 253 determines whether or not the electronic key 254 is present. If the electronic key 254 is present, the function 252 c that can be used only when the electronic key 254 is received can be used.
The key management center 40 also transmits a mail including specific URL information to the corresponding mobile terminal device 25, and the user of the corresponding mobile terminal device 25 clicks it to download the key. For the electronic key acquisition method, methods other than e-mail attachment are possible.

  Therefore, as shown in FIG. 13, when starting (step SS), the wireless authentication unit 311 in the key 31 and the wireless authentication unit 211 of the portable terminal device 25 authenticate wirelessly (step S51), and authentication is established. If it can, it can be used normally (step S52). In this case, as an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312, and sounds, displays, lights, etc. by an external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. The mobile terminal device user may be notified that the authentication has been established, or may not be notified in particular. As for the operation on the mobile terminal device 25 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 and is carried by the external output unit 213 such as a speaker, a liquid crystal display unit, an LED, etc. The terminal device user may or may not be notified that the authentication has been established. On the other hand, a signal is transmitted from the wireless authentication unit 211 to the use restriction device 221, and the function 221 a that can be used when authentication is established can be used. Alternatively, the function 252a that can be used when authentication is established may be enabled by not transmitting a signal from the wireless authentication unit 211 to the use restriction device 221.

  On the other hand, when the authentication cannot be established, the use of the mobile terminal device 25 is restricted (step S53). As an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312 to sound an alarm, perform display, turn on the light, etc. in the external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. To inform the user of the mobile terminal device that the authentication has not been established. In addition, as an operation on the mobile terminal device 25 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 to sound and display an alarm in an external output unit 213 such as a speaker, a liquid crystal display unit, and an LED. While turning on and informing the user of the mobile terminal device that the authentication has not been established, a signal is sent from the wireless authentication unit 211 to the use restriction device 221 so that the function 252b that cannot be used when the authentication is not established cannot be used.

  Even in this state, the portable terminal device 25 is allowed to email the key management center 40, and the user emails the key management server 41 of the key management center 40 (step S54). In the key management server 41, the device authentication unit 411 compares the received device ID 42 and information in the memory 412 to perform device authentication (step S55). If device authentication is established, personal authentication is further performed (step S56). When the personal authentication is established, the key management center 40 notifies the user of the portable terminal device 23 of a predetermined electronic key 254.

  Thereafter, the user of the portable terminal device 25 receives the electronic key 254 (step S57), and the specific function 252c can be used for a certain period of time using the electronic key 254 (step S58), and the process ends (step SE). Further, the fact that the authentication has been established may be output to the external output unit 213.

Next, the use restriction system 16 according to the sixth embodiment will be described.
FIG. 14 is a block diagram showing the configuration of the mobile terminal device, FIG. 15 is a block diagram showing the configuration of the key management server, and FIG. 16 is a flowchart showing the operation of the sixth embodiment. In addition, suppose that the same code | symbol is attached | subjected to the site | part which is common in 1st-5th embodiment mentioned above, and the overlapping description is abbreviate | omitted.
14 to 16, the use restriction system 16 includes a mobile terminal device 26 and a key 31 for enabling the mobile terminal device 26, and includes the mobile terminal device 26 and the key. If the authentication with the key management center 40 cannot be established, it is impossible to use anything except for the communication with the key management center 40, and the key management center 40 can be used for a specific time only for a specific function by remote control. Become.
As an operation from the key management center 40, there is a method of sending a mail attached with an electronic key to the user. In addition, device authentication may be performed by any one of the methods of the first to fourth embodiments.

As illustrated in FIG. 14, the mobile terminal device 26 includes a wireless communication unit 231, a memory 251, a control unit 215, and a device ID storage unit 232, and the wireless communication unit 231 includes a transmission unit 231 a and a reception unit. 231b and a transmission / reception switching unit 231c. In addition, a wireless authentication unit 211, an alarm circuit unit 212, an external output unit 213, and a use restriction device 261 are further provided. The wireless authentication unit 211 includes a transmission / reception unit 211a, an authentication ID storage unit 211b, and a signal level detection unit 211c, and includes a wireless authentication control unit 211d that controls them. The usage restriction device 261 defines a function 261a that can be used when authentication is established, a function 261b that cannot be used when authentication is not established, a function 261c that can be used only when controlled from the key management center 40, and the like. A battery 216 as a power source is also provided.
Since the key 31 has the same configuration and operation as those of the first to fifth embodiments described above, description thereof will be omitted.

  FIG. 15 shows the configuration of the key management server 41 in the key management center 40. The key management server 41 includes a device authentication unit 411, a memory 412, and a mobile terminal device control unit 414. In the memory 412, the device ID 42, an electronic key that can be used temporarily, personal information including a mail address, and the like are stored in association with each other. The device authentication unit 411 sends a control signal from the mobile terminal device control unit 414 to the corresponding device using the personal authentication completion notification 43 as a trigger. In the mobile terminal device 26, the control signal is sent to the controlled unit 262 after the wireless communication unit 231 receives the control signal. With this as a trigger, the function 261c that can be used only during control from the key management center 40 can be used.

  Therefore, as shown in FIG. 16, when starting (step SS), the wireless authentication unit 311 in the key 31 and the wireless authentication unit 211 of the portable terminal device 26 authenticate wirelessly (step S61), and authentication is established. If it can, it can be used normally (step S62). In this case, as an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312, and sounds, displays, lights, etc. by an external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. The mobile terminal device user may be notified that the authentication has been established, or may not be notified in particular. As for the operation on the portable terminal device 26 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 and is carried by the external output unit 213 such as a speaker, a liquid crystal display unit, an LED, etc. The terminal device user may or may not be notified that the authentication has been established. On the other hand, a signal is sent from the wireless authentication unit 211 to the use restriction device 221, and the function 261 a that can be used when authentication is established can be used. Alternatively, the function 261a that can be used when authentication is established may be made available by not sending a signal from the wireless authentication unit 211 to the use restriction device 221.

  On the other hand, when the authentication cannot be established, the use of the mobile terminal device 26 is restricted (step S63). As an operation on the key 31 side, the wireless authentication unit 311 sends a signal to the alarm circuit unit 312 to sound an alarm, perform display, turn on the light, etc. in the external output unit 313 such as a speaker, a liquid crystal display unit, and an LED. To inform the user of the mobile terminal device that the authentication has not been established. Further, as an operation on the mobile terminal device 26 side, the wireless authentication unit 211 sends a signal to the alarm circuit unit 212 to sound and display an alarm in the external output unit 213 such as a speaker, a liquid crystal display unit, and an LED. While turning on and informing the user of the mobile terminal device that the authentication is not established, a signal is transmitted from the wireless authentication unit 211 to the use restriction device 221, and the function 261 b that cannot be used when the authentication is not established cannot be used.

  Even in this state, the portable terminal device 26 is allowed to email the key management center 40, and the user emails the key management server 41 of the key management center 40 (step S64). In the key management server 41, the device authentication unit 411 performs device authentication by comparing the received device ID 42 with information in the memory 412 (step S65). If the device authentication is established, personal authentication is further performed (step S66). When the personal authentication is established, the key management server 41 of the key management center 40 performs predetermined remote control on the user of the mobile terminal device 26 (step S67), and the specific function 261c can be used for a certain period of time (step S68). , And ends (step SE). Further, the fact that the authentication has been established may be output to the external output unit 213.

  In the above-described first to sixth embodiments, when the lost key 31 comes out, or when the official key is received from the key management center 40 (all functions are performed as long as authentication with the mobile terminal device is performed). When a key that can be used without any restrictions is issued, the mobile terminal device 20 at that time will be in any state (regardless of whether it is locked or in a state where a specific function can be used for a certain period of time by password authentication) However, after authenticating with the official key 31 (even if a temporary electronic key is in operation), the lock state can be released or all functions can be used without time restrictions. Alternatively, the temporary electronic key is discarded, and both the key and the mobile terminal device return to the operating state before the key 31 is lost.

  The use restriction system of the present invention is not limited to the above-described embodiments, and appropriate modifications, improvements, and the like are possible.

  As described above, the use restriction system according to the present invention restricts only a specific function determined in advance when the wireless communication unit cannot be authenticated due to a certain distance from the mobile terminal device or the like. For example, it is possible to prevent unauthorized use by a person who picks up or obtains a mobile terminal device and protects information input to the mobile terminal device. It has an effect and is useful as a use restriction system that includes a portable terminal device and a wireless communication unit for enabling the portable terminal device to restrict the use of the portable terminal.

It is explanatory drawing which shows the general structure which concerns on the use restriction system of this invention. It is a block diagram which shows the structure of the key which is a radio | wireless communication unit in 1st Embodiment. It is a block diagram which shows the structure of the portable terminal device in 1st Embodiment. It is a flowchart which shows the motion of 1st Embodiment. It is a block diagram which shows the structure of the portable terminal device in 2nd Embodiment. It is a flowchart which shows the motion of 2nd Embodiment. It is a block diagram which shows the structure of the portable terminal device in 3rd Embodiment. It is a block diagram which shows the structure of the key management server in 3rd Embodiment. It is a flowchart which shows the motion of 3rd Embodiment. It is a flowchart which shows the operation | movement of 4th Embodiment. It is a block diagram which shows the structure of the portable terminal device in 5th Embodiment. It is a block diagram which shows the structure of the key management server in 5th Embodiment. It is a flowchart which shows the motion of 5th Embodiment. It is a block diagram which shows the structure of the portable terminal device in 6th Embodiment. It is a block diagram which shows the structure of the key management server in 6th Embodiment. It is a flowchart which shows the motion of 6th Embodiment.

Explanation of symbols

10 Use Restriction System 20 Mobile Terminal Device 254 Electronic Key 30 Key (Wireless Communication Unit)
40 Key Management Center

Claims (3)

A use restriction system comprising a portable terminal device and a wireless communication unit for enabling the portable terminal device,
If authentication using an authentication ID between the mobile terminal device and the wireless communication unit cannot be established, only the first specific function including communication with the key management center can be used in the mobile terminal device. Do Ri, in the key management center, when the device based on the device ID transmitted from the portable terminal device authentication and personal authentication is successful, the attached electronic key becomes available in the second specific function mail Usage restriction system that transmits a user to the mobile terminal device of the user. The use restriction system according to claim 1, wherein the use of the second specific function is limited to a predetermined time. A portable terminal device used in the use restriction system according to claim 1 .

Images