JP7707962B2 - Mobile devices - Google Patents

Description

This disclosure relates to a mobile terminal.

Patent Document 1 discloses an entrance/exit management system. According to the entrance/exit management system disclosed in Patent Document 1, an administrator who is contacted by an infected facility user records infected person information linked to the facility user's personal ID on a server.

JP 2019-200503 A

In the entrance and exit management system disclosed in Patent Document 1, the administrator records information on infected facility users on a server. This means that there is a risk that information on infected facility users may be leaked due to unauthorized access to the administrator or the server.

This disclosure has been made to solve the above-mentioned problems. The purpose of this disclosure is to provide a mobile terminal that can protect privacy.

The mobile terminal according to the present disclosure includes an input unit for inputting identification information and infection-related information indicating an infected person or a close contact, a first memory unit for storing the identification information input from the input unit, a second memory unit for storing the infection-related information input from the input unit, and a transmission unit for transmitting the identification information stored in the first memory unit to a traffic management device for managing traffic at a specific location when the infection-related information is not stored in the second memory unit, and the transmission unit does not transmit the identification information to the traffic management device when the infection-related information is stored in the second memory unit.

A mobile terminal according to the present disclosure can strengthen privacy protection in a system for managing passage.

1 is a diagram showing an example of a passage management system using a mobile terminal 1 in embodiment 1. FIG. 2 is a diagram for explaining the function of the traffic control system shown in FIG. 1 . 4 is a flowchart for explaining an overview of the operation of the mobile terminal in the first embodiment. FIG. 2 is a hardware configuration diagram of a mobile terminal according to the first embodiment. A figure showing the configuration of a traffic management system in embodiment 2. 13 is a flowchart for explaining an overview of the operation of a mobile terminal in embodiment 2.

The embodiments for implementing the present disclosure will be described with reference to the attached drawings. Note that in each drawing, the same or corresponding parts are given the same reference numerals. Duplicate descriptions of the parts will be appropriately simplified or omitted.

Embodiment 1.
FIG. 1 is a diagram showing an example of a passage management system using a mobile terminal 1 in the first embodiment. The passage management system is a system for managing passage through a specific location. FIG. 1 shows an entrance/exit management system for managing entry to a specific entrance-restricted area as an example of a passage management system. In the entrance/exit management system, the specific location for which passage is managed is the entrance to the entrance-restricted area. The entrance-restricted area is an area where entry is restricted only to specific people. In the following, a person who is permitted to pass through a specific location, that is, a person who is permitted to enter the entrance-restricted area in this example, is also referred to as an authorized person.

The entrance/exit management system shown in FIG. 1 includes a mobile terminal 1, an entrance/exit management device 2, an ID controller 3, a server 4, and an electronic lock 5.

As an example, the electric lock 5 is installed on a door for entering and exiting a restricted entry area.

The ID controller 3 controls the electric lock 5. The ID controller 3 also communicates with the entrance/exit management device 2 and the server 4. The entrance/exit management device 2 communicates with a mobile terminal 1 carried by each user. The mobile terminal 1 is, for example, a smartphone.

The entrance/exit management device 2 functions as a traffic management device for managing the passage of users through the entrance to the restricted entry area. The entrance/exit management device 2 has a function for receiving a personal ID from the mobile terminal 1. The personal ID is information for identifying the user of the mobile terminal 1. The personal ID received by the entrance/exit management device 2 from the mobile terminal 1 is transmitted via the ID controller 3 to the server 4, which performs authentication processing. Authorized person information for identifying authorized persons is preregistered in the server 4.

At the server 4, the personal ID received from the ID controller 3 is compared with the authorized person information. If the personal ID matches any of the authorized person information, the personal ID is authenticated. If the personal ID does not match any of the authorized person information, the personal ID is not authenticated. If the personal ID is authenticated at the server 4, it is determined that entry to the restricted entry area is permitted. In other words, if the personal ID is authenticated at the server 4, the user of the mobile terminal 1 is permitted to enter the restricted entry area. If the personal ID is not authenticated at the server 4, it is determined that entry to the restricted entry area is not permitted. In other words, if the personal ID is not authenticated at the server 4, the user of the mobile terminal 1 is not permitted to enter the restricted entry area.

The result of the judgment made by the server 4 is sent to the ID controller 3. If the server 4 judges that the personal ID is allowed to enter, the ID controller 3 unlocks the electric lock 5. This allows the user of the mobile terminal 1 to open the door and enter the restricted entry area. On the other hand, if the server 4 does not judge that the personal ID is not allowed to enter, the ID controller 3 does not unlock the electric lock 5. In other words, the user of the mobile terminal 1 cannot enter the restricted entry area. The result of the judgment made by the server 4 is sent to the entrance/exit management device 2 via the ID controller 3. The entrance/exit management device 2 has a function of sending the result to the mobile terminal 1 in response to receiving the personal ID from the mobile terminal 1. The result is an example of information indicating whether or not the entrance to the restricted entry area is passable.

In this way, the information received by the entrance/exit management device 2 from the mobile terminal 1 is sent to the server 4, which manages the information. The server 4 also manages the received information. For example, when infection-related information linked to a personal ID is sent from the mobile terminal 1 to the entrance/exit management device 2, the server 4 manages the infection-related information linked to the personal ID. The infection-related information is information indicating that a person is infected with or has been in close contact with a specific virus. The virus in question may be COVID-19.

Therefore, from the perspective of privacy protection, it is preferable that infection-related information is not linked to a personal ID and transmitted from the mobile terminal 1 to the entrance/exit management device 2. To realize such a function, as shown in FIG. 1, if the user of the mobile terminal 1 is an infected person, the personal ID should not be transmitted from the mobile terminal 1 to the entrance/exit management device 2. Similarly, if the user of the mobile terminal 1 is a close contact, the personal ID should not be transmitted from the mobile terminal 1 to the entrance/exit management device 2. Note that if the user of the mobile terminal 1 is neither an infected person nor a close contact, there is no particular problem from the perspective of privacy protection even if the personal ID is transmitted from the mobile terminal 1 to the entrance/exit management device 2.

Figure 2 is a diagram to explain the function of the traffic management system shown in Figure 1.

The mobile terminal 1 includes an input unit 6, a personal ID storage unit 7, an infection-related information storage unit 8, a detection unit 9, a detection information storage unit 10, an infection-related information determination unit 11, an entry permission determination unit 12, a transmission unit 13, and a reception unit 14.

Next, an overview of the operation of the mobile terminal 1 in the first embodiment will be described with reference to FIG.
FIG. 3 is a flowchart for explaining an outline of the operation of the mobile terminal in the first embodiment.

In S100, it is determined whether or not a personal ID has been input to the input unit 6. The user inputs a personal ID from the input unit 6. When a personal ID has been input from the input unit 6, it is determined as YES in S100. When a personal ID has not been input to the input unit 6 by the user in S100, it is determined as NO in S100. When it is determined as YES in S100, the personal ID input from the input unit 6 is stored in the personal ID storage unit 7 in S101. When it is determined as NO in S100, it is determined again in S100 whether or not a personal ID has been input.

After S101, in S102, it is determined whether infection-related information indicating an infected person or a close contact has been input to the input unit 6. If the user is an infected person or a close contact, the user inputs infection-related information from the input unit 6. When infection-related information is input from the input unit 6, YES is determined in S102. If the user is neither an infected person nor a close contact, the user does not input infection-related information from the input unit 6. If infection-related information is not input from the input unit 6, NO is determined in S102. If YES is determined in S102, the infection-related information storage unit 8 stores the infection-related information input from the input unit in S103. If NO is determined in S102, the infection-related information is not stored in the infection-related information storage unit 8, and processing of S104 is performed.

Next, in S104, the detection unit 9 determines whether or not approach under specific conditions has been detected with another mobile terminal having information indicating an infected person or a close contact. The other mobile terminal having information indicating an infected person or a close contact is referred to as mobile terminal 1A. The specific conditions are set in advance based on time, distance, and the like. For example, if mobile terminal 1 remains within 1 m of mobile terminal 1A for 15 minutes or more, a YES determination is made. It is preferable to use short-range wireless communication for communication between mobile terminal 1 and mobile terminal 1A. Any standard may be adopted as the standard for short-range wireless communication.

If the detection unit 9 detects approach to the mobile terminal 1A under specific conditions, a YES determination is made in S104. If the detection unit 9 does not detect approach to the mobile terminal 1A under specific conditions, a NO determination is made in S104. If a YES determination is made in S104, the detection information detected in S104 is stored in the detection information storage unit 10 in S105. If a NO determination is made in S104, the detection information is not stored in the detection information storage unit 10, and the process of S106 is performed.

The mobile terminal 1 also performs a determination process as to whether or not to transmit the personal ID stored in the personal ID storage unit 7 to the entrance/exit management device 2. The determination process may be started by receiving specific information from the entrance/exit management device 2. The determination process may be started by inputting specific information from the input unit 6. The determination process may be started by other conditions being met.

For example, in S106, it is determined whether or not infection-related information is stored in the infection-related information storage unit 8. If infection-related information is stored in the infection-related information storage unit 8, it is determined as YES in S106. If infection-related information is not stored in the infection-related information storage unit 8, it is determined as NO in S106.

If the answer is YES in S106, the infection-related information determination unit 11 determines in S107 that the user is an infected person or a close contact. Next, in S108, the entry permission determination unit 12 determines that it is not necessary to transmit the personal ID to the entrance/exit management device 2. In S109, the transmission unit 13 does not transmit the personal ID to the entrance/exit management device 2.

If the result of S106 is NO, then the process determines in S110 whether or not detection information is stored in the detection information storage unit 10. If the detection information is stored in the detection information storage unit 10, then the process determines YES in S110. If the detection information is not stored in the detection information storage unit 10, then the process determines NO in S110.

If S110 returns YES, the same operation is performed as if S106 returned YES. Specifically, the operations from S107 to S109 are performed.

If the result of S110 is NO, the infection-related information determination unit 11 determines in S111 that the user is not an infected person or a close contact. Next, in S112, the entry permission determination unit 12 determines that it is necessary to transmit the personal ID to the entrance/exit management device 2. In S114, the transmission unit 13 transmits the personal ID to the entrance/exit management device 2.

In S114, the receiving unit 14 judges whether or not a result of admission to the entrance restricted area has been received from the entrance/exit management device 2 as a response to the personal ID transmitted from the transmitting unit 13 to the entrance/exit management device. If a result of admission to the entrance restricted area has been received from the entrance/exit management device 2, the result is judged as YES. If a result of admission to the entrance restricted area has not been received from the entrance/exit management device 2, the result is judged as NO. If the result of S114 is NO, the receiving unit 14 continues to judge whether or not a result of admission to the entrance restricted area has been received from the entrance/exit management device 2. The result of admission received by the receiving unit 14 is displayed, for example, on the display of the mobile terminal 1.

It is preferable that short-range wireless communication is used for communication between the mobile terminal 1 and the entrance/exit management device 2. Any standard may be adopted as the standard for short-range wireless communication.

The mobile terminal 1 may not have the detection unit 9 and the detection information storage unit 10. In such a case, the processes shown in S104 and S105 in FIG. 3 are not performed. Also, the process shown in S110 is not performed. If the result of S106 is NO, the process shown in S111 is performed. That is, if no infection-related information is stored in the infection-related information storage unit 8, the transmission unit 13 transmits the personal ID stored in the personal ID storage unit 7 to the entrance/exit management device 2 in S113.

The mobile terminal 1 does not need to perform the operation of S114.

According to the first embodiment described above, the mobile terminal 1 determines whether the user is an infected person or a close contact, and if the user is an infected person or a close contact, does not transmit the personal ID to the entrance/exit management device 2. This makes it possible to prevent information indicating an infected person or a close contact from being linked to a personal ID and transmitted from the mobile terminal 1 to the entrance/exit management device 2. It is possible to prevent infection-related information from being managed in a linked state with a personal ID in the server 4, thereby strengthening privacy protection in the entrance/exit management system.

In the example shown in this embodiment, if both the infection-related information and the detection information are not stored, the personal ID is transmitted from the mobile terminal 1 to the entrance/exit management device 2. This does not reduce the convenience for users or the security of the system. In addition, since it is possible to restrict the passage of users who are highly likely to be infected or have been in close contact with an infected person, the occurrence of infectious disease clusters can also be suppressed.

Next, an example of hardware constituting the mobile terminal 1 will be described with reference to FIG.
FIG. 4 is a hardware configuration diagram of the portable terminal 1 according to the first embodiment.

The mobile terminal 1 includes, as hardware resources, a processing circuit 100 including a processor 100a and a memory 100b. The processing circuit 100 may include multiple processors 100a. The processing circuit 100 may include multiple memories 100b. The processing circuit 100 may include dedicated hardware 200. The processing circuit 100 may include multiple dedicated hardware 200.

For example, each function of the mobile terminal 1 is realized by a processing circuit 100. For example, each function of the mobile terminal 1 is realized collectively by the processing circuit 100. The processing circuit 100 includes a processor 100a and a memory 100b, but does not need to include dedicated hardware 200.

When the processing circuit 100 includes a processor 100a and a memory 100b, each function of the mobile terminal 1 is realized by software, firmware, or a combination of software and firmware. The software and firmware are written as programs. The software and firmware are stored in the memory 100b. The processor 100a realizes each function of the mobile terminal 1 by reading and executing the programs stored in the memory 100b.

The processor 100a is also called a CPU (Central Processing Unit), central processing unit, processing unit, arithmetic unit, microprocessor, microcomputer, or DSP. For example, the memory 100b is a non-volatile or volatile semiconductor memory such as a RAM, a ROM, a flash memory, an EPROM, or an EEPROM, a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, or a DVD.

When the processing circuit 100 includes dedicated hardware 200, the processing circuit 100 may be implemented, for example, as a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination thereof.

Some of the functions of the mobile terminal 1 may be realized by dedicated hardware 200, and the other parts may be realized by software or firmware. For example, the function of transmitting a personal ID to the entrance/exit management device 2 may be realized by the processing circuit 100 as the dedicated hardware 200, and functions other than the function of transmitting a personal ID to the entrance/exit management device 2 may be realized by the processor 100a reading and executing a program stored in the memory 100b.

In this way, the processing circuit 100 realizes each function of the mobile terminal 1 through hardware 200, software, firmware, or a combination of these.

Although not shown, each function of the entrance/exit management device 2 is realized by a processing circuit equivalent to the processing circuit 100 that realizes each function of the mobile terminal 1.

Although not shown, each function of the ID controller 3 is realized by a processing circuit equivalent to the processing circuit 100 that realizes each function of the mobile terminal 1.

Although not shown, each function of the server 4 is realized by a processing circuit equivalent to the processing circuit 100 that realizes each function of the mobile terminal 1.

Embodiment 2.
5 is a diagram showing the configuration of a traffic control system in the embodiment 2. Note that the same reference numerals are used to designate parts that are the same as or correspond to parts in the embodiment 1. Explanation of these parts will be omitted.

In the second embodiment, the mobile terminal 1 further includes an authentication unit 15.

Next, an overview of the operation of the portable terminal 1 in the second embodiment will be described with reference to FIG.
FIG. 6 is a flowchart for explaining an outline of the operation of the mobile terminal in the second embodiment.

The processes shown in S200 to S203 in FIG. 6 are similar to the processes shown in S100 to S103 in FIG. 3. For example, in S201, a personal ID input from the input unit 6 is stored in the personal ID storage unit 7. When infection-related information is input from the input unit 6, in S203, the infection-related information is stored in the infection-related information storage unit 8.

Furthermore, in the mobile terminal 1, an authentication process is performed by the authentication unit 15, and a determination process is performed by the entry permission determination unit 12 as to whether or not to transmit the entry permission result to the entrance/exit management device 2. The authentication process and the determination process may be started by receiving specific information from the entrance/exit management device 2. The authentication process and the determination process may be started by inputting specific information from the input unit 6. The authentication process and the determination process may be started by other conditions being met.

For example, in S204, the receiving unit 14 determines whether or not authorized person information has been received from the entrance/exit management device 2. As an example, the entrance/exit management device 2 transmits authorized person information to a mobile terminal that is present within a specific range. The entrance/exit management device 2 may also transmit authorized person information to a mobile terminal that has transmitted a specific request.

If the receiving unit 14 receives authorized person information from the entrance/exit management device 2, it determines YES. If the receiving unit 14 does not receive authorized person information from the entrance/exit management device 2, it determines NO. If the determination is NO in S204, the receiving unit 14 continues to determine whether or not authorized person information has been received from the entrance/exit management device 2. In S205, the authentication unit 15 authenticates the personal ID stored in the personal ID memory unit 7 based on the authorized person information received by the receiving unit 14.

For example, if the personal ID matches any of the authorized person information, the personal ID is authenticated. In such a case, the authentication result by the authentication unit 15 is authentication success. If the personal ID does not match any of the authorized person information, the personal ID is not authenticated. In such a case, the authentication result by the authentication unit 15 is authentication failure.

In S206, the entry permission determination unit 12 determines whether or not the authentication unit 15 authenticated the personal ID in S205. If the personal ID is authenticated by the authentication unit 15, a YES determination is made in S206. If the personal ID is not authenticated by the authentication unit 15, a NO determination is made in S206.

If the result of S206 is NO, the entry permission determination unit determines in S207 that entry to the entry restricted area is not permitted. If the result of S206 is YES, the entry permission determination unit determines in S208 that entry to the entry restricted area is permitted.

Next, in S209, the detection unit 9 determines whether or not approach to the mobile terminal 1A under specific conditions has been detected. The detection method is the same as in embodiment 1. If the detection unit 9 detects approach to the mobile terminal 1A under specific conditions, then YES is determined in S209. If the detection unit 9 does not detect approach to the mobile terminal 1A under specific conditions, then NO is determined in S209. If YES is determined in S209, then in S210, the detection information detected in S209 is stored in the detection information storage unit 10. If NO is determined in S209, the detection information is not stored in the detection information storage unit 10, and the process of S211 is performed.

Next, in S211, it is determined whether or not infection-related information is stored in the infection-related information storage unit 8. If infection-related information is stored in the infection-related information storage unit 8, the result is YES. If infection-related information is not stored in the infection-related information storage unit 8, the result is NO.

If S211 returns YES, then in S212 the infection-related information determination unit 11 determines that the user is an infected person or a close contact. Next, in S213, the entry permission determination unit 12 determines that it is not necessary to transmit the personal ID and the entry permission result of the infection-related information determination unit 11 to the entrance/exit management device 2. In S214, the transmission unit 13 does not transmit the personal ID and the entry permission result of the infection-related information determination unit 11 to the entrance/exit management device 2.

If the result of S211 is NO, then in S215 it is determined whether detection information is stored in the detection information storage unit 10. If the detection information is stored in the detection information storage unit 10, then the result of S215 is YES. If the detection information is not stored in the detection information storage unit 10, then the result of S215 is NO.

If S215 returns YES, the same operation is performed as if S211 returned YES. Specifically, the operations from S212 to S214 are performed.

If the result of S215 is NO, the infection-related information determination unit 11 determines in S216 that the user is not an infected person or a close contact. Next, in S217, the entry permission determination unit 12 determines that it is necessary to transmit the personal ID and the result of the entry permission determination unit 12 to the entrance and exit management device 2. In S218, the transmission unit 13 transmits the personal ID and the result of the entry permission determination unit 12 to the entrance and exit management device 2.

The entrance/exit management device 2 transmits the information received from the mobile terminal 1 to the server 4 via the ID controller 3. The information from the mobile terminal 1 is managed by the server 4. If the entrance/exit management device 2 receives from the mobile terminal 1 the entry permission result is entry permission, the ID controller 3 unlocks the electric lock 5.

Even in the example shown in this embodiment, the mobile terminal 1 does not need to include the detection unit 9 and the detection information storage unit 10. In such a case, the processes shown in S209 and S210 in FIG. 6 are not performed. Also, the process shown in S215 in FIG. 6 is not performed. If the result of S211 is NO, the process shown in S216 is performed. That is, if no infection-related information is stored in the infection-related information storage unit 8, the transmission unit 13 transmits the personal ID stored in the personal ID storage unit 7 and the result of the entry permission/prohibition decision unit 12 to the entrance/exit management device 2 in S218.

In this embodiment, an example has been described in which the transmission unit 13 transmits both the personal ID and the result of the entry permission/prohibition decision unit 12 to the entrance/exit management device 2 in S218. The transmission unit 13 may transmit the result of authentication by the authentication unit 15 to the entrance/exit management device 2 in S218 without transmitting the personal ID.

If the determination in S206 is YES, only the personal ID may be transmitted in S218. Also, if the determination in S206 is NO, the personal ID and the result of the admission decision made by the admission decision unit 12 may not be transmitted.

If the answer is YES in S206, only the result of the admission decision made by the admission decision unit 12 may be transmitted in S218.

In this embodiment, an example has been described in which the entry permission determination unit 12 determines in S218 that it is necessary to transmit information to the entrance/exit management device 2, regardless of whether the entry permission result of the entry permission determination unit 12 is entry permitted or not. In S218, the entry permission determination unit 12 may determine that it is not necessary to transmit information to the entrance/exit management device 2 if the entry permission result of the entry permission determination unit 12 is entry prohibited. In such a case, even if the determination in S215 is No, the transmission unit 13 does not transmit the personal ID and the entry permission result to the entrance/exit management device 2 if the entry permission result of the entry permission determination unit 12 is entry prohibited. In other words, if the determination in S206 is No, it is not necessarily necessary to transmit the entry permission result of the entry permission determination unit 12.

In the example shown in this embodiment, the same effects as those described in the first embodiment can be achieved. Furthermore, in the example shown in this embodiment, the mobile terminal 1 performs the authentication process of the personal ID. This reduces the load on the server 4.

If the determination in S206 is YES, only the personal ID may be transmitted in S218. Also, if the determination in S206 is NO, the personal ID and the result of the admission decision made by the admission decision unit 12 may not be transmitted. Even in this case, the personal IDs corresponding to infected persons and close contacts are not transmitted, and therefore the same effect is achieved.

If the answer is YES in S206, only the result of the admission decision made by the admission decision unit 12 may be sent in S218. Even in this case, the same effect is achieved because the personal IDs corresponding to the infected person and close contacts are not sent.

If the result of S206 is NO, it is not necessary to transmit the result of the admission determination unit 12 as to whether or not admission is permitted. If a result is transmitted indicating that admission to the admission restricted area is not permitted, the user's personal ID may be artificially linked to the result indicating that admission to the admission restricted area is not permitted, which may result in personal information indicating that the user is an infected person or a close contact of an infected person. If it is determined that admission to the admission restricted area is not permitted, privacy can be further protected by not transmitting the result to that effect.

REFERENCE SIGNS LIST 1 Mobile terminal 2 Entrance/exit management device 3 ID controller 4 Server 5 Electric lock 6 Input unit 7 Personal ID storage unit 8 Infection-related information storage unit 9 Detection unit 10 Detection information storage unit 11 Infection-related information determination unit 12 Entry permission determination unit 13 Transmission unit 14 Reception unit 15 Authentication unit

Claims (4)

An input unit for inputting identification information and infection-related information indicating that the person is an infected person or a close contact;
a first storage unit that stores the identification information inputted from the input unit;
a second storage unit that stores the infection-related information input from the input unit;
a transmission unit that transmits the identification information stored in the first storage unit to a traffic management device that manages traffic through a specific location when the infection-related information is not stored in the second storage unit; and
Equipped with
The transmission unit is a mobile terminal that does not transmit the identification information to the passage management device when the infection-related information is stored in the second memory unit. The mobile terminal according to claim 1, further comprising a receiving unit that receives information indicating whether or not the specific location is passable from the traffic management device in response to the identification information transmitted from the transmitting unit to the traffic management device. A detection unit that detects approach under specific conditions to another mobile terminal having information indicating an infected person or a close contact;
a third storage unit configured to store detection information when the detection unit detects an approach to the other portable terminal;
Further comprising:
The specific condition is preset based on time and distance,
The mobile terminal according to claim 1 or 2, wherein the transmission unit does not transmit the identification information to the traffic management device when the detection information is stored in the third storage unit. The mobile terminal according to claim 3, wherein the transmission unit transmits the identification information stored in the first storage unit to the traffic management device when the infection-related information is not stored in the second storage unit and the detection information is not stored in the third storage unit.