Information terminal, information processing device, information processing method, and program

Abstract

An information processing device according to one embodiment of the present disclosure is an information terminal that performs communication via a cellular communication network, and is provided with: a blocking unit (230) that blocks communication via a data communication network in the cellular communication network by deleting an access point name (APN) setting when an abnormality of the information terminal is detected; and a communication control unit (240) that, after the communication via the data communication network is blocked, transmits operation information indicating the operation state of the information terminal via a voice communication network among the cellular communication networks.

Description

Technical Field

[0001] The present disclosure relates to an information terminal, an information processing device, an information processing method, and a program. Background Art

[0002] Conventionally, there are IoT (Internet of Things) devices that perform communications via cellular communication networks (for example, see Patent Document 1).

[0003] The terminal device disclosed in patent document 1 determines whether to establish an IMS communication service connection via the connected core network or via other core networks when receiving identification information for selecting a network suitable for establishing an IMS communication service connection from a core network or IMS (IP (Internet Protocol) Multimedia Subsystem).

[0004] Prior art literature

[0005] Patent Literature

[0006] Patent Document 1: Japanese Patent Application Publication No. 2019-62443 Summary of the Invention

[0007] Problems to be solved by the invention

[0008] If a communicating device, such as an IoT device, becomes infected with a virus and is used maliciously as a springboard to spread the virus to other devices, the virus and other data could be transmitted to other devices, causing secondary damage. On the other hand, if communication is disabled, it is difficult to notify users who do not frequently check their information devices of the abnormality.

[0009] The present disclosure provides an information terminal and the like that can suppress secondary damage caused by communication of the information terminal and easily notify the action (operation, running) status of the information terminal.

[0010] Technical solutions to solve problems

[0011] A technical solution disclosed herein involves an information terminal that communicates via a cellular communication network, and comprises: a blocking unit that, upon detecting an abnormality in the information terminal, blocks communication via a data communication network in the cellular communication network by deleting an APN (Access Point Name) setting; and a communication control unit that, after blocking communication via the data communication network, sends action information indicating the action status of the information terminal via a voice communication network in the cellular communication network.

[0012] A technical solution disclosed herein involves an information processing device comprising: a control unit, which, upon detecting an abnormality of an information terminal, sends a deletion command to the information terminal, wherein the information terminal is a terminal for communicating via a cellular communication network, and the deletion command is a command for blocking communication via a data communication network in the cellular communication network by deleting an APN (Access Point Name) setting; and a notification unit, which, after sending the deletion command, upon receiving action information indicating the action status of the information terminal sent from the information terminal via a voice communication network in the cellular communication network, notifies abnormality information related to the abnormality of the information terminal based on the action information.

[0013] A technical solution disclosed herein involves an information processing method executed by an information terminal that communicates via a cellular communication network, comprising: upon detecting an abnormality of the information terminal, blocking communication via a data communication network in the cellular communication network by deleting an APN (Access Point Name) setting; and after blocking communication via the data communication network, sending action information indicating the action status of the information terminal via a voice communication network in the cellular communication network.

[0014] A program according to one technical aspect of the present disclosure is a program for causing a computer to execute the information processing method executed by the above-described information terminal.

[0015] An information processing method involved in a technical solution disclosed herein is an information processing method executed by an information processing device, comprising: in the case of detecting an abnormality of an information terminal, sending a deletion command to the information terminal, the information terminal being a terminal for communicating via a cellular communication network, the deletion command being a command for blocking communication via a data communication network in the cellular communication network by deleting an APN (Access Point Name) setting; after sending the deletion command, in the case of obtaining action information indicating the action status of the information terminal sent from the information terminal via a voice communication network in the cellular communication network, notifying abnormal information related to the abnormality of the information terminal based on the action information.

[0016] A program according to one aspect of the present disclosure is a program for causing a computer to execute the information processing method executed by the above-described information processing apparatus.

[0017] Effects of the Invention

[0018] According to the present disclosure, it is possible to provide an information terminal or the like that can suppress secondary damage caused by communication of the information terminal and easily notify the operating status of the information terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 It is a diagram showing the configuration (structure) of the information processing system according to the embodiment.

[0020] Figure 2 This is a block diagram showing the functional configuration of the information processing system according to the embodiment.

[0021] Figure 3 It is a sequence diagram showing the processing procedure (program, steps) of the information processing system according to the embodiment.

[0022] Figure 4 This is a flowchart showing a processing procedure of an abnormality detection process executed by a detection unit according to an embodiment.

[0023] Figure 5 This is a block diagram showing a functional configuration of an information processing system according to a modification of the embodiment.

[0024] Figure 6 It is a sequence diagram showing a processing procedure of an information processing system according to a modification of the embodiment. DETAILED DESCRIPTION

[0025] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

[0026] In addition, the embodiments described below all represent general or specific examples. The numerical values, shapes, materials, constituent elements, configuration positions of constituent elements, and connection methods, steps, the order of steps, etc. shown in the following embodiments are examples and are not intended to limit the present disclosure. In addition, among the constituent elements in the following embodiments, the constituent elements that are not recorded in the independent claims of the present disclosure are described as arbitrary constituent elements. In addition, the figures are not necessarily strictly illustrated. In the figures, the same figure marks are marked for substantially the same structures, and repeated descriptions are sometimes omitted or simplified.

[0027] (Implementation Method)

[0028] [constitute]

[0029] First, the configuration of the information processing system according to the embodiment will be described.

[0030] Figure 1 It is a diagram showing the configuration of an information processing system 10 according to the embodiment.

[0031] The information processing system 10 includes a server 100 and one or more terminals 200. The server 100 is an example of an information processing device. The terminal 200 is an example of an information terminal.

[0032] The server 100 is a computer that communicates with the terminal 200. For example, the server 100 communicates with the terminal 200 via a base station owned by a cellular carrier or the like. For example, the base station and the terminal 200 communicate via a cellular communication network.

[0033] A cellular communication network is a wireless communication network that includes both data and voice communication networks. A data communication network is used for transmitting and receiving data. A voice communication network is used for voice communication. For example, a voice communication network is used for transmitting and receiving voice during a voice call or for sending and receiving messages using SMS (Short Message Service).

[0034] The terminal 200 includes a device for communication via a cellular communication network (hereinafter also referred to as cellular communication), such as a SIM (Subscriber Identity Module), and uses the device to perform cellular communication with a base station.

[0035] The server 100 is communicably connected to the base station via the Internet, etc. The base station transmits (forwards) information received from the terminal 200 via cellular communication to the server 100, and transmits information received from the server 100 via the Internet to the terminal 200 via cellular communication.

[0036] Furthermore, the number of terminals 200 included in the information processing system 10 only needs to be one or more, and may be one or more.

[0037] Figure 2 1 is a block diagram showing the functional structure of the information processing system 10 according to the embodiment. Figure 2 In the figure, base stations owned by cellular network operators are omitted. Furthermore, only one terminal 200 included in information processing system 10 is shown. As described above, server 100 and terminal 200 indirectly perform cellular communication (specifically, communication including cellular communication) via a base station or the like. It is sufficient that at least a portion of the communication between server 100 and terminal 200 is cellular communication.

[0038] The server 100 is a computer that communicates with the terminal 200. The server 100 is, for example, a computer such as a personal computer or a tablet terminal. For example, the server 100 is implemented by a communication interface for communicating with the terminal 200, a non-volatile memory storing a program, a volatile memory as a temporary storage area for executing the program, an input and output port for receiving and sending a signal, and a processor for executing the program. The above-mentioned communication interface can be implemented by a connector for connecting a communication line, so that it can communicate with the base station through wired communication, or it can be implemented by an antenna and a wireless communication circuit, so that it can communicate with the base station through wireless communication. The server 100 may also have an antenna and a wireless communication circuit capable of wireless communication, so as to communicate directly with the terminal 200.

[0039] The server 100 includes a communication unit 110 , a detection unit 120 , a control unit 130 , a notification unit 140 , and a storage unit 150 .

[0040] The communication unit 110 is a communication interface for communicating with the terminal 200. Specifically, the communication unit 110 communicates with the terminal 200 via the base station. The communication unit 110 can be implemented by a connector for connecting a communication line, thereby enabling communication with the base station via wired communication, or by an antenna and a wireless communication circuit, thereby enabling communication with the base station via wireless communication.

[0041] Detection unit 120 is a processing unit that detects abnormalities in terminal 200. Detection unit 120 obtains status information indicating the status of terminal 200 from terminal 200 via communication unit 110 and detects abnormalities in terminal 200 based on the status information. Status information includes, for example, information indicating a list of processes executed by terminal 200, information indicating the volume of communications performed by terminal 200, and / or information indicating a list of communication sources and destinations communicated with by terminal 200. Details of the abnormality detection process performed by detection unit 120 will be described later.

[0042] Control unit 130 is a processing unit that sends a delete command to terminal 200 when an abnormality is detected in terminal 200. The delete command is a command that deletes the APN (Access Point Name) setting, thereby blocking communication (hereinafter referred to as "data communication") via the data communication network within the cellular communication network. Specifically, control unit 130 sends the delete command to terminal 200 via communication unit 110. When detection unit 120 detects an abnormality in terminal 200, control unit 130 causes terminal 200 to delete its stored APN setting.

[0043] APN settings are information used for data communication. For example, APN settings include the address, user name, password, and provider name used for data communication. The control unit 130 uses a delete command to cause the terminal 200 to delete this stored information, thereby preventing the terminal 200 from performing data communication.

[0044] Furthermore, the deletion command may be sent via data communication or voice communication.

[0045] Notification unit 140 is a processing unit that, after transmitting a delete command, receives action information indicating the operational status of terminal 200, transmitted from terminal 200 via a voice communication network within the cellular communication network. Based on the action information, notification unit 140 notifies the user of abnormality information regarding the abnormality of terminal 200. Communication via the voice communication network will be referred to as voice communication hereinafter. For example, notification unit 140 transmits abnormality information via communication unit 110 to a computer used by a user, such as an administrator of terminal 200, causing the abnormality information to be displayed on a display device, such as a monitor, connected to the computer.

[0046] The action information is information indicating the action state of the terminal 200. For example, the action information indicates whether the terminal 200 will stop or continue to operate. The action information may also include information indicating that some functions are to be stopped. In addition, the action information may also include information indicating what kind of abnormality has occurred.

[0047] Abnormal information is information related to abnormalities in the terminal 200. Abnormal information is, for example, information indicating the urgency with which the user needs to take action regarding the abnormality in the terminal 200. The urgency can be determined arbitrarily. For example, if the terminal 200 continues to operate, the abnormal information includes information indicating "Urgency: Low" or the like; if the terminal 200 stops operating, the abnormal information includes information indicating "Urgency: High" or the like. Abnormal information may also be information indicating the type of terminal 200, such as whether the terminal 200 is a fuel cell or a household appliance. In addition, the abnormal information may also include information indicating what type of abnormality has occurred.

[0048] Furthermore, the notification of abnormality information may be performed by any method such as an image or voice. The notification unit 140 may transmit image data as abnormality information to the computer used by the user, or may transmit voice data as abnormality information to the computer used by the user.

[0049] The processing units such as the detection unit 120 , the control unit 130 , and the notification unit 140 are implemented by, for example, a control program stored in the storage unit 150 and a processor such as a CPU (Central Processing Unit) that executes the control program.

[0050] The storage unit 150 stores control programs executed by each processing unit of the storage server 100 and information such as a whitelist used by the detection unit 120 to detect abnormalities. The storage unit 150 is implemented by, for example, a semiconductor memory or an HDD (Hard Disk Drive).

[0051] Terminal 200 is a device that communicates via a cellular communication network. Terminal 200 can be any device that performs cellular communication. For example, Terminal 200 can be a device that is not normally operated by a user, such as an administrator, after installation, such as a fuel cell used to charge a device.

[0052] The terminal 200 includes a communication unit 210 , a monitoring unit 220 , a blocking unit 230 , a communication control unit 240 , an operation unit 250 , and a storage unit 260 .

[0053] Communication unit 210 is a communication interface for communicating with server 100 via cellular communication. Specifically, communication unit 210 communicates with server 100 via a base station. Communication unit 110 includes a wireless communication module, such as a SIM card, for cellular communication with the base station. Alternatively, communication unit 210 may include a communication module for directly communicating data with server 100.

[0054] Monitoring unit 220 is a processing unit that monitors the status of terminal 200. Specifically, monitoring unit 220 obtains status information used by detection unit 120 to detect abnormalities in terminal 200. In this example, monitoring unit 220 obtains information transmitted to server 100 as status information. Furthermore, in this example, monitoring unit 220 periodically transmits status information to server 100 via communication unit 210. The timing for transmitting status information can also be arbitrarily determined. Status information is transmitted, for example, using data communications.

[0055] Blocking unit 230 is a processing unit that, upon detecting an abnormality in terminal 200, deletes the APN settings, thereby blocking communications via the data communication network within the cellular communication network. In this example, upon receiving a delete command from server 100 via communication unit 210, blocking unit 230 determines that an abnormality has been detected in terminal 200 and deletes the APN settings stored in storage unit 260.

[0056] Communication control unit 240 is a processing unit that transmits action information indicating the operational status of terminal 200 via the voice communication network within the cellular communication network after communication via the data communication network is blocked. Specifically, communication control unit 240 transmits the action information via voice communication after blocking unit 230 deletes the APN settings stored in storage unit 260.

[0057] For example, when communication via the data communication network is blocked, the communication control unit 240 determines whether the terminal 200 is able to operate (whether it can be operated). For example, when the communication control unit 240 determines that the terminal 200 is able to operate, it sends action information indicating that the terminal 200 continues to operate. On the other hand, for example, when the communication control unit 240 determines that the terminal 200 is unable to operate, it sends action information indicating that the terminal 200 stops operating. Depending on the terminal 200, some use information obtained through data communication to operate. The communication control unit 240, for example, determines whether the terminal 200 (more specifically, the action unit 250) uses information obtained through data communication to operate. For example, when the terminal 200 uses information obtained through data communication to operate, the communication control unit 240 determines that the terminal 200 is unable to operate. On the other hand, for example, when the terminal 200 operates without using information obtained through data communication, the communication control unit 240 determines that the terminal 200 is able to operate.

[0058] The action information is transmitted from the information terminal using, for example, SMS (Short Message Service). For example, if the communication control unit 240 determines that the terminal 200 is operational, it transmits a message via SMS indicating that the terminal 200 should continue operating as the action information. On the other hand, if the communication control unit 240 determines that the terminal 200 is inoperable, it transmits a message via SMS indicating that the terminal 200 should stop operating as the action information.

[0059] Furthermore, when the terminal 200 executes a plurality of processes, if some processes use information acquired through data communication and others do not, the communication control unit 240 may stop some processes and continue others.

[0060] The operation unit 250 is the execution unit that performs predetermined operations in the terminal 200. For example, if the terminal 200 is a fuel cell, the operation unit 250 includes a battery and a processing unit that controls the charging and discharging of the battery. For example, if communication via the data communication network is interrupted, the communication control unit 240 determines whether the operation unit 250 can operate, thereby determining whether the terminal 200 can operate.

[0061] The processing units such as the monitoring unit 220 , the blocking unit 230 , the communication control unit 240 , and the operation unit 250 are implemented by, for example, a control program stored in the storage unit 260 and a processor such as a CPU that executes the control program.

[0062] The storage unit 260 is a storage device that stores control programs executed by each processing unit included in the terminal 200, information such as APN settings, etc. The storage unit 260 is implemented by, for example, a semiconductor memory or an HDD.

[0063] [Processing process]

[0064] Next, the processing procedure of the information processing system 10 will be described.

[0065] Figure 3 It is a sequence diagram showing the processing procedure of the information processing system 10 according to the embodiment.

[0066] First, the terminal 200 repeatedly transmits status information to the server 100 (S110). Specifically, the monitoring unit 220 repeatedly acquires status information and periodically transmits the acquired status information to the server 100. The status information is transmitted, for example, by data communication.

[0067] The server 100 repeatedly receives the status information repeatedly transmitted from the terminal 200, and based on the received status information, detects an abnormality in the terminal 200. Specifically, the detection unit 120 determines whether the terminal 200 has an abnormality based on the status information (S120).

[0068] When the detection unit 120 determines that there is no abnormality in the terminal 200 ( S120 : No), the detection unit 120 repeats the determination in step S120 based on the status information repeatedly transmitted from the terminal 200 .

[0069] On the other hand, if the detection unit 120 determines that the terminal 200 has an abnormality (S120: Yes), the server 100 (more specifically, the control unit 130) sends a delete command to the terminal 200 (S130). The delete command can be sent via data communication or voice communication.

[0070] Upon receiving the delete command, the terminal 200 deletes the APN settings (S140). Specifically, the blocking unit 230 blocks communications via the data communication network in the cellular communication network by deleting the APN settings stored in the storage unit 260. In other words, the terminal 200 is unable to perform data communications.

[0071] Next, the terminal 200 determines whether it can continue to operate ( S150 ). For example, the communication control unit 240 determines whether the terminal 200 (eg, the operation unit 250 ) can operate independently with data communication blocked.

[0072] When the communication control unit 240 determines that the terminal 200 is operable (S150: YES), it transmits operation information indicating that the terminal 200 continues to operate to the server 100 (S160). In this case, the terminal 200 continues to operate independently.

[0073] On the other hand, when the communication control unit 240 determines that the terminal 200 is inoperable (S150: No), it transmits operation information indicating that the terminal 200 has stopped operating (S170). The terminal 200 then stops operating, and the process ends (S180).

[0074] Upon receiving the action information, the server 100 notifies the user of the abnormality of the terminal 200 based on the action information (S190). Specifically, the notification unit 140 notifies the user of the abnormality of the terminal 200 by transmitting the abnormality information to a computer used by the user.

[0075] Furthermore, upon detecting an abnormality in the terminal 200, the server 100 may immediately transmit abnormality information to the terminal 200 indicating that an abnormality has occurred in the terminal 200. In other words, the server 100 may transmit abnormality information to the terminal 200 before receiving the action information. In this case, upon further receiving the action information, the server 100 may further transmit abnormality information based on the action information to the terminal 200 (e.g., information indicating whether the terminal 200 is still operating).

[0076] Figure 4 1 is a flowchart showing the processing procedure of the abnormality detection process performed by the detection unit 120 according to the embodiment. Specifically, Figure 4 This is a flowchart showing a specific example of the processing executed in step S120.

[0077] First, the detection unit 120 determines whether a process other than the predetermined process is being executed on the terminal 200 (S210). For example, information such as a process list indicating the predetermined process is stored in advance in the storage unit 150. Furthermore, for example, the monitoring unit 220 transmits status information including information indicating the processes being executed on the terminal 200 to the server 100 in step S110. The detection unit 120 determines whether a process other than the predetermined process is being executed on the terminal 200 by, for example, obtaining information indicating the processes being executed on the terminal 200 and the process list and comparing them.

[0078] Furthermore, for example, count information indicating the number of times a process has been executed by the terminal 200 may be pre-stored in the storage unit 150. Furthermore, in step S110, the monitoring unit 220 may transmit status information including information indicating the number of times a process has been executed on the terminal 200 to the server 100. For example, the detection unit 120 may determine whether a process other than the predetermined process has been executed on the terminal 200 by obtaining the number of times a process has been executed on the terminal 200 and the count information and comparing them.

[0079] If the detection unit 120 determines that no processes other than the predetermined process are being executed on the terminal 200 (S210: No), it determines whether the amount of information transmitted and received by the terminal 200 (that is, the communication volume in the terminal 200) exceeds the predetermined communication volume (S220). For example, the number of packets required for communications regularly performed by the terminal 200 is stored in advance in the storage unit 150 as the predetermined communication volume. Furthermore, for example, the monitoring unit 220 transmits status information including information indicating the communication volume in the terminal 200 to the server 100 in step S110. The detection unit 120 obtains the information indicating the communication volume in the terminal 200 and the information indicating the predetermined communication volume, and determines whether the communication volume of the communication performed on the terminal 200 deviates from the aforementioned required number of packets.

[0080] If the detection unit 120 determines that the communication volume of the terminal 200 is below the predetermined communication volume (S220: No), it determines whether one or more communication devices (communication source or communication destination devices) communicating with the terminal 200 include communication devices other than the predetermined communication devices included in the whitelist (S230). For example, a whitelist representing one or more predetermined communication devices is pre-stored in the storage unit 150. For example, the whitelist includes, as information indicating the predetermined communication devices, IP addresses, domains, subnet masks, or address ranges of communication devices to which the terminal 200 may normally transmit data. Furthermore, for example, in step S110, the monitoring unit 220 transmits status information including information indicating the communication devices communicating with the terminal 200 to the server 100. The detection unit 120 determines whether the one or more communication devices communicating with the terminal 200 include communication devices other than the predetermined communication devices included in the whitelist by, for example, obtaining information indicating the one or more communication devices communicating with the terminal 200 and the whitelist and comparing them.

[0081] When the detection unit 120 determines that the one or more communication devices communicating with the terminal 200 do not include a communication device other than the predetermined communication device included in the whitelist ( S230 : No), it determines that the terminal 200 is normal ( S240 ).

[0082] On the other hand, the detection unit 120 determines that the terminal 200 is abnormal (S250) when it is determined that a process other than the predetermined process is executed on the terminal 200 (S210: Yes), when it is determined that the communication volume in the terminal 200 is greater than the predetermined communication volume (S220: Yes), or when it is determined that one or more communication devices communicating with the terminal 200 include a communication device other than the predetermined communication device included in the whitelist (S230: Yes).

[0083] Thus, for example, the detection unit 120 detects that a process other than the predetermined process is being executed on the terminal 200 as an abnormality in the terminal 200. Furthermore, for example, the detection unit 120 detects that the communication volume during communication performed by the terminal 200 is not the predetermined communication volume as an abnormality in the terminal 200. Furthermore, for example, the detection unit 120 detects that the communication device with which the terminal 200 is communicating is not the predetermined communication device as an abnormality in the terminal 200.

[0084] In addition, steps S210 to S230 may be performed in any order.

[0085] Alternatively, all of steps S210 to S230 may be executed, and information on what kind of abnormality has occurred in the terminal 200 may be transmitted to the server 100 as action information.

[0086] In addition, in step S220, the detection unit 120 may also determine that the communication volume in the terminal 200 is abnormal when it is less than the predetermined communication volume, and may also determine that the communication volume in the terminal 200 is normal when it is within the range of the predetermined communication volume, and may determine that the communication volume in the terminal 200 is abnormal when it is not within the range of the predetermined communication volume.

[0087] Furthermore, for example, when the terminal 200 has a communication means other than cellular communication, in step S220 , the communication volume in the cellular communication may be determined, or the communication volume in all communications executed by the terminal 200 may be determined.

[0088] Furthermore, for example, when the terminal 200 has a communication means other than cellular communication, in step S230 , either the communication device communicating with the terminal 200 via cellular communication or all communication devices communicating with the terminal 200 may be determined.

[0089] Furthermore, for example, a blacklist representing one or more predetermined communication devices may be stored in the storage unit 150. The detection unit 120 may also determine whether one or more communication devices communicating with the terminal 200 include a predetermined communication device included in the blacklist. In this case, for example, if one or more communication devices communicating with the terminal 200 include a predetermined communication device included in the blacklist, the detection unit 120 determines that the terminal 200 is abnormal.

[0090] [Modification]

[0091] Next, a modification of the information processing system according to one aspect of the present disclosure will be described. In the modification, the terminal includes a detection unit.

[0092] In the description of the modified examples, the same configurations and processes as those of the information processing system 10 are denoted by the same reference numerals, and the description may be partially simplified or omitted.

[0093] Figure 5 It is a block diagram showing the functional configuration of an information processing system 11 according to a modification of the embodiment.

[0094] The information processing system 11 includes a server 101 and one or more terminals 201. The server 101 is an example of an information processing device. The terminal 201 is an example of an information terminal.

[0095] The server 101 is a computer that communicates with the terminal 201. For example, the server 101 communicates with the terminal 201 via a base station owned by a cellular network operator or the like. For example, the base station and the terminal 201 communicate via a cellular communication network.

[0096] Server 101 includes a communication unit 110, a notification unit 140, and a storage unit 150. Unlike server 100, server 101 does not include a detection unit 120 or a control unit 130. In other words, server 101 does not detect abnormalities in terminal 200 and does not send a delete command to terminal 200. Therefore, storage unit 150 does not need to store information such as a process list indicating scheduled processes, information indicating scheduled communication volume, and a whitelist, which are used to detect abnormalities in terminal 201.

[0097] Upon receiving operation information indicating the operation status of the terminal 201 transmitted from the terminal 201 via the voice communication network in the cellular communication network, the notification unit 140 notifies the terminal 201 of abnormality information related to the abnormality based on the operation information.

[0098] The terminal 201 is a device that performs communications via a cellular communication network.

[0099] Terminal 201 includes a communication unit 210, a monitoring unit 220, a blocking unit 230, a communication control unit 240, an operation unit 250, a storage unit 260, and a detection unit 270. Terminal 201, unlike terminal 200, includes detection unit 270. That is, terminal 201 detects abnormalities in the present device.

[0100] The monitoring unit 220 is a processing unit that monitors the status of the terminal 201. Specifically, the monitoring unit 220 obtains status information used by the detection unit 270 to detect an abnormality in the terminal 201. The monitoring unit 220 does not have to transmit the status information to the server 101.

[0101] When the blocking unit 230 detects an abnormality in the terminal 201, it deletes the APN settings, thereby blocking communication via the data communication network in the cellular communication network. In this example, when the detection unit 270 detects an abnormality in the terminal 200, the blocking unit 230 deletes the APN settings stored in the storage unit 260.

[0102] Storage unit 260 is a storage device that stores control programs executed by each processing unit included in terminal 200, as well as information such as APN settings. In this example, storage unit 260 stores control programs executed by detection unit 270, as well as information such as a process list indicating scheduled processes, information indicating scheduled communication volume, and a whitelist for detecting abnormalities in terminal 201.

[0103] The detection unit 270 is a processing unit that detects an abnormality in the terminal 201. The detection unit 270 performs, for example, Figure 4 The abnormality detection process shown in FIG. 1 is used to detect an abnormality in terminal 201. For example, detection unit 270 detects that a process other than the predetermined process is being executed on terminal 201 as an abnormality in terminal 201. Furthermore, for example, detection unit 270 detects that the communication volume during communication performed by terminal 201 is not the predetermined communication volume as an abnormality in terminal 201. Furthermore, for example, detection unit 270 detects that the communication device with which terminal 201 is communicating is not the predetermined communication device as an abnormality in terminal 201.

[0104] Detection unit 270 is realized by, for example, a control program stored in storage unit 260 and a processor such as a CPU that executes the control program.

[0105] As described above, for example, the terminal 201 further includes the detection unit 270 that detects an abnormality in the terminal 201. When the detection unit 270 detects an abnormality in the terminal 201, the blocking unit 230 deletes the APN setting.

[0106] Figure 6 It is a sequence diagram showing a processing procedure of the information processing system 11 according to a modification of the embodiment.

[0107] First, the monitoring unit 220 repeatedly acquires status information. Next, the detection unit 270 determines whether or not there is an abnormality in the terminal 201 based on the status information (S310).

[0108] When the detection unit 270 determines that there is no abnormality in the terminal 201 ( S310 : No), the detection unit 270 repeats the determination of step S310 based on the status information repeatedly acquired by the monitoring unit 220 .

[0109] On the other hand, if the detection unit 270 determines that the terminal 201 has an abnormality (S310: YES), the blocking unit 230 blocks communication via the data communication network in the cellular communication network (S140) by deleting the APN settings stored in the storage unit 260. In other words, the terminal 201 is unable to perform data communication.

[0110] After step S140, the terminal 201 and the server 101 perform the following operations, for example, Figure 3 The terminal 200 and the server 100 perform the same process as shown, and notify the user of the abnormality of the terminal 201.

[0111] [Effects, etc.]

[0112] Hereinafter, technologies obtainable based on the disclosure of this specification will be exemplified, and effects and the like obtained based on the exemplified technologies will be described.

[0113] Technology 1 is an information terminal that communicates via a cellular communication network, and comprises: a blocking unit 230 that blocks communication via a data communication network in the cellular communication network by deleting the APN (Access Point Name) setting when an abnormality of the information terminal is detected; and a communication control unit 240 that sends action information indicating the action status of the information terminal via a voice communication network in the cellular communication network after blocking communication via the data communication network.

[0114] The information terminal is, for example, terminal 200 or terminal 201 .

[0115] If IoT devices, such as information terminals, are infected with viruses and used maliciously as a springboard to spread the virus to other devices, the virus and other data could be transmitted to other devices via communications over the data communication network, causing secondary damage. Therefore, in the event of an abnormality, such as an information terminal infected with a virus, the possibility of secondary damage can be reduced by quickly blocking communications over the data communication network. However, if an IoT device detects an abnormality and stops communication to prevent secondary damage, the only means of notifying the user of the abnormality is a physical display or indicator on the IoT device. However, if the information terminal is a device that users rarely check, the user may not notice the interruption when the information terminal blocks communications over the data communication network. Some information terminals operate by regularly communicating over the data communication network. When such a device blocks communications over the data communication network, operation ceases, and the user may not notice the cessation of operation.

[0116] Therefore, when an information terminal, such as an information terminal, detects an abnormality in a cellular communication network that communicates via a separate data communication network (data line) and voice communication network (call line), it deletes the APN settings used for communication via the cellular communication network, particularly for communication via the data communication network, thereby disabling communication via the data communication network. Furthermore, the information terminal outputs action information (i.e., an alarm) to the user via communication via the voice communication network (in other words, using a voice signal or SMS message on the voice communication line).

[0117] Thus, even after the information terminal blocks communications via the data communication network, the user can still understand the information terminal's operational status, such as whether the information terminal is continuing to operate, based on the operational information transmitted via the voice communication network. Therefore, the information terminal according to one technical solution of the present disclosure can suppress secondary damage caused by communications at the information terminal and easily provide notification of the information terminal's operational status.

[0118] Technology 2 is the information terminal according to Technology 1, wherein the information terminal involved in one technical solution of the present disclosure further includes a detection unit 270 for detecting an abnormality of the information terminal, and the blocking unit 230 deletes the APN setting when the detection unit 270 detects an abnormality of the information terminal.

[0119] This allows the information terminal to detect abnormalities by itself, so that when an abnormality in the information terminal is detected, communication via the data communication network can be quickly blocked.

[0120] Technique 3 is the information terminal according to Technique 2, wherein the detection unit 270 detects that a process other than a predetermined process is executed on the information terminal as an abnormality of the information terminal.

[0121] According to this, the information terminal can appropriately detect abnormality of the information terminal.

[0122] Technique 4 is the information terminal according to Technique 2 or 3, wherein the detection unit 270 detects, as an abnormality of the information terminal, a case where the communication volume during communication performed by the information terminal is not a predetermined communication volume.

[0123] According to this, the information terminal can appropriately detect abnormality of the information terminal.

[0124] Technique 5 is the information terminal according to any one of Techniques 2 to 4, wherein the detection unit 270 detects, as an abnormality in the information terminal, that a communication device with which the information terminal communicates is not a predetermined communication device.

[0125] According to this, the information terminal can appropriately detect abnormality of the information terminal.

[0126] Technique 6 is the information terminal according to any one of Techniques 1 to 5, wherein the action information is transmitted from the information terminal using SMS (Short Message Service).

[0127] With this, the information terminal can notify the user of the operating status of the information terminal by using communication via the voice communication network.

[0128] Technology 7 is an information terminal according to any one of technologies 1 to 6, wherein the communication control unit 240 determines whether the information terminal can operate when the communication via the data communication network is blocked, and when it is determined that the information terminal can operate, sends action information indicating that the information terminal continues to operate; when it is determined that the information terminal cannot operate, sends action information indicating that the information terminal stops operating.

[0129] Depending on the type of information terminal, some devices can continue to operate even when not communicating via the data communication network. Therefore, if the information terminal is determined to be able to operate, it continues to operate and transmits action information indicating that the information terminal continues to operate. On the other hand, if the information terminal is determined to be unable to operate, it transmits action information indicating that the information terminal has stopped operating and stops operating. This prevents the information terminal from stopping operation unnecessarily.

[0130] Technology 8 is an information processing device comprising: a control unit 130, which, upon detecting an abnormality in an information terminal communicating via a cellular communication network, sends a deletion command to the information terminal, wherein the deletion command is a command for blocking communication via a data communication network in the cellular communication network by deleting an APN (Access Point Name) setting; and a notification unit 140, which, after sending the deletion command, upon receiving action information indicating the action status of the information terminal sent from the information terminal via a voice communication network in the cellular communication network, notifies abnormality information related to the abnormality of the information terminal based on the action information.

[0131] The information processing device is, for example, the server 100 .

[0132] Accordingly, upon detecting an abnormality in an information terminal, the information processing device can cause the information terminal to delete its APN settings, preventing it from communicating via the data communication network, and notify the user of operational information transmitted from the information terminal via the voice communication network. Therefore, the information processing device according to one technical solution of the present disclosure can suppress secondary damage caused by communications with the information terminal and easily notify the user of the operational status of the information terminal.

[0133] Technology 9 is an information processing method, which is an information processing method executed by an information terminal that communicates via a cellular communication network, including: when an abnormality of the information terminal is detected, blocking the communication via the data communication network in the cellular communication network by deleting the APN (Access Point Name) setting (S140); after blocking the communication via the data communication network, sending action information indicating the action status of the information terminal via the voice communication network in the cellular communication network (S160 or S170).

[0134] Accordingly, the same effect as the information terminal involved in one technical solution of the present disclosure is achieved.

[0135] Technique 10 is a program for causing a computer to execute the information processing method described in Technique 9.

[0136] Accordingly, the same effect as the information terminal involved in one technical solution of the present disclosure is achieved.

[0137] Technology 11 is an information processing method, which is an information processing method executed by an information processing device, including: when an abnormality of an information terminal communicating via a cellular communication network is detected (S120: yes), sending a deletion command to the information terminal, wherein the deletion command is a command to block communication via the data communication network in the cellular communication network by deleting the APN (Access Point Name) setting (S130); after sending the deletion command, when action information indicating the action status of the information terminal sent from the information terminal via the voice communication network in the cellular communication network is obtained, notifying abnormality information related to the abnormality of the information terminal based on the action information (S190).

[0138] This achieves the same effect as the information processing device according to one technical solution of the present disclosure.

[0139] Technique 12 is a program for causing a computer to execute the information processing method described in Technique 11.

[0140] This achieves the same effect as the information processing device according to one technical solution of the present disclosure.

[0141] (Other embodiments)

[0142] As mentioned above, although embodiment was described, this disclosure is not limited to the said embodiment.

[0143] For example, both the server and the terminal may include a detection unit. In this case, for example, the monitoring unit may also transmit status information to the server. Furthermore, in this case, the server may also include a control unit. For example, if both the server and the terminal include a detection unit, the server and the terminal may perform the same or different anomaly detection processes.

[0144] Furthermore, as in the above embodiment, in the configuration where the server sends a delete command to the terminal, the server may or may not include a detection unit. In this case, for example, the server may obtain the terminal's abnormality detection results from a computer (not shown). In this case, for example, the terminal may also transmit status information to the computer. In this case, for example, the server may also forward status information received from the terminal to the computer.

[0145] Alternatively, for example, the terminal may include a detection unit that sends a detection result to a server, and the server may determine whether to send a delete command based on the received detection result. In this case, the terminal may also determine whether to delete the APN setting based on whether the delete command is received.

[0146] As described above, the configurations and processes of the above-described embodiment and modified examples may be arbitrarily combined.

[0147] For example, the detection unit 120 may execute the process for detecting an abnormality that is executed by the detection unit 270. The following examples illustrate techniques that can be obtained based on the disclosure of this specification.

[0148] Technology 13 is an information processing device according to Technology 8, wherein the information processing device involved in a technical solution of the present disclosure further includes a detection unit 120 for detecting an abnormality of the information terminal, and the control unit 130 sends a deletion command to the information terminal when the detection unit 120 detects an abnormality of the information terminal.

[0149] According to this, the information processing device can detect an abnormality in the information terminal. Therefore, when an abnormality in the information terminal is detected, the communication via the data communication network can be quickly blocked.

[0150] Technique 14 is the information processing device according to Technique 13, wherein the detection unit 120 detects that a process other than a predetermined process is executed on the information terminal as an abnormality of the information terminal.

[0151] Thereby, the information processing device can appropriately detect abnormality in the information terminal.

[0152] Technique 15 is the information terminal according to Technique 13 or 14, wherein the detection unit 120 detects, as an abnormality of the information terminal, a case where the communication volume during communication performed by the information terminal is not a predetermined communication volume.

[0153] Thereby, the information processing device can appropriately detect abnormality in the information terminal.

[0154] Technique 16 is the information terminal according to any one of Techniques 13 to 15, wherein the detection unit 120 detects, as an abnormality of the information terminal, that a communication device with which the information terminal communicates is not a predetermined communication device.

[0155] Thereby, the information processing device can appropriately detect abnormality in the information terminal.

[0156] Technique 17 is the information terminal according to any one of Techniques 8 and 13 to 16, wherein the action information is transmitted from the information terminal via SMS.

[0157] With this, the information processing device can obtain the operating status of the information terminal transmitted through communication via the voice communication network and notify the user.

[0158] Furthermore, for example, the server and terminal described in the above embodiments may each be realized as a single device including all components, or may be realized by distributing each function among a plurality of devices and making the plurality of devices cooperate with each other.

[0159] Furthermore, in the above-described embodiment, the processing executed by a specific processing unit may be executed by another processing unit. Furthermore, the order of multiple processing may be changed, and multiple processing may be executed in parallel.

[0160] In the above embodiments, each component may be implemented by executing a software program suitable for each component. Each component may also be implemented by a program execution unit such as a CPU or a processor reading and executing a software program recorded on a recording medium such as a hard disk or a semiconductor memory.

[0161] In addition, each component can also be implemented by hardware. For example, each component can also be a circuit (or integrated circuit). These circuits can constitute a circuit as a whole, or they can be different circuits. In addition, these circuits can be general circuits or dedicated circuits.

[0162] Furthermore, the overall or specific technical solutions of the present disclosure may also be implemented by a device, system, method, integrated circuit, computer program, or non-transitory recording medium such as a computer-readable CD-ROM. Furthermore, the overall or specific technical solutions of the present disclosure may also be implemented by any combination of devices, systems, methods, integrated circuits, computer programs, and recording media.

[0163] Furthermore, the present disclosure also includes forms obtained by applying various modifications that can be conceived by those skilled in the art to the embodiments, or forms achieved by arbitrarily combining the components and functions in the embodiments without departing from the gist of the present disclosure.

[0164] Industrial applicability

[0165] The present disclosure is useful for IoT devices or servers communicating with IoT devices.

[0166] Description of Reference Numerals

[0167] 10, 11: Information Processing Systems

[0168] 100, 101: Server

[0169] 110, 210: Ministry of Communications

[0170] 120, 270: Inspection Department

[0171] 130: Control Department

[0172] 140: Notification Department

[0173] 150, 260: Storage

[0174] 200, 201: Terminal

[0175] 220: Surveillance Department

[0176] 230: Blocking Department

[0177] 240: Communication Control Department

[0178] 250: Action

Claims

1. An information terminal for communicating via a cellular communication network, comprising: a blocking unit that blocks communication via the data communication network in the cellular communication network by deleting an access point name setting (APN setting) when an abnormality of the information terminal is detected; and The communication control unit transmits operation information indicating an operation state of the information terminal via the voice communication network in the cellular communication network after blocking the communication via the data communication network.

2. The information terminal according to claim 1, further comprising a detection unit configured to detect an abnormality in the information terminal, The blocking unit deletes the APN setting when the detecting unit detects an abnormality in the information terminal.

3. The information terminal according to claim 2, The detection unit detects that a process other than a predetermined process is executed on the information terminal as an abnormality of the information terminal.

4. The information terminal according to claim 2, The detection unit detects, as an abnormality in the information terminal, a case where the communication volume during communication performed by the information terminal is not a predetermined communication volume.

5. The information terminal according to claim 2, The detection unit detects, as an abnormality of the information terminal, a situation in which the communication device with which the information terminal communicates is not a predetermined communication device.

6. The information terminal according to claim 1, The action information is sent from the information terminal using a short message service (SMS).

7. The information terminal according to any one of claims 1 to 6, The communication control unit, When communication via the data communication network is blocked, determining whether the information terminal is operable, If it is determined that the information terminal is capable of operation, the operation information indicating that the information terminal continues to operate is transmitted; If it is determined that the information terminal cannot operate, the operation information indicating that the information terminal stops operating is transmitted.

8. An information processing device comprising: a control unit that, upon detecting an abnormality in an information terminal, sends a deletion command to the information terminal, the information terminal being a terminal that communicates via a cellular communication network, the deletion command being a command to block communication via a data communication network in the cellular communication network by deleting an access point name setting (APN setting); and The notification unit, after sending the deletion command, notifies abnormality information related to the abnormality of the information terminal based on the action information when receiving action information indicating the action status of the information terminal sent from the information terminal via the voice communication network in the cellular communication network.

9. An information processing method, executed by an information terminal communicating via a cellular communication network, comprising: When an abnormality of the information terminal is detected, blocking communication via the data communication network in the cellular communication network by deleting an access point name setting, i.e., an APN setting; After blocking the communication via the data communication network, operation information indicating the operation state of the information terminal is transmitted via the voice communication network in the cellular communication network.

10. A program for causing a computer to execute the information processing method according to claim 9.

11. An information processing method, performed by an information processing device, comprising: When an abnormality of an information terminal is detected, a deletion command is sent to the information terminal, the information terminal being a terminal that communicates via a cellular communication network, the deletion command being a command to block communication via a data communication network in the cellular communication network by deleting an access point name setting (APN setting); After sending the delete command, when action information indicating the action status of the information terminal transmitted from the information terminal via the voice communication network in the cellular communication network is obtained, abnormality information related to the abnormality of the information terminal is notified based on the action information.

12. A program for causing a computer to execute the information processing method according to claim 11.

Images