Portable terminal and management system

Abstract

To provide a configuration capable of determining whether or not a portable terminal itself should restrict a function in consideration of non-connection time even when the portable terminal cannot perform radio communication with a server.SOLUTION: In a portable terminal 10, when it is determined that function restriction is necessary because non-connection time T during which a state in which wireless communication with a management server 2 cannot be performed continues is equal to or longer than predetermined time Ts, function control processing for restricting a function is performed with respect to a predetermined function.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a mobile terminal and a management system for managing the mobile terminal.

Background Art

[0002] A mobile terminal represented by a smartphone can store various data together with advanced communication functions. In a system for managing a mobile terminal in which confidential information such as customer information is stored, as measures against terminal loss, theft, etc., methods such as remote deletion of confidential information stored in the mobile terminal and location tracking of the mobile terminal have been proposed.

[0003] For example, in the information security system disclosed in Patent Document 1 below, when an information security request for a mobile terminal device is made, personal authentication processing is performed by an authentication device. When this personal authentication matches, a remote operation packet is generated by a management device and transmitted from a relay base station to the mobile terminal device. The remote operation packet is received by the mobile terminal device and a predetermined information security process is performed in response thereto. Thereby, against theft and loss of the mobile terminal device, a predetermined information security process is implemented according to the remote operation of its owner, so that the security of the information stored in the mobile terminal device can be enhanced.

[0004] Also, for example, in the terminal management system disclosed in Patent Document 2 below, a process of detecting unauthorized access within a network is performed by a server. When unauthorized access is detected and the unauthorized terminal performing the unauthorized access is identified, a remote initialization instruction signal is transmitted to the unauthorized terminal. Thereby, malware can be removed by the initialization process executed by the unauthorized terminal that has received the initialization instruction signal, and unauthorized access can be blocked.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

[0006] By the way, in the information security system and the terminal management system described above, on the premise that the server managed by the system and the mobile terminal can communicate with each other, a situation where the mobile terminal cannot communicate with the server is not assumed. For example, if the mobile terminal is taken out of the communication range with the server or the communication function is disconnected, there is a problem that unauthorized use of the mobile terminal will continue if it is not under the management of the management system. On the other hand, if the mobile terminal whose communication with the server is interrupted is uniformly restricted in function, there is a problem that the function will be restricted even if the communication is temporarily interrupted during normal business.

[0007] The present invention has been made to solve the above-described problems, and an object thereof is to provide a configuration capable of determining whether or not to restrict the function of a mobile terminal in consideration of the unconnected time even when the mobile terminal cannot wirelessly communicate with a server. [Means for Solving the Problems]

[0008] To achieve the above object, a mobile terminal according to the present invention is a mobile terminal (10) capable of executing a predetermined function, a communication unit (26) that wirelessly communicates with a server (2), a determination unit (21) that determines whether or not to restrict the function of the predetermined function in consideration of an unconnected time (T) during which the state of being unable to wirelessly communicate with the server continues, a function restriction unit (21) that performs a function restriction process for restricting at least a part of the predetermined function when it is determined by the determination unit that function restriction is necessary, and is provided with The determination unit determines that function restriction is necessary when the unconnected time exceeds a predetermined time.

[0009] The management system according to the present invention one or two or more mobile terminals (10), a server (2) capable of communicating with the mobile terminal, A management system (1) comprising: The mobile terminal is capable of executing a predetermined function, a communication unit (26) for wirelessly communicating with the server, a determination unit (21) for determining whether function restriction is necessary for the predetermined function in consideration of an unconnected time (T) during which the state of being unable to wirelessly communicate with the server continues, a function restriction unit (21) for performing a function control process for restricting at least a part of the predetermined function when it is determined by the determination unit that function restriction is necessary, comprising: The determination unit determines that function restriction is necessary when the unconnected time exceeds a predetermined time. Note that the reference numerals in each of the above parentheses indicate the correspondence with the specific means described in the embodiments described later.

Advantages of the Invention

[0010] In the present invention, when the unconnected time during which the state of being unable to wirelessly communicate with the server continues exceeds a predetermined time and the determination unit determines that function restriction is necessary, a function control process for restricting at least a part of the predetermined function is performed by the function restriction unit.

[0011] Thereby, even when the mobile terminal is in a situation where it cannot wirelessly communicate with the server, the mobile terminal itself can determine whether function restriction should be performed in consideration of the unconnected time, and it is possible to appropriately prevent unauthorized use of the mobile terminal due to unauthorized removal or the like.

[0012] When the determination unit determines that the wireless communication with the server via the communication unit satisfies a predetermined condition and thus function restriction is unnecessary, the function restriction unit may perform a process of releasing the function restriction when it is determined by the determination unit that function restriction is unnecessary after performing the function control process.

[0013] As a result, by satisfying a predetermined condition such as reconnection to the server, it is possible to automatically recover from the function-restricted state to the function-unrestricted state. Therefore, even if the function restriction process is performed due to a temporary communication failure during normal operations, it can be recovered immediately, so that the security of the mobile terminal can be ensured while enhancing the convenience regarding normal operations and the like.

[0014] The function restriction unit may change the restriction content in the function control process step by step according to the unconnected time. Thereby, for example, when the unconnected time is short, only the access to high-security information is restricted, and when the unconnected time becomes long, all functions are restricted, etc., and stepwise restrictions can be performed. When changing the restriction content step by step in this way, even if the access restriction to high-security information is implemented due to a temporary communication failure during normal operations, it will not affect normal operations that do not access high-security information. Therefore, the security of the mobile terminal can be ensured while enhancing the convenience regarding normal operations and the like.

[0015] The conditions required for releasing the function restriction (restriction release conditions) in the function restriction unit may be changed according to the restriction content that has changed step by step. Thereby, for example, in the restriction content that emphasizes security, the restriction release conditions can be made stricter, so that compared with the case where the same restriction release conditions are set for each restriction content, more precise restriction release conditions suitable for the environment and the like can be set.

[0016] When the function determination unit determines that the function executed before the unconnected time since the state of being unable to perform wireless communication with the server reaches a predetermined time or more is a permitted function, the function restriction unit may not perform the function control process regardless of the determination result of the determination unit.

[0017] Thus, for example, by setting the functions executed in normal operations as permitted functions, function restriction processing is not performed during normal operations, and when functions different from the permitted functions are executed, that is, when functions that are assumed to be misused are executed, function restriction processing will be performed. Therefore, it is possible to enhance the convenience regarding normal operations and the like while ensuring the security of the mobile terminal.

[0018] When it is determined by the other-terminal connection determination unit that predetermined connection information is received from another mobile terminal via the short-range wireless communication unit, the function restriction unit may not perform function control processing regardless of the determination result of the determination unit.

[0019] When receiving predetermined connection information from another mobile terminal via the short-range wireless communication unit, it can be assumed that normal operations are being performed together with the other mobile terminal. Therefore, it is possible to prevent unnecessary function control processing from being performed even in such cases.

[0020] When it is determined by the area determination unit that the mobile terminal is being used outside a predetermined management area, the function restriction unit may perform function control processing regardless of the determination result of the determination unit.

[0021] Thereby, even when in a state capable of wireless communication with the server, if it is determined that the mobile terminal is being used outside the predetermined management area, it is highly likely that the illicitly removed mobile terminal is illicitly wirelessly connected to the server. By performing function control processing based on this judgment, the security of the mobile terminal can be further enhanced.

[0022] If the determination unit determines that wireless communication with the server is possible immediately before power-off and at the next power-on, it may determine that function restriction is unnecessary at the time of power-on. Thereby, it is possible to prevent unnecessary function control processing from being performed assuming that the unconnected time at the time of power-on is longer than a predetermined time because the power-off time was long.

Brief Description of the Drawings

[0023]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

MODE FOR CARRYING OUT THE INVENTION

[0024] [First Embodiment] Hereinafter, a first embodiment embodying a mobile terminal and a management system according to the present invention will be described with reference to the drawings. As shown in FIG. 1, the management system 1 according to the present embodiment is configured as a mobile terminal management system including one or two or more mobile terminals 10 and a management server 2 for managing each mobile terminal 10. The management server 2 functions to manage data and the like acquired from the mobile terminal 10 by communicating with the mobile terminal 10 connected to a predetermined network N such as a corporate LAN via an access point 3 or the like arranged within a predetermined management area S.

[0025] The mobile terminal 10 according to this embodiment is configured as a portable information reading terminal that is carried by a user and used in various places. In addition to the function of reading and writing information stored in a wireless tag Tg such as an RF tag via radio waves transmitted and received through an antenna, it also has a function as an information code reader that optically reads information codes such as barcodes and two-dimensional codes, and is configured to be able to perform reading in two ways.

[0026] As shown in Fig. 2(A), the mobile terminal 10 mainly includes, in addition to a control unit 21 that controls overall operations and a storage unit 22 composed of a semiconductor memory and the like, a display unit 23 whose display content is controlled by the control unit 21, an operation unit 24 that outputs an operation signal corresponding to an input operation to the control unit 21, a notification unit 25 whose light emission state of a light emitting unit, sound notification state of a speaker, ringing state of a buzzer, etc. are controlled by the control unit 21, a communication unit 26 for wireless or wired communication with an external device such as a management server 2, a short-range wireless communication unit 27 for short-range wireless communication with another mobile terminal 10, etc., and a power supply unit 28 that supplies power from a battery 29 to various electrical components.

[0027] Further, the mobile terminal 10 includes a wireless tag processing unit 30 for reading and writing information of the wireless tag Tg and an information code reading unit 40 for optically reading information codes, and the reading results of each are stored in the storage unit 22. The reading results and the like stored in the storage unit 22 in this way are transmitted to the management server 2 via the communication unit 26 at a predetermined timing.

[0028] First, the wireless tag processing unit 30 will be described with reference to Fig. 2(B). The wireless tag processing unit 30 functions as a wireless communication unit that wirelessly communicates with a plurality of wireless tags Tg using a predetermined modulation method controlled by the control unit 21. It cooperates with the antenna 34 and the control unit 21 to perform communication via electromagnetic waves with the wireless tag Tg, and reads the data stored in the wireless tag Tg or writes data to the wireless tag Tg. This wireless tag processing unit 30 is configured as a circuit that performs transmission using a known radio wave method, and as schematically shown in FIG. 2(B), it has a transmission circuit 31, a reception circuit 32, a matching circuit 33, and the like.

[0029] The transmission circuit 31 is composed of a carrier oscillator, an encoding unit, an amplifier, a transmission unit filter, a modulation unit, etc., and is configured such that a carrier (carrier wave) of a predetermined frequency is output from the carrier oscillator. Also, the encoding unit is connected to the control unit 21, and encodes the transmission data output from the control unit 21 and outputs it to the modulation unit. The modulation unit is the part where the carrier (carrier wave) from the carrier oscillator and the transmission data from the encoding unit are input. For the carrier (carrier wave) output from the carrier oscillator, it generates a modulated signal modulated by the encoded transmission code (modulation signal) output from the encoding unit when transmitting a command to the communication target, and outputs it to the amplifier. The amplifier amplifies the input signal (the modulated signal modulated by the modulation unit) with a predetermined gain, and outputs the amplified signal to the transmission unit filter. The transmission unit filter outputs the transmission signal obtained by filtering the amplified signal from the amplifier to the antenna 34 via the matching circuit 33. When the transmission signal is output to the antenna 34 in this way, the transmission signal is radiated to the outside from the antenna 34 as transmission radio waves.

[0030] On one hand, the response signal received by the antenna 34 is input into the receiving circuit 32 via the matching circuit 33. This receiving circuit 32 is composed of a receiving section filter, an amplifier, a demodulation section, a binarization processing section, a decoding section, etc. After filtering the response signal received via the antenna 34 by the receiving section filter, it is amplified by the amplifier, and the amplified signal is demodulated by the demodulation section. Then, the waveform of the demodulated signal is binarized by the binarization processing section and decoded by the decoding section, and the decoded signal is output to the control unit 21 as received data.

[0031] Next, the information code reading unit 40 will be described with reference to Fig. 2(C). The information code reading unit 40 functions to optically read information codes. As shown in Fig. 2(C), it has a configuration including a light receiving sensor 43 composed of a CCD area sensor or the like, an imaging lens 42, an illumination unit 41 composed of a plurality of LEDs, lenses, etc., and functions to read the information code C (barcode or two-dimensional code) attached to the reading target R in cooperation with the control unit 21.

[0032] When reading is performed by this information code reading unit 40, first, illumination light Lf is emitted from the illumination unit 41 upon receiving a command from the control unit 21, and this illumination light Lf is irradiated onto the reading target R through the reading port 12. Then, the reflected light Lr reflected by the information code C of the illumination light Lf is taken into the interior through the reading port 12 and received by the light receiving sensor 43 through the imaging lens 42. The imaging lens 42 arranged between the reading port 12 and the light receiving sensor 43 is configured to form an image of the information code C on the light receiving sensor 43, and the light receiving sensor 43 outputs a light receiving signal corresponding to the image of the information code C. The light receiving signal output from the light receiving sensor 43 is stored in the storage unit 22 (Fig. 2(A)) as image data and is used for the decoding process to obtain the information contained in the information code C. Note that the information code reading unit 40 is provided with an amplification circuit for amplifying the signal from the light receiving sensor 43, an AD conversion circuit for converting the amplified signal into a digital signal, etc., but the illustration of these circuits is omitted.

[0033] When the mobile terminal 10 configured as described above is illegally taken out of the management area S, in order to prevent unauthorized use of the reading results and the like stored in the storage unit 22, a predetermined function executable by the mobile terminal 10 is restricted by the monitoring process performed by the control unit 21. In the present embodiment, as the predetermined function to be restricted, a function for reading the reading results and the like stored in the storage unit 22 is adopted.

[0034] Hereinafter, the monitoring process performed by the control unit 21 will be described in detail with reference to the flowchart shown in FIG. 3. When the power of the mobile terminal 10 is turned on and the monitoring process is started by the control unit 21, in the determination process of step S101 in FIG. 3, it is determined whether or not a restriction flag set as described later is stored in the storage unit 22. Here, when the restriction flag is not stored in the storage unit 22 (No in S101), in the determination process of step S102, it is determined whether or not function restriction is necessary for the above-described predetermined function, taking into account the unconnected time T during which the state of being unable to communicate wirelessly with the management server 2 continues.

[0035] In the present embodiment, it is determined that function restriction is necessary when the unconnected time T is equal to or longer than a predetermined time (for example, 1 hour) Ts. If the mobile terminal 10 is in a state where it can communicate with the management server 2 via the communication unit 26, the determination of No is repeated in step S102. Note that the control unit 21 that performs the determination process of step S102 and the determination process shown in step S105 described later may correspond to an example of a “determination unit” that determines whether or not function restriction is necessary for a predetermined function.

[0036] Then, when the mobile terminal 10 is taken out of the management area S and the unconnected time T becomes equal to or longer than the predetermined time Ts because it cannot communicate wirelessly with the management server 2 (Yes in S102), it is determined that function restriction is necessary. In this case, the restriction flag setting process of step S103 is performed, and a restriction flag for restricting a predetermined function is set so as not to be deleted only by turning off the power or simply initializing, and is stored in the storage unit 22.

[0037] If the restriction flag set as described above is stored in the storage unit 22, or if the restriction flag is already stored in the storage unit 22 when the power is turned on (Yes in S101), the function restriction process shown in step S104 is performed, and the predetermined function described above is restricted. Note that the control unit 21 that performs the function restriction process in step S104 and the function restriction release process in step S106 described later may correspond to an example of a "function restriction unit".

[0038] Then, in the determination process shown in step S105, it is determined whether function restriction is unnecessary. In the present embodiment, in order to determine that function restriction is unnecessary, a communicable state (communication recovery) with the management server 2 is adopted as a predetermined condition that should be satisfied by the wireless communication with the management server 2 via the communication unit 26. Until the state where wireless communication with the management server 2 can be established again, the determination of No in step S105 is repeated, and the function restriction state in which the predetermined function is restricted is maintained.

[0039] After that, when the portable terminal 10 temporarily taken out of the management area S returns to the management area S and becomes communicable with the management server 2 again, it is determined that function restriction is unnecessary (Yes in S105), and the function restriction release process shown in step S106 is performed. In this process, the restriction flag is erased from the storage unit 22, and the function restriction is released for the above-described predetermined function, resulting in a function restriction release state. After the function restriction is released in this way, the process from step S102 is performed.

[0040] As described above, in the portable terminal 10 and the management system 1 according to the present embodiment, when the unconnected time T during which the state of being unable to perform wireless communication with the management server 2 continues becomes equal to or longer than the predetermined time Ts (Yes in S102) and it is determined that function restriction is necessary, function control processing for restricting the predetermined function is performed (S104).

[0041] Thus, even when the mobile terminal 10 cannot perform wireless communication with the management server 2, the mobile terminal 10 itself can determine whether function restriction should be performed in consideration of the unconnected time T, and can appropriately prevent unauthorized use of the mobile terminal 10 due to unauthorized removal or the like.

[0042] Note that the above-mentioned predetermined time serving as a threshold for determining the necessity of function restriction can be freely set by an administrator or the like of this management system. At this time, for example, the above-mentioned predetermined time may be set for each mobile terminal 10, or the above-mentioned predetermined time may be set for each terminal group to which the mobile terminal 10 belongs, or the above-mentioned predetermined time may be set for each access point 3. Thereby, for example, in a terminal group where wireless communication is expected to be always possible, such as a warehouse within the company, the above-mentioned predetermined time can be set to a relatively short 3 hours, and in a terminal group that may be taken out and used outside the company for delivery or the like, the above-mentioned predetermined time can be set to a relatively long 1 day.

[0043] Particularly, in the determination process of step S105, when the wireless communication with the management server 2 via the communication unit 26 satisfies the above-mentioned predetermined conditions, it is determined that function restriction is unnecessary (Yes in S105), and the process of releasing the above-mentioned function restriction is performed (S106).

[0044] Thereby, when the mobile terminal 10 satisfies the above-mentioned predetermined conditions, it can automatically recover from the function restriction state to the function unrestricted state. Therefore, for example, when an operator carrying the mobile terminal 10 temporarily goes outside the management area S, even if the function restriction process is performed due to a temporary communication failure during normal business, it can be recovered immediately, so that the security of the mobile terminal 10 can be ensured while improving the convenience regarding normal business and the like.

[0045] In the above-described monitoring process, in order to prioritize security over convenience, the determination process in step S105 and the function restriction release process in step S106 described above may be abolished so that the mobile terminal 10 itself cannot release the function restriction. In this case, the restriction flag can be deleted from the storage unit 22 by a function restriction release operation separately performed by the administrator or the like of this management system, thereby releasing the above-described function restriction.

[0046] Further, as a predetermined function restricted according to the restriction flag stored in the storage unit 22 by the above-described function restriction release process, it is not limited to adopting a function for reading the reading result or the like stored in the storage unit 22, and other functions excluding the functions used in normal business may be adopted, or at least a part of the predetermined functions executable by the mobile terminal 10 may be adopted. Further, the mobile terminal 10 itself may be initialized so that the restriction flag is not deleted by the above-described function restriction release process.

[0047] [Second Embodiment] Next, a mobile terminal and a management system according to a second embodiment of the present invention will be described with reference to the drawings. In this second embodiment, the main difference from the first embodiment is that the restriction content in the function control process is changed stepwise according to the unconnected time. Therefore, the same reference numerals are given to the substantially same components as those in the first embodiment, and the description thereof is omitted.

[0048] In this embodiment, when the mobile terminal 10 enters an unconnected state where it cannot perform wireless communication with the management server 2, it enters a state where functions are restricted, and the restriction content changes stepwise so that it becomes stricter as the unconnected time T becomes longer.

[0049] Therefore, in the monitoring process in this embodiment, as shown in the flowchart illustrated in FIG. 4, when it enters the unconnected state (Yes in S201 of FIG. 4), if the unconnected time T is within Ts1 (for example, 5 minutes) (Yes in S202), the first restriction flag setting process shown in step S203 is performed, and a first restriction flag for restricting the functions to the restriction content in the first stage is set and stored in the storage unit 22.

[0050] After that, when the unconnected time T exceeds Ts1 and is within Ts2 (for example, 1 hour) (No in S202, Yes in S204), the second restriction flag setting process shown in step S205 is performed, and the second restriction flag set to restrict the function to the restriction content of the second stage is stored in the storage unit 22 in place of the first restriction flag.

[0051] After that, when the unconnected time T exceeds Ts2 and is within Ts3 (for example, 24 hours) (No in S204, Yes in S206), the third restriction flag setting process shown in step S207 is performed, and the third restriction flag set to restrict the function to the restriction content of the third stage is stored in the storage unit 22 in place of the second restriction flag.

[0052] After that, when the unconnected time T exceeds Ts3 (No in S206), the fourth restriction flag setting process shown in step S208 is performed, and the fourth restriction flag set to restrict the function to the restriction content of the fourth stage is stored in the storage unit 22 in place of the third restriction flag.

[0053] Therefore, in the function restriction process shown in step S104a, the function corresponding to the stage of the restriction flag set as described above and stored in the storage unit 22 is restricted. Specifically, for example, in the restriction content of the first stage, only the access to the high-security information in the storage unit 22 is restricted, in the restriction content of the second stage, the access to all the information in the storage unit 22 is restricted, in the restriction content of the third stage, other functions (for example, the camera function, etc.) except for the predetermined functions (for example, the functions used for normal reading operations) are restricted, and in the restriction content of the fourth stage, all other functions are restricted except that only the monitoring process can be executed.

[0054] After the mobile terminal 10 returns to the management area S and becomes capable of wireless communication with the management server 2 again, if it is determined that function restriction is unnecessary (Yes in S105), the function restriction release process shown in step S106 is performed. In the present embodiment, by erasing any of the restriction flags set and stored as described above from the storage unit 22, the function restriction release state in which the function restriction regarding the predetermined function is released is achieved.

[0055] As described above, in the mobile terminal 10 and the management system 1 according to the present embodiment, the restriction content in the function control process is changed step by step according to the unconnected time T. Thereby, as described above, when the unconnected time T is short, only the access to high-security information is restricted, and when the unconnected time T becomes long, all functions are restricted, and thus stepwise restrictions can be performed. When changing the restriction content step by step in this way, even if the access restriction to high-security information is implemented due to a temporary communication failure during normal business, it does not affect the normal business that does not access high-security information. Therefore, while ensuring the security of the mobile terminal 10, the convenience regarding normal business and the like can be enhanced.

[0056] Note that the restriction content that changes step by step according to the unconnected time T is not limited to being set in the above-described four steps, and may be set in, for example, two steps, three steps, or five or more steps according to the content to be restricted. Also, at the final step where the restriction content becomes the strictest, the mobile terminal 10 itself may be initialized so that the restriction flag is not deleted.

[0057] As a modification of this embodiment, the conditions required for lifting the function restriction (restriction lifting conditions) may be changed according to the restricted content that changes step by step. Specifically, for example, in the restricted content of the first stage, when the state of being able to perform wireless communication with the management server 2 again is reached, the function restriction is lifted. On the other hand, in the restricted content of the second to fourth stages, the function restriction is lifted only when the administrator or the like of this management system performs a predetermined authentication process. As the predetermined authentication process, for example, after the administrator or the like confirms the mobile terminal 10 in a wireless communication state with the management server 2, a process of transmitting a function restriction release instruction from the management server 2 in which a restriction release operation has been performed by the administrator or the like to the mobile terminal 10 is assumed.

[0058] In this way, in the restricted content that emphasizes security, the restriction release conditions can be made stricter. Therefore, compared with the case where the same restriction release conditions are set for each restricted content, the restriction release conditions suitable for the environment and the like can be carefully set.

[0059] [Third Embodiment] Next, the mobile terminal and the management system according to the third embodiment of the present invention will be described with reference to the drawings. In this third embodiment, the main difference from the first embodiment above is that function restriction is not performed when a permitted function is being executed. Therefore, the same reference numerals are given to the substantially same components as those in the first embodiment, and the description thereof is omitted.

[0060] Depending on the user's usage method, the unconnected time T during which wireless communication with the management server 2 becomes impossible and the timing thereof may be irregular and long. For example, when the mobile terminal 10 is used on a remote island or in an underground facility for a certain period of time, the unconnected time T becomes long. Assuming such a case, it becomes difficult to correctly determine whether the mobile terminal 10 is in a state of being illegally taken out or is in a normal usage state where function restriction is not required simply because wireless communication with the management server 2 is impossible, based only on the unconnected time T.

[0061] Therefore, in the monitoring process of this embodiment, if the function executed until the unconnected time T after entering the unconnected state where wireless communication with the management server 2 is not possible reaches or exceeds a predetermined time Ts is a permitted function, the function control process is not performed on the assumption that it is a normal usage state where function restriction is unnecessary.

[0062] Specifically, as in the flowchart illustrated in FIG. 5, when the unconnected time T reaches or exceeds the predetermined time Ts (Yes in S102 of FIG. 5), in the determination process of step S301, it is determined whether the function executed after entering the unconnected state is a permitted function. Here, if the function executed after entering the unconnected state is not a permitted function (No in S301), a restriction flag is set and stored in the storage unit 22 (S103), and the above-described predetermined function is restricted (S104).

[0063] On the other hand, if the function executed after entering the unconnected state is a permitted function (Yes in S301), the unconnected time T is cleared (S302), and the process from step S102 is repeated. That is, when a permitted function is being executed in the unconnected state, assuming it is a normal usage state where function restriction is unnecessary, the function control process is not performed regardless of the determination result using the unconnected time T (the determination result of step S102). Note that the control unit 21 that performs the determination process of step S301 may correspond to an example of a "function determination unit".

[0064] For example, by setting the functions executed in normal operations as the above-described permitted functions, the function restriction process is not performed during normal operations, and when a function different from the permitted functions is executed, that is, when a function for which unauthorized use is assumed, such as access to unauthorized information, is executed, the function restriction process is performed. Whether it is a function executed in the above-described normal operations can be determined, for example, by comparing the start time, used memory, scan count, etc. of a predetermined business application with set threshold values, or by determining whether it is an operation within a predetermined business time. When making that determination, it is also possible to consider the past history of the mobile terminal 10 to determine whether it is a function executed in normal operations.

[0065] Therefore, when in an unconnected state, if functions not used for business are being used or there is no sign of business operations during business hours, function restriction processing is performed assuming it is not in a normal use state. If the business application is launched during business hours, function restriction processing is not performed assuming it is in a normal use state. Also, even when in an unconnected state and not operated outside business hours, function restriction processing is not performed. Accordingly, while ensuring the security of the mobile terminal 10, the convenience regarding normal business and the like can be enhanced.

[0066] Note that the characteristic configuration of this embodiment to avoid performing function restriction when executing a permitted function can also be applied to other embodiments and the like.

[0067] [Fourth Embodiment] Next, the mobile terminal and management system according to the fourth embodiment of the present invention will be described with reference to the drawings. In this fourth embodiment, the main difference from the first embodiment above is that function restriction is not performed when in a state where short - range wireless communication can be performed with other mobile terminals that are wirelessly communicating with the management server 2. Therefore, the same reference numerals are given to substantially the same components as in the first embodiment, and the description thereof is omitted.

[0068] In an environment where a plurality of mobile terminals 10 are being used in the same management area S, even in an unconnected state where wireless communication with the management server 2 is not possible, if it is in a state where short - range wireless communication can be performed with other mobile terminals 10, it can be determined as a normal use state where function restriction is unnecessary.

[0069] Therefore, when the mobile terminal 10 in this embodiment is in wireless communication with the management server 2, it is configured to directly wirelessly transmit predetermined connection information to other mobile terminals 10 via the short-range wireless communication unit 27. In the management process performed by the control unit 21, when the above-mentioned predetermined connection information is received from another mobile terminal 10 via the short-range wireless communication unit 27 in the unconnected state, the function control process is not performed assuming it is a normal use state where function restriction is not required. Note that in the short-range wireless communication unit 27 in this embodiment, for example, Bluetooth (registered trademark) can be adopted as the short-range wireless communication.

[0070] Specifically, as in the flowchart illustrated in FIG. 6, when the unconnected time T becomes equal to or longer than a predetermined time Ts (Yes in S102 of FIG. 6), in the determination process of step S401, it is determined whether or not the above-mentioned predetermined connection information is received from another mobile terminal 10 by short-range wireless communication. Here, when the above-mentioned predetermined connection information is not received (No in S401), a restriction flag is set and stored in the storage unit 22 (S103), and the above-mentioned predetermined function is restricted (S104).

[0071] On the other hand, when it is determined that the above-mentioned predetermined connection information is received from another mobile terminal 10 via the short-range wireless communication unit 27 in the unconnected state (Yes in S401), the unconnected time T is cleared (S402), and the process from the above step S102 is repeated. That is, when the predetermined connection information is received from another mobile terminal 10 in the unconnected state, assuming it is a normal use state where function restriction is not required, the function control process is not performed regardless of the determination result using the unconnected time T (the determination result of step S102). Note that the control unit 21 that performs the determination process of step S401 may correspond to an example of a "connection determination unit for other terminals".

[0072] Thereby, for example, when a plurality of mobile terminals 10 are used in a warehouse or the like, even if the mobile terminal 10 used deep inside the warehouse becomes unable to communicate with the management server 2, if there is another mobile terminal 10 nearby that can communicate wirelessly with the management server 2, it is determined that the mobile terminal 10 has not been taken out illegally, and the function control process is not performed.

[0073] That is, when receiving predetermined connection information from another mobile terminal 10 via the short-range wireless communication unit 27, it can be assumed that normal operations are being performed together with the other mobile terminal 10. Therefore, it is possible to prevent unnecessary function control processing from being performed even in such a case.

[0074] Note that the characteristic configuration of this embodiment, which does not impose function restrictions when in a state where short-range wireless communication can be performed with another mobile terminal 10 that is wirelessly communicating with the management server 2, can also be applied to other embodiments and the like.

[0075] [Fifth Embodiment] Next, a mobile terminal and a management system according to the fifth embodiment of the present invention will be described with reference to the drawings. In this fifth embodiment, when it is determined that the mobile terminal 10 is being used outside a predetermined management area S, even when in a state where wireless communication with the management server 2 is possible, the point of imposing function restrictions is mainly different from the first embodiment. Therefore, components having substantially the same configuration as those in the first embodiment are denoted by the same reference numerals, and the description thereof is omitted.

[0076] For example, when the inside of a store is set as the management area S, if there is a place outside the store where wireless communication with the management server 2 is possible, there is a possibility that a mobile terminal that has been illegally taken out may be used at that place.

[0077] Therefore, in the monitoring process of this embodiment, based on the distance to the access point 3 (radio wave intensity between the access point 3), it is determined whether the mobile terminal 10 is being used within the management area S. When it is determined that the mobile terminal 10 is being used outside the management area S, function control processing is performed.

[0078] Specifically, as in the flowchart illustrated in FIG. 7, when the unconnected time T is less than the predetermined time Ts (No in S102 of FIG. 7), in the determination process of step S501, it is determined whether the mobile terminal 10 is being used outside the management area S. Here, when it is determined that the mobile terminal 10 is being used within the management area S (No in S501), the process from step S102 is repeated and the function control process is not performed.

[0079] On the other hand, when it is determined that the mobile terminal 10 is being used outside the management area S (Yes in S501), a restriction flag is set and stored in the storage unit 22 (S103), and the above-described predetermined function is restricted (S104). That is, when it is determined that the use is outside the management area S, assuming there is a possibility of unauthorized use, regardless of the determination result using the unconnected time T (the determination result of step S102), the function control process is performed. Note that the control unit 21 that performs the determination process of step S501 may correspond to an example of an "area determination unit".

[0080] In this way, even when in a state capable of wireless communication with the management server 2, if it is determined that the mobile terminal 10 is being used outside the management area S, it is highly likely that the illegally taken-out mobile terminal 10 is illegally wirelessly connected to the management server 2. By performing the function control process based on this judgment, the security of the mobile terminal 10 can be further enhanced.

[0081] Note that in the determination process of step S501, the determination of whether the mobile terminal 10 is being used within the management area S is not limited to being based on the distance to the access point 3 (the radio wave intensity between the mobile terminal 10 and the access point 3), and it may also be determined based on information such as GPS information that can identify the current position of the mobile terminal 10. Also, as described in the fourth embodiment above, based on the number of other mobile terminals 10 that can receive predetermined connection information via the short-range wireless communication unit 27 and its change, it may be determined whether the mobile terminal 10 is being used within the management area S.

[0082] In addition, when it is determined that the mobile terminal 10 is being used outside the predetermined management area S, the characteristic configuration of the present embodiment that restricts functions, even when it is in a state capable of wireless communication with the management server 2, can also be applied to other embodiments and the like.

[0083] [Sixth Embodiment] Next, a mobile terminal and a management system according to the sixth embodiment of the present invention will be described with reference to the drawings. In this sixth embodiment, the main difference from the first embodiment is that it is determined that function restriction is unnecessary because wireless communication with the management server 2 is possible immediately before power-off and at the next power-on. Therefore, the same reference numerals are given to substantially the same components as those in the first embodiment, and the description thereof is omitted.

[0084] Even when the power of the mobile terminal 10 is off, the unconnected time T is being measured. Therefore, when the unconnected time T becomes equal to or longer than the predetermined time Ts at power-on, even if the mobile terminal 10 is being normally used within the management area S, a restriction flag is set and function restriction processing is performed.

[0085] For this reason, in the monitoring process of the present embodiment, when wireless communication with the management server 2 is possible at the time of power-off, predetermined communication history information is stored in the storage unit 22. And when wireless communication with the management server 2 is possible at the next power-on in this stored state, that is, when it is in a state where wireless communication with the management server 2 is possible immediately before power-off and at the next power-on (hereinafter, also referred to as a state where restriction is unnecessary), at the time of this power-on, it is determined that function restriction is unnecessary, and the unconnected time T is cleared.

[0086] Specifically, as in the flowchart illustrated in FIG. 8, when the monitoring process is started by the control unit 21 and the restriction flag is not stored in the storage unit 22 (No in S101 of FIG. 8), in the determination process of step S601, it is determined whether or not it is in a non-restricted state where wireless communication with the management server 2 is possible between immediately before power-off and the next power-on. Here, when predetermined communication history information is stored in the storage unit 22 and wireless communication with the management server 2 is possible, it is assumed that it is in a non-restricted state where wireless communication with the management server 2 is possible between immediately before power-off and the next power-on (Yes in S601), the unconnected time T is cleared (S602), and the processes after step S102 are performed.

[0087] On the other hand, when the predetermined communication history information is not stored in the storage unit 22 or wireless communication with the management server 2 is not possible at power-on, it is assumed that it is not in a non-restricted state (No in S601), the unconnected time T is not cleared, and the processes after step S102 are performed.

[0088] In this way, if wireless communication with the server is possible between immediately before power-off and the next power-on, at the time of power-on, it is determined that function restriction is unnecessary, and by clearing the unconnected time T, it is possible to prevent unnecessary function control processing from being performed assuming that the unconnected time at the time of power-on is equal to or longer than a predetermined time because the power-off time was long.

[0089] Note that the characteristic configuration of this embodiment, in which it is determined that function restriction is unnecessary because wireless communication with the management server 2 is possible between immediately before power-off and the next power-on, can also be applied to other embodiments and the like.

[0090] Note that the present invention is not limited to the above-described embodiments and the like, and may be embodied, for example, as follows. (1) The mobile terminal according to the present invention is not limited to being configured as the mobile terminal 10 capable of both reading and writing the wireless tag Tg and reading the information code as described above, and may be configured as a mobile terminal capable of implementing either one, or may be configured as a mobile terminal having other functions.

[0091] (2) In the function restriction process in the above-described monitoring process, not only the process according to the setting and storage of the restriction flag is performed. For example, a process related to a function restriction that cannot be released by mere initialization or the like without setting the restriction flag may be performed.

Explanation of Signs

[0092] 1 Management system 2 Management server 3 Access point 10 Mobile terminal 21 Control unit (judgment unit, function restriction unit, function judgment unit, other terminal connection judgment unit, area judgment unit) 26 Communication unit 27 Short-range wireless communication unit S Management area T Unconnected time

Claims

1. A mobile terminal capable of executing a predetermined function, a communication unit for wirelessly communicating with a server, a determination unit for determining whether function restriction is necessary for the predetermined function in consideration of an unconnected time during which a state of being unable to wirelessly communicate with the server continues, a function restriction unit for performing a function control process for restricting at least a part of the predetermined function when it is determined by the determination unit that function restriction is necessary, comprising The determination unit determines that function restriction is necessary when the unconnected time becomes a predetermined time or more. The mobile terminal is characterized by this.

2. The determination unit determines that function restriction is unnecessary when the wireless communication with the server via the communication unit satisfies a predetermined condition, After performing the function control process, the function restriction unit performs a process for releasing the function restriction when it is determined by the determination unit that function restriction is unnecessary. The mobile terminal according to claim 1 is characterized by this.

3. The function restriction unit changes the restriction content in the function control process step by step according to the unconnected time. The mobile terminal according to claim 1 is characterized by this.

4. The mobile terminal according to claim 3 is characterized in that conditions necessary for releasing the function restriction in the function restriction unit are changed by the restriction content changed step by step.

5. It includes a function determination unit for determining whether a function executed from the state of being unable to wirelessly communicate with the server until the unconnected time becomes the predetermined time or more is a permitted function, When it is determined by the function determination unit that the function is a permitted function, the function restriction unit does not perform the function control process regardless of the determination result of the determination unit. The mobile terminal according to claim 1 is characterized by this.

6. When wirelessly communicating with the server via the communication unit, a short-range wireless communication unit for directly wirelessly transmitting predetermined connection information to another mobile terminal, Another terminal connection determination unit that determines whether the predetermined connection information is received from another mobile terminal via the short-range wireless communication unit, comprising When the function restriction unit is determined by the other terminal connection determination unit to have received the predetermined connection information, regardless of the determination result of the determination unit, the mobile terminal according to claim 1, characterized in that the function control process is not performed.

7. An area determination unit that determines whether the mobile terminal is being used within a predetermined management area, When the function restriction unit is determined by the area determination unit that the mobile terminal is being used outside the predetermined management area, regardless of the determination result of the determination unit, the mobile terminal according to claim 1, characterized in that the function control process is performed.

8. When the determination unit can wirelessly communicate with the server immediately before power-off and at the next power-on, the mobile terminal according to claim 1, characterized in that it is determined that function restriction is unnecessary at the time of power-on.

9. One or two or more mobile terminals, A server capable of communicating with the mobile terminal, A management system comprising The mobile terminal is capable of executing a predetermined function, A communication unit for wirelessly communicating with the server, A determination unit that determines whether function restriction is necessary for the predetermined function in consideration of an unconnected time during which the state of being unable to wirelessly communicate with the server continues, A function restriction unit that performs a function control process for restricting at least a part of the predetermined function when it is determined by the determination unit that function restriction is necessary, comprising The determination unit determines that function restriction is necessary when the unconnected time becomes equal to or longer than a predetermined time, and the management system is characterized by this.

Images