Control method, control system, and program

Abstract

To provide a control method capable of achieving, in a second area, a function of a second range different from a function of a first range achieved in a first area.SOLUTION: The control method is a method for controlling the information apparatus 101 having the wireless communication unit 101a. The control method includes a communication step and a first switching step. In the communication step, the wireless communication unit 101a communicates with the communication device 2. In the first switching step, when the access from the first area 101a to the second area A11 is permitted based on the communication between the wireless communication unit A12 and the communication device 2, the mode of the information terminals 101 is switched from the first mode in which the functions of the first range can be realized to the second mode in which the functions of the second range different from the first range can be realized.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a control method, a control system, and a program, and more particularly to a control method, a control system, and a program for an information terminal having a wireless communication unit. [Background technology]

[0002] Patent Document 1 describes a card reading device having a card, a specification switching means, an intrusion monitoring verification means, and a main control means. The card stores individual ID information of people permitted to enter and exit a room in the entry / exit control device specification, and stores information indicating this in the intrusion monitoring device specification. The reading means reads the information stored on the card. The specification switching means manually switches between the entry / exit control device specification and the intrusion monitoring device specification. Information indicating the intrusion monitoring specification is pre-stored in memory, and the intrusion monitoring verification means compares the information read by the reading means with the information stored in the memory and, if they match, outputs information to set or cancel the intrusion monitoring status. The main control means outputs the information read by the reading means as is when the entry / exit control device specification is set by the specification switching means, and outputs information to set or cancel the intrusion monitoring status from the intrusion monitoring control means when the intrusion monitoring device specification is set. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 7-160963 Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, the practice of BYOD (Bring Your Own Device), where employees use their personal information terminals for work, has become widespread. However, when using personal information terminals for work, ensuring confidentiality (for example, strict management of highly confidential information used for work) becomes an issue.

[0005] Therefore, it is conceivable to ensure confidentiality by having the company manage personal information terminals. However, when personal information terminals are managed by the company, protecting employees' privacy (for example, restricting the company's use of personal information) becomes an issue. In other words, a control method is required that can ensure both confidentiality and privacy even when personal information terminals are used for work. In general, a control method is desired that can realize a second range of functions in a second area (for example, a business area) that are different from a first range of functions realized in a first area (for example, an area other than business use).

[0006] An object of the present disclosure is to provide a control method, a control system, and a program that can realize a second range of functions in a second area that are different from a first range of functions realized in a first area. [Means for solving the problem]

[0007] A control method according to one aspect of the present disclosure is a control method for an information terminal having a wireless communication unit. The control method includes a communication step and a first switching step. In the communication step, the wireless communication unit communicates with a communication device. In the first switching step, if access from a first area to a second area is permitted based on the communication between the wireless communication unit and the communication device, the mode of the information terminal is switched from a first mode capable of realizing functions in a first range to a second mode capable of realizing functions in a second range different from the first range.

[0008] A program according to one embodiment of the present disclosure is a program for executing the control method by one or more processors.

[0009] According to one aspect of the present disclosure, there is provided a control system including a communication unit configured to communicate with an information terminal having a wireless communication unit. When access from a first area to a second area is permitted based on communication between the wireless communication unit of the information terminal and a communication device, the communication unit transmits a signal to switch the information terminal from a first mode capable of implementing a first range of functions to a second mode capable of implementing a second range of functions different from the first range.

[0010] A control system according to an embodiment of the present disclosure includes a communication unit configured to communicate with an information terminal having a wireless communication unit, and when access from a first area to a second area is permitted based on communication between the wireless communication unit of the information terminal and a communication device, the communication unit is capable of receiving a request from the information terminal. [Effects of the Invention]

[0011] The control method, control system, and program disclosed herein have the advantage of being able to realize a second range of functions in the second area that are different from a first range of functions realized in the first area. [Brief explanation of the drawings]

[0012] [Figure 1] FIG. 1 is a block diagram of a control system according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a flowchart illustrating a part of the operation of the information terminal that cooperates with the control system. [Figure 3] FIG. 3 is a flowchart illustrating another part of the operation of the information terminal. [Figure 4] FIG. 4 is a flowchart illustrating the operation of the control system. [Figure 5] FIG. 5 is a flowchart illustrating the operation of the control system according to the first modified example. DETAILED DESCRIPTION OF THE INVENTION

[0013] (1) Overview A control method according to an embodiment of the present disclosure is a control method for an information terminal 101 having a wireless communication unit 101a as shown in Fig. 1. The information terminal 101 is held by a moving object 10 (described later) and moves together with the moving object 10.

[0014] (1-1) Various functions of information terminals The information terminal 101 realizes various functions, such as a communication function and an application execution function.

[0015] (1-1-1) Communication function The communication function is a function for performing one or more types of wireless communication, and is realized by a wireless communication unit 101a (described later) of the information terminal 101.

[0016] The one or more types of wireless communication refer to wireless communication via one or more types of communication media. The one or more types of communication media are, for example, a general-purpose network and a dedicated network. The general-purpose network is, for example, the Internet, a mobile communication network, etc. The dedicated network is, for example, an intranet, a VPN (Virtual Private Network), etc.

[0017] The communication function in this embodiment is a function for performing communication via a general-purpose network and communication via a dedicated network. The other party with which the information terminal 101 communicates via the general-purpose network is, for example, a web server. The other party with which the information terminal 101 communicates via the dedicated network is, for example, an in-house server. The in-house server manages information related to the company's business.

[0018] (1-1-2) Application execution function The application execution function is a function of executing one or more applications, and is realized by a processing unit 101b (described later) of the information terminal 101. The one or more applications are, for example, a general-purpose application and a business application.

[0019] The general-purpose application is, for example, a general-purpose browser for connecting the information terminal 101 to a web server via a general-purpose network, a photography application for taking pictures using a camera, etc. Execution of the general-purpose browser realizes the function of connecting the information terminal 101 to a web server via the general-purpose network. Execution of the photography application realizes the photography function of the information terminal 101.

[0020] The business application is, for example, a dedicated browser for connecting the information terminal 101 to an in-house server via a dedicated network, and security software for ensuring confidentiality. Execution of the dedicated browser realizes the function of connecting the information terminal 101 to the in-house server via the dedicated network. Execution of the security software realizes the security function of the information terminal 101.

[0021] (1-2) Information terminal mode and the range of functions that vary depending on the mode The information terminal 101 operates in various modes, such as a first mode and a second mode.

[0022] Information terminal 101 realizes a range of functions that differ depending on the mode. The ranges that differ depending on the mode are a first range corresponding to the first mode and a second range corresponding to the second mode.

[0023] (1-2-1) First mode and first range The first mode is a mode in which a first range of functions can be realized. When information terminal 101 is in the first mode, information terminal 101 can realize a first range of functions with respect to various functions.

[0024] The first range is a range of functions that can be realized by the information terminal 101 when the information terminal 101 is in the first mode. The first range is, for example, a range of functions that are suitable for realization in the first area A11, among the various functions that the information terminal 101 can realize.

[0025] (1-2-2) Second mode and second range The second mode is a mode in which a second range of functions different from the first range can be realized. When the information terminal 101 is in the second mode, the information terminal 101 can realize a second range of functions with respect to various functions.

[0026] The second range is a range of functions that can be realized by information terminal 101 when information terminal 101 is in the second mode. The second range is, for example, a range of functions that are suitable for realization in second area A12 among various functions realized by information terminal 101.

[0027] (1-3) Main parts of the control method The control method includes a communication step and a first switching step.

[0028] (1-3-1) Communication step In the communication step, the wireless communication unit 101a communicates with one or more communication devices 2 each having a communication unit 14 as shown in FIG.

[0029] In the example of FIG. 1, the number of communication devices 2 each having a communication unit 14 is one, but the control system 1 of this embodiment is also provided with a communication unit 14 and may be considered a type of communication device. In the communication step, the wireless communication unit 101a only needs to be able to communicate with at least one of one or more communication devices, for example, two communication devices including the control system 1. For this reason, hereinafter, one or more communication devices will be simply referred to as a "communication device 2."

[0030] (1-3-1a) Example of communication steps The communication step is, for example, a process corresponding to step S2 in the flowcharts of FIGS. 2 and 3 (described later).

[0031] (1-4) First switching step In the first switching step, if access from the first area A11 to the second area A12 is permitted based on communication between the wireless communication unit 101a and the communication device 2, the mode of the information terminal 101 is switched from the first mode to the second mode.

[0032] (1-4-1) Area 1 and Area 2 The first area A11 and the second area A12 are two adjacent spaces that the moving object 10 can access through an access point AL1 (described later).

[0033] The first area A11 in this embodiment is an area other than business use, specifically, outside the company. Outside the company is outside the company building or premises.

[0034] The second area A12 in this embodiment is a business area, specifically, an area within a company. The term "inside a company" refers to the inside of a company building or premises.

[0035] (1-4-2) Access Access means entering or exiting a predetermined area. The predetermined area is a space that the moving object 10 can enter or exit, and in this embodiment, it is each of the first area A11 and the second area A12.

[0036] The access includes access from the first area A11 to the second area A12. Note that the access also includes access from the second area A12 to the first area A11, but the access from the second area A12 to the first area A11 will be described later.

[0037] (1-4-2a) Access from Area 1 to Area 2 Access from the first area A11 to the second area A12 means that the mobile object 10 passes from the first area A11 through the access point AL1 to enter the second area A12. Note that, hereinafter, access from the first area A11 to the second area A12 may be referred to as "first access."

[0038] The mobile object 10 in this embodiment is basically a user, for example, a user who works in a company, that is, an employee of the company. The first access is when an employee enters the company from outside, that is, when the employee comes into the company.

[0039] (1-4-2b) Access point The access location AL1 is an opening provided in the boundary between the first area A11 and the second area A12, i.e., in the wall separating the two spaces. A door or gate is provided in the access location AL1. The door can be automatically locked and unlocked by an automatic locking / unlocking mechanism. The door can be automatically opened and closed by an automatic opening / closing mechanism.

[0040] (1-4-3) Access permission based on communication The permission to access from the first area A11 to the second area A12 based on the communication between the wireless communication unit 101a and the communication device 2 (hereinafter referred to as "access permission based on communication") includes the communication device 2 receiving authentication information from the information terminal 101 through the communication between the wireless communication unit 101a and the communication device 2, and the control system 1 allowing the mobile body 10 to access from the first area A11 to the second area A12 based on the received authentication information.

[0041] (1-4-3a) First Example of Communication-Based Access Authorization The communication-based access permission may further include authentication of the mobile object 10 using authentication information in the above "(1-4-3) Communication-based access permission."

[0042] That is, in this example, the access permission based on communication includes the communication device 2 receiving authentication information from the information terminal 101 through communication between the wireless communication unit 101a and the communication device 2, and the control system 1 authenticating the mobile body 10 using the received authentication information, obtaining an authentication result indicating that the authentication has been successful, and permitting the mobile body 10 to access the first area A11 to the second area A12 based on the obtained authentication result.

[0043] (1-4-3b) Second Example of Communication-Based Access Authorization The access permission based on communication may further include, in the above "(1-4-3a) First example of permission for access based on communication," obtaining location information using signals transmitted and received via communication.

[0044] In other words, the access permission based on communication in this example includes the communication between the wireless communication unit 101a and the communication device 2, whereby the communication device 2 receives authentication information from the information terminal 101, and the control system 1 performs authentication using the authentication information and obtains an authentication result indicating that the authentication has been successful.

[0045] In addition, the communication-based access permission in this example further includes that in the control system 1, the position of the mobile body 10 is measured and the position information is acquired using signals transmitted and received between the wireless communication unit 101a and the communication device 2, and that access (first access) of the mobile body 10 from the first area A11 to the second area A12 is granted based on the acquired authentication result and the acquired position information.

[0046] (1-4-3c) Unlocking or opening doors according to access authorization When the first access is permitted, the control system 1 automatically unlocks the door at the access point AL1 via an automatic locking / unlocking mechanism, or automatically opens the door at the access point AL1 via an automatic opening / closing mechanism.

[0047] The mobile object 10 accesses the second area A12 from the first area A11 by opening an unlocked door or by passing through an automatically opened door.

[0048] (1-4-3d) Switching modes according to access permissions Furthermore, when the first access is permitted, the processing unit 101b (described later) in the information terminal 101 possessed by the mobile object 10 executes a first switching step, thereby switching the mode of the information terminal 101 from the first mode to the second mode.

[0049] In other words, depending on the permission for the first access, the mobile body 10 can access the second area A12 from the first area A11, while the mode of the information terminal 101 is switched from the first mode to the second mode, allowing the information terminal 101 to realize functions in the second range.

[0050] For example, when an employee comes to work carrying a personal mobile information terminal such as a smartphone, the mode of the mobile information terminal switches from outside the company mode to inside the company mode, and the mobile information terminal becomes capable of communication via a dedicated network and executing business applications.

[0051] (1-4-4) Prohibition of access based on communication In the control method, access from the first area A11 to the second area A12 may be prohibited based on communication between the wireless communication unit 101a and the communication device 2 (hereinafter referred to as "access prohibition based on communication").

[0052] The access denial based on communication includes the communication device 2 being unable to receive authentication information from the information terminal 101 through communication between the wireless communication unit 101a and the communication device 2. Furthermore, the access denial based on communication may further include the case where, even if the communication device 2 receives authentication information from the information terminal 101, authentication is performed in the control system 1 using the authentication information and an authentication result indicating that authentication has not been established is obtained.

[0053] In addition, the prohibition of access based on communication may further include the control system 1 measuring the position of the mobile body 10 and acquiring the position information using signals transmitted and received between the wireless communication unit 101a and the communication device 2, and prohibiting the mobile body 10 from accessing the first area A11 to the second area A12 based on the acquired authentication result and the acquired position information.

[0054] When access from the first area A11 to the second area A12 of the mobile body 10 is prohibited, the control system 1 automatically locks or keeps locked the door at the access point AL1 via an automatic locking / unlocking mechanism, or automatically closes or keeps closed the door at the access point AL1 via an automatic opening / closing mechanism.

[0055] Therefore, users other than employees cannot enter the second area A12 through access point AL1.

[0056] According to this configuration, in the second area A12, a communication function (a communication function via a dedicated network) different from the communication function (a communication function via a general-purpose network) realized in the first area A11 can be realized.

[0057] According to this configuration, the second area A12 can realize an application execution function (execution function for business applications) different from the application execution function (execution function for non-business applications) realized in the first area A11.

[0058] (1-4-5) Example of realizing different range of functions depending on the mode (1-4-5a) Examples of different types of realizable functions The realization of different ranges of functions depending on the mode may mean, for example, that the types of realizable functions are different between a first range corresponding to a first mode and a second range corresponding to a second mode.

[0059] Specifically, the first range corresponding to the first mode may be a range that includes both communication functions and application execution functions, while the second range corresponding to the second mode may be a range that does not include communication functions but includes application execution functions.

[0060] (1-4-5b) Examples of multiple items corresponding to one function that can be realized differently The fact that different ranges of functions are realized depending on the mode may mean that the types of functions realized are common between a first range corresponding to a first mode and a second range corresponding to a second mode, but the items that can be realized among multiple items corresponding to one function may differ between the first mode and the second mode.

[0061] Multiple items corresponding to one function include, for example, a general-purpose network and a dedicated network, which are two communication media corresponding to a communication function, or a general-purpose browser and a dedicated browser, which are two applications corresponding to an application execution function.

[0062] In this embodiment, a first range corresponding to a first mode and a second range corresponding to a second mode have in common that the communication function and the application execution function are both possible. However, in the first range, the communication function via a general-purpose network and the execution function of a general-purpose browser are both possible, but the communication function via a dedicated network and the execution function of a dedicated browser are both impossible, whereas in the second range, the communication function via a dedicated network and the execution function of a dedicated browser are both possible, but the communication function via a general-purpose network and the execution function of a general-purpose browser are both impossible.

[0063] (1-4-6) Example of the first switching step The first switching step corresponds to, for example, in the flowcharts of Figures 2 and 3, the wireless communication unit 101a communicates with the communication device 2 in step S2 (communication step), and then it is determined in step S3 that the first access is permitted (Yes), and the process proceeds to step S6.

[0064] (1-4-7) Advantages of the first switching step According to the above-described configuration of this embodiment, a second range of functions different from the first range of functions realized in the first area A11 can be realized in the second area A12.

[0065] More specifically, by switching the mode of the information terminal 101 from the first mode to the second mode in response to permission for access from the first area A11 to the second area A12 (described later), the range of functions that can be realized by the information terminal 101 changes from the first range to the second range. As a result of the range of functions that can be realized by the information terminal 101 changing from the first range to the second range in this way, at least some of the functions in the first range that were realizable in the first area A11 become impossible to realize in the second area A12, while at least some of the functions in the first range that were impossible to realize in the first area become possible to realize in the second area A12.

[0066] Therefore, for example, when the first area A11 is outside the company and the second area A12 is inside the company, depending on permission to access inside the company from outside (for example, permission to come into the company), business functions that were restricted outside the company can be realized, and non-business functions that were not restricted outside the company cannot be realized. This makes it possible to ensure security within the company.

[0067] Furthermore, by switching from the first mode to the second mode in response to permission for access from the first area A11 to the second area A12 based on communication between the wireless communication unit 101a of the information terminal 101 and the communication device 2, for example, the range of functions that can be realized by the information terminal 101 can be changed from the first range to the second range at the time when the mobile body 10 carrying the information terminal 101 accesses the second area A12 from the first area A11.

[0068] Furthermore, since the modes of the information terminal 101 include the first mode and the second mode, it is possible to realize different functions depending on the area. For example, when the first area A11 is outside the company and the second area A12 is inside the company, it is possible to realize a function for protecting privacy outside the company while realizing a function for ensuring security inside the company.

[0069] (2) Details of the control method (2-1) Details of the first switching step: Forced switching from outside is also possible More specifically, the first switching step is a process of switching the mode of the information terminal 101 from the first mode to the second mode when the first access is permitted based on communication between the wireless communication unit 101a and the communication device 2, and also of switching the mode of the information terminal 101 from the first mode to the second mode when a first signal from the control system 1 is received through communication between the wireless communication unit 101a and the control system 1.

[0070] More specifically, in the flowcharts of Figures 2 and 3, the first switching step includes a process in which the wireless communication unit 101a communicates with the communication device 2 in step S2, and then it is determined in step S3 that the first access is permitted (Yes), and the process proceeds to step S6, and a process in which the wireless communication unit 101a communicates with the control system 1 (server) in step S4, and the processing unit 101b determines in step S5 that the first signal has been received (Yes), and then the process proceeds to step S6.

[0071] This allows the information terminal 101 to not only switch its own mode from the first mode to the second mode, but also allows the control system 1 (server), which is an external system to the information terminal 101, to switch the mode of the information terminal 101 from the first mode to the second mode (forced switching).

[0072] (2-2) How to achieve different ranges of functions depending on the mode The range of functions that varies depending on the mode can be realized, for example, as follows.

[0073] (2-2-1) First method In this implementation method, the information terminal 101 implements a plurality of functions including various functions, that is, a communication function and an application execution function.

[0074] The range of functions that can be realized by the information terminal 101 is limited to a range that includes only some of the multiple functions in one of the first and second modes, and is not limited at all in the other mode, thereby realizing a different range of functions depending on the mode.

[0075] (2-2-2) Second method In this implementation method, the range of functions that can be implemented by information terminal 101 is limited to a range that includes only some of the multiple functions in each of the first and second modes. However, in this implementation method, the functions that are subject to restriction, i.e., which of the multiple functions are restricted, differ between the first and second modes, and therefore different ranges of functions are implemented depending on the mode.

[0076] (2-2-3) Third method In this method, the same functions among the plurality of functions are subject to restriction in both the first mode and the second mode. However, among the plurality of items corresponding to the functions subject to restriction, the restricted items differ between the first mode and the second mode, thereby realizing a different range of functions depending on the mode.

[0077] The multiple items corresponding to the function to be restricted are, for example, if the function to be restricted is a communication function, multiple communication media that can be used by the communication function, and if the function to be restricted is an application execution function, multiple applications that can be executed by the execution function.

[0078] (2-2-3a) First example of the third implementation method The restricted items may differ between the first mode and the second mode in that, of the multiple communication media that the communication function can use, in the first mode, communication via a dedicated network is restricted and communication via a general-purpose network is not restricted, while in the second mode, communication via a general-purpose network is restricted and communication via a dedicated network is not restricted.

[0079] (2-2-3b) Second example of the third implementation method The restricted items may differ between the first mode and the second mode, for example, in that, among the multiple applications that the execution function can execute, in the first mode, execution of a dedicated browser is restricted and execution of a general-purpose browser is not restricted, while in the second mode, execution of a general-purpose browser is restricted and execution of a dedicated browser is not restricted.

[0080] (2-3) Different functional limitations between the first and second ranges Functions in a range that differs depending on the mode, specifically, a range that differs between the first mode and the second mode, may be realized by different limitations on the feasible functions between the first range and the second range (different functional limitations).

[0081] That is, one of the first and second ranges may have more limited feasible functions than the other range. For example, the first range may have more limited feasible functions than the second range. Alternatively, the second range may have more limited feasible functions than the first range.

[0082] (2-3-1) Limitation of the number of functions that can be realized The fact that the feasible functions are limited may mean that the feasible functions are limited to some of the multiple functions, in other words, that the number of feasible functions (the number of functions) is small.

[0083] (2-3-2) Limiting the number of items that can be used or executed for a specific function The limitation of feasible functions may mean that for a specific function among a plurality of functions, the number of items that can be used or executed among a plurality of items corresponding to the specific function is limited to a portion of the items. In other words, the limitation of feasible functions may mean that the number of items that can be used or executed by the specific function is small.

[0084] (2-3-3) Advantages of different function restrictions for the first and second ranges The different functional limitations between the first and second ranges allow different ranges of functions to be realized depending on the mode and area. That is, the second area A12 can realize functions in the second range that are different from the functions in the first range realized in the first area A11.

[0085] (2-3-3a) Advantages of the first range being more functionally limited than the second range As mentioned above, the first range is a range corresponding to the first mode (e.g., outside the company mode) which is the mode of the information terminal 101 in the first area A11 (e.g., outside the company), and the second range is a range corresponding to the second mode (e.g., inside the company mode) which is the mode of the information terminal 101 in the second area A12 (e.g., inside the company).

[0086] Between such a first range and a second range, the first range has more restricted functions than the second range, so that restrictions on functions that can be implemented by the information terminal 101 are relaxed in accordance with permission for access from the first area A11 to the second area A12 (first access: for example, coming to work). As a result, when the mobile object 10 accesses the second area A12 from the first area A11 in accordance with permission for the first access, the functions that were restricted in the first area A11 become available in the second area A12.

[0087] As mentioned above, the functions that were restricted in the first area A11 include, for example, the communication function via a dedicated network, the execution function of business applications, etc. By making these functions possible in the second area A12, security in the second area A12 is improved.

[0088] (2-3-3b) The advantage of the second range being a range with more limited functionality than the first range On the other hand, since the second range has more restricted functions than the first range, restrictions on functions that can be implemented by the information terminal 101 are strengthened in accordance with permission for the first access (for example, coming to work). As a result, when the mobile object 10 accesses the second area A12 from the first area A11 in accordance with permission for the first access, functions that were not restricted in the first area A11 are restricted in the second area A12.

[0089] As described above, the functions that were not restricted in the first area A11 include, for example, a communication function via a general-purpose network, a function for executing non-business applications, a photographing function, etc. These functions are restricted (for example, made unfeasible) in the second area A12, thereby improving security in the second area A12.

[0090] Furthermore, a function that is restricted more strictly (e.g., prohibited) in the first area A11 and relaxed (e.g., enabled) in the second area A12 may be a function that uses personal information of the user, thereby protecting privacy in the first area A11.

[0091] (2-4) Restrictions on business functions in the first area In this embodiment, as described above, the second area A12 is an area for business use, and the first area A11 is an area for non-business use.

[0092] The first range has a more limited set of business functions than the second range, such as a communication function that communicates via a dedicated network and an application execution function that executes business applications.

[0093] As a result, restrictions on business functions that can be implemented on the information terminal 101 are relaxed depending on permission for access (e.g., coming into work) from the first area A11 (e.g., outside the company), which is an area other than business use, to the second area A12 (e.g., inside the company), which is a business use area, so that functions that were restricted in the first area A11 can be implemented in the second area A12. For example, functions that were restricted in the first area A11, such as a function for connecting to a dedicated network such as an intranet and a function for executing business applications such as security software, can be implemented in the second area A12, thereby improving security in the second area A12.

[0094] (2-5) Restrictions on non-business functions in the second area The second range is more limited than the first range in the number of non-business functions that can be realized. Non-business functions include, for example, a communication function that communicates via a general-purpose network, and an application execution function that executes non-business applications. Non-business applications include, for example, entertainment applications and photography applications.

[0095] As a result, restrictions on non-business functions that can be implemented on the information terminal 101 are strengthened depending on permission for access (e.g., coming into work) from the first area A11 (e.g., outside the company), which is a non-business area, to the second area A12 (e.g., inside the company), which is a business area, so that functions that were not restricted in the first area A11 can be restricted in the second area A12. For example, by restricting in the second area A12 the function of connecting to a general-purpose network such as the Internet and the function of executing non-business applications such as entertainment applications and photography applications, which were not restricted in the first area A11, security in the second area A12 is improved.

[0096] (2-6) Second switching step The control method further includes a second switching step in which, when access from the second area A12 to the first area A11 is permitted based on communication by the wireless communication unit 101a, the mode of the information terminal 101 is switched from the second mode to the first mode.

[0097] In the following description, the access from the second area A12 to the first area A11 may be referred to as a “second access.” The second access is, for example, an employee leaving the company, that is, leaving the company.

[0098] (2-6-1) Example of the second switching step The second switching step corresponds to, for example, in the flowcharts of Figures 2 and 3 (described later), the wireless communication unit 101a communicates with the communication device 2 in step S7, and then the processing unit 101b determines in step S8 that the second access is permitted (Yes), and then returns to step S1.

[0099] (2-6-2) Advantages of the second switching step In the second switching step, the mode of the information terminal 101 is switched from the second mode to the first mode in response to permission for access (second access) from the second area A12 to the first area A11, and the range of functions that can be realized by the information terminal 101 changes from the second range to the first range.

[0100] In this way, the range of functions that can be realized by the information terminal 101 changes from the second range to the first range, and as a result, for example, at least some of the functions in the second range that were possible to realize in the second area A12 are restricted (for example, become impossible to realize) in the first area A11, while at least some of the functions in the second range that were restricted (for example, become impossible to realize) in the second area A12 become possible to realize in the first area.

[0101] Therefore, for example, if the first area A11 is outside the company and the second area A12 is inside the company, depending on permission to access outside the company from inside the company (permission to leave the company), non-business functions that could not be realized inside the company can be realized outside the company, and functions that use personal information that could be realized inside the company cannot be realized outside the company. This makes it possible to realize non-business functions outside the company and protect privacy.

[0102] Furthermore, based on communication between the wireless communication unit 101a of the information terminal 101 and the communication device 2, when access from the second area A12 to the first area A11 is permitted, the information terminal 101 can switch from the second mode to the first mode, thereby changing the range of functions that can be realized by the information terminal 101 from the second range to the first range, for example, when the mobile body 10 carrying the information terminal 101 accesses the first area A11 from the second area A12.

[0103] (2-6-3) Details of the second switching step More specifically, the second switching step is a process of switching the mode of the information terminal 101 from the second mode to the first mode when the second access is permitted based on the communication between the wireless communication unit 101a and the communication device 2, and also of switching the mode of the information terminal 101 from the second mode to the first mode when a second signal from the control system 1 is received through communication between the wireless communication unit 101a and the control system 1.

[0104] More specifically, in the flowcharts of Figures 2 and 3, the second switching step includes the following steps: after the wireless communication unit 101a communicates with the communication device 2 in step S7, it is determined in step S8 that the second access is permitted (Yes), and the process returns to step S1; and after the wireless communication unit 101a communicates with the control system 1 (server) in step S9, the processing unit 101b determines in step S10 that the second signal has been received (Yes), and the process returns to step S1.

[0105] This allows the information terminal 101 to not only switch its own mode from the first mode to the second mode, but also allows the control system 1, which is an external system to the information terminal 101, to switch the mode of the information terminal 101 from the first mode to the second mode (forced switching).

[0106] (2-7) Setting steps The control method further includes a setting step in which at least one of the first range and the second range is set based on communication between the wireless communication unit 101a and the control system 1.

[0107] (2-7-1) Example of setting steps The setting step corresponds to, for example, in the flowcharts of Figures 2 and 3 (described later), the processing proceeding to step S12 after the processing unit 101b determines in step S11 that a setting instruction has been received from the control system 1 (server) (Yes).

[0108] (2-7-2) Advantages of the setting step According to this configuration, the control system 1 can set at least one of a first range, which is the range of functions in the first mode, and a second range, which is the range of functions in the second mode, for the information terminal 101.

[0109] (3) Overview of the control system Next, an overview of the control system 1 will be explained using Fig. 1. Note that in the following, explanations of previously mentioned matters will be omitted or simplified.

[0110] 1, the control system 1 is capable of wireless communication with an information terminal 101 held by a mobile object 10. The control system 1 is also capable of communication with a communication device 2 via a communication medium 200.

[0111] The control system 1 cooperates with the information terminal 101 and the communication device 2 to control access to a predetermined area of ​​the mobile object 10 that possesses the information terminal 101. Cooperating with the information terminal 101 and the communication device 2 means that the control system 1 realizes a function of controlling access to a predetermined area of ​​the mobile object 10 while communicating with each of the information terminal 101 and the communication device 2.

[0112] The control system 1 in this embodiment is a server under the management of a company (hereinafter referred to as a "company server" or simply as a "server").

[0113] (4) Mobile Next, the moving body 10 will be described with reference to Fig. 1. Note that in the following, the description of the previously mentioned items will be omitted or simplified.

[0114] The mobile body 10 in this embodiment is an autonomously moving object, and is a general term for a human body and an autonomously moving robot (hereinafter, sometimes simply referred to as a "robot"). The mobile body 10 is basically a human body, that is, a user's body (hereinafter, sometimes simply referred to as a "user"), but it may also be a robot. The mobile body 10 in this embodiment is, for example, an employee of a company performing business, but it may also be a user other than an employee.

[0115] (4-1) Designated area The predetermined area is a space that the mobile object 10 can enter and exit. The predetermined areas in this embodiment are a first area A11 and a second area A12. The first area A11 is within a company, and specifically, for example, the inside of a building or site owned by the company (inside the building or site), or the inside of a room occupied by the company (indoors). The second area A12 is, for example, the outside of a building or site owned by the company (outdoors or outside the site), or the outside of a room occupied by the company (outdoors).

[0116] (4-2) Access to designated areas Access to a predetermined area may be, for example, a user entering a building or premises or entering a room, or may be a user leaving a building or premises or leaving a room.

[0117] In this embodiment, the access to the predetermined area includes a first access and a second access.

[0118] (4-2-1) First Access The first access is the access described in "(1-4-2a) Access from the first area to the second area", that is, the access of the mobile object 10 from the first area A11 to the second area A12. The first access is made by passing through the access point AL1.

[0119] The first access in this embodiment is a user's entry into the building, specifically, an employee's coming into the company from outside the company.

[0120] (4-2-2) Second Access As explained in "(2-6) Second Switching Step," the second access is an access from the second area A12 to the first area A11 of the mobile object 10. The second access is performed by passing through the access point AL1.

[0121] The second access in this embodiment is the user's exit to the outside of the building, and in terms of units, is the employee's exit from inside the company to outside the company.

[0122] (5) Information terminals Next, the information terminal 101 will be described with reference to Fig. 1. In the following, the description of the previously mentioned items will be omitted or simplified.

[0123] 1, the information terminal 101 is capable of wireless communication with each of the control system 1 and the communication device 2. The wireless communication in this embodiment is short-range wireless communication.

[0124] As shown in FIG. 1, the information terminal 101 includes a wireless communication unit 101a and a processing unit 101b.

[0125] (5-1) Wireless Communication Unit The wireless communication unit 101a realizes the communication functions described in "(1-1-1) Communication Functions."

[0126] Furthermore, the wireless communication unit 101a can perform wireless communication with a communication unit 14 provided in each of the control system 1 and the communication device 2. In this embodiment, the wireless communication performed between the wireless communication unit 101a and the communication unit 14 is communication via a wireless LAN (Local Area Network).

[0127] The wireless communication unit 101a transmits authentication information (described later) to the control system 1 directly or via the communication device 2 by performing wireless communication with the communication unit 14 of at least one of the control system 1 and the communication device 2. The authentication information is transmitted from the wireless communication unit 101a to at least one of the control system 1 and the communication device 2, being included in a wireless signal.

[0128] Preferably, the wireless communication unit 101a transmits the authentication information and the mode information (described later) to the control system 1 directly or via the communication device 2 by performing wireless communication with the communication unit 14 of at least one of the control system 1 and the communication device 2. The authentication information and the mode information are transmitted as part of a wireless signal from the wireless communication unit 101a to at least one of the control system 1 and the communication device 2.

[0129] In this embodiment, when a mobile body 10 carrying an information terminal 101 approaches an access point AL1 and short-range wireless communication becomes possible with the communication unit 14 of either the control system 1 or the communication device 2, the wireless communication unit 101a transmits authentication information and mode information to the communication unit 14 of either the control system 1 or the communication device 2 that is now able to communicate.

[0130] When the authentication information and mode information are transmitted to the communication device 2, the communication unit 14 of the communication device 2 receives the authentication information and mode information from the information terminal 101 and transfers the received authentication information and mode information to the control system 1 via the communication medium 200. The communication unit 14 of the control system 1 receives the authentication information and mode information transmitted from the information terminal 101 and transferred to the control system 1 via the communication device 2.

[0131] (5-2) Processing section The processing unit 101b performs various types of processing, including, for example, some of the processing (described later) illustrated in the flowcharts of FIGS.

[0132] (6) Communication equipment Next, the communication device 2 will be described with reference to Fig. 1. In the following, the description of the previously mentioned items will be omitted or simplified.

[0133] 1, the communication device 2 is capable of communicating with the control system 1 via a communication medium 200. In this embodiment, the communication medium 200 is a wired LAN. As shown in FIG. 1, the communication device 2 includes a communication unit 14.

[0134] (6-1) Communications Department The communication unit 14 included in the communication device 2 performs wireless communication with the information terminal 101 held by the mobile object 10. The communication unit 14 included in the communication device 2 also performs communication with the control system 1 via a communication medium 200 (in this embodiment, communication via a wired LAN).

[0135] (7) Details of the control system Next, the control system will be described in detail with reference to Fig. 1. Note that in the following, explanations of previously mentioned matters will be omitted or simplified.

[0136] The control system 1 of this embodiment is placed near an access point AL1, as shown in Fig. 1. When a mobile object 10 is located near the access point AL1, the control system 1 communicates with an information terminal 101 carried by the mobile object 10 via short-range wireless communication.

[0137] 1, the control system 1 includes a reception unit 11, a processing unit 12, an output unit 13, and a communication unit 14. The processing unit 12 includes an acquisition unit 121, an authentication unit 122, a control unit 123, and a setting unit 124.

[0138] (7-1) Reception The receiving unit 11 receives various instructions and various information. The various instructions are, for example, a setting instruction, a first instruction, and a second instruction (all of which will be described later). The various information is, for example, a selection result (which will be described later).

[0139] (7-2) Processing section The processing unit 12 performs various types of processing, such as the processing of an acquisition unit 121, an authentication unit 122, a control unit 123, and a setting unit 124 (all of which will be described later).

[0140] Furthermore, the processing unit 12 measures the position of the mobile object 10 based on a radio signal transmitted and received by wireless communication between the communication unit 14 and the information terminal 101, and acquires the position information. The position information is information relating to the position of the mobile object 10. The position information is, for example, information indicating the position of the information terminal 101 held by the mobile object 10. Specifically, the position information may be information (for example, coordinates) indicating the position of the information terminal 101 relative to the communication unit 14 (more specifically, a communication module that realizes the communication unit 14: described later). The position information can be acquired using the received signal strength indicator (RSSI) of the radio signal received by the communication unit 14.

[0141] Furthermore, the processing unit 12 also performs various determinations that will be explained in the flowchart of FIG.

[0142] (7-3) Output section The output unit 13 outputs various types of information. The output of the output unit 13 is, for example, a display on a display, but may also be audio output from a speaker, transmission to an external device via the communication unit 14, etc.

[0143] The various types of information are, for example, selection tab images. The selection tab images are images of selection tabs. The selection tabs are tabs that list multiple function identifiers that are options when the reception unit 11 receives a selection result. The function identifiers are information that identify functions that the information terminal 101 realizes.

[0144] (7-4) Communications Department The communication unit 14 performs various types of communication. The various types of communication include, for example, wireless communication and wired communication. The wireless communication is communication with the information terminal 101 having the wireless communication unit 101a. In this embodiment, the wireless communication with the information terminal 101 (wireless communication unit 101a) is communication via a wireless LAN.

[0145] The wired communication performed by the communication unit 14 is communication with the communication device 2 via a communication medium 200. In this embodiment, the communication medium 200 is a wired LAN.

[0146] The communication unit 14 receives authentication information (described later) from the information terminal 101 by performing wireless communication with the information terminal 101.

[0147] The communication unit 14 in this embodiment receives authentication information and mode information (described later) from the information terminal 101 by performing wireless communication with the information terminal 101.

[0148] When the control unit 123 permits access (first access) from the first area A11 to the second area A12 based on communication between the wireless communication unit 101a of the information terminal 101 and the communication device 2, the communication unit 14 transmits a signal (first signal) to the information terminal 101 to switch the mode of the information terminal 101 from the first mode to the second mode.

[0149] Furthermore, when the control unit 123 permits access (second access) from the second area A12 to the first area A11 based on communication between the wireless communication unit 101a of the information terminal 101 and the communication device 2, the communication unit 14 transmits a signal (second signal) to the information terminal 101 to switch the mode of the information terminal 101 from the second mode to the first mode.

[0150] (7-5) Acquisition department The acquisition unit 121 acquires, from the communication unit 14, the authentication information that the communication unit 14 has received from the information terminal 101.

[0151] The acquisition unit 121 in this embodiment further acquires, from the communication unit 14, in addition to the authentication information, mode information that the communication unit 14 has received from the information terminal 101.

[0152] Alternatively, the acquisition unit 121 may acquire, from the communication unit 14, a signal that the communication unit 14 has received from the information terminal 101, and extract the authentication information and mode information from the acquired received signal.

[0153] (7-5-1) Authentication information The authentication information is information for authenticating the mobile entity 10. As will be described in detail later, authentication includes identifying the mobile entity 10.

[0154] (7-5-1a) Mobile ID The authentication information is, for example, a mobile body ID. The mobile body ID is information that identifies the mobile body 10. The mobile body ID is stored in, for example, the memory of the information terminal 101 that the mobile body 10 possesses.

[0155] The mobile ID in this embodiment is basically a user ID. A user ID is information that identifies a user. The user ID is stored, for example, in the memory of a mobile information terminal carried by the user. Specifically, the user ID is, for example, a telephone number assigned to the mobile information terminal, but it may also be an email address assigned to the user, a My Number, or an employee ID, or any other information that can identify the user. However, the authentication information may also be a robot ID that identifies the robot.

[0156] (7-5-1b) Terminal ID The authentication information is not limited to a mobile object ID, but may also be a terminal ID. The terminal ID is information that identifies the information terminal 101, such as a MAC (Media Access Control address) address. The MAC address is stored in the memory of the control system 1 (server) in association with the user ID. Therefore, the authentication unit 122 can obtain the user ID based on the MAC address. In this way, the authentication information may be any information that can directly or indirectly identify the mobile object 10.

[0157] (7-6) Authentication section The authentication unit 122 performs authentication based on the authentication information acquired by the acquisition unit 121, and acquires the authentication result.

[0158] (7-6-1) Authentication Authentication means at least identifying the mobile body 10. Authentication may include identifying the mobile body 10 and confirming that the identified mobile body 10 is a mobile body 10 that is authorized to access the second area A12.

[0159] The mobile object 10 permitted to access the second area A12 may be, for example, a mobile object 10 whose mobile object ID has been registered in advance. The mobile object 10 whose mobile object ID has been registered in advance is, for example, an employee. An employee ID is assigned to the employee. The employee ID is information that identifies an employee of the company. The employee ID is registered in association with various authentication information, for example, the MAC address and mobile phone number of the information terminal 101 owned by the employee, and the employee's email address.

[0160] (7-6-2) Acquiring a mobile ID from authentication information other than the mobile ID If the authentication information is information other than the mobile object ID (for example, the MAC address of the information terminal 101), the authentication unit 122 acquires the mobile object ID based on the authentication information acquired by the acquisition unit 121.

[0161] (7-6-3) Support information The correspondence information is information relating to the correspondence between authentication information other than the mobile entity ID and the mobile entity ID. For example, the correspondence information is a set of pairs of authentication information other than the mobile entity ID and the mobile entity ID. Specifically, the correspondence information in this embodiment is a set of pairs of MAC addresses and employee IDs.

[0162] (7-6-4) Authentication results The authentication result is information indicating the result of authentication by the authentication unit 122. The authentication result acquired by the authentication unit 122 is either an authentication result indicating successful authentication or an authentication result indicating unsuccessful authentication. The authentication result indicating successful authentication is, for example, a mobile object ID such as an employee ID, but may also be a flag such as "successful" or "1" indicating successful authentication. The authentication result indicating unsuccessful authentication may, for example, be information indicating that a mobile object ID could not be acquired, or may also be a flag such as "unsuccessful" or "0" indicating unsuccessful authentication.

[0163] For example, the authentication unit 122 acquires the mobile object ID acquired by the acquisition unit 121 as the authentication result of the mobile object 10. Alternatively, the authentication unit 122 may use the correspondence information to acquire the employee ID paired with the MAC address acquired by the acquisition unit 121 as the authentication result of the mobile object 10.

[0164] (7-7) Control unit The control unit 123 uses the authentication result of the authentication unit 122 to control the mobile body 10's access to the predetermined area. Controlling the mobile body 10's access to the predetermined area includes permitting the mobile body 10 to access the predetermined area and prohibiting the mobile body 10 from accessing the predetermined area.

[0165] To permit the mobile object 10 to access a predetermined area means, for example, unlocking the door provided at the access point AL1 to the predetermined area or opening the door provided at the access point AL1. To prohibit the mobile object 10 from accessing a predetermined area means, for example, locking the door provided at the access point AL1 or closing the door provided at the access point AL1.

[0166] In this embodiment, short-range wireless communication is used for wireless communication between the information terminal 101 held by the mobile object and the communication unit 14 included in each of the control system 1 and the communication device 2. The processing unit 12 acquires location information of the mobile object 10 based on wireless signals transmitted and received by wireless communication between the information terminal 101 and the communication unit 14.

[0167] If the acquired location information indicates a location near the access point AL1 and within the first area A11, and the authentication unit 122 acquires a mobile body ID, the control unit 123 permits the mobile body 10 to access (first access) from the first area A11 to the second area A12.

[0168] In addition, if the acquired location information indicates a location near the access location AL1 and within the second area A12, and the authentication unit 122 acquires a mobile body ID, the control unit 123 permits the mobile body 10 to access the first area A11 from the second area A12 (second access).

[0169] As a result, for example, in an environment where the first area A11 is inside the company and the second area A12 is outside the company, if the mobile object 10 is an employee, the employee is permitted to come to work if the acquired location information indicates a position near the access point AL1 and within the first area A11, and the authentication unit 122 has acquired an employee ID. Also, if the acquired location information indicates a position near the access point AL1 and within the second area A12, and the authentication unit 122 has acquired an employee ID, the employee is permitted to leave work.

[0170] If the mobile object 10 is a user other than an employee, even if the acquired location information indicates a location near the access location AL1 and within the first area A11, the authentication unit 122 will acquire a user ID different from the employee ID, and the user will not be permitted to access the second area A12. Also, even if the acquired location information indicates a location near the access location AL1 and within the second area A12, the authentication unit 122 will acquire a user ID different from the employee ID, and the user will not be permitted to access the first area A11.

[0171] (7-8) Setting section The setting unit 124 sets the range.

[0172] (7-8-1) Range setting Range setting is a process of setting at least one of a first range and a second range. In this embodiment, range setting is basically a process of setting each of the first range and the second range. In more detail, the receiving unit 11 receives a setting instruction, and the setting unit 124 sets the range according to the received setting instruction.

[0173] (7-8-2) Setting instructions The setting instruction is an instruction for setting a range. In this embodiment, the setting instruction includes a selection result, a first instruction, and a second instruction.

[0174] (7-8-2a) Selection results The selection result is a result of selecting a first restricted function group, which is a set of one or more functions whose realization should be restricted in the first area A11, and a second restricted function group, which is a set of one or more functions whose realization should be restricted in the second area A12, from among a plurality of functions that can be realized in the information terminal 101. The selection result is acquired, for example, by an operator of the control system 1 performing an operation to select each of the first restricted function group and the second restricted function group from the plurality of functions included in the selection tab while referring to an image of the selection tab displayed on the display via the output unit 13.

[0175] (7-8-2b) First and second instructions The first instruction is an instruction to set a first range including the remaining functions excluding the first restricted function group among the multiple functions as one or more functions to be realized in the first area A11. The first instruction is accepted by the accepting unit 11, for example, when one or more function identifiers corresponding to one or more functions included in the first range are displayed on the display via the output unit 13, and then the operator performs an approval operation via the keyboard.

[0176] The second instruction is an instruction to set a second range including the remaining functions excluding the second restricted function group among the plurality of functions as one or more functions of which realization should be restricted in the second area A12. The second instruction is accepted by the accepting unit 11, for example, when the operator performs an approval operation via the keyboard after one or more function identifiers corresponding to one or more functions included in the second range are displayed on the display via the output unit 13.

[0177] (7-8-3) Setting the first and second ranges When the receiving unit 11 receives a setting instruction including a selection result, a first instruction, and a second instruction, the setting unit 124 sets a first range according to the first instruction and a second range according to the second instruction based on the received selection result.

[0178] (7-9) Mode information The mode information is information that indicates the mode of the information terminal 101. The mode information is, for example, one of two character strings, "first mode" and "second mode," corresponding to the first mode and the second mode, respectively. Alternatively, the mode information may be, for example, a flag such as "0" and "1," corresponding to the first mode and the second mode, respectively.

[0179] (7-10) First traffic light The first signal is a signal for switching the mode of the information terminal 101 from the first mode to the second mode. The first signal is transmitted to the information terminal 101 by the communication unit 14 under the control of the processing unit 12. By transmitting the first signal, the control system 1 (server) can forcibly switch the mode of the information terminal 101 to the second mode.

[0180] More specifically, the processing unit 12 acquires the location information of the mobile object 10 and the mode information of the information terminal 101 based on the wireless communication between the communication unit 14 and the information terminal 101. As described above, the location information of the mobile object 10 is acquired based on, for example, the received signal strength of the wireless signal transmitted and received by the wireless communication between the communication unit 14 and the information terminal 101. As described above, the mode information is included in the wireless signal transmitted from the wireless communication unit 101a of the information terminal 101, and is acquired from the wireless signal received by the communication unit 14.

[0181] When the location information indicates a location within the second area A12 and the mode information indicates "first mode," the processing unit 12 transmits a first signal to the information terminal 101 via the communication unit 14. The processing unit 101b of the information terminal 101 switches the mode of the information terminal 101 from the first mode to the second mode in response to the first signal from the control system 1. As a result, the information terminal 101, which is in the first mode while located within the second area A12, is forcibly switched to the second mode by the control system 1. As a result, for example, security in the second area A12 is improved.

[0182] (7-11) Second traffic light The second signal is a signal for switching the mode of the information terminal 101 from the second mode to the first mode. The second signal is transmitted to the information terminal 101 by the communication unit 14 under the control of the processing unit 12. By transmitting the second signal, the control system 1 can forcibly switch the mode of the information terminal 101 to the first mode.

[0183] Specifically, the processing unit 12 acquires the position information of the mobile object 10 and the mode information of the information terminal 101 based on wireless communication between the communication unit 14 and the information terminal 101. For example, when the position information indicates a position within the first area A11 and the mode information indicates the "second mode," the processing unit 12 transmits a second signal to the information terminal 101 via the communication unit 14.

[0184] The processing unit 101b of the information terminal 101 switches the mode of the information terminal 101 from the second mode to the first mode in response to the second signal from the control system 1. As a result, the information terminal 101, which is in the second mode while located in the first area A11, is forcibly switched to the first mode by the control system 1. As a result, for example, privacy in the first area A11 is ensured.

[0185] (8) Hardware (8-1) Information terminal The information terminal 101 has a wireless communication module, a processor, and a memory. The wireless communication module realizes wireless communication with the communication unit 14. The memory stores various information including authentication information and programs, and the processor cooperates with the wireless communication module to operate based on the programs and various information stored in the memory, thereby realizing the functions of the information terminal 101.

[0186] The information terminal 101 may further include a display with a touch panel, which allows the employee to set the range via the touch panel.

[0187] Specifically, the information terminal 101 is realized by a smartphone, a tablet terminal, a mobile phone, or the like.

[0188] (8-2) Robot A robot, which is a type of moving body 10, has a movement mechanism including wheels and motors for driving the wheels, a detection circuit including an image sensor, and a control circuit that controls the running mechanism based on the output of the detection circuit to achieve autonomous movement. The robot is equipped with an information terminal 101.

[0189] (8-3) Control System The control system 1 includes, for example, a wireless communication module, a display with a touch panel, a processor, and a memory. The wireless communication module realizes the function of a communication unit 14. The touch panel realizes the function of a reception unit 11, and the display realizes the function of an output unit 13.

[0190] The memory stores various information and programs including correspondence information, and the processor operates based on the programs and various information stored in the memory to realize the functions of the processing unit 12, acquisition unit 121, authentication unit 122, control unit 123, and setting unit 124.

[0191] In addition, if the authentication by the authentication unit 122 is to identify the mobile body 10 based on the authentication information received by the communication unit 14 and does not include a comparison between the received authentication information and the registered authentication information, the registered authentication information does not need to be stored in memory.

[0192] Specifically, the control system 1 is realized by a server under the control of a company.

[0193] (8-4) Communication equipment The communication device 2 includes, for example, a wireless communication module. The wireless communication module realizes the function of the communication unit .

[0194] Specifically, the communication device 2 is realized by, for example, a reader that reads various types of information from the information terminal 101.

[0195] (9) Example of operation (9-1) Example of information terminal operation The information terminal 101 operates, for example, according to the flowcharts of Figures 2 and 3. The processing of Figures 2 and 3 starts when the information terminal 101 is started up, and ends when the operation of the information terminal 101 is stopped.

[0196] When the process starts, the processing unit 101b sets "first mode" to mode information indicating the mode of the information terminal 101 (step S1). Next, the wireless communication unit 101a communicates with the communication device 2 via short-range wireless communication (step S2). Next, the processing unit 101b determines whether the first access (e.g., coming to work) is permitted (step S3). If it is determined that the first access is permitted (Yes in step S3), the process proceeds to step S6.

[0197] If it is determined in step S3 that the first access is not permitted (No), the wireless communication unit 101a communicates with the control system 1 (server) via the communication medium 200 (step S4). Next, the processing unit 101b determines whether or not a first signal has been received from the control system 1 (server) (step S5). If it is determined that the first signal has not been received from the control system 1 (server) (No in step S5), the processing returns to step S2. If it is determined that the first signal has been received from the control system 1 (server) (Yes in step S5), the processing proceeds to step S6.

[0198] In step S6, the mode information is set to "second mode." Next, the wireless communication unit 101a communicates with the communication device 2 via short-range wireless communication (step S7). Next, the processing unit 101b determines whether the second access (e.g., leaving work) is permitted (step S8). If it is determined that the second access is permitted (Yes in step S8), the process returns to step S1.

[0199] If it is determined in step S8 that the second access is not permitted (No), the wireless communication unit 101a communicates with the control system 1 (server) via the communication medium 200 (step S9). Next, the processing unit 101b determines whether or not a second signal has been received (step S10). If it is determined in step S10 that the second signal has been received (Yes), the processing returns to step S1.

[0200] If it is determined in step S10 that the second signal has not been received (No), the processing unit 101b determines whether a setting instruction has been received (step S11). If it is determined that a setting instruction has not been received (No in step S11), the processing returns to step S7.

[0201] If it is determined in step S11 that a setting instruction has been received (Yes), the range is set in accordance with the setting instruction (step S12), after which the process returns to step S7.

[0202] (9-2) Example of control system operation In this operation example, the control system 1 (server) operates according to the flowchart of Fig. 4. The processing of Fig. 4 is started when the control system 1 is started, and is ended when the control system 1 stops operating.

[0203] When the process starts, the communication unit 14 communicates with the information terminal 101 via short-range wireless communication (step S21). Next, the processing unit 12 determines whether the first access (e.g., coming to work) is permitted or not based on the communication result of step S21 (step S22). If it is determined that the first access is not permitted (No in step S22), the process returns to step S21.

[0204] If it is determined in step S22 that the first access is permitted (Yes), the communication unit 14 transmits a first signal to the information terminal 101 (step S23).

[0205] The processing unit 12 determines whether the communication unit 14 has received a wireless signal via short-range wireless communication from the information terminal 101 (step S1). If it is determined that the communication unit 14 has not received a wireless signal via short-range wireless communication from the information terminal 101 (No in step S1), the processing returns to step S1.

[0206] Next, the communication unit 14 communicates with the information terminal 101 via short-range wireless communication (step S24). Next, the processing unit 12 determines whether or not the second access (e.g., leaving work) is permitted based on the communication result of step S24 (step S25). If it is determined that the second access is permitted (Yes in step S25), the communication unit 14 transmits a second signal to the information terminal 101 (step S26). Thereafter, the process returns to step S21.

[0207] If it is determined in step S25 that the second access is not permitted (No), the communication unit 14 determines whether the reception unit 11 has received a setting instruction (step S27). If it is determined that the reception unit 11 has not received a setting instruction (No in step S27), the process returns to step S24.

[0208] If it is determined in step S27 that the reception unit 11 has received the setting instruction (Yes), a setting signal is transmitted to the information terminal 101 (step S28). After that, the process returns to step S24.

[0209] (10) Variation (10-1) First Modified Example of Control System In this modification, information terminal 101 has a function of the first mode but does not have a function of the second mode. Therefore, information terminal 101 in this modification does not have a function of switching between the first mode and the second mode.

[0210] In the control system 1 of this modified example, if access (first access) from the first area A11 to the second area A12 of the mobile body 10 carrying the information terminal 101 is permitted based on communication between the wireless communication unit 101a of the information terminal 101 and the communication device 2, the communication unit 14 becomes able to accept a request from the information terminal 101.

[0211] More specifically, when communication unit 14 communicates with information terminal 101 and receives authentication information from information terminal 101, acquisition unit 121 acquires the received authentication information, and authentication unit 122 performs authentication based on the acquired authentication information. If control unit 123 permits the first access based on the authentication result, it becomes possible to accept a request from information terminal 101.

[0212] When it becomes possible to accept a request from the information terminal 101, the communication unit 14 communicates with the information terminal 101. When the communication unit 14 receives a request from the information terminal 101, the received request is accepted by the acceptance unit 11, and the processing unit 12 executes processing according to the accepted request.

[0213] For example, when a connection request to a specific destination, such as a dedicated network, is received from the information terminal 101, the processing unit 12 connects the information terminal 101 to the dedicated network, thereby enabling the information terminal 101 to communicate via the dedicated network.

[0214] If the first access is not permitted, the request from the information terminal 101 cannot be accepted.

[0215] In this way, the control system 1 is able to accept requests from the information terminal 101 in accordance with permission to access the second area A12, thereby enabling a second range of functions to be realized in the second area A12 that is different from the first range of functions realized in the first area A11.

[0216] (10-1-1) Operation example of the control system according to the first modification The control system 1 of this modified example operates, for example, according to the flowchart of Fig. 5. The processing of Fig. 5 is started when the control system 1 is started, and is ended when the operation of the control system 1 is stopped.

[0217] When the process starts, the communication unit 14 communicates with the information terminal 101 via short-range wireless communication (step S21). Next, the processing unit 12 determines whether the first access (e.g., coming to work) is permitted or not based on the communication result of step S21 (step S22). If it is determined that the first access is not permitted (No in step S22), the process returns to step S21.

[0218] If it is determined in step S22 that the first access is permitted (Yes), the processing unit 12 enables the receiving unit 11 to receive the request received from the information terminal 101 via the communication unit 14 (step S23a).

[0219] Next, the communication unit 14 communicates with the information terminal 101 via short-range wireless communication (step S24). Next, the processing unit 12 determines whether the second access (e.g., leaving work) is permitted based on the communication result of step S24 (step S25). If it is determined that the second access is permitted (Yes in step S25), the reception unit 11 is disabled from receiving requests received from the information terminal 101 via the communication unit 14 (step S26a). Thereafter, the process returns to step S21.

[0220] If it is determined in step S25 that the second access is not permitted (No), it is determined whether or not the reception unit 11 has received a request received from the information terminal 101 via the communication unit 14 (step S27). If it is determined that the reception unit 11 has not received a request received from the information terminal 101 via the communication unit 14 (No in step S27a), the process returns to step S24.

[0221] If the reception unit 11 determines in step S27 that the request received from the information terminal 101 via the communication unit 14 has been received (Yes), the processing unit 12 performs processing according to the received request (step S28). After that, the processing returns to step S24.

[0222] (10-2) Second Modification of Control System The control system 1 of this modified example has a configuration in which the communication unit 14 is deleted from the configuration of the control system of the embodiment shown in Fig. 1. In other words, the control system 1 of this modified example does not have a function of communicating with the wireless communication unit 101a of the information terminal 101 by short-range wireless communication, but has a function of communicating with the communication device 2 via the communication medium 200.

[0223] The control system 1 of this modified example does not need to be located near the access point AL1 (i.e., within the communication range of the wireless communication unit 101a of the information terminal 101), and may be realized, for example, by a company server or a cloud server installed remotely from a predetermined area. The communication medium 200 in this modified example is a wide area network, and is preferably a dedicated network such as a VPN, but may also be a general-purpose network such as the Internet.

[0224] (10-3) Third Modification of Control System In this modification, the communication device 2 has the functions of the control system 1. For example, the reader that realizes the communication device 2 may have the functions of the server that realizes the control system 1, in which case the server is not necessary.

[0225] The communication device 2 (reader) of this modification further includes a communication unit 14, a reception unit 11, a processing unit 12, an output unit 13, an acquisition unit 121, an authentication unit 122, a control unit 123, and a setting unit .

[0226] (10-4) Modification of the first switching step The first switching step of this modified example is a process in which, when the first access is permitted based on communication between the wireless communication unit 101a and the communication device 2, the mode of the information terminal 101 is not switched from the first mode to the second mode, but the mode of the information terminal 101 is switched from the first mode to the second mode only when a first signal from the control system 1 is received through communication between the wireless communication unit 101a and the control system 1.

[0227] More specifically, in the flowcharts of Figures 2 and 3, the second switching step of this modified example does not include the process in which, after the wireless communication unit 101a communicates with the communication device 2 in step S2, it is determined in step S3 that the first access is permitted (Yes) and the process returns to step S1, but only includes the process in which the wireless communication unit 101a communicates with the control system 1 (server) in step S4, it is determined in step S5 that the first signal has been received (Yes), and then the process proceeds to step S6.

[0228] That is, in this modification, the communication device 2 is not necessary in the configuration of FIG. 1, and the two steps S2 and S3 may be omitted in the flowcharts of FIGS.

[0229] This allows the control system 1, which is an external system to the information terminal 101, to switch the mode of the information terminal 101 from the first mode to the second mode (forced switching) without the information terminal 101 itself switching its mode from the first mode to the second mode.

[0230] (10-5) First Modification of the Second Switching Step The second switching step of this modified example is a process in which, when the second access is permitted based on the communication between the wireless communication unit 101a and the communication device 2, the mode of the information terminal 101 is not switched from the second mode to the first mode, but the mode of the information terminal 101 is switched from the second mode to the first mode only when a second signal from the control system 1 is received through the communication between the wireless communication unit 101a and the control system 1.

[0231] More specifically, in the flowcharts of Figures 2 and 3, the second switching step of this modified example does not include the process in which, after the wireless communication unit 101a communicates with the communication device 2 in step S7, it is determined in step S8 that the second access is permitted (Yes) and the process returns to step S1, but only includes the process in which the wireless communication unit 101a communicates with the control system 1 (server) in step S9, it is determined in step S10 that the second signal has been received (Yes), and the process returns to step S1.

[0232] That is, in this modification, the communication device 2 is not necessary in the configuration of FIG. 1, and the two steps S7 and S8 may be omitted in the flowcharts of FIGS.

[0233] This allows the information terminal 101 to switch its own mode from the second mode to the first mode, but allows the control system 1, which is an external system to the information terminal 101, to switch the mode of the information terminal 101 from the first mode to the second mode (forced switching).

[0234] (10-6) Second Modification of the Second Switching Step In the second switching step in this modified example, when a predetermined time arrives or when a predetermined time has elapsed since access (second access) from the second area A12 to the first area A11 is permitted, the mode of the information terminal 101 is switched from the second mode to the first mode.

[0235] The second access permission is, for example, permission to leave work. The predetermined time is, for example, the regular working time at the company, that is, a predetermined time to leave work. The predetermined time is, for example, 5 minutes later, 10 minutes later, etc.

[0236] According to this modification, the mode of the information terminal 101 is switched from the second mode to the first mode at a predetermined time (e.g., regular time) or a certain time (e.g., 5 minutes) after the second access (e.g., leaving work) is permitted for the mobile object 10 possessing the information terminal 101, thereby changing the range of functions that the information terminal 101 can realize from the second range to the first range. This makes it possible to realize functions of the first range (e.g., lifting restrictions on non-business functions, restricting business functions, and further restricting the use of personal information by the company), for example, after work is finished or outside the company.

[0237] (10-7) Variations of range setting In the embodiment, the control system 1 is realized on a company server, and the company forcibly sets the range on the employee's information terminal 101 by sending a setting instruction from this server to the information terminal 101. However, in this modified example, the employee may set the range on the information terminal 101 by operating the information terminal 101.

[0238] (10-8) Variations in communication media The communication medium 200 may be a communication medium other than a wired LAN, for example, a serial communication cable such as RS-232C.

[0239] Alternatively, the communication medium 200 may be a wireless communication medium such as a wireless LAN. The communication medium 200, which is a wireless communication medium, may realize an intranet or a VPN, which is a dedicated network used by the communication function described above.

[0240] (10-9) Modified example of wireless communication by the communication unit In the embodiment, the wireless communication by the communication unit 14 is a wireless LAN, but it may be a short-distance wireless communication other than a wireless LAN, such as Bluetooth (registered trademark), UWB (Ultra Wide Band) wireless communication, etc. Furthermore, the wireless communication by the communication unit 14 is not limited to short-distance wireless communication, and may be wide-area wireless communication via a wide-area network such as a mobile communication network.

[0241] (10-10) Modified radio signal In the embodiment, the wireless communication unit 101a transmits a wireless signal including authentication information and mode information to the control system 1, but in this modified example, the wireless communication unit 101a may transmit a wireless signal including authentication information but not including mode information to the control system 1.

[0242] (10-11) Modified access points The access location AL1 may include a first access location and a second access location. The first access location is a location through which the mobile object 10 passes during the first access, such as an entrance from outside the company to inside the company. The second access location is a location through which the mobile object 10 passes during the second access, such as an exit from inside the company to outside the company.

[0243] (10-12) Modification of the first and second switching steps: switching only from the outside In this modified example, the information terminal 101 does not determine whether the first access is permitted based on communication between the information terminal 101 and the communication device 2, but switches from the first mode to the second mode in response to an instruction from outside the information terminal 101, for example, from the control system 1 (server).

[0244] In the first switching step of this modified example, when a first signal is received from the control system 1 based on communication between the information terminal 101 and the control system 1, the mode of the information terminal 101 is switched from the first mode to the second mode.

[0245] The first switching step may be a process in which the information terminal 101 communicates with the control system 1 (server) in step S4, and after it is determined as Yes (the first signal has been received) in step S5, the process proceeds to step S6.

[0246] According to this modification, the external system can switch the mode of the information terminal 101 from the first mode to the second mode (forced switching).

[0247] (10-13) First variant of the range of functions that vary depending on the mode The range of functions that differs depending on the mode may, for example, be a first range corresponding to a first mode and a second range corresponding to a second mode, each having a different number of functions that can be realized. For example, a first number of functions may be realized in the first range, while a second number of functions that is less than the first number may be realized in the second range. Alternatively, a first number of functions may be realized in the first range, while a second number of functions that is greater than the first number may be realized in the second range.

[0248] (10-14) Second variant of the range of functions that vary depending on the mode The range of functions that differs depending on the mode may be, for example, a first range corresponding to a first mode and a second range corresponding to a second mode, in which the attributes of the functions that can be realized are different from each other. For example, a function with a first attribute may be realized in the first range, while a function with a second attribute different from the first attribute may be realized in the second range.

[0249] For example, the first attribute may be for external use and the second attribute may be for internal use, or the first attribute may be for general use and the second attribute may be for private use, or the first attribute may be for personal use and the second attribute may be for business use.

[0250] The functions of the first attribute are, for example, a communication function via a general-purpose network, a function for executing applications other than for business use (for example, for entertainment), a function for connecting to a web server, a photographing function, and a sound recording function.

[0251] The functions of the second attribute include, for example, a communication function via a dedicated network, a function for executing business applications, a function for connecting to an in-house server, and a security function.

[0252] The first range of functions may include more possible functions for the first attribute and more impossible functions for the second attribute than the second range of functions.

[0253] (10-15) Variations in the implementation of different ranges of functions depending on the mode The range of functions that varies depending on the mode may be realized, for example, as follows: Information terminal 101 of this modified example realizes a specific function when a predetermined condition is satisfied. The predetermined condition for realizing the specific function may differ between the first mode and the second mode, so that a range of functions that varies depending on the mode may be realized.

[0254] The specific function is, for example, a security function. The predetermined condition in the first mode is that the mobile object 10 is permitted to access the second area A12 from the first area A11 based on communication between the wireless communication unit 101a and the communication device 2, or that the wireless communication unit 101a has started communication via a dedicated network. As a result, in the first mode, the security function is realized when the mobile object 10 accesses the second area A12 from the first area A11, specifically when an employee arrives at work. Also, in the first mode, the security function is realized when the information terminal 101 starts communication via the dedicated network, that is, when an employee starts working from home, even if the employee does not arrive at work.

[0255] The predetermined condition in the second mode is that the location information of the mobile object 10 indicates a location within the second area A12, and the security function of the information terminal 101 is not implemented, or the control system 1 (server) has instructed the information terminal 101 to activate security software. This ensures that the security function is implemented on the information terminal 101 of an employee working within the company.

[0256] (10-16) Modification of the restriction of business functions in the first range The business function may be, for example, a client function that causes the information terminal 101 to function as a client of the control system 1 (server). When the information terminal 101 is in the first mode (in other words, when the moving object 10 is in the first area A11), the client function is restricted (for example, prohibited). When the information terminal 101 is in the second mode (in other words, when the moving object 10 is in the second area A12), the client function is feasible.

[0257] (10-17) External Systems The control system 1 (server) is not limited to a company server, but may be a cloud server. In other words, the system that communicates with the information terminal 101 and transmits at least one of the first signal and the second signal to the information terminal 101 is not limited to the control system 1, but may be any system external to the information terminal 101.

[0258] An external system that communicates with the information terminal 101 and transmits at least one of the first signal and the second signal to the information terminal 101 may be referred to as an "external system" below.

[0259] The other party with which the wireless communication unit 101a communicates in step S4 may be an external system, and a first signal may be received from the external system in step S5. Also, the other party with which the wireless communication unit 101a communicates in step S9 may be an external system, and a first signal may be received from the external system in step S10.

[0260] (10-18) Variation of position measurement In this modified example, the location information of the information terminal 101 is obtained using two signals: a signal transmitted and received between the wireless communication unit 101a and the communication unit 14 of the control system 1, and a signal transmitted and received between the wireless communication unit 101a and the communication unit 14 of the communication device 2.

[0261] Alternatively, in this modification, the number of communication devices 2 each having a communication unit 14 may be two or more, and the wireless communication unit 101a may communicate with three or more communication units 14, including the communication unit 14 of the control system 1 and each of the communication units 14 of the two or more communication devices 2. In this case, the location information of the information terminal 101 may be acquired using signals transmitted and received between the wireless communication unit 101a and each of the three or more communication units 14 (i.e., three or more signals corresponding to the three or more communication devices including the control system 1, which is a type of communication device).

[0262] The location information obtained using two or more signals may be, for example, average location information obtained based on location information obtained using each of the two or more signals, i.e., two or more pieces of location information corresponding to the two or more signals.

[0263] (11) Programs and computer systems A program according to one embodiment of the present disclosure is a program for causing a computer system to execute the above-described control method. The program is, for example, a program for causing one or more processors to execute the control method. The one or more processors includes the case of a single processor and the case of two or more processors. The one processor is, for example, the processor of the information terminal 101, and the two or more processors are two processors corresponding to the information terminal 101 and the control system 1, or three processors corresponding to the information terminal 101, the control system 1, and the communication device 2.

[0264] The information terminal 101 in the present disclosure includes a computer system. The computer system is primarily composed of a processor and memory as hardware. The processor executes a program stored in the memory of the computer system to realize the functions of the information terminal 101 in the present disclosure. The program may be pre-stored in the memory of the computer system, provided via a telecommunications line, or provided in a non-transitory recording medium readable by the computer system, such as a memory card, optical disk, or hard disk drive. The processor of the computer system is composed of one or more electronic circuits including a semiconductor integrated circuit (IC) or a large-scale integrated circuit (LSI). The integrated circuits, such as ICs and LSIs, are referred to by different names depending on the degree of integration, and include integrated circuits called system LSIs, very large-scale integrations (VLSIs), or ultra-large-scale integrations (ULSIs). Furthermore, field-programmable gate arrays (FPGAs), which are programmed after the LSI is manufactured, or logic devices that allow the reconfiguration of internal connections or internal circuit partitions of the LSI, can also be used as processors. The electronic circuits may be integrated into one chip or distributed across multiple chips. The chips may be integrated into one device or distributed across multiple devices. The computer system referred to here includes a microcontroller having one or more processors and one or more memories. Therefore, the microcontroller is also composed of one or more electronic circuits including a semiconductor integrated circuit or a large-scale integrated circuit.

[0265] Furthermore, it is not essential for information terminal 101 that multiple functions are integrated into one housing, and the components of information terminal 101 may be distributed across multiple housings. Furthermore, at least some of the functions of information terminal 101 may be realized by the cloud (cloud computing) or the like.

[0266] Note that a program according to another aspect of the present disclosure is a program for causing a computer system to realize the functions of the above-described control system 1. The control system 1 in the present disclosure includes a computer system.

[0267] (12) Summary A control method according to a first aspect is a control method for an information terminal (101) having a wireless communication unit (101a). The control method includes a communication step (S2) and a first switching step (S3: Yes → S6). In the communication step (S2), the wireless communication unit (101a) communicates with a communication device (2). In the first switching step (S3: Yes → S6), when access from a first area (A11) to a second area (A12) is permitted based on the communication of the wireless communication unit (101a), the mode of the information terminal (101) is switched from a first mode capable of realizing a first range of functions to a second mode capable of realizing a second range of functions different from the first range.

[0268] According to this aspect, a second range of functions different from the first range of functions realized in the first area (A11) can be realized in the second area (A12).

[0269] Specifically, by switching the mode of the information terminal (101) from the first mode to the second mode in response to permission to access from the first area (A11) to the second area (A12), the range of functions that can be realized by the information terminal (101) changes from the first range to the second range. As a result of this change in the range of functions that can be realized by the information terminal (101) from the first range to the second range, at least some of the functions that were realizable in the first area (A11) become infeasible in the second area (A12), while at least some of the functions that were infeasible in the first area (A11) become feasible in the second area (A12).

[0270] Therefore, for example, if the first area (A11) is outside the company and the second area (A12) is inside the company, depending on whether access from outside the company to the company is permitted (permission to come into the company), functions for protecting privacy that could be realized outside the company become impossible to realize inside the company, and functions for ensuring security that could not be realized outside the company become possible inside the company. This makes it possible to ensure security within the company.

[0271] Furthermore, by switching from the first mode to the second mode in response to permission for access from the first area (A11) to the second area (A12) based on communication between the wireless communication unit (101a) of the information terminal (101) and the communication device (2), for example, when a mobile body (10) carrying the information terminal (101) accesses the second area (A12) from the first area (A11), the range of functions that can be realized by the information terminal (101) can be changed from the first range to the second range.

[0272] Furthermore, since the modes of the information terminal (101) include the first mode and the second mode, different functions can be realized depending on the area. For example, when the first area (A11) is outside the company and the second area (A12) is inside the company, it is possible to realize a function for protecting privacy outside the company and a function for ensuring security inside the company.

[0273] In the control method according to the second aspect, in the first aspect, the first range has more limited feasible functions than the second range.

[0274] According to this aspect, restrictions on functions that can be implemented by the information terminal (101) are relaxed depending on permission for access from the first area (A11) to the second area (A12), so that functions that were restricted in the first area (A11) can be implemented in the second area (A12). For example, a dedicated network connection function, security function, etc. that were restricted in the first area (A11) can be implemented in the second area (A12), thereby improving security in the second area (A12).

[0275] In the control method according to the third aspect, in the second aspect, the second area (A12) is a business area and the first area (A11) is a non-business area, and the first area (A11) has more limited executable business functions than the second area.

[0276] According to this aspect, restrictions on business functions that can be implemented on the information terminal (101) are relaxed depending on permission to access (e.g., come to work) from the first area (A11), which is an area other than business use, to the second area (A12), which is a business use area, so that functions that were restricted in the first area (A11) can be implemented in the second area (A12). For example, a dedicated network connection function, security function, etc. that were restricted in the first area (A11) can be implemented in the second area (A12), thereby improving security in the second area (A12).

[0277] In the control method according to the fourth aspect, in the first aspect, the second range has more limited feasible functions than the first range.

[0278] According to this aspect, restrictions on functions that can be implemented by the information terminal (101) are strengthened depending on permission for access from the first area (A11) to the second area (A12), so that functions that were not restricted in the first area (A11) can be restricted in the second area (A12). For example, functions that were not restricted in the first area (A11), such as a function for connecting to a general-purpose network, a function for executing non-business applications, and a photographing function, are restricted in the second area (A12), thereby improving security in the second area (A12).

[0279] In the control method of the fifth aspect, in the fourth aspect, the second area (A12) is a business area, the first area (A11) is a non-business area, and the second range has more limited non-business functions that can be executed than the first range.

[0280] According to this aspect, restrictions on non-business functions that can be implemented on the information terminal (101) are strengthened depending on permission to access (commence work) from the first area (A11), which is a non-business area, to the second area (A12), which is a business area, so that functions that were not restricted in the first area (A11) can be restricted in the second area (A12). For example, functions that were not restricted in the first area (A11), such as a function for connecting to a general-purpose network, a function for running non-business applications, and a photo function, are restricted in the second area (A12), thereby improving security within the company.

[0281] The control method according to a sixth aspect is the control method according to any one of the first to fifth aspects, further including a second switching step (S8: Yes → S1). In the second switching step (S8: Yes → S1), when access from the second area (A12) to the first area (A11) is permitted based on communication of the wireless communication unit (101a), the mode is switched from the second mode to the first mode.

[0282] According to this aspect, by switching the mode of the information terminal (101) from the second mode to the first mode in response to permission to access the first area (A11) from the second area (A12), the range of functions that can be realized by the information terminal (101) changes from the second range to the first range. As a result of the change in the range of functions that can be realized by the information terminal (101) from the second range to the first range, at least some of the functions in the second range that were realizable in the second area (A12) become infeasible in the first area (A11), while at least some of the functions in the second range that were infeasible in the second area (A12) become feasible in the first area (A11).

[0283] Therefore, for example, if the first area (A11) is outside the company and the second area (A12) is inside the company, depending on whether access from inside the company to outside the company (permission to leave the company) is permitted, security functions that were not possible inside the company can be permitted outside the company, and security functions that were possible inside the company cannot be permitted outside the company. This allows privacy protection outside the company.

[0284] Furthermore, by switching from the second mode to the first mode in response to permission for access from the second area (A12) to the first area (A11) based on communication between the wireless communication unit (101a) of the information terminal (101) and the communication device (2), for example, when a mobile body (10) carrying the information terminal (101) accesses the first area (A11) from the second area (A12), the range of functions that can be realized by the information terminal (101) can be changed from the second range to the first range.

[0285] The control method according to a seventh aspect is any one of the first to fifth aspects, and further includes a second switching step, in which the mode is switched from the second mode to the first mode when a predetermined time arrives or when a predetermined time has elapsed since access from the second area (A12) to the first area (A11) was permitted.

[0286] According to this aspect, at a predetermined time (e.g., regular working hours at a company) or after a certain time (e.g., 5 minutes) has passed since the mobile body (10) carrying the information terminal (101) is permitted to access the first area (A11) from the second area (A12) (e.g., leaving work), the range of functions that can be realized by the information terminal (101) is changed from the second range to the first range, thereby making it possible to realize the functions of the first range, for example, after work is finished or outside the company.

[0287] The control method according to an eighth aspect is any one of the first to seventh aspects, wherein in the first switching step (S5: Yes→S6), the mode is further switched from the first mode to the second mode based on communication with the external system (1).

[0288] According to this aspect, an external system (for example, a company server) can switch (forcefully switch) the mode of the information terminal (101) from the first mode to the second mode.

[0289] A control method according to a ninth aspect is the control method according to any one of the first to eighth aspects, further comprising a setting step (S11: Yes → S12). In the setting step (S11: Yes → S12), at least one of the first range and the second range is set based on communication with an external system (1).

[0290] According to this aspect, an external system (for example, a company server) can set at least one of a first range, which is the range of functions in the first mode, and a second range, which is the range of functions in the second mode, for the information terminal (101).

[0291] In a control method according to a tenth aspect, in any one of the first to ninth aspects, the functions include a communication function for performing one or more types of wireless communication.

[0292] According to this aspect, in the second area (A12), a communication function (a communication function via a dedicated network) different from the communication function (a communication function via a general-purpose network) realized in the first area (A11) can be realized.

[0293] In a control method according to an eleventh aspect, in any one of the first to tenth aspects, the function includes an execution function for executing one or more applications.

[0294] According to this aspect, in the second area (A12), it is possible to realize an application execution function (execution function of a business application) different from the application execution function (execution function of a non-business application) realized in the first area (A11).

[0295] A program according to a twelfth aspect is a program for executing the control method according to any one of the first to eleventh aspects by one or more processors.

[0296] According to this aspect, a second range of functions different from the first range of functions realized in the first area (A11) can be realized in the second area (A12).

[0297] A control system (1) according to a thirteenth aspect includes a communication unit (14). The communication unit (14) communicates with an information terminal (101) having a wireless communication unit (101a). When access from a first area (A11) to a second area (A12) is permitted based on communication between the wireless communication unit (101a) of the information terminal (101) and a communication device (2), the communication unit (14) transmits a signal for switching the information terminal (101) from a first mode in which a first range of functions can be realized to a second mode in which a second range of functions different from the first range can be realized.

[0298] According to this aspect, the control system (1) transmits a signal to the information terminal (101) in response to permission to access the second area (A12), thereby enabling a second range of functions to be realized in the second area (A12), which functions are different from the first range of functions to be realized in the first area (A11).

[0299] A control system (1) according to a fourteenth aspect includes a communication unit (14). The communication unit (14) communicates with an information terminal (101) having a wireless communication unit (101 a). When access from the first area (A11) to the second area (A12) is permitted based on communication between the wireless communication unit (101 a) of the information terminal (101) and the communication device (2), the communication unit (14) becomes able to accept a request from the information terminal (101).

[0300] According to this aspect, the control system (1) can accept a request from the information terminal (101) depending on permission to access the second area (A12), thereby realizing a second range of functions in the second area (A12) that are different from the first range of functions realized in the first area (A11). [Explanation of symbols]

[0301] 10 Mobile 101 Information terminal 101a Wireless Communication Section 1 Control system (server, external system) 14 Communications Department 2. Communications equipment A11 Area 1 A12 Area 2

Claims

1. A method for controlling an information terminal having a wireless communication unit, comprising: a communication step in which the wireless communication unit communicates with a communication device; a first switching step of switching a mode of the information terminal from a first mode capable of realizing a first range of functions to a second mode capable of realizing a second range of functions different from the first range when access from the first area to the second area is permitted based on communication between the wireless communication unit and the communication device; Control method.

2. The first range has more limited feasible functions than the second range. The control method according to claim 1 .

3. the second area is a business area, the first area is an area other than the business area, The first range has more limited executable business functions than the second range. The control method according to claim 2 .

4. The second range has more limited feasible functions than the first range. The control method according to claim 1 .

5. the second area is a business area, the first area is an area other than the business area, the second range is a range in which executable functions other than those for business use are more limited than those in the first range; The control method according to claim 4.

6. a second switching step of switching the mode from the second mode to the first mode when access from the second area to the first area is permitted based on communication by the wireless communication unit; The control method according to claim 1 .

7. a second switching step of switching the mode from the second mode to the first mode when a predetermined time arrives or when a predetermined time has elapsed since access from the second area to the first area is permitted; The control method according to claim 1 .

8. In the first switching step, the mode is switched from the first mode to the second mode based on communication with an external system. The control method according to claim 1 .

9. The method further includes a setting step of setting at least one of the first range and the second range based on communication with an external system. The control method according to claim 1 .

10. The functions include a communication function for performing one or more types of wireless communication. The control method according to claim 1 .

11. the functionality includes an execution functionality for executing one or more applications; The control method according to claim 1 .

12. 12. A method for executing the control method according to any one of claims 1 to 11 on one or more processors, program.

13. a communication unit that communicates with an information terminal having a wireless communication unit; When access from the first area to the second area is permitted based on communication between the wireless communication unit of the information terminal and a communication device, the communication unit transmits a signal to switch the information terminal from a first mode in which a first range of functions can be realized to a second mode in which a second range of functions different from the first range can be realized. Control system.

14. a communication unit that communicates with an information terminal having a wireless communication unit; When access from the first area to the second area is permitted based on communication between the wireless communication unit of the information terminal and a communication device, the communication unit becomes capable of accepting a request from the information terminal. Control system.

Images