Terminal management system

Abstract

To provide a technique advantageous in performing authentication for use of a terminal, health management of a user, and usage status management of the terminal by using personal vital data.SOLUTION: A terminal management system includes a vital data measurement device, a terminal to be managed whose operation is permitted when an operation permission command is received, and a management server for managing a use state of the terminal. The vital data measurement device measures vital data of an individual and transmits the vital data to the terminal. The terminal transmits vital information in which identification information of the terminal is associated with the received vital data to the management server. The management server determines whether the physical condition of the authenticated genuine user is appropriate based on the vital information, and transmits an operation permission command to the terminal when the physical condition is appropriate. Also, the management server determines a terminal management situation according to the result of the personal authentication processing, and when it is determined that the terminal management situation is not a proper situation, the possibility of the loss of the terminal is reported.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a terminal management system. [Background technology]

[0002] Patent Document 1 discloses a technology for personal authentication using pressure fluctuations from the body. In this technology, a feature that can identify a user is extracted from the waveform of the pressure fluctuations of the user's body. The feature of the detected waveform is then compared with a feature of a pre-registered waveform, and if it is determined that the difference between them is equal to or less than a threshold, the terminal device is allowed to accept use by the user. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-346221 Summary of the Invention [Problem to be solved by the invention]

[0004] Maintenance personnel for elevators and other lifts often take maintenance PCs (Personal Computers) to the site where they perform maintenance work. From a security perspective, it is preferable that terminals taken outside be equipped with a function that restricts use by anyone other than the authorized user. The technology disclosed in Patent Document 1 above is useful in that it uses the user's vital data to determine whether or not to allow use of the terminal.

[0005] Here, even if a genuine user of a terminal has health concerns, there are cases where the use of the terminal should be restricted. For example, if the genuine user is an elevator maintenance worker, it is undesirable from the viewpoint of work safety to use the terminal while there are health concerns. Furthermore, it is desirable that terminals taken outside be equipped with a function to detect situations where the terminal is not under the control of the genuine user, in case of loss or other such incidents. In this way, it is desirable to build a system that can use personal vital data to not only authenticate individuals regarding terminal use, but also determine the genuine user's health condition and the management status of the terminal.

[0006] The present disclosure has been made to solve the above-mentioned problems, and aims to provide a technology that is advantageous for using an individual's vital data to authenticate the use of a terminal, manage the user's health, and manage the usage status of the terminal. [Means for solving the problem]

[0007] The present disclosure relates to a terminal management system including a vital data measurement device that measures vital data of an individual, a managed terminal that is permitted to operate upon receiving an operation permission command, and a management server that manages the terminal, wherein the vital data measurement device includes a measurement unit that measures vital data of the individual and a vital data transmission unit that transmits the vital data to the terminal, the terminal includes a vital data reception unit that receives the vital data, and a vital information transmission unit that transmits vital information in which the vital data is associated with identification information of the terminal to the management server, and the management server includes the vital information reception unit that receives the vital information and The device comprises a personal authentication unit that performs personal authentication processing to authenticate that an individual is the genuine user of the terminal based on vital information, a health condition determination unit that determines whether the individual's health condition is normal or not based on the vital information when the individual is authenticated by the personal authentication unit, an operation permission command sending unit that sends an operation permission command to the terminal when the individual's health condition is normal, a terminal management status determination unit that determines the terminal management status indicating whether the terminal is in an appropriate management status under the management of the genuine user based on the result of the personal authentication processing, and an alarm issuing unit that issues an alarm when the terminal management status determination unit determines that the terminal management status is not an appropriate status. [Effects of the Invention]

[0008] According to the device management system disclosed herein, an individual's vital data measured by a vital data measurement device is transmitted to a terminal, and the terminal transmits vital information, in which the vital data is associated with the terminal's identification information, to a management server. The management server then authenticates the individual as a genuine user based on the vital information and determines that the genuine user's physical condition is normal, and then transmits an operation permission command to the terminal. The management server also determines the device management status based on the results of the personal authentication process, and issues an alert if it determines that the device management status is not appropriate. In this way, the device management system is advantageous for authenticating individuals for use of the terminal, managing the genuine user's health, and managing the device's usage status. [Brief explanation of the drawings]

[0009] [Figure 1]FIG. 1 illustrates an example of a configuration of a terminal management system according to an embodiment. [Figure 2] 4 is a flowchart of a routine executed in the terminal. [Figure 3] 10 is a flowchart of a routine executed in the management server. [Figure 4] 10 is a flowchart of a routine executed in the management server when managing the terminal management status. [Figure 5] FIG. 2 illustrates an example of hardware resources of a management server. [Figure 6] FIG. 10 illustrates another example of hardware resources of the management server. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, an embodiment will be described with reference to the drawings. Note that elements common to the various drawings are given the same reference numerals and redundant explanations will be omitted.

[0011] Embodiment 1. Device management system configuration FIG. 1 is a diagram showing an example of the configuration of a terminal management system according to this embodiment. The terminal management system 100 is a system that uses an individual's vital data to perform personal authentication for using a managed terminal, manage the user's health, and manage the usage status of the terminal. The terminal management system 100 includes a management server 10, a tracker 40, and a managed terminal 50. The tracker 40 functions as a vital data measurement device that measures an individual's vital data. The tracker 40 is connected to the managed terminal 50 via short-range wireless communication. The short-range wireless communication here is, for example, Bluetooth (registered trademark). The terminal 50 is a terminal that is managed by the terminal management system 100. The terminal 50 is connected to the management server 10 via a communication network such as the Internet. The management server 10 is a device that manages the terminal 50 using the individual's vital data. The functions of each device are described below.

[0012] 2. Tracker 40 Features The tracker 40 is worn on the body and measures an individual's vital data. The tracker 40 is, for example, a wristwatch-type device worn on the individual's wrist. Examples of vital data measured by the tracker 40 include data that can be used for personal authentication, such as blood pressure, heart rate data, body temperature, and finger vein data. In the following description, the tracker 40 is illustrated as a device that measures heart rate data as vital data.

[0013] Tracker 40 includes a measurement unit 42 and a vital data transmission unit 44. Measurement unit 42 measures vital data of the individual carrying tracker 40. Vital data transmission unit 44 transmits the measured vital data to terminal 50 via short-range wireless communication.

[0014] 3. Functions of Terminal 50 The terminal 50 is, for example, a portable personal computer or a portable terminal, etc. In the following description, the terminal 50 is a maintenance PC used on-site by an elevator maintenance worker.

[0015] The terminal 50 includes, as functional blocks, a hardware information acquisition unit 52, a vital data receiving unit 54, a vital information transmitting unit 56, an operation permission command receiving unit 58, and a control unit 60.

[0016] The hardware information acquisition unit 52 is a functional block for acquiring unique identification information of the terminal 50. The vital data reception unit 54 is a functional block for receiving vital data transmitted from the tracker 40 via short-range wireless communication.

[0017] The vital information transmitting unit 56 is a functional block for transmitting vital information, which associates the vital data received by the vital data receiving unit 54 with the identification information acquired by the hardware information acquiring unit 52, to the management server 10 via a communication network.

[0018] The operation permission command receiving unit 58 is a functional block for receiving an operation permission command from the management server 10 via the communication network. The operation permission command is a command for permitting operation of the terminal 50. Details of the operation permission command will be described later. The control unit 60 is a control block for switching between permitting and restricting operation of the terminal 50. When the terminal 50 is started up, the control unit 60 restricts the operation of the terminal 50 by the user. Then, when the control unit 60 receives an operation permission command from the management server 10, it permits the operation of the terminal 50 by the user.

[0019] 4. Management Server 10 Functions The management server 10 is configured as, for example, an external server in a remote location. The management server 10 includes a vital sign information receiving unit 12, a personal authentication unit 14, a physical condition determining unit 16, an operation permission command transmitting unit 18, a terminal management status determining unit 20, an alarm issuing unit 22, and a storage unit 30.

[0020] The vital information receiving unit 12 is a functional block for receiving vital information transmitted from the terminal 50 via the communication network. The received vital information is sent to the personal authentication unit 14 and the physical condition determination unit 16, respectively.

[0021] The personal authentication unit 14 is a functional block for determining, based on the received vital information, whether the individual corresponding to the vital information is the authentic user of the terminal 50 corresponding to the vital information. The storage unit 30 includes a personal authentication vital information storage unit 32 that stores personal authentication vital information. The personal authentication vital information here refers to stored vital data of one or more authentic users pre-registered for each managed terminal. The personal authentication unit 14 compares the feature values ​​of the vital data received from the terminal 50 with the feature values ​​of the vital data of one or more authentic users associated with the terminal 50 in the personal authentication vital information storage unit 32, and determines whether the individual is registered as the authentic user of the terminal 50. This process is hereinafter referred to as "personal authentication processing." Note that various authentication methods using vital data have already been proposed in many documents, such as those disclosed in Patent Document 1. The terminal management system 100 of this embodiment can apply known personal authentication processing using vital data. The results of the personal authentication processing are sent to the health condition determination unit 16.

[0022] Furthermore, if personal authentication is successful in the personal authentication process, it can be determined that the terminal 50 is under the control of the genuine user. On the other hand, if personal authentication is not successful in the personal authentication process, it can be determined that the terminal 50 is likely not under the control of the genuine user. In other words, the result of the personal authentication process is useful for managing the usage status of the terminal 50. Therefore, information that associates the result of the personal authentication process with time is stored in the terminal management information storage unit 36 ​​of the storage unit 30 as terminal management information that indicates the management status of the terminal 50.

[0023] The physical condition determination unit 16 is a functional block for determining the physical condition of an individual recognized as a genuine user by the personal authentication unit 14 based on the received vital sign information. The storage unit 30 includes a vital sign information storage unit 34 for determining physical condition. The vital sign information for determining physical condition here refers to stored vital sign data of one or more genuine users in normal condition, pre-registered for each managed device. The physical condition determination unit 16 compares the individual's vital sign data contained in the received vital sign information with the vital sign data contained in the vital sign information for determining physical condition, and determines whether the individual's health condition is normal. This process is hereinafter referred to as the "physical condition determination process." Various authentication methods for physical condition determination processes using vital sign data are disclosed in documents such as Japanese Patent Application Laid-Open No. 2019-102046. The terminal management system 100 of this embodiment can apply known physical condition determination processes using vital sign data. The results of the physical condition determination process are sent to the operation permission command transmission unit 18 and the terminal management status determination unit 20.

[0024] The operation permission command transmitting unit 18 is a functional block for transmitting an operation permission command for the terminal 50 to the terminal 50 via the communication network. The operation permission command here is a command for permitting an individual who has been authenticated as a genuine user in the personal authentication process and who has been determined to have no health problems in the health assessment to operate the terminal 50.

[0025] The terminal management status determination unit 20 is a functional block for determining whether the management status of the terminal 50 is under the management of the genuine user based on the terminal management information. Typically, when the inappropriate management status of the terminal 50 continues beyond the determination time, the terminal management status determination unit 20 determines that the management status of the terminal 50 is inappropriate, meaning that it may not be under the management of the genuine user. This process is hereinafter referred to as "terminal management status determination process." The processing result of the terminal management status determination process is sent to the reporting unit 22.

[0026] The alarm issuing unit 22 is a functional block for issuing an alarm when there is a possibility that the terminal 50 has been lost. When the management status of the terminal 50 sent from the terminal management status determination unit 20 is an improper status, the alarm issuing unit 22 issues an alarm to notify of the possibility that the terminal 50 has been lost. The destination of the alarm here is, for example, the genuine user of the terminal 50 or the manager of the genuine user. There is no limitation on the method of issuing an alarm.

[0027] 5. Specific processes executed in the terminal management system Next, a specific process executed in the terminal management system 100 of this embodiment will be described. Fig. 2 is a flowchart of a routine executed in the terminal. The routine shown in Fig. 2 is executed in the processor of the terminal 50 when the terminal 50 is started up.

[0028] 2, the vital data receiving unit 54 receives vital data of an individual from the tracker 40. The vital data here is, for example, heart rate data. In the next step S102, the hardware information acquiring unit 52 acquires hardware information including unique identification information of the terminal 50. In step S104, the vital information transmitting unit 56 generates vital information by associating the received vital data with the acquired hardware information, and transmits the generated vital information to the management server 10 together with an operation permission command request for the terminal 50.

[0029] In step S106, the operation permission command receiving unit 58 determines whether or not it has received an operation permission command from the management server 10. If the determination is affirmative, the process proceeds to step S108, and if the determination is negative, the process of this routine is terminated. In step S108, the control unit 60 permits the operation of the terminal 50.

[0030] 3 is a flowchart of a routine executed by the management server 10. The routine shown in FIG.

[0031] In step S110 shown in FIG. 3, the vital information receiving unit 12 receives vital information from the terminal 50. In steps S112 and S114, the personal authentication unit 14 executes personal authentication processing. More specifically, first, in step S112, the personal authentication unit 14 authenticates whether an individual corresponding to vital data included in the vital information is a genuine user of the terminal 50 corresponding to the identification information included in the vital information. Here, the personal authentication unit 14 performs personal authentication of the individual corresponding to the vital data by comparing the feature amounts of the vital data received from the terminal 50 with the feature amounts of vital data of one or more genuine users associated with the terminal 50 in the personal authentication vital information storage unit 32. Then, in step S114, the personal authentication unit 14 determines whether the individual corresponding to the vital data has been authenticated as a genuine user. If the determination is affirmative, the process proceeds to step S116; if the determination is negative, the process of this routine ends.

[0032] In steps S116 and S118, the physical condition determination unit 16 executes a physical condition determination process for the individual who has been personally authenticated as a genuine user. More specifically, in step S116, the physical condition determination unit 16 compares the feature amounts of the individual's vital data contained in the received vital information with the feature amounts of the individual's normal vital data contained in the vital information for physical condition determination. Then, in step S118, the physical condition determination unit 16 determines whether the individual's physical condition determined from the comparison of the vital data is within an appropriate range. If the determination is affirmative, the process proceeds to step S120; if the determination is negative, the process of this routine ends.

[0033] In step S120, the operation permission command transmitting unit 18 transmits an operation permission command to the terminal 50.

[0034] 4 is a flowchart of a routine executed by the management server 10 when managing the terminal management status. The routine shown in FIG.

[0035] 4, it is determined whether the terminal 50 has been started. The management server 10 collects startup information about the terminal 50. Here, the management server 10 determines whether the terminal 50 has been started based on the collected startup information about the terminal 50. As a result, if the terminal 50 has been started, the process proceeds to step S122, and if the terminal 50 has not been started, the process proceeds to step S132.

[0036] In the processing of steps S122, S124, and S126, the management server 10 executes processing similar to the processing of steps S110, S112, and S114. If the judgment is not established in the personal authentication processing of step S126, this routine is terminated. On the other hand, if the judgment is established in the personal authentication processing, the processing proceeds to step S128, where it is determined that the terminal management status of the terminal 50 is appropriate. In step S130, the result of the personal authentication processing that is determined to be appropriate is stored in the terminal management information storage unit 36 ​​of the storage unit 30 as terminal management information associated with time.

[0037] If it is determined in step S120 that the terminal 50 is not activated, then in step S132 the terminal management status determination unit 20 determines whether the period during which the terminal management status is inappropriate has exceeded a predetermined determination period. The determination period here is set to, for example, a period longer than the activation interval of the terminal 50 supported by the genuine user. If the determination is not established, the processing of this routine is terminated; if the determination is established, the processing proceeds to step S134.

[0038] In step S134, the alarm issuing unit 22 determines that there is a possibility that the terminal 50 has been lost, and issues an alarm.

[0039] As described above, according to the device management system 100 of this embodiment, vital data measured by the tracker 40 is transmitted from the terminal 50 to the management server 10. This type of control eliminates the need for the tracker 40 to have a function for connecting to an external communication network, which contributes to miniaturization and simplification of the configuration of the tracker 40 as personal equipment. Note that if the individual carrying the tracker 40 is the authentic user of the terminal 50, they are likely to be near the terminal 50 when using the terminal 50, and therefore there is no problem even if the tracker 40 and the terminal 50 are connected via short-range wireless communication.

[0040] Furthermore, according to the terminal management system 100, the personal authentication process, the physical condition determination process, and the terminal management status determination process are executed by the management server 10. With this configuration, it is possible to collectively manage the personal authentication vital information storage unit 32, the physical condition determination vital information storage unit 34, and the terminal management information storage unit 36. As a result, even if, for example, one or more genuine users of the terminal 50 are updated, it is possible to perform processing based on the latest update information.

[0041] In this way, according to the above control executed in the terminal management system 100, personal vital data can be used to realize personal authentication of the terminal 50, health management of the user, and terminal management of the terminal 50.

[0042] 6. Modification of the terminal management system 100 The terminal management system 100 according to this embodiment may be modified as follows.

[0043] 6-1. Management Server 10 Hardware Resources 5 is a diagram showing an example of hardware resources of a management server. The management server 10 includes, as hardware resources, a processing circuit 103 including a processor 101 and a memory 102. The processing circuit 103 may include multiple processors 101. The processing circuit 103 may also include multiple memories 102.

[0044] In this embodiment, the functions of the management server 10 can be realized by software written as a program, firmware, or a combination of software and firmware. The program is stored in memory 102. The management server 10 realizes each function by executing the program stored in memory 102 by a processor 101 (computer).

[0045] The processor 101 is also called a CPU (Central Processing Unit), central processing unit, processing unit, arithmetic unit, microprocessor, microcomputer, or DSP. The memory 102 may be a semiconductor memory, a magnetic disk, a flexible disk, an optical disk, a compact disk, a minidisk, or a DVD. Usable semiconductor memory includes RAM, ROM, flash memory, EPROM, EEPROM, etc.

[0046] Fig. 6 is a diagram showing another example of hardware resources of the management server 10. In the example shown in Fig. 6, the management server 10 includes a processor 101, a memory 102, and a processing circuit 103 including dedicated hardware 104. Fig. 6 shows an example in which some of the functions of the management server 10 are realized by the dedicated hardware 104. All of the functions of the management server 10 may also be realized by the dedicated hardware 104. The dedicated hardware 104 may be a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination thereof.

[0047] The hardware resources of the terminal 50 and the tracker 40 each include a processing circuit including a processor and memory similar to those described above. The terminal 50 and the tracker 40 then realize their respective functions by having the processor (computer) execute programs stored in their respective memories.

[0048] 7.Other Although the preferred embodiments have been described in detail above, the present disclosure is not limited to the above-described embodiments, and various modifications and substitutions can be made to the above-described embodiments without departing from the scope of the claims.

[0049] Various aspects of the present disclosure are summarized below as appendices.

[0050] (Appendix 1) A terminal management system including a vital data measurement device that measures vital data of an individual, a terminal to be managed that is permitted to operate when an operation permission command is received, and a management server that manages the terminal, The vital data measuring device is a measurement unit for measuring vital data of the individual; a vital data transmission unit that transmits the vital data to the terminal, The terminal a vital data receiving unit that receives the vital data; a vital information transmitting unit that transmits vital information in which the vital data is associated with identification information of the terminal to the management server, The management server a vital information receiving unit that receives the vital information; a personal authentication unit that executes a personal authentication process to authenticate that the individual is a genuine user of the terminal based on the vital information; a physical condition determination unit that determines whether the physical condition of the individual is normal or not based on the vital information when the individual is authenticated by the individual authentication unit; an operation permission command sending unit that sends the operation permission command to the terminal when the physical condition of the individual is normal; a terminal management status determination unit that determines a terminal management status indicating whether the terminal is under the proper management status under the management of the genuine user according to a result of the personal authentication process; a reporting unit that issues a report when the terminal management status determination unit determines that the terminal management status is not appropriate; A terminal management system comprising: (Appendix 2) The terminal management status determination unit determines that the terminal management status is not appropriate when a period during which the individual is not authenticated in the individual authentication process exceeds a determination period. 2. The terminal management system of claim 1, configured to: (Appendix 3) The management server a personal authentication vital information storage unit that stores personal authentication vital information in which the vital data of one or more genuine users of the terminal is associated with identification information of the terminal; The personal authentication unit The vital information receiving unit compares the received vital information with the personal authentication vital information to authenticate that the individual is a genuine user of the terminal. 3. The terminal management system according to claim 1 or 2, configured to: (Appendix 4) The management server a vital information storage unit for determining physical condition that stores vital information for determining physical condition in which normal vital data of one or more genuine users of the terminal is associated with identification information of the terminal; The physical condition determination unit The vital information receiving unit compares the received vital information with the vital information for determining physical condition, thereby determining whether the physical condition of the genuine user is normal. 4. The terminal management system according to claim 1, wherein the terminal management system is configured to: [Explanation of symbols]

[0051] 10 Management server, 12 Vital information receiving unit, 14 Personal authentication unit, 16 Physical condition determination unit, 18 Operation permission command transmitting unit, 20 Terminal management status determination unit, 22 Alarm issuing unit, 30 Memory unit, 32 Vital information storage unit for personal authentication, 34 Vital information storage unit for physical condition determination, 36 Terminal management information storage unit, 40 Tracker, 42 Measurement unit, 44 Vital data transmitting unit, 50 Terminal, 52 Hardware information acquisition unit, 54 Vital data receiving unit, 56 Vital information transmitting unit, 58 Operation permission command receiving unit, 60 Control unit, 100 Terminal management system, 101 Processor, 102 Memory, 103 Processing circuit, 104 Dedicated hardware

Claims

1. A terminal management system including a vital data measurement device that measures vital data of an individual, a terminal to be managed that is permitted to operate when an operation permission command is received, and a management server that manages the terminal, The vital data measuring device is a measurement unit for measuring vital data of the individual; a vital data transmission unit that transmits the vital data to the terminal, The terminal a vital data receiving unit that receives the vital data; a vital information transmitting unit that transmits vital information in which the vital data is associated with identification information of the terminal to the management server, The management server a vital information receiving unit that receives the vital information; a personal authentication unit that executes a personal authentication process to authenticate that the individual is a genuine user of the terminal based on the vital information; a physical condition determination unit that determines whether the physical condition of the individual is normal or not based on the vital information when the individual is authenticated by the individual authentication unit; an operation permission command sending unit that sends the operation permission command to the terminal when the physical condition of the individual is normal; a terminal management status determination unit that determines a terminal management status indicating whether the terminal is under the proper management status under the management of the genuine user according to a result of the personal authentication process; a reporting unit that issues a report when the terminal management status determination unit determines that the terminal management status is not appropriate; A terminal management system comprising:

2. The terminal management status determination unit determines that the terminal management status is not appropriate when a period during which the individual is not authenticated in the individual authentication process exceeds a determination period. The terminal management system according to claim 1 , configured to:

3. The management server a personal authentication vital information storage unit that stores personal authentication vital information in which the vital data of one or more genuine users of the terminal is associated with identification information of the terminal; The personal authentication unit The vital information receiving unit compares the received vital information with the personal authentication vital information to authenticate that the individual is a genuine user of the terminal.

3. The terminal management system according to claim 1, wherein the terminal management system is configured to:

4. The management server a vital information storage unit for determining physical condition that stores vital information for determining physical condition in which normal vital data of one or more genuine users of the terminal is associated with identification information of the terminal; The physical condition determination unit The vital information receiving unit compares the received vital information with the vital information for determining physical condition, thereby determining whether the physical condition of the genuine user is normal.

3. The terminal management system according to claim 1, wherein the terminal management system is configured to:

Images