Account switching method, terminal device, and program

Abstract

This enables smooth account switching on mobile devices shared by multiple users. [Solution] An account switching method characterized in that a mobile terminal configured with first and second user accounts and corresponding authentication information for each user account transitions to a background process while logged in with the first user account, and when it returns to a foreground process with the first user account in response to user operation, it displays an account selection screen, when the second user account is selected on the account selection screen, it displays an authentication information input screen, and when authentication information corresponding to the second user account is entered on the authentication information input screen, it executes a process to switch to the second user account.

Description

[Technical Field]

[0001] The present invention relates to an account switching method, and particularly to an account switching method for a mobile terminal jointly used by a plurality of users. [Background Art]

[0002] For example, in occupations belonging to essential workers, one mobile terminal may be jointly used by a plurality of users. In such cases, a shared account may be created and reused among a plurality of users; however, from the viewpoints of smooth use of collaboration tools such as groupware and security, it is desirable to implement an operation in which one account is assigned to one user. However, mobile terminals such as smartphones are designed based on the premise that one terminal is used by a single person, making it difficult to adopt the above-described operation. Furthermore, when a plurality of accounts are set on one terminal, the terminal is designed such that a current user logs out before another user logs in (for example, Patent Document 1: International Publication WO2014 / 155498), which makes smooth user switching difficult. [Prior Art Documents] [Non-Patent Documents]

[0003] [Patent Document 1] International Publication WO2014 / 155498 [Summary of the Invention] [Problem to be Solved by the Invention]

[0004] The inventor of the present invention found that smooth account switching can be achieved for a mobile terminal jointly used by a plurality of users by improving the mechanism of an application, and has arrived at the present invention.

[0005] In other words, the present invention aims to enable smooth account switching on a mobile device shared among multiple users. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems, a first aspect of the present invention is: A mobile device on which the first and second user accounts and the authentication information corresponding to each user account are set, The process transitions to a background process while logged in with the aforementioned first user account. When the process returns to the foreground with the first user account in response to user action, the account selection screen is displayed. When the second user account is selected on the account selection screen, the authentication information input screen is displayed. When authentication information corresponding to the second user account is entered on the authentication information input screen, the system switches to the second user account. The present invention provides an account switching method characterized by the execution of a process.

[0007] In the account switching method of the present invention having the above configuration, it is preferable that the authentication information is at least one of the following: a password, a PIN code, biometric information, and personal identification information.

[0008] In the account switching method of the present invention having the above configuration, The aforementioned authentication information consists of a password and a PIN code. It is preferable that the password is used to log in to the mobile device and the PIN code is used to switch user accounts.

[0009] In the account switching method of the present invention having the above configuration, It is preferable that the account selection screen displays the user account used by the mobile device immediately before transitioning to the background process.

[0010] In the account switching method of the present invention having the above configuration, It is preferable that the account selection screen further displays a pre-set number of user accounts that have previously used the mobile device.

[0011] Furthermore, a second aspect of the present invention is: A mobile device in which first and second user accounts and authentication information corresponding to each user account are set, The process transitions to a background process while logged in with the aforementioned first user account. When the process returns to the foreground with the first user account in response to user action, the account selection screen is displayed. When the second user account is selected on the account selection screen, the authentication information input screen is displayed. When authentication information corresponding to the second user account is entered on the authentication information input screen, the system switches to the second user account. The present invention provides a mobile terminal characterized by its ability to perform processing.

[0012] A third aspect of the present invention is: For a mobile device on which the first and second user accounts and the authentication information corresponding to each user account are set, The process transitions to a background process while logged in with the aforementioned first user account. When the process returns to the foreground with the first user account in response to user action, the account selection screen is displayed. When the second user account is selected on the account selection screen, the authentication information input screen is displayed. When authentication information corresponding to the second user account is entered on the authentication information input screen, the system switches to the second user account. Provides a program for executing a process. Effects of the Invention

[0013] According to the present invention, after returning to the foreground process with a first user account, switching processing to a second user account is executed without performing logout. Accordingly, smooth account switching can be realized in a mobile terminal shared among a plurality of users. Brief Description of the Drawings

[0014] [Figure 1] It is an overall configuration diagram of a system 1 in the present embodiment. [Figure 2] It is a hardware configuration diagram of a computer 100 that constitutes a server 3 and a mobile terminal 5. [Figure 3] It is a software configuration diagram of the mobile terminal 5. [Figure 4] It is a diagram showing screen transition when an application is started. [Figure 5] It is a diagram showing screen transition in new account setting. [Figure 6] It is a diagram showing screen transition in account switching. [Figure 7] It is a flowchart of account switching processing. [Figure 8] It is a diagram showing a procedure for handling a push notification delivered in the background. Mode for Carrying Out the Invention

[0015] Hereinafter, representative embodiments of an account switching method, a terminal device and a program according to the present invention will be described in detail with reference to the drawings. However, the present invention is not limited to these drawings. In addition, since the drawings are for conceptually explaining the present invention, dimensions, ratios or numbers may be exaggerated or simplified as necessary for easy understanding.

[0016] In the present specification, the following terms have the meanings given below. A mobile terminal is a portable computer terminal, and may be a smartphone, tablet, wearable device, or laptop computer. The hardware and software configurations that the mobile terminal should have in this embodiment will be described later.

[0017] Essential workers are people who are engaged in jobs that are indispensable for maintaining daily life, and examples of such occupations include the following: - Occupations related to public services such as healthcare, elderly care, childcare, and education. - Occupations related to essential services such as electricity, gas, water, and telecommunications. - Occupations related to daily necessities such as logistics, retail, and sales. - Occupations related to driving and maintaining public transportation such as buses and trains. Many essential workers are active on-site and are sometimes called non-desk workers in contrast to desk workers who perform administrative tasks (such as computer work) in an office.

[0018] This invention relates to an account switching method for mobile devices shared among multiple users, particularly essential workers. Essential workers are not typically provided with their own devices, and due to frequent shift work, a single device is often shared among multiple people. However, in business systems such as groupware, it is preferable to have separate accounts for each individual.

[0019] In this embodiment, we give an example in which one mobile terminal is jointly used by multiple medical professionals (e.g., doctors, nurses, etc.) in a medical institution (or a department or group within that department), but the present invention is not limited to this example. Medical institutions operate 24 hours a day, and when multiple medical professionals jointly use one mobile terminal, it is necessary to be able to smoothly switch user accounts on the shared terminal.

[0020] 1. Overall System Configuration As shown in Figure 1, System 1 includes a server 3 and mobile terminals 5 that are communicatively connected to the server 3 via a wireless or wired communication network. Although two mobile terminals 5 are depicted in the figure, there is no particular limit on the number of mobile terminals 5.

[0021] Server 3 consists of one or more computers. Server 3 may be various types of servers, such as a web server, application server, database server, FTP server, file server, or mail server, or it may be a cloud server. In this embodiment, Server 3 can provide various applications such as groupware for members of an organization, such as a company, to share information such as schedules, tasks, materials and documents used for work, or ideas and know-how.

[0022] Multiple users are assigned to mobile device 5. The functions of mobile device 5 will be described later. The communication network may be an internal network such as a local area network (LAN), or an external network such as the internet.

[0023] 2. Hardware configuration of the computers that make up the server and mobile terminals Figure 2 shows an example of the hardware configuration of the computer 100 that constitutes the server 3 and the mobile terminal 5. As shown in the figure, the computer 100 includes a processor 101, memory 102, and a communication interface (I / F) 103, and may further include an input device 104 and an output device 105.

[0024] The processor 101 is a circuit that reads various programs and data into the memory 102 and executes them to realize various functions described later. Memory 102 is a volatile and non-volatile storage device for storing various data and programs, and includes various random access memories (RAM) and read-only memories (ROM). RAM includes SRAM and DRAM. ROM includes, for example, hard disk drives, solid-state drives, and flash memory.

[0025] Communication I / F103 is an interface for connecting to wired and wireless communication networks, such as an adapter for connecting to Ethernet®, a modem for connecting to a public telephone network, a wireless communication device for wireless communication, and a Universal Serial Bus (USB) connector or RS232C connector for serial communication.

[0026] The input device 104 is a device for inputting data, such as a keyboard, mouse, touch panel, button, microphone, or imaging device (camera, etc.). The output device 105 is a device that outputs data, such as a display, printer, or speaker.

[0027] The mobile device may include a subscriber identity module (SIM) card reader module. Alternatively, the mobile device may have an eSIM built-in. Personal identification number (PIN) codes may be written to the SIM and eSIM.

[0028] 3. Software configuration of mobile devices The software configuration of mobile device 5 will be described below. Here, the following terms have the following meanings:

[0029] Authentication information is a security measure set for each user account for identity verification, and consists of, for example, numbers, symbols, letters, images, voice, or any combination thereof. Authentication information may be at least one of the following: password, PIN code, biometric authentication such as facial recognition, and barcode (1D barcode, 2D barcode, etc.) containing personal identification information (e.g., ID number). In this embodiment, a password and a PIN code are used. The mobile terminal 5 may automatically enter the corresponding user's PIN code based on the results of biometric authentication, etc.

[0030] A foreground process is a process or task on the mobile device 5 that is in a state where it is accepting input from the user. Alternatively, a foreground process can be described as a process that is currently being displayed on the mobile device 5's screen.

[0031] In contrast, a background process is a program or task that operates in the background of the mobile terminal 5's system without direct user intervention. In this embodiment, it refers to, but is not limited to, processing that is executed when the mobile terminal 5's display is turned off.

[0032] As shown in Figure 3, the mobile terminal 5 may include various functional configurations such as a settings unit 51, a login unit 53, and a switching unit 55. Each function will be described in order below.

[0033] The configuration unit 51 performs new user registration. While this explanation assumes the user belongs to a specific medical institution, the present invention is not limited to this. For example, the administrator of System 1 registers the ID and temporary password of a new user on Server 3 and notifies the new user of the ID and temporary password via a notification method such as email or SMS.

[0034] An application (including an operating system (OS)) displays a startup screen upon startup. That is, if no users are registered, the settings unit 51 may display a new user registration screen (see, for example, Figure 4(B)), or it may display a screen allowing users to choose between new user registration and new member registration (see Figure 4(A)). The latter, new member registration, may be used, for example, by prospective users who have not been issued an account by a medical institution (for example, a doctor belonging to multiple medical institutions).

[0035] When registering a new authentication, the setting unit 51 requests the input of an ID and a temporary password (temporary authentication information). In the examples shown in Figures 4(B) and (C), the ID input screen and the password input screen are separate, but the ID and password may be entered on a single screen. Alternatively, if the administrator of System 1 has issued a barcode (e.g., QR code®) containing relevant information, the user may activate the camera or scanner of the mobile terminal 5 and read the barcode instead of entering the ID and temporary password, or in addition to these.

[0036] Once the user enters their ID and temporary password, the configuration unit 51 queries the server 3. Upon receiving the verification result from the server 3, the configuration unit 51 grants permission for the user to use the service and prompts the user to enter a new password (authentication information). (See Figure 5(A)). The setting unit 51 sets the input string as a new password if it meets predetermined conditions (number of characters, type of characters, etc.). The newly set password may be stored locally or sent to the server 3 for storage.

[0037] In addition, the setting unit 51 prompts the user to enter a PIN code. In the example shown in Figure 5(B), the user is asked to enter a 4-digit alphanumeric code, but this is not limited to that. The setting unit 51 sets the input string as a PIN code and stores it locally if the input string meets predetermined conditions (number of characters, type of characters, etc.).

[0038] In addition, the settings unit 51 may register biometric information (e.g., facial image, FACE ID®) and personal identification information (e.g., identification card, My Number Card) for each user account. Such biometric information and personal identification information may also be included in the authentication information. For example, the setting unit 51 may activate the camera of the mobile terminal 5 to acquire biometric information such as the user's facial image, and store this biometric information in association with a PIN code.

[0039] Therefore, each mobile terminal 5 has registered the first, second, ..., nth (where N is a natural number greater than or equal to 2) user accounts and the authentication information (e.g., PIN code) corresponding to each user account (see Figure 1). In contrast, the server 3 has registered all user accounts and the authentication information (e.g., passwords, etc.) corresponding to each user account.

[0040] The login unit 53 performs login processing, such as user authentication, when the mobile terminal 5 is started up. For example, when the user selects login on the login screen (see Figure 4(A)) when the mobile terminal 5 or application is launched, the login unit 53 prompts the user to enter an ID and password. The login unit 53 queries the server 3 for the entered ID and password and, based on the query result from the server 3, grants permission for the user to log in. Alternatively, the login unit 53 may acquire the user's biometric information and personal identification information from the camera (a type of input device 104) of the mobile terminal 5 and use the acquired information to perform the login process.

[0041] The switching unit 55 executes the user account switching process in response to user operation. In other words, suppose that while logged in with user A's account (the first user account), the application switches to a background process, for example, due to the process of turning off the display of mobile device 5. Then, in response to the operation of turning on the display of mobile device 5, the application returns to a foreground process. At this time, the switching unit 55 displays an account selection screen. In the example shown in Figure 6(A), it displays information about the currently logged-in user (e.g., ID, name, affiliation, icon, etc.) and prompts the operator of the mobile terminal 5 to choose whether to resume use as the current user or switch to another user.

[0042] In this embodiment, the current user, i.e., user A who last used the mobile terminal 5 (i.e., the user account that used the mobile terminal 5 immediately before transitioning to the background process), is displayed by default, and user switching may be displayed as another option.

[0043] When the operator of the mobile terminal 5 chooses to resume use as user A, the switching unit 55 requests the input of authentication information. In the example shown in Figure 6(B), the switching unit 55 requests the input of a PIN code as authentication information, but the switching unit 55 may also request biometric information or personal identification information. The switching unit 55 verifies the input data against the authentication information of registered user A, and if it confirms a match between the two, it allows the user to return as user A.

[0044] In response to this, when user B (the second user account) is selected on the account selection screen, the switching unit 55 executes a process to switch from the logged-in user A to user B.

[0045] In other words, when user switching is selected on the account selection screen (Figure 6(A)), the switching unit 55 displays the users or their accounts that are candidates for switching (Figure 6(C)). The number of users listed as candidates may be all users registered on the mobile terminal 5, or it may be set in advance, for example, to 5. The order in which the candidates are listed may be any order that can lead to improved work efficiency, for example, in ascending or descending order of ID, in order of the number of times used, or in order of the most recent use of the mobile terminal 5.

[0046] When a candidate user (for example, user B) is selected, the switching unit 55 performs user authentication. That is, the switching unit 55 prompts the operator of the mobile terminal 5 to enter authentication information (an input screen similar to that in Figure 6(B) is acceptable). Here, a PIN code is requested as authentication information, but a password, biometric information, or personal identification information may also be requested.

[0047] The switching unit 55 then compares the input information with the authentication information of user B. Once it confirms that the two match, the switching unit 55 switches from user A's account to user B's account and restores the user to user B.

[0048] The switching unit 55 proceeds with processing to display a push notification to the switched user (e.g., user B) when an account is switched. At this time, it is undesirable from a security standpoint for the content of the push notifications (unread ones) sent to the previous user (e.g., user A) to be viewable by the switched user. Therefore, it is preferable for the switching unit 55 to also perform processing to hide the push notifications that were sent to the previous user from the switched user (see Figure 8).

[0049] 4. Operation of mobile devices The operation of the mobile device 5 will be explained primarily with reference to Figure 7, focusing on aspects such as setting up a new account, logging in, and switching accounts.

[0050] 4-1. Setting up a new account The administrator of System 1 will issue an account and temporary password (or a barcode containing the relevant data) for the application to the new staff member (let's call them User A) in advance. The administrator can perform this task using the management tool. The account may include information such as the account name (for example, User A's name), management number, and affiliation.

[0051] User A logs in to the application on their mobile device 5. Login may be performed, for example, by entering an account and a temporary password (see Figures 4(A) to (C)). After successful login, User A sets a permanent password and PIN code (see Figures 5(A) and (B)), completing the setup of the new account. The above procedure is performed each time additional staff members are added.

[0052] 4-2. Login For example, user A logs in when launching the mobile device 5 or the application (step S1 in Figure 7). Logging in may involve entering an ID and password, entering a PIN code, or using biometric authentication or reading a personal identification certificate.

[0053] After logging in, the application runs in the foreground. However, if, for example, user A does not operate the mobile device 5 for a predetermined period of time, or if user A turns off the display of the mobile device 5, or if user A uses another application, the application will move to a background process (step S2 in Figure 7).

[0054] 4-3. Switching Accounts In response to any operation performed by the user on the mobile device 5 (for example, turning on the display), the application returns from the background to the foreground (step S3 in Figure 7). At that time, the account selection screen is displayed on the mobile device 5 (step S2 in Figure 7; see Figure 6(A)). By default, the last user (in this case, user A) is displayed on this screen, and a user switching button may also be displayed.

[0055] When "Resume Use" is selected, the mobile device 5 prompts the user A to enter authentication information (e.g., a PIN code) (step S5 in Figure 7; see Figure 6(B)). Once authentication is complete, the user resumes using the application as user A (step S6 in Figure 7).

[0056] Alternatively, if "Switch User" is selected, a predetermined number of other users (including User B) will be displayed (see step S11 in Figure 7; see Figure 6(C)). Then, when any of the users (for example, User B) is selected, the authentication screen corresponding to the selected User B will be displayed. Once authentication is complete, the user will start using the application as User B (see steps S12-S13 in Figure 7).

[0057] 5. Effects of this embodiment According to this embodiment, after user A (first user account) returns to the foreground process, the switching process to user B (second user account) is executed without logging out. Therefore, smooth account switching can be achieved on mobile devices shared by multiple users.

[0058] Furthermore, by using at least one of the following as authentication information—a password, PIN code, biometric information, and personal identification information—it is possible to ensure the accuracy of security while enabling rapid resumption of use. In particular, by using passwords and PIN codes as authentication information, and by using passwords for logging into the mobile device 5 and PIN codes for switching user accounts, the accuracy of user authentication will be enhanced, and further improvements in security are expected.

[0059] When multiple users share a mobile device 5, it is likely that each user will continue to use the device 5 for a set period of time (their working hours). In other words, the number of user switches is less frequent than the frequency of returning from the background to the foreground. Therefore, the account selection screen displays the user account that used the mobile device 5 immediately before transitioning to a background process by default, thereby improving user convenience.

[0060] Furthermore, the account selection screen can enhance user convenience by displaying a pre-set number of user accounts that have previously used the mobile device 5, for example, based on usage frequency or timing.

[0061] Although typical embodiments of the present invention have been described above, the present invention is not limited to these, and various design modifications are possible and are also included in the present invention. For example, in this embodiment, a password was used as authentication information when logging in and a PIN code was used when switching users. However, a password may be used for both login and user switching, or a PIN code may be used. Alternatively, biometric authentication or personal identification information such as a facial image may be used for both or one of login and user switching.

[0062] Furthermore, although this embodiment describes the user as belonging to a specific medical institution, the user may be, for example, a physician affiliated with multiple medical institutions. In this case, the setting unit 51 may immediately display the new member registration screen, and the affiliation can be added later. [Explanation of Symbols]

[0063] 1 System 3 servers 5 Mobile devices 51 Setting section 53 Login Section 55 Switching section

Claims

1. A mobile device on which the first and second user accounts and the authentication information corresponding to each user account are set, The process transitions to a background process while logged in with the aforementioned first user account. When the process returns to the foreground with the first user account in response to user action, the account selection screen is displayed. When the second user account is selected on the account selection screen, the authentication information input screen is displayed. When authentication information corresponding to the second user account is entered on the authentication information input screen, the system switches to the second user account. An account switching method characterized by executing a process.

2. The authentication information must consist of at least one of the following: a password, a PIN code, biometric information, and personal identification information. The account switching method according to claim 1, characterized by the above.

3. The aforementioned authentication information consists of a password and a PIN code. The password is used to log in to the mobile device, and the PIN code is used to switch user accounts. The account switching method according to claim 2, characterized by the above.

4. The account selection screen displays the user account used by the mobile device immediately before transitioning to the background process by default. The account switching method according to claim 1, characterized by the above.

5. The aforementioned account selection screen further displays a pre-set number of user accounts that have previously used the aforementioned mobile device. The account switching method according to claim 4, characterized by the above.

6. A mobile device in which first and second user accounts and authentication information corresponding to each user account are set, The process transitions to a background process while logged in with the aforementioned first user account. When the process returns to the foreground with the first user account in response to user action, the account selection screen is displayed. When the second user account is selected on the account selection screen, the authentication information input screen is displayed. When authentication information corresponding to the second user account is entered on the authentication information input screen, the system switches to the second user account. A mobile terminal characterized by its ability to perform processing.

7. For a mobile device on which the first and second user accounts and the authentication information corresponding to each user account are set, The process transitions to a background process while logged in with the aforementioned first user account. When the process returns to the foreground with the first user account in response to user action, the account selection screen is displayed. When the second user account is selected on the account selection screen, the authentication information input screen is displayed. When authentication information corresponding to the second user account is entered on the authentication information input screen, the system switches to the second user account. A program for executing a process.

Images