JP5306014B2 - Remote control method for portable device - Google Patents

Description

  The present invention relates to a remote control method for a mobile device, and more particularly to a remote control method for a mobile device such as a mobile phone.

  In recent years, mobile devices such as mobile phones, PDAs (Personal Digital Assistants) and notebook personal computers have become more sophisticated and multifunctional, and can be used as a wallet instead of IC card functions. It has become. On the one hand, such an improvement in convenience means that the risk in the event of misplacement or loss of the mobile device has increased compared to the prior art. For example, there are concerns that financial information may be leaked due to unauthorized use (crime) by a third party who has picked up a mobile phone, resulting in personal information being leaked or used for shopping.

  As a countermeasure to this problem, if your mobile device is lost, you can send an e-mail from either a mobile phone, a general phone, or a computer that is different from the lost device, and the lost mobile device Identifies the content (ID code, etc.) described in the received e-mail and, for example, sets / cancels various functions, registers memory dial information, or reads memory dial information according to the content A device that performs such operations is known (Patent Document 1).

  However, in the portable device described in Patent Document 1, if the electronic mail as described above can be sent to the mail address of this terminal, an operation such as reading memory dial information from the terminal against the intention of the true owner. For example, Patent Document 2 has been proposed as a security problem.

  In the portable device described in Patent Literature 2, the face image data of the owner is stored in advance, and when the portable device is lost, an e-mail including the own face image data is transmitted from any terminal to the own portable device. . The mobile device that has received this performs face authentication processing by biometric authentication (biometric authentication), and locks the terminal function only when it is determined to be the owner.

JP 2001-008270 A JP 2006-324800 A

  However, the portable device described in Patent Document 2 has a drawback that it is possible to impersonate a third party by reusing photo data taken at another opportunity or image data that has been used / stored once. . If a third party can be impersonated, a crime such as personal information being stolen from a portable device that has not been lost may occur.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a mobile device remote control method that prevents unauthorized use due to impersonation by a third party.

The remote control method for a portable device of the present invention includes a first transmission step of transmitting a first electronic mail for remote control from a predetermined electronic device to a predetermined portable device, and the first electronic mail received from the electronic device. When the portable device determines that the first electronic mail is for remote control, and when the portable device determines that the first electronic mail is for remote control, the first electronic A first reply step of returning a second electronic mail describing a confirmation request for confirming whether or not the sender of the mail is a user of the portable device to the electronic device; and the confirmation request from the electronic device. A second transmission step of transmitting a third electronic mail in which a response to the message is attached or attached as an attached file to the mobile device, and the mobile device that has received the third electronic mail The response or the attached file is analyzed to extract the response, and a response verification step for verifying whether this response matches a correct answer stored in advance in a predetermined storage unit; The mobile device executes an operation designated by the electronic device included in the first e-mail or the third e-mail , and the first reply step includes a plurality of steps One of the facial expressions is selected as a designated facial expression, and the confirmation request captures the face of the designated facial expression to the sender of the first e-mail and uses the facial image as an attached file. It is a request to attach and transmit to the third e-mail, and in the response collating step, an image attached as an attached file of the third e-mail is stored in advance in the storage unit Characterized by collating whether matches the serial specified facial expression authentication facial image.

  The operation designated by the electronic device is one of the mobile device transmitting at least a portion of data to the electronic device, erasing at least a portion of data, and locking at least a portion of functions. Preferably, more than one is performed.

  According to the remote control method for a mobile device of the present invention, whether a first electronic mail is transmitted from a predetermined electronic device to a predetermined mobile device, and is received by the mobile device for remote control. If it is determined that the first e-mail is for remote control, a second e-mail describing a predetermined confirmation request is sent back to the electronic device, and a response to the confirmation request is written or attached from the electronic device The third e-mail attached as a file is transmitted to the portable device, and the portable device extracts the response by analyzing the description of the third e-mail or the attached file, and the response is stored in a predetermined storage unit in advance. If the response is correct after checking whether or not it matches the correct answer, the mobile device executes an operation designated by the electronic device included in the first e-mail or the third e-mail. Sender of It can confirm whether or not the user of the mobile device, it is possible to prevent the unauthorized use by spoofing of a third party.

It is explanatory drawing which shows a mode that the 1st mobile phone which lost according to this invention and the 2nd mobile phone which the user of the 1st mobile phone borrowed from the family communicate via a communication network. It is a flowchart which shows the main sequences of 1st Embodiment. It is a flowchart which shows the main sequences of 2nd Embodiment. It is a flowchart which shows the main sequences of 3rd Embodiment.

  As shown in FIG. 1, a first mobile phone 10 that is the property of a user as an embodiment to which the present invention is applied and a second mobile phone 11 that is different from the first mobile phone 11 are connected to each other via a communication network 12. Is done. It is unknown where the first mobile phone 10 is currently lost. The second mobile phone 11 is owned by the user's family, but is temporarily borrowed by the user from the family and is a mobile phone with a camera function.

  As shown in the flowchart of FIG. 2, the user of the first mobile phone 10 operates the second mobile phone 11 borrowed from a family member, and is an electronic operation request mail for remotely operating the first mobile phone 10. A mail (first electronic mail) is transmitted (st1). The remote operation request mail includes a predetermined character string, for example, a character string “remote lock” in the mail subject or mail body, and data indicating that the user is the owner of the first mobile phone 10 is Does not include. In addition, st (meaning of step) 1 in the parenthesis corresponds to st1 etc. shown in FIG.

  When the first mobile phone 10 receives the first e-mail from the second mobile phone 11 (st2), the first mobile phone 10 analyzes the first e-mail and includes the character string “remote lock” in the mail subject or the mail text. It is checked whether or not this is done (st3). When the character string “remote lock” is included in the e-mail, the first mobile phone 10 determines that the first e-mail is a remote operation request mail, and the sender of the first e-mail is the first mobile phone. Identity verification is performed to determine whether the user is a valid 10 user. For this reason, the first mobile phone 10 is an electronic device in which one question is randomly described among combinations of a plurality of confirmation requests (questions) and responses (answers) registered in advance in the internal memory by the user himself / herself. A mail (second e-mail) is returned to the second mobile phone 11 as an identity confirmation mail (st4).

  However, if the first mobile phone 10 has already received another remote operation request mail, the new request is ignored. This is because if different remote operation requests are executed, incompatible processing will be executed, and the first mobile phone 10 will not operate normally. Whether or not another remote operation request mail has been received can be determined by leaving a log indicating that the personal identification mail has been transmitted. Examples of the contents of this log include a transmission date and time, a destination mail address, and a question. If the character string “remote lock” is not included in the first e-mail, the subsequent processing is terminated.

  As an example of a combination of a plurality of questions and answers registered in advance in the built-in memory of the first mobile phone 10, for example, “XX Municipal XX Elementary School” for the question “What is your elementary school name?” Answer, "Tama" answer to the question "What is your pet's name?" Note that it is not necessary to be a common-sense answer as in the above-described example as long as it is an answer registered by the user of the first mobile phone 10 and is not likely to be forgotten. For example, if “Okinawa no Sora” is registered as an answer to the question “What is your elementary school name?”, “Okinawa no Sora” is the correct answer.

  When the second mobile phone 11 receives the second e-mail as the identity confirmation e-mail from the first mobile phone 10 (st5), the user asks the question described in the second e-mail (for example, “your elementary school name” "??" is sent to the first mobile phone 10 (st7). The e-mail (third e-mail) describing the answer (for example, "XX municipal XX elementary school") is written (st6).

  When the first mobile phone 10 receives the third e-mail (st8), the reception date / time is within a certain time (for example, within 30 minutes) after the transmission date / time of the second e-mail and is transmitted. Check whether the three conditions that the original mail address matches the mail address of the destination of the second e-mail and that the answer to the question is included in the third e-mail are satisfied ( st9).

  If all of these three conditions are satisfied, the third e-mail is recognized as an e-mail (answer e-mail) describing an answer to the question in the second e-mail. If at least one of the three conditions is not satisfied, it is determined as a normal electronic mail and the subsequent processing is terminated. In particular, when the difference between the transmission date and time of the second e-mail and the reception date and time of the third e-mail is outside a certain range (for example, 31 minutes or more), it relates to the identity verification stored in the memory in the first mobile phone 10. The data (transmission log data of the second e-mail) is deleted, and the remote operation request by the first e-mail received from the second mobile phone 11 is invalidated.

  If it is determined that the third e-mail is an e-mail (answer e-mail) that describes an answer to the question in the second e-mail (st9), the first mobile phone 10 answers from the third e-mail (answer data) ) Is extracted (st10), and this answer is collated with the correct answer stored in the memory of the first mobile phone 10 (st11).

  If the answer contained in the third e-mail matches the correct answer stored in the memory of the first mobile phone 10, the answer is correct (st12), so the remote described in the first e-mail “Remote lock”, which is the content of the operation, is executed by the first mobile phone 10 (st13). Thereby, all the operations on the first mobile phone 10 are invalidated, and the operation of the first mobile phone 10 by a third party is prevented. Thereafter, a completion mail indicating that the remote operation has been completed is transmitted to the second mobile phone 11 (st14).

  If the answer contained in the third e-mail does not match the correct answer stored in the memory of the first mobile phone 10 (st12), a reject e-mail to reject the remote operation is sent to the second mobile phone 11 (St15). The second mobile phone 11 receives the fourth e-mail, which is a completion mail or a rejection mail (st16), and the remote operation sequence ends.

  In this way, even if the first mobile phone 10 receives the remote operation request e-mail, the remote operation content is not executed unless confirmation as to whether or not the user is a real user, so that the third party is impersonated. Can prevent unauthorized use.

  Next, a second embodiment of the present invention will be described with reference to the flowchart of FIG. In addition, about the same sequence as the sequence demonstrated in 1st Embodiment, the same step number is attached | subjected and the description is abbreviate | omitted. When the first mobile phone 10 receives the first e-mail (st2) and the mail subject or the mail text includes the character string “Remote lock” (st3), the first mobile phone 10 The second e-mail for requesting the confirmation “Med and reply with a photograph with open mouth” is transmitted to the second mobile phone 11 (st21).

  There are four types of facial expressions depending on whether the left and right eyes are meditated, and two types of opening and closing the mouth, and there are a total of eight variations depending on these combinations. Each time the first mobile phone 10 receives the first e-mail for a remote operation request, the first mobile phone 10 randomly selects one facial expression from eight types of facial expressions, and requests image data taken with the facial expressions. The mail is transmitted to the second mobile phone 11. In the case of the user himself / herself, it is known that such a confirmation request will come, so it can be dealt with immediately, but in the case of a third party, it is confusing and it takes a lot of time to deal with it, so it takes time The risk of so-called impersonation can be reduced, such as a remote operation request being rejected due to a disconnection. Also, there is an advantage that it is not necessary to remember such as an ID code.

  In addition to the facial expressions as described above, captured images of the left and right side faces and the front face may be requested. Further, the user may request that the designated sentence is read out and the voice data is transmitted. In addition, a response to the confirmation request may be requested to be transmitted as voice data. Further, it may be requested to transmit facial expressions and voices as moving image data while reading a sentence. As for the transmitted confirmation request (second e-mail), the transmission date and time, the destination e-mail address, and the content of the confirmation request (“facial expression” in this embodiment) are stored in the memory built in the first mobile phone 10. For example, 4 or 0 is associated with the opening and closing of the left eye, 2 or 0 is associated with the opening and closing of the right eye, 1 or 0 is associated with the opening and closing of the mouth, and the designated facial expression is 5 (= 4 + 0 + 1). May 8, 14:05:00, xyz@abc.com, facial expression 5 ", etc.

  When the second mobile phone 11 receives the second e-mail (st5), the user reads the text of the second e-mail, and visually recognizes a confirmation request “Make the right eye open and reply with a photograph with open mouth”. The user creates a facial expression according to this request, and photographs his / her face using the camera function attached to the second mobile phone 11 (st22). The obtained image data for response is attached to the third electronic mail and transmitted to the first mobile phone 10 (st7).

  The first mobile phone 10 extracts the image data attached to the third e-mail (st23), and this image data is used for face authentication of the facial expression 5 stored in advance in the memory of the first mobile phone 10. It collates with image data (st24) (st25). If the image data attached to the third e-mail matches the image data for face authentication of the facial expression 5, the response is correct, and if not, the response is incorrect (st12). . Subsequent sequences are the same as those in the first embodiment, and a description thereof will be omitted.

  The image data for face authentication may store all the above eight types of image data. For example, image A with two eyes open, image A with both eyes closed, and image B with two eyes open. Types of image data may be registered, and the image B may be collated with the image A for the right eye and the periphery of the mouth, and the image A may be collated. Also, in the case of collating voice data, voice data may be registered for each designated sentence, but the user's own 50-voice voice data is registered in advance and synthesized every time collation is performed. Good.

  As described above, in the present embodiment, since the face image and the voice data are used for confirming whether or not the user is a real user, it is possible to prevent unauthorized use due to impersonation of a third party as compared to the first embodiment.

  Next, a third embodiment of the present invention will be described with reference to the flowchart of FIG. In addition, about the same sequence as the sequence demonstrated in 1st, 2 embodiment, the same step number is attached | subjected and the description is abbreviate | omitted. In the first and second embodiments, only “remote lock” is performed. However, unless the lost first mobile phone 10 returns to the owner, all data in the first mobile phone 10 is lost. In addition, the “remote lock” that invalidates the operation from the outside alone cannot cope with data leakage caused by disassembly of the first mobile phone 10 or other advanced analysis. For this reason, in the present embodiment, data extraction is attempted as much as possible, and when data cannot be extracted, data deletion is attempted.

  In the present embodiment, the first e-mail transmitted (st1) from the second mobile phone 11 to the first mobile phone 10 includes the characters “data retrieval” and “data erasure” in addition to “remote lock”. Contains columns. In step 12 (st12) described above, in the case of an incorrect answer, a fourth e-mail, which is a refusal mail for refusing acceptance, is transmitted from the first mobile phone 10 to the second mobile phone 11 (st15). The second mobile phone 11 receives the fourth e-mail (st16), and the remote operation sequence ends.

  If the answer is correct in step 12 (st12), the control unit built in the first mobile phone 10 reads the description of the first e-mail and determines whether the character string "remote lock" is included (st31). . When the character string “remote lock” is included in the first e-mail, all operations on the first mobile phone 10 are invalidated (st32).

  Next, the control unit of the first mobile phone 10 determines whether or not a character string requesting data retrieval is included in the first e-mail (st33), and the character string requesting data retrieval is included. If so, important data such as the address book, e-mail transmission / reception history, schedule, memo, and data stored in the memory built in the first mobile phone 10 is taken out of the memory (st34), and the fifth data file is stored. It is attached to the e-mail and transmitted to the second mobile phone 11 (st35). When the second mobile phone 11 receives the fifth e-mail (st36), the user of the first mobile phone 10 can retrieve important data of the first mobile phone 10.

  When the important data is successfully retrieved (st37), the control unit of the first mobile phone 10 determines whether or not the first e-mail includes a character string requesting data erasure (st38). When the character string for erasing data is included in the first e-mail, the address book, e-mail transmission / reception history, schedule, memo, and the data stored in the memory built in the first mobile phone 10 are stored in the memory. Is deleted (st39).

  The sixth e-mail, which is a completion e-mail indicating that the remote operation has been completed, in any case where the data erasure is executed in this way and the data erasure character string is not included in the first e-mail Is transmitted from the first mobile phone 10 to the second mobile phone 11 (st40). The second mobile phone 11 receives the sixth e-mail (st41), and the remote operation sequence ends.

  In this way, in this embodiment, as in the first and second embodiments, not only “remote lock” that invalidates all operations, but also data is taken out and erased. Even if the first mobile phone 10 does not return, important data can be recovered, or data can be erased and prevented from being used by a third party. It is possible to perform remote locking and erase data without taking out the data.

  In the above-described embodiment, the character string that requests the first mobile phone to execute such as “remote lock” is described in the first e-mail. However, the present invention is not limited to this and is described in, for example, the third e-mail. It may be described in both the first and third e-mails.

  In the above embodiment, the user remotely operates his / her lost mobile phone by borrowing his / her family's mobile phone. If the user owns two or more mobile phones, the user may use his own mobile phone that has not been lost.

  In the above embodiment, a mobile phone is used as an electronic device for remotely operating a lost mobile phone. However, the present invention is not limited to this, and if communication can be performed with a lost mobile phone, for example, A personal computer or a PDA may be used.

  In the above embodiment, a mobile phone has been described as an example of a mobile device, but the present invention is not limited to this, and may be a PDA or a notebook personal computer, for example.

10 First mobile phone 11 Second mobile phone 12 Communication network

Claims (2)

A first transmission step of transmitting a first electronic mail for remote control from a predetermined electronic device to a predetermined portable device;
A determination step of determining whether the portable device that has received the first email from the electronic device is for remote control of the first email;
When the portable device determines that the first email is for remote control, a confirmation request for confirming whether the sender of the first email is a user of the portable device is described A first reply step of replying a second electronic mail to the electronic device;
A second transmission step of transmitting a third e-mail with a response to the confirmation request from the electronic device or attached as an attached file to the mobile device;
The portable device that has received the third e-mail analyzes the description of the third e-mail or the attached file to extract the response, and whether or not the response matches a correct answer stored in a predetermined storage unit in advance. A response matching step for matching
When the response is correct by the response collating step, the portable device executes an operation designated by the electronic device included in the first email or the third email, and
In the first reply step, one of a plurality of facial expressions is selected as a designated facial expression, and the confirmation request photographs the face of the designated facial expression to the sender of the first email. A request to attach the face image as an attached file to the third e-mail and send it.
The response collating step collates whether an image attached as an attached file of the third e-mail matches a face image for face authentication of the specified facial expression stored in advance in the storage unit. A method for remotely controlling a portable device. The operation designated by the electronic device is one of the mobile device transmitting at least a portion of data to the electronic device, erasing at least a portion of data, and locking at least a portion of functions. the remote control method for a portable device according to claim 1, wherein a is to perform One or more.

Images