System and method for controlling access to subject data using location data associated with the subject data and a requesting device

• US 5,922,073 A
• Filed: 12/27/1996
• Issued: 07/13/1999
• Est. Priority Date: 01/10/1996
• Status: Expired due to Term

• Current Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Original Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Inventors: Shimada, Kazutoshi
• Primary Examiner(s): Palys, Joseph E.
• Application Number:
  US08/773,898
• Time in Patent Office: 928 Days
• Field of Search: 395/186, 395/187.01, 395/188.01, 395/726, 701/207, 701/208, 701/209, 701/210, 701/211, 701/212, 701/213, 701/214, 701/215, 701/216, 380/3, 380/4, 380/23-25, 705/18, 705/44, 707/9, 711/163, 711/164, 455/26.1, 340/988-996, 340/825.3, 342/357, 364/479.07
• US Class Current: 726/6
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

Upon data access, an attribute-data extraction unit extracts location data and a password from attribute data which is added in advance to subject data to be accessed. At the time of requesting for an access to the data, the extracted password is compared with a password which is inputted from an input unit, and the extracted location data is compared with current location data detected by a location-data detection unit. An access permission unit permits access to the data in accordance with the comparison results obtained by the password comparison unit and the location-data comparison unit. By virtue of the process, it is possible to more strictly protect confidential information in a data processing apparatus.

Claims

1. A data processing apparatus comprising:

first obtain means for obtaining first location data which indicates a current location of said apparatus;

storing means for storing a plurality of subject data, wherein respective second location data is added to each of the plurality of subject data indicating an accessible location of the respective subject data;

second obtain means for obtaining the respective second location data corresponding to a desired one of the subject data to be accessed from said storing means; and

determination means for determining whether or not an access to the desired subject data is to be permitted in accordance with the first location data and the respective second location data.

2. The data processing apparatus according to claim 1, wherein each subject data has a respective registered Password stored in said storing means in association with the respective subject data and wherein said second obtain means obtains the respective second location data and the respective registered password, and

said determination means determines whether or not an access to the desired subject data is to be permitted in accordance with a password input at a time of accessing the desired subject data and the first location data obtained by said first obtain means, and the registered password and the second location data obtained by said second obtain means.

3. The data processing apparatus according to claim 1, wherein each of the second location data includes respective range data indicative of an access area within which data access is permitted, and

said determination means permits an access to the desired subject data when the first location data is within a range specified by the respective second location data.

4. The data processing apparatus according to claim 1, wherein said first obtain means obtains first location data indicative of a cur-rent location of said apparatus by utilizing a GPS.

5. The data processing apparatus according to claim 1, wherein said first obtain means obtains an ID of a fixed station in a predetermined communication system as said first location data.

6. The data processing apparatus according to claim 5, wherein the predetermined communication system is a PHS (Personal Handy-phone System).

7. The data processing apparatus according to claim 3, further comprising addition means for adding the respective second location data including the range data to the subject data.

8. The data processing apparatus according to claim 7, wherein the range data to be added by said addition means is obtained on the basis of the first location data obtained by said first obtain means.

9. The data processing apparatus according to claim 7, wherein the range data to be added by said addition means is designated by latitude and longitude.

10. The data processing apparatus according to claim 7, wherein said addition means comprises:

a display for displaying a map;

detection means for detecting an area designated on the displayed map; and

decide means for deciding the range data on the basis of the area detected by said detection means.

11. A data processing method of controlling a data access operation of a data processing apparatus, comprising:

a first obtain step of obtaining first location data which indicates a current location of the data processing apparatus;

a storing step of storing, in a storing means, a plurality of subject data, wherein respective second location data is added to each of the plurality of subject data indicating an accessible location of the respective subject data;

a second obtain step of obtaining the respective second location data corresponding to a desired one of the subject data to be accessed from the storing means; and

a determining step of determining whether or not an access to the desired subject data is to be permitted in accordance with the first location data and the respective second location data.

12. The data processing method according to claim 11, wherein each subject data has a respective registered Password stored in the storing means in association with the respective subject data and wherein in said second obtain step, the respective second location data and the respective registered password are obtained, and

in said determining step, it is determined whether or not an access to the desired subject data is to be permitted in accordance with a password input at a time of accessing the desired subject data and the first location data obtained in said first obtain step, and the registered password and the second location data obtained in said second obtain step.

13. The data processing method according to claim 11, wherein each of the second location data includes respective range data indicative of an access area within which data access is permitted, and

in said determining step, an access to the desired subject data is permitted when the first location data is within a range specified by the respective second location data.

14. The data processing method according to claim 11, wherein in said first obtain step, first location data indicative of a current location of the data processing apparatus is obtained by utilizing a GPS.

15. The data processing method according to claim 11, wherein in said first obtain step, an ID of a fixed station in a predetermined communication system is obtained as said first location data.

16. The data processing method according to claim 15, wherein the predetermined communication system is a PHS (Personal Handy-phone System).

17. The data processing method according to claim 13, further comprising a step of adding the respective second location data including the range data to the subject data.

18. The data processing method according to claim 17, wherein the range data to be added in said adding step is obtained on the basis of the first location data obtained in said first obtain step.

19. The data processing method according to claim 17, wherein the range data to be added in said adding step is designated by latitude and longitude.

20. The data processing method according to claim 17, wherein in said adding step,

a map is displayed,

an area designated on the displayed map is detected;

and

the range data is decided on the basis of the detected area.

21. A data processing system where a second data processing apparatus provides data in response to a data request sent by a first data processing apparatus, comprising:

first obtain means for obtaining first location data in accordance with a current location of said first data processing apparatus;

storing means for storing a plurality of subject data, wherein respective second location data is added to each of the plurality of subject data indicating an accessible location of the respective subject data;

transmission means for transmitting the first location data to said second data processing apparatus along with an access request for a desired one of the subject data;

second obtain means for obtaining the respective second location data corresponding to the desired subject data to be accessed from said storing means; and

determination means for receiving the access request transmitted by said transmission means, and determining whether or not an access to the desired subject data is to be permitted for said first data processing apparatus in accordance with the first location data and the respective second location data.

22. A computer readable memory which stores program codes for controlling a data access operation of a data processing apparatus, comprising:

program codes for a first obtain step of obtaining first location data which indicates a current location of the data processing apparatus;

program codes for a storing step of storing, in a storing means, a plurality of subject data, wherein respective second location data is added to each of the plurality of subject data indicating an accessible location of the respective subject data;

program codes for a second obtain step of obtaining the respective second location data corresponding to a desired one of the subject data to be accessed from the storing means; and

program codes for a determining step of determining whether or not an access to the desired subject data is to be permitted in accordance with the first location data and the respective second location data.