Information processing apparatus, security method, and storage medium storing security program

• US 8,756,671 B2
• Filed: 06/14/2010
• Issued: 06/17/2014
• Est. Priority Date: 06/19/2009
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kakuta, Jun, Matsukura, Ryuichi, Matsui, Kazuki
• Primary Examiner(s): Hailu, Teshome
• Assistant Examiner(s): Getachew, Abiy
• Application Number:
  US12/814,806
• Publication Number:
  US 20100325712A1
• Time in Patent Office: 1,464 Days
• Field of Search: 726/7
• US Class Current: 726/7
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS

Abstract

An information processing apparatus includes a key information table memory for storing, in a key information table, key information including first identification information identifying a first nearby device communicating with the information processing apparatus, a communication unit for communicating with a second nearby device present at a location where the second nearby device is communicable with the information processing apparatus, a nearby device information retrieval unit for retrieving nearby device information including second identification information identifying the second nearby device, a movement halt detector for detecting a movement status of the information processing apparatus, a functional limitation determiner for determining, based on the key information, the nearby device information, and/or the movement status, whether to limit execution of a process of a function of the information processing apparatus and a functional limitation executer for controlling the execution of the process based on the determination results.

Claims

1. An information processing apparatus, comprising:

a memory that registers, in an authentication key information table, authentication key information including first identification information identifying a first nearby device capable of communication with the information processing apparatus;

a transmitter to communicate with devices; and

a computer processor operable to;

communicate with a second nearby device to retrieve second nearby device information including second identification information identifying the second nearby device;

detect a movement status of the information processing apparatus; and

determine whether to limit a functionality of the information processing apparatus, based on a detection by the information processing apparatus of the registered authentication key information from the first nearby device, retrieval by the information processing apparatus of the second nearby device information from the second nearby device, and the movement status.

2. The information processing apparatus according to claim 1, wherein the computer processor is further operable to limit the functionality of the information processing apparatus if the authentication key information and the second nearby device information fail to satisfy a specific condition and if the movement status detected indicates that the information processing apparatus has moved.

3. The information processing apparatus according to claim 2, wherein the computer processor is further operable to limit the functionality of the information processing apparatus if the first identification information included in the authentication key information fails to match the second identification information included in the second nearby device information.

4. The information processing apparatus according to claim 1, the computer processor is further operable to:

calculate based upon the movement status detected, a travel distance of the information processing apparatus from a location where the authentication key information was registered in the key information table, and

limit the functionality of the information processing apparatus if the travel distance exceeds a specific distance.

5. The information processing apparatus according to claim 1, wherein if a halt in movement of the information processing apparatus is detected, another nearby device information including third identification information identifying a detected third nearby device is retrieved, and

wherein the computer processor is further operable to generate another authentication key information based on the another nearby device information retrieved, and registering the another authentication key information in the authentication key information table.

6. The information processing apparatus according to claim 1, wherein the authentication key information table stores the authentication key information with a radio wave strength for communication with the first nearby device mapped to the authentication key information,

wherein the computer processor is further operable to:

retrieve another radio wave strength for communication with the second nearby device, and

determine based on the radio wave strength for the first nearby device and the another radio wave strength for the second nearby device whether to limit the functionality of the information processing apparatus.

7. The information processing apparatus according to claim 1, wherein the information processing apparatus is a mobile terminal.

8. The information processing apparatus according to claim 4, wherein if the travel distance exceeds a specific distance, the computer processor is further operable to determine whether another condition different from the specific condition is satisfied, and if the other condition is not satisfied, limit the functionality of the information processing apparatus.

9. The information processing apparatus according to claim 8, wherein the authentication key information table memory stores the authentication key information with a location identifier identifying a location where the authentication key information was registered mapped to the authentication key information, and

wherein the computer processor is further operable to reference the authentication key information corresponding to a location where the information processing apparatus had been before the specific distance was exceeded, and if the second nearby device information is included in the authentication key information, determine that the other condition is satisfied.

10. The information processing apparatus according to claim 6, wherein the computer processor is further operable to limit the functionality of the information processing apparatus if the another radio wave strength for the second nearby device falls outside a specific range from the radio wave strength for the first nearby device.

11. The information processing apparatus according to claim 2, wherein the computer processor is further operable to:

calculate based upon the movement status detected, a travel distance of the information processing apparatus from a location where the authentication key information was registered in the authentication key information table, and

limit the functionality of the information processing apparatus if the travel distance exceeds a specific distance.

12. The information processing apparatus according to claim 2, wherein if a halt in movement of the information processing apparatus is detected, another nearby device information including third identification information identifying a detected third nearby device is retrieved, and

wherein the computer processor is further operable to generate another authentication key information based on the another nearby device information retrieved, and register the another authentication key information in the authentication key information table.

13. The information processing apparatus according to claim 2, wherein the authentication key information table stores the authentication key information with a radio wave strength for communication with the first nearby device mapped to the authentication key information,

wherein the computer processor is further operable to:

retrieve another radio wave strength for communication with the second nearby device, and

determine based on the radio wave strength for the first nearby device and the another radio wave strength for the second nearby device whether to limit the functionality of the information processing apparatus.

14. The information processing apparatus according to claim 3, wherein the computer processor is further operable to:

calculate based upon the movement status detected, a travel distance of the information processing apparatus from a location where the authentication key information was registered in the authentication key information table, and

limit the functionality of the information processing apparatus if the travel distance exceeds a specific distance.

15. The information processing apparatus according to claim 3, wherein if a halt in movement of the information processing apparatus is detected, another nearby device information including third identification information identifying a detected third nearby device is retrieved, and

wherein the computer processor is further operable to generate another authentication key information based on the another nearby device information retrieved, and register the another authentication key information in the authentication key information table.

16. The information processing apparatus according to claim 4, wherein if a halt in movement of the information processing apparatus is detected, another nearby device information including third identification information identifying a detected third nearby device is retrieved, and

wherein the computer processor is further operable to generate another authentication key information based on the another nearby device information retrieved, and register the another authentication key information in the authentication key information table.

17. The information processing apparatus according to claim 4, wherein the authentication key information table stores the authentication key information with a radio wave strength for communication with the first nearby device mapped to the authentication key information,

wherein the computer processor is further operable to:

retrieve another radio wave strength for communication with the second nearby device, and

determine based on the radio wave strength for the first nearby device and the another radio wave strength for the second nearby device whether to limit the functionality of the information processing apparatus.

18. The information processing apparatus according to claim 5, wherein the authentication key information table stores the authentication key information with a radio wave strength for communication with the first nearby device mapped to the authentication key information,

wherein the computer processor is further operable to:

retrieve another radio wave strength for communication with the second nearby device, and

determine based on the radio wave strength for the first nearby device and the another radio wave strength for the second nearby device whether to limit the functionality of the information processing apparatus.

19. A security method to be executed by a computer, the security method comprising:

registering, in an authentication key information table in a memory, authentication key information including first identification information of a first nearby device capable of communication with the computer;

communicating with a second nearby device for retrieving second nearby device information including second identification information identifying the second nearby device;

detecting a movement status of the computer; and

determining whether to limit a functionality of the computer, based on a detection by the information processing apparatus of the registered authentication key information from the first nearby device, retrieval by the information processing apparatus of the second nearby device information from the second nearby device, and the movement status.

20. A non-transitory storage medium storing a security program that causes a computer to execute:

registering, in an authentication key information table in a memory, authentication key information including first identification information of a first nearby device capable of communication with the computer;

communicating for a second nearby device for retrieving second nearby device information including second identification information identifying the second nearby device;

detecting a movement status of the computer; and

determining whether to limit a functionality of the computer, based on a detection by the information processing apparatus of the registered authentication key information from the first nearby device, retrieval by the information processing apparatus of the second nearby device information from the second nearby device, and the movement status.