ACCESS CONTROL METHOD AND ACCESS CONTROL SYSTEM

• US 20150229644A1
• Filed: 11/05/2012
• Published: 08/13/2015
• Est. Priority Date: 11/05/2012
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nozawa, Takahiro, Toume, Naotsugu, Mizote, Yuji
• Application Number:
  US14/427,612
• Publication Number:
  US 20150229644A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/063 Operations research, analysis or management
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Provided is an access control method of a terminal which is coupled with an administration device in a schedule storage unit, location information corresponding to a timestamp of a possessor of a terminal. The terminal acquires location information and timestamp information, and transmits to the administration device an identifier of the possessor of the terminal, the location information, and the timestamp information. The administration device compares the received user'"'"'s identifier, the received location information, and the received timestamp information, with location information which corresponds to the timestamp of the possessor. If it is determined that a conflict has occurred with the location information and the timestamp information, a current task state of the possessor is estimated from history information of a person associated with the possessor, and the task state is transmitted to the terminal. The terminal controls access to applications and data according to the received task state.

Claims

1. An access control method for a terminal coupled with a management apparatus having a processor and a memory, the method comprising:

a first step for storing, by the management apparatus, at a schedule storage unit location information corresponding to time of an owner of the terminal;

a second step for transmitting, by the terminal, after acquiring the location information and time information to the management apparatus an identifier of the owner of the terminal, the location information, and the time information;

a third step for determining, by the management apparatus, an inconsistency is occurred to one of at least the location information and the time information after comparing the identifier of the owner received from the terminal, the location information, the time information with location information corresponding to time for the owner of the terminal stored at the schedule storage unit, and when location information corresponding to the time information of the terminal is in disagreement with location information corresponding to time stored at the schedule storage unit;

a fourth step for transmitting, by the management apparatus, a business status to the terminal when the inconsistency is occurred after estimating a business status of the owner of the terminal from history information of a person related to the owner of the terminal; and

a fifth step for controlling access, by the terminal, to an application and data according to the business status after receiving the business status.

2. The access control method according to claim 1,

wherein history information of the person related to the owner of the terminal includes behavior history information which includes an accumulation of location information and business status corresponding to time information of a terminal of the person related to the owner of the terminal, and

wherein a fourth step includes, estimating the business status of the owner of the terminal from a business status of a person related to the owner of the terminal when the time information of the owner of the terminal is the same with time information of the terminal of the person related to the owner of the terminal and when the location information of the owner of the terminal and the location information of the terminal of the person related to the owner of the terminal are within a predetermined range.

3. The access control method according to claim 1,

wherein the history information of the person related to the owner of the terminal includes behavior history information which includes an accumulation of the location information and the business status corresponding to the time information of the terminal of the person related to the owner of the terminal, and

wherein the fourth step includes,

acquiring a first variation pattern of the location information of the owner of the terminal, extracting, out of a second pattern of past location information of the terminal of the person related to the owner of the terminal, the second variation patter corresponding to the first variation pattern, and estimating the business status of the owner of the terminal from the business status of the person related to the owner of the terminal.

4. The access control method according to claim 1,

wherein the history information of the person related to the owner of the terminal includes inconsistency history information storing therein history of an inconsistency occurred in the location information of the terminal and location information of the schedule storage unit, and business status information having stored therein the location information and the business status,

wherein the fourth step includes acquiring from the inconsistency history information history corresponding to the inconsistency of the owner of the terminal, acquiring from the location information included in the acquired history a business status, and estimating the business status of the owner of the terminal from the business status.

5. The access control method according to claim 1, wherein the fifth step for restricting and canceling a type of an application activated by the terminal, a device operated by the terminal, and data accessed according to the business status.

6. The access control method according to claim 1, wherein the person related to the owner of the terminal includes at least one of a department of an organization the owner of the terminal belongs and a business conducted by the owner of the terminal.

7. A management apparatus having a processor and a memory, and an access control system having a terminal coupled with the management apparatus having a processor and a memory,

wherein the terminal includes:

a basic data acquisition unit configured to acquire time information and location information;

an activation control unit configured to control access to an application and data according to a business status; and

a communication unit configured to transmit to the management apparatus the time information, the location information, and an identifier of an owner of the terminal, and to receive from the management apparatus the business status,

wherein the management apparatus includes;

a communication unit configured to receive from the terminal the identifier of the owner, the location information and the time information, and to transmit to the terminal the business status;

a schedule storage unit configured to store therein the location information corresponding to time for the owner of the terminal; and

a business status estimation unit configured to compare the identifier of the owner, the location information, and the time information received from the terminal to location information corresponding to time for the owner of the terminal stored at the schedule storage unit, to determine an inconsistency is occurred to at least one of the location information and the time information when the location information corresponding to the time information of the terminal is in disagreement with location information corresponding to time stored at the schedule storage unit, and to estimate, when the inconsistency is occurred, a business status of the owner of the terminal from history information of the person related to the owner.

8. The access control system according to claim 7, wherein history information of the person related to the owner of the terminal include behavior information which includes an accumulation of location information and business status corresponding to time information of a person related to the owner of the terminal, and the business estimation unit estimates the business status of the owner of the terminal from a business status of a person related to the owner of the terminal when the time information of the owner of the terminal is the same with time information of the terminal of the person related to the owner of the terminal and when the location information of the owner of the terminal and the location information of the terminal of the person related to the owner of the terminal are within a predetermined range.

9. The access control system according to claim 7,

wherein the history information of the person related to the owner of the terminal includes behavior history information which includes an accumulation of the location information and the business status corresponding to the time information of the terminal of the person related to the owner of the terminal, and

wherein the business status estimation unit acquires a first variation pattern of the location information of the owner of the terminal, extracting, out of a second pattern of past location information of the terminal of the person related to the owner of the terminal, the second variation patter corresponding to the first variation pattern, and estimating the business status of the owner of the terminal from the business status of the person related to the owner of the terminal.

10. The access control system according to claim 7,

wherein the history information of the person relate to the owner of the terminal includes inconsistency history information storing therein history of an inconsistency occurred in the location information of the terminal and location information of the schedule storage unit, and business status information having stored therein the location information and the business status,

wherein the business status estimation unit acquires from the inconsistency history information history corresponding to the inconsistency of the owner of the terminal, acquires from the location information included in the acquired history a business status, and estimates the business status of the owner of the terminal from the business status.

11. The access control system according to claim 7, wherein the activation control unit restricts and cancels a type of an application activated by the terminal, a device operated by the terminal, and data accessed according to the business status.

12. The access control system according to claim 7, wherein the person related to the owner of the terminal includes at least one of a department of an organization the owner of the terminal belongs and a business conducted by the owner of the terminal.