Data access control system and method according to position information of mobile terminal
AssigneeHitachi, Ltd.
InventorsTakashi Amano, Shoji Kodama
Life of this patent
Estimating the term…
Abstract
To restrict data transmission to a mobile terminal according to a location of the mobile terminal when the mobile terminal requests data to a second computer, the mobile terminal does not log in the second computer. A communication method for a communication system having a first computer and the second computer, the first computer sends location information of the mobile terminal to the second computer, and the second computer controls data which is to be sent to the first computer according to an access right based on a predetermined location information by referring to received location information. Thereby, it can be controlled data sent to the mobile terminal.
Claims14
A communication method for a communication system including a first computer, a second computer and a third computer, comprising:
- a step of sending, from the first computer, a user identification of the first computer, a geometric location information of the first computer, and an identifier for identifying data, wherein the first computer is a portable computer that includes a location measurement device that obtains a geometric location of the first computer, the first computer remotely logging in the second computer from the geometric location of the first computer different from a geometric location of the third computer, and accessing the third computer via the second computer;
- a step of receiving at the second computer the user identification of the first computer, the geometric location information of the first computer and the identifier for identifying the data by the second computer which is set at fixed location and remotely operated by the first computer, the second computer including a location management information indicating a user identification of the first computer and the geometric location information of the first computer;
- a step of storing the received user identification of the first computer and the received geometric location information of the first computer in the location management information;
- a step of sending, from the second computer to the third computer, a new access request which includes the received identifier, and the location management information;
- a step of deciding, by the third computer, whether to send the data specified by the received identifier to the second computer, based on a correspondence relationship between the received identifier, the user identification and the geometric location information of the first computer sent from the second computer and an access control information indicating a correspondence relationship between an identifier for identifying the data, an access-permitted user identification and an access-permitted geometric location information indicating a user location which are held by the third computer;
- a step of sending, from the third computer to the second computer, the data specified by the received identifier on a condition that the third computer decides to send the data;
- and
- a step of sending, from the second computer to the first computer, the received data.
A data transmission method for a file server coupled to a web server comprising:
- a step of sending a webpage data from a second computer which is set at fixed location to a first computer which is a portable computer,
- a step of sending webpage data to the second computer in response to an access request issued by the second computer;
- a step of receiving, by the file server from the web server, an identifier for identifying file data specified by a URL of the webpage, an access-permitted user identification of the first computer and a geometric location information of the first computer;
- a step of deciding, by the file server, whether to send the file data specified by the identifier to the web server, by referring to a correspondence relationship between an identifier, the user identification and the geometric location information of the first computer and an access control information indicating a correspondence relationship between an identifier for identifying the data, the access-permitted user identification and the geometric location information which are held by the second computer;
- and
- a step of sending, from the file server to the web server, the file data specified by the identifier when the file server decides to send the file data;
- and
- wherein the first computer remotely logs in the second computer from the geometric location of the first computer and accesses the file server via the second computer.
A computer system comprising a second computer which is set at fixed location and a third computer, for sending data to a first computer which is a portable computer in response to a request for the data held by the third computer from a first computer, wherein:
- the second computer is configured to:
- receive a remote log in from the first computer from the geometric location of the first computer different from a geometric location of the third computer, the log in including user identification of the first computer, a geometric location information of the first computer and an identifier for identifying the data from the first computer;
- store the received user identification of the first computer and the received geometric location information in a location management information;
- send the received identifier for identifying the data and the location management information to the third computer when issuing an access request for the data to the third computer;
- and
- send the data received from the third computer to the first computer thereby providing the first computer access to the third computer via the second computer;
- and
- the third computer is configured to:
- decide whether to send the data specified by the identifier to the second computer by referring to a correspondence relationship between the identifier, the user identification and the geometric location information of the first computer, which are sent from the second computer, and an access control information indicating a correspondence relationship between an identifier for identifying the data, an access permitted user identification and geometric location information which are held by the third computer;
- and
- send the data specified by the identifier to the second computer in accordance with the decision.
Dependencies are inferred from the claim text.