JP6454990B2 - Display device, control method, and control program - Google Patents

Description

The present invention relates to a display device, a control method and a control program.

  2. Description of the Related Art Conventionally, devices that connect to a server device via a network and perform mutual authentication using a device certificate are known. In addition, there is a technique for suppressing unauthorized use of a device by a non-owner when the device is lost or stolen. For example, in such a technique, when the position of the device is not included in a predetermined range, control for restricting the operation on the device is performed.

  However, the above-described conventional technique has a problem that it is difficult to prevent unauthorized access using a device certificate. In general, if a device certificate held by a device is used, it is possible to access an in-house environment. The conventional technology restricts the operation on the device when the position of the device is not included in the predetermined range, and does not prevent unauthorized access to the company using a device certificate. .

  The present invention has been made in view of the above, and an object thereof is to prevent unauthorized access using a device certificate.

In order to solve the above-described problems and achieve the object , the present invention is a display device , which is a certificate used for authentication for acquiring information from an external device, and includes a certificate including information on a position. a storage unit for storing for a display control unit that controls the display object, a detecting unit that detects position information indicating a position of the display device, the position based on the position information detected by the detection unit, the serial憶部a verification unit for verifying whether or not included in the position based on the information about the position included in the stored certificate, not included in the position based on information on the positions contained in the certificate by the validation unit If it is verified, has a control unit for controlling so as not to perform the information acquisition from the external device using a certificate, the display control unit is included in the certificate by verifying section and Not included in the location based on information about the location Even if it is verified, characterized in that it does not stop the display of the display object.

  According to one aspect of the present invention, it is possible to prevent unauthorized access using a device certificate.

FIG. 1 is a block diagram illustrating a hardware configuration example of the projector according to the first embodiment. FIG. 2 is a block diagram illustrating a functional configuration example of the projector according to the first embodiment. FIG. 3 is a flowchart illustrating an example of a flow of control processing according to the first embodiment. FIG. 4 is a block diagram illustrating a functional configuration example of the projector according to the second embodiment. FIG. 5 is a flowchart illustrating an example of a flow of control processing according to the second embodiment.

With reference to the accompanying drawings, a display device according to the present invention, an embodiment of the control method and control program. The present invention is not limited to the following embodiments. Each embodiment can be appropriately combined as long as the contents do not contradict each other. In each embodiment, a projector will be described as an example of a display device .

(Embodiment 1)
[Hardware configuration]
A hardware configuration of the projector (electronic device) according to the first embodiment will be described with reference to FIG. FIG. 1 is a block diagram illustrating a hardware configuration example of the projector according to the first embodiment.

  As shown in FIG. 1, a projector 10 includes a CPU (Central Processing Unit) 12, a RAM (Random Access Memory) 13, a ROM (Read Only Memory) 14, a communication I / F (Interface) 15, and operation keys. 16, an infrared light receiving unit 17, and a projection device 18. Each hardware is connected by a bus 11.

  The CPU 12 controls the overall operation of the projector 10. The CPU 12 controls the overall operation of the projector 10 by executing a program stored in the ROM 14 or the like using the RAM 13 as a work area (work area). The communication I / F 15 controls communication for connecting to a network such as a LAN (Local Area Network) or the Internet. The operation key 16 is a hard key that receives an operation from the operator. The infrared light receiving unit 17 is a light receiving element that receives an infrared light signal emitted from a remote controller or the like. The projection device 18 is an optical system mechanism that projects an image.

[Functional configuration according to Embodiment 1]
Next, the functional configuration of the projector according to the first embodiment will be described with reference to FIG. FIG. 2 is a block diagram illustrating a functional configuration example of the projector according to the first embodiment.

  As shown in FIG. 2, the projector 10 includes a controller 100. The controller 100 includes a setting value storage unit 111, a URL (Uniform Resource Locator) generation unit 112, a UI (User Interface) screen generation unit 113, an index analysis unit 114, an index acquisition unit 115, and a content file acquisition unit 116. And have. The controller 100 also includes an image decoder 117, a setting command analysis unit 118, a communication control unit 119, a projection control unit 120, and an operation unit control unit 121. The controller 100 includes a certificate storage unit 122, a detection unit 123, a verification unit 124, a determination unit 125, and a control unit 126. The electronic device includes at least a communication control unit 119, a certificate storage unit 122, a detection unit 123, a verification unit 124, a determination unit 125, and a control unit 126. In addition, about each said part, some or all of these may be implement | achieved by software (program), and may be implement | achieved by the hardware circuit.

  The setting value storage unit 111 stores values of various setting items in a memory. For example, the setting item is a setting item related to the projection server, and includes a projection server valid setting, a root URL, an index file, a type of access restriction, and the like. The projection server valid setting is a setting item for setting whether the projection server is valid or invalid. The root URL is a setting item representing the root URL of the Web server in which the content file is stored. The index file is a setting item that represents the name of the index file acquired from the Web server. That is, the projector 10 uses the set route URL and the name of the index file when acquiring the index file from the Web server. The type of access restriction is a setting item for setting whether there is access restriction based on the access number or no access restriction.

  The setting command analysis unit 118 interprets a setting item input from an external tool using Web API instead of a remote controller or a hard key, and causes the setting value storage unit 111 to store the setting item. The external tool is connected via the network 1. The communication control unit 119 controls HTTP communication and HTTPS communication with the Web server performed via the network 1. The UI screen generation unit 113 generates UI screens such as a file list screen, a file projection screen, and a setting item screen. The projection control unit 120 causes the projection device 18 to project the UI screen generated by the UI screen generation unit 113.

  The operation unit control unit 121 notifies the UI screen generation unit 113 of the operation by the operator received by the operation key 16. The URL generation unit 112 uses the setting item value stored in the setting value storage unit 111 to generate a URL for acquiring an index file, a content file, and the like, and notifies the UI screen generation unit 113 of the URL. . The index acquisition unit 115 acquires an index file from the Web server via the communication control unit 119 according to an instruction from the UI screen generation unit 113.

  The index analysis unit 114 analyzes the index file acquired by the index acquisition unit 115 and converts it into a format that can be processed by the UI screen generation unit 113. For example, the index analysis unit 114 converts text data in JSON (JavaScript Object Notation) format into structure data that can be processed by the UI screen generation unit 113. The index acquisition unit 115 notifies the UI screen generation unit 113 of the index information of the structure data converted by the index analysis unit 114 into a format that can be processed by the UI screen generation unit 113.

  The content file acquisition unit 116 acquires a content file from the Web server via the communication control unit 119 according to an instruction from the UI screen generation unit 113. The image decoder 117 decodes the content file acquired by the content file acquisition unit 116, develops it in a memory (frame buffer), and notifies the projection control unit 120 of the content file. The projection control unit 120 synthesizes the bitmap developed by the image decoder 117 and the file projection screen generated by the UI screen generation unit 113 and instructs the projection device 18 to perform projection. The certificate storage unit 122 stores a digital certificate used for server authentication and client authentication when the communication control unit 119 communicates with the outside through HTTPS communication or the like. Such a digital certificate is an example of a “certificate”. Hereinafter, “certificate” may be referred to as “device certificate”. The certificate storage unit 122 is an example of a “storage unit”.

  Generally, a device certificate has two functions, namely, a real certificate and SSL (Secure Sockets Layer) encrypted communication. Although information leakage on the Internet path can be prevented by SSL encrypted communication, information leakage cannot be prevented if the company operating is malicious. For this reason, a company operated by a trusted certificate authority is examined and an SSL certificate is issued after proving its existence. In the present embodiment, an SSL certificate that has been verified is used. Such an SSL certificate is a valid device certificate of the projector 10.

  In addition, many certificate vendors, which are trusted certificate authorities, conduct examinations by the following method to prove the existence of the company that owns the subject. For example, the certificate vendor confirms documents such as a registered copy issued by a public institution. For example, the certificate vendor confirms registration information in a database managed by a socially trusted third party. In addition, for example, the certificate vendor traces the person in charge of application (the person in charge of SSL certificate application) from the representative telephone number of the company, and confirms the resident status and intention of application. The certificate vendor does not issue a certificate if the above confirmation cannot be obtained.

  An example of information included in such a device certificate will be described. For example, the device certificate includes device identification information, a corporate department name, a corporate name, a corporate address, and organization identification information. Among these, the device identification information is a name or the like for identifying the device, and is composed of, for example, “model code + serial number”. In the present embodiment, the device refers to the projector 10. The corporate department name is, for example, the name of the organization that owns the projector 10. The corporate name is, for example, the name of a company that owns the projector 10. The address of the corporation is divided into, for example, the country where the company that owns the projector 10 is located, the name of the prefecture, the name of the municipality, and the like. The organization identification information is identification information for identifying an organization such as a corporation, and is configured by combining alphanumeric characters and symbols such as “1111-A”, for example. Note that these pieces of information are also examples of information about the organization (organization information).

  The detection unit 123 detects position information indicating the position of the projector 10. More specifically, the detection unit 123 detects position information of the projector 10 using an arbitrary technique such as GPS (Global Positioning System) or three-point positioning using a wireless communication base station. The detection of position information is not limited to the above, and any method may be used. However, when GPS is used to detect position information, network communication is not necessary, and therefore, verification described later can be performed even when the projector 10 main body is not connected to the network. The position information may be detected periodically at predetermined intervals, and the detection unit 123 stores the latest detected position information in the memory. At this time, the detection unit 123 sets “position indefinite” when the position information cannot be detected.

  The verification unit 124 verifies whether or not the position based on the detected position information is included in the position based on the information related to the position included in the valid device certificate of the projector 10. More specifically, the verification unit 124 acquires the latest position information detected by the detection unit 123 from the memory, and acquires information on the device certificate stored in the certificate storage unit 122. Then, the verification unit 124 verifies whether the position based on the position information is included in the position based on the information regarding the position included in the device certificate. For example, when the position based on the position information is included in the position based on the information related to the position included in the device certificate, the verifying unit 124 verifies that the projector 10 exists at a place where it should originally exist. On the other hand, when the position based on the position information is not included in the position based on the information related to the position included in the device certificate, the verification unit 124 verifies that the projector 10 does not exist at the place where it should originally be. In other words, since the place where the projector 10 should originally be is the position of the address included in the device certificate, the verification unit 124 verifies from the current position and the position included in the device certificate. Thereafter, the verification unit 124 outputs the verification result to the determination unit 125. For example, the verification result is either “exists in a place where it should be” or “does not exist in a place where it should be”. The trigger of processing by the verification unit 124 is, for example, when the communication control unit 119 performs communication using a device certificate.

  Further, the verification unit 124 obtains the similarity between the position based on the position information and the position based on the information related to the position included in the device certificate, and verifies whether the obtained similarity satisfies a predetermined criterion. Also good. For example, the verification unit 124 obtains the similarity between the position based on the position information and the address or country included in the device certificate. At this time, the verification unit 124 performs information processing in order to compare the position information in different data formats with the information (address, etc.) of the device certificate, and obtains the similarity according to the number of matched characters. Then, the verification unit 124 verifies that the projector 10 exists at a place where it should originally exist when the obtained similarity satisfies a predetermined criterion. On the other hand, the verification unit 124 verifies that the projector 10 does not exist where it should originally be when the obtained similarity does not satisfy a predetermined criterion. The address related to the position information detected by the detection unit 123 is an example of a first address, and the address included in the device certificate is an example of a second address.

  The determination unit 125 determines whether the acquisition of information from the external device using the device certificate is feasible or not, according to the verification result of the verification unit 124. More specifically, the determination unit 125 performs communication using a valid device certificate of the projector 10 when the verification result received from the verification unit 124 is “existing where it should be”, that is, an external device. It is determined that acquisition of information from can be performed. On the other hand, when the verification result received from the verification unit 124 is “does not exist in the place where it should be”, the determination unit 125 performs communication using a valid device certificate of the projector 10, that is, information of the information from the external device. It is determined that acquisition cannot be performed. In other words, if the projector 10 does not exist where it should be, the projector 10 may have been taken out of the place where it should be used and then stolen. It is determined that communication cannot be performed. Communication using a valid device certificate of the projector 10 can access in-house information of a company or the like, which is not preferable in terms of security when the projector 10 is stolen by a malicious third party.

  In addition, when the position information cannot be detected, the determination unit 125 determines that acquisition of information from the external device using the device certificate is not executable. More specifically, when the position information is not detected by the detection unit 123 and is determined to be “indefinite”, the determination unit 125 performs communication using a valid device certificate of the projector 10, that is, from an external device. It is determined that acquisition of information is impossible. As described above, in the case of “indefinite position”, it is preferable that communication using a valid device certificate of the projector 10 be disabled in consideration of the security described above.

  The control unit 126 controls the acquisition of information from the external device using the device certificate according to the determination result by the determination unit 125, or the information of the information from the external device using the device certificate. Control the acquisition to be performed. More specifically, when the determination unit 125 determines that communication using a device certificate, that is, acquisition of information from an external device is not executable, the control unit 126 uses an external device certificate. The communication control unit 119 is controlled so as not to acquire information from the apparatus. For example, the control unit 126 instructs the communication control unit 119 to stop communication. When the communication control unit 119 receives a communication stop instruction from the control unit 126, the device certificate is read from the certificate storage unit 122. To stop all network communication using the device certificate.

  On the other hand, the control unit 126 uses the device certificate by the determination unit 125 while controlling the communication control unit 119 not to acquire information from an external device using the device certificate. When it is determined that the acquisition of information from the external device is feasible, the communication control unit 119 is controlled so that the information can be acquired from the external device using the device certificate. For example, when the control unit 126 cancels the communication stop instruction to the communication control unit 119, and the communication control unit 119 receives the cancellation of the communication stop from the control unit 126, the device from the certificate storage unit 122 that has been stopped. The certificate can be read, and network communication using the device certificate can be executed. However, in the present embodiment, processing for stopping communication using the device certificate is executed, but it is not necessary to stop the basic functions of the projector 10 such as projection by the projection device 18. In addition, this embodiment is at least for controlling so that information cannot be acquired from an external device using a device certificate, and does not stop even network communication that does not use a device certificate. Absent.

  In the processing by the control unit 126, the detection of the position information in the detection unit 123 fails and “position is indefinite”, so that the determination unit 125 cannot execute acquisition of information from the external device using the device certificate. It may be determined that the communication control unit 119 is instructed to stop communication. Even in such a case, since the position information is periodically detected as described above, the control unit 126 uses the device certificate by the determination unit 125 according to the successful detection of the position information. If it is determined that the acquisition of information from can be performed, the communication stop instruction to the communication control unit 119 can be cancelled.

[Control processing according to Embodiment 1]
Next, the flow of control processing according to the first embodiment will be described with reference to FIG. FIG. 3 is a flowchart illustrating an example of a flow of control processing according to the first embodiment.

  As shown in FIG. 3, the verification unit 124 acquires a valid device certificate of the projector 10 from the certificate storage unit 122 when the position information can be detected by the detection unit 123 (step S101: Yes) (step S101). S102). Then, the verification unit 124 obtains a similarity between the position based on the position information detected by the detection unit 123 and an address based on the information related to the position included in the acquired device certificate, and the obtained similarity is a predetermined value. It is verified whether or not the projector 10 exists at a place where it should originally be according to whether or not the standard is satisfied (step S103). Here, the verification unit 124 outputs a verification result such as “exists in a place where it should be” when the similarity satisfies a predetermined criterion, and when the similarity does not satisfy the predetermined criterion, A verification result such as “does not exist at a certain location” is output.

  When the verification unit 124 outputs a verification result such as “does not exist where it should be” (step S104: No), the determination unit 125 performs communication using a valid device certificate of the projector 10, that is, an external device. It is determined that the information cannot be acquired from (step S105). Further, even when the position information cannot be detected by the detection unit 123 (step S101: No), the determination unit 125 cannot execute communication using a valid device certificate of the projector 10, that is, acquisition of information from an external device. (Step S105). Upon receiving the determination that the acquisition of information from the external device using the device certificate by the determination unit 125 is not executable, the control unit 126 performs communication using the device certificate with respect to the communication control unit 119. To stop communication (step S106).

  In addition, when the verification unit 124 outputs a verification result such as “existing where it should be” (step S104: Yes), the determination unit 125 performs communication using a valid device certificate of the projector 10, that is, It is determined that acquisition of information from the external device is feasible (step S107). In response to the determination that the determination unit 125 can execute the acquisition of information from the external device using the device certificate, the control unit 126 instructs the communication control unit 119 to stop communication. It is determined whether or not there is (step S108). At this time, if the control unit 126 is in a state of instructing the communication control unit 119 to stop communication (step S108: Yes), the control unit 126 cancels the communication stop instruction to the communication control unit 119 (step S109). . On the other hand, when the control unit 126 is not in a state of instructing the communication control unit 119 to stop communication (step S108: No), the process ends.

[Effects of Embodiment 1]
When the similarity between the position based on the detected position information and the position based on the position information included in the device certificate does not satisfy a predetermined standard, the projector 10 receives information from the external device using the device certificate. Control so that it cannot be acquired. As a result, the projector 10 can prevent unauthorized access using the valid device certificate of the projector 10 by the projector 10 itself.

(Embodiment 2)
In the first embodiment, a case has been described in which it is determined whether or not the projector 10 exists in a place where the projector 10 should originally exist by verifying a device certificate based on position information. Whether or not the projector 10 is originally present can be determined after verifying the device certificate based on the organization information. In the second embodiment, a case will be described in which a device certificate is verified based on the organization information, and then it is determined whether or not the projector 10 exists in a place where it should be.

[Functional configuration according to Embodiment 2]
A functional configuration of the projector according to the second embodiment will be described with reference to FIG. FIG. 4 is a block diagram illustrating a functional configuration example of the projector according to the second embodiment. In FIG. 4, the same components as those of the projector 10 according to the first embodiment are denoted by the same reference numerals, and detailed description of the same components may be omitted. Specifically, configurations, functions, and processes other than the communication control unit 219, the detection unit 223, the verification unit 224, the determination unit 225, the control unit 226, and the organization information acquisition unit 227 described below are the same as those in the first embodiment. It is the same.

  As shown in FIG. 4, the projector 20 has a controller 200. The controller 200 includes a setting value storage unit 111, a URL generation unit 112, a UI screen generation unit 113, an index analysis unit 114, an index acquisition unit 115, and a content file acquisition unit 116. The controller 200 includes an image decoder 117, a setting command analysis unit 118, a communication control unit 219, a projection control unit 120, and an operation unit control unit 121. The controller 200 includes a certificate storage unit 122, a detection unit 223, a verification unit 224, a determination unit 225, a control unit 226, and an organization information acquisition unit 227. The organization information acquisition unit 227 is an example of an “acquisition unit”. In addition, about each said part, some or all of these may be implement | achieved by software (program), and may be implement | achieved by the hardware circuit.

  The organization information acquisition unit 227 acquires organization information from a management server that manages the organization information. More specifically, the organization information acquisition unit 227 acquires the latest location information detected by the detection unit 223 from the memory, and acquires the acquired location information to the management server that manages the organization information via the communication control unit 219. Send information. Then, the organization information acquisition unit 227 acquires organization information corresponding to the transmitted position information from the management server. In the present embodiment, a case where a corporate name is acquired from the management server is taken as an example of organization information. The management server manages the corporate name, business office address, and the like, and responds with the corporate name corresponding to the location information in response to the acquisition request of the organization information from the client such as the projector 20. The management server is prepared by a series of system operation companies, and connection destination information for connecting to the management server is held in advance so that the projector 20 and the like can communicate with the management server. In addition, since the corporation name transmitted from the management server corresponds to the position information using GPS, etc., if there are multiple offices in one building and this system is used, May exist.

  Further, in the transmission / reception of the position information and the corporate name between the management server and the projector 20, a network connection is made. However, when the network connection is not possible, acquisition of the corporate name may fail. At this time, the organization information acquisition unit 227 sets “corporate name indefinite” when the corporate name cannot be acquired.

  The verification unit 224 verifies whether or not the projector 20 exists at a place where it should originally be based on the corporate name acquired from the management server and the corporate name included in the valid device certificate of the projector 20. More specifically, the verification unit 224 acquires information on the device certificate stored in the certificate storage unit 122, and is acquired by the corporate name included in the acquired device certificate and the organization information acquisition unit 227. It is determined whether or not the corporate name matches. The corporate name included in the device certificate is an example of first organizational information indicating the name of the organization, and the corporate name corresponding to the location information acquired from the management server is the name of the organization corresponding to the location information. It is an example of the 2nd organization information to show. Here, when there are a plurality of corporate names acquired by the organization information acquisition unit 227, it may be determined whether or not they match any of the corporate names. Moreover, it is preferable to determine whether or not the corporate names match because the corporate names do not cause errors (positional information errors) unlike the comparison (similarity) of the positional information.

  Then, when the corporate names match, the verification unit 224 verifies that the projector 20 exists at a place where it should originally be. On the other hand, the verification unit 224 verifies that the projector 20 does not exist at a place where the corporate name is supposed to be when the corporate name does not match, that is, when there is no matching corporate name. That is, since the place where the projector 20 should originally be is the location of the company corresponding to the corporate name included in the device certificate, the verification unit 224 determines the corporate name included in the current location and the corporate entity included in the device certificate. Verify by name. A company may have multiple locations. And there is a possibility that the projector 20 is carried between offices in one company. Therefore, in this embodiment, not only the information such as the address included in the device certificate but also the corporate name (organization information) is verified.

  Thereafter, the verification unit 224 outputs the verification result to the determination unit 225. The contents of the verification result are the same as in the first embodiment. Note that any of the processing orders of the address comparison described in the first embodiment and the corporation name comparison described in the second embodiment may be performed first. Also, at least one of the address comparison process described in the first embodiment and the corporation name comparison process described in the second embodiment may be performed. When using both the verification result for the address comparison process and the verification result for the corporate name comparison process, control can be performed so that information can be acquired from an external device if at least one is "where it should be" Alternatively, control may be performed so that acquisition of information from an external device is not possible if at least one is “not present where it should be”.

  The determination unit 225 determines that acquisition of information from an external device using a valid device certificate of the projector 20 is impossible when the corporate name cannot be acquired. More specifically, when the corporate name is not acquired by the organization information acquisition unit 227 and the corporate name is “indefinite”, the determination unit 225 performs communication using a valid device certificate of the projector 20, that is, external It is determined that acquisition of information from the device is not executable. As described above, when “corporate name is undefined”, in consideration of security as in the first embodiment, it is impossible to execute acquisition of information from an external device using a valid device certificate of the projector 20. It is preferable. Other processes performed by the determination unit 225 are the same as the processes performed by the determination unit 125 according to Embodiment 1.

  In the processing by the control unit 226, the acquisition of the corporate name in the organization information acquisition unit 227 fails and “corporate name is indefinite”, so that the determination unit 225 acquires the information from the external device using the device certificate. It may be determined that execution is impossible, and the communication control unit 219 may be instructed to stop communication. Even in such a case, since the corporate name is acquired using the positional information in accordance with the periodic detection of the positional information, the control unit 226 determines whether the corporate name has been successfully acquired. If the unit 225 determines that acquisition of information from the external device is executable, the communication stop instruction to the communication control unit 219 can be cancelled.

[Control processing according to Embodiment 2]
Next, the flow of control processing according to the second embodiment will be described with reference to FIG. FIG. 5 is a flowchart illustrating an example of a flow of control processing according to the second embodiment. Note that detailed description of the same processing as the flow of control processing according to Embodiment 1 is omitted.

  As illustrated in FIG. 5, when the position information can be detected by the detection unit 223 (step S201: Yes), the organization information acquisition unit 227 transmits the detected position information to the management server, and corresponds to the position information. As a response, the corporate name (organization information) is acquired from the management server (step S202). The verification unit 224 acquires a valid device certificate of the projector 20 from the certificate storage unit 122 (step S203). Then, the verification unit 224 compares the corporate name acquired by the organization information acquisition unit 227 with the corporate name included in the acquired device certificate, and determines whether or not the projector should be located in accordance with whether or not they match. It is verified whether or not 20 exists (step S204). Here, the verification unit 224 outputs a verification result such as “exists at a place where it should be” if they match, and outputs a verification result such as “does not exist where it should be” if they do not match. In step S204, as in the first embodiment, whether the projector 20 exists at a place where it should originally be based on the similarity between the position information detected by the detection unit 223 and the address included in the device certificate. You may further perform the process which verifies whether or not.

  When the verification unit 224 outputs a verification result such as “does not exist where it should be” (step S205: No), the determination unit 225 performs communication using a valid device certificate of the projector 20, that is, an external device. It is determined that the information cannot be acquired from the server (step S206). Further, even when the position information cannot be detected by the detection unit 223 (step S201: No), the determination unit 225 cannot execute communication using a valid device certificate of the projector 20, that is, acquisition of information from an external device. (Step S206). In addition to these, the determination unit 225 cannot execute acquisition of information from an external device using a valid device certificate of the projector 20 even when the corporate name (organization information) cannot be acquired in step S202. May be determined. The control unit 226 receives the determination that the information acquisition from the external device using the device certificate by the determination unit 225 is not executable, and the communication control unit 219 executes communication using the device certificate. To stop communication (step S207).

  Further, when the verification unit 224 outputs a verification result such as “existing where it should be” (step S205: Yes), the determination unit 225 performs communication using a valid device certificate of the projector 20, that is, It is determined that acquisition of information from the external device is feasible (step S208). In response to the determination that the acquisition of information from the external apparatus using the device certificate by the determination unit 225 is executable by the determination unit 225, the control unit 226 instructs the communication control unit 219 to stop communication. It is determined whether or not there is (step S209). At this time, if the control unit 226 is in a state of instructing the communication control unit 219 to stop communication (step S209: Yes), the control unit 226 cancels the communication stop instruction to the communication control unit 219 (step S210). . On the other hand, if the control unit 226 is not in a state of instructing the communication control unit 219 to stop communication (step S209: No), the process ends.

[Effects of Embodiment 2]
The projector 20 acquires a corporate name corresponding to the detected position information, and when the acquired corporate name and the corporate name included in the device certificate do not match, information of the information from the external device using the device certificate is obtained. Control to prevent acquisition. As a result, the projector 20 can prevent unauthorized access using the valid device certificate of the projector 20 by the projector 20 itself.

(Embodiment 3)
Although the embodiments of the projector as the electronic apparatus according to the invention have been described so far, the invention may be implemented in various different forms other than the above-described embodiments. Therefore, different embodiments will be described with respect to (1) an instruction to stop communication, (2) use of organization identification information, (3) configuration, and (4) program.

(1) Communication stop instruction In the above embodiment, if the position information is not detected and the position is “undefined”, it is determined that communication using the device certificate cannot be performed, and the communication stop instruction is issued. Explained when to be done. The instruction to stop communication due to “indefinite position” may be given according to the number of times “indefinite position” has occurred. For example, an instruction to stop communication is performed when it is determined that communication using the device certificate is not executable when “position indefinite” continues for a predetermined number of times such as twice or three times. Also good. As a result, the communication stop instruction is not issued unless the position is determined to be “undefined” for a predetermined number of times. Therefore, even if position information detection fails due to an unexpected situation, communication using the device certificate is established. Can be maintained.

  In the above embodiment, when the corporate name is not acquired and “corporate name is indefinite” is determined, it is determined that communication using the device certificate cannot be performed, and a communication stop instruction is given. . The instruction to stop communication caused by “indefinite corporate name” may be made according to the number of times “indefinite corporate name” has occurred. For example, an instruction to stop communication is performed by determining that communication using a device certificate is not executable when “corporate name is undefined” for a predetermined number of times such as twice or three times. May be. As a result, communication stop is not instructed unless the “corporate name is undetermined” for a predetermined number of times. Even if acquisition of the corporate name fails due to unforeseen circumstances, communication using a device certificate has been established. Can be maintained.

(2) Use of organization identification information In the second embodiment, information is acquired from an external device using a device certificate depending on whether or not the corporate names included in the organization information match. The case where control is performed so as not to occur is described. Control of whether or not to acquire information from an external device using a device certificate may be realized based on organization identification information included in the organization information. As described above, the organization identification information is identification information for identifying an organization such as a corporation, and is configured by combining alphanumeric characters and symbols such as “1111-A”, for example. The organization identification information is an example of first organization information and may be referred to as an organization code.

  For example, it is assumed that the organization certificate “1111-A” is included in the device certificate. Then, the organization information acquisition unit 227 acquires the latest location information detected by the detection unit 223 from the memory, and transmits the acquired location information to the management server that manages the organization information via the communication control unit 219. . Then, the organization information acquisition unit 227 acquires an organization code corresponding to the transmitted position information from the management server. The organization code acquired from the management server is an example of second organization information. Here, when the network connection between the management server and the projector 20 is not possible, the organization information acquisition unit 227 sets “organization code indefinite” because the organization code cannot be acquired.

  The verification unit 224 acquires information on the device certificate stored in the certificate storage unit 122, the organization code “1111-A” included in the acquired device certificate, and the organization acquired by the organization information acquisition unit 227. It is verified whether the similarity with the code satisfies a predetermined standard. Then, the verification unit 224 verifies that the projector 20 exists at a place where it should originally exist when the similarity of the organization code satisfies a predetermined criterion. On the other hand, the verification unit 224 verifies that the projector 20 does not exist at the place where the organization code should be when the similarity of the organization code does not satisfy a predetermined standard.

  If the organization code of a company is “1111” and the organization code of the affiliated company of this company is “1111-A”, if the organization code included in the device certificate is “1111”, the organization code of The degree of similarity satisfies a predetermined standard even if it is an affiliated company. That is, the verified organization codes may be completely matched or partially matched. Processing by the determination unit 225 and the control unit 226 is the same as that in the second embodiment.

  In the processing by the control unit 226, the organization information acquisition unit 227 fails to acquire the organization code, and “organization code is indefinite”, so that the determination unit 225 acquires the information from the external device using the device certificate. It may be determined that execution is impossible, and the communication control unit 219 may be instructed to stop communication. Even in such a case, since the organization code is acquired using the position information in accordance with the periodic detection of the position information, the control unit 226 determines whether the organization code has been successfully acquired. If the unit 225 determines that acquisition of information from the external device is executable, the communication stop instruction to the communication control unit 219 can be cancelled.

(3) Configuration In addition, information including processing procedures, control procedures, specific names, various data, parameters, and the like shown in the document and drawings can be arbitrarily changed unless otherwise specified. Each component of the illustrated apparatus is functionally conceptual and does not necessarily need to be physically configured as illustrated. That is, the specific form of the distribution or integration of the devices is not limited to the illustrated one, and all or a part of the distribution or integration is functionally or physically distributed or arbitrarily in any unit according to various burdens or usage conditions. Can be integrated.

  For example, the verification unit 224 corresponds to the “first verification unit” that verifies whether or not the projector 20 exists in the place where it should originally be based on the position information and the position information included in the device certificate. It may be distributed to a “second verification unit” that verifies whether or not the projector 20 exists in a place where it should originally be based on the corporate name and the corporate name included in the device certificate.

(4) Program The control program executed by the projector 10 is, as one form, a file in an installable format or an executable format, a CD-ROM, a flexible disk (FD), a CD-R, a DVD (Digital Recorded on a computer-readable recording medium such as Versatile Disk). The control program executed by the projector 10 may be stored on a computer connected to a network such as the Internet and provided by being downloaded via the network. The control program executed by the projector 10 may be provided or distributed via a network such as the Internet. Further, the control program executed by the projector 10 may be provided by being incorporated in advance in a ROM or the like.

  The control program executed by the projector 10 has a module configuration including the above-described units (the detection unit 123, the verification unit 124, the determination unit 125, and the control unit 126). As actual hardware, a CPU (processor) is used. By reading the control program from the storage medium and executing it, the above-described units are loaded onto the main storage device, and the detection unit 123, the verification unit 124, the determination unit 125, and the control unit 126 are generated on the main storage device. It has become.

DESCRIPTION OF SYMBOLS 10 Projector 100 Controller 111 Setting value storage part 112 URL generation part 113 UI screen generation part 114 Index analysis part 115 Index acquisition part 116 Content file acquisition part 117 Image decoder 118 Setting command analysis part 119 Communication control part 120 Projection control part 121 Operation part Control unit 122 Certificate storage unit 123 Detection unit 124 Verification unit 125 Determination unit 126 Control unit

JP2013-117949A Japanese Patent No. 5299048 JP 2009-211466 A

Claims (21)

A display device ,
A certificate used for authentication for acquiring information from an external device, and a storage unit for storing a certificate including information on a position;
A display control unit for controlling display of a display object;
A detection unit for detecting position information indicating a position of the display device ;
A verification unit that verifies whether or not a position based on the position information detected by the detection unit is included in a position based on information related to a position included in the certificate stored in the storage unit;
Control is performed so that the information is not acquired from the external device using the certificate when the verification unit verifies that the information is not included in the position based on the information related to the position included in the certificate. A control unit ,
The display control unit does not stop the display of the display object even when the verification unit verifies that it is not included in the position based on the information about the position included in the certificate.
A display device . The control unit cannot execute the acquisition of the information from the external device using the certificate when it is verified by the verification unit that it is not included in the position based on the information related to the position included in the certificate. The display device according to claim 1, further comprising: a determination unit that determines that The detection unit periodically acquires the position information indicating the position of the display device at a predetermined interval,
Each time the verification unit periodically acquires the location information by the detection unit, the location based on the location information is included in the location based on information about the location included in the certificate stored in the storage unit. The display device according to claim 1 , wherein the display device is verified. The control unit has been verified to be included in a position based on information related to a position included in the certificate by the verification unit in a state in which the information is not acquired from the external device. 4. The display device according to claim 1 , wherein control is performed so that the information can be acquired from the external device . A display device ,
A certificate used for authentication for acquiring information from an external device, and a storage unit for storing a certificate including information on a position;
A display control unit for controlling display of a display object ;
A detection unit for detecting position information indicating a position of the display device ;
It is verified whether the similarity between the position based on the position information detected by the detection unit and the position based on the position information included in the certificate stored in the storage unit satisfies a predetermined criterion. A verification unit to
A control unit for controlling the acquisition of the information from the external device using the certificate when the verification unit verifies that the similarity does not satisfy the predetermined criterion ; Have
The display control unit does not stop displaying the display object even when the verification unit verifies that the similarity does not satisfy the predetermined criterion.
A display device . The control unit determines that the acquisition of the information from the external device using the certificate is not executable when the verification unit verifies that the similarity does not satisfy the predetermined criterion. The display device according to claim 5, further comprising: The detection unit periodically acquires the position information indicating the position of the display device at a predetermined interval,
The verification unit, for each periodically acquires the position information by the detection unit, to claim 5 or claim 6, wherein the similarity is verified whether they meet the predetermined criteria The display device described. The control unit is configured to control the external device when the verification unit verifies that the similarity satisfies the predetermined criterion in a state in which the information is not acquired from the external device. The display device according to any one of claims 5 to 7 , wherein control is performed so that the information can be acquired from the device . When the similarity between the first address as the position information and the second address as the position information does not satisfy the predetermined criterion, the control unit uses the certificate. The display device according to any one of claims 5 to 8, wherein the display device is controlled not to acquire the information from the device . A display device ,
A storage unit that stores a certificate that is used for authentication for acquiring information from an external device and includes first organization information about the organization;
A display control unit for controlling display of a display object;
A detection unit for detecting position information indicating a position of the display device ;
An acquisition unit that transmits the location information detected by the detection unit to a management server that manages organization information, and acquires second organization information related to the organization corresponding to the transmitted location information from the management server;
It is verified whether or not the similarity between the second organization information acquired by the acquisition unit and the first organization information included in the certificate stored in the storage unit satisfies a predetermined criterion. A verification unit;
A control unit for controlling the acquisition of the information from the external device using the certificate when the verification unit verifies that the similarity does not satisfy the predetermined criterion ; Have
The display control unit does not stop displaying the display object even when the verification unit verifies that the similarity does not satisfy the predetermined criterion.
A display device . A display device ,
A storage unit that stores a certificate that is used for authentication for acquiring information from an external device and includes first organization information indicating a name of the organization;
A display control unit for controlling display of a display object;
A detection unit for detecting position information indicating a position of the display device ;
An acquisition unit that transmits the location information detected by the detection unit to a management server that manages organization information, and acquires second organization information indicating the name of the organization corresponding to the transmitted location information from the management server When,
The name of the organization indicated by the second organization information acquired by the acquisition unit matches the name of the organization indicated by the first organization information included in the certificate stored in the storage unit. A verification unit for verifying whether or not,
A control unit that controls the acquisition of the information from the external device using the certificate when the verification unit verifies that they do not match , and
The display control unit does not stop the display of the display object even when the verification unit verifies that they do not match.
A display device . Wherein, claims when the position information by the detecting unit can not be detected, the preceding claims, characterized in that so as not to perform acquisition of the information from the external device using the certificate Item 12. The display device according to any one of Items 11 to 11 . Wherein the detection unit, GPS (Global Positioning System), or one of claims 12 through three-point positioning using the base station of a wireless communication claim 1, wherein the detecting the positional information, any one The display device according to item . A control method executed in a display device ,
A display control step for controlling display of the display object;
A detecting step for detecting position information indicating a position of the display device ;
The position based on the position information detected in the detection step is a certificate that is stored in a storage unit and used for authentication for acquiring information from an external device, and is included in a certificate that includes information about the position A verification step for verifying whether or not it is included in a position based on information about
Control is performed so as not to acquire the information from the external device using the certificate when it is verified that the certificate is not included in the position based on the information related to the position included in the certificate in the verification step. A control step ,
In the display control step, the display of the display object is not stopped even when the verification step verifies that it is not included in the position based on the information related to the position included in the certificate.
A control method characterized by the above . A control method executed in a display device ,
A display control step for controlling display of the display object;
A detecting step for detecting position information indicating a position of the display device ;
A position based on the position information detected in the detection step, and a certificate stored in a storage unit and used for authentication for acquiring information from an external device, the position being included in the certificate including information on the position A verification step for verifying whether the similarity with the position based on the information satisfies a predetermined criterion;
A control step for controlling not to acquire the information from the external device using the certificate when the similarity is verified as not satisfying the predetermined criterion in the verification step ; Have
In the display control step, display of the display object is not stopped even when the similarity is verified that the similarity does not satisfy the predetermined criterion by the verification step.
A control method characterized by the above . A control method executed in a display device ,
A display control step for controlling display of the display object;
A detecting step for detecting position information indicating a position of the display device ;
An acquisition step of transmitting the location information detected in the detection step to a management server that manages organization information, and acquiring second organization information related to the organization corresponding to the transmitted location information from the management server;
The second organization information acquired in the acquisition step and a certificate stored in the storage unit and used for authentication for acquiring information from an external device, the certificate including the first organization information related to the organization A verification step for verifying whether the similarity with the first organization information included in the table satisfies a predetermined criterion;
A control step for controlling not to acquire the information from the external device using the certificate when the similarity is verified as not satisfying the predetermined criterion in the verification step ; Have
In the display control step, the display of the display object is not stopped even when the similarity is verified that the similarity does not satisfy the predetermined criterion in the verification step.
A control method characterized by the above . A control method executed in a display device ,
A display control step for controlling display of the display object;
A detecting step for detecting position information indicating a position of the display device ;
An acquisition step of transmitting the location information detected in the detection step to a management server that manages organization information, and acquiring from the management server second organization information indicating the name of the organization corresponding to the transmitted location information. When,
A name of the organization indicated by the second organization information acquired in the acquisition step, and a certificate stored in the storage unit and used for authentication for acquiring information from an external device, wherein A verification step of verifying whether or not the name of the organization indicated by the first organization information included in the certificate including the organization information matches;
A control step for controlling not to perform acquisition of the information from the external device using the certificate when it is verified that they do not match in the verification step ,
In the display control step, the display of the display object is not stopped even if the verification does not match in the verification step.
A control method characterized by the above . On the computer,
A display control step for controlling display of the display object;
A detection step of detecting position information indicating a position of the computer ;
Position based on the position information detected in said detection step, is stored in the serial 憶部, a certificate used for authentication to acquire information from the external device, included in a certificate containing information about the position A verification step for verifying whether or not it is included in a position based on information on the position to be
Control is performed so as not to acquire the information from the external device using the certificate when it is verified that the certificate is not included in the position based on the information related to the position included in the certificate in the verification step. Control steps, and
In the display control step, the display of the display object is not stopped even when the verification step verifies that it is not included in the position based on the information related to the position included in the certificate.
A control program characterized by On the computer,
  A display control step for controlling display of the display object;
  A detection step of detecting position information indicating a position of the computer;
  A position based on the position information detected in the detection step, and a certificate stored in a storage unit and used for authentication for acquiring information from an external device, the position being included in the certificate including information on the position A verification step for verifying whether the similarity with the position based on the information satisfies a predetermined criterion;
  A control step for controlling the acquisition of the information from the external device using the certificate when the verification step verifies that the similarity does not satisfy the predetermined criterion; and Have
  In the display control step, display of the display object is not stopped even when the similarity is verified that the similarity does not satisfy the predetermined criterion by the verification step.
  A control program characterized by On the computer,
A display control step for controlling display of the display object;
A detection step of detecting position information indicating a position of the computer;
An acquisition step of transmitting the location information detected in the detection step to a management server that manages organization information, and acquiring second organization information related to the organization corresponding to the transmitted location information from the management server;
The second organization information obtained by the obtaining step and a certificate stored in the storage unit and used for authentication for obtaining information from an external device, the certificate including the first organization information related to the organization A verification step for verifying whether the similarity with the first organization information included in the table satisfies a predetermined criterion;
A control step for controlling the acquisition of the information from the external device using the certificate when the verification step verifies that the similarity does not satisfy the predetermined criterion; and Let it run
In the display control step, display of the display object is not stopped even when the similarity is verified that the similarity does not satisfy the predetermined criterion by the verification step.
A control program characterized by On the computer,
A display control step for controlling display of the display object;
A detection step of detecting position information indicating a position of the computer;
An acquisition step of transmitting the location information detected in the detection step to a management server that manages organization information, and acquiring from the management server second organization information indicating a name of the organization corresponding to the transmitted location information. When,
A name of the organization indicated by the second organization information acquired by the acquisition step and a certificate stored in the storage unit and used for authentication for acquiring information from an external device, and indicating the name of the organization A verification step of verifying whether or not the name of the organization indicated by the first organization information included in the certificate including the first organization information matches;
A control step for controlling not to perform acquisition of the information from the external device using the certificate when it is verified that they do not match by the verification step;
When executing the control step, if it is verified by the verification step that it does not match, display of the display object by the display control step is not stopped.
A control program characterized by

Images