Management device

The present invention relates to a management device.

Conventionally, a technology is known in which a communication terminal device such as a mobile phone and a management device such as a server that manages information of the communication terminal device are connected via a network and information stored in the communication terminal device is shared with the management device. (For example, Patent Document 1).

<p><patcit num="1"><text>Japanese Unexamined Patent Publication No. 2000-181862</text></patcit></p>

<p> Here, the user of the mobile phone may want to prevent leakage of the information shared to the server while sharing the information of the mobile phone used by himself / herself to a management device such as a server. In this case, the user may consider that it is preferable that only the mobile phone authorized to access the information shared by the management device can access the information. However, when the user is not good at operating and setting the mobile phone, it may be difficult to set the management device and the mobile phone. The present invention has been made in view of the above problems, and an object of the present invention is to provide a mechanism for setting access restrictions related to information of a management device by a simple method.</p>

<p> (1) One aspect of the present invention is a management device capable of communicating with a first communication terminal device having first identification information for identifying the device, and identification information of the communication terminal device permitted to communicate with the own device. A storage unit that stores the permission identification information, a receiving unit that receives a permission request requesting permission for communication from the first communication terminal device to the own device from the first communication terminal device, and the first identification information. The key information paired with, and the first key information used for communication with the own device, is generated in response to the reception unit receiving the permission request, and the first communication. A registration unit that associates the first identification information possessed by the terminal device with the first key information generated by the key generation unit and registers them as the permission identification information, and communication from the first communication terminal device to the own device. Based on whether or not any of the first identification information and the first key information received as the request is registered in the permission identification information, it is determined whether or not to communicate with the first communication terminal device. A communication determination unit for communication and a communication unit that communicates with the first communication terminal device based on the determination result of the communication determination unit.<u style="single">When the first communication terminal device cannot use the first identification information, the registration unit deletes the registration of the first identification information from the permission identification information and does not delete the registration of the first key information.</u>It is a management device.</p><p> (2) In one aspect of the present invention, in the management device according to (1) above, in the communication determination unit, either the first identification information or the first key information is registered as the permission identification information. If it is determined that communication is performed between the own device and the first communication terminal device, and the identification information and the first key information are not registered as the permission identification information, the own device and the first communication terminal device are not registered. It is determined that communication with the communication terminal device is not performed.</p><p> (<u style="single">3</u>) One aspect of the present invention is described in (1) above.<u style="single">Or</u>(<u style="single">2</u>), The receiving unit receives the permission request from the second communication terminal device having the second identification information whose identification target device is different from the first identification information, and the key generation unit receives the permission request. , The second key information paired with the second identification information and used for communication with the own device is further generated, and the registration unit is the second key information possessed by the second communication terminal device. When the identification information and the second key information generated by the key generation unit are associated and registered as the permission identification information, and the first communication terminal device cannot use the first identification information, the second identification information Unregistered<u style="single">However, the registration of the second key information is not deleted.</u></p><p> (<u style="single">4</u>) One aspect of the present invention is described above.<u style="single">(1) or (2)</u>In the management device described in<u style="single">The receiving unit receives the permission request from the second communication terminal device having the second identification information whose identification target device is different from the first identification information, and the key generation unit is paired with the second identification information. The second key information used for communication with the own device is further generated, which is the key information that forms</u>The registration unit<u style="single">The second identification information possessed by the second communication terminal device and the second key information generated by the key generation unit are associated and registered as the permission identification information.</u>When the first communication terminal device cannot use the first identification information, the registration of the second identification information and the registration of the second key information are both deleted.</p>

<p> According to the present invention, it is possible to provide a mechanism for setting access restrictions related to information of a management device by a simple method.</p>

<figref num="1">It is a figure which shows the outline of the NAS apparatus and the communication terminal apparatus which concerns on 1st Embodiment.</figref><figref num="2">It is a figure which shows an example of the functional structure of the NAS apparatus and the communication terminal apparatus which concerns on 1st Embodiment.</figref><figref num="3">It is a 1st flow chart which shows an example of the operation of the NAS apparatus which concerns on 1st Embodiment.</figref><figref num="4">It is a table which shows an example of permission identification information which concerns on 1st Embodiment.</figref><figref num="5">It is a 2nd flow chart which shows an example of the operation of the NAS apparatus which concerns on 1st Embodiment.</figref><figref num="6">It is a 3rd flow chart which shows an example of the operation of the NAS apparatus which concerns on 1st Embodiment.</figref><figref num="7">It is a figure which shows the outline of the NAS apparatus and the communication terminal apparatus which concerns on 2nd Embodiment.</figref><figref num="8">It is a figure which shows an example of the functional structure of the NAS apparatus and the communication terminal apparatus which concerns on 2nd Embodiment.</figref><figref num="9">It is a figure which shows an example of the display part at the time of acquiring the communication permission information which concerns on 2nd Embodiment.</figref><figref num="10">It is a 1st flow diagram which shows an example of the operation of the NAS apparatus which concerns on 2nd Embodiment.</figref><figref num="11">It is a table which shows an example of permission identification information which concerns on 2nd Embodiment.</figref><figref num="12">It is a flow chart which shows an example of the operation of the NAS apparatus which concerns on 3rd Embodiment.</figref><figref num="13">It is a table which shows an example of permission identification information which concerns on 3rd Embodiment.</figref><figref num="14">It is a table which shows an example of permission identification information which concerns on a modification.</figref>

[First Embodiment]

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

&lt;Outline of NAS Device&gt; FIG. 1 is a diagram showing an outline of the NAS device 10 and the communication terminal device 20 according to the first embodiment. The NAS (Network Access Server) device 10 manages data (for example, music, photos, moving images, etc.) received from the communication terminal device 20. The NAS device 10 includes a storage unit 140 such as a hard disk drive and ROM (Read-Only-memory). Data such as photographs, moving images, and music transmitted from the communication terminal device 20 are stored in the storage unit 140. The data stored in the storage unit 140 can also be read by the communication terminal device 20. In this case, the NAS device 10 functions as a file server of the communication terminal device 20. In the following description, data such as photographs, moving images, and music stored in the storage unit 140 are collectively referred to as content information CT.

The NAS device 10 transmits / receives data to / from the communication terminal device 20 by wireless communication. In the following description, among the wireless communication between the NAS device 10 and the communication terminal device 20, the communication related to the transmission / reception of the content information CT managed by the NAS device 10 will be referred to as "content communication". Content communication is communication for the communication terminal device 20 to store in the NAS device 10. Further, the content communication is a communication in which the communication terminal device 20 reads the content information CT stored in the NAS device 10. Content communication is performed by various wireless communication methods such as short-range wireless communication by Wi-Fi (registered trademark) and wireless communication via a mobile communication network such as LTE (Long Term Evolution). Here, a case where the NAS device 10 can communicate with the communication terminal device 20 by Wi-Fi and LTE will be described.

The NAS device 10 is Wi-Fi when the communication terminal device 20 can receive the Wi-fi radio waves, such as when a router RT that performs short-range wireless communication by Wi-Fi is installed in the user's home. -Communicate content via Fi. The NAS device 10 performs content communication by LTE when the router RT is not installed in the user's house or when the communication terminal device 20 cannot receive the Wi-fi radio wave.

The permission identification information WL (in this example, the permission identification information WL1) is stored in the storage unit 140 of the NAS device 10. The permission identification information WL is information indicating information (hereinafter, identification information) for identifying the communication terminal device 20 for which content communication with the NAS device 10 is permitted. The NAS device 10 performs content communication with the communication terminal device 20 having the identification information shown in the permission identification information WL.

&lt;Overview of Communication Terminal Device&gt; The communication terminal device 20 is a portable device and performs wireless communication according to a user's operation. The communication terminal device 20 is, for example, a portable personal computer such as a mobile phone, a smartphone, or a tablet computer (tablet PC). The communication terminal device 20 can communicate with the NAS device 10 by Wi-Fi and LTE.

&lt;Regarding the subscriber identifier ID&gt; Both the NAS device 10 and the communication terminal device 20 are provided with an identification chip for identifying a subscriber who subscribes to a communication service using a mobile communication network. This identification chip is, for example, a SIM (Subscriber Identity Module). In this SIM, IMSI (International Mobile Subscriber Identity) is stored as a subscriber identifier ID that identifies the subscriber. Communication services via mobile communication networks such as LTE are provided by telecommunications carriers. The telecommunications carrier manages communication by the subscriber's device by associating the IMSI (subscriber identifier ID) with the telephone number. By installing the SIM, the NAS device 10 and the communication terminal device 20 can communicate with each other via the mobile communication network. In the following description, a communication service via a mobile communication network such as LTE will be simply referred to as a communication service.

In the following description, the subscriber identifier ID of the SIM mounted on the NAS device 10 is also described as NAS identifier ID1. Further, the subscriber identifier ID of the SIM mounted on the communication terminal device 20 is also described as the terminal identifier ID 2.

Further, in the following description, the wireless communication method when the NAS device 10 performs content communication with the communication terminal device 20 via the router RT is described as a "router method". Further, in the following description, the wireless communication method when the NAS device 10 performs content communication with the communication terminal device 20 via a mobile communication network such as LTE without going through the router RT is referred to as "LTE method". Also described.

Here, the user of the NAS device 10 may consider that it is preferable that the data managed by the NAS device 10 can be used only by the communication terminal device 20 used by the user or the communication terminal device 20 authorized by the user. .. However, not all users who use the NAS device 10 or the communication terminal device 20 are familiar with the settings of the NAS device 10 or the communication terminal device 20. For users who are not familiar with the settings, it may be difficult to prevent information leakage of data managed by the NAS device 10. The NAS device 10 of the present embodiment provides support to a user who is not familiar with the setting by setting the communication terminal device 20 that can use the information managed by the NAS device 10. Hereinafter, the specific functional configurations of the NAS device 10 and the communication terminal device 20 will be described.

&lt;Functional Configuration&gt; Hereinafter, the functional configuration of the NAS device 10 and the communication terminal device 20 will be described with reference to FIG. FIG. 2 is a diagram showing an example of the functional configuration of the NAS device 10 and the communication terminal device 20 according to the first embodiment. As described above, the router RT provides wireless communication by the router method.

&lt;Functional Configuration of NAS Device&gt; The NAS device 10 includes a Wi-Fi wireless communication unit 110, an LTE wireless communication unit 120, a CPU (Central Processing Unit) 130, and a storage unit 140 as its functional units. Each of these parts is connected to each other by an internal bus.

The Wi-Fi wireless communication unit 110 performs wireless communication with other communication devices by the Wi-Fi method. The LTE wireless communication unit 120 performs wireless communication with other communication devices by the LTE method.

The CPU 130 executes a program stored in the storage unit 140 and controls each unit of the NAS device 10. For example, the CPU 130 controls the Wi-Fi wireless communication unit 110 and the LTE wireless communication unit 120 to perform wireless communication with other devices.

Further, the CPU 130 includes a key generation unit 131, a registration unit 132, and a content communication determination unit 133 as its functional units.

Here, the NAS device 10 receives the permission request information RQ from the communication terminal device 20. The permission request information RQ is information indicating a permission request for requesting permission for content communication. The permission request information RQ includes identification information of the device (in this example, the communication terminal device 20) that transmits the permission request information RQ. The identification information included in the permission request information RQ is, for example, a subscriber identifier ID.

The key generation unit 131 determines whether or not the Wi-Fi wireless communication unit 110 has received the permission request information RQ from the communication terminal device 20. When the key generation unit 131 receives the permission request information RQ from the communication terminal device 20, the key information KY (in this example, the key) is based on the subscriber identifier ID of the communication terminal device 20 (terminal identifier ID 2 in this example). Generate information KY1). The key information KY is information used for content communication between the NAS device 10 and the communication terminal device 20, and is information paired with the subscriber identifier ID of the communication terminal device 20. As described above, the subscriber identifier ID is an identifier that identifies a subscriber of a communication service. Further, the key information KY generated by the key generation unit 131 is different information for each subscriber identifier ID. Therefore, the key information KY is information that can be used as an identifier that identifies a subscriber of the communication service.

The key generation unit 131 supplies the key information KY1 generated based on the terminal identifier ID 2 to the registration unit 132. Further, the key generation unit 131 transmits the generated key information KY1 to the communication terminal device 20. The key generation unit 131 transmits the key information KY1 from the Wi-Fi wireless communication unit 110 to the communication terminal device 20 via router-type wireless communication, for example.

The registration unit 132 registers the communication terminal device 20 that permits content communication with the NAS device 10 in the permission identification information WL1. Specifically, the registration unit 132 associates the terminal identifier ID2 included in the permission request information RQ received from the communication terminal device 20 with the key information KY1 generated by the key generation unit 131 and registers them in the permission identification information WL1. ..

When the communication terminal device 20 requests the NAS device 10 for content communication, the content communication determination unit 133 determines whether or not to perform content communication based on the permission identification information WL1. The Wi-Fi wireless communication unit 110 and the LTE wireless communication unit 120 perform content communication with the communication terminal device 20 based on the determination result of the content communication determination unit 133.

The storage unit 140 includes, for example, a hard disk drive, a ROM, or the like, and stores content information CT, permission identification information WL1, a program for controlling the NAS device 10, and the like.

&lt;Functional Configuration of Communication Terminal Device&gt; The communication terminal device 20 includes a Wi-Fi wireless communication unit 210, an LTE wireless communication unit 220, an operation unit 230, a display unit 240, a CPU 250, and a storage unit 260. Each of these parts is connected to each other by an internal bus. The Wi-Fi wireless communication unit 210 performs wireless communication with other communication devices by the Wi-Fi method. The LTE wireless communication unit 220 performs wireless communication with other communication devices by the LTE method.

The operation unit 230 includes an input device and accepts user operations. This input device includes a device for inputting character information such as a keyboard, a pointing device such as a mouse and a touch panel, a button, a dial, a joystick, a touch sensor, a touch pad, and the like. The display unit 240 is controlled by the CPU 250 and displays an image, a GUI (Graphical User Interface), and the like.

The CPU 250 executes a program stored in the storage unit 260 and controls each unit of the communication terminal device 20. For example, the CPU 250 controls the Wi-Fi wireless communication unit 210 and the LTE wireless communication unit 220 to perform wireless communication with other devices. Further, for example, the CPU 250 stores data such as images and sounds obtained by accessing the Internet via wireless communication in the storage unit 260. Further, the CPU 250 transmits these data stored in the storage unit 260 to the NAS device 10 via wireless communication. Further, the CPU 250 transmits a permission request requesting permission for content communication to the NAS device 10 via wireless communication. In this example, the CPU 250 causes the Wi-Fi wireless communication unit 210 to transmit the permission request information RQ to the NAS device 10 via router-type wireless communication.

The storage unit 260 includes, for example, a hard disk drive, a ROM, or the like, and stores a program for controlling the communication terminal device 20, key information KY1 received from the NAS device 10, and the like.

&lt;About the operation of the NAS device: Registration of the subscriber identifier&gt; The operation of the NAS device 10 will be described below with reference to FIG. FIG. 3 is a first flow chart showing an example of the operation of the NAS device 10 according to the first embodiment. Specifically, FIG. 3 is a flow chart showing an example of an operation in which the NAS device 10 registers the subscriber identifier ID of the communication terminal device 20. For example, when the NAS device 10 can communicate with the communication terminal device 20 by the router method (step S110; YES), the NAS device 10 registers the terminal identifier ID2 of the communication terminal device 20 and the key information KY1. Specifically, the Wi-Fi wireless communication unit 110 is permitted by the communication terminal device 20 between the time when the physical key provided in the NAS device 10 is pressed and the time when a predetermined time elapses (step S120; NO). The request information RQ (terminal identifier ID2) is received (step S130). The key generation unit 131 generates the key information KY1 paired with the terminal identifier ID 2 based on the received permission request information RQ (step S140). Further, the key generation unit 131 transmits the key information KY1 from the Wi-Fi wireless communication unit 110 to the communication terminal device 20 by router-type wireless communication (step S150).

The registration unit 132 associates the received terminal identifier ID2 with the key information KY1 and registers it in the permission identification information WL1 (step S160). Here, when the NAS device 10 cannot communicate with the communication terminal device 20 by the router method (step S110; NO), the NAS device 10 does not register the terminal identifier ID2 and the key information KY1. Further, when a predetermined time elapses (step S120; YES) between the time when the physical key included in the NAS device 10 is pressed and the time when the permission request information RQ is received, the NAS device 10 has the terminal identifier ID 2 and the key information. Do not register with KY1.

The details of the permission identification information WL1 will be described below with reference to the figure. FIG. 4 is a table showing an example of the permission identification information WL1 according to the first embodiment. As shown in FIG. 4, in this example, the terminal identifier ID2 of the communication terminal device 20 used by the user and the key information KY1 paired with the terminal identifier ID2 are associated and registered in the permission identification information WL1. For example, of the terminal identifier ID2 included in the permission identification information WL1 and the key information KY1, the key information KY1 is information used for determining whether or not the content communication of the router method is possible, and the terminal identifier ID2 is the LTE method. This is information used to determine whether or not content communication is possible.

&lt;About the operation of the NAS device: Judgment of content communication (in the case of the router method)&gt; The operation of the NAS device 10 will be described below with reference to FIG. FIG. 5 is a second flow chart showing an example of the operation of the NAS device 10 according to the first embodiment. Specifically, FIG. 5 is a flow chart showing an example of an operation in which the NAS device 10 performs content communication by router-type communication. The Wi-Fi wireless communication unit 110 receives a content communication request from the communication terminal device 20 to the NAS device 10 by router-type wireless communication (step S210). Here, when the communication terminal device 20 requests the NAS device 10 for content communication, the communication terminal device 20 transmits the key information KY1 to the NAS device 10. The content communication determination unit 133 determines whether or not to perform content communication based on the permission identification information WL1 (step S220). When the key information KY1 received from the communication terminal device 20 is registered in the permission identification information WL1 (step S220; YES), the content communication determination unit 133 determines that the content communication with the communication terminal device 20 is performed (step). S230). The Wi-Fi wireless communication unit 110 performs content communication with the communication terminal device 20 via router-type wireless communication based on the determination result of the content communication determination unit 133. Further, the content communication determination unit 133 determines that the content communication with the communication terminal device 20 is not performed when the key information KY1 received from the communication terminal device 20 is not registered in the permission identification information WL1 (step S220; NO). (Step S240).

When requesting content communication from the NAS device 10 by router-type wireless communication, the communication terminal device 20 may transmit the terminal identifier ID 2 instead of the key information KY1. In this case, the content communication determination unit 133 determines whether or not the content communication with the communication terminal device 20 is possible based on whether or not the terminal identifier ID 2 is registered in the permission identification information WL1. Further, when the communication terminal device 20 requests the NAS device 10 for content communication by router-type wireless communication, the communication terminal device 20 may transmit the key information KY1 and the terminal identifier ID2. In this case, the content communication determination unit 133 can perform content communication with the communication terminal device 20 based on whether or not at least one of the terminal identifier ID 2 and the key information KY1 is registered in the permission identification information WL1. To judge.

&lt;About the operation of the NAS device: Judgment of content communication (in the case of LTE method)&gt; The operation of the NAS device 10 will be described below with reference to FIG. FIG. 6 is a third flow chart showing an example of the operation of the NAS device 10 according to the first embodiment. Here, an outline of a session constructed when the NAS device 10 and the communication terminal device 20 communicate with each other by LTE wireless communication will be described. The signaling server SSV manages the sessions held between the NAS device 10 and the communication terminal device 20. Specifically, the signaling server SSV can communicate with the NAS device 10, the communication terminal device 20, and the push server PSV. The signaling server SSV performs signaling processing for constructing a communication session with the NAS device 10 when a communication request is received from the communication terminal device 20. This signaling server SSV receives terminal information from the communication terminal device 20. This terminal information includes the terminal identifier ID 2 that identifies the communication terminal device 20. The signaling server SSV builds a session between the communication terminal device 20 that transmitted the communication start request and the NAS device 10 in response to the session start request transmitted by the communication terminal device 20 based on the terminal information. .. In addition, the push server PSV uses push technology to push the telephone number of the requesting communication terminal device 20 to the requesting NAS device 10 when the signaling server SSV requests the requesting NAS device 10 to start session construction. Send to device 10. This push technology is a technology for push-delivering a communication request to the communication terminal device 20 from the server device side (in this example, the signaling server SSV and the push server PSV side) using an IP address. In the following description, transmitting information by push technology is also described as simply pushing information. Hereinafter, the operation in which the NAS device 10 performs content communication with the communication terminal device 20 via a session will be described with reference to FIG.

The requesting communication terminal device 20 sends a session construction request to the signaling server SSV (step S310). The session construction request includes the terminal identifier ID 2 (telephone number) and IP address of the communication terminal device 20 on the transmission request side and the NAS identifier ID 1 (telephone number) of the NAS device 10 on the requested side.

Next, when the signaling server SSV receives the session construction request transmitted by the communication terminal device 20, it transmits the session construction information to the push server PSV (step S320). This session construction information includes the telephone number of the communication terminal device 20 on the requesting side and the push ID. At this time, the signaling server SSV acquires the push ID by searching the registration information using the telephone number of the NAS device 10 on the requested side as a search key.

Here, the signaling server SSV stores the telephone numbers of the NAS device 10 and the communication terminal device 20, the terminal model name, the push ID, and the application version as registration information. Here, the push ID is identification information that identifies an application that supports content communication that operates on the NAS device 10 and the communication terminal device 20. Therefore, the push ID acquired by searching the registration information using the telephone number of the NAS device 10 on the requested side as a search key corresponds to the application used in the NAS device 10 on the requested side.

When the push server PSV receives the session construction information transmitted from the signaling server SSV, it pushes the content communication request to the NAS device 10 on the requested side based on the push ID included in the session construction information. (Step S330). The information pushed by the push server PSV at this time includes the telephone number of the communication terminal device 20 on the requesting side.

When the content communication determination unit 133 included in the NAS device 10 on the requested side is pushed, is the terminal identifier ID2 (telephone number) of the communication terminal device 20 on the requested side registered in the permission identification information WL1? Determine if not (step S340). When the NAS device 10 on the requested side determines that the terminal identifier ID2 (telephone number) of the communication terminal device 20 on the receiving side is registered in the permission identification information WL1 (step S340; YES), Proceed to step S350. On the other hand, when the content communication determination unit 133 determines that the terminal identifier ID2 (telephone number) of the communication terminal device 20 on the receiving request side is not included in the permission identification information WL1 (step S340; NO), communication is performed. The process ends without performing content communication with the terminal device 20.

Next, the NAS device 10 on the requested side transmits the session construction approval information to the signaling server SSV (step S350). This session construction approval information includes the telephone number, IP address, and port number of the NAS device 10 on the requested side. Next, when the signaling server SSV receives the session construction approval information transmitted from the NAS device 10 on the requested side, the signaling server SSV builds a session between the communication terminal device 20 on the requesting side and the NAS device 10 on the requested side. Then (step S360), the session construction process ends. Specifically, in step S360, the signaling server SSV transmits the IP address and port number of the NAS device 10 on the requested side transmitted in step S350 to the communication terminal device 20 on the requesting side. Next, the requesting communication terminal device 20 transmits the IP address and port number of the requesting communication terminal device 20 to the signaling server SSV. When the signaling server SSV receives the IP address and port number of the communication terminal device 20 on the requesting side, it transmits the received IP address and port number to the NAS device 10 on the requested side. As a result, the communication terminal device 20 on the requesting side acquires the IP address and port number of the NAS device 10 on the requested side. Further, the NAS device 10 on the requested side acquires the IP address and port number of the communication terminal device 20 on the requesting side. That is, the NAS device 10 and the communication terminal device 20 mutually acquire the IP address and port number of the information sharing partner. When the session construction process is completed, the LTE wireless communication unit 120 of the NAS device 10 and the LTE wireless communication unit 220 of the communication terminal device 20 perform content communication via LTE wireless communication (step S370).

&lt;Summary of the First Embodiment&gt; As described above, in the management device of the present embodiment (NAS device 10 in this example), the key generation unit 131 is the terminal of the communication terminal device 20 for transmitting the permission request information RQ. Generate key information KY1 paired with identifier ID2. The registration unit 132 associates the terminal identifier ID2 with the key information KY1 and registers them in the permission identification information WL1. The content communication determination unit 133 determines whether or not to perform content communication with the communication terminal device 20 based on the permission identification information WL1. The Wi-Fi wireless communication units 110 and 120 perform content communication with the communication terminal device 20 based on the determination result of the content communication determination unit 133. Therefore, according to the NAS device 10 of the present embodiment, even if the user is not good at setting the NAS device 10 or the communication terminal device 20, the user registers the communication terminal device 20 that allows content communication with the NAS device 10. can do. That is, according to the NAS device 10 of the present embodiment, it is possible to support the setting related to the sharing of the content information CT stored in the NAS device 10. As a result, only the communication terminal device 20 for which content communication is permitted can access the content information CT of the NAS device 10.

Here, the owner of the NAS device 10 and the user of the communication terminal device 20 may be the same. In addition, the user may cancel the communication service of the communication terminal device 20. In this case, the terminal identifier ID2 (telephone number) used by the communication terminal device 20 cannot be used after the communication service is canceled. In other words, the communication terminal device 20 cannot transmit the terminal identifier ID 2 when requesting content communication from the NAS device 10. For example, when only the terminal identifier ID2 is stored in the permission identification information WL1, the communication terminal device 20 cannot transmit the terminal identifier ID2 when requesting the content communication from the NAS device 10, so that the NAS device 10 Cannot perform content communication with. In this regard, according to the NAS device 10 of the present embodiment, the key information KY1 paired with the terminal identifier ID2 is stored in the permission identification information WL1. As a result, the NAS device 10 of the present embodiment is a NAS even after the communication terminal device 20 cancels the communication service by transmitting the key information KY1 when the communication terminal device 20 requests content communication. Content communication can be performed with the device 10. In this case, the content communication between the NAS device 10 and the communication terminal device 20 is performed via router-type wireless communication.

Further, the content communication determination unit 133 included in the NAS device 10 of the present embodiment determines that the content communication is performed with the communication terminal device 20 in which either the terminal identifier ID 2 or the key information KY1 is registered in the permission identification information WL1. It is determined that the content communication is not performed with the communication terminal device 20 in which the terminal identifier ID2 and the key information KY1 are not registered in the permission identification information WL1. Therefore, according to the NAS device 10 of the present embodiment, it is possible to prevent the communication terminal device 20 and the NAS device 10 from which the content communication is permitted to perform the content communication. That is, according to the NAS device 10 of the present embodiment, it is possible to prevent the communication terminal device 20 that does not allow content communication and the NAS device 10 from performing content communication.

In the above description, when the NAS device 10 and the communication terminal device 20 perform content communication by the LTE method, the case where a session is constructed by pushing using the push server PSV has been described, but the present invention is not limited to this. .. For example, the NAS device 10 and the communication terminal device 20 may form a session by a method using SMS (Short Message Service). In this case, the communication terminal device 20 transmits a message indicating the terminal identifier ID 2 (in this example, the telephone number of the communication terminal device 20) to the NAS device 10 by SMS as a request for content communication. When the telephone number of the communication terminal device 20 shown in the message received from the communication terminal device 20 is registered in the permission identification information WL1, the NAS device 10 tells the signaling server SSV the NAS device 10 and the communication terminal device 20. Send session construction approval information with.

[Second Embodiment]

Hereinafter, the second embodiment of the present invention will be described with reference to the drawings. Here, the user of the NAS device 10 may want to share the data stored in the NAS device 10 with others. In addition, the user may want to share the information only with others authorized by the user. In the second embodiment, a case where the communication terminal device 20 used by another person who allows the user to communicate the content and the NAS device 10 communicate with the content will be described. The same components as those in the first embodiment described above are designated by the same reference numerals and the description thereof will be omitted.

FIG. 7 is a diagram showing an outline of the NAS device 10 and the communication terminal device 20 according to the second embodiment. In the following description, the communication terminal device 20 used by the user who is the owner of the NAS device 10 (hereinafter, parent user) is described as the parent communication terminal device 20-P, and is described as another person other than the user (hereinafter, child user). The communication terminal device 20 used by is described as a child communication terminal device 20-C. In addition, the subscriber identifier ID of the SIM mounted on the parent communication terminal device 20-P is described as the parent terminal identifier ID2-P, and the subscriber identifier ID of the SIM mounted on the child communication terminal device 20-C is described. Describe as child terminal identifier ID2-C. When the parent communication terminal device 20-P and the child communication terminal device 20-C are not distinguished, they are collectively referred to as the communication terminal device 20. When the parent user and the child user are not distinguished, they are collectively referred to as a user. Further, in this example, the permission identification information WL2 is stored in the NAS device 10. In the permission identification information WL2, the parent terminal identifier ID2-P of the parent communication terminal device 20-P and the parent terminal key information KYP paired with the parent terminal identifier ID2-P are registered in advance. Hereinafter, a specific functional configuration relating to permission of content communication between the child communication terminal device 20-C1 and the NAS device 10 in which the parent communication terminal device 20-P has the child terminal identifier ID2-C1 will be described.

&lt;Functional Configuration&gt; Hereinafter, the functional configuration of the NAS device 10 and the communication terminal device 20 will be described with reference to FIG. FIG. 8 is a diagram showing an example of the functional configuration of the NAS device 10 and the communication terminal device 20 according to the second embodiment. As described above, the router RT provides wireless communication by the router method.

&lt;Functional Configuration of NAS Device&gt; The NAS device 10 includes a Wi-Fi wireless communication unit 110, an LTE wireless communication unit 120, a storage unit 140, and a CPU 150 as its functional units. Each of these parts is connected to each other by an internal bus.

The CPU 150 includes a key generation unit 131, a registration unit 132, a content communication determination unit 133, and an instruction unit 134 as its functional units. As described above, the NAS device 10 (Wi-Fi wireless communication unit 110) receives the permission request information RQ requesting permission for content communication from the child communication terminal device 20-C. The instruction unit 134 determines whether or not the Wi-Fi wireless communication unit 110 has received the permission request information RQ from the child communication terminal device 20-C. When the instruction unit 134 receives the permission request information RQ from the child communication terminal device 20-C, the instruction unit 134 instructs the parent communication terminal device 20-P to transmit the communication permission information CA. The communication permission information CA is information indicating whether or not the parent user permits content communication between the child communication terminal device 20-C and the NAS device 10 that have transmitted the permission request information RQ. Specifically, the instruction unit 134 transmits the instruction information DR indicating the transmission instruction of the communication permission information CA to the parent communication terminal device 20-P by router-type wireless communication.

Here, the instruction information DR includes identification information of a device (in this example, the child communication terminal device 20-C1) that transmits the permission request information RQ. The identification information is, for example, a subscriber identifier ID. The instruction unit 134 transmits the child terminal identifier ID2-C (in this example, the child terminal identifier ID2-C1) of the child communication terminal device 20-C that has transmitted the permission request information RQ as the instruction information DR.

Hereinafter, the details of the parent communication terminal device 20-P transmitting the communication permission information CA to the NAS device 10 will be described with reference to FIG. FIG. 9 is a diagram showing an example of the display unit 240 when acquiring the communication permission information CA according to the second embodiment. As shown in FIG. 9, the display unit 240 included in the parent communication terminal device 20-P informs the parent user of the child communication terminal device 20-C1 and the NAS device 10 in response to receiving the instruction information DR from the NAS device 10. Display a screen asking for input as to whether or not to allow content communication between. On the screen of the parent communication terminal device 20-P, for example, "Do you want to allow the access of to the NAS?" Is displayed. In Δ, the child terminal identifier ID2-C1 (telephone number) of the child communication terminal device 20-C1 is indicated based on the instruction information DR. The parent user inputs to the operation unit 230 an operation indicating that the content communication between the child communication terminal device 20-C1 and the NAS device 10 is permitted or not permitted. The parent communication terminal device 20-P detects the operation input to the operation unit 230. The parent communication terminal device 20-P transmits the communication permission information CA indicated by the operation input to the operation unit 230 to the NAS device 10 via router-type wireless communication.

If the telephone number (child terminal identifier ID2-C1) of the child communication terminal device 20-C1 is stored in advance in the telephone directory function of the parent communication terminal device 20-P, indicates the instruction information DR. Based on this, the name of the child user who uses the child communication terminal device 20-C1 may be displayed. If the child terminal identifier ID2-C1 includes the device name of the child communication terminal device 20-C1, the device name of the child communication terminal device 20-C1 is displayed in based on the instruction information DR. May be done.

Returning to FIG. 8, the key generation unit 131 generates the child terminal key information KYC based on the child terminal identifier ID2-C included in the permission request information RQ transmitted by the child communication terminal device 20-C. The child terminal key information KYC is information used for content communication between the NAS device 10 and the child communication terminal device 20-C, and is the child terminal identifier ID2-C of the child communication terminal device 20-C. This is paired information. The key generation unit 131 supplies the generated child terminal key information KYC (in this example, the child terminal key information KYC1) to the registration unit 132. Further, the key generation unit 131 transmits the generated child terminal key information KYC to the child communication terminal device 20-C (in this example, the child communication terminal device 20-C1). For example, the key generation unit 131 transmits the child terminal key information KYC1 from the Wi-Fi wireless communication unit 110 to the child communication terminal devices 20-C1 via router-type wireless communication.

The registration unit 132 acquires the communication permission information CA received by the Wi-Fi wireless communication unit 110 from the parent communication terminal device 20-P. The registration unit 132 registers the child terminal identifier ID2-C of the child communication terminal device 20-C in the permission identification information WL based on the communication permission information CA. The registration unit 132 receives the child terminal identifier ID2-C included in the permission request information RQ received from the child communication terminal device 20-C1 according to the communication permission information CA received from the parent communication terminal device 20-P (in this example, the registration unit 132). , Child terminal identifier ID2-C1) and child terminal key information KYC (child terminal key information KYC1 in this example) generated by the key generator 131 are associated with permission identification information WL (permission identification information WL2 in this example). ).

When the parent communication terminal device 20-P and the child communication terminal device 20-C request the NAS device 10 for content communication, the content communication determination unit 133 requests permission identification information WL (in this example, permission identification). Determine whether to perform content communication based on the information WL2). The Wi-Fi wireless communication unit 110 and the LTE wireless communication unit 120 perform content communication with the parent communication terminal device 20-P and the child communication terminal device 20-C based on the determination result of the content communication determination unit 133.

The storage unit 140 includes, for example, a hard disk drive, a ROM, or the like, and stores content information CT, permission identification information WL (permission identification information WL2 in this example), a program for controlling the NAS device 10, and the like. ..

&lt;Functional configuration of communication terminal device&gt; The storage unit 260 included in the parent communication terminal device 20-P stores the parent terminal key information KYP and the like received from the NAS device 10. Further, the storage unit 260 included in the child communication terminal device 20-C stores the child terminal key information KYC and the like received from the NAS device 10. Since the other functional configurations of the parent communication terminal device 20-P and the child communication terminal device 20-C are the same as those of the communication terminal device 20 described above, the description thereof will be omitted.

&lt;About the operation of the NAS device: Registration of the subscriber identifier&gt; The operation of the NAS device 10 will be described below with reference to FIG. FIG. 10 is a first flow chart showing an example of the operation of the NAS device 10 according to the second embodiment. Specifically, FIG. 10 is a flow chart showing an example of an operation in which the NAS device 10 registers the child terminal identifier ID2-C1 of the child communication terminal device 20-C1. In response to receiving the permission request information RQ from the child communication terminal device 20-C1 (step S410; YES), the instruction unit 134 transmits the instruction information DR to the parent communication terminal device 20-P (step S420). Further, the NAS device 10 waits until the permission request information RQ is received from the child communication terminal device 20-C1 (step S410; NO).

For example, when the NAS device 10 has one terminal identifier ID 2 registered in the permission identification information WL2, the NAS device 10 recognizes the communication terminal device 20 having the terminal identifier ID 2 as the parent communication terminal device 20-P. For example, the NAS device 10 recognizes the communication terminal device 20 having a subscriber identifier ID other than the subscriber identifier ID registered in the permission identification information WL2 as the child communication terminal device 20-C1, and the child communication terminal device 20. -When the permission request information RQ is received from C1, the instruction information DR is transmitted to the parent communication terminal device 20-P.

Hereinafter, the details of the permission identification information WL2 will be described with reference to FIG. FIG. 11 is a table showing an example of the permission identification information WL2 according to the second embodiment. As shown in FIG. 11A, the permission identification information WL2 is registered in advance in association with the parent terminal identifier ID2-P possessed by the parent communication terminal device 20-P and the parent terminal key information KYP.

Returning to FIG. 10, the NAS device 10 receives the communication permission information CA transmitted by the parent communication terminal device 20-P (step S430). When the registration unit 132 indicates that the received communication permission information CA permits content communication between the child communication terminal device 20-C1 and the NAS device 10 (step S440; YES), the key generation unit 131 receives. Generate the child terminal key information KYC1 that pairs with the child terminal identifier ID2-C1 (step S450). Further, the key generation unit 131 transmits the child terminal key information KYC1 from the Wi-Fi wireless communication unit 110 to the child communication terminal device 20-C1 (step S460).

The registration unit 132 associates the received child terminal identifier ID2-C1 with the child terminal key information KYC1 and registers it in the permission identification information WL2 (step S470). Here, when the NAS device 10 indicates that the received communication permission information CA does not allow content communication between the child communication terminal device 20-C1 and the NAS device 10 (step S440; NO), the child terminal identifier ID2 -Do not register C1 and child terminal key information KYC1.

As shown in FIG. 11 (B), when the communication permission information CA indicates that the content communication between the child communication terminal device 20-C1 and the NAS device 10 is permitted, the permission identification information WL2 is set in the child communication terminal device. The child terminal identifier ID2-C1 of 20-C1 and the child terminal key information KYC1 are registered in association with each other.

In the above description, the case where only the information related to the parent communication terminal device 20-P (in this example, the parent terminal identifier ID2-P and the parent terminal key information KYP) is registered in the permission identification information WL2 has been described. Not limited to this. The permission identification information WL2 includes, for example, information on the parent communication terminal device 20-P and the child communication terminal device 20-C for which content communication has already been permitted from the parent communication terminal device 20-P (for example, the child terminal identifier ID2). -C1 and child terminal key information KYC1) may be registered (for example, the state shown in Fig. 11 (B)). In this case, the instruction unit 134 newly transmits the permission request information RQ to the child communication terminal device 20-C (hereinafter, child communication terminal device 20-C2) subscriber identifier ID (hereinafter, child terminal identifier ID2-C2). Is registered in the permission identification information WL2. When the child terminal identifier ID2-C2 is not registered in the permission identification information WL2, the instruction unit 134 transmits the instruction information DR to the parent communication terminal device 20-P. Further, when the registration unit 132 indicates that the communication permission information CA permits content communication between the child communication terminal device 20-C2 and the NAS device 10, the child terminal identifier ID2-C2 and the child terminal identifier ID2- Register the child terminal key information KYC2 paired with C2 in the permission identification information WL2. As a result, the permission identification information WL2 includes the parent terminal identifier ID2-P, the parent terminal key information KYP paired with the parent terminal identifier ID2-P, the child terminal identifier ID2-C1, and the child terminal identifier ID2-C1. The child terminal key information KYC1 that forms a pair, the child terminal identifier ID2-C2, and the child terminal key information KYC2 that forms a pair with the child terminal identifier ID2-C2 are registered (for example, the state shown in FIG. 11 (C)).

Hereinafter, whether or not the NAS device 10 performs content communication with the child communication terminal device 20-C1 in response to the child communication terminal device 20-C1 requesting the NAS device 10 for content communication. Since the configuration for determining the above is the same as the configuration described above, the description thereof will be omitted.

&lt;Summary of the Second Embodiment&gt; As described above, in the management device of the present embodiment (NAS device 10 in this example), the key generation unit 131 transmits the permission request information RQ to the child communication terminal device 20-. Generates the child terminal key information KYC that pairs with the child terminal identifier ID2-C of C. When the first communication terminal device (parent communication terminal device 20-P in this example) permits content communication between the second communication terminal device (child communication terminal device 20-C in this example) and the NAS device 10. The registration unit 132 assigns the child terminal identifier ID2-C of the child communication terminal device 20-C that transmits the permission request information RQ and the child terminal key information KYC paired with the child terminal identifier ID2-C to the permission identification information WL2. sign up. The content communication determination unit 133 performs content communication with the child communication terminal device 20-C based on whether or not the child terminal identifier ID2-C of the child communication terminal device 20-C is registered in the permission identification information WL2. Determine whether to do it. The Wi-Fi wireless communication unit 110 and the LTE wireless communication unit 120 perform content communication with the child communication terminal device 20-C based on the determination result of the content communication determination unit 133. Therefore, according to the NAS device 10 of the present embodiment, even if the user is not good at setting the NAS device 10 and the communication terminal device 20, the child communication terminal device 20-that allows the user to communicate with the NAS device 10 in content. C can be registered. That is, according to the NAS device 10 of the present embodiment, it is possible to support the setting related to the sharing of the content information CT stored in the NAS device 10. As a result, the child communication terminal device 20-C to which the content communication is permitted can access the content information CT of the NAS device 10.

Further, in the NAS device 10 of the present embodiment, the child communication terminal device 20-C cancels the communication service by transmitting the child terminal key information KYC when the child communication terminal device 20-C requests content communication. Even after that, content communication can be performed with the NAS device 10. In this case, the content communication between the NAS device 10 and the child communication terminal device 20-C is content communication via router-type wireless communication.

[Third Embodiment]

Hereinafter, a third embodiment of the present invention will be described with reference to the drawings. In the first embodiment and the second embodiment, a case where the registration unit 132 registers the subscriber identifier ID and the key information KY in the permission identification information WL has been described. In the third embodiment, a case where the registration unit 132 deletes the registration of the subscriber identifier ID and the key information KY registered in the permission identification information WL will be described. The same reference numerals will be given to the same configurations as those of the first embodiment and the second embodiment described above, and the description thereof will be omitted.

FIG. 12 is a flow chart showing an example of the operation of the NAS device 10 according to the third embodiment. The registration unit 132 determines whether the parent terminal identifier ID2-P of the parent communication terminal device 20-P cannot be used (step S510). When the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P (step S510; YES), the registration unit 132 registers the parent terminal identifier ID2-P registered in the permission identification information WL2. (Step S520). Further, when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P, the registration unit 132 deletes the registration of the child terminal identifier ID2-C registered in the permission identification information WL2 ( Step S530). The state in which the parent terminal device 20-P cannot use the parent terminal identifier ID2-P means that, for example, the parent terminal identifier ID2-P cannot be used when the user of the parent communication terminal device 20-P cancels the communication service. In some cases, or when the parent communication terminal device 20-P is not equipped with a SIM indicating the parent terminal identifier ID2-P. For example, the registration unit 132 causes the LTE wireless communication unit 120 to send an SMS for the telephone number indicated by the parent terminal identifier ID2-P registered in the permission identification information WL. If the SMS cannot be sent to the parent communication terminal device 20-P, the registration unit 132 determines that the parent terminal identifier ID2-P cannot be used.

In addition, the method of determining whether or not the parent terminal identifier ID2-P can be used is to use the information indicating that the parent terminal identifier ID2-P cannot be used from the parent communication terminal device 20-P instead of the method of sending SMS. It may be a configuration to be acquired. In this case, the parent communication terminal device 20-P has a function of transmitting information indicating that the parent terminal identifier ID2-P cannot be used to the NAS device 10 by operating the operation unit 230.

Hereinafter, the details of the permission identification information WL3 will be described with reference to FIG. FIG. 13 is a table showing an example of the permission identification information WL3 according to the third embodiment. The permission identification information WL3 is the permission identification information WL in which the registration unit 132 deletes the registration of the subscriber identifier ID and the key information KY included in the permission identification information WL2 based on the state of the parent terminal identifier ID2-P. is there. Specifically, FIG. 13 is a table showing the permission identification information WL that has been deregistered for the permission identification information WL2 shown in FIG. 11 (B). The registration unit 132 deletes the registration of the parent terminal identifier ID2-P included in the permission identification information WL2. Further, the registration unit 132 deletes the registration of the child terminal identifier ID2-C included in the permission identification information WL2. Here, the registration unit 132 does not delete the registration of the parent terminal key information KYP and the child terminal key information KYC even when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P. Therefore, the parent terminal key information KYP and the child terminal key information KYC are registered in the permission identification information WL3. The content communication determination unit 133 determines whether or not to perform content communication with the parent communication terminal device 20-P and the child communication terminal device 20-C based on the permission identification information WL3.

&lt;Summary of Third Embodiment&gt; As described above, the registration unit 132 included in the NAS device 10 of the present embodiment provides permission identification information when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P. Delete the registration of the parent terminal identifier ID2-P from the WL, and do not delete the registration of the parent terminal key information KYP. As a result, in the NAS device 10 of the present embodiment, when the parent communication terminal device 20-P requests content communication, the parent communication terminal device 20-P transmits the parent communication terminal device 20-P, so that the parent communication terminal device 20-P provides a communication service. Content communication can be performed with the NAS device 10 even after canceling the contract. In this case, the content communication between the NAS device 10 and the parent communication terminal device 20-P is performed via router-type wireless communication. Further, according to the NAS device 10 of the present embodiment, even a user who is not good at setting the NAS device 10 and the communication terminal device 20 cannot use the parent terminal identifier ID2-P from the permission identification information WL. You can unregister. That is, according to the NAS device 10 of the present embodiment, it is possible to support the setting related to the sharing of the content information CT stored in the NAS device 10 according to the usage state of the parent communication terminal device 20-P of the user.

Further, the registration unit 132 included in the NAS device 10 of the present embodiment deletes the registration of the child terminal identifier ID2-C from the permission identification information WL when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P. However, the registration of the child terminal key information KYC is not deleted. As a result, in the NAS device 10 of the present embodiment, when the child communication terminal device 20-C requests content communication, the child communication terminal device 20-C transmits the child communication terminal device 20-C, so that the child communication terminal device 20-C provides a communication service. Content communication can be performed with the NAS device 10 even after canceling the contract. In this case, the content communication between the NAS device 10 and the child communication terminal device 20-C is performed via router-type wireless communication. As a result, in the NAS device 10 of the present embodiment, when the parent communication terminal device 20-P cannot perform content communication by LTE wireless communication, the child communication terminal device 20-C also has content by LTE wireless communication. It is possible to make settings that prevent communication.

[Modification example]

Hereinafter, a modified example according to the third embodiment has been described with reference to the drawings. In the third embodiment, when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P, the registration unit 132 deletes the registration of the child terminal identifier ID2-C from the permission identification information WL, and the child terminal key information. The case where the KYC registration is not deleted was explained. In the modified example, when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P, the registration unit 132 deletes the registration of the child terminal identifier ID2-C and the child terminal key information KYC from the permission identification information WL. The case will be described.

Hereinafter, the details of the permission identification information WL4 will be described with reference to FIG. FIG. 14 is a table showing an example of the permission identification information WL4 according to the modified example. The permission identification information WL4 is the permission identification information WL in which the registration unit 132 deletes the registration of the subscriber identifier ID and the key information KY included in the permission identification information WL2 based on the state of the parent terminal identifier ID2-P. is there. Specifically, FIG. 14 is a table showing the permission identification information WL that has been deregistered for the permission identification information WL2 shown in FIG. 11 (B). As described above, when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P, the registration unit 132 deletes the registration of the parent terminal identifier ID2-P included in the permission identification information WL2. .. In addition, the registration unit 132 deletes the registration of the child terminal identifier ID2-C and the child terminal key information KYC included in the permission identification information WL2. Here, the registration unit 132 does not delete the registration of the parent terminal key information KYP even when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P. Therefore, the parent terminal key information KYP is registered in the permission identification information WL4.

&lt;Summary of modified example&gt; As described above, when the parent communication terminal device 20-P cannot use the parent terminal identifier ID2-P, the registration unit 132 included in the NAS device 10 of the modified example is parented from the permission identification information WL. Delete the registration of the terminal identifier ID2-P and do not delete the registration of the parent terminal key information KYP. As a result, the NAS device 10 of the present embodiment is set so that the child communication terminal device 20-C is not allowed to perform content communication when the parent communication terminal device 20-P cannot perform content communication by LTE wireless communication. It can be carried out.

The NAS device 10 is keyed by BLE (Bluetooth (registered trademark) Low Energy) or short-range wireless communication by infrared communication instead of the configuration in which the key information KY is transmitted to the communication terminal device 20 by router-type wireless communication. Information KY may be transmitted. In this case, the NAS device 10 and the communication terminal device 20 can perform short-range wireless communication by BLE or infrared communication between the NAS device 10 and the NAS device 10.

In the above-described embodiment and modified example, the Wi-Fi wireless communication unit 110 and the LTE wireless communication unit 120 are examples of the receiving unit. Further, in the above-described embodiment and modified example, the Wi-Fi wireless communication unit 110 and the LTE wireless communication unit 120 are examples of the communication unit. Further, in the above-described embodiment and modified example, the terminal identifier ID2 and the parent terminal identifier ID2-P are examples of the first identification information. Further, in the above-described embodiment and modified example, the key information KY1 and the parent terminal key information KYP are examples of the first key information. Further, in the above-described embodiment and modified example, the child terminal identifier ID2-C is an example of the second identification information. Further, in the above-described embodiment and modified example, the child terminal key information KYC is an example of the second key information.

Each part of the NAS device 10 and the communication terminal device 20 in each of the above embodiments may be realized by dedicated hardware, or may be realized by a memory and a microprocessor. May be good.

Each part of the NAS device 10 and the communication terminal device 20 is composed of a memory and a CPU (central processing unit), and a program for realizing the functions of each part of the NAS device 10 and the communication terminal device 20 is stored in the memory. The function may be realized by loading and executing in.

In addition, a program for realizing the functions of each part of the NAS device 10 and the communication terminal device 20 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into the computer system and executed. The processing may be performed by doing so. The term "computer system" as used herein includes hardware such as an OS and peripheral devices.

In addition, the "computer system" shall include the homepage providing environment (or display environment) if the WWW system is used. Further, the "computer-readable recording medium" refers to a portable medium such as a flexible disk, a magneto-optical disk, a ROM, or a CD-ROM, or a storage device such as a hard disk built in a computer system. Further, a "computer-readable recording medium" is a communication line for transmitting a program via a network such as the Internet or a communication line such as a telephone line, and dynamically holds the program for a short period of time. In that case, it also includes the one that holds the program for a certain period of time, such as the volatile memory inside the computer system that is the server or client. Further, the above-mentioned program may be a program for realizing a part of the above-mentioned functions, and may be a program for realizing the above-mentioned functions in combination with a program already recorded in the computer system.

Although the embodiments of the present invention have been described in detail with reference to the drawings, the specific configuration is not limited to this embodiment and may be appropriately modified without departing from the spirit of the present invention. it can. The configurations described in each of the above-described embodiments may be combined.

10 ... NAS device, 20 ... communication terminal device, 20-P ... parent communication terminal device, 20-C, 20-C1, 20-C2 ... child communication terminal device, 110 ... Wi -Fi wireless communication unit, 110, 210 ... Wi-Fi wireless communication unit, 120, 220 ... LTE wireless communication unit, 131 ... key generation unit, 132 ... registration unit, 133 ... content Communication judgment unit, 134 ... indicator, 140 ... storage unit, 260 ... storage unit, 230 ... operation unit, 240 ... display unit, CA ... communication permission information, CT .. .Content information, DR ... instruction information, ID ... subscriber identifier, ID1 ... NAS identifier, ID2 ... terminal identifier, ID2-P ... parent terminal identifier, ID2-C, ID2-C1 , ID2-C2 ... child terminal identifier, KY, KY1 ... key information, KYP ... parent terminal key information, KYC, KYC1, KYC2 ... child terminal key information, RQ ... permission request information, WL, WL1, WL2, WL3, WL4 ... Allow identification information