Abstract:
A portable terminal includes a function to detect its own location. The owner of such terminal registers in advance an area in which he expects to be for a given time slot as conditions for operation. The portable terminal verifies its location with respect to the operation conditions set by the owner, and where it is determined that the operation conditions are not met, the portable terminal disables itself, prohibiting its use. Where a pre-registered password is subsequently input, the portable terminal cancels this prohibition. Consequently, if the owner loses the portable terminal while away from home or the office, for example, a third party cannot operate the portable terminal, and moreover, unless the owner-registered password is input, the prohibition is not cancelled, thereby preventing disclosure of the data and other information stored in the portable terminal.

Description:
[0001]    The present application claims priority to Japanese Patent Application No. 2001-319736 filed Oct. 17, 2001, the entire content of which is hereby incorporated by reference.  
         BACKGROUND OF THE INVENTION  
         [0002]    1. Field of the Invention  
           [0003]    The present invention relates to a mobile terminal device such as a cellular phone, a personal computer or an image forming apparatus, as well as to a method to manage the operation of such terminal device.  
           [0004]    2. Description of the Related Art  
           [0005]    Terminal devices such as cellular phones and personal computers known in the conventional art are equipped with a security function by which to prevent third parties from using such devices without the owner&#39;s permission.  
           [0006]    For example, Japanese Laid-Open Patent Applications H11-184548, H9-167041 and H7-311715 disclose constructions that prohibit input or disable subsequent input when no operations or inputs are received for a certain period of time, and that cancel such input lock or disabled state when an appropriate password is input.  
           [0007]    In addition, Japanese Laid-Open Patent Application H11-110209 discloses a construction that includes an expiration for the password such that unless the password is periodically re-registered, the terminal device cannot be used on a continuous basis.  
           [0008]    Incidentally, a terminal device such as a cellular phone is often used by the owner during a business trip or while commuting, as well as at the regular place of use such as the office, for example, and when the terminal device is used during these occasions, the terminal device may be left on the train by the owner or stolen.  
           [0009]    However, because the conventional technologies referred to above take into consideration only the security applicable at the regular place of use, they cannot effectively deal with issues that arise when the terminal device becomes separated from the owner against his will. For example, if a third party who finds the terminal device operates it without the owner&#39;s permission, confidential information and other personal information stored in the memory of the terminal device may be revealed via such operation.  
         SUMMARY OF THE INVENTION  
         [0010]    A main object of the present invention is to provide a terminal device that can prevent the abuse thereof by a third party when it has become separated from the owner against his will, as well as a method to manage the operation of such terminal device.  
           [0011]    In order to attain these and other objects, according to one aspect of the present invention, the terminal device includes location detecting means that detects the location of the terminal device; determining means that determines whether or not the location detected by the location detecting means meets prescribed conditions; prohibiting means that prohibits the operation of the terminal device when the determining means determines that the prescribed conditions are not met; input means by which to input authentication information; and canceling means that cancels the prohibition imposed by the prohibiting means when the pre-registered authentication information is input via the input means while the operation of the terminal device is prohibited by the prohibiting means.  
           [0012]    Because the operation of this terminal device is prohibited when it is determined that the location thereof does not meet prescribed conditions, a third party is prevented from operating the terminal device even if it is lost or stolen, for example, so long as the location of the terminal device does not meet the prescribed conditions, and because the prohibition is not cancelled until the prescribed authentication information is input, disclosure of the data and other information stored in the terminal device is reliably prevented.  
           [0013]    According to another aspect of the present invention, the determining means includes transmitting means that transmits to an external device location information that indicates the location detected by the location detecting means; and receiving means that receives from the external device a return signal that indicates the result of comparison of the location information with the prescribed conditions.  
           [0014]    It is preferred that the prescribed conditions include conditions regarding the area covered by each base station as well as conditions regarding the activity schedule of the owner of the terminal device.  
           [0015]    The invention itself, together with further objects and attendant advantages, will best be understood by reference to the following detailed description taken in conjunction with the accompanying drawings.  
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0016]    [0016]FIG. 1 is an external perspective view of a cellular phone in which the terminal device pertaining to one embodiment of the present invention is applied;  
         [0017]    [0017]FIG. 2 is a drawing to explain the movement of the cellular phone;  
         [0018]    [0018]FIG. 3 is a block diagram showing the functional construction of the cellular phone;  
         [0019]    [0019]FIG. 4 is a flow chart showing the sequence of the operation management processes regarding the cellular phone;  
         [0020]    [0020]FIG. 5 is a block diagram showing the functional construction of the operation management system for a cellular phone pertaining to another embodiment of the present invention;  
         [0021]    [0021]FIG. 6 is a flow chart showing the sequence of the operation management processes regarding the cellular phone; and  
         [0022]    [0022]FIG. 7 is a flow chart showing another sequence of the operation management processes regarding the cellular phone. 
     
    
       [0023]    In the following description, like parts are designated by like reference numbers throughout the several drawings.  
       DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS  
       [0024]    An embodiment of the present invention is described below with reference to the drawings.  
         [0025]    [0025]FIG. 1 is an external perspective view of a cellular phone in which the terminal device pertaining to one embodiment of the present invention is applied. In this embodiment, a system that manages the operation of the cellular phone resides in the cellular phone.  
         [0026]    With reference to FIG. 1, 1 is the main unit of the terminal device, which is equipped with means to detect the location of the terminal device as described below.  
         [0027]    An antenna  2  is located on the top surface of the main unit  1 , and a display panel  3 , operation keys  4 , etc. are located on the front surface thereof. An external interface  5  is located on the bottom surface of the main unit  1 .  
         [0028]    The antenna  2  transmits radio waves to a relay base station R 1  (FIG. 2) that covers the current location while the terminal device is being used for communication such as a telephone conversation, and receives radio waves such as telephone signals from the relay base station R 1 .  
         [0029]    The display panel  3  comprises an LCD screen or an EL element, for example, and displays a screen by which to set operation conditions as those described below, a screen by which to communicate with an external device, a screen by which to specify a password comprising authentication information, a screen by which to input the password, etc.  
         [0030]    The operation keys  4  are used to perform various types of operations as well as to set operation conditions, specify a password and input the password.  
         [0031]    The external interface  5  is used when communication is to be performed using an external device such as a personal computer (not shown), in order to connect the terminal device to such external device.  
         [0032]    [0032]FIG. 2 is a drawing to explain the movement of the cellular phone A.  
         [0033]    The cellular phone A can carry out communication in certain ranges (areas) S 1 , S 2 , . . . Sn corresponding to relay base stations R 1 , R 2 , . . . Rn. Where the cellular phone A has moved from the area corresponding to a particular relay base station, such as from the area S 1  in which the cellular phone A can communicate with the relay base station R 1  to an adjacent area S 2 , the relay base station with which the cellular phone A can communicate changes to the relay base station R 2  that corresponds to the area S 2  to which it has moved.  
         [0034]    The detection as to the area in which the cellular phone A currently resides, i.e., the detection as to the location of the cellular phone A, can be made by measuring the intensity of the electric field or the like of the radio waves received by each base station, for example. Where the cellular phone A has moved from the area S 1  corresponding to the relay base station R 1  to an adjacent area S 2 , such movement is detected as well. Detection of the location is carried out at certain intervals in this embodiment.  
         [0035]    [0035]FIG. 3 is a block diagram showing the functional construction of the cellular phone A.  
         [0036]    With reference to FIG. 3, the cellular phone A includes a display/input unit  11 , an operation condition setting unit  12 , a transmitter/receiver  13  that transmits and receives radio waves to and from the relay base stations R 1 , R 2 , . . . Rn, a location information obtaining unit  14 , a condition verifying unit  15 , a timer  16 , an authentication information (password) input unit  17 , an operation controller  18 , and a clock circuit  19 .  
         [0037]    The display/input unit  11  includes the display panel  3 , the operation keys  4 , etc. By operating the operation keys  4 , the areas in which the cellular phone A is permitted to operate can be set and input, and furthermore, such information as the planned activity areas (locations) and times (time slots), which constitute the owner&#39;s activity schedule information, can also be input.  
         [0038]    The operation condition setting unit  12  comprises a prescribed area setting processor  121  and a condition setting processor  122 .  
         [0039]    Based on input via the operation keys  4 , the prescribed area setting processor  121  sets the areas S 1  and S 3 , for example, as the areas in which the operation of the cellular phone A is permitted. The condition setting processor  122  sets, based on input via the operation keys  4 , the owner&#39;s activity schedule in conjunction with the prescribed area setting processor  121 . In other words, among the specified areas S 1  and S 3 , it specifies the time slots of 9:00 a.m. to 10:00 a.m. for the area S 1 , and 3:00 p.m. to 5:00 p.m. for the area S 3 , for example, based on input via the operation keys  4 .  
         [0040]    The activity schedule information may comprise information regarding either planned activity areas or time slots. In addition, the input to the operation condition setting unit  12  is not limited to that made using the operation keys  4 . A method in which information is downloaded from the Internet may be used. Furthermore, the setting of the activity schedule may be made by having such setting linked with the scheduling function of the cellular phone A.  
         [0041]    The transmitter/receiver  13  performs communication with relay base stations via the antenna  2 .  
         [0042]    The location information obtaining unit  14  detects from the intensity of the radio waves received via the antenna  2  the relay base station area in which the cellular phone A is currently located. Incidentally, it is possible to further divide each area into smaller sections.  
         [0043]    In addition, location detection can be achieved not only based on the intensity of the radio waves received by the antenna  2 , but also by a GPS-based method if appropriate.  
         [0044]    The condition verifying unit  15  checks the current location of the cellular phone A against preset operation conditions and determines whether or not the location meets the conditions. Any method can be used for such verification (determination).  
         [0045]    The timer  16  is used in order to obtain the location information and conduct location verification on a periodic basis. The intervals set using the timer  16  can be freely changed by the owner. It is also acceptable if the intervals for the obtaining of location information or location verification are not set using the timer  16 , and instead, the time at which the cellular phone A has moved out of an area S 1 , S 2 , S 3  . . . Sn is determined and location verification is performed at such time.  
         [0046]    The password input unit  17  is used by the owner to input the pre-registered authentication information. The authentication information is input using the operation keys  4 .  
         [0047]    The operation controller  18  is equipped with an access prohibiting unit  181  and a prohibition cancellation unit  182 . The clock circuit  19  has a calendar function, and can track the current date and time.  
         [0048]    The access prohibiting unit  181  prohibits access to the memory when the condition verifying unit  15  determines that the current location information does not meet the conditions for operation, and the prohibition cancellation unit  182  cancels the prohibition when the password pre-registered by the owner is input.  
         [0049]    In other words, suppose that in the construction described above, the owner of the cellular phone A, based on his schedule, sets as the conditions for operation the area S 1 , which comprises planned activity data, in conjunction with the time slot 9:00 a.m. to 10:00 a.m. during which he will be in the area S 1 , and the area S 3  in conjunction with the time slot 3:00 p.m. to 5:00 p.m. during which he will be in the area S 3 .  
         [0050]    If the owner leaves home or the office with the cellular phone A, the current location of the cellular phone A is obtained and verification and determination by the condition verifying unit  15  are performed at certain intervals prompted by the timer  16 . While the cellular phone A is in the area S 1  during the 9:00 a.m.-10:00 a.m. time slot and is in the area S 3  during the 3:00 p.m.-5:00 p.m. time slot, the condition verifying unit  15  determines that the set conditions for operation are met by the location of the cellular phone A, and therefore the operation of the cellular phone A is not prohibited and the cellular phone A can be used normally.  
         [0051]    However, if the owner leaves the cellular phone A on the train while travelling and a third party finds it, leaves the area S 1  during the scheduled 9:00 a.m.-10:00 a.m. time slot and moves to the area S 2 , for example, the condition verifying unit  15  determines that the location of the cellular phone A does not meet the set conditions for operation.  
         [0052]    The cellular phone A that receives this determination result prohibits via the memory access prohibiting unit  181  access to the memory of the cellular phone A. Consequently, where the third party operates the cellular phone A with the intention of improperly using it, he cannot access the memory, thereby preventing disclosure in the data in the memory. The prohibition of access to the memory is cancelled only when the authentication information pre-registered by the owner is input.  
         [0053]    In this embodiment, because the cellular phone An itself carries out the verification operation described above, a server or similar external device is not required for the verification, resulting in a smaller capital investment expenditure.  
         [0054]    The sequence of the operation management processes performed by the cellular phone A will now be described with reference to the flow chart of FIG. 4.  
         [0055]    With reference to FIG. 4, counting by the timer  16  is begun in S 101  in order to obtain the current location of the cellular phone A and to perform the verification operation at certain intervals.  
         [0056]    When the passage of a prescribed time interval is detected by the timer  16  in S 102 , the location information obtaining unit  14  obtains the location information in S 103 , and at the same time, the condition verifying unit  15  reads the conditions for operation set by the operation conditions setting unit  12  (operation keys  4 , etc.).  
         [0057]    It is then determined in S 104  whether or not the information regarding the current location of the cellular phone A meets the conditions for operation (location and time). Where the location information does not meet the conditions for operation (determination in S 104  results in YES), input from an external source to the cellular phone A is prohibited. More specifically, access to the memory is prohibited. Where the location information meets the conditions for operation (determination in S 104  results in NO), the cellular phone A returns to S 101  without any further processing, whereby the state in which operation of the cellular phone A is enabled is maintained.  
         [0058]    Accordingly, where the owner is moving according to schedule while carrying the cellular phone A, the cellular phone A can be used normally, but if the cellular phone A is lost while it should be in the specified area S 1  or is stolen by a third party and moved outside the specified area, access to the memory is prohibited. Therefore, even if the third party operates the cellular phone A, he cannot access the memory and disclosure of the data therein is prevented.  
         [0059]    After access to the memory is prohibited, input of the registered password is requested in S 106 , whereby an input request screen is displayed on the display panel  3 .  
         [0060]    It is determined in S 107  whether or not the input password is the registered password. If it is the registered password (determination in S 107  results in YES), the prohibition of access to the memory is cancelled in S 108  and the entire routine comes to an end.  
         [0061]    Because the prohibition is cancelled when the registered password is input, as described above, even if the owner has to move to an unscheduled area, he can use the cellular phone A without any problems.  
         [0062]    If the input password is not the registered password (determination in S 107  results in NO), because erroneous input by the owner is a possibility, it is determined in S 109  whether or not the number of password input operations performed has exceeded the allowed maximum in order to determine whether or not to request another password input operation. Where the number of password input operations has not exceeded the allowed maximum (determination in S 109  results in NO), the cellular phone A returns to S 106  and requests input of the registered password once more. Where the number of password input operations has exceeded the allowed maximum (determination in S 109  results in YES), it is deemed that the many password input operations are not the result of the owner&#39;s erroneous input operations but the result of input by a third party, and the password input request is ended in S 110 , whereupon the entire routine is ended.  
         [0063]    Consequently, the risk that a third party will input the password and use the cellular phone A to which access to the memory has been prohibited is eliminated.  
         [0064]    Another embodiment of the present invention will now be described below with reference to the drawings.  
         [0065]    [0065]FIG. 5 is a block diagram showing the functional construction of the operation management system of a cellular phone A in which the terminal device pertaining to another embodiment of the present invention is applied. The same numbers are used for the identical or equivalent components as those shown in FIG. 3, and description thereof is omitted.  
         [0066]    With reference to FIG. 5, this management system includes a server  70  as an external device that can conduct wireless communication with the cellular phone A. The method of communication between the cellular phone A and the server  70  is not limited to the wireless method. Any communication method can be used, including wired communication or satellite communication.  
         [0067]    The cellular phone A includes a verification request unit  20  and a verification result receiving unit  21 , as well as the display/input unit  11 , the transmitter/receiver  13 , the location information obtaining unit  14 , the timer  16 , the authentication information (password) input unit  17 , and the operation controller  18 .  
         [0068]    The verification request unit  20  requests that the server  70  conduct verification and determination as to whether or not the current location meets the operation conditions. The verification request is made at certain intervals prompted by the timer  16  in the same manner as in the embodiment shown in FIGS. 1 through 4.  
         [0069]    The verification result receiving unit  21  receives a return signal indicating the verification result from the server  70  and forwards it to the operation controller  18 .  
         [0070]    On the other hand, the server  70  includes a verification request notification processor  71 , an operation condition setting unit  12 , a database  72 , a clock circuit  19 , a condition verifying unit  15 , and a verification result notification processor  73 .  
         [0071]    The verification request notification processor  71  receives a verification request signal from the cellular phone A and causes the condition verifying unit  15  to perform verification.  
         [0072]    The owner&#39;s schedule information and the specified area information are stored in the database  72 .  
         [0073]    The operation condition setting unit  12  sets operation conditions based on the information stored in the database  72 , while taking the owner&#39;s schedule into consideration. For example, it specifies the 9:00 a.m.-10:00 a.m. time slot for the area S 1  and the 3:00 p.m.-5:00 p.m. time slot for the area S 3 .  
         [0074]    The condition verifying unit  15  determines whether or not the location of the cellular phone A meets the operation conditions set by the operation condition setting unit  12  based on the location information obtained by the location information obtaining unit  14  and the time information obtained from the clock circuit  19 . The verification result notification processor  73  sends the result of the verification to the cellular phone A as a return signal.  
         [0075]    The sequence of the processes to prohibit access to the memory in the operation management system having the construction shown in FIG. 5 will now be described with reference to the flow chart of FIG. 6.  
         [0076]    &lt;Where Verification is Automatically Requested from Server&gt; 
         [0077]    With reference to FIG. 6, counting by the timer  16  is begun in S 201  in order to make a verification request at prescribed intervals.  
         [0078]    When the timer  16  thereafter detects that a certain period of time has elapsed in S 202 , the verification request unit  20  sends a verification request signal to the server  70  via the transmitter/receiver  13  and the antenna  2  in S 203 .  
         [0079]    On the side of the server  70 , the verification request notification processor  71  is activated upon the receipt of this request signal.  
         [0080]    The location of the cellular phone A is then detected by the location information obtaining unit  14  in S 204 , and location information indicating this location is sent to the server  70  via the transmitter/receiver  13  and the antenna  2 .  
         [0081]    On the side of the server  70 , the condition verifying unit  15  determines, based on the received location information for the cellular phone A, the time information from the clock circuit  19  and the operation conditions set by the operation condition setting unit  12 , whether or not the current location of the cellular phone A does not satisfy the operation conditions. The result of the verification (including whether or not password input is required) is sent by the verification result notification processor  73  to the cellular phone A as a return signal.  
         [0082]    In the cellular phone A, the verification result receiving unit  21  receives the return signal via the transmitter/receiver  13 , and determines in S 205  based on the return signal whether or not the current location does not satisfy the operation conditions. Where the current location does not satisfy the operation conditions (determination in S 205  results in YES), the operation controller  18  prohibits input from an external source to the cellular phone A in S 206 . More specifically, it prohibits access to the memory. Where the current location does not fall outside the operation conditions (determination in S 205  results in NO), operation of the cellular phone A is kept enabled and the cellular phone A returns to S 201 .  
         [0083]    Because of this memory access prohibition, if the cellular phone A is lost or stolen and moved outside the prescribed areas and operated by a third party, data disclosure is prevented.  
         [0084]    After access to the memory is prohibited, input of the registered password is requested in S 207 , whereupon an input request screen is displayed on the display panel  3 .  
         [0085]    It is determined in S 208  whether or not the input password is the registered password. If the input password is the registered password (determination in S 208  results in YES), the memory access prohibition is cancelled in S 209  and the entire routine comes to an end.  
         [0086]    Because the prohibition is cancelled when the registered password is input, as described above, even if the owner has to move to an unscheduled area, he can use the cellular phone A without any problems.  
         [0087]    If the input password is not the registered password (determination in S 208  results in NO), because erroneous input by the owner is a possibility, it is determined in S 210  whether or not the number of password input operations performed exceeded the allowed maximum in order to determine whether or not to request another password input operation. Where the number of password input operations did not exceed the allowed maximum (determination in S 210  results in NO), the cellular phone A returns to S 207  and requests input of the registered password once more. Where the number of password input operations exceeded the allowed maximum (determination in S 210  results in YES), it is deemed that the many password input operations are not the result of the owner&#39;s erroneous input operations but the result of input by a third party, and the password input request is ended in S 211 , whereupon the entire routine is ended.  
         [0088]    Consequently, the risk that a third party will input the password and use the cellular phone A to which access to the memory has been prohibited is eliminated.  
         [0089]    Furthermore, in this embodiment, because the determination as to whether or not the location of the cellular phone A meets the operation conditions is made on the side of the server  70 , the cellular phone A is freed from the burden of performing verification.  
         [0090]    &lt;Where Verification is Requested from Server  70  in Response to Operation of Cellular Phone A&gt; 
         [0091]    Referring to FIG. 7, it is determined in S 301  whether or not any input was made by the owner of the cellular phone A, i.e., whether power was turned ON or any input operations using the operation keys  4  were conducted, for example.  
         [0092]    Where input was made by the owner (determination in S 301  results in YES), the verification request unit  20  sends a verification request signal to the server  70  via the transmitter/receiver  13  and the antenna  2  in S 302 . On the side of the server  70 , the verification request notification processor  71  is activated in response to this request signal. Where there was no input by the owner (determination in S 301  results in NO), the verification request unit  20  stands by until an input operation is made. The password input operation described below is not deemed an input operation in S 301 .  
         [0093]    The location information obtaining unit  14  obtains location information in S 303 , and sends it to the server  70  via the transmitter/receiver  13  and the antenna  2 .  
         [0094]    On the side of the server  70 , the condition verifying unit  15  determines, based on the received location information for the cellular phone A, the time information from the clock circuit  19  and the operation conditions set by the operation condition setting unit  12 , whether or not the current location of the cellular phone A does not satisfy the operation conditions, and the verification result notification processor  73  sends the result of the verification (including whether or not password input is required) to the cellular phone A as a return signal.  
         [0095]    On the side of the cellular phone A, the verification result receiving unit  21  receives the return signal via the transmitter/receiver  13 , and determines based on the return signal whether or not the current location does not satisfy the operation conditions in S 304 . Where the current location does not satisfy the operation conditions (determination in S 304  results in YES), the operation controller  18  prohibits input from an external source to the cellular phone A in S 305 . More specifically, it prohibits access to the memory. Where the current location satisfies the operation conditions (determination in S 304  results in NO), operation of the cellular phone A is kept enabled and the cellular phone A returns to S 301 .  
         [0096]    Because of this memory access prohibition, if the cellular phone A is lost or stolen and moved outside the prescribed areas and operated by a third party, disclosure of data is prevented.  
         [0097]    After access to the memory is prohibited, input of the registered password is requested in S 306 , whereupon an input request screen is displayed on the display panel  3 .  
         [0098]    It is determined in S 307  whether or not the input password is the registered password. If the input password is the registered password (determination in S 307  results in YES), the memory access prohibition is cancelled in S 308  and the entire routine comes to an end.  
         [0099]    Because the prohibition is cancelled when the registered password is input, as described above, even if the owner has to move to an unscheduled area, he can use the cellular phone A without any problems.  
         [0100]    If the input password is not the registered password (determination in S 307  results in NO), because erroneous input by the owner is a possibility, it is determined in S 309  whether or not the number of password input operations performed exceeded the allowed maximum in order to determine whether or not to request another password input operation. Where the number of password input operations did not exceed the allowed maximum (determination in S 309  results in NO), the cellular phone A returns to S 306  and requests input of the registered password once more. Where the number of password input operations exceeded the allowed maximum (determination in S 309  results in YES), the many password input operations are deemed to be not the result of the owner&#39;s erroneous input operations but the result of input by a third party, and the password input request is ended in S 310 , whereupon the entire routine is ended.  
         [0101]    Consequently, the risk that a third party will input the password and use the cellular phone A to which access to the memory has been prohibited is eliminated.  
         [0102]    In the embodiment described above, the determination regarding whether or not the current location falls within the prescribed area is made while taking into consideration the schedule information for the owner of the cellular phone A, but it is also acceptable if the schedule information is not taken into consideration.  
         [0103]    Where a server  70  is used, it does not matter whether the constituent elements are included in the cellular phone A or the server  70  as long as no problems arise in the system as a whole. For example, the server  70  may be equipped with a function to issue to the access prohibiting unit  181  an instruction to prohibit access to the memory.  
         [0104]    In addition, each of the above embodiments was described using a cellular phone A as an example of the terminal device, but the terminal device is not limited to a cellular phone, and may comprise a portable personal computer or a mobile image forming apparatus such as a copying machine, a facsimile or a printer. In the case of a portable personal computer, files created using application software are stored in the memory, and most of these files are confidential. Therefore, control is needed to prevent the reading of at least the files stored in the memory if the operation conditions are not met through verification. For example, operations performed in order to input the authentication information should be allowed, while other types of operations should be prohibited. In the case of a copying machine, facsimile or printer, because there is a slim chance that data may remain in the memory, where the operation conditions are not met through verification, image forming operations such as printing operations should be prohibited.  
         [0105]    Although the present invention has been fully described by way of examples with reference to the accompanying drawings, it is to be noted that various changes and modifications will be apparent to those skilled in the art. Therefore, unless such changes and modification depart from the scope of the present invention, they should be construed as being included therein.