JP2012108698A - Portable terminal, lock control system, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable terminal which has low leakage possibility of a forcible unlocking method.SOLUTION: A portable terminal 100 includes a user operation part 110 which outputs a lock state confirmation signal when the portable terminal 100 is actuated in a special mode; a lock part 130 which detects whether the portable terminal 100 is locked when the lock state confirmation signal is acquired, outputs a lock signal when the portable terminal is locked, and unlocks the portable terminal 100 when an unlock signal is acquired; authentication means 141 of outputting an authentication request signal to external equipment 300 when a lock signal is acquired; master authentication means 143 of outputting a position information acquisition signal when master authentication information is acquired from the external equipment 300, performing authentication processing when a position authentication success signal is acquired, and outputting an unlock signal when the authentication is successful; position information authentication means 144 of performing authentication processing when position information and a position list are acquired, and outputting a position authentication success signal when the authentication is successful; and a communication part 150 which outputs the position information and position list when a position information acquisition signal is acquired.

Description

  The present invention relates to a mobile terminal, a lock control system, and a program capable of forcibly releasing the lock of the mobile terminal that is applied to prevent unauthorized use by a third party.

  Conventionally, some portable terminals are provided with locking means. Locks provided by this locking means include those that lock the mobile terminal itself so as not to accept key input operations to the mobile terminal, and those that disable access to specific functions provided in the mobile terminal. is there. These locks are usually provided with authentication means such as a password. When the user sets a password by himself and locks the portable terminal, the portable terminal can be unlocked by inputting the password set by the user. However, if the user forgets the password set by the user, the mobile terminal cannot be unlocked, and the locked mobile terminal and various functions of the locked mobile terminal cannot be used. . Accordingly, a call service provider or the like may take a lock forcibly releasing means so that the mobile terminal can be unlocked even when such a user requests unlocking of the mobile terminal. As a method for forcibly releasing the lock of the portable terminal, for example, there is a method using a master password. The master password has strong authority and can unlock all mobile terminals sold by the call service provider. A store clerk or the like operated by a call service provider inputs a master password to the mobile terminal in response to a user request, and forcibly releases the lock applied to the mobile terminal. The master password is in a situation that can only be known by related parties such as shop staff operated by the call service provider, so a third party who does not know the master password unlocks the mobile terminal of the other person and the mobile terminal It is not possible to abuse the electronic money function or personal authentication function that exists in Japan.

  However, in the above-mentioned forced unlocking method, if the master password is leaked for some reason, a third party who knows the master password unlocks the mobile terminal of another person and misuses the mobile terminal. There was a problem of being able to. Therefore, the present invention provides a mobile terminal that can reduce the possibility of leakage of the lock forcible release method as compared with the prior art.

  The portable terminal of the present invention is characterized in that its own lock is forcibly released using authentication information recorded in a storage area in which security of the external device is ensured. The portable terminal of the present invention includes a user operation unit, a lock unit, an authentication unit, and a communication unit. The authentication unit includes an authentication unit, a master authentication unit, and a position information authentication unit.

  The user operation unit outputs a lock state confirmation signal when the mobile terminal is activated in the special mode. The lock unit detects the lock state of the mobile terminal when acquiring the lock state confirmation signal, outputs the lock signal when the lock state is lock, and locks the mobile terminal when the lock release signal is acquired. Is forcibly released. The authentication unit outputs an authentication request signal to the external device when the lock signal is acquired. The master authentication means outputs a position information acquisition signal when master authentication information is acquired from an external device, and performs authentication processing using the master authentication information when a position authentication success signal is acquired. When unlocked, a lock release signal is output. The position information authentication means performs an authentication process using the position information and the position list when the position information and the position list are acquired, and outputs a position authentication success signal when the authentication process is successful. The communication unit outputs position information and a position list when the position information acquisition signal is acquired.

  According to the mobile terminal of the present invention, since the lock can be forcibly released only by using an external device owned by the call service provider, the possibility of leaking the lock forcible release method is lower than that of the prior art. Can do.

The block diagram which shows the structural example of the lock control system which concerns on Example 1 (modification 1). The block diagram which shows the structural example of the portable terminal used for the lock control system which concerns on Example 1, and a user external device. FIG. 6 is a sequence diagram illustrating a normal unlocking operation example of the mobile terminal and the user external device used in the lock control system according to the first embodiment. FIG. 6 is a sequence diagram illustrating an example of a lock forced release operation of the mobile terminal and the user external device used in the lock control system according to the first embodiment. The block diagram which shows the structural example of the portable terminal used for the lock control system which concerns on Example 1 (modification 1), and a master external apparatus. The sequence diagram which shows the lock forced release operation example of the portable terminal and master external apparatus which are used for the lock control system which concerns on Example 1 (modification 1). The block diagram which shows the structural example of the lock control system which concerns on Example 2 (modification 2). The block diagram which shows the structural example of the portable terminal and user external apparatus which are used for the lock control system which concerns on Example 2. FIG. FIG. 10 is a sequence diagram illustrating an example of a lock forced release operation of a mobile terminal and a user external device used in the lock control system according to the second embodiment. The block diagram which shows the structural example of the portable terminal and master external apparatus which are used for the lock control system which concerns on Example 2 (modification 2). The sequence diagram which shows the lock forced release operation example of the portable terminal and master external apparatus which are used for the lock control system which concerns on Example 2 (modification 2).

  Hereinafter, embodiments of the present invention will be described in detail. In addition, the same number is attached | subjected to the structure part which has the same function, and duplication description is abbreviate | omitted.

  A lock control system according to the present embodiment will be described with reference to FIG. FIG. 1 is a block diagram illustrating a configuration example of a lock control system 1000 according to the present embodiment. The lock control system 1000 according to this embodiment includes a mobile terminal 100, a user external device 200, and a master external device 300. A GPS satellite 900 exists outside the lock control system 1000. The mobile terminal 100 and the user external device 200 are owned by the individual user. The portable terminal 100 has ID information indicating an ID for identifying itself and authentication information used for authentication in its own storage area in which security is ensured. The user external device 200 has ID information indicating an ID for identifying the mobile terminal 100 and authentication information used for authentication in its own storage area where security is ensured. This ID information is associated with each mobile terminal on a one-to-one basis. For example, when a user purchases the mobile terminal 100, a shop clerk assigns an ID, and the assigned ID information is assigned to the mobile terminal 100, The user external device 200 may be written in a storage area in which predetermined security is ensured. The store clerk hands over the portable terminal 100 and the user external device 200 in which the ID information is written to the user, and the user keeps the external device 200 in a place where it is difficult for a third party to obtain such as home.

  On the other hand, the master external device 300 is managed and held by a shop operated by a communication service provider. The master external device 300 has master authentication information that can be used for authentication of all portable terminals in its own storage area where security is ensured. Since the master authentication information can be used for authentication of all portable terminals, the master external device 300 is strictly managed and stored by a shop or the like operated by a communication service provider. Both the user external device 200 and the master external device 300 are small cards that can be attached to and detached from the mobile terminal 100 such as a UICC card or an SD card, and security for storing authentication information and the like is ensured. Assume that you have a storage area. It is assumed that the storage areas in which the security of the user external device 200 and the master external device 300 is secured cannot be accessed by a normal method, but can be accessed only by a special method described later. Further, it is assumed that the portable terminal 100 can acquire its own position information from the GPS satellite 900 at any time.

  Next, an outline of the operation of the lock control system 1000 will be described. Here, the mobile terminal 100 cannot be unlocked because the user of the mobile terminal 100 forgets the password used for normal unlocking of the mobile terminal 100. A case will be described in which the user of the mobile terminal 100 forcibly releases the lock applied to the mobile terminal at home or the like using the user external device 200 owned by the 100 users. First, the user activates the mobile terminal 100 in the special mode with the user external device 200 mounted on the mobile terminal 100. This special mode is activated by activating the mobile terminal 100 according to a predetermined procedure, for example, pressing a power key of the mobile terminal 100 while pressing a specific key. The procedure for operating the special mode can be described in an instruction manual or the like of the mobile terminal 100, and the procedure can be different for each model of the mobile terminal 100. The user external device 200 includes an authentication file system 210 and a normal file system 220. The authentication file system 210 is a special file system that can be accessed only by the mobile terminal 100 activated in the special mode. It is assumed that security is secured so that data (authentication information, ID information) in the authentication file system 210 cannot be read out by any method other than the activation of the mobile terminal in the special mode. Note that the normal file system 220 has no access restriction as described above, and can be used as a normal data area. For example, when the user external device 200 is configured with an SD card, the user can also save a photo file or the like in the normal file system, which is the same as the storage of data in a normal SD memory card. It is. When the mobile terminal 100 detects that it is activated in the special mode, it outputs an authentication request signal to the authentication file system 210 of the user external device 200. The authentication file system 210 of the user external device 200 acquires an authentication request signal and outputs authentication information and ID information to the mobile terminal 100. The portable terminal 100 acquires the authentication information and the ID information. If the ID information is valid, the portable terminal 100 performs an authentication process using the authentication information. If the authentication process is successful, the portable terminal 100 performs the authentication process. Forcibly release the lock. As described above, it is assumed that ID information and authentication information paired with the authentication information of the authentication file system 210 are stored in advance in the storage area where the security of the mobile terminal 100 is secured. The authentication of ID information is performed by collating the ID information of the mobile terminal with the ID information sent from the user external device 210. The authentication process is performed by collating the authentication information of the portable terminal with the authentication information sent from the authentication file system 210. The authentication information is recorded in the storage area where the security of the mobile terminal 100 is ensured, as described above, when the mobile terminal 100 is sold to the user or when the mobile terminal 100 is manufactured. For the authentication process, either a public key authentication method or a common key authentication method may be used. The authentication process may be a one-side authentication method or a mutual authentication method.

  Next, the mobile terminal 100 cannot be unlocked because the user of the mobile terminal 100 forgets the password used for normal unlocking of the mobile terminal 100. A case will be described in which 100 users bring the mobile terminal 100 to a communication service provider operating shop to which the user subscribes and request forcible unlocking of the mobile terminal 100 at this shop. As described above, the shop has the master external device 300. A shop clerk who has received a request for forced unlocking from the user of the mobile terminal 100 activates the mobile terminal 100 in the special mode with the master external device 300 attached to the mobile terminal 100. The master external device 300 includes an authentication file system 310 and a normal file system 320 in the same manner as the user external device 200 described above. The authentication file system 310 is a special file system that can be accessed only by the mobile terminal 100 activated in the special mode. It is assumed that security is secured so that the data (master authentication information) in the authentication file system 310 cannot be read out by any method other than the activation of the portable terminal in the special mode. Note that the normal file system 320 does not have the access restrictions described above. These points are the same as the user external device 200 described above. When the portable terminal 100 detects that it is activated in the special mode, it outputs an authentication request signal to the authentication file system 310 of the master external device 300. The authentication file system 310 of the master external device 300 acquires an authentication request signal and outputs master authentication information to the mobile terminal 100. This master authentication information is encrypted and cannot be used for authentication processing unless the encryption is removed. When the mobile terminal 100 acquires the master authentication information, the mobile terminal 100 acquires its own position information from the GPS satellite 900, and when its own position information matches any one of the communication service provider operating shops nationwide. The master authentication information can be decrypted. There are several ways to embody this procedure. For example, only when the position information described above matches the position of the shop described above, it is possible to access a storage area on the network where a key that can be decrypted is stored. In this case, the storage area on the network is separately secured, and needs to be accessible only by the portable terminal 100 that satisfies the above-described location information conditions. Further, the comparison result between the above-described position information and the above-mentioned shop position may be used as a key for decryption. The mobile terminal 100 performs authentication processing using the master authentication information decrypted with the encryption key acquired as described above, and forcibly releases the lock applied to the mobile terminal 100 if this authentication processing is successful. To do. The authentication process is performed by collating the authentication information held in the storage area where the security of the portable terminal is ensured with the master authentication information. As for the authentication process, as in the case of the user external device 200, either the public key authentication method or the common key authentication method may be used. The authentication process may be a one-side authentication method or a mutual authentication method.

  Next, details of configurations and operations of the mobile terminal 100 and the user external device 200 for realizing the lock control system 1000 described above will be described with reference to FIGS. 2, 3, and 4. FIG. 2 is a block diagram illustrating a configuration example of the mobile terminal 100 and the user external device 200 used in the lock control system 1000 according to the present embodiment. FIG. 3 is a sequence diagram illustrating a normal unlocking operation example of the mobile terminal 100 and the user external device 200 used in the lock control system 1000 according to the present embodiment. FIG. 4 is a sequence diagram illustrating an example of the lock forcible release operation of the mobile terminal 100 and the user external device 200 used in the lock control system 1000 according to the present embodiment. With reference to FIG. 2, the mobile terminal 100 of the present embodiment includes a user operation unit 110, an SE unit 120, a lock unit 130, an authentication unit 140, and a communication unit 150. The authenticating unit 140 includes an authenticating unit 141, an ID authenticating unit 142, a master authenticating unit 143, and a location information authenticating unit 144. The user external device 200 of this embodiment includes an authentication file system 210 and a normal file system 220. A solid line arrow in FIG. 2 represents that data is exchanged between components connected by an arrow when the authentication process is performed between the mobile terminal 100 and the user external device 200. On the other hand, although the components connected by the thick broken line in FIG. 2 do not exchange data when the authentication processing is performed between the mobile terminal 100 and the user external device 200, the mobile terminal 100 and the master external device Since data is exchanged when performing authentication processing with 300, it represents that there is a circuit or the like that can exchange data between the components connected by the thick broken line in FIG. The details of the normal unlocking operation will be described with reference to FIG. The SE unit 120 of the mobile terminal 100 stores value information (value) such as electronic money and points. In the description of all the embodiments, it is assumed that the SE unit 120 is locked, and the value information of the SE unit 120 is protected by the lock. It is assumed that the portable terminal 100 is activated in the normal mode. The user of the mobile terminal 100 inputs the password set by the user to the mobile terminal 100 in order to release the lock applied to the SE unit 120 of the mobile terminal 100. When the mobile terminal 100 is activated in the normal mode (S110a) and the input of a password is detected from the user of the mobile terminal 100 (S110b), the user operation unit 110 outputs the password information to the authentication unit 141. (S110c). The authentication unit 141 that has acquired the password information performs a password authentication process using the password information (S141a), and if the password authentication process is successful, outputs an unlock signal to the lock unit 130 (S141b). The lock unit 130 manages the locked state of the SE unit 120 and can lock and unlock the SE unit 120. The lock unit 130 that has acquired the lock release signal releases the lock applied to the SE unit 120 (S130a).

  Next, details of the lock forcibly releasing operation will be described with reference to FIG. In order to release the lock applied to the SE unit 120 of the mobile terminal 100, the user of the mobile terminal 100 activates the mobile terminal 100 in the special mode with the user external device 200 attached to the mobile terminal 100. When the mobile terminal 100 is activated in the special mode (S110d), the user operation unit 110 outputs a lock state confirmation signal to the lock unit 130 (S110e). When the lock unit 130 acquires the lock state confirmation signal, the lock unit 130 detects the lock state of the SE unit 120, and outputs the lock signal to the authentication unit 141 when the lock state is locked (S130b). When acquiring the lock signal, the authentication unit 141 outputs an authentication request signal to the authentication file system 210 of the user external device 200 (S141c). When the authentication file system 210 of the user external device 200 acquires the authentication request signal, it outputs the authentication information to the authentication unit 141 and the ID information to the ID authentication unit 142 (S210a, S210b). When acquiring the ID information, the ID authentication unit 142 performs an authentication process using the ID information (S142a), and outputs an ID authentication success signal to the authentication unit 141 when the authentication process is successful ( S142b). When the authentication unit 141 acquires the authentication information and the ID authentication success signal, the authentication unit 141 performs an authentication process using the authentication information (S141d), and outputs an unlock signal to the lock unit 130 when the authentication process is successful. (S141b). When acquiring the lock release signal, the lock unit 130 forcibly releases the lock applied to the SE unit 120 (S130a).

  Next, details of configurations and operations of the mobile terminal 100 and the master external device 300 for realizing the lock control system 1000 will be described with reference to FIGS. 5 and 6. FIG. 5 is a block diagram illustrating a configuration example of the mobile terminal 100 and the master external device 300 used in the lock control system 1000 according to the present embodiment. FIG. 6 is a sequence diagram illustrating an example of the lock forcible release operation of the mobile terminal 100 and the master external device 300 used in the lock control system 1000 according to the present embodiment. Since the internal configuration of the portable terminal 100 is the same as that shown in FIG. 2, the description of FIG. 5 is omitted. In addition, the solid line arrow in FIG. 5 represents that data is exchanged between components connected by an arrow when the authentication process is performed between the mobile terminal 100 and the master external device 300. . On the other hand, the components connected by the thick broken line in FIG. 5 do not exchange data when the authentication processing is performed between the mobile terminal 100 and the master external device 300, but the mobile terminal 100 and the user external device Since data is exchanged when performing authentication processing with 200, it represents that there is a circuit or the like that can exchange data between the components connected by the thick broken line in FIG. The master external device 300 includes an authentication file system 310 and a normal file system 320.

  Next, details of the lock forcibly releasing operation will be described with reference to FIG. In order to release the lock applied to the SE unit 120 of the mobile terminal 100, the user of the mobile terminal 100 requests the communication service provider company operation shop with which the user has a contract to forcibly release the lock. A shop clerk who receives a request from the user of the mobile terminal 100 activates the mobile terminal 100 in the special mode with the master external device 300 mounted on the mobile terminal 100. It is assumed that the shop clerk knows the procedure for starting the special mode in advance. The startup procedure in the special mode known to the shop clerk may be different from the procedure for starting the special mode in the user external device 200 described above. The procedure for starting in the special mode known by the shop clerk is different from the procedure for starting the special mode in the user external device 200 described above and is not disclosed to the public, so that the level of security can be further increased. When the mobile terminal 100 is activated in the special mode (S110d), the user operation unit 110 outputs a lock state confirmation signal to the lock unit 130 (S110e). When the lock unit 130 acquires the lock state confirmation signal, the lock unit 130 detects the lock state of the SE unit 120, and outputs the lock signal to the authentication unit 141 when the lock state is locked (S130b). When acquiring the lock signal, the authentication unit 141 outputs an authentication request signal to the authentication file system 310 of the master external device 300 (S141c). The authentication file system 310 of the master external device 300 outputs the master authentication information to the master authentication unit 143 when the authentication request signal is acquired (S310a). When master authentication information is acquired, the master authentication unit 143 outputs a position information acquisition signal to the communication unit 150 (S143a). When acquiring the position information acquisition signal, the communication unit 150 outputs the position information and the position list to the position information authentication unit 144 (S151b). The communication unit 150 stores a list (position list) of position data (for example, position data including a set of shop name, latitude, and longitude) in which the positions of shops nationwide managed by a communication service provider are recorded in advance. It is assumed that it is stored in the area. In addition, the communication unit 150 acquires position information regarding the current position of the mobile terminal 100 from the GPS 900. When the position information authentication unit 144 acquires the position information and the position list, the position information authentication unit 144 performs an authentication process using the position information and the position list (S144a). A position authentication success signal is output (S144b). When the master authentication unit 143 obtains the location authentication success signal, the master authentication unit 143 releases the encryption applied to the master authentication information, performs the authentication process using the decrypted master authentication information (S143b), and performs the authentication process. If successful, an unlock signal is output to the lock unit 130 (S143c). When acquiring the lock release signal, the lock unit 130 forcibly releases the lock applied to the SE unit 120 (S130a).

  As described above, according to the lock control system 1000 of the present embodiment, the user external device 200 can be used only for unlocking a mobile terminal that has a one-to-one correspondence with the user external device 200. The possibility that the lock forcible release method leaks can be remarkably reduced as compared with the conventional technique using the. In addition, since the master external device 300 is hardware that can be strictly managed and stored in a communication service provider shop or the like with a limited number of devices, the lock unlocking method is more than the conventional technique using a master password. Can significantly reduce the possibility of leakage. Furthermore, according to the lock control system 1000 of the present embodiment, when authenticating the master external device 300, it is possible to authenticate whether or not the place where the authentication process is to be performed is the same as any one of shops nationwide. Even if the master external device 300 is taken away by a malicious third party and unauthorized unlocking is attempted in an area other than the shop, this unauthorized locking can be prevented. Further, by storing the user external device 200 distributed at the time of purchasing the mobile terminal at home, the user can forcibly release the lock of his / her mobile terminal 100, which is convenient for the user. improves. Furthermore, since the call service provider operating shop or the like has the master external device 300, the call service provider operating shop or the like can also forcibly unlock the mobile terminal according to the user's request. improves. Further, according to the mobile terminal 100 of the present embodiment, the lock forcible release of each of the user external device 200 and the master external device 300 can be realized at the same time, which improves user convenience.

[Modification 1]
In the first embodiment, the master external device 300 is a small card that can be attached to and detached from the portable terminal 100, such as a UICC card or an SD card, but is not limited thereto. For example, since the master external device 300 is stored in a shop or the like operated by a communication service provider, there is little need for the master external device 300 to be a small card. For example, the same function as that of the master external device 300 can be realized by a PC system to be a master external device 300 ′. Specifically, the master external device 300 ′ realized by the PC system can be connected to the portable terminal 100 with a USB cable, or a cable having a UICC or SD card shape at the tip. The master external device 300 ′ realized by the PC system includes an authentication file system 310 ′ and a normal file system 320 ′ as in the first embodiment, and the authentication file system 310 ′ is the same as that in the first embodiment. The same function as that of the authentication file system 310 included in the master external device 300 is provided. It is assumed that the normal file system 320 ′ also has the same function as the normal file system 320 provided in the master external device 300 of the first embodiment. FIG. 1 is a block diagram showing a configuration example of a lock control system 1000 ′ according to this modification. FIG. 5 is a block diagram showing a configuration example of the mobile terminal 100 and the master external device 300 ′ used in the lock control system 1000 ′ according to this modification. FIG. 6 is a sequence diagram showing an example of the lock forced release operation example of the mobile terminal 100 and the master external device 300 ′ used in the lock control system 1000 ′ according to the present modification. As described above, the master external device 300 ′ has exactly the same function as the master external device 300, and thus the description thereof is omitted. According to the lock control method 1000 ′ according to the present modification, the master external device 300 ′ is hardware that can be strictly managed and stored in a communication service provider company shop or the like with a limited number of the devices. The possibility that the lock forcible release method is leaked can be significantly reduced as compared with the conventional technique using the master password. In addition, since the call service provider operating shop has the master external device 300 ′, the call service provider operating shop can also forcibly unlock the mobile terminal in response to the user's request. Will improve. Further, it is not necessary to prepare a user interface dedicated to the lock forcibly releasing operation on the PC system, and convenience for the call service provider is improved.

  A lock control system according to the present embodiment will be described with reference to FIG. FIG. 7 is a block diagram illustrating a configuration example of the lock control system 2000 according to the present embodiment. The lock control system 2000 according to this embodiment includes a mobile terminal 100 ′, a user external device 200, a master external device 300, and a location list management server 400. A GPS satellite 900 exists outside the lock control system 2000. The operation of the user external device 200, the master external device 300, and the GPS satellite 900 is the same as in the first embodiment, and a description thereof will be omitted. The function of the mobile terminal 100 ′ of the present embodiment is almost the same as that of the mobile terminal 100 of the first embodiment, but the communication unit 150 of the mobile terminal 100 of the first embodiment includes a list update unit and a position information acquisition unit. Is different. Details of the difference will be described later. The lock control system 2000 according to the present embodiment includes a position list management server 400 in addition to the configuration common to the lock control system 1000 according to the first embodiment. The location list management server 400 has a list (location list) of location data (for example, location data consisting of a set of shop name, latitude, and longitude) of shops operated by communication service providers scattered throughout the country in the storage area. Is remembered. This position list is rewritten and updated with a new position list every certain period of time. As described above, the location list management server 400 periodically updates the location list, so that the location list management server 400 can maintain the location list management server 400 even if a situation such as shop relocation, new opening, closing, merger of a plurality of shops occurs. A location list that always points to the correct shop location can be stored. The location list management server 400 outputs a location list necessary for authenticating the master authentication information to the mobile terminal 100 ′.

  Next, an outline of the operation of the lock control system 2000 will be described. Here, in the case where the user of the mobile terminal 100 ′ forcibly releases the lock applied to the mobile terminal 100 ′ using the user external device 200, the user of the mobile terminal 100 in the first embodiment uses the user external device 200. Since it completely overlaps with the case where the lock applied to the mobile terminal 100 is forcibly released using, the description thereof is omitted. Next, a case where the user of the mobile terminal 100 ′ brings the mobile terminal 100 ′ to a communication service provider operating shop to which he / she subscribes and requests forcible unlocking of the mobile terminal 100 ′ at this shop will be described. To do. As described above, the shop has the master external device 300. A shop clerk who has received a request to forcibly release the lock from the user of the mobile terminal 100 ′ activates the mobile terminal 100 ′ in the special mode with the master external device 300 attached to the mobile terminal 100 ′. When the mobile terminal 100 ′ detects that it is activated in the special mode, it outputs an authentication request signal to the master external device 300. The master external device 300 acquires the authentication request signal and outputs master authentication information to the mobile terminal 100 ′. When acquiring the master authentication information, the portable terminal 100 ′ acquires its own position information from the GPS satellite 900 and acquires a position list from the position list management server 400. If the location information matches the location of any one of the location lists (any one of the nationwide telecommunications service company management shops), authentication processing is performed using the master authentication information. When the process is successful, the lock applied to the portable terminal 100 ′ is forcibly released. In this way, the lock control system 2000 of the present embodiment uses the position list that always reflects the latest shop position when performing position information authentication, so that the lock can be forcibly released even in the area where the store was old. Since it becomes impossible to perform this, security against unauthorized lock forcible release can be further increased.

  Details of configurations and operations of the mobile terminal 100 ′ and the user external device 200 for realizing the lock control system 2000 described above will be described with reference to FIGS. 8 and 9. FIG. 8 is a block diagram illustrating a configuration example of the mobile terminal 100 ′ and the user external device 200 used in the lock control system 2000 according to the present embodiment. FIG. 9 is a sequence diagram illustrating an example of a lock forced release operation example of the mobile terminal 100 ′ and the user external device 200 used in the lock control system 2000 according to the present embodiment. Referring to FIG. 8, the mobile terminal 100 ′ according to the present embodiment includes a user operation unit 110, an SE unit 120, a lock unit 130, an authentication unit 140, and a communication unit 150. The authenticating unit 140 includes an authenticating unit 141, an ID authenticating unit 142, a master authenticating unit 143, and a location information authenticating unit 144. The communication unit 150 includes a list update unit 151 and a position information acquisition unit 152. The only difference from the first embodiment is that the communication unit 150 includes a list update unit 151 and a position information acquisition unit 152. A solid arrow in FIG. 8 represents that data is exchanged between components connected by an arrow when an authentication process is performed between the mobile terminal 100 ′ and the user external device 200. On the other hand, the components connected by the thick broken line in FIG. 8 do not exchange data when the authentication processing is performed between the mobile terminal 100 ′ and the user external device 200, but the mobile terminal 100 ′ and the master Since data is exchanged when performing authentication processing with the external device 300, it represents that there is a circuit or the like that can exchange data between the components connected by the thick broken line in FIG. . The user external device 200 of this embodiment includes an authentication file system 210 and a normal file system 220. As described above, in the case of forcibly releasing the lock applied to the mobile terminal 100 ′ using the user external device 200, the lock applied to the mobile terminal 100 using the user external device 200 in the first embodiment is forced. It completely overlaps with the case of canceling (the description of FIG. 4 in the first embodiment and the description of FIG. 9 in the present embodiment). Accordingly, the description of FIG. 9 is completely the same as the description of FIG.

  Next, details of configurations and operations of the portable terminal 100 ′ and the master external device 300 for realizing the lock control system 2000 will be described with reference to FIGS. 10 and 11. FIG. 10 is a block diagram illustrating a configuration example of the mobile terminal 100 ′ and the master external device 300 used in the lock control system 2000 according to the present embodiment. FIG. 11 is a sequence diagram illustrating an example of a lock forced release operation of the mobile terminal 100 ′ and the master external device 300 used in the lock control system 2000 according to the present embodiment. The internal configuration of the portable terminal 100 'is the same as that shown in FIG. In addition, the solid line arrow in FIG. 10 expresses that data is exchanged between the components connected by the arrow when the authentication process is performed between the mobile terminal 100 ′ and the master external device 300. Yes. On the other hand, the components connected by the thick broken line in FIG. 10 do not exchange data when the authentication processing is performed between the mobile terminal 100 ′ and the master external device 300, but the mobile terminal 100 ′ and the user Since data is exchanged when performing authentication processing with the external device 200, it represents that there is a circuit or the like that can exchange data between the components connected by the thick broken line in FIG. . The master external device 300 includes an authentication file system 310 and a normal file system 320.

  Next, details of the lock forcible release operation will be described with reference to FIG. The user of the mobile terminal 100 ′ requests forcible release of the lock from a communication service provider operating shop with which he / she subscribes in order to release the lock applied to the SE unit 120 of the mobile terminal 100 ′. A shop clerk who receives a request from the user of the mobile terminal 100 ′ activates the mobile terminal 100 ′ in the special mode with the master external device 300 attached to the mobile terminal 100 ′. It is assumed that the shop clerk knows the procedure for starting the special mode in advance. Similarly to the above, the startup procedure in the special mode known by the shop clerk may be different from the procedure for starting the special mode in the user external device 200 described above. The procedure for starting in the special mode known by the shop clerk is different from the procedure for starting the special mode in the user external device 200 described above and is not disclosed to the public, so that the level of security can be further increased. When the mobile terminal 100 ′ is activated in the special mode (S 110 d), the user operation unit 110 outputs a lock state confirmation signal to the lock unit 130 (S 110 e). When the lock unit 130 acquires the lock state confirmation signal, the lock unit 130 detects the lock state of the SE unit 120, and outputs the lock signal to the authentication unit 141 when the lock state is locked (S130b). When acquiring the lock signal, the authentication unit 141 outputs an authentication request signal to the authentication file system 310 of the master external device 300 (S141c). The authentication file system 310 of the master external device 300 outputs the master authentication information to the master authentication unit 143 when the authentication request signal is acquired (S310a).

  When master authentication information is acquired, the master authentication unit 143 outputs a position information acquisition signal to the position information acquisition unit 151 (S143a). When the position information acquisition unit 151 acquires the position information acquisition signal, the position information acquisition unit 151 outputs the list acquisition signal to the list update unit 152 (S151a). When the list update unit 152 acquires the list acquisition signal, the list update unit 152 acquires the latest position list from the position list management server 400, updates the position list to the latest state (S152a), and updates the updated position list to the position information. It outputs to the acquisition means 151 (S152b). When the position list is acquired, the position information acquisition unit 151 acquires the position information of the portable terminal 100 'from the GPS satellite 900, and outputs the position information and the position list to the position information authentication unit 144 (S151b). When the position information authentication unit 144 acquires the position information and the position list, the position information authentication unit 144 performs an authentication process using the position information and the position list (S144a). A position authentication success signal is output (S144b). When the master authentication unit 143 acquires the position authentication success signal, the master authentication unit 143 performs authentication processing using the master authentication information (S143b), and outputs the lock release signal to the lock unit 130 when the authentication processing is successful. (S143c). When acquiring the lock release signal, the lock unit 130 forcibly releases the lock applied to the SE unit 120 (S130a). In this way, the lock control system 2000 of the present embodiment uses the position list that always reflects the latest shop position when performing position information authentication, so that the lock can be forcibly released even in the area where the store was old. Since it cannot be performed, security against unauthorized lock forcible release can be further enhanced.

[Modification 2]
As in the first modification of the first embodiment, the master external device 300 is not limited to a detachable small card such as a UICC card or an SD card. For example, the master external device 300 may be realized by a PC system and used as a master external device 300 ′. Is possible. As in the first modification of the first embodiment, the master external device 300 ′ realized by the PC system can be connected to the mobile terminal 100 ′ by a USB cable or a cable having a UICC or SD card at the tip. As in the first modification of the first embodiment, the master external device 300 ′ realized by the PC system includes an authentication file system 310 ′ and a normal file system 320 ′, and the authentication file system 310 ′ The same function as that of the authentication file system 310 included in the master external device 300 is provided. It is assumed that the normal file system 320 ′ also has the same function as the normal file system 320 included in the master external device 300. FIG. 7 is a block diagram showing a configuration example of a lock control system 2000 ′ according to this modification. FIG. 10 is a block diagram showing a configuration example of the mobile terminal 100 ′ and the master external device 300 ′ used in the lock control system 2000 ′ according to this modification. FIG. 11 is a sequence diagram showing an example of the lock forced release operation example of the portable terminal 100 ′ and the master external device 300 ′ used in the lock control system 2000 ′ according to the present modification. As in the first modification of the first embodiment, the master external device 300 ′ has exactly the same function as the master external device 300, and thus the description thereof is omitted. According to the lock control method 2000 ′ according to this modification, the master external device 300 ′ is a hardware that can be strictly managed and stored in a communication service provider company shop or the like with a limited number of the devices. The possibility that the lock forcible release method is leaked can be significantly reduced as compared with the conventional technique using the master password. In addition, since the call service provider operating shop has the master external device 300 ′, the call service provider operating shop can also forcibly unlock the mobile terminal in response to the user's request. Will improve. Further, it is not necessary to prepare a user interface dedicated to the lock forcibly releasing operation on the PC system, and convenience for the call service provider is improved.

  In addition, the various processes described above are not only executed in time series according to the description, but may be executed in parallel or individually according to the processing capability of the apparatus that executes the processes or as necessary. Needless to say, other modifications are possible without departing from the spirit of the present invention.

  Further, when the above-described configuration is realized by a computer, processing contents of functions that each device should have are described by a program. The processing functions are realized on the computer by executing the program on the computer.

  The program describing the processing contents can be recorded on a computer-readable recording medium. As the computer-readable recording medium, for example, any recording medium such as a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory may be used.

  The program is distributed by selling, transferring, or lending a portable recording medium such as a DVD or CD-ROM in which the program is recorded. Furthermore, the program may be distributed by storing the program in a storage device of the server computer and transferring the program from the server computer to another computer via a network.

  A computer that executes such a program first stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. When executing the process, the computer reads a program stored in its own recording medium and executes a process according to the read program. As another execution form of the program, the computer may directly read the program from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to the computer. Each time, the processing according to the received program may be executed sequentially. Also, the program is not transferred from the server computer to the computer, and the above-described processing is executed by a so-called ASP (Application Service Provider) type service that realizes the processing function only by the execution instruction and result acquisition. It is good. Note that the program in this embodiment includes information that is used for processing by an electronic computer and that conforms to the program (data that is not a direct command to the computer but has a property that defines the processing of the computer).

  In this embodiment, the present apparatus is configured by executing a predetermined program on a computer. However, at least a part of these processing contents may be realized by hardware.

Claims (7)

A portable terminal that forcibly releases its own lock using authentication information recorded in a storage area where security of the external device is secured,
A user operation unit that outputs a lock state confirmation signal when the mobile terminal is activated in a special mode;
When the lock state confirmation signal is acquired, the lock state of the mobile terminal is detected, and when the lock state is lock, a lock signal is output, and when the lock release signal is acquired, the mobile terminal is locked. The lock part to be forcibly released,
Authentication means for outputting an authentication request signal to the external device when the lock signal is acquired;
When master authentication information is acquired from the external device, a position information acquisition signal is output.When a position authentication success signal is acquired, authentication processing is performed using the master authentication information, and the authentication processing is successful. Master authentication means for outputting the unlock signal;
A position information authenticating unit that performs an authentication process using the position information and the position list when the position information and the position list are acquired, and outputs the position authentication success signal when the authentication process is successful;
An authentication unit comprising:
A communication unit that outputs the position information and the position list when the position information acquisition signal is acquired;
A portable terminal comprising: The mobile terminal according to claim 1,
The authentication unit
An ID authentication means for performing an authentication process using the ID information when acquiring the ID information from the external device, and outputting an ID authentication success signal when the authentication process is successful;
When the authentication unit acquires authentication information from the external device and acquires the ID authentication success signal from the ID authentication unit and performs an authentication process using the authentication information, and the authentication process is successful A portable terminal that outputs the unlock signal. The mobile terminal according to claim 1 or 2,
The communication unit is
Position information acquisition means for outputting a list acquisition signal when acquiring the position information acquisition signal, acquiring position information of the mobile terminal when acquiring a position list, and outputting the position information and the position list; ,
List update means for updating the position list when the list acquisition signal is acquired and outputting the updated position list;
A portable terminal comprising: A lock control system configured to forcibly release the lock of the mobile terminal using authentication information recorded in a storage area composed of a mobile terminal and an external device, and securing the security of the external device,
The mobile terminal is
A user operation unit that outputs a lock state confirmation signal when the mobile terminal is activated in a special mode;
When the lock state confirmation signal is acquired, the lock state of the mobile terminal is detected, and when the lock state is lock, a lock signal is output, and when the lock release signal is acquired, the mobile terminal is locked. The lock part to be forcibly released,
Authentication means for outputting an authentication request signal to the external device when the lock signal is acquired;
When master authentication information is acquired from the external device, a position information acquisition signal is output.When a position authentication success signal is acquired, authentication processing is performed using the master authentication information, and the authentication processing is successful. Master authentication means for outputting the unlock signal;
A position information authenticating unit that performs an authentication process using the position information and the position list when the position information and the position list are acquired, and outputs the position authentication success signal when the authentication process is successful;
An authentication unit comprising:
A communication unit that outputs the position information and the position list when the position information acquisition signal is acquired;
A lock control system comprising: The lock control system according to claim 4,
The authentication unit of the mobile terminal is
An ID authentication means for performing an authentication process using the ID information when acquiring the ID information from the external device, and outputting an ID authentication success signal when the authentication process is successful;
The authentication means of the portable terminal is
When authentication information is acquired from the external device and the ID authentication success signal is acquired from the ID authentication means, authentication processing is performed using the authentication information, and when the authentication processing is successful, the lock release signal is A lock control system characterized by output. The lock control system according to claim 4 or 5,
A location list management server for managing the location list;
The communication unit of the mobile terminal is
Position information acquisition means for outputting a list acquisition signal when acquiring the position information acquisition signal, acquiring position information of the mobile terminal when acquiring a position list, and outputting the position information and the position list; ,
List update means for updating the position list when the list acquisition signal is acquired and outputting the updated position list;
A lock control system comprising:   The program for functioning a portable terminal as a portable terminal in any one of Claim 1 to 3.

Images