JP4642006B2 - Subscriber authentication module, contactless IC chip, authentication vector generation device, mobile communication system, and authentication vector generation method - Google Patents

Description

  The present invention relates to a subscriber authentication module, a contactless IC chip, an authentication vector generation device, a mobile communication system, and an authentication vector generation method.

  The mobile communication service in Japan has tens of millions of subscribers, and it is very familiar in daily life regardless of age or gender. In recent years, portable terminals (including mobile radio devices in general, the same applies hereinafter) having a small payment function using contactless IC card technology have appeared. By using this small amount payment function, in addition to the mobile communication service, the functions of the mobile terminal can be used widely including a payment service at a store or the like, and the convenience of the mobile terminal is further enhanced.

  By the way, in IMT-2000 (International Mobile Telecommunications 2000) which is a third generation mobile communication system, a subscriber authentication module issued by a mobile communication network (hereinafter referred to as “home network”) subscribed by a subscriber is used. Are used by being mounted on a portable terminal (see, for example, Patent Document 1 below).

Further, a technology has been proposed that enables the above-described cooperation between the contactless IC card function and the subscriber authentication module by configuring a part of the contactless IC card function inside the subscription authentication module. Thus, it becomes possible to provide a subscriber authentication module and a portable terminal with higher user portability, and the use frequency of the non-contact IC card function is expected to increase in the future.
JP 2001-309433 A

  The subscriber authentication module as described above can be attached to and removed from a portable terminal as a standard IC-compliant contact IC card called ISO (International Organization for Standardization) 7816. In addition, since an IC card reader / writer compliant with the ISO 7816 compliant contact IC card can be used, it can be easily accessed from a device other than a portable terminal (for example, a personal computer). It is possible.

  However, since the commands stipulated in the standard are highly versatile, many of the subscriber authentication modules can perform the access even when connected to a device other than the mobile terminal and accessed from the device. It does not have a function that can be detected effectively.

  For this reason, for example, a subscriber authentication module is connected to a device other than a portable terminal (such as a personal computer) via an IC card reader / writer, and a command not supposed to be used in the mobile communication network is transferred from the device to the subscriber authentication module. It can also be issued and executed.

  There is no problem as long as the above command execution is only to edit the subscriber's own phone book information installed in the subscriber authentication module, but as described above, the subscriber authentication module has a part of the contactless IC card function. Is realized in the subscription authentication module, there is a possibility that some attempts to try unauthorized access. Therefore, it becomes necessary to effectively prevent unauthorized access. For example, when at least a part of the functions of the subscriber authentication module is stopped, a countermeasure can be considered in which information related to the function stop is transmitted to the non-contact IC chip and the non-contact IC card is controlled to stop functioning.

  However, whether the access is really unauthorized or not is the same as the result of collation of the legitimacy included in each command (for example, the authentication operation such as decrypting the encrypted part or the personal identification number (PIN) value). As a primary defensive measure, it is determined whether or not the subscriber authentication module is mounted on the mobile terminal, and if it is determined that it is not mounted, at least a part Therefore, there is a need for a technology that fully considers user convenience, such as stopping the function and then releasing the function stop when the subscriber authentication module is attached to a valid mobile terminal.

  Therefore, the present invention stops the function of at least a part of the subscriber authentication module when the subscriber authentication module is connected to a device other than the mobile terminal, and stops the function by the authentication mechanism for the subscriber authentication module. The purpose is to release.

  In order to achieve the above object, a subscriber authentication module according to the present invention is a subscriber authentication module attached to a subscriber-side terminal, and a predetermined initialization process immediately after powering on the attached subscriber-side terminal A time measuring means for measuring an operation time from the end to reception of a predetermined command from the subscriber side terminal, and whether the operation time measured by the time measuring means exceeds a preset allowable operation time Determination means for determining whether or not the determination means determines that the operation time exceeds the allowable operation time, and a function stop means for stopping at least a part of the functions in the subscriber authentication module; An authentication vector used for authentication of the subscriber authentication module, to which stop release information for instructing stop release of a function being stopped is added, is sent via the subscriber side terminal. A receiving unit that receives from an authentication vector generation device in a mobile communication network, and performs authentication of the subscriber authentication module based on the authentication vector received by the receiving unit, and when the authentication is successful, based on the stop cancellation information And a stop releasing means for releasing the stop of the function being stopped.

  According to the above-mentioned subscriber authentication module, the operation time from the end of the predetermined initialization process immediately after power-on of the installed subscriber-side terminal to the reception of the predetermined command from the subscriber-side terminal is preset. If it is determined that the allowable operation time has been exceeded, it can be determined that the subscriber authentication module is connected to a device other than the terminal on the subscriber side. In such a case, at least one of the subscriber authentication modules can be determined. Therefore, the function of the subscriber authentication module can be reliably protected.

  Further, the subscriber authentication module receives an authentication vector to which stop release information for instructing stop release of a function being stopped is added from an authentication vector generation device in the mobile communication network, and based on the received authentication vector When the authentication of the subscriber authentication module is successful, the suspension of the function being suspended can be canceled based on the suspension cancellation information, so the function of the subscriber authentication module is stopped from the authentication vector generation device in the mobile communication network. Can be quickly released, and in addition to protecting the function of the subscriber authentication module, convenience can be improved.

  The subscriber authentication module preferably further includes a notification means for notifying the outside of the function stop by the function stop means or the stop release by the stop release means. By notifying the stop or stop release, it becomes possible to control the function stop or stop release in cooperation with the outside, and the convenience can be improved.

  A non-contact IC chip according to the present invention is a non-contact IC chip capable of communicating with a subscriber authentication module provided with a notification means for notifying the outside of a function stop or stop, and the notification of the subscriber authentication module It is characterized by comprising means for receiving a notification from the means and stopping or canceling at least a part of the functions of the non-contact IC chip based on the received notification content. According to such a non-contact IC chip, it is possible to control the stop or release of the function of the non-contact IC chip in conjunction with the stop or release of the function of the subscriber authentication module.

  An authentication vector generation apparatus according to the present invention includes an authentication vector generation means for generating an authentication vector used for authentication of a subscriber authentication module in a mobile communication network, and the authentication vector generated by the authentication vector generation means includes the subscriber Addition means for adding stop release information for instructing stop release of the function being stopped in the authentication module; and transmission means for transmitting the authentication vector to which the stop release information is added by the addition means to the subscriber authentication module; It is characterized by providing. According to such an authentication vector generation device, the authentication vector with the suspension release information added is transmitted to the subscriber authentication module, so that the suspension of the function of the subscriber authentication module is cooperated with the subscriber authentication module. Control becomes possible and convenience can be improved.

  The mobile communication system according to the present invention can be configured as follows as a configuration including an authentication vector generation device and a subscriber authentication module. That is, the mobile communication system according to the present invention is a mobile communication system including an authentication vector generation device and a subscriber authentication module attached to a subscriber side terminal, wherein the authentication vector generation device includes: Authentication vector generation means for generating an authentication vector used for authentication of a subscriber authentication module in a mobile communication network, and cancellation of the function being stopped in the subscriber authentication module in the authentication vector generated by the authentication vector generation means Adding means for adding stop cancellation information for instructing, and transmitting means for transmitting the authentication vector to which the stop cancellation information is added by the adding means to the subscriber authentication module, wherein the subscriber authentication module comprises: After a predetermined initialization process immediately after turning on the power of the installed subscriber terminal, a predetermined command is issued. A time measuring means for measuring an operation time until reception from the subscriber side terminal, a determination means for determining whether the operation time measured by the time measuring means exceeds a preset allowable operation time, When it is determined by the determination means that the operation time exceeds the allowable operation time, the function stop means for stopping at least a part of the functions in the subscriber authentication module and transmitted from the authentication vector generation device A receiving means for receiving the authentication vector with the suspension release information added via the subscriber side terminal, and authenticating the subscriber authentication module based on the authentication vector received by the receiving means, And a stop release means for releasing the stop of the function being stopped based on the stop release information.

  The authentication vector generation method according to the present invention can be configured as follows, and has the same effect as the authentication vector generation apparatus according to the present invention. That is, an authentication vector generation method according to the present invention is an authentication vector generation method in an authentication vector generation device, the authentication vector generation step for generating an authentication vector used for authentication of a subscriber authentication module in a mobile communication network, An addition step of adding stop release information for instructing release of the function being stopped in the subscriber authentication module to the authentication vector generated in the authentication vector generation step, and stop release information is added in the addition step. And a transmitting step of transmitting the authentication vector to the subscriber authentication module.

  According to the present invention, when the subscriber authentication module is connected to a device other than the portable terminal, at least a part of the function of the subscriber authentication module is stopped, and the function is stopped by the authentication mechanism for the subscriber authentication module. It can be canceled.

  The knowledge of the present invention can be easily understood by considering the following detailed description with reference to the accompanying drawings shown for illustration only. Subsequently, embodiments of the present invention will be described with reference to the accompanying drawings. Where possible, the same parts are denoted by the same reference numerals, and redundant description is omitted.

[Configuration of mobile communication system]
FIG. 1 shows a configuration of a mobile communication system 1 according to the present embodiment. The mobile communication system 1 includes a subscriber-side terminal 10, a UICC (Universal Integrated Circuit Card) 20 as a subscriber authentication module, and a mobile And a communication network 30.

  Among these, the subscriber-side terminal 10 is a wireless connection device to the mobile communication network 30 used by a user of the mobile communication network 30 such as a portable terminal, and includes a wireless unit 110, a processing unit 120, and a UICC interface unit 130. Consists of. The wireless unit 110 is a functional unit for making a wireless connection to the mobile communication network 30. The UICC interface unit 130 is an interface function unit with the UICC 20. The processing unit 120 is a component that realizes functions other than the radio unit 110 and the UICC interface unit 130 in the subscriber-side terminal 10, and includes, for example, an arithmetic processing unit and a display processing unit.

  The UICC 20 is a contact IC card having a physical shape such as a USIM (Universal Subscriber Identity Module) or SIM (Subscriber Identity Module). However, as shown in FIGS. 1 and 2, the UICC 20 further includes a non-contact IC function unit 220 for realizing a non-contact IC function as well as a USIM function unit 210 for realizing a USIM function. Consists of including.

  Among these, the USIM function unit 210 functions as a subscriber authentication module for the mobile communication network 30, is mainly connected to the subscriber side terminal 10, and is used by the mobile communication network 30 for user identification and authentication. The USIM function unit 210 includes a terminal device interface unit 2110, an oscillation / counting unit 2120, a processing unit 2130, a function stop / release unit 2140, and a non-contact IC interface unit 2150, which will be described later.

  The terminal device interface unit 2110 is a functional unit for communicating with the UICC interface unit 130 of the subscriber-side terminal 10, and the oscillation / counting unit 2120 is a functional unit for measuring the operating time in the USIM function unit 210. . The function stop / release unit 2140 is a function unit for determining whether or not to stop at least a part of the functions of the USIM function unit 210, and the determination result is the processing unit 2130 and the non-contact IC interface. Is transmitted to the unit 2150. The non-contact IC interface unit 2150 is a function unit for communicating with the USIM function interface unit 2210 of the non-contact IC function unit 220. The processing unit 2130 is a function unit for executing functions other than the above-described function units in the USIM function unit 210, for example, a target function stop process based on a determination result from the function stop / release unit 2140.

  On the other hand, the non-contact IC function unit 220 functions as, for example, electronic money, a transportation ticket or an admission card, and provides an added value for the mobile communication service rather than an added value as a subscriber authentication module. The non-contact IC function unit 220 includes a USIM function interface unit 2210, a function stop / release unit 2220, and a processing unit 2230.

  The USIM function interface unit 2210 is a function unit for communicating with the non-contact IC interface unit 2150 of the USIM function unit 210, and the function stop / release unit 2220 stops at least part of the functions of the non-contact IC function unit 220. This is a functional unit for determining whether to perform the determination and transmitting the determination result to the processing unit 2230. The processing unit 2230 is a functional unit for executing a function other than the above-described functional units in the non-contact IC functional unit 220, for example, a target function stop process based on a determination result from the function stop / release unit 2220. .

  1 and 2, the UICC 20 includes both the USIM function unit 210 and the non-contact IC function unit 220. However, when the UICC 20 is a normal USIM or SIM, only the USIM function unit 210 is included. Is mounted on the UICC 20, is connected to the subscriber-side terminal 10, and is used by the mobile communication network 30 for user identification and authentication.

  1 and 2, the UICC 20 includes both the USIM function unit 210 and the non-contact IC function unit 220. However, the USIM function unit 210 and the non-contact IC function unit 220 are different from each other. A configuration (not shown) may be employed in which the non-contact IC interface unit 2150 and the USIM function interface unit 2210 communicate with each other.

  A mobile communication network 30 shown in FIG. The subscriber-side terminal 10 may be connected not only to the home network but also to a roaming network (not shown) that can be used by being interconnected with the mobile communication network. An authentication vector generation device 310 corresponding to the USIM function unit 210 is connected to the home network in order to perform subscriber identification and authentication.

  As illustrated in FIG. 3, the authentication vector generation device 310 includes an authentication vector generation unit 3120 that generates an authentication vector, and a stop / addition of release information to the authentication vector when the authentication vector generation unit 3120 generates the authentication vector. It includes a cancellation information addition unit 3130 and an authentication vector transmission unit 3110 that transmits an authentication vector to the UICC 20 as a subscriber authentication module.

[Processes executed by the mobile communication system]
Hereinafter, processing executed in the mobile communication system 1 will be described with reference to the sequence diagrams of FIGS. 4 and 5.

  As shown in FIG. 4, when the power of the subscriber terminal 10 is turned on with the UICC 20 attached, the USIM function unit 210 in the UICC 20 is turned on (step S1) and the operation time is initialized ( After (zero reset) is performed (step S2), the time measurement of the operation time by the oscillation / counting unit 2120 starts (step S3). The “operation time” means an elapsed time from the end of the initialization process of the operation time until a predetermined command (for example, a command for stopping at least a part of predetermined functions in the USIM function unit 210) is received. To do.

  When the terminal device interface unit 2110 receives a predetermined command from the subscriber-side terminal 10 (step S4), the command is transferred to the processing unit 2130, and the function stop / cancel unit 2140 receives the above-mentioned reception from the processing unit 2130. The received command, the operation time counted by the oscillation / counter 2120, and the preset allowable operation time are received, and it is determined whether or not the operation time exceeds the allowable operation time (step S5). Here, when the operating time exceeds the allowable operating time, it can be determined that the UICC 20 is connected to a device other than the subscriber terminal.

  In step S5, if the operation time does not exceed the allowable operation time, the process is terminated. If the operation time exceeds the allowable operation time, the UICC 20 is connected to a device other than the subscriber side terminal. Since it can be determined, the function stop / release unit 2140 notifies the processing unit 2130 that the target function is stopped. Based on this notification, the processing unit 2130 stops the target function (step S6).

  Then, the processing unit 2130 instructs the terminal device interface unit 2110 to make a response indicating that this command cannot be executed to the subscriber-side terminal 10. In response to this, the terminal device interface unit 2110 makes a response to the subscriber side terminal 10 indicating that this command cannot be executed (step S7).

  In addition, the processing unit 2130 instructs the non-contact IC interface unit 2150 to notify the non-contact IC function unit 220 that the target function has been stopped. In response to this, the non-contact IC interface unit 2150 notifies the non-contact IC function unit 220 that the target function has been stopped (step S8).

  In the non-contact IC function unit 220, the USIM function interface unit 2210 transmits a notification from the non-contact IC interface unit 2150 that the target function has been stopped to the processing unit 2230. The notification is transmitted to the function stop / release unit 2220. Then, the function stop / release unit 2220 determines whether or not to stop the target function in the non-contact IC function unit 220 based on the notification (step S9).

  Here, when it is determined that the target function is not to be stopped, the process is terminated, but when it is determined that the target function is to be stopped, the function stop / release unit 2220 notifies the processing unit 2230 of the determination result. To do. Receiving this notification, the processing unit 2230 stops the target function based on the notification (step S10).

  4 determines that the UICC 20 is connected to a device other than the subscriber side terminal when the operation time exceeds the allowable operation time. In such a case, the USIM function unit in the UICC 20 It is possible to quickly stop at least some of the predetermined functions in 210 and the non-contact IC function unit 220, and it is possible to reliably protect the functions of the USIM function unit 210 and the non-contact IC function unit 220.

  Next, processing for canceling the function stop from a state in which at least a part of predetermined functions are stopped in the UICC 20 will be described using the sequence of FIG.

  When generating an authentication vector in the authentication vector generation apparatus 310, the stop / release information adding unit 3130 displays stop release information for instructing stop release of the function being stopped as an AUTN (Authentication Token) field or RAND (Random) of the authentication vector. The authentication vector generation unit 3120 generates an authentication vector in which the stop release information is set as described above (step S21).

  The authentication vector sending unit 3110 sends the authentication vector as an authentication signal to the subscriber side terminal 10 via the mobile communication network 30 (step S22), and the authentication signal reaches the subscriber side terminal 10.

  The radio unit 110 of the subscriber side terminal 10 receives the authentication vector as an authentication signal, and the authentication vector is sent as an authentication command from the UICC interface unit 130 to the UICC 20 via the processing unit 120 (step S23). .

  Then, the terminal device interface unit 2110 of the UICC 20 receives the authentication command and transmits the received authentication command to the processing unit 2130. First, the processing unit 2130 performs an authentication process based on the authentication vector constituting the authentication command (step S24). If the authentication is successful (in the case of an affirmative determination in step S25), the processing unit 2130 displays the AUTN field or RAND field in the authentication vector. Based on the set stop release information, the authentication command recognizes that the stop command of the function being stopped is instructed, and transmits the stop release information to the function stop / release unit 2140.

  Then, the function stop / release unit 2140 determines whether or not to stop the stopped function based on the stop cancellation information (step S26), and notifies the processing unit 2130 of the determination result. The processing unit 2130 cancels the suspension of the target function based on the determination result (step S27). Note that if the authentication in step S24 is not successful due to a data error or the like, or if it is not determined in step S26 that the stop cancellation is to be performed, the processing in FIG. 5 ends.

  In addition, the processing unit 2130 instructs the non-contact IC interface unit 2150 to notify the non-contact IC function unit 220 that the suspension of the target function has been released. In response, the non-contact IC interface unit 2150 notifies the non-contact IC function unit 220 that the suspension of the target function has been canceled (step S28).

  In the non-contact IC function unit 220, the USIM function interface unit 2210 receives the release notification from the non-contact IC interface unit 2150 and transmits the received release notification to the processing unit 2230. Then, when the processing unit 2230 transmits the release notification to the function stop / release unit 2220, the function stop / release unit 2220 releases the target function stop in the non-contact IC function unit 220 based on the release notification. Whether or not (step S29).

  Here, if it is determined not to release the function stop, the process ends. If it is determined to cancel the function stop, the function stop / release unit 2220 notifies the processing unit 2230 of the determination result. Receiving this notification, the processing unit 2230 releases the suspension of the target function that has been stopped based on the notification (step S30).

  When the authentication based on the authentication vector received from the authentication vector generation device 310 is successfully performed by the process of FIG. 5 described above, the suspension of the function being stopped can be canceled based on the stop cancellation information. It is possible to quickly release the function stop in the USIM function unit 210 and the non-contact IC function unit 220 in the UICC 20 from the authentication vector generation device 310 in the network 30, and the convenience can be improved.

  According to the embodiment of the invention as described above, when the subscriber authentication module is connected to a device other than the mobile terminal, at least a part of the functions of the subscriber authentication module is stopped, and the subscriber authentication module The function stop can be canceled by the authentication mechanism, and the object of the present invention can be achieved.

It is a figure which shows the structure of the mobile communication system which concerns on embodiment of invention. It is a figure which shows the detailed structure of UICC which concerns on embodiment of invention. It is a figure which shows the detailed structure of the authentication vector production | generation apparatus which concerns on embodiment of invention. It is a sequence diagram which shows the process which concerns on the stop of the function in a USIM function part and a non-contact IC function part. It is a sequence diagram which shows the process which concerns on the cancellation | release cancellation | release of a function in a USIM function part and a non-contact IC function part.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Mobile communication system, 10 ... Subscriber side terminal, 20 ... UICC, 30 ... Mobile communication network, 110 ... Radio | wireless part, 120 ... Processing part, 130 ... UICC interface part, 210 ... USIM function part, 220 ... Non-contact IC Function unit 310 ... Authentication vector generation device 2110 ... Terminal device interface unit 2120 ... Oscillation / counting unit 2130 ... Processing unit 2140 ... Function stop / release unit 2150 ... Non-contact IC interface unit 2210 ... USIM function interface , 2220 ... function stop / release unit, 2230 ... processing unit, 3110 ... authentication vector sending unit, 3120 ... authentication vector generation unit, 3130 ... stop / release information addition unit.

Claims (6)

A subscriber authentication module attached to a subscriber side terminal,
A clocking means for timing an operation time until a predetermined command is received from the subscriber-side terminal after completion of a predetermined initialization process immediately after power-on of the installed subscriber-side terminal;
Determining means for determining whether or not the operation time measured by the time measuring means exceeds a preset allowable operation time;
A function stop means for stopping at least a part of functions in the subscriber authentication module when the determination means determines that the operation time exceeds the allowable operation time;
Received from the authentication vector generation device in the mobile communication network via the subscriber-side terminal, the authentication vector used for authentication of the subscriber authentication module, to which suspension cancellation information for instructing suspension cancellation of the function being stopped is added Receiving means for
The subscriber authentication module is authenticated based on the authentication vector received by the receiving means, and when the authentication is successful, stop cancellation means for canceling the stop for the stopped function based on the stop cancellation information;
A subscriber authentication module comprising:   2. The subscriber authentication module according to claim 1, further comprising notification means for notifying the outside of a function stop by the function stop means or a stop release by the stop release means. A non-contact IC chip capable of communicating with the subscriber authentication module according to claim 2,
A non-contact IC chip comprising a means for receiving a notification from the notification means of the subscriber authentication module and stopping or releasing at least a part of the functions of the non-contact IC chip based on the received notification content. Authentication vector generation means for generating an authentication vector used for authentication of a subscriber authentication module in a mobile communication network;
Addition means for adding stop release information for instructing stop release of the function being stopped in the subscriber authentication module to the authentication vector generated by the authentication vector generation means;
Transmitting means for transmitting the authentication vector to which the suspension cancellation information is added by the adding means to the subscriber authentication module;
An authentication vector generation device comprising: A mobile communication system including an authentication vector generation device and a subscriber authentication module attached to a subscriber side terminal,
The authentication vector generation device includes:
Authentication vector generation means for generating an authentication vector used for authentication of a subscriber authentication module in a mobile communication network;
Addition means for adding stop release information for instructing stop release of the function being stopped in the subscriber authentication module to the authentication vector generated by the authentication vector generation means;
Transmitting means for transmitting the authentication vector to which the suspension cancellation information is added by the adding means to the subscriber authentication module;
With
The subscriber authentication module includes:
A clocking means for timing an operation time until a predetermined command is received from the subscriber-side terminal after completion of a predetermined initialization process immediately after power-on of the installed subscriber-side terminal;
Determining means for determining whether or not the operation time measured by the time measuring means exceeds a preset allowable operation time;
A function stop means for stopping at least a part of functions in the subscriber authentication module when the determination means determines that the operation time exceeds the allowable operation time;
Receiving means for receiving the authentication vector to which the suspension cancellation information is added, transmitted from the authentication vector generating device, via the subscriber side terminal;
The subscriber authentication module is authenticated based on the authentication vector received by the receiving means, and when the authentication is successful, stop cancellation means for canceling the stop for the stopped function based on the stop cancellation information;
Comprising
A mobile communication system. An authentication vector generation method in an authentication vector generation device,
An authentication vector generating step for generating an authentication vector used for authentication of a subscriber authentication module in a mobile communication network;
An addition step of adding stop release information for instructing stop release of the stopped function in the subscriber authentication module to the authentication vector generated in the authentication vector generation step;
A transmitting step of transmitting the authentication vector to which the stop cancellation information is added in the adding step to the subscriber authentication module;
An authentication vector generation method comprising:

Images