JP5369709B2 - Mobile terminal, mobile terminal unauthorized access control method, and mobile terminal unauthorized access control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a portable terminal which prevents communicative prohibition processing using a wireless communication channel by a third person, in the portable terminal equipped with a so-called remote lock function restricting the functions of the portable terminal from a remote place. <P>SOLUTION: In the portable terminal equipped with a so-called off-line mode forbidding communication using a wireless communication channel which is now used by the portable terminal, a person not using any portable terminal is burdened with user authentication at the time of transition to an off-line mode (step 101), and transition to the off-line mode is performed only when user authentication is successful (step 104). Thereby, the portable terminal is lost, and it is possible to prevent the third person finding this portable terminal from setting the off-line mode. Consequently, since the portable terminal can certainly receive a remote lock signal, a prevention of an information leakage can be aimed. <P>COPYRIGHT: (C)2010,JPO&amp;INPIT

Description

  The present invention relates to a mobile terminal having a communication function, and particularly to a mobile terminal provided with a remote lock function for limiting the function of a mobile terminal by a radio signal from a remote place, a mobile terminal unauthorized access control method, and a mobile terminal unauthorized access control program.

  In recent years, mobile terminals having a wireless communication function have been widely used in accordance with the reduction in size and weight of mobile terminals and the spread of wireless communication lines. As an example of a mobile terminal, a mobile phone having a wireless communication function has a data communication function in addition to a voice communication function by telephone, and transmits / receives e-mail (hereinafter simply referred to as mail) or web on the Internet. It is used for various purposes such as browsing websites and commercial transactions using internet shopping.

In addition, a non-contact IC (Integration Circuit) card that performs wireless communication between a reader / writer is built in, and electronic money exchange using the IC card and use of a credit service have been put into practical use.

  With the spread of mobile phones and the development of technologies used for mobile phones, personal information and business-related information are stored in an external memory of a mobile phone or in a memory built in a mobile phone, and the opportunity to carry them increases. Since the service provision range of wireless communication lines used by mobile phones is very wide, mobile phone users can easily exchange personal information and business-related information wherever they are. You can receive the offer.

  However, in recent years, as information stored in the memory becomes more important, information leakage due to loss of a mobile phone has become a problem. Information is leaked by a third party picking up a lost mobile phone and taking out the data stored in the memory from the mobile phone. As described above, since important information related to credit services and the like may be stored in the memory of the mobile phone, there is an increasing demand for a technique for preventing information leakage when the mobile phone is lost.

  As technology to prevent such information leakage of mobile phones, authentication using a password is performed when operating the mobile phone, and when authentication fails, technology that prohibits operation input by the user, or when authentication fails a specific number of times A technology for erasing data stored in the memory of a mobile phone has been developed (see, for example, Patent Document 1). In addition, when a user who has lost the mobile phone performs a predetermined operation, a signal for limiting the function of the mobile phone is transmitted from the base station, and control is performed so that the lost mobile phone becomes unusable. A so-called remote lock technology has been developed that prevents information leakage by a third party who has picked up the mobile phone by disabling the mobile phone (see, for example, Patent Document 2).

JP 2001-117661 A Japanese Patent Laid-Open No. 9-93650

  However, when data protection using password authentication as in Patent Document 1 is used, the user is required to input a password every time the mobile phone is turned on or a specific operation is attempted. For this reason, for example, a password input operation is required every time an address book in which personal information stored in a mobile phone is written is read, and the operation is complicated and the convenience is impaired. It was.

  On the other hand, in the method of limiting the function of the cellular phone by a control signal from a remote place as in Patent Document 2, the user only needs to limit the terminal function only when necessary, and password authentication at the time of normal operation becomes unnecessary. Therefore, convenience is maintained. However, it is expected that a third party who has picked up the mobile phone will switch the operation mode of the mobile phone to a so-called offline mode that does not use a wireless communication line. In this case, the control signal transmitted from the base station is not received by the mobile phone even if the remote lock is performed by the radio signal. As a result, there has been a problem that the use of a mobile phone by a third party and the leakage of information cannot be prevented.

  The present invention has been made to solve the above-mentioned problems, and it is prohibited to illegally disable the remote lock function, and it is possible to prevent information leakage from a lost mobile phone in advance. An object is to provide an access control method and an unauthorized access control program for a portable terminal.

In order to achieve the above object, the portable terminal of the present invention is an authentication means for authenticating a user, a transmission / reception means for performing wireless communication with a base station, and a terminal in which the transmission / reception means is transmitted through the wireless communication when receiving the function restriction signal to a mobile terminal having a terminal function limiting means for limiting a predetermined function of its own terminal, when the instruction to stop the wireless communication with the transmitting and receiving means is input User authentication is performed by the authentication unit, and when the user authentication is successful, the wireless communication using the transmission / reception unit is stopped, and when the user authentication fails, the wireless communication using the transmission / reception unit is stopped. and illegal access control means for maintaining, and mail creating means for creating a warning mail, and a positioning means for positioning the location information of the terminal itself, the illegal access control means, said transmitting and receiving means When an instruction to stop the wireless communication and to allow another wireless communication different from the wireless communication or another wireless communication using a wireless communication method different from the wireless communication method of the wireless communication is input When the user authentication is performed by the authentication unit, and when the user authentication is successful, the wireless communication using the transmission / reception unit is stopped, the other wireless communication is permitted, and the user authentication fails. The warning mail generated by the mail generation means is transmitted to a predetermined destination, and the warning mail includes the position information measured by the positioning means .

The unauthorized access control method for a portable terminal according to the present invention includes an authentication unit that authenticates a user, a transmission / reception unit that performs wireless communication with a base station, and a terminal function in which the transmission / reception unit is transmitted through the wireless communication. When a restriction signal is received, an unauthorized mobile terminal equipped with a terminal function restriction means for restricting a predetermined function of the own terminal, a mail preparation means for creating a warning mail, and a positioning means for positioning the position information of the own terminal In the access control method , user authentication is performed by the authentication unit when an instruction to stop the wireless communication using the transmission / reception unit is input, and when the user authentication is successful, the transmission / reception unit is used. the wireless communication is stopped, the if the user authentication fails maintaining the radio communication using the transmitting and receiving means, to stop the wireless communication with the transceiver means, and said User authentication is performed by the authentication unit when an instruction to permit other wireless communication different from line communication or another wireless communication using a wireless communication method different from the wireless communication method of the wireless communication is input. The wireless communication using the transmission / reception means is stopped when the user authentication is successful, the other wireless communication is permitted, and the mail creation means is created when the user authentication fails. A warning mail is transmitted to a predetermined destination, and the warning mail includes the position information measured by the positioning means .

Moreover, unauthorized access control program of the portable terminal of the present invention, a mobile terminal having a transceiver hand stage for performing radio communication with a base station, an authentication unit for authenticating a user, the transceiver unit the radio when receiving the terminal function limitation signal transmitted through the communication, the authentication unit when the instruction to stop the terminal function limiting means for limiting a predetermined function of its own terminal, the radio communication had use the transmitting and receiving means is input performs user authentication by the if the user authentication is successful and stops the wireless communication had use the transmitting and receiving means, when the user authentication fails unauthorized access of maintaining the radio communication had use the transmitting and receiving means and control means, and mail creating means for creating a warning mail, to function as a positioning means for positioning the location information of the terminal itself, the illegal access control means using said transmitting and receiving means When an instruction to stop the wireless communication and permit another wireless communication different from the wireless communication or another wireless communication using a wireless communication method different from the wireless communication method of the wireless communication is input When user authentication is performed by the authentication means, and when the user authentication is successful, the wireless communication using the transmission / reception means is stopped, the other wireless communication is permitted, and the user authentication fails. The warning mail created by the mail creating means is transmitted to a predetermined destination, and the warning mail includes the position information measured by the positioning means .

  According to the present invention, communication using wireless communication that is currently used cannot be prohibited unless authentication processing of the mobile terminal is successful. Therefore, when a mobile terminal is lost and a remote lock command is transmitted, even if a third party who has picked up the mobile terminal attempts to prohibit communication using wireless communication before reaching the control signal, the function of the terminal is restricted. It can be carried out. Thereby, it is possible to prevent information leakage when the mobile terminal is lost.

The figure which shows the structure of the external appearance of the foldable mobile telephone which is an example of the portable terminal which concerns on embodiment of this invention. The figure which shows the structure of the other external appearance of the foldable mobile telephone which is an example of the portable terminal which concerns on embodiment of this invention. The figure which shows the structure inside the mobile telephone in this embodiment. 1 is a system configuration diagram of a mobile phone according to an embodiment. The conceptual diagram of the network connection which connects the mobile telephone and mobile phone user in this embodiment. The flowchart of the process which imposes user authentication at the time of offline mode transfer. The flowchart of the process which imposes user authentication at the time of offline mode transfer, and performs a terminal function restriction | limiting at the time of authentication failure. The flowchart of the process which impresses user authentication at the time of offline mode transfer, and transmits the positional information based on positioning at the time of authentication failure.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing an external configuration of a folding mobile phone 1 which is an example of a mobile terminal according to the present invention. FIG. 1A shows an external configuration of the mobile phone 1 viewed from the front when the mobile phone 1 is opened at about 180 degrees, and FIG. 1B is a side view when the mobile phone 1 is in the open state. The structure of the appearance is shown.

  As shown in FIGS. 1 (a) and 1 (b), in the mobile phone 1, the first housing 2 and the second housing 3 are hinge-coupled via a hinge portion 6 at the center. And is foldable in the direction of the arrow X. A transmitting / receiving antenna (antenna 21 shown in FIG. 3 to be described later) is provided at a predetermined position inside the mobile phone 1, and radio waves are transmitted to and from a radio base station 84 to be described later via the built-in antenna. Send and receive.

  The first housing 2 is composed of numeric keys from “0” to “9”, a call / incoming key, a redial key, a call end / power key, a clear key, a first menu key, and the like on the surface. An operation key 4 is provided. Further, a side key 5 including a manner mode key, a second menu key, and the like is provided on the side surface of the first housing 2. The user inputs various instructions and data to the mobile phone 1 using the operation keys 4 or the side keys 5.

  The first housing 2 is provided with a microphone 7 below the operation keys 4, and the microphone 7 collects user voice during a call.

  Note that a battery 9 is attached to the first housing 2 on the back side, and when the end call / power key is pressed for a long time and the cellular phone 1 is turned on, the battery 9 supplies power to each circuit unit described later. Supply.

  On the other hand, the second housing 3 is provided with a main display 10 on the front surface thereof, which can display a setting screen of a mobile phone, mail, a website, and the like. The main display 10 is a display configured by, for example, an LCD (Liquid Crystal Display) or an organic EL (Electro Luminescence). A receiver 8 is provided at the upper part of the main display 10, and the user can listen to the voice transmitted from the other party using this.

  FIG. 2 is a diagram showing an external configuration when the foldable mobile phone 1 which is an example of the mobile terminal according to the present invention is folded. FIG. 2A shows an external configuration viewed from the front when the mobile phone 1 is in the closed state, and FIG. 2B shows an external configuration viewed from the side when the mobile phone 1 is in the closed state. Show.

  On the surface of the second housing 3, a sub-display 11 made of, for example, an LCD is provided. For example, an antenna picture indicating the radio wave intensity level received by the mobile phone 1, and the remaining battery 9 are indicated. Battery pictogram or current time is displayed. Further, the side key 5 provided in the second housing 3 is provided at a position where it can be operated even when the cellular phone 1 is in a closed state.

  FIG. 3 is a block diagram illustrating an internal configuration of the mobile phone 1 according to the present embodiment.

  A radio signal transmitted from a radio base station 84 to be described later is received by the antenna 21 and then input to the receiving circuit (RX) 23 via the antenna duplexer (DUP) 22. The receiving circuit 23 mixes the received radio signal and the local transmission signal output from the frequency synthesizer (SYN) 24, and frequency-converts (down-converts) it into an intermediate frequency signal. Then, the down-converted intermediate frequency signal is demodulated by the receiving circuit 23 and output as a received baseband signal. Also, time signal information transmitted from a GPS satellite (not shown) as a radio signal is output as a received baseband signal through the same processing as the radio signal transmitted from the radio base station 84.

  The received baseband signal output from the receiving circuit 23 is input to a CDMA (Code Division Multiple Access) signal processing unit 26. The CDMA signal processing unit 26 includes a Rake receiver (not shown). In this Rake receiver, a plurality of paths included in the received baseband signal are despread with each spreading code (that is, the same spreading code as the spread code of the spread received signal). Then, the signal of each path subjected to the despreading process is subjected to coherent Rake synthesis after rotating the phase. The data sequence after Rake combining is subjected to deinterleaving and channel decoding (error correction decoding), and then binary data determination is performed. As a result, the CDMA signal processing unit 26 generates received packet data in a predetermined transmission format. The received packet data is input from the CDMA signal processing unit 26 to the compression / decompression processing unit 27.

  The compression / decompression processing unit 27 is a CDMA configured by a DSP (Digital Signal Processor). The received packet data output from the signal processing unit 26 is separated for each medium such as an audio signal, a data signal, or time signal information transmitted from the GPS by a demultiplexing unit (not shown), Each decoding process is performed.

  On the other hand, the user's voice signal input to the microphone 7 is amplified to an appropriate level by the transmission amplifier 30 and then PCM-encoded by the PCM codec 28. The PCM encoded digital audio signal is input to the compression / decompression processing unit 27. A data signal such as a mail generated by the control unit 31 is also input to the compression / decompression processing unit 27.

  The compression / decompression processing unit 27 compresses and encodes the digital audio signal output from the PCM codec 28 or the data signal output from the control unit 31 in a format corresponding to a predetermined transmission data rate. Thereafter, the compression-coded signal is multiplexed by a demultiplexer (not shown) according to a predetermined transmission format and then packetized. The transmission packet data after being packetized is output to the CDMA signal processing unit 26.

  The CDMA signal processing unit 26 performs spread spectrum processing on the transmission packet data output from the compression / decompression processing unit 27 to generate a spread signal. This spread spectrum process is performed using a spread code assigned to the transmission channel. The spread signal generated by the CDMA signal processing unit 26 is output to the transmission circuit (TX) 25. The transmission circuit 25 modulates the spread signal using a digital modulation method such as a QPSK (Quadrature Phase Shift Keying) method. Further, the transmission circuit 25 synthesizes the spread signal and the local transmission signal generated from the frequency synthesizer 24, and performs frequency conversion (up-conversion) into a radio signal. Then, the transmission circuit 25 amplifies the radio signal that has been up-converted so as to satisfy the transmission power level instructed by the control unit 31. The amplified radio signal is supplied to the antenna 21 via the antenna duplexer 22, and the radio signal is transmitted from the antenna 21 to a radio base station 84 to be described later.

  The mobile phone 1 is provided with a clock signal generator (timer) 39 that calculates a predetermined period and supplies a clock signal to the control unit 31 at each predetermined period. The power supply circuit 34 provided in the mobile phone 1 supplies a predetermined operation power supply voltage vcc generated by analog / digital conversion of the analog voltage output of the battery 9 to each circuit unit described above.

  The control unit 31 includes electronic circuits such as a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory). The CPU executes processing according to a program stored in the ROM or various application programs loaded from the control unit 31 to the RAM. Further, the CPU processes signals supplied from the above-described circuit units, generates various control signals, and supplies them to the circuit units. Through these processes, the CPU comprehensively controls the mobile phone 1. The RAM stores data necessary for the CPU to execute various processes. In addition, the control unit 31 includes a video RAM (not shown), and stores information related to video displayed on the main display 10. The storage unit 32 includes, for example, a flash memory element that is a nonvolatile memory that can be electrically rewritten and erased, an HDD (Hard Disc Drive), and the like. The storage unit 32 stores various application programs and data groups that are executed by the CPU of the control unit 31.

  Next, the configuration of the system unit in the mobile phone according to the embodiment will be described. FIG. 4 is a system configuration diagram showing the internal configuration of the mobile phone 1 in the present embodiment.

The processing means included in the control unit 31 includes the following.

  The input means 40 is means for receiving an input signal from a user using the input key 4 or the side key 5. The received input signal is output to the communication control means 41, which will be described later, as an operation state change command for the mobile phone 1, for example. For example, it is output to the authentication means 42 mentioned later as password information. For example, it is output to the positioning means 45 described later as a positioning command. Further, for example, it is output to a mail transmission means 46 described later as a mail creation / transmission command.

Further, for example, it is output to a storage unit operation means 47 described later as a storage unit operation command and operation data designation. Further, for example, it is output to the storage unit browsing means 48 described later as a storage unit browsing command and browsing data designation.

  The communication control means 41 is means for prohibiting or permitting communication using a wireless communication line used by the mobile phone 1 as a communication line in accordance with an instruction from the input means 40. In addition to prohibiting or permitting communication with a certain radio communication line, the communication control unit 41 permits communication with another radio communication line with a different modulation means, for example, Processing for permitting communication with the other wireless communication line may be performed.

  The authentication unit 42 is a unit that authenticates whether or not the user of the mobile phone 1 is an authorized user by password authentication using the input unit 40. In the present embodiment, for simplicity of explanation, the authentication unit 42 is described as performing authentication using a password. However, even if the authentication means 42 is configured to authenticate the user using a fingerprint authentication means or a face authentication means not shown in FIG. 4, the same effects of the invention can be obtained.

  The terminal function restriction unit 43 is a unit that restricts the function of the mobile phone 1 from being used in response to the result of the authentication failure by the authentication unit 42. Further, it is a means for restricting the function of the mobile phone 1 in response to a remote lock command received by a data transmitting / receiving means 44 described later. For example, as a restricting operation, the use of the input unit 40 is restricted and the operation by the user is prohibited. Further, for example, an operation of prohibiting the use of a data transmitting / receiving unit 44, a positioning unit 45, a mail transmitting unit 46, a storage unit operating unit 47, and a storage unit browsing unit 48, which will be described later.

  The data transmitting / receiving means 44 is means for transmitting / receiving a packet signal to / from a radio wave base station 84 to be described later. Examples of the contents of the packet signal include website display data, cell information transmitted from the base station, and a remote lock command signal. The data transmission / reception means 44 that has received the remote lock command signal notifies the terminal function restriction means 43 of the remote lock command and operates the terminal function restriction means 43.

  The positioning means 45 is means for calculating coordinate information of the mobile phone 1 using time signal information received from a GPS satellite. The positioning means 45 receives time signal information from four or more GPS satellites, and compares the time signal information obtained from each satellite. The distance between the GPS satellite and the mobile phone 1 is calculated by taking the time difference of the time information notified between the satellites. By calculating the distances between the plurality of GPS satellites and performing position estimation using the calculated distance and the position information of the GPS satellites, the coordinates of the mobile phone 1 can be uniquely obtained. Here, the positioning process using the time information is described as being performed by the positioning means 45, but the present invention is not limited to this. For example, the time information received by the mobile phone 1 is transmitted to the control device 85 to be described later, and the control device 85 performs a positioning process by triangulation, calculates the coordinate information of the mobile phone 1 and transmits it to the mobile phone 1. You can take it. The positioning means 45 notifies the coordinate information to the mail transmission means 46 when performing the remote lock control process described later.

  The mail sending means 46 is means for creating e-mail data and sending it to another terminal. Here, the e-mail data is created by the control unit 31 in addition to the case where the data is created by the user using the input unit 40, and is created using the coordinate information notification by the positioning unit 45.

  The storage unit operating unit 47 is a unit that creates, deletes, changes, or changes the memory address of data in a part or all of the data in the storage unit 32 of the mobile phone 1.

  The storage unit browsing means 47 is a function for causing the main display 10 and the sub display 11 to display text data and moving image data in the storage unit 32 of the mobile phone 1, phone book data, and setting data of the mobile terminal. In addition, the music data in the storage unit 32 is played back using the speaker 8.

  The configuration of the control unit 31 shown in FIG. 4 is not limited to this, and some of the components listed in FIG. 4 may be deleted, or components not shown in FIG. 4 may be added. . Moreover, you may comprise the element which comprises the control part 31 by either software or hardware.

  FIG. 5 is a conceptual diagram showing a network connection for connecting the cellular phone 70 set as lost and the cellular phone user terminal 71. The network 80 includes at least a radio base station 84, a control device 85, and an exchange device 87.

  The radio base station has a role of modulating a wired signal flowing between networks into a wireless signal and transmitting it to a mobile phone, and a role of demodulating the wireless signal transmitted by the mobile phone into a wired signal and transmitting it to the network.

  The switching device 87 has a role of designing a circuit route to a signal transmission destination according to destination information of a data signal such as mail transmitted from each communication terminal belonging to the network 80. Furthermore, it has a function of performing so-called circuit switching processing for switching between networks and switching devices according to the designed circuit path.

  The control device 85 has a role of holding presence information of communication terminals in the network 80. Further, it has a role of designing a line route to a call destination according to a call command issued by each communication terminal belonging to the network 80. Further, it has a function of generating a remote lock command signal in response to a command from the mobile phone user terminal 71 and transmitting it to the lost mobile phone 70.

  Next, processing when the mobile phone 70 is lost and a remote lock operation is performed from the mobile phone user terminal 71 via the network 80 will be described.

  First, a user who has lost the mobile phone 70 connects the mobile phone user terminal 71 to the control device 85 of the network 80 and transmits a remote lock transmission request to the lost mobile phone 70. Here, the mobile phone user terminal 71 is connected to the control device 85 through a wired line and transmits a remote lock transmission request. However, it may take the form of transmitting a remote lock transmission request through a wireless communication line using another mobile phone terminal, or directly operating the control device 85 by the mobile phone user terminal 71 or its agent.

  When the remote lock transmission request is input, the control device 85 checks the address of the radio base station 84 that supplies radio waves to the lost mobile phone 70 to be locked remotely. When the control device 85 confirms the address by the response from the radio base station 84, the control device 85 transmits a remote lock command to the nearest switching device 87. When the switching device 87 receives the remote lock command, the switching device 87 designs a line path connecting the radio base station 84. When the circuit path is designed and the circuit switching process is performed according to the circuit path, the switching device 87 transmits a remote lock command to the radio base station 84. The remote lock command is transmitted using a service such as SMS (Short Messaging Service). The radio base station 84 modulates the remote lock command received in the form of a wired signal into a radio signal and transmits it to the lost mobile phone 70. In the lost mobile phone 70, when the remote lock command is received by the data transmission / reception means 44, the terminal function restriction means 43 restricts the various functions of the mobile phone 1 from being used. The remote lock operation is performed by the above operation. The terminal restriction by the terminal function restriction unit 43 is to restrict the mail transmission unit 46, the storage unit operation unit 47, the storage unit browsing unit 48, and the like from operating.

  Although the case where the radio base station 84, the control device 85, and the exchange device 87 are configured as separate devices has been described above, a configuration in which some of these devices are combined into one device is used. Also good. For example, the control device and the exchange device may be combined into one device.

  By the processing described above, the remote lock operation is automatically executed on the lost mobile phone 70 side. Here, consider a case where a third party who has picked up the mobile phone 70 attempts to stop communication with the currently used network before the remote lock command is received. In this case, since the signal of the remote lock command transmitted from the radio base station 84 is not received by the mobile phone 70, the remote lock cannot be performed, and it is expected that the remote lock does not work effectively.

  Here, the following three cases can be considered as a case where communication with the network used by the mobile phone 70 is stopped. The first is a case of shifting to a so-called offline mode in which communication with the network is stopped and wireless communication with the other is not performed. The second is a case where communication with the first network being used is stopped, and communication using the second network provided by another carrier is performed instead. The third is a case where communication with the first network being used is stopped and communication with the second network using another communication method is performed instead. Processing will be described for each of these three cases.

(Move to offline mode)
The transition to the offline mode is mainly triggered by the following two operations. The first one receives an offline mode shift instruction from the input means 40, and the second one performs communication without using a wireless line, such as communication with a computer terminal using, for example, infrared communication or USB (Universal Serial Bus) connection. This is a case where communication with the currently used network is stopped when starting.

  First, the control unit 31 receives an instruction for shifting to the offline mode from the input unit 40. Alternatively, the control unit 31 detects the start of communication using infrared communication or USB connection. Then, the control unit 31 instructs the data transmission / reception means 44 to stop data transmission / reception. The data transmission / reception means 44 stops data transmission / reception, for example, by stopping the operation of the DUP 23, TX 25 or DUP 22, or by stopping the notification of the received signal to the control unit 31.

(Network switching)
Network switching is performed, for example, in response to a network switching instruction from the input unit 40. The control means 31 receives an offline mode transition instruction from the input means 40. Then, the control unit 31 instructs the data transmission / reception means 44 to switch the frequency used for transmission / reception, for example. When receiving the frequency switching instruction, the data transmitting / receiving unit 44 changes the frequency used by the antenna 21 for wireless transmission / reception or connects the DUP 23 to another antenna 21 having different antenna frequency characteristics. In a network normally provided by a telecommunications carrier, a frequency used for communication is different for each telecommunications carrier. Therefore, by changing the frequency used for data transmission / reception, communication with the currently used network can be stopped, and communication with a network provided by a different communication carrier can be performed. In addition to the frequency switching method described here, network switching is performed by a method for switching CDMA codes used for transmission / reception, or a carrier used for transmission / reception when only signals having a specific carrier identification code are transmitted / received. This can be realized by various methods such as a method of switching the recognition code.

(Communication method switching)
The switching of the communication method is performed, for example, in response to a network switching instruction from the input unit 40. The control unit 31 receives a communication method switching instruction from the input unit 40. Then, the control unit 31 instructs the data transmission / reception means 44 to switch the communication method. For example, the data transmitting / receiving unit 44 changes the CDMA signal processing unit 26 to a TDI (Time Division Multiple Access) signal processing unit. As a result, a signal to be transmitted / received can be switched from a CDMA modulated signal to a TDMA modulated signal. In addition to the switching to the TDMA modulation described here, the switching of the communication system is a similar CDMA modulation system such as switching from GSM (Global System for Mobile communications) to HSDPA (High Speed Downlink Packet Access). It can also be realized by switching to a signal with a different communication standard.

  Communication with the network in use is stopped by the above three operations. As described above, when communication with the network is stopped, the remote lock command signal transmitted from the radio base station 84 is not received by the mobile phone 70. Therefore, the mobile phone 70 cannot perform the remote lock, and it is expected that the remote lock does not work effectively.

  In order to cope with this, in the present embodiment, when the mobile phone 70 stops communication using the wireless communication line, the authentication unit 42 authenticates the user. By determining whether or not to stop communication based on the result of user authentication, it is possible to prevent a third party from stopping communication before reaching the remote lock signal. Hereinafter, authentication processing by the authentication unit 42 will be described. In the following authentication process, an example of stopping communication will be described using the transition to the offline mode. However, the effect of the same invention can be obtained by performing user authentication when switching the network to be used or switching the communication method to be used in addition to the offline mode.

(First embodiment)
In the first embodiment shown in FIG. 6, when the user of the mobile phone 70 shifts to the offline mode in which the communication using the wireless communication line is prohibited by the input unit 40, the user authentication by the authentication unit 42 is performed. This is an example of unauthorized access control that prevents the offline mode from being shifted by an operation other than a regular user.

  First, upon receiving an instruction for shifting to the offline mode from the input means 40, the control unit 31 starts an offline mode shifting process (step 100). When the migration process is started, the authentication unit 42 is driven to prompt the user to input a password (step 101). When the password is input from the input means 40, it is determined whether or not the input password is correct (step 102). If the input password is correct, communication using the wireless communication line being used is prohibited (step 103), the process shifts to the offline mode and the process is terminated (step 104). If the entered password is incorrect or no password is entered, the process is terminated while maintaining the communication state with the wireless communication line (step 104).

  Through the above processing, the transition to the offline mode due to an unauthorized user operation can be prevented. As a result, the mobile phone 1 can reliably receive the signal of the remote lock command.

(Second Embodiment)
In the second embodiment shown in FIG. 7, the user of the mobile phone 70 inputs an instruction to shift to the offline mode for prohibiting communication using the wireless communication line from the input means 40. When shifting to the offline mode, user authentication by the authentication unit 42 is imposed, and when the user authentication fails, the function restriction by the terminal function restriction unit 43 is performed. This is an example of unauthorized access control that prevents information leakage by limiting the function when it is assumed that an operation by a third party is performed when user authentication fails.

  First, when an instruction for shifting to the offline mode is received from the input means 40 (step 200), the authentication means 42 performs user authentication (step 201) and password authentication determination as in the first embodiment (step 202). ). If the input password is correct, communication using the wireless communication line being used is prohibited (step 203), and the process is terminated (step 205). If the entered password is incorrect or no password is entered, the function is restricted by the terminal function restriction means 43 (step 204), and the process is terminated (step 205). Here, the terminal function restriction unit 43 inhibits input by the user, for example, by restricting input from the input unit 40. Further, for example, by restricting the storage unit browsing means 48, browsing of address data in an address book in which personal information is recorded and personal information of a mobile phone user is prohibited. Further, by restricting the use of the data transmission / reception means 44 and the mail transmission means 46, connection from the mobile phone 70 to the external network 80 is prohibited.

  With the above processing, it is possible to prevent the unauthorized user from shifting to the offline mode and further prevent the unauthorized user from performing information leakage. Note that the function restriction is performed when the password authentication fails (step 204). However, it is also possible to provide a configuration in which the function is restricted when the password authentication fails a predetermined number of times by providing several grace periods for password authentication. In this case, it is possible to prevent a situation where the function of the terminal is restricted when a legitimate user attempts to enter the offline mode and enters a password incorrectly.

(Third embodiment)
In the third embodiment shown in FIG. 8, the user of the mobile phone 70 inputs an instruction to shift to the offline mode that prohibits communication using the wireless communication line by the input means 40. When shifting to the offline mode, user authentication by the authentication unit 4 is imposed, and positioning by the positioning unit 45 is performed when the user authentication fails. A warning mail is created by the mail transmission means 46, and position information obtained by positioning is transmitted. By assuming that a third party has performed an operation when the user authentication has failed and notifying the location information of the mobile phone 70, it is possible to alert the mobile phone user 71 and prompt the search for the mobile phone 70. .

  First, when an instruction for shifting to the offline mode is received from the input means 40 (step 300), the authentication means 42 performs user authentication (step 201) and password authentication determination in the same manner as in the first embodiment (step 203). ). If the input password is correct, communication using the wireless communication line being used is prohibited (step 203), and the process is terminated (step 205). If the entered password is incorrect or if no password is entered, the positioning means 45 performs position information positioning of the mobile phone 70. When the position information positioning is completed, a warning mail is created by the mail transmission means 46. The warning mail describes the location information of the mobile phone 70 obtained by the positioning means described above, the fact that user authentication for shifting to the offline mode has failed, and the like. The created warning mail is transmitted from the mail transmission means 46 and transmitted to the mobile phone user terminal 71 via the network 80.

  Through the above processing, the shift to the offline mode due to an unauthorized user operation can be prevented, and the mobile phone user terminal 71 can be notified of the location information of the lost mobile phone.

Here, it is described that positioning is performed when password authentication fails (step 304).

However, a configuration may be adopted in which positioning is performed when password authentication fails for a preset number of times by providing several grace periods for password authentication. A similar effect can be obtained by transmitting position information of a cell periodically transmitted by the base station 84 without performing positioning in a mobile phone that does not have a GPS positioning function. Also, simply sending a warning mail indicating that the mobile phone 70 has been lost and terminal authentication has failed can alert the mobile phone user terminal 71 and prompt the search for the mobile phone 70.

  In the description of the first, second, and third embodiments, it has been described that the transition to the offline mode is performed when the user of the mobile phone 70 inputs a transition instruction using the input unit 40. However, there are cases where the use of the wireless communication line is stopped secondarily, such as when the mobile terminal 70 stops wireless communication and performs wired communication with a computer, or when the mobile terminal 70 is powered off. Even in such a case, it is considered that the portable terminal 70 shifts to the offline mode, and the same effect of the invention can be obtained by imposing the same user authentication process.

  In the embodiment described here, a mobile phone has been described. However, the scope of the present invention is not limited to this, and can be applied to, for example, a PDA (Personal Digital Assistant), a wired terminal, and a small information processing device.

Further, in the embodiment, the folding mobile phone has been described as an example, but the present invention can also be applied to a slide-type mobile terminal and a bar-type mobile terminal having no movable mechanism.

  The present invention is not limited to the above-described embodiment, and the constituent elements may be modified and embodied as long as they do not depart from the gist of the invention. Various inventions may be formed by proper combinations of a plurality of constituent elements disclosed in the above embodiments. For example, some components may be deleted from all the components shown in each embodiment.

DESCRIPTION OF SYMBOLS 1 Cellular phone 2 1st housing | casing 3 2nd housing | casing 4 Operation key 5 Side key 7 Microphone 8 Receiver 9 Battery 10 Main display 11 Sub display 21 Antenna 31 Control part 32 Memory | storage part 39 Timer 40 Input means 41 Communication control means 42 Authentication Means 43 Terminal function restriction means 44 Data transmission / reception means 45 Positioning means 46 Mail transmission means 47 Storage section operation means 48 Storage section browsing means 70 Mobile phone 71 Mobile phone user terminal 80 Network 84 Radio base station 85 Control device 87 Switching device

Claims (3)

An authentication unit for authenticating a user, a transmission / reception unit for performing wireless communication with a base station, and a predetermined function of the own terminal when the transmission / reception unit receives a terminal function restriction signal transmitted through the wireless communication A mobile terminal equipped with terminal function restriction means for restricting
When an instruction to stop wireless communication using the transmission / reception means is input, user authentication is performed by the authentication means, and when the user authentication is successful, wireless communication using the transmission / reception means is stopped , If user authentication fails, unauthorized access control means for maintaining wireless communication using the transmission / reception means ;
Email creation means to create alert emails;
Positioning means for positioning the location information of the terminal itself,
The unauthorized access control means includes:
An instruction to stop the wireless communication using the transmission / reception means and permit another wireless communication different from the wireless communication or another wireless communication using a wireless communication method different from the wireless communication method of the wireless communication When the user is entered, user authentication is performed by the authentication means,
If the user authentication is successful, stop the wireless communication using the transmission / reception means, permit the other wireless communication,
When the user authentication fails, send the warning email created by the email creation means to a predetermined destination,
The mobile terminal, wherein the warning mail includes the position information measured by the positioning means . An authentication unit for authenticating a user, a transmission / reception unit for performing wireless communication with a base station, and a predetermined function of the own terminal when the transmission / reception unit receives a terminal function restriction signal transmitted through the wireless communication A mobile terminal unauthorized access control method comprising: a terminal function restriction means for restricting a mail; a mail creation means for creating a warning mail; and a positioning means for positioning position information of the terminal itself .
When an instruction to stop the wireless communication using the transmission / reception means is input, user authentication is performed by the authentication means, and when the user authentication is successful, the wireless communication using the transmission / reception means is stopped. If the user authentication fails, maintain the wireless communication using the transmission / reception means ,
An instruction to stop the wireless communication using the transmission / reception means and permit another wireless communication different from the wireless communication or another wireless communication using a wireless communication method different from the wireless communication method of the wireless communication When the user is entered, user authentication is performed by the authentication means,
If the user authentication is successful, stop the wireless communication using the transmission / reception means, permit the other wireless communication,
When the user authentication fails, send the warning email created by the email creation means to a predetermined destination,
The unauthorized access control method for a portable terminal, wherein the warning mail includes the position information measured by the positioning means . The mobile terminal having a transceiver hand stage for performing radio communication with a base station,
An authentication means for authenticating the user;
Terminal function restriction means for restricting a predetermined function of the own terminal when the transmission / reception means receives a terminal function restriction signal transmitted through the wireless communication;
Said transmitting and receiving means instructs to stop radio communication had use a performs user authentication by the authentication means if entered, the case where the user authentication is successful and stops the wireless communication had use the transmitting and receiving means, wherein If the user authentication fails and illegal access control means for maintaining the radio communication had use the transmitting and receiving means,
Email creation means to create alert emails;
It functions as a positioning means to measure the location information of its own terminal,
The unauthorized access control means includes:
An instruction to stop the wireless communication using the transmission / reception means and permit another wireless communication different from the wireless communication or another wireless communication using a wireless communication method different from the wireless communication method of the wireless communication When the user is entered, user authentication is performed by the authentication means,
If the user authentication is successful, stop the wireless communication using the transmission / reception means, permit the other wireless communication,
When the user authentication fails, send the warning email created by the email creation means to a predetermined destination,
The unauthorized access control program for a portable terminal, wherein the warning mail includes the position information measured by the positioning means .

Images