KR100584357B1 - Method for restricting read/write operation of mobile phone in info-mobile system - Google Patents

Abstract

The present invention relates to a method for limiting a read / write operation of a mobile communication terminal in an information mobile system, and the present invention receives a header change information from a base station to which the mobile communication terminal is registered and uses the header change information. After changing the header information of the file downloaded from the storage device to the mobile communication terminal, by restricting the read / write operation of the mobile communication terminal by the header information, it is possible to prevent the leakage of security data using the mobile communication terminal. have. In addition, this has the effect of increasing the security of confidential information in the workplace requiring confidentiality.

Infomobile, document security, mobile communication terminal

Description

How to limit read / write operation of mobile communication terminal in infomobile system {METHOD FOR RESTRICTING READ / WRITE OPERATION OF MOBILE PHONE IN INFO-MOBILE SYSTEM}

1 is a view showing a connection state for transferring data between a computer and a mobile communication terminal,

2 is an internal block diagram of a mobile communication terminal for storing data downloaded from a computer;

3 is a diagram showing an example of the configuration of an information mobile system;

4 is an exemplary diagram of a database structure for managing a user in an infomobile base station in order to apply a read / write operation restriction method of a mobile communication terminal according to an embodiment of the present invention;

5 is an exemplary diagram of a database structure for managing a user's rating in an infomobile base station in order to apply a read / write operation restriction method of a mobile communication terminal according to an embodiment of the present invention;

6A is a diagram illustrating a format of a conventional document file;

6B illustrates a state in which a header of a document file is changed according to an embodiment of the present invention;

7 to 9 are diagrams illustrating a process of applying a read / write restriction method of a mobile communication terminal according to an embodiment of the present invention.

The present invention relates to a method for restricting read / write operations of a mobile communication terminal, and more particularly, to perform a read / write operation of a mobile communication terminal in a base station in which a mobile communication terminal is registered in order to prevent leakage of security data using the mobile communication terminal. It is about how to limit.

As the technology of mobile communication develops day by day and the performance of memory storage devices including the central processing unit (CPU) rapidly develops, the specifications of mobile communication terminals that users can use are changing. That is, the specifications of the mobile communication terminals have been changed a lot from when they were first released.

Moreover, as semiconductor process technology has advanced, the capacity increase cycle of memory storage devices, which acts as storage, has become much shorter than before, and mobile communication terminals, which used to function only as a call until recently, are now combined with cameras. In addition to storing the video and to transmit the video to the other party's mobile terminal. In addition, the space for storing files has also increased from the previous few MBytes to 32 MBytes, allowing up to 30 minutes of video recording. In addition, up to 32 document files of 1MByte can be stored. The present invention relates to a case of storing various types of files in a flash memory.

1 is a diagram illustrating a connection state for transferring data between a computer and a mobile communication terminal, and FIG. 2 is an internal block diagram of a mobile communication terminal for storing data downloaded from a computer.

Referring to FIG. 1, the mobile communication terminal 610 uses a data transmission port (eg, a parallel port) 615 as a universal serial bus (USB) 815 of a personal computer (PC) 810. After the connection, the desired file is downloaded from the computer 810 to the synchronous dynamic random access memory (SDRAM) inside the mobile communication terminal 610.

Referring to FIG. 2, an address and a data signal are stored between a memory (eg, flash memory) 613 of a mobile communication terminal 610 and a controller (eg, Advanced Risc Machine) 612. Are connected to respective corresponding ports 616 and 617. That is, the general purpose input output (GPIO) port 616 of the control unit (ARM) 612 and the write protection (WP) port 617 of the memory 613 are connected, and the WP port 617 is connected to the GPIO port 616. The operation of the memory 613 is controlled on the basis of the control signal.

The data downloaded through the data dedicated port 615 of the mobile communication terminal 610 is stored in the SDRAM 611 through the interface unit (I / F) 614. Data stored in the SDRAM 611 is determined by a control signal of a control device (ARM) 612 or not. That is, the read / write operation of the memory 613 is controlled by the GPIO signal outputted from the GPIO port 616 of the control unit (ARM) 612 to the WP port 617 of the memory 613. do. For example, when the control unit (ARM) 612 sets the GPIO signal to '1', the data stored in the SDRAM 611 is stored in the memory 613, and when the GPIO signal is set to '0', the SDRAM 611 ) Cannot be stored in the memory 613. However, since the data downloaded to the SDRAM 611 is not normally stored in the memory 613, the control device (ARM) 613 of the mobile communication terminal always sets the GPIO signal to '1' and does not change it thereafter. Do not.

Meanwhile, in the case of a user using a service (eg, June, etc.) that provides paid content for a mobile communication terminal, data (or contents, etc.) stored in the memory 613 of the mobile communication terminal 610 may be Radio waves can also be sent to other mobile communication terminals.

Therefore, the mobile communication terminal can be used as a portable storage medium like a USB driver. That is, as illustrated in FIG. 1, a user of a mobile communication terminal connected to a computer may find a desired file from a computer, download the file to the mobile communication terminal, connect the mobile communication terminal to another computer, and download the file to the computer. have. In this case, a user who works in a place where confidentiality is intentionally stores confidential data on a personal computer in a terminal device and retrieves it.

SUMMARY OF THE INVENTION The present invention has been made to solve such a conventional problem, and a first object of the present invention is to provide a method for limiting read / write operations of a mobile communication terminal for preventing the leakage of security data using the mobile communication terminal.

A second object of the present invention is to provide a method for restricting read / write operations of a mobile communication terminal, which can increase the security of confidential information in a workplace requiring confidentiality.

It is a third object of the present invention to provide a method for limiting read / write operations of a mobile communication terminal registered in a base station of an infomobile system.

A fourth object of the present invention is to provide a method of restricting read / write operations of a mobile communication terminal by changing the header information of a file downloaded to the mobile communication terminal.

In order to achieve the above objects, a read / write operation restriction method of a mobile communication terminal provided by the present invention moves a terminal number corresponding to a mobile communication terminal when a storage command for a predetermined document file downloaded from an external storage means is input. A first process of transmitting a communication terminal to a registered base station, a second process of receiving, by the mobile communication terminal, header change information of a user class corresponding to the terminal number, and a header received in the second process A third process of changing the header of the document file based on the change information, and a fourth process of comparing the changed header information with previously stored class header information to determine whether the document file can be stored in the mobile communication terminal; If it is determined in step 4 that the document file can be stored in the mobile communication terminal, If you save the file in the memory of the mobile communication terminal, and it is not characterized by a fifth step of outputting a message it can not be processed.

In addition, the processing method of the base station for limiting the read / write operation of the mobile communication terminal provided by the present invention in order to achieve the above object is a method for storing / managing the user-specific rating information and the rating management information of the registered mobile communication terminal; And a second process of receiving a terminal number from a mobile communication terminal and checking a user's grade corresponding to the terminal number by using the user's rating information, and using the rating management information. And a fourth process of reading corresponding header change information and a fourth process of delivering the header change information to the mobile communication terminal.

On the other hand, the base station is preferably an information mobile base station.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In this case, detailed descriptions of well-known functions and configurations that may unnecessarily obscure the subject matter of the present invention will be omitted.

The present invention corresponds to a case where a base station, like an infomobile service, wants to provide a service only to users in a corresponding service area. This is because a file storage or download authorization service should be provided based on the information of users in the service area.

Infomobile service refers to providing a call service regardless of wired or wireless terminals in a specific building or a limited area, and the system built to provide the information mobile service is called an infomobile system.

3 is a diagram illustrating a configuration example of such an infomobile system. Referring to FIG. 3, the information mobile system includes an information mobile base station 400 connected to a mobile telephone network 100 and a wired telephone network 200, and a plurality of repeaters 500 installed in a specific building or a restricted area. In particular, the information mobile base station 400 is connected to the wireline telephone network 200 through a private exchange 300 that provides a switching service to a plurality of wireline telephones (700). The information mobile base station 400 provides a communication service to terminals 600 of subscribers who subscribe to the information mobile service through the repeaters 500.

If the company has an infomobile system in place, employees' mobile phones will be connected to the local telephone network while they stay in the company, and they will be connected to the mobile phone network when they leave the company.

Employees can therefore convert their cell phones into wireless phones on the premises, while leaving the company to use their cell phones just like regular cell phones.

At this time, the information mobile base station 400 stores information about each subscriber's premises phone number and a general mobile phone number so that any incoming call of the subscriber's premises phone or mobile phone is connected to the currently connected network. .

In order to limit the read / write operation of the mobile communication terminal using the infomobile system, the user management database (DB) of the infomobile base station 400 must manage the class of each user. In addition, the infomobile base station 400 should store class management information for selectively allowing read / write operations of the mobile communication terminal for each class.

4 is an exemplary diagram illustrating a structure of a user management DB 410 managing a user in an infomobile base station 400 in order to apply a method of limiting a read / write operation of a mobile communication terminal according to an embodiment of the present invention. Referring to FIG. 4, the user management DB 410 includes a terminal number field 411, a username field 412, an extension telephone number field 413, and a rating field 414.

Preferably, the terminal number field 411 stores the mobile phone number of the user.

The grade 414 field stores grade information for limiting the range of use of the document file downloaded to the user's mobile communication terminal. A specific example thereof will be described with reference to FIG. 5.

5 is an exemplary diagram illustrating a structure of a rating management DB 420 for managing a user's rating in the infomobile base station 400 in order to apply a method for limiting read / write operations of a mobile communication terminal according to an embodiment of the present invention. . Referring to FIG. 5, the rating management DB 420 includes a rating field 421, a terminal storage field 422, another PC download field 423, and a header change information field 424.

The grade field 421 stores a grade necessary for limiting the read / write operation of the mobile communication terminal. 5 illustrates a case where the rating is divided into three stages of '1', '2', and '3'.

The terminal storage field 422 stores whether data downloaded by a user of a corresponding grade can be stored in the internal memory of the mobile communication terminal, and the other PC download field 423 downloads a user of a corresponding grade from an arbitrary PC. Whether the data stored in the internal memory can be downloaded to another PC, and the header change information field 424 stores information for changing the header information of the file downloaded to the mobile communication terminal.

At this time, the header change information stored in the header change information field 424 should be shared by the mobile communication terminal. This is to allow the mobile terminal to determine the extent of use of the document file according to the changed header change information of the document file.

In the example of FIG. 5, a user of grade '1' may store the downloaded data in the internal memory of the mobile communication terminal and may download the data to another PC. A user of grade '2' may download the downloaded data. It can only be stored in the terminal internal memory. That is, a user of grade '2' cannot download the downloaded data to another PC. Meanwhile, a user of grade '3' may not store the downloaded data in the internal memory of the mobile communication terminal or download the data to another PC. Therefore, the user of grade '3' can only view the downloaded data on the corresponding terminal.

Therefore, in the example of FIG. 5, the header change information of the user having the grade '1' and the header change information of the user having the grade '2' are stored separately. That is, in the case of the grade '1', the header change information of type 1 is stored, and in the case of the grade '2', the header change information of type 2 is stored.

Meanwhile, in the example of FIG. 5, valid data is not stored in the header change information 424 of the user having a rank of '3'. This is because the infomobile base station only needs to provide an unprocessable message to the user when the user of the grade '3' attempts the 'save' or 'download' operation. However, in the case of the grade '3', the header change information of type 3 may be stored, and then the mobile communication terminal may generate a message that cannot be processed by itself based on the type 3 header change information.

For example, for an infomobile system built in-house, the upper manager hierarchy (eg manager) sets the user level to '1' and the middle manager hierarchy (eg exaggeration etc.) sets the user class to '2'. The general staff should set the user level to '3'.

6A is a diagram illustrating a format of a typical document file. In general, the format of the document file is as illustrated in FIG. 6A, and the part corresponding to the first line of the document file is not changed. That is, a document file created by a word processor always has the value "D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00" as a hexadecimal value at 0x0 position, and this value is Hunminjeongeum document or Haeah and Hangul and MS Word all have the same value.

Therefore, the present invention regards the unchanged part as a kind of header, changes the header information of the file downloaded to the mobile communication terminal, and then limits the read / write operation of the mobile communication terminal by the header information. That is, in the present invention, by changing the value ('00 00 00 00 ') of the portion enlarged and displayed in FIG. 6A to a predetermined value according to the grade of the user who downloaded the document file to determine whether the document file can be stored or downloaded do.                     

FIG. 6B illustrates an example in which the changed value 'B1 E2 B9 D0' is stored based on the header change information 424 illustrated in FIG. 5 in the enlarged portion of FIG. 6A. If the value ('B1 E2 B9 D0') is the header change information of the user corresponding to the class '1', the mobile communication terminal of the user can store the file in the internal memory as well as save the file to another PC. You can also download it.

On the other hand, when the value ('B1 E2 B9 D0') is the header change information of the user corresponding to the class '2', the mobile communication terminal of the user may only store the file in the internal memory. In other words, you cannot download the file to another PC.

7 to 9 are diagrams illustrating a process of applying a read / write restriction method of a mobile communication terminal according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a processing procedure for a case where a user whose user level is '3' wants to store a document file downloaded from a PC in his mobile communication terminal.

Referring to FIG. 7, after the mobile communication terminal 600 downloads a predetermined document file from the PC 800 (S105), a storage key for storing the document file in a memory in the mobile communication terminal 600 is input. When (S110) mobile communication terminal 600 transmits the terminal number to the information mobile base station 400 (S115). Then, the information mobile base station 400 checks the rating of the user by the pre-stored user management information (S120). User management information for managing the user in the information mobile base station 400 is preferably configured as illustrated in FIG. Therefore, the infomobile base station 400 searches the user management DB 410 as illustrated in FIG. 4 by the terminal number received from the mobile communication terminal 600 in step S115 to confirm the user's grade. . Then, the grade management information previously stored in the infomobile base station 400 is searched with the user grade to determine whether the 'save' function is allowed for the corresponding user (S125).

In FIG. 7, an example of a case in which the user grade identified in step S120 is '3' is shown. Referring to the case in which the user grade is '3' in FIG. 5, the user may store and download a document file. Since the information mobile base station 400 transmits a 'process not possible message' to the mobile communication terminal 600 (S130), the mobile communication terminal 600 receiving the 'unprocessable message' is not able to process the 'unprocessable message'. Outputs (S135). In this case, it is preferable that the form of the "non-processable message" output by the mobile communication terminal 600 is either voice or text.

FIG. 8 illustrates a processing procedure for a case where a user having a user level of '2' in the example of FIG. 5 wants to download a document file downloaded from a PC to his mobile communication terminal and download the document file to another PC. Drawing.

Referring to FIG. 8, after the mobile communication terminal 600 downloads a predetermined document file from the PC 800 (S205), a storage key for storing the document file in a memory in the mobile communication terminal 600 is input. When (S210) mobile communication terminal 600 transmits the terminal number to the information mobile base station 400 (S215). Then the information mobile base station 400 checks the rating of the user by the pre-stored user management information (S220). User management information for managing the user in the information mobile base station 400 is preferably configured as illustrated in FIG. Accordingly, the infomobile base station 400 searches the user management DB 410 as illustrated in FIG. 4 by the terminal number received from the mobile communication terminal 600 in step S215 to check the user's level. . Then, the grade management information previously stored in the infomobile base station 400 with the user grade is searched to determine whether the 'save' function is permitted to the corresponding user (S225).

8 shows an example of the case where the user's grade identified in the process (S220) is '2'. Referring to the case where the user grade is '2' in FIG. 5, the user can only save the document file. Since the download is not possible, the infomobile base station 400 transmits the header change information (type 2) indicating that the document file can be stored only to the mobile communication terminal 600 (S230). After receiving the header change information (type 2), the mobile communication terminal 600 changes the header of the document file based on the header change information (S235) and stores the document file in the memory (S240). In this case, examples of the document file header before and after the change may refer to FIGS. 6A and 6B.

On the other hand, if a request for downloading a document file stored in the mobile communication terminal 600 to another PC is input (S245), the mobile communication terminal 600 checks the header of the document file (S250). To this end, the mobile communication terminal 600 should have already stored the header information of the downloadable document file.

8 shows an example of the case where the user level is '2', the header change information (type 2) transmitted from the information mobile base station 400 to the mobile communication terminal 600 in step S230 is a corresponding document file. Only allow the storage of. Accordingly, as a result of checking the process (S250), the mobile communication terminal 600 recognizes that the document file is not downloaded to another PC and outputs a 'downloadable message' (S255). In this case, it is preferable that the form of the "downloadable non-downloadable message" output by the mobile communication terminal 600 is either voice or text.

FIG. 9 illustrates a processing procedure for a case where a user having a user grade of '1' stores a document file downloaded from a PC in his mobile communication terminal and wants to download the document file to another PC. Drawing.

9, after the mobile communication terminal 600 downloads a predetermined document file from the PC1 820 (S305), a storage key for storing the document file in a memory in the mobile communication terminal 600 is input. When (S310) mobile communication terminal 600 transmits the terminal number to the information mobile base station 400 (S315). Then the information mobile base station 400 checks the rating of the user by the pre-stored user management information (S320). User management information for managing the user in the information mobile base station 400 is preferably configured as illustrated in FIG. Therefore, the infomobile base station 400 searches the user management DB 410 as illustrated in FIG. 4 by the terminal number received from the mobile communication terminal 600 in step S315 and confirms the rating of the corresponding user. . Then, the grade management information previously stored in the infomobile base station 400 with the user grade is searched to determine whether the 'save' function is permitted to the corresponding user (S325).

9 shows an example of the case where the user grade identified in the process (S320) is '1'. Referring to the case where the user grade is '1' in FIG. 5, the user may store and download the document file. Since all possible, the information mobile base station 400 transmits the header change information (type 1) indicating that the document file can be stored and downloaded to the mobile communication terminal 600 (S330). After receiving the header change information (type 1), the mobile communication terminal 600 changes the header of the document file based on the header change information (S335) and stores the document file in the memory (S340). In this case, examples of the document file header before and after the change may refer to FIGS. 6A and 6B.

On the other hand, when a request for downloading a document file stored in the mobile communication terminal 600 to another PC is input (S345), the mobile communication terminal 600 checks the header of the document file (S350). To this end, the mobile communication terminal 600 should have already stored the header information of the downloadable document file.

9 shows an example of the case where the user level is '1', the header change information (type 1) transmitted from the information mobile base station 400 to the mobile communication terminal 600 in step S330 is a corresponding document file. Allow both save and download. Therefore, as a result of checking the process (S350), the mobile communication terminal 600 recognizes that the document file is downloaded to another PC (PC 2) 830 and downloads the document file to another PC (PC2) 830 ( S355).

In the above description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention. Therefore, the scope of the present invention should not be defined by the described embodiments, but should be determined by the equivalent of claims and claims.

As described above, the present invention receives the header change information from the base station to which the corresponding mobile communication terminal is registered, and changes the header information of the file downloaded from the arbitrary storage device to the mobile communication terminal by using the header change information. By limiting the read / write operation of the mobile communication terminal by having the advantage that it is possible to prevent the leakage of security data using the mobile communication terminal. In addition, this has the effect of increasing the security of confidential information in the workplace requiring confidentiality.

Claims (15)

A first process of transmitting a terminal number corresponding to a mobile communication terminal to an infomobile base station when a storage command for a predetermined document file downloaded from an external storage means is input; A second process of receiving, by the mobile communication terminal, header change information of a user class corresponding to the terminal number from the infomobile base station having a user management database; A third step of changing the header of the document file based on the header change information received in the second step; A fourth step of comparing the changed header information with previously stored class header information to determine whether the corresponding document file can be stored in the mobile communication terminal; And if the document file is determined to be stored in the mobile communication terminal in the fourth process, storing the document file in the memory of the mobile communication terminal, and otherwise outputting a process disable message. Method of restricting read / write operation of a mobile communication terminal. The method of claim 1, When a command to download the document file is input to another storage means, the header information of the document file is compared with the previously stored class header information to determine whether the document file stored in the mobile communication terminal can be downloaded to another storage means. The sixth process, If it is determined in step 6 that the document file stored in the mobile communication terminal can be downloaded to another storage means, the method further includes downloading the document file to another storage means and otherwise outputting a download impossible message. Read / write operation restriction method of a mobile communication terminal, characterized in that. delete The method of claim 1 or 2, wherein the second process If the user of the mobile communication terminal is a user of the first class capable of both storing and downloading the document file, the header receiving information corresponding to the first class is received, and the user of the mobile communication terminal can only store the document file. In the case of a user of the second grade, the header change information corresponding to the second grade is received, and if the user of the mobile communication terminal is a user of the third grade that cannot store or download the document file, the header corresponding to the third grade is changed. A method of limiting read / write operations of a mobile communication terminal, characterized by receiving information. The method of claim 4, wherein the third process is The method of claim 2, wherein the header of the document file is changed using header change information corresponding to any one of the first to third grades received in the second process. The method of claim 1 or 2, wherein the second process If the user of the mobile communication terminal is a user of the first class capable of both storing and downloading the document file, the header receiving information corresponding to the first class is received, and the user of the mobile communication terminal can only store the document file. Receive header change information corresponding to the second level when the user of the second level, and the user can not process the message when the user of the mobile communication terminal is a user of the third level that can not both store and download the document file. Method of restricting read / write operation of a mobile communication terminal. The method of claim 6, wherein the third process is When the header change information corresponding to any one of the first to second grades received in the second process is received, the header of the document file is changed by using the header change information, and a message for not processing is received. Method of limiting read / write operation of a mobile communication terminal, characterized in that for outputting a message that can not be processed. The method of claim 1 or 2, wherein the fourth process Method of limiting the read / write operation of the mobile communication terminal, characterized in that to use the previously stored class header information after being set to the same value as the information mobile base station in advance. A first process of storing / managing the user-specific rating information of the mobile communication terminal and the rating management information in the user management database; A second process of receiving a terminal number from a mobile communication terminal and checking a user's rating corresponding to the terminal number by using the user's rating information; A third process of reading header change information corresponding to the checked grade by using the grade management information; And a fourth process of transmitting the header change information to the mobile communication terminal. delete The method of claim 9, wherein the first process is A method of processing an information mobile base station for limiting read / write operations of a mobile communication terminal, characterized by storing / managing user-specific rating information including a terminal number, a user name, an extension telephone number, and a rating of the mobile communication terminal. The method of claim 9, wherein the first process is Method of processing the information mobile base station for limiting the read / write operation of the mobile communication terminal, characterized by storing / managing the rating management information, including user rating, document file storage availability, document file download availability, and header change information . The method of claim 12, wherein the rating management information And a method of processing an information mobile base station for limiting read / write operations of a mobile communication terminal, characterized in that it is shared with all mobile communication terminals registered in the information mobile base station. The method of claim 9, wherein the second process is And processing the read / write operation of the mobile communication terminal by reading the rating information corresponding to the received terminal number from the user-specific rating information stored / managed in the first process. The method of claim 9, wherein the third process is Processing of the information mobile base station for limiting the read / write operation of the mobile communication terminal, characterized in that for reading the header change information corresponding to the level confirmed in the second process from the rating management information stored / managed in the first process Way.

Images