KR101489258B1 - System and Method for Contents Access Control Utilizing Wireless Internet Identification and Mobile Communication Terminal for the Same - Google Patents

Abstract

The present invention relates to a content access control system and method for controlling access to protected contents in which important information of a subscriber can be stored using a wireless Internet ID unique to a subscriber.

The content access control system of the present invention includes a customer management system that allocates a wireless Internet ID unique to a subscriber to a subscriber authentication card subscriber and transmits subscriber information including the corresponding wireless Internet ID to a card management system; A card management system for recording a wireless Internet ID allocated by the customer management system on a subscriber authentication card of a subscriber based on subscriber information transmitted from the customer management system; A mobile communication terminal in which a subscriber authentication card in which a wireless Internet ID unique to a subscriber is recorded is inserted. In the first operation of protected contents in which subscriber specific information requiring security can be stored, the ID of the content is inserted into a subscriber authentication card The wireless Internet ID stored in the subscriber identity card inserted in the terminal and the wireless Internet ID mapped with the ID of the corresponding content when the corresponding content is tried to be driven in the future, And a mobile communication terminal that compares IDs and drives corresponding contents only when they match.

According to the present invention, when a plurality of users use one terminal in a mobile communication service environment in which a subscriber can use another terminal with his / her subscriber identity card (USIM card), information unique to the subscriber such as financial contents is stored In addition to limiting other users' access to content that can be made available, it is not limited to the memory access itself, but rather restricts access to each content, since subscriber data, such as financial content, .

In addition, since the unique information of the subscriber is used instead of the unique information of the subscriber authentication card, even if the subscriber's authentication card is re-issued due to the loss of the card, the subscriber's own wireless Internet ID is used. In addition, since the subscriber's unique wireless Internet ID recorded in the subscriber's authentication card is used when issuing the subscriber authentication card, the customer information can be protected without a separate and cumbersome user authentication process such as login.

In addition, since the access control is performed for each individual content by using the mapping relationship between the IDs of the contents and the wireless Internet IDs, it is possible to selectively protect only the contents for which the customer data is important, such as financial contents, Control is performed automatically without user intervention, so that it is possible to safely protect customer information even when the terminal of the other person is used and the important information is not deleted by mistake.

Description

TECHNICAL FIELD [0001] The present invention relates to a contents access control system and method using a wireless Internet ID, and a mobile communication terminal for the same. [0002]

The present invention relates to a content access control system and method using a wireless Internet ID and a mobile communication terminal for the same. More particularly, the present invention relates to a system and method for recording a wireless Internet ID of a subscriber on a subscriber identity card (USIM card) Reads the wireless Internet ID from the subscriber identity card inserted into the terminal at the time of initial download, maps it with the corresponding content ID, stores it in a specific file area of the terminal, records it in the subscriber authentication card inserted in the terminal To a content access control system and method using a wireless Internet ID that compares a wireless Internet ID stored in advance with a wireless Internet ID stored in a file area and drives the content only when they match.

The Universal Subscriber Identity Module (USIM) card is a smart card inserted in the WCDMA terminal adopting the third generation mobile communication method. It is a smart card inserted in the GSM and CDMA environments of the second generation mobile communication, such as SIM card and UIM card, The function is basic, and it goes a step further and supports various financial transaction services such as traffic card, mobile banking, stock transaction, membership, settlement.

Meanwhile, as the WCDMA market is expanding, the USIM is being opened, and when the USIM is fully opened, the mobility of the terminal is guaranteed, so that consumers can easily use the desired terminal and the desired business entity by simply changing the USIM card The subscriber can receive his or her incoming USIM card by attaching his / her USIM card to a WCDMA terminal of another person.

If the mobility of the terminal is secured, the existing terminal distribution market in which the mobile communication company has a strong authority may change into an 'open market' such as Europe when the terminal manufacturers go directly to the sale, The guarantee of mobility will also serve as an opportunity to further activate various additional services based on the USIM, which is a characteristic of 3G services.

Meanwhile, when a subscriber moves his / her SIM card and receives a service using a plurality of terminals, contents for which subscriber specific information requiring protection such as financial information can be stored are temporarily stored in a terminal of another person due to carelessness of the subscriber In this case, important personal information of the subscriber may be exposed to a third party. In addition, even if the user lends his or her terminal to another person, the contents stored in his or her terminal may be exposed to others, so it is necessary to provide a plan for preventing leakage of personal information and illegal use that may occur due to USIM opening .

One of existing methods for protecting personal information in a WCDMA terminal is to compare an International Mobile Subscriber Identity (IMSI) stored in a USIM card with an IMSI stored in a terminal, To allow access to the database.

However, when IMSI is used, since the IMSI is changed when a new card is issued due to the loss of the USIM card, the IMSI stored in the terminal and the IMSI of the USIM card do not match with each other even though the terminal is owned by the subscriber. There is a problem in that it is possible to limit the access to the terminal memory in which the information is stored and not restrict the access to some information stored in the memory, There is a problem in that it is difficult to apply it to an environment in which a plurality of users use one terminal.

Meanwhile, a personal information protection method that allows a single terminal to be used by multiple subscribers includes dividing a memory of a terminal into a plurality of memory areas and mapping and managing each memory area with an IMSI so that each subscriber uses only its memory area There have been suggestions on how to do this.

This method stores one IMSI in one terminal and stores IMSI of several subscribers in one terminal as compared with the method of allowing memory access only when the IMSI matches with the corresponding IMSI. The IMSI stored in the terminal and the IMSI of the newly issued USIM card do not coincide with each other, so that the user is restricted from using his or her own terminal. .

Such a problem can be solved by going through a user authentication process such as log-in when accessing personal information. However, since user authentication information such as a password must be directly input every time, it is not only cumbersome but also there is a concern that user authentication information is exposed There is a drawback that it is vulnerable to security, and new methods need to be sought.

SUMMARY OF THE INVENTION Accordingly, the present invention has been made to solve the above problems and disadvantages of the related art, and it is an object of the present invention to provide a mobile communication service environment in which a subscriber can use a terminal of another person with his / her subscriber identity card (USIM card) Limits other users access to contents where subscriber specific information can be stored, restricts the access to memory contents, restricts the operation of contents in which subscriber data is important, such as financial contents, And to provide a mobile communication terminal for the system and method.

In particular, the present invention utilizes a wireless Internet ID unique to a subscriber, rather than unique information of the subscriber identity card, thereby preventing a subscriber's own access from being restricted when a subscriber identity card is reissued due to card loss or the like, , When the subscriber authentication card is issued, the subscriber's unique wireless Internet ID is recorded in the subscriber authentication card, and the information is used to utilize the wireless Internet ID so that the access control is automatically performed without a separate user authentication process A contents access control system and method, and a mobile communication terminal therefor.

In addition, when the content is first downloaded after downloading the content requiring protection, the ID of the corresponding content and the wireless Internet ID of the subscriber are mapped and stored in the terminal, and then the wireless Internet ID A content access control system and method using a wireless Internet ID that compares a wireless Internet ID stored in a corresponding content ID with a corresponding content ID at the time of initial operation, and drives the corresponding content only when they match, and a mobile communication terminal The purpose.

According to another aspect of the present invention, there is provided a system for controlling access to contents of a mobile communication terminal using a wireless Internet ID unique to a subscriber, the system comprising: a subscriber- A customer management system for delivering subscriber information including an Internet ID to a card management system; A card management system for recording a wireless Internet ID allocated by the customer management system on a subscriber authentication card of a subscriber based on subscriber information transmitted from the customer management system; A mobile communication terminal in which a subscriber authentication card in which a wireless Internet ID unique to a subscriber is recorded is inserted. In the first operation of protected contents in which subscriber specific information requiring security can be stored, the ID of the content is inserted into a subscriber authentication card The wireless Internet ID stored in the subscriber identity card inserted in the terminal and the wireless Internet ID mapped with the ID of the corresponding content when the corresponding content is tried to be driven in the future, A mobile communication terminal that compares IDs and drives corresponding contents only when they match; And a content access control system using the wireless Internet ID.

Here, the customer management system is a system for processing a new subscription service, a number change service, a device change service, a name change service, and a card change service for providing a mobile communication service. The subscriber authentication It is preferable to allocate a wireless Internet ID to the name of the card, and to hold the wireless Internet ID allocated to the corresponding name when the number changing job, the device changing job, and the card changing job process are processed.

When the subscriber authentication card is opened, the card management system records the wireless Internet ID on the subscriber authentication card through the card reader or transmits the wireless Internet ID to the subscriber authentication card through the wireless network, The Internet ID can be recorded.

According to another aspect of the present invention, there is provided a mobile communication terminal in which an arbitrary subscriber identity card is inserted and used, the mobile communication terminal comprising: Mapping the Internet ID to the ID of the corresponding protected content and storing / managing the ID in the ID mapping table, and if the protected content is attempted to be activated in the future, reads the wireless Internet ID recorded in the subscriber authentication card inserted in the terminal, An access authority manager for comparing the wireless Internet ID mapped with the ID of the content to the wireless Internet ID read from the subscriber authentication card and controlling the corresponding content to be driven only when the two IDs match; And a content driver for driving the content only when the wireless Internet ID of the subscriber authentication card coincides with the wireless Internet ID of the ID mapping table under the control of the access right management unit when the protected content is attempted to be driven, to provide.

The content driver may transmit the ID of the corresponding protected content to the access authority management unit when the protected content is attempted to be driven and may start the corresponding content when the content access command is returned from the access authority management unit.

In this case, when the protected content ID is transmitted from the content driver, the access right management unit compares the stored wireless Internet ID with the corresponding content ID by referring to the ID mapping table, and compares the stored wireless Internet ID with the wireless Internet ID recorded in the subscriber authentication card. And if the IDs match, return the content drive command to the content driver.

If the ID of the protected content transmitted from the content driver does not exist in the ID mapping table, the access right management unit maps the corresponding ID of the wireless Internet ID recorded in the subscriber identity card to the ID mapping table The content driving unit may return the content driving command to the content driving unit.

Here, the access right management unit can confirm whether or not the content protection process is performed from the user if the ID of the protected content does not exist in the ID mapping table. In this case, if the protection process of the content is requested by the user, The corresponding wireless Internet ID and corresponding content ID can be mapped and stored in the ID mapping table.

The content driver may transmit the ID of the corresponding protected content to the access authority management unit when the protected content is attempted to be activated, and automatically stop the corresponding content when the content operation termination command is returned from the access authority management unit.

In this case, when the protected content ID is transmitted from the content driver, the access right management unit compares the stored wireless Internet ID with the corresponding content ID by referring to the ID mapping table, and compares the stored wireless Internet ID with the wireless Internet ID recorded in the subscriber authentication card. And if the IDs do not coincide with each other, return a content driving end command to the content driving unit.

According to another aspect of the present invention, there is provided a method for controlling access to contents of a mobile communication terminal using a wireless Internet ID unique to a subscriber, the method comprising the steps of: An allocation step; An ID recording step of recording the wireless Internet ID in a subscriber authentication card of a subscriber to which the wireless Internet ID is allocated; In a mobile communication terminal in which a subscriber identity card in which a wireless Internet ID is recorded is inserted, the identity of the corresponding content may be stored in the subscriber identity card inserted in the subscriber identity card An access authority management step of mapping the Internet ID to a specific file area inside the terminal; When the mobile communication terminal attempts to play the protected content, it reads the wireless Internet ID from the subscriber authentication card inserted in the terminal, and determines whether the access permission for comparing the corresponding wireless Internet ID with the ID of the corresponding content is compared with the stored wireless Internet ID step; And an access control step of automatically activating the corresponding content if the wireless Internet ID mapped to the ID of the protected content matches the wireless Internet ID read from the subscriber authentication card inserted in the terminal, And a content access control method using the wireless Internet ID.

At this time, the ID assigning step is a step for assigning the ID to the customer management system for processing a new subscription job, a number change job, a device change job, a name change job, and a card change job for providing a mobile communication service, And assigning a wireless Internet ID to the name of the subscriber identity card.

In the card management system managing the subscriber identity card, the wireless ID of the card holder is recorded on the subscriber identity card through the card reader when the subscriber identity card is opened, or the wireless Internet ID is recorded on the subscriber identity card through the wireless network Transmitting the wireless Internet ID of the card holder and recording the wireless Internet ID in the corresponding subscriber authentication card.

According to another aspect of the present invention, there is provided a method for controlling content access using a wireless Internet ID unique to a subscriber in a mobile communication terminal in which an arbitrary subscriber identity card is inserted and used, An access authorization management step of mapping the ID of the corresponding content to the wireless Internet ID recorded in the subscriber authentication card inserted in the terminal and storing the ID in the ID mapping table; Determining whether the access permitted to read the wireless Internet ID from the subscriber authentication card inserted in the terminal and comparing the corresponding wireless Internet ID with the ID of the corresponding content and the stored wireless Internet ID when the protected content is attempted to be driven; And an access control step of automatically activating the corresponding content if the wireless Internet ID mapped to the ID of the protected content matches the wireless Internet ID read from the subscriber authentication card inserted in the terminal, And a content access control method using the wireless Internet ID.

The access authority management step may include the steps of: a) determining whether the ID of the corresponding protected content exists in the ID mapping table when the specific protected content is attempted to be activated; b) if it does not exist, reading the wireless Internet ID from the subscriber identity card inserted in the terminal, mapping the wireless Internet ID and the ID of the corresponding protected content, and storing the ID in the ID mapping table; . ≪ / RTI >

In this case, if the ID of the protected content does not exist in the ID mapping table, the step b) includes checking whether the content protection process is performed by the user; If the user is required to perform the protection process of the content, the step of mapping the wireless Internet ID recorded in the subscriber identity card and the corresponding content ID and storing the mapping in the ID mapping table.

Therefore, according to the contents access control system and method using the wireless Internet ID of the present invention and the mobile communication terminal therefor, it is possible to provide a mobile communication service environment in which a subscriber can use a terminal of another person with his subscriber authentication card (USIM card) It is possible not only to restrict access to other users to contents in which information unique to a subscriber such as financial contents can be stored but also to restrict the access to the memory, Since data only restricts the driving of important content, there is an advantage that access restriction can be optionally made for each content.

Particularly, according to the present invention, not only unique information of the subscriber identity card but also the identity of the subscriber, which is information unique to the subscriber, is utilized even if the subscriber identity card is reissued due to the loss of the card or the like, It is possible to prevent the content access restriction of the subscriber authentication card and to protect the customer information without requiring a separate and cumbersome user authentication procedure such as log-in because the subscribers' unique wireless Internet ID recorded in the subscriber authentication card is used when the subscriber authentication card is issued .

In addition, according to the present invention, since the access control is performed for each individual content by using the mapping relationship between the IDs of the contents and the wireless Internet IDs, it is possible to selectively protect only important contents such as financial contents, Since the rights management and access control are performed automatically without user intervention, it is possible to securely protect the customer information even when the other terminal is used and the important information is not accidentally deleted.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: FIG.

1 is a configuration diagram of a content access control system using a wireless Internet ID according to an embodiment of the present invention.

As shown in the figure, the contents access control system of the present invention for controlling contents access of a mobile communication terminal using a wireless Internet ID unique to a subscriber includes a customer management system 100, a USIM card management system (UCMS) 200, And a mobile communication terminal 400 in which a subscriber identity card 300 is inserted and used.

The customer management system 100 is a system for processing a new subscription service, a number change service, a device change service, a name change service, a card change service, and the like of a mobile communication service provider for providing a mobile communication service. 300 to a subscriber of the subscriber, and may have a predetermined ID generation rule for automatically assigning a wireless Internet ID.

Since the wireless Internet ID is information unique to the subscriber, the customer management system 100 may notify the subscriber identification card 300 of the name of the subscriber authentication card 300 when processing a new subscription job and a name change job, The wireless Internet ID must be allocated to the corresponding user (subscriber) at the time of the number change job, the device change job, and the card change job, which is a job in which no new subscriber is generated.

Meanwhile, in the present invention, the wireless Internet ID is an ID uniquely assigned to the subscriber. Namely, the wireless Internet ID is a wireless Internet ID in the meaning of an ID for protecting contents downloaded and used through the wireless Internet. Therefore, The Internet ID is not limited to a specific ID by its name.

Next, the USIM card management system 200 receives the wireless Internet ID allocated to the subscriber from the customer management system 100 when the subscriber identity card 300 is opened in the name of a specific subscriber, And records the corresponding wireless Internet ID.

The wireless Internet ID recording to the subscriber identity card 300 can be performed by a method of directly recording through a card reader (POS terminal) or an over-the-air (OTA) method. The OTA scheme transmits information to the subscriber identity card 300 through a wireless network. The USIM card management system 200 transmits the subscriber identity card 300 through the wireless network to the mobile communication terminal 400 in which the subscriber identity card 300 is inserted. When the wireless Internet ID is transmitted, the wireless Internet ID is recorded in the subscriber identity card 300 inserted in the terminal 400. [

When the subscriber identity card 300 in which the wireless Internet ID is recorded is inserted into the terminal 400, the corresponding mobile terminal 400 is used as the subscriber name of the corresponding subscriber authentication card 300 .

Accordingly, the mobile communication terminal 400, to which the subscriber identification card 300 of a plurality of subscribers can be inserted, can be used only when the subscriber who first downloads the protected content in which the important information of the customer, such as financial contents, Control access to content for use.

To this end, when the protected content is downloaded and activated for the first time in the present invention, the mobile communication terminal 400 displays the wireless Internet ID recorded in the subscriber authentication card 300 inserted in the terminal 400 at that time, And stores it in a specific area of the terminal memory.

Then, when the corresponding content is tried to be driven, the mobile communication terminal 400 extracts the wireless Internet ID mapped to the ID of the corresponding content in the ID mapping table stored in the terminal, and extracts the wireless Internet ID from the subscriber authentication card 300 inserted in the terminal, And controls the access of the content by driving the content when the two IDs coincide with each other. If the two IDs do not match, the content operation is automatically terminated.

Meanwhile, in the present invention, access rights management and access control are performed on protected contents that can store important information such as financial contents among various contents loaded in a terminal, And may be determined by the user designating the protected content.

If the content is determined to be the content itself, the terminal can inquire the attribute values of the content to be driven and check access rights management and access control automatically after checking whether the content is protected content. If it is confirmed that the content is protected, Access rights management and access control can be performed only when there is a request for protection.

If it is determined that the content is not protected content, the terminal can manage the access rights management and access control by managing the content designated by the user as the protected content.

The contents access control procedure using the wireless Internet ID in the mobile communication terminal will be described with reference to FIGS. 2 and 3. FIG.

FIG. 2 shows a content access control operation in the mobile communication terminal after the content ID and the wireless Internet ID are mapped and stored at the time of initial activation of the protected content.

As shown in the figure, the mobile communication terminal of the present invention determines whether the corresponding content is protected content whose access rights are managed (S12). In this case, the step S12 of determining whether or not the content is protected may be a step of determining whether there is a wireless Internet ID mapped to the ID of the content by inquiring the ID mapping table held by the terminal.

Next, if the content is the protected content for which the access right is managed, the terminal reads the wireless Internet ID recorded in the card from the currently inserted subscriber authentication card (S13), refers to the ID mapping table, (S14). If the two IDs match, the content is driven (S15). Otherwise, the operation of the corresponding content is automatically terminated Restrict access.

Meanwhile, access authority management must be performed in advance for content access control as described with reference to FIG. 2, and the procedure is as shown in FIG.

As shown in the figure, when the mobile communication terminal is down-loaded to the terminal for the first time (S21), the mobile communication terminal determines whether the content is protected content (S22).

Here, the step S22 of determining whether or not the content is the protected content (content to be protected) may be a step of checking whether the content itself is designated as the protected content, and whether or not the content is designated as the protected content , And checking whether there is a protection request of the corresponding protected content from the user. If it is determined that the content is not protected, the step S22 of determining whether the protected content is protected may be a step of inquiring whether or not the content is protected by the user.

Next, if the content is protected content, the terminal reads the wireless Internet ID from the subscriber identity card inserted in the terminal, maps the corresponding wireless Internet ID to the ID of the corresponding protected content, and stores it in the ID mapping table (S23).

Meanwhile, FIGS. 2 and 3 illustrate a terminal operation process when contents are initially driven and when content is driven after ID mapping, and the terminal actually starts the corresponding contents at the time of content operation If it is the first drive, the procedure of FIG. 3 should be performed. Otherwise, the procedure of FIG. 2 should be performed.

Accordingly, when the protected content is attempted to be activated, the mobile communication terminal of the present invention can check whether the ID of the corresponding protected content exists in the ID mapping table to confirm whether the protected content is initially activated. That is, if the ID of the corresponding protected content does not exist in the ID mapping table, the terminal recognizes that the corresponding content is first driven and proceeds with the access authority management procedure as shown in FIG.

If the ID of the corresponding protected content exists in the ID mapping table, the terminal proceeds to the access control procedure as shown in FIG. 2. In this case, the step S12 of checking whether the corresponding content is the protected content in FIG. It may be a step of confirming whether or not the ID exists in the ID mapping table.

4 is a block diagram of a mobile communication terminal according to an embodiment of the present invention.

As shown, the mobile communication terminal 400 of the present invention includes a content driving unit 410 for executing content, an access authority managing unit 420 for managing content access authority / access control, and a subscriber authentication Card 300 as shown in FIG.

First, when the protection content is attempted to be driven, the content driver 410 controls the access right management unit 420 only when the wireless Internet ID of the subscriber authentication card 300 matches the wireless Internet ID of the ID mapping table The content is driven, and if not, the content is automatically terminated.

The content driver 410 may transmit the ID of the corresponding content to the access authority manager 420 and may transmit the content driving command or the content driving termination command from the access authority manager 420, And executes the content or automatically terminates the content operation.

The access authority managing unit 420 manages the ID mapping tables in which the IDs of the respective protected contents stored in the terminal are mapped to the wireless Internet IDs used for the first time of the corresponding protected contents.

The access authority management unit 420 also reads the wireless Internet ID from the subscriber authentication card when the corresponding protected content whose ID is managed in the ID mapping table is attempted and maps the ID of the corresponding content using the ID mapping table Determines whether or not the wireless Internet ID matches the wireless Internet ID read from the subscriber identity card, and provides a content driving command or a content driving end command to the content driving unit 410.

Meanwhile, as described above, the access authority managing unit 420 performs a procedure of managing an access authority or a procedure of controlling access according to whether or not protected contents are initially operated.

To this end, the access authority managing unit 420 receives the ID of the content that is attempted to be driven from the content driving unit 410, and determines whether the ID of the corresponding content exists in the ID mapping table have.

If the ID of the corresponding content does not exist in the ID mapping table, the access authority managing unit 420 maps the ID of the wireless Internet recorded in the subscriber identity card 300 to the corresponding ID, stores the ID in the ID mapping table, And returns the content driving command to the driving unit 410.

In some cases, the access right management unit 420 confirms whether or not the content is to be protected, from the user, and performs an ID mapping procedure, that is, an access right management procedure only when a protection process of the content is requested by the user You can go ahead.

On the other hand, if there is an ID of the content in the ID mapping table, the access authority managing unit 420 compares the wireless Internet ID mapped to the corresponding content ID with the wireless Internet ID stored in the subscriber identity card 300, The content driving unit 410 returns the content driving command to the content driving unit 410. If the content driving command is not identical to the content driving command,

In this way, the mobile communication terminal 400 of the present invention manages the content ID together with the wireless Internet ID of the subscriber who originally used the content, so that even if the subscriber authentication card of various subscribers is inserted into the terminal and used, Restricting access to other users and resulting information exposure.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the invention. You have to understand. The scope of the present invention is defined by the appended claims rather than the detailed description and all changes or modifications derived from the meaning and scope of the claims and their equivalents are to be construed as being included within the scope of the present invention do.

The present invention can be applied to a mobile communication terminal for inserting and using a removable subscriber identity card, a customer management system of a mobile communication company that is responsible for a new subscription, a change of name, and a card management system for managing a subscriber authentication card opening such as a USIM have.

It is another object of the present invention to provide a mobile communication service environment in which mobility of a terminal is assured by opening a subscriber identity card, and when a plurality of users use one terminal, The present invention can be utilized in a mobile communication terminal that can be effectively used to restrict access, automatically manage access rights of contents requiring protection without user intervention, and automatically control access of other users.

1 is a configuration diagram of a content access control system using a wireless Internet ID according to an embodiment of the present invention;

FIG. 2 is a flowchart sequentially illustrating a content access control method using a wireless Internet ID according to an embodiment of the present invention.

FIG. 3 is a flowchart sequentially illustrating an access right management procedure for content access control using a wireless Internet ID according to an embodiment of the present invention. FIG.

4 is a block diagram of a mobile communication terminal according to an embodiment of the present invention.

Description of the Related Art

100: Customer Management System

200: USIM Card Management System (UCMS)

300: Subscriber Identity Card (USIM)

400: mobile communication terminal

410:

420: Access authority manager

Claims (15)

A system for controlling content access of a mobile communication terminal using a wireless Internet ID unique to a subscriber, A customer management system that allocates a wireless Internet ID unique to a subscriber to a mobile communication service subscriber using the subscriber authentication card and transmits subscriber information including the wireless Internet ID to the USIM card management system; A USIM card management system for recording a wireless Internet ID allocated by the customer management system on a subscriber authentication card of a subscriber based on subscriber information transmitted from the customer management system; A mobile communication terminal in which a subscriber authentication card in which a wireless Internet ID unique to a subscriber is recorded is inserted. In the first operation of protected contents in which subscriber specific information requiring security can be stored, the ID of the content is inserted into a subscriber authentication card The wireless Internet ID stored in the subscriber identity card inserted in the terminal and the wireless Internet ID mapped with the ID of the corresponding content when the corresponding content is tried to be driven in the future, A mobile communication terminal that compares IDs and drives corresponding contents only when they match; Lt; / RTI > Wherein the mobile communication terminal determines whether a mapped wireless Internet ID exists by inquiring the ID mapping table and determines whether the content is designated as protected content whose access rights are managed. Content access control system utilized. The method according to claim 1, Wherein the customer management system comprises: A system for processing a new subscription job, a number change job, a device change job, a name change job, and a card change job for providing a mobile communication service, And the wireless Internet ID allocated to the corresponding user is maintained when the number changing job, the device changing job, and the card changing job are processed. The method according to claim 1, The USIM card management system comprises: When the subscriber authentication card is opened, the wireless Internet ID is recorded on the subscriber authentication card through the card reader, or the wireless Internet ID is transmitted to the subscriber authentication card through the wireless network to record the wireless Internet ID on the subscriber authentication card Content access control system using wireless Internet ID. In a mobile communication terminal in which an arbitrary subscriber identity card is inserted and used, When the protected content loaded in the terminal is operated for the first time, the wireless Internet ID recorded in the subscriber identity card inserted in the terminal is mapped to the ID of the corresponding protected content and stored / managed in the ID mapping table. Reads the wireless Internet ID recorded in the subscriber identity card inserted in the terminal, compares the wireless Internet ID mapped with the ID of the corresponding content with the wireless Internet ID read from the subscriber authentication card by referring to the ID mapping table, An access right management unit for controlling the content to be driven only when IDs match; A content driver for driving the content only when the wireless Internet ID of the subscriber authentication card matches the wireless Internet ID of the ID mapping table under the control of the access right management unit when the protected content is attempted to be driven; Lt; / RTI > Wherein the mobile communication terminal determines whether a mapped wireless Internet ID exists by inquiring the ID mapping table, and determines whether the content is designated as protected content whose access right is managed. 5. The method of claim 4, The content- When an attempt is made to drive the protected content, the ID of the corresponding protected content is transferred to the access authority management unit, and when the content operation command is returned from the access authority management unit, The access authority management unit, When the protected content ID is transmitted from the content driver, the wireless Internet ID stored in the ID mapping table is compared with the wireless Internet ID stored in the particle authentication card. If the ID matches the content ID, And returns a content driving command to the driving unit. 6. The method of claim 5, The access authority management unit, If the ID of the protected content transmitted from the content driver does not exist in the ID mapping table, the ID mapping unit maps the ID of the wireless Internet recorded in the subscriber authentication card to the corresponding ID, stores the ID in the ID mapping table, And returns a content drive command. The method according to claim 6, The access authority management unit, If the ID of the protected content does not exist in the ID mapping table, it is checked from the user whether or not the content protection process is performed. If the protection process of the corresponding content is requested by the user, the wireless Internet ID recorded in the subscriber authentication card is mapped to the corresponding content ID And stores it in an ID mapping table. 8. The method according to any one of claims 4 to 7, The content- Wherein the control unit transmits the ID of the corresponding protected content to the access right management unit when the protected content is attempted to be driven and automatically terminates the operation of the content when the content operation end command is returned from the access right management unit, The access authority management unit, When the protected content ID is transmitted from the content driver, the wireless Internet ID stored in the ID mapping table is compared with the wireless Internet ID recorded in the subscriber identity card. If the two IDs do not coincide with each other, And returns a content driving end command to the driving unit. A method for controlling content access of a mobile communication terminal using a wireless Internet ID unique to a subscriber, An ID assignment step of assigning a wireless Internet ID unique to a subscriber to a mobile communication service subscriber using the subscriber identity card; An ID recording step of recording the wireless Internet ID in a subscriber authentication card of a person assigned with the wireless Internet ID; Determining whether a mapped wireless Internet ID exists by inquiring the ID mapping table, and determining whether the content is designated as a protected content whose access right is managed; In a mobile communication terminal in which a subscriber identity card in which a wireless Internet ID is recorded is inserted, the identity of the corresponding content may be stored in the subscriber identity card inserted in the subscriber identity card An access authority management step of mapping the Internet ID to a specific file area inside the terminal; When the mobile communication terminal attempts to play the protected content, it reads the wireless Internet ID from the subscriber identity card inserted in the terminal, and determines whether the access permission to compare the corresponding wireless Internet ID with the ID of the corresponding content is compared with the stored wireless Internet ID step; And An access control step of, when the wireless Internet ID mapped with the ID of the protected content matches the wireless Internet ID read from the subscriber authentication card inserted in the terminal, activating the corresponding content; A content access control method using a wireless Internet ID. 10. The method of claim 9, Wherein the ID assignment step comprises: In a customer management system for processing a new subscription job, a number change job, a device change job, a name change job, and a card change job for providing a mobile communication service, the name of the subscriber identification card And a step of assigning a wireless Internet ID to the content access control method using the wireless Internet ID. 10. The method of claim 9, The ID recording step may include: In the USIM card management system that manages the subscriber authentication card, when the subscriber authentication card is opened, the wireless Internet ID of the card holder is recorded on the subscriber authentication card through the card reader, or the wireless Internet ID of the card holder And transmitting the ID to the subscriber identity card so that the wireless Internet ID is recorded in the subscriber identity card. A method for controlling content access using a wireless Internet ID unique to a subscriber in a mobile communication terminal in which an arbitrary subscriber identity card is inserted and used, Determining whether a mapped wireless Internet ID exists by inquiring the ID mapping table, and determining whether the content is designated as a protected content whose access right is managed; An access authority management step of mapping the ID of the corresponding content to the wireless Internet ID recorded in the subscriber identity card inserted in the terminal and storing the ID in the ID mapping table when the protected content is stored in the ID mapping table; Determining whether the access permitted to read the wireless Internet ID from the subscriber authentication card inserted in the terminal and comparing the corresponding wireless Internet ID with the ID of the corresponding content and the stored wireless Internet ID when the protected content is attempted to be driven; And An access control step of, when the wireless Internet ID mapped with the ID of the protected content matches the wireless Internet ID read from the subscriber authentication card inserted in the terminal, activating the corresponding content; A content access control method using a wireless Internet ID. 13. The method of claim 12, Wherein the access authority management step comprises: a) judging whether an ID of the corresponding protected content exists in the ID mapping table when an attempt is made to drive the specific protected content; b) if it does not exist, reading the wireless Internet ID from the subscriber identity card inserted in the terminal, mapping the wireless Internet ID and the ID of the corresponding protected content, and storing the ID in the ID mapping table; The method of claim 1, further comprising: 14. The method of claim 13, The step b) If the ID of the protected content does not exist in the ID mapping table, checking whether the content protection process is performed by the user; A step of mapping the wireless Internet ID recorded in the subscriber identity card and the corresponding content ID to the ID mapping table when the user requests the protection process of the corresponding content; The method of claim 1, further comprising: A USIM card in which a subscriber unique wireless Internet ID for driving the corresponding content is recorded only when the subscriber-specific information requiring security is stored and compared with the ID of the corresponding content when the protected content is driven.

Images