KR101978300B1 - Method for providing user application with Universal Subscriber Identity Module, system thereof, terminal thereof and apparatus thereof - Google Patents

Abstract

The present invention relates to a method for providing an application for each user using a USIM, a system for the same, a terminal for the same, and a service apparatus for the same. In particular, the access authority of the application is classified and set according to the user for each USIM of the terminal. Provide the application accordingly. Through this, by controlling the access to the user application stored separately by USIM through user authentication, it is easy to manage applications between users when a single terminal is used by multiple users. In addition, personal applications are managed separately in the terminal or the service device to increase the protection and security of personal information. In addition, by separately managing the downloaded application for each user, even if the application does not download itself, it is possible to move or copy the application according to the sharing request of the user who downloaded the application.

Description

A method for providing an application for each user using a USIM, a system for the same, a terminal for the same, and a service device for the same.

The present invention relates to a method and a system for providing an application of a terminal. More particularly, the access authority of an application is distinguished and set according to a user for each USIM of a terminal, and an application for each user using a USIM that provides an application according to the access authority is provided. A method, a system therefor, a terminal therefor, and a service apparatus therefor.

With the development of mobile communication networks and the development of terminal specifications, mobile communication terminals have become a necessity of modern man and are evolving into total entertainment devices beyond the conventional simple communication devices or information providing devices.

In particular, a mobile communication terminal equipped with a Universal Subscriber Identity Module (USIM) card, which is essential for using mobile communication services such as Wideband Code Division Multiple Access (WCDMA) and Long Term Evolution (LTE) The mobility of the USIM card as well as the mobility between the mobile carriers with a single USIM card. The USIM card is a combination of a conventional subscriber identity module (SIM) card with subscriber information and a universal IC card (UICC), and implements various functions such as user authentication, global roaming, and e-commerce in one card.

In addition, the USIM card is a small memory that acts as a kind of storage device, and can store not only mobile subscriber information but also personal storage information such as a phone book and a short message service (SMS) message. The stored information can be used without having to record a new mobile communication terminal and the contents of the USIM card can be used as it is. In addition, even if a user wants to change to another mobile communication provider, the user can easily change to another mobile communication provider by using the user's mobile phone terminal and the USIM card used by the user without going through the mobile communication service provider.

Accordingly, a mobile communication terminal user can freely change a mobile communication provider while maintaining his or her USIM card to join a mobile communication network of another company or replace a mobile communication terminal. You can use your device by inserting your own SIM card.

In this case, since all users can download and use each downloaded application, regardless of the user, it is not easy to protect privacy between individuals, and problems arise in application management.

Registered Korea Patent No. 10-0921150, October 01, 2009 (Name: Application management method of the mobile communication terminal using a user identification module card)

In order to solve this conventional problem, an object of the present invention is to check the existence of the USIM card at the time of booting the terminal, and if the USIM card is present, after the user authentication to load and provide the application associated with the basic application and the user for each USIM To provide a user-specific application providing method using the USIM, a system therefor, a terminal therefor and a service device therefor.

Application providing system for each user using the USIM according to an embodiment of the present invention for achieving the above object, if the USIM is present at boot, performs a user authentication procedure, information about the basic application and the application associated with the USIM Requesting the service device, receiving information about the corresponding application from the service device, performing user authentication according to the request for loading the information on the application from the terminal, and searching for information on the application requesting the load. Characterized in that it comprises a service device provided to the terminal.

In addition, in the terminal according to the present invention, if the storage unit for storing information about the application and the basic application for each of the at least one USIM and the USIM is present at boot, performs a user authentication corresponding to the USIM, and And a controller configured to load information about an application related to the USIM from the storage and to provide information about the loaded application.

In the terminal according to the present invention, at least one application is downloaded, and the information about the downloaded application is classified and stored as USIM IMSI information for each user.

In addition, the terminal according to the invention, characterized in that it further comprises a communication unit for requesting the service device to load the information on the basic application and the user application for each USIM, and receives information about the application from the service device.

In addition, in the terminal according to the present invention, the controller checks the presence of the USIM at boot, performs a user authentication procedure if the USIM exists, and, if the user authentication is completed, information about the basic application and the application associated with the USIM Request to the service apparatus, receive information on the corresponding application from the service apparatus, and provide information on the application received from the service apparatus.

The service apparatus according to an embodiment of the present invention is a service communication unit for communicating with at least one terminal to transmit and receive data related to the transmission of information about a user application for each USIM, and the information about the at least one application as USIM IMSI information for each user. Receives a signal requesting the loading of information on the application from the service storage unit and the terminal to store the information, performs a user authentication for the terminal requesting the information on the application according to the request, and when the user authentication is complete, download And a service control unit for searching for information on the requested application and providing the terminal with information about the found application.

According to an embodiment of the present invention, a method for providing an application for each user using a USIM may include: checking whether a USIM exists when the terminal is booted, performing a user authentication corresponding to the USIM when the USIM exists, and the user. When the authentication is completed, the terminal includes loading information on the basic application and the application associated with the USIM, and providing information on the loaded application by the terminal.

In addition, in the user-specific application providing method using the USIM according to the present invention, the step of performing the user authentication, characterized in that the terminal performs the user authentication through the EAP-AKA authentication protocol.

In addition, in the user-specific application providing method using the USIM in accordance with the present invention, the step of downloading at least one application by the terminal and the step of storing the information on the application downloaded by the terminal divided by the USIM IMSI information for each user further It is characterized by including.

In addition, in the user-specific application providing method using the USIM according to the present invention, the loading step is to determine whether there is a shared application shared by the terminal with other users, and if the shared application exists, the terminal for the shared application Retrieving information and loading information on the found shared application by the terminal.

In addition, in the user-specific application providing method using the USIM according to the present invention, if the terminal is requested to copy at least one application, the step of copying information on the corresponding application to share the application with other users and the terminal And classifying and storing the information on the copied application into USIM IMSI information of another user.

In addition, in the user-specific application providing method using the USIM according to the present invention, if the terminal is requested to move to at least one application, the information on the application is divided into the USIM IMSI of the other user requesting the movement of the application to store And deleting information on the moved application in the pre-stored area.

In addition, in the user-specific application providing method using the USIM according to the present invention, if the USIM does not exist when the terminal is booted, characterized in that it comprises the step of providing only information on the basic application.

According to an embodiment of the present invention, a method for providing an application for each user using a USIM includes checking whether a USIM exists when the terminal is booted, performing a user authentication procedure when the terminal has a USIM, and completing user authentication. The terminal requesting information on the basic application and the application associated with the USIM to the service device; receiving, by the terminal, information on the corresponding application from the service device; and information on the application received by the terminal from the service device. It characterized in that it comprises a step of providing.

According to an embodiment of the present invention, there is provided a method for providing an application for each user using the USIM, in which a service device receives a signal for requesting to load information about an application from a terminal, and the service device performs user authentication of the terminal according to the request. And, when the user authentication is completed, the service apparatus searching for information on the application associated with the USIM, and the service apparatus providing the terminal with information about the found application.

As another means for solving the problem of the present invention, it is characterized by providing a computer-readable recording medium recording a program for executing a user-specific application providing method using the USIM.

According to the present invention, by controlling the access to the user applications stored by USIM through user authentication, when multiple users use one terminal, it is easy to manage applications among users.

In addition, personal applications are managed separately in the terminal or the service device to increase the protection and security of personal information.

In addition, by separately managing the downloaded application for each user, even if the application does not download itself, it is possible to move or copy the application according to the sharing request of the user who downloaded the application.

1 is a view showing the configuration of a user-specific application system using a USIM according to an embodiment of the present invention.
2 is a block diagram illustrating a configuration of a terminal according to an exemplary embodiment of the present invention.
3 is a block diagram illustrating a configuration of a service apparatus according to an exemplary embodiment of the present invention.
4 is a flowchart illustrating a user-specific application providing method using the USIM according to an embodiment of the present invention.
5 is a flowchart illustrating a method of operating a terminal according to the present invention.
6 is a flowchart illustrating a method of operating a service apparatus according to the present invention.
7A to 7D are exemplary diagrams for describing a method for providing an application for each user using the USIM.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. However, in the following description and the accompanying drawings, detailed descriptions of well-known functions or configurations that may obscure the subject matter of the present invention will be omitted. In addition, it should be noted that like elements are denoted by the same reference numerals as much as possible throughout the drawings.

The terms or words used in the specification and claims described below should not be construed as being limited to ordinary or dictionary meanings, and the inventors are appropriate as concepts of terms for explaining their own invention in the best way. It should be interpreted as meanings and concepts in accordance with the technical spirit of the present invention based on the principle that it can be defined. Therefore, the embodiments described in the present specification and the configuration shown in the drawings are only the most preferred embodiments of the present invention, and do not represent all of the technical ideas of the present invention, and various alternatives may be substituted at the time of the present application. It should be understood that there may be equivalents and variations.

In the following description, a terminal according to an embodiment of the present invention is a terminal on which a USIM card can be mounted, and a mobile communication terminal capable of directly downloading or executing an application will be described as a representative example, but the terminal is not limited to the mobile communication terminal. It can be applied to various terminals such as all information communication devices, multimedia terminals, wired terminals, fixed terminals, and IP (Internet Protocol) terminals. In addition, the terminal may be a mobile phone, a portable multimedia player (PMP), a mobile internet device (MID), a smart phone, a desktop, a tablet computer, a notebook, a net book. And a mobile terminal having various mobile communication specifications, such as an information communication device.

In addition, the USIM according to an embodiment of the present invention can be applied in various mobile communication generations, and its shape and size can be modified in various forms. That is, the USIM of the present invention is generally configured in the form of a small chip that can be inserted into a terminal, but the size and shape of the USIM are not limited or limited, and various forms may be applied.

Hereinafter, an application system for each user using USIM according to an exemplary embodiment of the present invention will be described.

1 is a view showing the configuration of a user-specific application system using a USIM according to an embodiment of the present invention.

Referring to FIG. 1, the user-specific application system 100 using the USIM according to the present invention is a terminal 10, a service device 20, a communication network 30, and a USIM card 40 inserted into the terminal 10. It is composed.

In addition, a processor mounted in the service apparatus 20 or the terminal 10 according to the present invention may process a program command for executing the method according to the present invention. In one implementation, this processor may be a single-threaded processor, and in other implementations, the processor may be a multithreaded processor. Furthermore, the processor is capable of processing instructions stored on memory or storage devices.

The communication network 30 performs a series of data transmission and reception operations for data transmission and information exchange between the terminal 10 and the service device 20. In particular, the communication network 30 may use various types of communication networks, for example, a wireless LAN (WLAN), a Wi-Fi (Wi-Fi), a Wibro, a Wimax, a High Speed Downlink Packet Access (HSDPA). Wireless communication methods such as Ethernet or wired communication methods such as Ethernet, xDSL (ADSL, VDSL), Hybrid Fiber Coax (HFC), Fiber to The Curb (FTTC), and Fiber To The Home (FTTH) may be used. . On the other hand, the communication network 30 is not limited to the above-described communication method, and may include any other communication method that is well known or will be developed in addition to the above-described communication method.

The terminal 10 checks the existence of the USIM card 40 at the first boot. If the USIM card 40 exists, the terminal 10 performs user authentication corresponding to the corresponding USIM. The terminal 10 loads information on a basic application and an application related to a user for each USIM from a pre-stored area. Thereafter, the terminal 10 provides information about the loaded application.

In addition, the terminal 10 according to the present invention checks the existence of the USIM card 40 at the time of booting. If the USIM card 40 exists, the terminal 10 performs a user authentication procedure. When the user authentication is completed, the terminal 10 requests the service device 20 for information on the basic application and the application related to the user for each USIM. Thereafter, the terminal 10 receives information on the corresponding application from the service device 20 and provides information on the application received from the service device 20.

The service device 20 communicates with the terminal 10 through the communication network 30 to provide a user application for each USIM. In particular, the service device 20 according to the present invention receives a signal for requesting the loading of information on the application from the terminal 10. In addition, the service apparatus 20 performs user authentication for the terminal that requested the information about the application according to the request of the terminal 10.

When the user authentication is completed, the service device 20 searches for information on the requested application from the terminal 10, and provides information about the found application to the terminal 10.

USIM card 40 is a combination of SIM (Subscriber Identification Module) card and the UICC (Universal IC) card containing the subscriber information of the terminal 10 has a variety of functions, such as user authentication, global roaming, e-commerce Will be implemented on the card. The USIM card 40 is mounted on the terminal 10 and refers to an identification module of a universal subscriber. The identification module is a card type module that can be used in a mobile phone, and stores personal information to provide various services to subscribers, such as authentication, security, and billing.

The USIM card 40 has evolved from the SIM and is a chip inserted into terminals of various mobile communication generations. It acts as a SIM that authenticates subscribers and functions as an IC card that can be used as a credit card or transportation card. In addition, the universal IC card ensures the security and integrity of all personal information data through the security support of multiple applications.

USIM card 40 is composed of a small CPU and memory, the CPU is identified by the encryption and decryption function, the memory is used as a space for additional services. At this time, the memory can be put into such functions as a transportation card, credit card, membership card, and can be mounted wirelessly if only the card service approval or banking approval by OTA (Over The Air) technology.

By doing so, the present invention controls access to user applications stored by USIM through user authentication, so that when a single terminal is used by multiple users, application management between users is easy. In addition, personal applications are managed separately in the terminal or the service device to increase the protection and security of personal information. In addition, by separately managing the downloaded application for each user, even if the application does not download itself, it is possible to move or copy the application according to the sharing request of the user who downloaded the application.

2 is a block diagram illustrating a configuration of a terminal according to an exemplary embodiment of the present invention.

2, the terminal 10 according to the present invention includes a control unit 11, an input unit 12, a display unit 13, a storage unit 14, an audio processing unit 15, a communication unit 16, and a USIM unit ( 17). Here, the control unit 11 includes a user-specific USIM recognition module 11a, a user authentication module 11b, and an application management module 11c, and the storage unit 14 includes a basic application 14a and a user-specific application 14b. ).

The input unit 12 receives various information such as numeric and text information, and transmits a signal input in connection with setting various functions and controlling functions of the terminal 10 to the control unit 11. In addition, the input unit 12 may include at least one of a keypad and a touch pad generating an input signal according to a user's touch or manipulation. In this case, the input unit 12 may be configured in the form of a single touch panel (or touch screen) together with the display unit 13 to simultaneously perform input and display functions. In addition, the input unit 12 may be any type of input means that can be developed in the future, in addition to input devices such as a keyboard, a keypad, a mouse, a joystick, and the like. In particular, the input unit 12 according to the present invention receives a signal for executing an application and transmits it to the control unit 11.

The display unit 13 displays information on a series of operation states and operation results generated during the functioning of the terminal 10. In addition, the display unit 13 may display a menu of the terminal 10 and user data input by the user. The display unit 13 may include a liquid crystal display (LCD), a thin film transistor LCD (TFT-LCD), organic light emitting diodes (OLED), a light emitting diode (LED), an active matrix organic LED (AMOLED), and a flexible display (Flexible). display) and three-dimensional display. In this case, the display unit 13 may be configured in the form of a touch screen. As such, when the display unit 13 is formed in the form of a touch screen, the display unit 13 may perform some or all of the functions of the input unit 12. have. In particular, the display unit 13 according to the present invention outputs an execution screen of an application.

The storage unit 14 is a device for storing data. The storage unit 14 includes a main memory device and an auxiliary memory device, and stores an application program necessary for a functional operation of the terminal 10. The storage unit 14 may largely include a program area and a data area. In this case, when the terminal 10 activates each function in response to a user's request, the terminal 10 executes corresponding application programs under the control of the controller 11 to provide each function. In particular, the program area according to the present invention stores an operating system for booting the terminal 10, a program for recognizing a USIM, a program for performing user authentication, a program for managing an application, and the like. In addition, the data area is an area in which data generated according to the use of the terminal 10 is stored. In particular, the data area according to the present invention stores authentication data for user authentication, a basic application 14a, a user-specific application 14b, and the like. Here, the basic application 14a is an application installed when the terminal 10 is manufactured or initialized, and includes an application for system restoration, a clock application, a calendar application, a camera application, a map application, a diary application, a photo album application, and an Internet connection application. May be included. Meanwhile, the user-specific application 14b related to the USIM is an application downloaded directly by the user or shared with other users, such as a game application, a financial application, an education application, a health application, a business application, a social networking application, a sports application, and an entertainment application. , Utility applications, travel applications, medical applications, and the like.

The audio processor 15 transmits an audio signal input from a speaker SPK or a microphone MIC for reproducing and outputting an audio signal to the controller 11. The audio processor 15 may convert the analog audio signal input through the microphone into a digital format and transmit the digital signal to the controller 11. In addition, the audio processor 15 may convert an audio signal of a digital format output from the controller 11 into an analog signal and output the analog signal through a speaker. In particular, the audio processor 15 according to the present invention outputs an effect sound or an execution sound according to the execution of the application.

The communication unit 16 performs a function for transmitting and receiving data through the service device 20 and the communication network 30. Here, the communication unit 16 includes RF transmitting means for up-converting and amplifying the frequency of the transmitted signal, and RF receiving means for low-noise-amplifying and down-converting the received signal. The communication unit 16 may include at least one of a wireless communication module (not shown) and a wired communication module (not shown). The wireless communication module is configured to transmit and receive data according to a wireless communication method. When the terminal 10 uses wireless communication, any one of a wireless network communication module, a wireless LAN communication module, and a wireless fan communication module may be used. Data may be transmitted to or received from the service device 20. In addition, the wired communication module is for transmitting and receiving data by wire. The wired communication module may be connected to the communication network 30 through a wire to transmit or receive data to the terminal 10 and the service device 20. That is, the terminal 10 may be connected to the communication network 30 by using a wired communication module, and may transmit and receive data with the service device 20 through the communication network 30. In particular, the communication unit 16 according to the present invention communicates with the service device 20 to request loading of information on a basic application and a user application for each USIM, and receives information on an application from the service device 20.

The USIM unit 17 detects the USIM card 40 inserted into the terminal 10 and transmits the recognition information to the control unit 11.

The control unit 11 may be a process device that drives an operating system (OS) and each component. For example, the control unit 11 may be a central processing unit (CPU). When the terminal 10 is powered on, the controller 11 moves the operating system from the auxiliary memory device to the main memory device, performs booting to drive the operating system, and performs necessary signal control. . In particular, the control unit 11 according to the present invention checks the presence of the USIM at boot. Here, the controller 11 may check whether the USIM is present according to whether the USIM card 40 detected by the USIM unit 17 is inserted.

If the USIM exists, the controller 11 performs user authentication corresponding to the Universal Mobile Telecommunications System (USIM). Here, the control unit 11 performs user authentication through an EAP-AKA (Extensible Authentication Protocol-Authentication and Key Agreement) authentication protocol. In particular, the EAP-AKA authentication protocol is an EAP using a UMTS AKA mechanism, which uses a challenge-response mechanism based on a symmetric key and provides mutual authentication. In addition, EAP-AKA authentication is an Internet Engineering Task Force (IETF) standard, the user of the mobile communication network can be authenticated in the wireless LAN (WLAN, Wireless LAN) network by the user of the AKA mechanism using the AKA mechanism.

Meanwhile, the controller 11 according to the present invention may use various types of authentication protocols as well as the EAP-AKA authentication protocol described above for user authentication.

When the user authentication is completed, the control unit 11 loads information about the basic application and the application associated with the USIM. At this time, the controller 11 checks whether a shared application shared with other users exists. If the shared application exists, the controller 11 searches for information on the shared application and loads the information on the found shared application together.

On the other hand, the control unit 11 downloads a specific application according to a user's request, and stores the information about the downloaded application divided into USIM International Mobile Subscriber Identity (IMSI) information for each user. Here, the USIM IMSI information for each user is a USIM unique number assigned at the time of service subscription, and includes a mobile country code, a mobile network code, a mobile subscriber identification number, and a national mobile subscriber identification number. Application is possible. As an example, looking at the format of the USIM IMSI, it may consist of a mobile country code (MMC) three digits, a mobile network code (MNC) up to three digits, and a mobile subscriber identifier number (MSIN) up to ten digits. On the other hand, the USIM IMSI format according to the present invention is not limited to the above-described configuration, and can be changed to other forms. Then, the control unit 11 provides information about the application.

In addition, when a copy is requested for a specific application, the control unit 11 according to the present invention copies information about a corresponding application in order to share the application with other users. The controller 11 divides the information on the copied application into USIM IMSI information of another user and stores the information.

In addition, when a movement for a specific application is requested, the controller 11 classifies and stores information about the application as USIM IMSI of another user who requests the movement of the application. Then, the controller 11 deletes the information about the moved application from the previously stored area.

In order to perform the functions of the present invention more effectively, the control unit 11 includes a user-specific USIM recognition module 11a, a user authentication module 11b, and an application management module 11c. In particular, the USIM recognition module 11a for each user checks the USIM recognized through the USIM unit 17 and classifies the user according to the verification result. In addition, the user authentication module 11b authenticates a user recognized through the user-specific USIM recognition module 11a. Here, the user authentication module 11b may perform user authentication through the EAP-AKA authentication protocol. In addition, the application management module 11c performs a function of managing an application stored in the terminal 10, and thus performs a function of classifying and storing the application for each user and a sharing function according to the movement and deletion of the application. .

3 is a block diagram illustrating a configuration of a service apparatus according to an exemplary embodiment of the present invention.

Referring to FIG. 3, the service device 20 according to the present invention includes a service control unit 21, a service storage unit 22, and a service communication unit 23. In particular, the service control unit 21 includes a user authentication module 21a and an application management module 21b, and the service storage unit 22 includes a basic application 22a and a user-specific application 22b.

The service communication unit 23 performs a function of transmitting and receiving data for executing the application with the terminal 10 through the communication network 30. In particular, the service communication unit 23 according to the present invention communicates with the terminal 10 to transmit and receive data related to the transmission of information on the user application for each USIM.

The service storage unit 22 stores overall data according to the function execution of the service device 20. In particular, the service storage unit 22 according to the present invention stores a program for performing user authentication for the user of the terminal 10 requesting the application load, a program for managing the application, and the like. In addition, the service storage unit 22 stores the information on the application divided into USIM IMSI information for each user. Here, the service storage unit 22 divides and stores the application into a basic application 22a and a user-specific application 22b. For example, the basic application 22a is an application that is installed at the time of manufacture of the terminal 10 or system initialization, and includes an application for system restoration, a clock application, a calendar application, a camera application, a map application, a diary application, a photo album application, and an Internet connection. Applications may be included. Meanwhile, the user-specific application 22b is an application downloaded directly by the user or shared with other users, and includes a game application, a financial application, an education application, a health application, a business application, a social networking application, a sports application, an entertainment application, and a utility application. , Travel applications, medical applications and the like.

The service control unit 21 may be a process device for driving an operating system and each component of the service device 20. In particular, the service control unit 21 according to the present invention receives a signal for requesting the loading of information on the application from the terminal 10. In response to a request of the terminal 10, the service apparatus 20 performs user authentication of the terminal 10.

When the user authentication is completed, the service device 20 searches for information on the application associated with the USIM, and provides the terminal 10 with information about the found application.

In order to more effectively perform the functions of the present invention as described above, the service control unit 21 includes a user authentication module 21a and an application management module 11b. In particular, the user authentication module 21a performs authentication on the user of the terminal 10. Here, the user authentication module 21a may perform user authentication through the EAP-AKA authentication protocol. In addition, the application management module 21b manages an application downloaded or shared directly from the terminal 10. Accordingly, the application management module 21b stores the application for each user, and the sharing function according to the movement and deletion of the application. Perform.

In addition, the service apparatus 20 configured as described above may be implemented as one or more servers operating in a server-based computing-based scheme or a cloud scheme. In particular, information about an application using a cloud computing device may be provided through a cloud computing function that may be permanently stored in a cloud computing device on the Internet. Here, cloud computing utilizes Internet technologies in digital terminals such as desktops, tablet computers, laptops, netbooks, and smartphones to virtualize information technology (IT) resources such as hardware (servers, storage, networks, etc.) and software. It refers to a technology that provides services on demand (database, security, web server, etc.), services, and data.

On the other hand, the memory mounted in the service apparatus 20 or the terminal 10 stores information in the apparatus. In one embodiment, the memory is a computer readable medium. In one implementation, the memory may be a volatile memory unit, and for other implementations, the memory may be a nonvolatile memory unit. In one embodiment, the storage device is a computer readable medium. In various different implementations, the storage device may include, for example, a hard disk device, an optical disk device, or some other mass storage device.

Although the specification and drawings describe exemplary device configurations, the functional operations and subject matter implementations described herein may be embodied in other types of digital electronic circuitry, or modified from the structures and structural equivalents disclosed herein. It may be implemented in computer software, firmware or hardware, including, or a combination of one or more of them. Implementations of the subject matter described herein relate to one or more computer program products, ie computer program instructions encoded on a program storage medium of tangible type for controlling or by the operation of an apparatus according to the invention. It may be implemented as the above module. The computer readable medium may be a machine readable storage device, a machine readable storage substrate, a memory device, a composition of materials affecting a machine readable propagated signal, or a combination of one or more thereof.

4 is a flowchart illustrating a user-specific application providing method using the USIM according to an embodiment of the present invention.

Referring to FIG. 4, in the method for providing an application for each user using the USIM according to the present invention, when the terminal 10 is powered on in step S11, booting is performed. When the booting is completed, the terminal 10 checks the existence of the USIM when booting in step S13.

If the USIM exists, the terminal 10 performs user authentication corresponding to the USIM in step S15. At this time, the terminal 10 performs user authentication through the EAP-AKA authentication protocol.

When the user authentication is completed, the terminal 10 loads information about the basic application and the user-specific application associated with the USIM. Here, the basic application is an application installed at the time of manufacture of the terminal 10 or system initialization, and includes an application for system restoration, a clock application, a calendar application, a camera application, a map application, a diary application, a photo album application, and an Internet connection application. . In addition, the application for each user is an application downloaded directly by the user, the application stored separately divided into USIM IMSI information for each user, game applications, financial applications, educational applications, health applications, business applications, social networking applications, sports applications , Entertainment applications, utility applications, travel applications, medical applications, and the like.

The terminal 10 checks whether a shared application with other users exists in step S19. Here, if the shared application exists, the terminal 10 searches for information on the shared application in step S21. The terminal 10 loads information on the found shared application.

In this case, when a copy is requested for a specific application, the terminal 10 copies information about a corresponding application in order to share the application with other users. The terminal 10 stores information about the copied application as USIM IMSI information of another user.

In addition, when a movement for a specific application is requested, the terminal 10 stores information about the application as USIM IMSI of another user who requests the movement of the application. Then, the terminal 10 deletes the information about the moved application from the previously stored area.

When the basic application, the user-specific application associated with the USIM, and the shared application are loaded, the terminal 10 provides information on all the applications loaded in step S23.

On the other hand, if the USIM does not exist when booting in step S13, the terminal 10 loads only the basic application in step S25, and provides information on the loaded basic application.

By doing so, the present invention controls access to user applications stored by USIM through user authentication, so that when a single terminal is used by multiple users, application management between users is easy. In addition, personal applications are managed separately in the terminal or the service device to increase the protection and security of personal information. In addition, by separately managing the downloaded application for each user, even if the application does not download itself, it is possible to move or copy the application according to the sharing request of the user who downloaded the application.

5 is a flowchart illustrating a method of operating a terminal according to the present invention.

Referring to FIG. 5, when power is applied in step S31, the terminal 10 executes booting. When booting is completed, the terminal 10 checks the existence of the USIM at the time of booting in step S33.

If the USIM exists, the terminal 10 performs user authentication corresponding to the USIM at step S35. At this time, the terminal 10 performs user authentication through the EAP-AKA authentication protocol.

When the user authentication is completed, the terminal 10 requests the service device 20 for information about a basic application and a user-specific application related to the USIM. Here, the basic application is an application installed at the time of manufacture of the terminal 10 or system initialization, and includes an application for system restoration, a clock application, a calendar application, a camera application, a map application, a diary application, a photo album application, and an Internet connection application. . In addition, the application for each user is an application stored in the service device 20 by dividing the information by the user directly downloaded application, USIM IMSI information per user. That is, the user-specific applications associated with the USIM include game applications, financial applications, education applications, health applications, business applications, social networking applications, sports applications, entertainment applications, utility applications, travel applications, medical applications, and the like.

The terminal 10 checks whether information on an application is received from the service device 20 in step S37.

When the information about the basic application, the application related to the USIM, and the shared application is received from the service device 20, the terminal 10 provides information about the application received in step S41.

On the other hand, if the USIM does not exist when booting in step S33, the terminal 10 requests only information on the basic application from the service device 20 in step S43, the information on the basic application received from the service device 20 To provide.

6 is a flowchart illustrating a method of operating a service apparatus according to the present invention.

Referring to FIG. 6, the service apparatus 20 according to the present invention receives a signal for requesting information about an application from the terminal 10 in step S51. In operation S53, the service apparatus 20 performs user authentication on the terminal 10 that has requested information about the application. In this case, the service device 20 may perform user authentication through the EAP-AKA authentication protocol.

When the user authentication is completed, the service device 20 searches for information about the application requested from the terminal 10 in step S55. Thereafter, the service device 20 provides the terminal 10 with information about the application found in step S57. Here, the application is a basic application installed at the time of manufacture of the terminal 10 or system initialization, and includes an application for system restoration, a clock application, a calendar application, a camera application, a map application, a diary application, a photo album application, and an Internet connection application. . Also, the terminal 10 downloads a corresponding application according to a user's download request, and stores information about the downloaded application as USIM IMSI information for each user, and is a game application, a financial application, an educational application, and a health application. Business applications, social networking applications, sports applications, entertainment applications, utility applications, travel applications, medical applications, and the like. In addition, the application includes a shared application with other users.

7A to 7D are exemplary diagrams for describing a method for providing an application for each user using the USIM.

As shown in FIG. 7A, the terminal 10 according to the present invention provides a basic application 700 when a USIM is not present at boot time. However, as shown in FIG. 7B, when the USIM is present at boot time, the terminal 10 performs a user authentication process and provides an application 701 related to the user together with the basic application 700.

In addition, the terminal 10 according to the present invention provides an application sharing function among users. When sharing is requested for a specific application (D), the terminal 10 identifies the type of sharing for the application. Here, the terminal 10 may classify the type of sharing into the movement or copy of the application.

When a copy of the application D is requested, the terminal 10 searches for information on the corresponding application D, copies the information on the found application D to another user's storage area, and stores the copied information. Subsequently, as shown in FIG. 7C, the terminal 10 boots the application requested to move to another user's storage area after the user authentication process, and the basic application 700, the application 703 related to the user, and the shared application. 702 is provided together.

On the other hand, if the movement of the application (D) is requested, the terminal 10 retrieves information on the corresponding application (D), and moves the information on the retrieved application (D) to another user's storage area and stores it. . Thereafter, as illustrated in FIG. 7D, the terminal 10 provides only the basic application 700 and the application 704 related to the user after the user authentication process when booting the application requested to be moved. Here, the terminal 10 deletes the information about the moved application (D) from the pre-stored area.

Computer-readable media suitable for storing computer program instructions and data include, for example, magnetic media such as hard disks, floppy disks, and magnetic tape, such as magnetic disks, compact disk read only memory (CD-ROM), and DVDs. Optical Media such as Digital Video Disk, Magnetic-Optical Media such as Floppy Disk, and Read Only Memory, RAM, Random Semiconductor memories such as access memory (EPM), flash memory, erasable programmable ROM (EPROM), and electrically erasable programmable ROM (EEPROM). The processor and memory can be supplemented by or integrated with special purpose logic circuitry. Examples of program instructions may include high-level language code that can be executed by a computer using an interpreter as well as machine code such as produced by a compiler. Such hardware devices may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

Although the specification includes numerous specific implementation details, these should not be construed as limiting to any invention or the scope of the claims, but rather as a description of features that may be specific to a particular embodiment of a particular invention. It must be understood. Certain features that are described in this specification in the context of separate embodiments may be implemented in combination in a single embodiment. Conversely, various features that are described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable subcombination. Furthermore, while the features may operate in a particular combination and may be initially depicted as so claimed, one or more features from the claimed combination may in some cases be excluded from the combination, the claimed combination being a subcombination Or a combination of subcombinations.

Likewise, although the operations are depicted in the drawings in a specific order, it should not be understood that such operations must be performed in the specific order or sequential order shown in order to obtain desirable results or that all illustrated operations must be performed. In certain cases, multitasking and parallel processing may be advantageous. Moreover, the separation of the various system components of the above-described embodiments should not be understood as requiring such separation in all embodiments, and the described program components and systems will generally be integrated together into a single software product or packaged into multiple software products. It should be understood that it can.

On the other hand, the embodiments of the present invention disclosed in the specification and drawings are merely presented specific examples for clarity and are not intended to limit the scope of the present invention. It is apparent to those skilled in the art that other modifications based on the technical idea of the present invention can be carried out in addition to the embodiments disclosed herein.

The present invention relates to a method and a system for providing an application of a terminal. The present invention classifies and sets the access authority of an application according to a user for each USIM of the terminal and provides an application according to the access authority. Accordingly, the present invention controls access to user applications stored separately for each USIM through user authentication, so that when a single terminal is used by multiple users, application management between users is easy. In addition, personal applications are managed separately in the terminal or the service device to increase the protection and security of personal information. In addition, by separately managing the downloaded application for each user, even if the application does not download itself, it is possible to move or copy the application according to the sharing request of the user who downloaded the application. This has industrial applicability because it is not only sufficient marketable or business possibility, but also practically evident.

10: terminal 20: service device 30: communication network
40: USIM card 11: control unit 12: input unit
13: Display unit 14: Storage unit 15: Audio processing unit
16: Communication unit 21: Service control unit 22: Service storage unit
23: service communication unit 11a: USIM authentication module for each user
11b, 21a: user authentication module 11c, 21b: application management module
14a, 22a: basic application 14a, 22a: user-specific application
100: application providing system for each user using USIM

Claims (16)

delete A storage unit which stores information on the related application and the basic application for each of the at least one USIM; And
When the USIM exists at boot time, the user authentication corresponding to the USIM is performed, and the information on the basic application and the application related to the USIM is loaded from the storage unit, and the control is performed to provide information on the loaded application. A control unit;
The control unit
And downloading at least one application and storing information about the downloaded application by dividing the information about the downloaded application into user-specific USIM IMSI information. delete Claim 4 has been abandoned upon payment of a setup registration fee. The method of claim 2,
A communication unit for requesting the service device to load information about a basic application and a user application for each USIM, and receiving information on the application from the service device;
The terminal further comprises. delete A service communication unit configured to communicate with at least one terminal to transmit and receive data related to transmission of information on a user application for each USIM;
A service storage unit for storing information about at least one application by storing USIM IMSI information for each user; And
Receiving a signal for requesting the loading of information on the application from the terminal, and performing the user authentication for the terminal requesting the information on the application in accordance with the request, and when the user authentication is complete, to the application requesting the download Information about the searched application and the terminal to classify the searched application information into USIM IMSI information for each user and store the information about the searched application according to USIM IMSI information for each user so as to control the service. Control unit;
Service apparatus comprising a. delete delete delete delete delete delete delete delete delete delete

Images