KR20030057836A - Method for Preventing Fraudulent Use of Mobile Phone - Google Patents

Abstract

PURPOSE: A method for preventing surreptitious use of a mobile phone is provided to prevent a surreptitious use by another person when the mobile phone is missed. CONSTITUTION: When power is applied to a mobile phone by a user(S20), the mobile phone is booted(S21), the hardware of the mobile phone is initialized(S22). The user registers the mobile phone to a communication system of a mobile phone company(S23). Also, the user sets a timer by two minutes(time for receiving an authentication SMS(Short Message Service) message)(S24) and receives the authentication SMS message during the set time(S25). When time of the timer is passed(S26) or the authentication process is not performed, the mobile phone is changed into a protection mode(S28) and a message like 'lost telephone' is displayed to a display of the mobile phone(S29).

Description

{Method for Preventing Fraudulent Use of Mobile Phone}

The present invention relates to a mobile phone theft prevention method, and more particularly to a mobile phone theft prevention method that prevents other users to steal a lost mobile phone.

In general, if a mobile phone is lost, it is rarely recovered, but rather, it is illegally modified and used.

Conventionally, users are prevented from illegally using the phone through user authentication. However, in principle, illegal use of the phone is prevented because it is changed by using software downloads, DM (Diagnostic Monitor) or NAM (Number Assignment Module) programming methods. I had a problem that could not be prevented.

SUMMARY OF THE INVENTION The present invention has been made to solve the problems of the prior art as described above, and an object thereof is to provide a mobile phone theft prevention method for preventing another person from stealing if lost while using the mobile phone. .

1 is a configuration diagram for explaining the structure of an SMS message.

2 is a flowchart for explaining an initial opening authentication process in the first embodiment of the present invention.

3 is a flowchart for explaining an authentication confirmation procedure while using a mobile telephone in the first embodiment of the present invention.

Figure 4 is a flow chart for explaining the authentication code processing procedure of the first embodiment of the present invention.

Fig. 5 is a flowchart for explaining a usage code processing procedure of the first embodiment of the present invention.

FIG. 6 is a configuration diagram of an SMS messaging system for explaining a case of using e-mail for message transmission for authentication confirmation in a first embodiment of the present invention. FIG.

Fig. 7 is a flowchart for explaining an initial opening authentication process in the second embodiment of the present invention.

8 is a flowchart illustrating a process of receiving and storing an authentication code in a second embodiment of the present invention.

9 is a flow chart for explaining an authentication confirmation procedure while using a mobile phone in a second embodiment of the present invention.

10 is a flow chart for explaining the authentication code processing procedure of the second embodiment of the present invention.

Fig. 11 is a flowchart for explaining a usage code processing procedure of the second embodiment of the present invention.

In order to achieve the above object, the present invention provides a method for preventing theft of a mobile phone, a) receiving a first authentication code for authenticating whether a mobile phone is available from a communication network system, the mobile phone Storing in a memory of the device and performing an authentication process and rebooting; b) Every time the mobile phone is booted, it receives a second authentication code from the telecommunications network system including the contents of the authentication or suspension of the mobile phone and compares it with the first authentication code so that the mobile phone can be used normally. A mobile phone theft prevention method comprising the step of preventing the theft by using a protection mode that limits the function of the mobile phone when it is in use, does not match or the second authentication code is not received.

The step a) further comprises the step of notifying the communication network system of the completion of the authentication process, the authentication process.

The present invention provides a loss notification step of notifying a communication network system of information including a phone number of a lost mobile phone when the mobile phone user loses the mobile phone. And converting the mobile phone into a protected mode by transmitting a lost information notification step. In the lost information notification step, the lost information notification is notified to a communication network system through a format or an e-mail, or a caller ID is added. By using the function, a special number indicating a phone number notification of a lost mobile phone and information including a lost phone number are called and notified.

The present invention further includes the step of transmitting the protection mode switch fact to the communication network system when the switch to the protection mode in step b).

The first and second authentication codes of the present invention are delivered using SMS message format or Alert With information including caller ID information, and the second authentication code enables normal use of the mobile phone. One of an authentication code and a suspension code for switching to a protected mode.

The authentication code includes a phone number code of the mobile phone, an authentication code indicating authentication, and a protection code for authentication. The stop code is a phone number code of the mobile phone and usage meaning stop. It includes a stop code and a protection code for use suspension authentication processing.

(Example)

In order to prevent theft due to the loss of the mobile phone, the present invention performs authentication code processing to enable normal use of the mobile phone, and stop code processing to prevent theft of the mobile phone lost after the loss.

In order to process such a code, the present invention provides a first embodiment through an SMS message or an e-mail message and a second embodiment using a caller ID.

1. First embodiment

The first embodiment of the present invention is a method for preventing mobile phone theft using Short Message Services (SMS) and E-mail, and uses Short Message Services (SMS) message protocol and format. That is, the EIA / TIA industry standard IS-637A Short Message Services standard is used.

The SMS message configuration should use a format for preventing theft of the mobile telephone, and should be configured in consultation with the mobile telephone carrier. That is, in the EIA / TIA industry standard IS-637A Short Message Services, the message data area is defined and used as a new data format to implement the present invention.

The data of the protection code (hereinafter referred to as 'P-code') is composed of a header and a body, and the length of the data may be changed.

1, the SMS message 10 is composed of an SMS header 11 and SMS data 12, and the SMS data 12 includes a 10-byte P-code header 13 and a 10-byte P-code. It consists of 14.

The P-code is divided into an authentication code and a stop code, one byte of the P-code is used to distinguish between a stop and an authentication code, and the remaining 9 bytes are codes uniquely assigned to a mobile phone by a service provider.

When the authentication message is received, the mobile phone user processes it internally so that the mobile phone user does not recognize it. That is, it is checked whether the code of the P-code header is data for the prohibition code, and if it matches, the protection code is checked. The code of the P-code header is a code system that can be distinguished from other additional services.

In addition, there is a method in which a service provider sends and prohibits use of a prohibited SMS message unless the original user is not the original user after confirmation of the original owner of the mobile phone, and used by the communication system when the original user of the mobile phone enters a password. There is a way to prohibit use of SMS by sending SMS or e-mail.

The SMSC does not send an authentication SMS message when the above two cases occur.

If the mobile phone does not receive an authentication message, the mobile phone is placed in protected mode, which prevents software downloads, direct mail and NAM programs.

Here, the DM (Diagnostic Monitor) is a software tool developed by Qualcomm for inspecting a CDMA mobile phone and displays information of the mobile phone. The NAM (Number Assignment Module) program is important information stored in the NV memory in order to keep the mobile phone in a usable state, and the Non-Volatile (NV) memory is a semiconductor memory that remains stored without being erased even when the power is turned off. It consists of EEPROM or Flash Memory.

The SMS message for authentication can be received through a paging channel and a traffic channel.

The format of the message for authentication uses the SMS format defined by agreement with the service provider operating the network system for communication.

Short Message Service Center (SMSC) is responsible for sending suspended SMS messages and authenticated SMS messages and for sending and disabling suspended SMS messages to SMSCs by verifying identity with the carrier, whether the mobile phone owner is using SMS or email. Perform the function of stopping message transmission.

The first embodiment of the present invention made through the above-described assumptions is a process for initially opening the mobile phone and registering an authentication code as shown in FIG. 2. The mobile phone owner enters a phone number (S10), Notify and register the service provider (S11).

When the communication provider transmits the authentication SMS message through the SMSC, it receives it (S12), stores it in the NV memory (S13), and reboots the mobile phone (S14).

After the user purchases the mobile phone as described above, after registering the authentication code in the initial opening process, the authentication confirmation procedure in the process of rebooting and using will be described with reference to FIG.

When the user applies power of the mobile phone (S20) to boot (S21), the hardware is initialized (S22), and the mobile phone is registered in the communication system of the telecommunications carrier (S23).

Then, the timer is set to 2 minutes in advance (time for receiving the authentication SMS message) (S 24), and the authentication SMS message is received during the set timer time (S25).

If the timer is out (S26) or not authenticated (S27) while switching the mobile phone to protected mode (S28), the message 'lost phone' is displayed on the display of the mobile phone (S29), and if authentication is processed (S27) By switching to the mode to enable all the communication functions of the mobile phone (S271).

In other words, the SMSC sends the authentication key code in an SMS message to the mobile phone.

At this time, the mobile phone registered as lost (the original owner notifies the carrier if the mobile phone is lost) has not received the authentication key code as an SMS message. .

It is applied to prevent illegally changing software and changing NAM parameter (Number Assignment Module parameter: very important information as NAM program parameter stored in NV memory of mobile phone so that mobile phone can be used). It is possible to prevent illegal use by replacing the NV memory inside the phone. In this case, the mobile phone can be stopped because it is known that the test is illegal after receiving the authentication key code.

When the device is shipped, the protection function is disabled, and when the service is opened for the first time, the carrier transmits the initial authentication code as an SMS message after the phone number is entered, and stores it in the NV memory inside the phone. Once assigned an authorization key code, the phone is enabled internally to allow protected mode software to operate.

In the above process, the P-code of the mobile phone is assigned and assigned to the mobile phone uniquely for each mobile phone, and is processed internally so that the user of the mobile phone does not know.

If the mobile phone is not authenticated in the above process, the protection mode is operated as follows. That is, the DM operation stops, the software download stops, the NV memory read (write / write) stop, the telephone function stops, the 'lost phone' message is displayed.

3 may be classified into an authentication code processing procedure for normal use of the mobile phone and a suspension code processing procedure for suspension of use, as shown in FIGS. 4 and 5.

Authentication code processing procedure for normal use of the mobile phone, that is, the authentication P-code SMS message processing process, as shown in Figure 4, when receiving the SMS message (S30), to determine whether the authentication processing of the mobile phone has already been made (S31) If the authentication has already been processed, since the received SMS message is a normal SMS message, not a message for authentication processing, SMS messages are processed normally (S311). If the P-code header does not exist (S32), the authentication process is terminated and maintained in the default state (S321).

If there is a P-code (S32), check whether it is an authenticated P-code (S33), or switch to protected mode to prevent theft of the mobile phone (S331), and if authentication P-code is set to authentication OK In operation S34, all functions of the mobile phone are enabled in operation S35 to operate in the normal mode in operation S36.

In addition, the stop code processing procedure for stopping the use of the mobile phone, that is, the stop P-code SMS processing process, as shown in FIG. 5, when receiving the SMS message (S41), confirms that the mobile phone has been authenticated and authenticated. If it is processed, it is determined as a normal SMS message, and normal SMS message reception processing is performed (S411). If authentication is not performed, it is checked whether a P-code header exists in the received SMS message (S42).

If the P-code header is present and the P-code is a stationary P-code, it operates in a protected mode (S44) and sends an SMS message confirming reception of the stationary P-code (S45).

However, if the P-code header does not exist or is not a stop P-code, the P-code header operates in the protected mode (S421) and does not send an acknowledgment message.

On the other hand, when using e-mail, as shown in Figure 6, when the user is difficult to send the SMS message using a PC 24 as a method for transmitting a suspension message due to the loss of the mobile phone, the user When the suspension message is sent by e-mail using the (24), the IWF (InterWorking Function) 21 receives it and sends a stop code to the mobile phone 23 using the MSC 20 and the SMSC 22. Or stop sending the verification code.

In the case of using such an e-mail, the user can selectively use the e-mail, and if the user subscribes to the use of e-mail to prevent the loss, the service provider provides the stop code to the user in advance, so as soon as the user loses the mobile phone. Allows you to send a stop code.

In addition, the communication service provider may configure a dedicated homepage for sending out-of-use e-mail, and allow the user to send a stop code provided after access using the homepage using an ID and a password.

2. Second Embodiment

A second embodiment of the present invention is a method for preventing theft of a lost mobile phone using Caller ID Services, and is a method for preventing software download, DM, or other NAM program change using Caller ID. .

The second embodiment of the present invention implements an additional function by adding a caller ID function. When a user reports a loss to a communication service provider, the communication network system adds a mobile phone stop code to the caller ID. The mobile phone internally processes the usage code received via the caller ID and indicates that the mobile phone is a lost mobile phone.

When initially registered with a service provider, the service provider calls the mobile phone and sends the authentication code along with the caller ID to store in NV memory.

When the mobile phone is registered with the network system by supplying power to the mobile phone, the mobile phone operates normally only when the authentication code is received together with the caller ID to confirm the normality. At this time, if the authentication code is wrong, the external interface functions such as DM and software download are set to a disabled state, that is, a protection mode, to prevent illegal use.

The protection modes that are activated include DM outage, prohibit software downloads, NV memory read (read / write protect), stop phone calls, and display of "lost mobile phone" messages.

Such message transfer uses caller ID information as a method for authentication / suspension using an Alert With information message.

Receiving and processing the authentication code after registration in the initial opening for preventing theft of the mobile phone using the caller ID is shown in FIG.

When the user purchases a mobile phone, enters a phone number into the mobile phone (S50), notifies and registers to the service provider (S51), the service provider transmits an authentication code to the mobile phone with the caller ID function. The caller ID function receives the authentication code (S52), stores it in the NV memory (S53), displays a message of 'authenticated' (S54), and reboots the mobile phone (S55).

Configuration examples of the caller ID and the authentication code are shown in Table 1.

0XX-YYY-ZZZZ * A PPPPPPPPPPPPPPPPPPP * a b c

a: Caller ID related to authentication, b: Code indicating authentication, c: Protection code ('P-Code')

The authorization codes (a and c) are placed between * and * so that the program can easily recognize them.

Processing and storage of the authentication code will be described with reference to FIG.

When the mobile phone receives the caller ID while receiving the call (S60), the mobile phone checks whether the authentication code of the current mobile phone is in the ENABLE state (S61).

As a result of the check, if the authentication code is disabled, it is checked whether the caller ID data is the caller ID including the authentication code (S62).

When the caller ID is included with the authentication code, the received authentication code is stored in the NV memory, and the fact that the authentication code is received is notified by sending an SMS message to the service provider.

However, if the authentication code is disabled or the authentication code is not included in the received caller ID, the authentication code reception and storage process is terminated and maintained in the default state (S611).

The authentication procedure after powering up the mobile phone is shown in Fig. 9, and the authentication caller ID information is dialed and transmitted from the network system to the mobile phone using an Alert with information message.

In other words, when the mobile phone is turned on (S70), the mobile phone is booted and all functions are initialized (S71).

Then, the mobile telephone is set to the default protection mode (S72), and the mobile telephone is registered in the network system (S73).

The mobile phone receives the authentication caller ID while operating its own timer set to 2 minutes (S74), and when the received authentication code matches the authentication code stored in the NV memory (S77), the mobile phone is released from the protection mode. If the caller ID including the authentication code is not received or the authentication code does not match (S77) while the 2-minute timer is in operation (S771), the protection mode is maintained (S78). 'Phone' is displayed (S79).

The alarm information message is information transmitted through a traffic channel, and the message includes an authentication caller ID and an authentication code, so that the authentication code is protected and compared to the authentication code stored in the NV memory when the authentication process is performed. The mode is released to allow the mobile phone to operate normally.

The authentication code processing procedure for normal use of the mobile telephone and the suspension code processing procedure for stopping the usage of the mobile telephone performed in the authentication code confirmation procedure step S77 of FIG. 9 will be described with reference to FIGS. 10 and 11.

The procedure for confirming the authentication code for enabling the normal use of the mobile phone is as shown in FIG. 10, receiving alarm information (S80), and checking whether the authentication code processing of the mobile phone is enabled (S81). If it is disabled, it checks whether the information on the authentication caller ID (S82).

If the received alarm information is the authentication caller ID (S82), the received authentication code is compared with the authentication code stored in the NV memory (S83), and if it is matched, the protection mode is released (S85) so that the mobile phone can be used normally and matched. Otherwise, the protection mode is maintained as it is (S841) to prevent theft of the mobile phone.

However, if the authentication code processing is disabled (S81) or not the authentication caller ID information (S82), the authentication processing of the mobile telephone is kept in the default state.

Meanwhile, in order to prevent illegal use when the mobile phone is lost, a procedure of processing the suspension code to stop the sending of the authentication code and operate in the protection mode through a loss report to the communication service provider is illustrated in FIG. 11.

First, the caller ID and the stop code for stopping the use of the mobile phone are made as shown in Table 2.

0XX-YYY-ZZZZ * B PPPPPPPPPPPPPPPPPPP * a b c

a: authentication related caller ID, b: deprecation code, c: protection code ('P-code')

And, if the service provider assigns a special phone number to a network feature to send a lost related stop code, and the subscriber sends a lost phone number and password to the special number, the mobile phone is lost from the network system. You can stop by calling. The code structure in this case is shown in Table 3.

* 222 * 0XXYYYZZZZ * PPPPPPP # a b c d

(a: special number, b: lost mobile phone number, c: password, d: exit)

In addition, the network system calls the mobile phone repeatedly at regular intervals until a confirmation SMS message transmitted from the mobile phone arrives.

At this time, the SMS message structure for transmitting the SMS message for confirmation in the lost mobile phone is configured as shown in Table 4, which sends an SMS message without notifying the inside of the mobile phone.

0XX-YYY-ZZZZ * C PPPPPPPPPPPPPPPPPPP * a b c

(a: authentication related caller ID, b: confirmation code, c: P-code)

As shown in FIG. 11, upon receiving the alarm information (S90), it is checked whether the authentication code has been processed, and if it is not authenticated (S91), the state is switched to the unprotected protection mode state (S911), and the authentication process. If it is, the authentication caller ID information is checked (S92), and the usage code included in the authentication caller ID information is compared with that stored in the NV memory (S93). S94) If an error is processed (S941), and the stop codes match (S94), the protection mode is set (S95), and the network system is notified of the completion of the stop code reception and protection mode setting using an SMS message. (S96).

According to the present invention made as described above, in order to prevent the mobile phone from being used illegally by another user when the mobile phone is lost, the mobile phone can be normally used to the original user through an authentication verification procedure using an SMS message or caller ID. It also prevents other users from using the NAM program through illegal modification.

In the above, the present invention has been illustrated and described with reference to specific preferred embodiments, but the present invention is not limited to the above-described embodiments and the general knowledge in the technical field to which the present invention pertains without departing from the spirit of the present invention. Various changes and modifications will be made by those who possess.

Claims (12)

In the method for preventing theft due to the loss of the mobile phone, a) receiving a first authentication code for authenticating whether the mobile phone can be used from the communication network system, storing the first authentication code in a memory of the mobile phone, and performing an authentication process and rebooting; b) Every time the mobile phone is booted, it receives a second authentication code from the telecommunications network system including the contents of the authentication or suspension of the mobile phone and compares it with the first authentication code so that the mobile phone can be used normally. Preventing the theft by using a protection mode that limits the function of the mobile phone if it is in use and does not match or if the second authentication code is not received. The method of claim 1, wherein the step a) further comprises, upon completion of the authentication process, notifying the communication network system of the completion of the authentication process. The method of claim 1, further comprising: a loss notification step of notifying the communication network system of information including the phone number of the lost mobile phone when the mobile phone user loses the mobile phone; And sending a usage code to put the mobile phone in protected mode. 4. The method of claim 3, wherein in the lost information notification step, the lost information notification notifies an SMS message to a communication network system using a format. 4. The method of claim 3, wherein in the lost information notification step, the lost information notification is notified to a communication network system through electronic mail. The method of claim 3, wherein, in the lost information notification step, the lost information notification calls for information including a special number indicating a telephone number notification of a lost mobile telephone and a lost telephone number. Mobile phone theft prevention method characterized in that the notification. The method of claim 1, further comprising: transmitting a protection mode switch fact to the communication network system when switching to the protection mode in step b). 2. The method of claim 1, wherein said first and second authentication codes are delivered in an SMS message format. The method of claim 1, wherein the first and second authentication codes are transmitted using Alert With information including caller ID information. 10. The method of claim 9, wherein the second authentication code is one of an authentication code for enabling normal use of the mobile phone and a stop code for switching to a protected mode. The method of claim 10, wherein the authentication code comprises a phone number code of the mobile phone, an authentication code for authentication, and a protection code for authentication. The method of claim 10, wherein the stop code comprises a phone number code of a mobile phone, a stop code indicating stop of use, and a protection code for stop use authentication processing.