WO2005112495A1

WO2005112495A1 - Mobile radio telephone

Info

Publication number: WO2005112495A1
Application number: PCT/EP2005/005009
Authority: WO
Inventors: Klaus Finkenzeller; Christoph Schiller
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2004-05-10
Filing date: 2005-05-09
Publication date: 2005-11-24
Also published as: DE102004022906A1

Abstract

The invention relates to a mobile radio telephone (1) comprising: an air interface (3) for communicating over a mobile radio network; at least one additional interface (4) for communicating with an external unit (5), and; a security module (6) for identifying an authorization for accessing the mobile radio network. The security module (6) comprises at least one memory location (9) whose contents can be determined and modified from outside of the security module (6). The inventive mobile radio telephone (1) is characterized in that a functionality is provided for carrying out a data transmission from the security module (6) to the external unit (5), according to which data are written into the memory location (9) by the security module (6), and the contents of the memory location (9) are read out by the external unit (5) via the additional interface (4) and/or a functionality is provided for carrying out a data transmission from the external unit (5) to the security module (6), according to which data are written into the memory location (9) from the external unit (5) via the additional interface (4), and the contents of the memory location (9) are read out by the security module (6).

Description

mobile phone

The invention relates to a Mobilfunktelef on. Furthermore, the invention relates to a method for data transmission between a security module of a mobile phone and an external device.

Mobile phones generally have a security module, with the help of which a proof of access to a mobile network can be provided. The security module also serves to store telephone numbers and short messages and is usually one

Chip card formed. As described, for example, in "Handbook of Chip Cards", Wolfgang Rankl / Wolf gang Effing, 4th edition, Carl Hanser Verlag (2002) pages 784 to 789, via the connection to the mobile network, which is also referred to as an air interface, an administration of the The required data transfer between the background system and the security module via the air interface is made possible by the fact that the data to be transmitted are packed in short messages The short message is received by the mobile phone and forwarded to the security module The security module interprets the short message and extracts it, for example, from the mobile phone a command. After the command has been processed, the security module packages the determined answer into a short message which is forwarded to the mobile telephone and transmitted by the latter via the mobile network to the background system. In this way, a bidirectional end-to-end connection can be established between the background system and the security module. In this context, it is known from DE 198 16 575 AI to implement in a security module of a mobile telephone, in particular a Verkehrstele- matic application. The data required for the execution of the traffic telematics application is transmitted to the security module packaged in a short message by a traffic telematics center.

Furthermore, for example, from "Handbook of chip cards", Wolfgang Rankl / Wolf gang Effing, 4th edition, Carl Hanser Verlag (2002) page 795 Mobile unk telef one known that can communicate not only via the mobile network, but via additional interfaces For communication with external devices over short distances, these interfaces include, for example, infrared, NFC or Bluetooth interfaces.

The invention has for its object to provide a mobile phone with a security module in addition to the phone application further applications.

This object is achieved by a mobile telephone with the combination of features of claim 1.

The mobile radio telephone according to the invention has an air interface for communication via a mobile radio network, at least one further interface for communication with an external device and a security module for proof of access authorization to the mobile radio network. The security module has at least one storage location whose contents can be determined and changed from outside the security module. The peculiarity of the mobile telephone according to the invention is that a functionality for carrying out a data transfer from the security module to the external device is provided according to which data is written by the security module into the storage space and the content of the storage space is read out via the further interface from the external device and / or a functionality for carrying out a data transfer from the external device is provided to the security module, according to the data from the external device via the additional interface are written into the memory and the contents of the memory space is read by the security module.

The invention has the advantage that a transparent communication between the external device and the security module of the mobile telephone is possible. As a result, the mobile telephone is opened many new applications, the applications are each carried out in particular by the security module and the mobile phone is used as a secure terminal.

In a preferred embodiment, the transmitted data formally the outer format of a data type, which is intended for the space provided. In terms of content, however, the data differs from the intended data type. This has the advantage that in order to carry out the data transfer according to the invention, the existing file structure does not have to be changed. The transferred data can be commands and / or answers to commands. The commands are processed in particular by the security module.

With the help of the transmitted data, for example, an authentication of the external device and / or the security module can be carried out. Since an au- Thentization is a prerequisite for many applications, thus laying the foundation for a variety of uses of the mobile phone according to the invention.

In the mobile telephone according to the invention, for example, an application for activating access to a building, a vehicle or a device can be implemented. The activation of the access preferably takes place via the further interface. The access rights can be managed via the air interface. This has the advantage that the access control can be operated very economically and a very fast updating of the access rights with little effort is possible.

Furthermore, in the mobile telephone according to the invention, an online application can be implemented in which a connection to a service provider is established both via the air interface and via the further interface. In this case, the connection can be established via the further interface via an insecure network, in particular via the Internet. This means that over an insecure connection a service can be claimed or a purchase can be made and over a secure connection personal data can be transmitted or a payment can be made.

Likewise, it is also possible that an electronic purse is implemented in the mobile phone according to the invention. The settlement of a payment transaction with the electronic exchange can take place via the further interface. The settlement of a charging process of the electronic exchange, however, preferably takes place via the air interface. This has the advantage that a mobile telephone designed in this way can provide a locally required exchange rate. cost-effective and with a high level of security, and also provides a secure online connection for recharging the stock exchange.

The mobile telephone according to the invention is preferably designed so that at least one application is implemented in the security module and / or executed by the security module.

The further interface of the mobile radio telephone according to the invention can be designed, for example, as an infrared interface, Bluetooth interface, USB interface or RS232 interface. This means that, in principle, any interface in addition to the air interface can be used within the scope of the invention.

The inventive method relates to the implementation of a data transmission between a security module of a mobile phone and an external device. In this case, the mobile telephone has an air interface for communication via a mobile network and at least one further interface for communication with the external device. The security module has at least one storage location whose contents can be determined and changed from outside the security module. The peculiarity of the method according to the invention is that for a data transfer from the security module to the external device, data from the security module are written into the memory space and the content of the memory location is read out via the further interface from the external device and / or for data transmission from the external device to the security module, data from the external device is written into the memory space via the further interface and the content of the memory location is read out by the security module. In order to enable an orderly procedure by simple means, it is advantageous if the external device is in each case placed in a waiting state for the time which is expected to be required for processing the data transmitted to the security module.

The invention will be explained below with reference to the embodiments illustrated in the drawings.

Show it:

1 shows an embodiment of an inventively designed mobile phone in a schematic representation,

Fig. 2 is an illustration of possible operations during communication between the external device and the security module of the mobile telephone and

Fig. 3 is a schematic representation of the communication paths in an application of the invention as part of a payment process on the Internet.

Fig. 1 shows an embodiment of an inventively designed mobile phone 1 in a schematic representation. The mobile telephone 1 has an electronic system 2, which is preferably designed as a microprocessor and in which, for example, an operating system for operating the mobile radio telephone 1 is implemented. The electronics 2 includes a plurality of interfaces for internal and external communication, wherein in Fig. 1, an air interface 3 and an infrared interface 4 are shown. The air interface 3 is used for communication via a mobile radio network. The infra- Red interface 4 is provided for communication with an external device 5 in the vicinity of the mobile telephone 1. For this purpose, instead of the infrared interface 4 or in addition to the infrared interface 4, a Bluetooth interface, a USB interface, an RS232 interface, etc. may be provided.

Furthermore, the mobile telephone 1 to a security module 6, which is formed for example as a smart card and plugged into the mobile phone 1. The security module 6 is also commonly referred to as a Subscriber Identity Module, SIM for short, and is connected to the electronics 2. With the help of the security module 6 can be provided proof of an access authorization to the mobile network. In addition, the security module 6 serves as storage for a number of data, such as short messages, party numbers and short numbers. An excerpt from the file system used here is also shown in FIG. 1. The file system has a superordinate directory 7, in which inter alia a subdirectory 8 with the designation "Telecom" is arranged, in the subdirectory 8 a file 9 with the designation "FDN" is among other things contained, in which fixed call numbers are stored. In the context of the invention, the file 9 is used not only for storing the fixed call numbers, but also for carrying out a bidirectional communication between the external device 5 and the security module 6, which is handled via the infrared interface 4. In this case, the data to be transmitted are in each case written by a communication partner to a predetermined location for a fixed call number in the file 9, which is then read by the other communication partner. As an alternative to the file 9, other files can also be used for the communication, for example the files for storing the short messages or the short numbers. It is important that the used file 9 can be read and written from the external device 5. The exact procedure for the communication according to the invention of the external device 5 with the security module 6 will be explained with reference to FIG. 2.

2 shows an illustration of possible processes during the communication between the external device 5 and the security module 6 of the mobile telephone 1. Here, on the left side, a flow chart for the sequence in the security module 6 and on the right side a flow chart for the sequence in the external Device 5 shown. In the middle between the two flowcharts the respective content of the area of the file 9 is shown, at which the data to be transmitted are written. The illustrated procedure refers to the initial phase of mutual authentication between the external device 5 and the security module 6 and is started by the external device 5 with a step Gl, in which the external device 5 packages a command in the record of a party number and so generated data to be transmitted. When used as intended, such a record contains a telephone number and a name. In the context of the invention, the command GetChipNumber is instead entered in the data record. With this command, an identifier of an integrated circuit can be read, which is a part of the security module 6. The content of the file 9 is not affected by the step Gl and still has its previous value, which is not relevant to the invention. Step G is followed by a step G2, in which the data record is transmitted to the infrared interface 4 of the mobile telephone 1 and written into the file 9 by means of a corresponding service command of the infrared interface 4. In the file 9, the command GetChipNumber is now stored. After step G2, the external device 5 goes in one Step G3 into a wait state for a predetermined time. The contents of the file 9 will not be changed.

In the meantime, the flow of the flowchart on the part of the security module 6, for example, caused by the write-in process, begins with a step S 1 in which the content of the file 9 is read out. The content of the file 9 remains unchanged. Step S1 is followed by a step S2 in which the command GetChipNumber read out from the file 9 is executed and, as a result, the identifier ChipNumber of the integrated circuit of the security module 6 is determined. This is followed by a step S3, in which the identifier ChipNumber is written into the file 9, so that in the file 9 from this time the value ChipNumber is stored.

Meanwhile, on the part of the external device 5, the predetermined waiting time of the step G3 has expired, and it is followed by a step G4, in which the external device 5 reads the file 9 via the infrared interface 4 and thereby obtains knowledge of the identifier ChipNumber. The identifier ChipNumber remains stored in the file 9. Subsequent to step G4, a step G5 is carried out in which the external device 5 packs a command AskRandom for requesting a random number in a record for a paging number. Step G5 is followed by a step G6, in which the external device 5 writes the data record into the file 9 with the command AskRandom via the corresponding service command of the infrared interface 4. The file 9 thus has the command AskRandom. Subsequent to step G6, the external device 5 goes into a wait state for a predetermined time in a step G7. The security module 6 reads out the command AskRandom from the file 9 in a step S4 which is executed after completion of the step G6. In a subsequent step S5, the security module 6 executes the command AskRandom and determines the random number Random. Step S5 is followed by a step S6 in which the security module 6 writes the random number Random into the file 9 so that it now contains the random number Random.

Once the external device 5, the predetermined time for the wait state is completed; At step G7, a step G 8 follows, in which the external device 5 reads out the file 9 and thereby receives the random number Random. The further course of the authentication is carried out with analogous continuation of the procedure described above, d. H. A conventional authentication method is executed between the external device 5 and the security module 6, whereby the data exchange required for this purpose takes place via the infrared interface 4 of the mobile telephone 1 and with the aid of the file 9 of the security module 6.

In order to ensure a functional control of the communication, a special command can be provided in the invention, with the important parameters of the infrared interface 4, such as information on the size of the input / output buffer, a maximum processing time, etc. can be requested. Furthermore, by embedding a protocol frame, for example T = 1, it is possible to perform a chaining and thereby to transmit a larger amount of data than corresponds to the length of a record for a paging number. It is also possible to use a protocol tailored specifically to the procedure according to the invention. The authentication method described above can be used for example for access control of buildings, vehicles or devices. In this way, the access to a building can be unlocked via the infrared interface 4 of the mobile radio telephone 1, a vehicle door can be unlocked or an access to a personal computer is made possible and a service can be used by machines or other devices. It is in each case possible to change the access rights of an authorized institution by a communication via the air interface 3 of the mobile phone 1, so that the access rights can be updated very quickly.

Likewise, the invention can also be used to allow fast and secure payment on the Internet. This will be explained in more detail below with reference to FIG. 3.

Fig. 3 shows a schematic representation of the communication paths in an application of the invention as part of a payment process on the Internet. In this application, the external device 5, with which the security module 6 communicates via the infrared interface 4 of the mobile telephone 1, has an Internet connection. The external device 5 can be designed, for example, as a personal computer connected to the Internet. A service provider 10 to whom the payment is to be made is reachable over both the Internet and the mobile network. In the illustrated payment process there is an Internet connection between the service provider 10 and the external device 5 and a cellular connection between the service provider 10 and the mobile telephone 1. This means that the mobile telephone 1 communicate with the service provider 10 both via the infrared interface 4 and via the air interface 3 can. The shopping and payment process can, for example, run so that the service provider 10 assigns a temporary identifier and is transmitted via the Internet connection to the external device 5 in order to assign the customer a virtual shopping cart for shopping on the Internet. This temporary identifier is forwarded by the external device 5 via the infrared interface 4 to the mobile phone 1. In the settlement of the payment process, the temporary identifier is transmitted from the mobile phone 1 together with other data via the air interface 3 in a secure manner to the service provider 10. As a result, an unambiguous association between the basket used during shopping over the Internet connection and the payment process carried out via the mobile network is possible. The procedure according to the invention thus combines a conventional shopping process on the Internet with a payment transaction via a secure connection. This allows reliable protection against manipulation. It also eliminates the need to submit personal information over the Internet. Since the mobile phone 1 is a secure terminal, also eliminates the need to provide an additional terminal specifically for the payment process.

The inventively designed mobile phone 1 can continue to be used to pay for small change amounts. For this purpose, a small exchange is implemented in the security module 6, which can be accessed via the infrared interface 4 of the mobile phone 1. About the air interface 3 of the mobile phone 1, the small exchange can be charged. Similar to the small exchange, the other applications described above can also be implemented in the security module 6 or executed by the security module 6.

Claims

Patent claims

1. Mobile telephone with an air interface (3) for communication via a mobile network, at least one further interface (4) for communication with an external device (5) and a security module (6) for proving an access authorization to the mobile network, wherein the security module (6) at least one memory location (9) whose contents can be determined and changed from outside the security module (6), characterized in that a functionality for carrying out a data transmission from the security module (6) to the external device (5) is provided according to the data from Security module (6) are written into the memory space (9) and the contents of the memory location (9) via the further interface (4) from the external device (5) is read and / or functionality for performing a data transfer from the external device (5) to the security module (6) is provided, according to the data from the external device (5) on the further Sc 4 (4) are written into the memory location (9) and the content of the memory location (9) is read out by the security module (6).

2. Mobile telephone according to claim 1, characterized in that the transmitted data formally have the outer format of a data type, the intended purpose for the memory location (9) is provided, but differ in content from the intended intended data type.

3. Mobile telephone according to one of the preceding claims, characterized in that it is the transferred data to commands and / or responses to commands.

4. Mobile telephone according to claim 3, characterized in that the commands are processed by the security module (6).

5. Mobile telephone according to one of the preceding claims, characterized in that with the aid of the transmitted data, an authentication of the external device (5) and / or the security module (6) is feasible.

6. Mobile telephone according to one of the preceding claims, characterized in that an application for enabling access to a building, a vehicle or a device is implemented.

7. Mobile telephone according to claim 6, characterized in that the activation of the access via the further interface (4) follows.

8. Mobile telephone according to one of claims 6 or 7, characterized in that the administration of the access rights via the air interface (3).

9. Mobile telephone according to one of the preceding claims, characterized in that an on-line application is implemented, in which both the air interface (3) and on the tere interface (4) a connection to a service provider (10) is established.

10. Mobile telephone according to claim 9, characterized in that the connection via the further interface (4) via an insecure network, in particular via the Internet, is established.

11. Mobile telephone according to one of the preceding claims, characterized in that an electronic exchange is implemented.

12. Mobile telephone according to claim 11, characterized in that the settlement of a payment transaction with the electronic exchange via the further interface (4).

13. Mobile telephone according to one of claims 11 or 12, characterized in that the settlement of a charging process of the electronic exchange via the air interface (3).

14. Mobile telephone according to one of the preceding claims, characterized in that at least one application in the security module (6) is implemented and / or executed by the security module (6).

15. Mobile telephone according to one of the preceding claims, characterized in that the further interface (4) is designed as an infrared interface, Bluetooth interface, USB interface or RS232 interface.

16. A method for carrying out a data transmission between a security module (6) of a mobile telephone (1) and an external device (5), wherein the mobile telephone (1) an air interface (3) for communication via a mobile network and at least one further interface ( 4) for communication with the external device (5) and the security module (6) has at least one memory location (9) whose content can be determined and changed from outside the security module (6), characterized in that for data transmission from the security module ( 6) are written to the external device (5) data from the security module (6) in the memory space (9) and the contents of the memory space (9) via the further interface (4) from the external device (5) is read and / or for a Data transmission from the external device (5) to the security module (6) Data from the external device (5) via the further interface (4) in the memory location (9) gesc be written and the contents of the memory location (9) from the security module (6) is read.

17. The method according to claim 16, characterized in that the external device (5) for the time, which is expected to be required for the processing of the data transmitted to the security module (6) data, each put in a wait state.