WO2012048489A1

WO2012048489A1 - Method and mobile terminal for encrypting a dual-card mobile terminal

Info

Publication number: WO2012048489A1
Application number: PCT/CN2010/079060
Authority: WO
Inventors: 刘克
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-10-12
Filing date: 2010-11-24
Publication date: 2012-04-19
Also published as: CN101977263A; CN101977263B

Abstract

A method for encrypting a dual-card mobile terminal is disclosed in the present invention, it includes the following steps: a dual-path encryption chip is set on the circuit between a main chip of the mobile terminal and two Subscriber Identity Module (SIM) cards, and both of the SIM cards are connected with the main chip through the dual-path encryption chip; and it further includes the following steps: after receiving a notification from the main chip, the dual-path encryption chip reads the information parameters of any one or two SIM cards, compares the read information parameters of the SIM card with the information parameters of the SIM card saved in itself, and makes the SIM card, which is corresponding to the read information parameters of the SIM card, invalid when determining that the read information parameters of the SIM card is different from the information parameters of the SIM card saved in itself. A mobile terminal for encrypting a dual-card mobile terminal is also disclosed in the present invention. By adopting the method and the mobile terminal, the lock network and lock card function for the dual-card mobile terminal can be realized.

Description

Method for encrypting dual-card mobile terminal and mobile terminal

The present invention relates to a lock network lock card technology in the field of mobile communications, and in particular, to a method and a mobile terminal for encrypting a dual card mobile terminal. Background technique

With the development of mobile communication technology, the development of the mobile terminal market is getting faster and faster, and the competition among mobile operators is becoming more and more fierce. In order to attract more users, various mobile operators have launched many preferential activities, such as: selling mobile terminals to users at a price lower than the production cost of mobile terminals, or selling network cards at low prices or even giving them to users at a low price. The mobile terminal is required to have the function of locking the network lock card, so as to avoid causing huge losses to the operator.

At present, operators generally use the software encryption method to implement the function of the mobile terminal lock network lock card, for example: 移动 Using MD5 and other algorithms for the mobile country code (MCC) and mobile network code (MNC) in the user identification (SIM) card Encrypted, encrypted and stored in an area in the memory of the mobile terminal. Each time the mobile terminal is powered on, the MCC and the MNC in the SIM card are verified, that is, the stored MCC and MNC are in the mobile terminal. The MCC and the MNC in the inserted SIM card are compared. If the verification is incorrect, the mobile terminal cannot operate normally to implement the lock lock function of the mobile terminal. However, no matter how powerful the algorithm may be vulnerable, cyber hackers will use the vulnerabilities in the encryption software to tamper with the program. In this case, no matter how powerful the encryption algorithm built on the mobile terminal software, the meaning of encryption will be lost.

In view of the defects of the above software encryption method, the prior art has proposed a function of implementing a mobile terminal lock network lock card by a hardware encryption method, but the existing hardware encryption method is only applicable to a single SIM card mobile terminal. However, with the rapid development of mobile communication technologies, the number of dual-card single-standby/dual-standby mobile terminals on the market is increasing, and these mobile terminals also need an effective encryption. The method is to implement the function of the lock network lock card. Summary of the invention

In view of this, the main object of the present invention is to provide a method for encrypting a dual-card mobile terminal and a mobile terminal, which can implement a lock network lock function of the dual-card mobile terminal.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

The invention improves a method for encrypting a dual-card mobile terminal, and provides a two-way encryption chip on a path between the main chip of the mobile terminal and two SIM cards, and both SIM cards pass through the two-way encryption chip. Connected to the main chip; the method further includes:

After receiving the notification from the main chip, the two-way encryption chip reads the information parameters of any one or two SIM cards, and compares the information parameters of the read SIM card with the information parameters of the SIM card stored by itself, and determines to read. When the information parameter of the obtained SIM card is different from the information parameter of the stored SIM card, the SIM card corresponding to the information parameter of the read SIM card is invalid.

The method for setting the dual encryption chip is: serially or parallelly connecting a two-way encryption chip on the path between the mobile terminal main chip and the two SIM cards through the SIM card interface.

The information parameters of the SIM card include, but are not limited to, an MCC and an MNC.

The stored MCC and MNC include, but are not limited to, a group.

Wherein, when the two-way encryption chip compares the MCC and the MNC, the method further includes: determining that the read MCC and the MNC are the same as the stored MCC and the MNC,

The SIM card is initialized.

The present invention also provides a mobile terminal for encrypting a dual-card mobile terminal, including

The two SIM card holders of the SIM card further include: a main chip and a two-way encryption chip, wherein the two SIM cards are connected to the main chip via the two-way encryption chip;

The main chip, after the mobile terminal is powered on, notifies the dual encryption chip to execute the MCC and

Comparison operation of MNC;

The two-way encryption chip is configured to read any one or two after receiving the notification of the main chip The information parameter of the SIM card, and comparing the information parameter of the read SIM card with the information parameter of the SIM card stored by itself, and determining that the information parameter of the read SIM card is different from the information parameter of the stored SIM card, The SIM card corresponding to the information parameter of the read SIM card is invalidated.

The two-way encryption chip is connected in series or in parallel through the SIM card interface to the path between the main chip and the two SIM card holders.

When the two-way encryption chip is connected in series with the path between the main chip and the two SIM cards, the two-way encryption chip further includes: first and second data receiving modules, first and second data sending modules, and a processing module And control module; wherein

The first and second data receiving modules are respectively configured to connect a dual-channel encryption chip to a SIM card interface of the main chip, and perform communication between the main chip and the processing module;

The first and second data sending modules are respectively configured to connect a dual-channel encryption chip and a SIM card interface of two SIM card holders, and perform communication between two SIM cards and a processing module and a control module; After receiving the notification sent by the primary chip forwarded by the first and/or second data receiving module, the MCC and the MNC are read by the first and/or second data sending module, and the read MCC and the MNC are The stored MCC and the MNC are compared to determine that the read MCC and the MNC are different from the stored MCC and the MNC, and notify the control module;

The control module is configured to invalidate the SIM card corresponding to the read MCC and the MNC after receiving the notification sent by the processing module.

The two-way encryption chip further includes: first and second data transceiver modules, a processing module, and a control module, where the two-way encryption chip is connected in parallel with the path between the main chip and the two SIM cards;

The first and second data transceiver modules are respectively configured to connect the dual encryption chip with the SIM card interface of the main chip, perform communication between the main chip and the processing module, and are also used for connecting the dual encryption chip and the two SIM cards. SIM card interface, between two SIM cards and processing module and control module Communication;

The processing module is configured to: after receiving the notification sent by the primary chip forwarded by the first and/or second data transceiver module, read the MCC and the MNC through the first and/or second data transceiver module, and read the The MCC and the MNC are compared with the MCC and the MNC that have been stored by themselves, and when it is determined that the read MCC and the MNC are different from the stored MCC and the MNC, the control module is notified;

The two-way encryption chip further includes: a data transceiver module, a processing module, and a control module, where the two-way encryption chip is connected in parallel with the path between the main chip and the two SIM cards;

The data transceiver module is configured to connect a dual-channel encryption chip to a SIM card interface of the main chip, perform communication between the main chip and the processing module, and is also configured to connect a dual-channel encryption chip and a SIM card interface of two SIM card holders. Execute any SIM card, or perform communication between two SIM cards and the processing module and the control module;

The processing module is configured to: after receiving the notification sent by the main chip forwarded by the data transceiver module, read the MCC and the MNC through the data transceiver module, and compare the read MCC and the MNC with the stored MCC and the MNC. , to determine that the read MCC and MNC are different from the stored MCC and MNC, notify the control module;

In the above solution, the two-way encryption chip is further configured to notify the SIM card to initialize when the read MCC and the MNC are the same as the stored MCC and the MNC;

Correspondingly, the SIM card is further configured to perform an initialization operation after receiving the notification of the two-way encryption chip.

In the above solution, the two-way encryption chip further includes an electrically erasable programmable read only memory EEPROM module for pre-storing the operator-specified MCC and MNC. The method for encrypting a dual-card mobile terminal and the mobile terminal provided by the invention provide a two-way encryption chip on a path between the main chip of the mobile terminal and two SIM cards; after receiving the notification of the main chip, the two-way encryption chip reads Taking the information parameters of any one or two SIM cards, and comparing the information parameters of the read SIM card with the information parameters of the SIM card stored by itself, determining the information parameters of the read SIM card and the stored SIM card When the information parameters are different, the SIM card corresponding to the information parameter of the read SIM card is invalid. The invention sets the two-way encryption chip in series or in parallel, and the paths between the two-way encryption chip and the two SIM cards are independent from each other, which can fully support the requirements of dual-card dual-standby and dual-card single standby, so that it can be realized Lock card lock function of dual-card mobile terminal

•6匕

dagger.

In addition, the invention also provides independent host computer access software for the two-way encryption chip, and sets a special dongle for the host computer access software. Only when the correct dongle is inserted into the computer, the upper computer access software can be opened, and the dedicated computer is accessed. The download line or download tool can operate the dual encryption chip. Because the dongle and the host computer access software are only owned by a special operator, the security of the two-way encryption chip can be improved, thereby improving the confidentiality of the function of the lock lock of the mobile terminal. DRAWINGS

1 is a schematic flowchart of a method for encrypting a dual-card mobile terminal according to the present invention; FIG. 2 is a schematic structural diagram of a mobile terminal when a dual-channel encryption chip is set in series according to the present invention; FIG. 3 is an implementation of a dual-channel encryption chip set in series according to the present invention; FIG. 4 is a schematic structural diagram of a mobile terminal in a parallel arrangement of two-way encryption chips according to the present invention; FIG. 5 is a schematic diagram showing an internal structure of an embodiment of a dual-channel encryption chip disposed in parallel according to the present invention; A schematic diagram of the internal structure of another embodiment of the dual encryption chip provided. detailed description

The basic idea of the invention is: providing a two-way encryption chip on the path between the main chip of the mobile terminal and the two SIM cards; after receiving the notification of the main chip, the two-way encryption chip reads any one or two The information parameters of the SIM card, and compare the information parameters of the read SIM card with the information parameters of the SIM card stored by the SIM card, and determine that the information parameter of the read SIM card is different from the information parameter of the stored SIM card. , invalidating the SIM card corresponding to the information parameter of the read SIM card.

The method for setting the two-way encryption chip is: serially or parallelly connecting a two-way encryption chip to the path between the mobile terminal main chip and the two SIM cards through a SIM card interface, where the SIM card interface includes: a SIM card Input/output (SIMIO) interface and SIM card clock (SIMCLK) interface; both SIM cards are connected to the main chip via the two-way encryption chip; the information parameters of the SIM card include but are not limited to MCC and MNC, for example: SIM The information parameter of the card may also be an International Mobile Subscriber Identity (IMSI) or the like.

In the present invention, before the mobile terminal leaves the factory, the information parameters of one or more sets of SIM cards specified by the operator are pre-stored in the two-way encryption chip.

The present invention will be further described in detail by taking the information parameters of the SIM card as MCC and MNC as an example.

FIG. 1 is a schematic flowchart of a method for encrypting a dual-card mobile terminal according to the present invention. As shown in FIG. 1 , the implementation steps of the process are as follows:

Step 101: Set a two-way encryption chip on a path between the mobile terminal main chip and the two SIM cards;

Specifically: through the SIMIO interface and the SIMCLK interface, a two-way encryption chip is connected in series or in parallel between the mobile terminal main chip and the two SIM cards, and the path between the two-way encryption chip and the two SIM cards is independent of each other. , can fully support the dual card dual standby and dual card single standby needs.

In the present invention, before the mobile terminal leaves the factory, one or more sets of MCCs and MNCs designated by the operator are stored in the two-way encryption chip in advance, and the electric erasable programmable only can be set in the two-way encryption chip. Reading memory (EEPROM) is implemented to store a specified group or groups of MCCs and MNCs in the EEPROM.

Here, it is also possible to set up a separate host computer access software for the two-way encryption chip to run externally. On the computer, and set a dedicated dongle for the host computer access software, only the correct dongle can be inserted into the computer to open the host computer access software, and the dual-channel encryption chip can be operated through a dedicated download line or download tool. The dongle and host computer access software are only owned by a dedicated operator, which improves the security of the two-way encryption chip.

Step 102: After receiving the notification from the main chip, the two-way encryption chip reads the MCC and the MNC of any one or two SIM cards, and compares the read MCC and the MNC with the MCC and the MNC that have been stored by itself;

Specifically, after the mobile terminal is powered on, and before the initialization of the SIM card, the two-way encryption chip receives the notification of the main chip, informing it to compare the MCC and the MNC, and the two-way encryption chip reads any of the two SIM cards. Read one or more MCCs and MNCs in two SIM cards, and read one or more MCCs and MNCs stored in the EEPROM of the SIM card and the internal EEPROM of the SIM card. Compare.

Here, the lock network lock operation can be performed on any SIM card in the mobile terminal or on both SIM cards at the same time as needed.

Step 103: The two-way encryption chip determines that the read MCC and the MNC are different from the stored MCC and the MNC, and invalidates the SIM card corresponding to the read MCC and the MNC; when the same is determined, the SIM card is notified to initialize;

Specifically: if the two-way encryption chip determines that the read MCC and the MNC are the same as the stored one of the MCC and the MNC, or are the same as one of the more than one of the MCC and the MNC, notify the SIM card to initialize, move The terminal enters the initialization phase of the SIM card, after which the user can use the mobile terminal normally; if the two-way encryption chip determines that the read MCC and MNC are different from the stored one of the MCC and MNC, or with more than one group of MCCs and MNCs At the same time, it is proved that the SIM card corresponding to the read MCC and the MNC is illegal, and the two-way encryption chip will cut off the path between the main chip and the illegal SIM card, so that the main chip will not recognize the SIM card, and the user will not be able to use the SIM card. SIM card. Here, the method for cutting off the path between the main chip and the illegal SIM card is: if the two-way encryption chip is connected in series to the path between the main chip and the illegal SIM card, the path is directly blocked, and at this time, the two-way encryption The chip is equivalent to a switch, the switch is turned on, and the path is cut off; if the two-way encryption chip is connected in parallel to the path between the main chip and the illegal SIM card, the potential signal on the path is forcibly pulled low.

In order to implement the above method, the present invention further provides a mobile terminal for encrypting a dual-card mobile terminal, comprising: two SIM card holders with a SIM card inserted therein, and further comprising a main chip and a two-way encryption chip, two SIM cards Connected to the main chip via the two-way encryption chip;

The main chip is configured to notify the dual encryption chip to perform a comparison operation between the MCC and the MNC after the mobile terminal is powered on;

The two-way encryption chip is configured to read the MCC and the MNC of any one or two SIM cards after receiving the notification of the main chip, and compare the read MCC and the MNC with the MCC and the MNC that have been stored by itself. When it is determined that the read MCC and MNC are different from the stored MCC and MNC, the SIM card corresponding to the read MCC and MNC is invalidated.

The two-way encryption chip is further configured to notify the SIM card to initialize when the read MCC and the MNC are the same as the stored MCC and the MNC;

2 is a schematic structural diagram of a mobile terminal when the two-way encryption chip is set in series according to the present invention. As shown in FIG. 2, the two-way encryption chip is connected to the main chip and two SIM card holders through a SIM card interface, that is, a SIMIO interface and a SIMCLK interface; The dual-channel encryption chip, the main chip and the two SIM card holders are all provided with a SIM card interface; in addition, the two-way encryption chip is also connected to the main chip through a universal transceiver (URT) interface. The SIMIO interface and the SIMCLK interface are collectively referred to as a SIM card interface.

FIG. 3 is a schematic diagram of an internal structure of an embodiment of a two-way encryption chip set in series according to the present invention. As shown in FIG. 3, the method includes: first and second data receiving modules, first and second data sending modules, Processing module and control module; wherein

The first and second data receiving modules are both configured to connect the dual encryption chip and the main chip

a SIM card interface, performing communication between the main chip and the processing module;

The first and second data sending modules are respectively configured to connect a dual-channel encryption chip and a SIM card interface of two SIM card holders, and perform communication between two SIM cards and a processing module and a control module; After receiving the notification sent by the primary chip forwarded by the first and/or second data receiving module, the MCC and the MNC are read by the first and/or second data sending module, and the read MCC and the MNC are both Comparing with the MCC and the MNC that have been stored by itself, and determining that the read MCC and the MNC are different from the stored MCC and the MNC, notifying the control module;

The two-way encryption chip further includes an EEPROM module, which is used for storing the MCC and the MNC specified by the operator in advance before the mobile terminal leaves the factory;

Correspondingly, the processing module is specifically configured to compare the read MCC and the MNC with the MCC and the MNC stored in the EEPROM module.

The control module can also be connected to other functional modules of the mobile terminal through a universal input/output (GPIO) interface, and after receiving the notification of the two-way encryption chip, invalidating other functional modules of the mobile terminal, the process is not in the present invention. Within the scope of protection, it will not be detailed here.

The communication module described in FIG. 3 can be used to notify the processing module that the lock network card lock operation is not performed when the lock network card is closed. This process is not within the protection scope of the present invention and will not be described in detail herein.

4 is a schematic structural diagram of a mobile terminal when the two-way encryption chip is arranged in parallel according to the present invention. As shown in FIG. 4, the two-way encryption chip is connected in parallel to the path between the SIMIO interface between the main chip and the two SIM card holders and the SIMCLK interface; The dual-channel encryption chip, the main chip and the two SIM card holders are all provided with a SIM card interface; in addition, the two-way encryption chip is also connected to the main chip through the URT interface.

FIG. 5 is a schematic diagram showing the internal structure of an embodiment of a dual-channel encryption chip disposed in parallel according to the present invention; As shown in FIG. 5, the method includes: first and second data transceiver modules, a processing module, and a control module;

The first and second data transceiver modules are respectively configured to connect the dual encryption chip with the SIM card interface of the main chip, perform communication between the main chip and the processing module, and are also used for connecting the dual encryption chip and the two SIM cards. The SIM card interface of the seat performs communication between the two SIM cards and the processing module and the control module;

The functions of the EEPROM module are the same as those of the EEPROM module described in Figure 3 and will not be described in detail herein.

The control module can also be connected to other functional modules of the mobile terminal through the GPIO interface, and after receiving the notification of the two-way encryption chip, the other functional modules of the mobile terminal are invalidated.

The communication module described in FIG. 5 can be used to notify the processing module that the lock network card lock operation is not performed when the lock network card is closed. This process is not within the protection scope of the present invention and will not be described in detail herein.

FIG. 6 is a schematic diagram of an internal structure of another embodiment of a dual-channel encryption chip in parallel according to the present invention. As shown in FIG. 6, the method includes: a data transceiver module, a processing module, and a control module;

Here, the sequential execution is as follows: If the two-way encryption chip is to implement the two SIM cards The row lock network lock card, when the processing module and the control module communicate with two SIM cards, considering that the data transceiver module is shared by two SIM cards, the processing module can first read the MCC of a SIM card through the data transceiver module. And MNC, then read the MCC and MNC of another SIM card; meanwhile, if both SIM cards are illegal, then the control module can invalidate two illegal SIM cards through the data transceiver module.

The functions of the EEPROM module are the same as those of the EEPROM module described in Figures 3 and 5 and will not be described in detail herein.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included. Within the scope of protection of the present invention.

Claims

Claim

A method for encrypting a dual-card mobile terminal, characterized in that a two-way encryption chip is disposed on a path between a mobile terminal main chip and two user identification SIM cards, and both SIM cards are subjected to The two-way encryption chip is connected to the main chip; the method further includes:

2. The method for encrypting a dual-card mobile terminal according to claim 1, wherein the method for setting a two-way encryption chip is: using a SIM card interface, between a mobile terminal main chip and two SIM cards A two-way encryption chip is connected in series, or in parallel.

The method for encrypting a dual-card mobile terminal according to claim 1 or 2, wherein the information parameters of the SIM card include, but are not limited to, a mobile country code MCC and a mobile network code MNC.

4. The method of encrypting a dual card mobile terminal according to claim 3, wherein the stored MCC and MNC comprise, but are not limited to, a group.

The method for encrypting a dual-card mobile terminal according to claim 4, wherein when the two-way encryption chip compares the MCC and the MNC, the method further includes: determining the read MCC and the MNC and When the stored MCC and MNC are the same, the SIM card is notified to initialize.

6. A mobile terminal for encrypting a dual-card mobile terminal, comprising two SIM card holders with a SIM card inserted therein, further comprising: a main chip and a two-way encryption chip, and two SIM cards are The two-way encryption chip is connected to the main chip;

The main chip is configured to notify the dual encryption chip to perform a comparison operation between the MCC and the MNC after the mobile terminal is powered on; The two-way encryption chip is configured to read any one or two after receiving the notification of the main chip

The information parameter of the SIM card, and comparing the information parameter of the read SIM card with the information parameter of the SIM card stored by itself, and determining that the information parameter of the read SIM card is different from the information parameter of the stored SIM card, The SIM card corresponding to the information parameter of the read SIM card is invalidated.

The mobile terminal for encrypting the dual-card mobile terminal according to claim 6, wherein the two-way encryption chip is connected in series through the SIM card interface or in parallel to the path between the main chip and the two SIM card holders. on.

8. The mobile terminal for encrypting a dual-card mobile terminal according to claim 7, wherein the information parameters of the SIM card include, but are not limited to, an MCC and an MNC.

The mobile terminal for encrypting the dual-card mobile terminal according to claim 8, wherein when the two-way encryption chip is connected in series with the path between the main chip and the two SIM cards, the two-way encryption chip further The method includes: first and second data receiving modules, first and second data sending modules, a processing module, and a control module;

10. The mobile terminal for encrypting a dual-card mobile terminal according to claim 8, wherein when the two-way encryption chip is connected in parallel to the path between the main chip and the two SIM cards, The two-way encryption chip further includes: first and second data transceiver modules, a processing module, and a control module; wherein

The first and second data transceiver modules are both configured to connect the dual encryption chip and the main chip

The SIM card interface performs communication between the main chip and the processing module; and is also used for connecting the dual encryption chip and the SIM card interface of the two SIM card holders, and performs communication between the two SIM cards and the processing module and the control module;

11. The mobile terminal for encrypting a dual-card mobile terminal according to claim 8, wherein when the two-way encryption chip is connected in parallel to the path between the main chip and the two SIM cards, the two-way encryption chip further The method includes: a data transceiver module, a processing module, and a control module; wherein

The mobile terminal for encrypting the dual-card mobile terminal according to any one of claims 8 to 11, wherein the two-way encryption chip is further configured to determine the read MCC and the MNC and the stored When the MCC and the MNC are the same, the SIM card is notified to initialize;

The mobile terminal for encrypting the dual-card mobile terminal according to claim 9, 10 or 11, wherein the two-way encryption chip further comprises an electrically erasable programmable read only memory EEPROM module, which is used for Store the MCC and MNC specified by the operator.