CN101329634B

CN101329634B - Program dispensing system for dispensing program and mobile terminal

Info

Publication number: CN101329634B
Application number: CN2008101281420A
Authority: CN
Inventors: 夏野刚; 板垣崇稔; 森口敦
Original assignee: NTT Docomo Inc
Current assignee: NTT Docomo Inc
Priority date: 2001-01-31
Filing date: 2002-01-30
Publication date: 2012-01-25
Anticipated expiration: 2022-01-30
Also published as: CN101329635A; CN101329635B; CN101329634A

Abstract

A user identification module (UIM) 12 having a plurality of storage areas may be built into or mounted in a mobile terminal 11. A contents server 19, upon receipt of a distribution request from the mobile terminal 11, may distribute a program or data used at the time of program execution through a network including a radio network. The decrypted program and the data may be stored in one of a plurality of separate and independently operated memory blocks of the UIM 12 and not through the control unit of the mobile terminal 11.

Description

The program distribution system and the portable terminal that are used for distributing programs

The application is that the original bill application number is the application for a patent for invention (international application no: PCT/JP02/00699 of 02800017.X; International filing date: on 01 30th, 2002, denomination of invention: the dividing an application method and apparatus that program is sent to the memory module of portable terminal).

Technical field

The present invention relates to a kind of technology that is used for program (application program or applet) is distributed to the memory module that is contained in or is installed in portable terminal.

Background technology

In recent years, developed portable terminal with program execution enviroment.The portable terminal that has Java Virtual Machine is an instance of such portable terminal.The user is at the portable terminal installation procedure and can the function of needs be joined portable terminal thus.

But, both made function join portable terminal with needs, after lasting a period of time, the user is prone to using identical portable terminal to be fed up with.On the other hand, the portable terminal industry new product that faces keen competition and various attraction users is put on market successively.The user possibly want to change with a kind of new product of needs of putting on market his portable terminal.In case this portable terminal is substituted, can not re-use the function that has been increased to old portable terminal.If also will use same function behind the change portable terminal, the program that then has been installed in old portable terminal must be installed in new portable terminal.This is the work of a trouble.

Summary of the invention

In view of the foregoing realized the present invention, and its objective is a kind of system is provided, even after in system, changing portable terminal, adaptable program before changing for portable terminal, portable terminal still can continue to use this program after changing.

In order to realize this purpose; The present invention notices some type of portable terminal; In other words, a kind ofly can install or be equipped with module therein, comprise the portable terminal of the user profile of Subscriber Number and memory dialing information (hereinafter is referred to as ID module or UIM) with storage.When hope changed it with new portable terminal, this type mobile terminal user can only be used new portable terminal through the UIM that he had is installed or is encased in new portable terminal in a similar manner.Method below the inventor has found out in this respect.Specifically, in case with procedure stores in this UIM, can easily the program of using with old portable terminal be sent to new portable terminal, to improve the comfort level of user operation.

Yet safety issue has been to realize an a kind of like this obstacle of portable terminal of novelty.

At first, as long as the setting of the operation of writing a program among the UIM is not added any restriction, original function of portable terminal possibly destroyed wittingly or by mistake.

Have, stored user information can comprise personal information or have the data of monetary value in UIM again.Therefore, from the angle of security,, carefully be necessary in order program to be write the leakage that does not cause this information among the UIM.

In order to solve this safety issue and to improve user's convenient degree of operation; A kind of program distribution system that is used for distributing programs is provided according to the present invention; This program distribution system comprises: portable terminal; It is configured to be received in the program that can be wirelessly transmitted to portable terminal under the unactivated encrypted state, and this portable terminal comprises Subscriber Identity Module, and wherein portable terminal is configured to be sent to Subscriber Identity Module to the program under the unactivated encrypted state; Subscriber Identity Module comprises a plurality of memory blocks; Wherein Subscriber Identity Module is configured to program is deciphered; And in the memory block of the procedure stores under the unactivated state in said a plurality of memory blocks; Subscriber Identity Module is after having stored said program; There is the information of the memory block of said program to be sent to the distribution management server with writing to accomplish to notify with designated store; Said distribution management server is recorded in the information of the program of designated store in the database as the information information corresponding that stores the memory block of said program with expression; Said distribution management server activates request with program and sends to said Subscriber Identity Module, and said program activates the information of the memory block of having asked to comprise designated store the program that will be activated, wherein only when in response to Subscriber Identity Module the program that can send to portable terminal being activated the reception of request; The storable program of Subscriber Identity Module is only and can be activated by Subscriber Identity Module, and the program that is stored in the memory block can not be carried out by the user before being activated.

Have again; A kind of portable terminal that is used for distributing programs is provided according to the present invention; This portable terminal comprises: but storage unit and operation control unit, but wherein operation control unit is configured to control based on the control program that comprises in the storage unit data transmission and the operation of portable terminal; But the communication unit of communicating by letter with operation control unit, this communication unit are configured to be received in the program that can be wirelessly transmitted to portable terminal under the unactivated encrypted state; The Subscriber Identity Module interface unit of communicating by letter with communication unit, wherein communication unit is configured to be sent to the Subscriber Identity Module interface unit to the program under the unactivated encrypted state; With with the Subscriber Identity Module of Subscriber Identity Module interface unit coupling, wherein the Subscriber Identity Module interface unit is configured to be sent to Subscriber Identity Module to the program under the unactivated encrypted state; Wherein Subscriber Identity Module comprises a plurality of memory blocks; And wherein Subscriber Identity Module be configured to program decipher and with unactivated state in the memory block of procedure stores in said memory block; Wherein the storable program of Subscriber Identity Module only can be activated when in response to Subscriber Identity Module program being activated the reception of asking by Subscriber Identity Module; This program activates request and can send to communication unit and can pass through the reception of Subscriber Identity Module interface unit by Subscriber Identity Module, and the program that is stored in the memory block can not be carried out by the user before being activated.

Utilize these systems, only be written into memory module from the program that the content server of authorizing provides, so the user can write new program under the situation that guarantees safety in memory module through the distribution management server.

Description of drawings

Fig. 1 is the configuration block scheme that shows according to the program distribution system of the first embodiment of the present invention;

Fig. 2 is the surface that shows according to the portable terminal of identical embodiment;

Fig. 3 is the configuration block scheme that shows identical portable terminal;

Fig. 4 shows identical portable terminal and the arrangement plan of the UIM that is contained in or links to each other with it;

Fig. 5 shows the process flow diagram from the program distribution to activation according to identical embodiment;

Fig. 6 is the process flow diagram that shows according to the program distribution operation of identical embodiment;

Fig. 7 is the display screen that shows portable terminal when program distribution;

Fig. 8 is the process flow diagram that shows according to the program activation manipulation of identical embodiment;

Fig. 9 is according to the process flow diagram from the request display routine de-activation procedure of content server according to identical embodiment;

Figure 10 is according to the process flow diagram from the request display routine deletion action process of content server according to identical embodiment;

Figure 11 is according to the process flow diagram of identical embodiment according to stop using from the request display routine of content server operation and program deletion action process;

Figure 12 is the process flow diagram according to identical embodiment UIM switch version information;

Figure 13 shows because the not enough process flow diagram that finally causes the program distribution failure procedure of storage;

Figure 14 shows because storage errors finally cause the process flow diagram of program distribution failure procedure;

Figure 15 shows the display screen that when program is deleted, offers the user;

Figure 16 shows the display screen that when the account who is used for the electronic goods transaction settles accounts, offers the user;

Figure 17 shows the display screen that offers the user when commodity are the mail ordering sale when buying;

Figure 18 shows to be used to set the display screen that auto-programming is opened;

Figure 19 and Figure 20 are the display screens that shows when the pass is travelled frequently in use;

Figure 21 is the configuration block scheme that shows program distribution system according to a second embodiment of the present invention;

Figure 22 is the arrangement plan that shows according to the storer among the UIM of identical embodiment;

Figure 23 is the configuration block scheme that shows according to the distribution management server 16A of identical embodiment;

Figure 24 is the process flow diagram that is presented at recording process in the user information storage unit;

Figure 25 and Figure 26 show that with the fundamental block of UIM 12 any one is recorded in the operational flowchart of program recorded in the user information storage unit;

Figure 27 and Figure 28 show that with the fundamental block of UIM 12 any one is recorded in the operational flowchart of program recorded in the user information storage unit;

Figure 29 is the operational flowchart that shows deletion program recorded in user information storage unit 51;

Figure 30 is the operational flowchart that shows the program of deletion record in the fundamental block of UIM;

Figure 31 is the process flow diagram of display user's information storage unit de-activation procedure;

Figure 32 is the process flow diagram that shows the fundamental block de-activation procedure.

Embodiment

Now will be with reference to description of drawings the preferred embodiments of the present invention.

[1] first embodiment

[1.1] general configuration of program distribution system

Fig. 1 is the configuration block scheme according to first embodiment of the present invention display routine dissemination system.

Program distribution system 10 roughly comprises portable terminal 11, radio base station 13, switching station 14, network mobile communication service controller 15, distribution management server 16, distribution services controller 17, authentication server 18, content server 19 and public network 20.

Portable terminal 11 is a kind of signal conditioning packages, for example, has communication function such as mobile phone or PHS (personal handyphone system (registered trade name)).In addition, the UIM (subscriber identification module) 12 that can store various programs or data has been installed or be built-in with to portable terminal 11.

Radio base station 13 is communicated by letter with portable terminal 11 through radio link.

Switching station 14 is through radio base station 13 interconnective control portable terminals 11 and constitute the swap operation of 20 on the common signal channel interoffice signal network of spider lines.

Network mobile communication service controller 15 is being controlled communication with program distribution through public network 20 under the situation of portable terminal 11.

Content server 19 is distributed various contents on the one hand, sends the program of portable terminal 11 requests simultaneously on the other hand.

Distribution management server 16 relayings and management are distributed to the program of UIM 12 from content server 19.Program stored is always carried out through distribution management server 16 among the program that is distributed to UIM 12 and the visit UIM 12.This is the present embodiment most important character.

When program through public network 20 by under the situation of distributing, distribution services controller 17 as distribute management server 16 operate the samely with the interface of 20 of public networks.

Authentication server 18 is a kind ofly to be used to issue with the device of program distribution to the required certificate key (certificate) of content server 19.This certificate key comprises: have explanation for UIM 12, content server 19 is authorized the UIM public-key cryptography of program distribution to the function of UIM 12 fully; And have proof for dispensing tube reason server 16, the distribution of the function that content server 19 likewise is authorized to management server public key.

Content server 19, distribution management server 16 and authentication server 18 according to present embodiment have following function respectively:

(a) according to present embodiment, content server 19 is that the program of UIM 12 sends to distribution management server 16 with the destination, distribution management server 16 again with program distribution to UIM 12.Content server 19 never directly arrives UIM12 with program distribution.

(b) content server 19 is through arriving UIM with the coded communication as the distribution management server 16 public-key cryptography types of participating in program distribution.Each user's UIM 12 is furnished with PKI (public-key cryptography basic structure), and each UIM 12 has a UIM private key that has only specific UIM 12 just to have.In order to distribute the program that the destination is given UIM 12, content server 19 obtains the UIM public-key cryptography with the UIM private key pairing of specific UIM 12, thereby this program is encrypted.

(c), only there is the content server 19 of mandate can distribute the program that the destination is UIM 12 according to the present invention.Distribute distribution management server public key to the content server of authorizing 19.It has been the program of UIM 12 by UIM public key encryption and destination that content server 19 utilizes distribution management server public key further to encrypt when the dispense request of receiving from portable terminal 11, and it is sent to distributes management server 16.

[1.2] configuration of portable terminal

Fig. 2 has shown the surface of portable terminal 11.

Portable terminal 11 comprises display part 21 and operation part 22.

As shown in Figure 2, various actions menu item, the screen of browsing, telephone number screen etc. are presented at display part 21.

Operation part 22 has a plurality of be used to import various data and the action buttons that show various menu item screens.One of them of the action button of operating unit 22 is UIM button 23.UIM button 23 is operated so that be used in program stored among the UIM 12 by the user.

Fig. 3 is the block scheme that shows the configuration of portable terminal.

Portable terminal 11 comprises display part 21, operation part 22, control module 31, storage unit 32, external device interface (I/F) unit 33, communication unit 34, UIM interface (I/F) unit 35 and phonetic entry/output unit 36.

Control module 31 is according to the various piece of the control program control portable terminal 11 of control data and storage in storage unit 32.

Storage unit 32 is by configurations such as ROM and RAM, and has a plurality of memory blocks, and it comprises the program storage area and the data storage area that is used for store various kinds of data that is used to store the browser that various programs for example are used to enter the Internet.

External device (ED) I/F unit 33 is the interfaces with the external device (ED) exchange message that are used for by control module 31 and UIM 12 uses.

Communication unit 34 will comprise that through antenna 34A the various data of audio frequency and text message are sent to radio base station 13 on the one hand under the control of control module 31, receive the various data that send to portable terminal 11 through antenna 34A on the other hand.

UIM I/F unit 35 outputs to control module 31 with data from control module 31 inputs or with data.UIM I/F unit 35 also outputs to UIM 12 from communication unit 34 or external device (ED) I/F unit 33 with output data under the situation that does not have control module 31 to participate in.Have again, under the situation that does not have control module 31 to participate in, the output data of UIM 12 is directly outputed to external device (ED) I/F unit 33 or communicator 34.The reason that under the situation that does not have control module 31 to participate in, data is outputed to external device (ED) I/F33 or communication unit 34 from external device (ED) I/F33 or communication unit 34 inputs or with data is in order to prevent the data on the illegal access UIM 12 through the control program that changes control module 31 and therefore to safeguard its security.

[1.3] configuration of UIM

Fig. 4 has shown the configuration of UIM 12.In Fig. 4, the element of part portable terminal 11 is shown the relation with clear and definite and portable terminal 11 with the element of UIM 12.As shown in Figure 4, UIM 12 comprises storer 12M, and it has system region 12A and application area 12B substantially.

The unique personal information data of system region 12A each user of storage, for example Subscriber Number data, exhalation historical information data, incoming call historical information data, air time information data and UIM private key.Portable terminal 11 with utilize Subscriber Number data among the system region 12A as other communication of calling subscriber identification.

Application area 12B is used for the program of storage distribution and the data of when executive routine, using, and is divided into a plurality of fundamental blocks.Under the situation shown in Fig. 4, application area 12B is divided into six fundamental block 40-1 to 40-6.

Fundamental block 40-1 comprises program area 41 and data field 42 to each piece of 40-6.The program area 41 storing therein programs (application program or applet) of each fundamental block 40-K.On the other hand, the data when executive routine in the program area 41 of identical fundamental block 40-K, used of data field 42 storing therein of each fundamental block 40-K.

Fundamental block 40-1 is separate to 40-6, and is such management basically, promptly is stored in application program or applet in the program area 41 of given fundamental block 40-j and can not visits another fundamental block 40-K (≠ j) data field 42.Should dispose through using, safeguard the security of each program.Even be recorded in when the data with monetary value (usually said " values ") under the situation in the data field 42 of given fundamental block 40-j, specific data never by another fundamental block 40-K (≠ j) in program stored intentionally or chance rewritten.

On the other hand, do not distributing under the situation that management server 16 participates in, can not distribute or delete application program or the applet that is formed in program stored in the program area 41.But can be under the situation of downloading electronic money from ATM through distribution management server 16 or direct control data district, local terminal 42.

In addition, application area 12 has each a memory block of activation marker of program of program area 41 that is used for indicating whether carrying out fundamental block 40-1 to 40-6.

Control module 30 be a kind of through the given request of portable terminal 11 response write the fundamental block of application area 12B program, be provided with or reset with the corresponding activation marker of each fundamental block or carry out the device of the program in the fundamental block of appointment.When being arrived by the program of UIM public key encryption from distribution management server 16, control module 30 utilizes this program of UIM private key deciphering in the system region 12, and in fundamental block, it is write.Likewise control module 30 can be carried out this program in fundamental block.In this process, the required information of executive routine obtains from its other party of network, communicating by letter or through the browser carried out by portable terminal 11 user from portable terminal 11.Control module 30 also can send to the result that program is carried out its other party of in network, communicating by letter or through browser it sent to the user of portable terminal 11.And control module 30 can be according to the program in the fundamental block, under the situation that does not have browser to participate in, through the hardware resource and the external device (ED) exchange message of portable terminal 11.The example that can be used for the program of this purpose is a kind of application program of portable terminal 11 as the pass (the commutation pass) that travel frequently that be used to make.In this program implementation, control module 30 can utilize the short-distance wireless electric installation (not shown) that links to each other with the external device (ED) I/F of portable terminal 30 and card reader/write device exchange pass information at subway door.Being used for the above-mentioned program that comprises application area program implementation and the various operations of control of control module 30 execution is stored among the system region 12A.

The operation of [1.4] first embodiment

Now, the operation of first embodiment will be with the routine explanation of being distributed as of the pass applet of travelling frequently.

Fig. 5 is the process flow diagram of display routine distribution, write operation and activation.

As shown in Figure 5, this series of operations may further comprise the steps substantially: the activation step (step S2) that will be distributed to UIM 12 as non-activity (inactive) program (applet) of memory module and it is write (step S1) among the UIM 12 and is used for this program that writes is activated.

[1.4.1] gives the distribution management server part key of issuing licence

Fig. 6 shows distributing programs and it is write into the process flow diagram of UIM 12 processes.As shown in Figure 6, authentication server 18 is issued the certificate key and is allowed to distribute the content server 19 (step S11) that the destination is the program of UIM12.According to the public key encryption method, this certificate key is issued so that content server 19 can be realized coded communication with distribution management server 16.Specifically, utilize public key encryption communication to become possibility in order to make, the distribution management server-specific key and the distribution management service public-key cryptography that partner are generated.Be sent to content server 19 when allowing people's the certificate key of distributing programs as identification when distributing the management server public key from authentication server 18, this distribution management server-specific key is stored in to be distributed in the management server 16.Content server 19 1 is received distribution management server public key, just its storage is prepared to be used for program distribution.

The request of [1.4.2] program distribution

The user can make control module 31 operating browsers and therefore can pass through the operation part 22 accessed content providers' of operating mobile terminal 11 homepage.The result of this visit shows that the distribution menu screen D1 of the program distribution of being accomplished by the content server 19 of content providers is displayed on the display part 21 of portable terminal 11 as shown in Figure 7.In this case, through the operation part 22 of operating mobile terminal 11, the user is sent to content server 19 (step S12) with program (applet) dispense request from portable terminal 11 through network.

[1.4.3] is to the UIM part key request of issuing licence

Content server 19 sends to authentication server 18 (step S12) with the request of issuing of certificate key when the dispense request of receiving from portable terminal 11.The request of issuing of this certificate key comprises the information that is used in reference to the UIM 12 that decides portable terminal 11.It is in order to make content server 19 carry out the coded communication of public-key cryptography type with UIM 12 that the certificate key is issued in request.More particularly; For the coded communication of the key type that exposes becomes possibility; When being stored in the UIM public-key cryptography in the authentication server 18 in advance, the UIM private key and with generated in advance with the UIM public-key cryptography of its pairing, and the UIM private key is stored among the UIM 12 in advance.In step S12, the UIM public-key cryptography that request is stored in the authentication server 18 is people's the certificate key of the program of UIM 12 as allowing the distribution destination.

[1.4.4] issue licence part key and distribution has the program of certificate key to UIM

Authentication server 18 is receiving that 19 1 UIM public-key cryptography of content server the time are issued in the request of issuing from the certificate key of content server 19, its conduct with by the corresponding certificate key (step S14) of the UIM of the specific request of issuing appointment 12.

Through using and UIM 12 corresponding UIM public-key cryptography the program of content server 19 enciphering request distribution.Be considered to have program through encrypting the program that obtains to the certificate key of authorizing the legal people who inserts UIM 12.

Then, further encrypted through content server 19 from the distribution management server public key that authentication server 18 receives in advance by the program utilization of UIM public key encryption.Can be considered to certificate key that shows the legal people who is authorized to insert UIM 12 and the program that shows the certificate key that is authorized to the legal people through distribution management server 16 distributing programs through this program that encrypt to obtain.

[1.4.5] program distribution

Content server 19 arrives distribution management server 16 (step S15) through the program distribution that network will obtain through two above-mentioned ciphering process.

Distribution management server 16 utilizes the encipheror of distribution management server-specific secret key decryption from content server 19 distributions.In case this successful decryption only then can obtain the program by the UIM public key encryption.In this case, can think that content server 19 is to be authorized to distribute the legal people that the destination is the program of UIM 12.Distribution management server 16 is sent to portable terminal 11 with the data on the screen D2 shown in Fig. 7, and makes this data presentation on display part 21.Whether this screen D2 is used for the user inquiring program can be distributed.

[1.4.6] writes UIM

After the user confirms screen D2 and executes operation through the operation part 22 that is used to allow program distribution, the notice that allows distribution is sent to distribution management server 16.Distribution management server 16 at a moment's notice just will be through deciphering acquisition program promptly by the program distribution of UIM public key encryption to UIM 12, (step S16).

This encipheror is sent to the control module 30 of UIM 12 same as before through portable terminal 11.Specifically, portable terminal 11 only offers UIM 12 communication functions.This operation through portable terminal 11 guarantees that safety is sent to UIM 12 and arrives UIM12 with safe write.

If distribution management server 16 sends to UIM 12 with program in the above described manner, then must set up and the linking of UIM 12 distribution management server 16.This distribution management server 16 is asked to obtain that link to each other with UIM 12 then or is contained in the telephone number of the portable terminal 11 among the UIM 12.

Use a kind of obtain the possible method of this request for when dispense request when portable terminal 11 is dealt into content server 19, the telephone number of portable terminal 11 is sent to this telephone number is sent to the content server 19 of distributing management server 16.Like this, distribution management server 16 can utilize the telephone number visit portable terminal 11 that sends to it, and can distribute the program that the destination is UIM 12 thus.

Another kind of possible method is described below.Specifically; In advance dispense request is dealt into content server 19 from portable terminal 11; Replace the telephone number of portable terminal 11 at

portable terminal

11 and 16 definite identifiers of distribution management server, so that distribute the information that management server 16 is stored as telephone number and identifier mutual correspondence.The dispense request that portable terminal 11 will contain identifier sends to content server 19, and when program being sent to distribution management server 16, content server 19 is on the identifier dress appendage.Distribution management server 16 is confirmed the telephone number of portable terminal 11 according to identifier, and to call out portable terminal 11 according to this telephone number be the program of UIM 12 with the distribution destination.This method has needn't be the advantage of the telephone number content of announcement server 19 of portable terminal 11.

When receiving that by the UIM public-key cryptography control module 30 of UIM 12 just utilizes this program of UIM private key deciphering with the pairing of specific UIM public-key cryptography in the above described manner during encrypted program.In case final this successful decryption, then the form with the unencrypted urtext obtains program.In this case, the content server 19 that constitutes source program is considered to a quilt and fully authorizes the people of program distribution to UIM 12.UIM 12 writes the program that obtains through deciphering at the fundamental block 40-1 of storer to wherein suitable one of 40-6.

As shown in Figure 7, during this write operation, screen D3 shows through portable terminal 11.

[1.4.7] writes and accomplishes response

When the program write operation finishes, the control module 30 of UIM 12 will be write to accomplish to notify with the information of specifying the fundamental block that wherein has specific write-in program and be sent to distribution management server 16 (step S17).

In this process, as shown in Figure 7, the data representing write operation is accomplished the screen D4 of (end of record (EOR)) on the display part 21 of portable terminal 11.Thereafter, screen is translated into D1 through user's operation again.

Notice is accomplished in [1.4.8] distribution

The distribution management server is write the information of accomplishing the program that notice writes appointment once the program of receiving from UIM 12 and is recorded in the database as the information information corresponding of fundamental block that writes the UIM 12 of specific program with expression.

Through visiting this database, program stored in whole fundamental block 40-1 that distribution management server 16 can easily be grasped at UIM 12 each in the 40-6.

Distribution management server 16 is once program distribution is begun the charge process to the content providers of the content server 19 of distributing programs to UIM 12.The time that begins the process of charging is not limited thereto, but the time of the activation that can describe with hereinafter is consistent.

The following is charged to content providers.

(a) collect fundamental block hire charge among the UIM 12

When program is distributed to UIM 12 from content server 19, just the fundamental block 40-1 in UIM 12 stores specific program in one of them of 40-6.This specific fundamental block can be considered to rent the content providers that has content server 19 and be used for stored programme.Thereby collect to content providers as lease expenses with rental period (be program in fundamental block, store during) corresponding expense.

(b) transaction fee

The program distribution that will transmit from content server 19 through the operation of distribution in the management server 16 is to UIM 12.Content providers is collected by the operation cost of distributing management server 16 completion as transaction fee.

The user of UIM 12 accepts the service of the distribution aspect of program from content server 19, and therefore requires payment because the expense that service takes place.Distribution management server 16 can be collected service fee with the user's communications expense together from represent content provider's user, and will be provided to content providers with the service fee that common alleged " procurator (factor) " qualification is collected.In this case, the expense of content providers being received can comprise agency fee.

When accomplishing program distribution, distribution management server 16 is with regard to content of announcement server 19 (step S18).

[1.4.9] activates

The program that is distributed to UIM 12 can not be carried out by the user before activation with the program that is stored in the fundamental block.

In order to make content providers carry out the start time by control program, the user receives only distribution but does not allow to carry out the program that is distributed to him.

Activate and used effectively; For example, when having confirmed to bring into use under the situation of the time of selling games recently, activate through utilizing; Release data (program distribution data) can be set respectively each other and bring into use data (activation data), thereby can reduce the load on the content server 19.

Another example is a kind of situation, wherein utilizes portable terminal 11 to be distributed to UIM 12 as the program of the pass of travelling frequently.In this case, use to activate so that be executable from the program of first data of the pass valid period of travelling frequently.

The operation of activation will be described with reference to Fig. 8 below.

[1.4.9.1] is to the activation request of distribution management server

Whenever the activation to preset sequence become essential, content server 19 always will activate the request send to the distribution management server 16 (step S21).This activation request comprises specifies the program information that is activated.Likewise, under the situation of program stored among the UIM 12 that only activates the specific user, this activation request comprises specific user's identifier (telephone number of portable terminal 11 or identifier).

[1.4.9.2] is to the activation request of UIM

Distribution management server 16 1 is received the request of activation, and the UIM 12 (step S22) of portable terminal 11 is issued in the request of just will activating.As, the information conduct of appointment write-in program is recorded in the database of distribution management server 16 with the information information corresponding of the fundamental block of the UIM 12 of expression write-in program.Distribution management server 16 is asked to visit specific database and is confirmed UIM 12 that the program that is activated will be distributed to and the fundamental block that program write once receiving to activate.Under the situation that same program in being stored in a plurality of UIM 12 is activated, carry out activation with UIM 12 as much.Wherein install or be equipped with each portable terminal 11 of corresponding UIM 12 and visited, the request that activates simultaneously is sent to UIM 12.The fundamental block information of the program that will be activated that the activation request that sends to each portable terminal 11 has comprised designated store.

When receiving through portable terminal 11, the request of should activating directly sends to UIM 12.The control module 30 of UIM 12 activates request according to this and carries out activation.Specifically, 12 couples of the UIM fundamental block setting through activating the request appointment from " 0 " to " 1 " and activation marker.Program stored in the fundamental block of control module 30 response request (if any) the execution activation marker sensings " 1 " of UIM12.Be the program in the fundamental block of " 0 " if there is request to carry out activation marker, it will be rejected.

[1.4.9.3] activates and accomplishes response

UIM 12 1 completion programs activate just will activate to accomplish to notify and are sent to distribution management server 16 (step S23).This notice comprises specifies the information of accomplishing active program, or more particularly, the information of the fundamental block of designated store specific program.

[1.4.9.4] activates and accomplishes notice

Distribution management server 16 is accomplished the fundamental block of notifying the UIM 12 that has confirmed wherein to have stored the program that activates fully once receiving from UIM 12 to activate.Mean greatly and activate the memory block that the information be done is recorded in the database of preparing to be used for specific fundamental block.

Because the result of this record, distribution management server 16 can understand through accessing database whether fundamental block 40-1 activates to each program among the 40-6 for whole UIM 12.

When the activation record of accomplishing whole UIM, the program of requesting activation is distributed to UIM, and distribution management server 16 content of announcement servers 19 programs activate accomplishes (step S24).This notice comprises the information of active program of specifying.

[1.4.10] stop using (deactivation)

Be distributed to UIM 12 and activate after program can ask to stop using.This request generation for example is stored under the situation among the UIM 12 when the program of the portable terminal 11 that is used as credit card, and the user has lost specific UIM 12 simultaneously.Under such a case, response begins to stop using from having notified the request of losing the user.Such a case that other example comprises, the user who has wherein accepted to serve fails the payment services expense before at the date of maturity.Under such a case, a kind of like this request of content providers of service should be provided, can begin to be used to receive the program of specific service.

To explain de-activation procedure with reference to Fig. 9 below.

[1.4.1 0.1] is to the de-activation request of distribution management server

Whenever the inactive program that is distributed to UIM 12 of request, content server 19 always sends to the distribution management server 16 (step S31) of specifying specific UIM 12 and the program of stopping using with de-activation request.

[1.4.10.2] is to the de-activation request of UIM

Distribution management server 16 1 is received this de-activation request, with regard to accessing database and definite by the fundamental block among the UIM 12 of de-activation request appointment, the program that this fundamental block activates.Then, distribution management server 16 sends to de-activation request the portable terminal 11 (step S32) of installing or specific UIM 12 being housed.This de-activation request comprises the information of the fundamental block of designated store dead program(me).

This de-activation request is sent to UIM 12 through portable terminal 11.Preparation is used for resetting to " 0 " through UIM 12 from " 1 " by the activation marker of the fundamental block of de-activation request appointment.Forbid in this specific fundamental block executive routine thereafter.

[1.4.10.3] stops using and accomplishes response

UIM 12 is once finishing dead program(me) notice distribution management server 16 (step S33).This notice comprises the appointment information of inactive program, or specifically, the information of the fundamental block of designated store program.

[1.4.10.4] stops using and accomplishes notice

Distribution management server 16 is stopped using when the program of receiving from UIM 12 and is accomplished notice, and just the fundamental block of the UIM 12 of dead program(me) has been accomplished in definite storage according to this notice.The information that meaning greatly stops using accomplishes is recorded in the memory block that preparation is used for the database of specific fundamental block.

When accomplishing inactive record, distribution management server 16 content of announcement servers 19 are stopped using and are accomplished (step S34).

[1.4.11] deletes (only when the user needs)

The program of stopping using is occupied the memory block lavishly in UIM 12.Deleting so unnecessary program hopes user and content providers.But the deletion of program can not be accepted the user.If the user at random deletes the program among the UIM 12,,, the fact of deletion distributes management server 16 only if being notified immediately although the program deletion then will be proceeded the rent charge process of UIM.

So according to present embodiment, whenever the customer requirements delete program, then program is deleted under the control of distribution management server 16.

Content-based provider one side's reason is because the charge process that produces is complicated, so do not allow deletion basically.

The needs that will respond the user are below explained the operation of delete program with reference to Figure 10 and Figure 15.

[1.4.11.1] program deletion request

Through the operation part 22 of operating mobile terminal 11, the predetermined homepage of user capture content providers.Distribution menu screen D11 shown in Figure 15 is displayed on the display screen of display part 21 of portable terminal 11.This distribution menu screen D11 is provided by the content server 19 of the content providers of distributing programs.As shown in Figure 15, when the user selected the menu item of representation program deletion, the deletion whether screen D12 inquiry user can carry out was presented in the display part 21 of portable terminal 11.

The user carries out the operation that allows deletion.Portable terminal 11 is sent to content server 19 (step S41) through network with program (applet) deletion request.This request comprises appointment by the information of delete program.

As shown in Figure 15, along with the transmission of program deletion request, the ongoing screen D13 of expression deletion is presented in the display part 21 of portable terminal 11.

[1.4.11.2] is to the de-activation request of distribution management server

Content server 19 is being distributed management server 16 (step S42) once receiving that program deletion request sends to de-activation request.This de-activation request comprises the information and the information of specifying delete program of specified request program deletion user's portable terminal 11.

[1.4.11.3] is to the de-activation request of UIM

Distribution management server 16 is once the fundamental block of receiving de-activation request accessing database and definite storage delete program.Then, distribution management server 16 will comprise the portable terminal 11 (step S43) that the de-activation request of specifying specific fundamental block information sends to the user of requestor deletion.

[1.4.11.4] stops using and accomplishes response

UIM 12 will stop using to accomplish to notify once the end dead program(me) and be sent to distribution management server 16 (step S44).This notice comprises the information of the fundamental block of designated store dead program(me).

[1.4.11.5] stops using and accomplishes notice

Distribute management server 16 when the inactive notice of accomplishing of the program of receiving from UIM 12, the information of the completion of just will stopping using is recorded in the zone corresponding to the database of the fundamental block of the UIM 12 of the completion notice appointment of stopping using.

Distribution management server 16 is stopped using program to accomplish to notify and is sent to content server 19 (step S45).

[1.4.11.6] is to the deletion request of distribution management server

Content server 19 is in the inactive completion notice of receiving the program deletion from distribution management server 16, the just specific program (step S51) of request distribution management server 16 deletions.

[1.4.11.7] is to the deletion request of UIM

Distribution management server 16 is being received program deletion request, just this program deletion request is sent to the user's of requestor deletion UIM 12 (step S52).This program deletion request comprises the information of the fundamental block of designated store delete program.

This program deletion request is sent to UIM 12 through portable terminal 11.UIM 12 is delete program in by the fundamental block of this program deletion request appointment.

[1.4.11.8] deletion is accomplished and is replied

The deletion of UIM 12 1 termination routines is just accomplished notice with the deletion of representation program deletion and is sent to distribution management server 16 (step S53).Information and the program of deletion that notice comprises the fundamental block of being deleted from program of appointment accomplished in this deletion.Simultaneously, as shown in Figure 15, the screen D14 that expression finishes deletion is presented in the display part 21 of portable terminal 11.

Notice is accomplished in [1.4.11.9] deletion

Distribution management server 16 1 receives that from UIM 12 deletion accomplishes notice, just the deleted information of program is recorded in the memory block in the database of user that corresponding requests deletes and delete program.

Then, distribution management server 16 sends to content server (step S54) with the notice of program deletion completion.

Under the situation of the charge process of content providers being made delete program, after this distribution management server no longer collects the expense of content providers.

[1.4.12] deletion (only when the distribution management server needs)

According to present embodiment, can also delete program except the user has a mind to delete.Example be program can term of life predetermined expiration.

Be described in operation such a case of delete program under the guidance of distributing management server below with reference to accompanying drawing 11.

[1.4.12.1] is to the de-activation request of UIM

If but the term of life of program is full and the request delete program; 16 of management servers of distribution confirm that through accessing database the programs of deletion have been distributed to all UIM 12 and have confirmed in each of UIM 12, to have stored the fundamental block of delete program, and de-activation request is sent to UIM 12 each (step S61).Each de-activation request comprises the information of the fundamental block of designated store delete program.

De-activation request is sent to each UIM 12 through portable terminal 11.Activation marker corresponding to by the fundamental block of de-activation request appointment resets to " 0 " through UIM 12 from " 1 ".Forbid in this specific fundamental block executive routine thereafter.

[1.4.12.2] stops using to accomplish and replys

UIM 12 1 finishes to stop using, and just will stop using to accomplish to notify to be sent to distribution management server 16 (step S62).

[1.4.12.3] stops using and accomplishes notice

Distribute management server 16 and receive the information that the record expression is stopped using and accomplished the memory block of accomplishing the database of notifying formed specific program of stopping using a side what the program from deletion had been distributed to.

Distribution management server 16 is stopped using program to accomplish to notify and is sent to content server 19 (step S63).

[1.4.12.4] accomplishes notice notice distribution management server receiving to stop using

Content server 19 1 is received to stop using from distribution management server 16 and is accomplished notice, the notified distribution management server 16 (step S64) that sends to of just should stopping using.

[1.4.12.5] is to the deletion request of UIM

Distribution management server 16 is once receiving the notified portable terminal 11 (step S71) that transmits corresponding to the notified inactive completion notice of stopping using that program deletion request is sent to of stopping using.The deletion request that sends to portable terminal 11 comprises the fundamental block information of designated store delete program.

UIM 12 is once receiving that through portable terminal 11 deletion request deletion is by the program in the fundamental block of request appointment.

[1.4.12.6] deletion is accomplished and is replied

The deletion of UIM 12 1 termination routines just will be deleted to accomplish to notify and will be sent to distribution management server 16 (step S72).This notice comprises the information of the fundamental block of delete program of specifying.

Notice is accomplished in [1.4.12.7] deletion

All sides that distribution management server 16 1 has been distributed to from delete program receive deletion completion notice, just the deleted information of program are recorded in the formed memory block that is used for the database of specific delete program.

Distribution management server 16 will be deleted to accomplish to notify and send to content server 19 (step S73).

Simultaneously, the distribution management server stops because the charge process that the program of deletion possibly carried out content providers so far.

[1.4.12.8] is notified to the deletion result of distribution management server

Content server 19 1 is received deletion completion notice from distribution management server 16, just will delete the notified distribution management server 16 (step S74) that sends to of result.

[1.4.13] is to the program distribution process of UIM version management

Regardless of the needs of customer-side, can request content server 19 automatic distributing programs.The upgrading of distributing programs is a kind of situation of being touched upon.

In this case, to the redaction program distribution is inconvenient to all users' that distributed specific program UIM 12 generations.This is because portable terminal 11 has various models, and the UIM specification has various version.If so send to all UIM, the program that redaction then possibly take place usually can only be by having in a time point or the UIM execution of release version thereafter.

According to this embodiment, when each program upgrade, the versions notification request is sent to UIM and determines whether that according to the request of response program will be sent to given UIM.This operation is displayed among Figure 12.Some version response this notice requests among the UIM 12 support to notify the function of its version, and other do not support.Figure 12 has shown when the versions notification request and has been sent to the executable operations under the UIM situation of a kind of like this function of support and has been sent to the executable operations under the UIM situation of not supporting this function when the versions notification request.

[1.4.13.1] UIM supports the versions notification function operations

[1.4.13.1.1] is to the program distribution request of distribution management server

Before the program distribution after the upgrading, the program distribution request of version information of version that the information that content server 19 will contain designated program and expression can be carried out the UIM 12 of specific program sends to distribution management server 16 (step S81).

[1.4.13.1.2] is to the versions notification request of UIM

Distribution management server 16 is confirmed to be distributed to all portable terminals 11 by the program of program distribution request appointment, the portable terminal 11 (step S82) that the versions notification request sends to and confirms thus once receiving program distribution request accessing database.

[1.4.13.1.3] versions notification

Be sent to each UIM 12 through portable terminal 11 versions notification requests.UIM 12 distributes management server 16 (step S83) once receiving that its versions notification is arrived in the versions notification request.

[1.4.13.1.4] no program distribution notice

Distribution management server 16 receives versions notification from each UIM 12.Fail to satisfy under the situation by the condition of representing from the version information of content server 19 when the versions notification that receives from given

UIM

12,19 notices of content server can not be with program distribution to specific UIM 12 (step S84).

On the other hand, the versions notification that receives as the UIM given from another 12 satisfies under the situation by the condition of representing from the version information of content server 19, and distribution management server 16 arrives specific UIM 12 with program distribution.Should operate in preceding text with reference to figure 6 and Fig. 8 describes.

[1.4.13.2] is to the operation of the UIM that do not support the versions notification function

[1.4.13.2.1] is to the program distribution request of distribution management server

The mode that content server 19 is identical as described above sends to distribution management server 16 (step S91) with the program distribution request.

[1.4.13.2.2] is to the versions notification request of UIM

Distribution management server 16 sends to the versions notification request UIM12 (step S92) of portable terminal 11.

[1.4.13.2.3] timer counting

In this case, UIM 12 does not support the versions notification function, and does not therefore make response.

So, distribution management server 16 monitoring timers, and treat preset time time limit expiration (step S93), once more the versions notification request is sent to the UIM 12 (step S94) of portable terminal 11.Then, the numerical value of retry country increases by 1.

With identical method, distribution management server 16 monitoring timers, and treat preset time time limit expiration (step S95), once more the versions notification request is sent to the UIM 12 (step S96) of portable terminal 11.Then, the numerical value of retry country increases by 1.

[1.4.13.2.4] no program distribution notice

Again, distribution management server 16 monitoring timers, and treat preset time time limit expiration (step S97), once more the versions notification request is sent to the UIM 12 (step S98) of portable terminal 11.Then, the numerical value of retry country increases by 1.

When the numerical value of retry country reaches under the situation of a predetermined value (being 3 in this case); Distribution management server 16 confirms that the version of UIM 12 fails to satisfy the condition from the version of content server 19 notices, and will not have program distribution and notify and send to content server 19 (step S84).

Therefore, content server 19 confirms to require the program of distribution not distributed.

[1.4.14] is according to the program distribution process of UIM memory span restriction

Even the restriction of the memory span of UIM 12 makes content server 19 need also can not carry out program distribution.Shown in Figure 13 is the example of executable operations under such a case.This operation will be described hereinafter.

[1.4.14.1] is by distribution management server refusal

Content server 19 is sent to UIM 12 (step S101) by distributing programs request distribution management server 16 with the program distribution request through additional.

The information of representing the memory state of each UIM is recorded in the database of distribution management server 16.Distribution management server 16 is once the program distribution request accessing database of receiving given UIM 12; And confirm whether the fundamental block that is used for specific UIM 12 can be used for storage; If perhaps can; To such an extent as to capacity is too little can not stored programme (capacity can another version from a version to UIM have nothing in common with each other), perhaps whether program distribution is had any other obstacle.

Under the situation that program can not be distributed, distribution management server 16 can not distributing programs (step S102) owing to insufficient memory capacity with content of announcement server 19.

Therefore, content server 19 confirms to require the program of distribution can not distribute preface.

[1.4.14.2] refused by UIM

The memory span of each UIM 12 and the situation that takies at present are recorded in the database of distribution management server 16.But owing to some reasons or other reasons, actual UIM memory state possibly be different from the memory state that in the database of distribution management server 16, writes down.The operation hereinafter of under such a case, carrying out is described.

At first, content server 19 sends to distribution management server 16 (step S111) with the program distribution request with program.

Distribution management server 16 accessing databases also confirm whether the fundamental block of UIM 12 can be used to store and whether have enough capacity.

Under the situation of confirming " being ", distribution management server 16 will be write request and send to UIM 12 (step S112) with program.

The UIM 12 that has received the request of writing determines whether will to write the appended procedure stores of request any in one of them at fundamental block.When confirming it is under the situation of " denying ", owing to lack memory span, UIM 12 will not have the program distribution notice and will send to distribution management server 16 (step S113).

Owing to lack memory span, distribution management server 16 1 is received no program distribution notice, just it is sent to content server 19 (step S114).

Can confirm from this content of announcement server 19 can not be with program distribution to the UIM that requires to be distributed to.

Because the write error in the storer of UIM 12 or the fault of storage arrangement, program can not be stored in the fundamental block and also might take place.Under such a case, such complete identical operations of carrying out described above.Figure 14 has shown a kind of like this operation.In Figure 14, step S121 to S124 correspond respectively to step S111 in Figure 13 step S114 and shown identical operation.

The operation example that [1.4.15] is concrete

Now, according to present embodiment a concrete operation example will be described.

Stored program execution among [1.4.15.1] UIM

In the example of this operation, the procedure stores of supposing to be called " 00 railway " is in the fundamental block 40-1 of UIM12.

The operation part 22 of user's operating mobile terminal 11 is also visited the homepage of the content providers of distributing " 00 railway " program thus.Distribution menu screen D21 as shown in Figure 16 is presented on the display screen of display part 21.This distribution menu screen 21 is provided by the content server 19 of content providers.The menu selection that user's executable operations shows from distribution menu screen D21 is about a travel frequently item of the pass of purchase.To be sent to content server 19 from portable terminal 11 to the purchase request of the pass of travelling frequently through network.

Therefore, download screen D22 is sent to portable terminal 11 and is presented on the display part 21 from content server 19.Download screen D22 comprises the menu of the numeric data that has identical monetary value as the pass of travelling frequently.

In case the user selects the numeric data of needs, the numeric data information that request is selected is sent to content server 19 from portable terminal 11.

Afterwards, content server 19 will be used to select the on-screen data of the method that the account settles accounts to send to portable terminal 11.Thereby 11 screen D23 are shown through portable terminal.The menu item of user from screen D23 selected " selecting from the UIM menu ", and thus through utilizing the program among the UIM12 to check out.Specifically, in case this selection operation completion, just with result notification UIM 12.UIM 12 1 receives this notice, and the control module of UIM 12 just will turn back to portable terminal 11 in fundamental block 40-1 program stored tabulation in the 40-6.The screen D24 that comprises this tabulation shows on the display part 21 of portable terminal 11.The user selects a clearing program from tabulation.Thereby the program of carrying out selection through UIM 12 is checked out.

Suppose to check out through the executive routine in the program area 41 of fundamental block 40-2.The data field 42 of same basic 40-2 is used to check out.

Content server 19 is settled and just will be included in the numeric data that the above-mentioned pass of travelling frequently buys the pass of travelling frequently in asking and sends to portable terminal 11 detecting account, and this numeric data of the title at two stations that will for example comprise to be comprised, the term of validity, user's name and user's age information sends to UIM 12 from portable terminal 11.The numeric data that will be used for " 00 railway " program is stored in the data field 42 corresponding to the fundamental block 40-1 of UIM 12 identical datas.

[1.4.15.2] utilizes the mail ordering of network to sell

In this operation example, the program that is used for the mail ordering sale is stored in the fundamental block 40-2 of UIM 12.

The user is through the operation part 22 accessed content providers' of operating mobile terminal 11 homepage, so that the distribution menu screen D31 that shows among Figure 17 is presented in the display part 21 of portable terminal 11.This distribution menu screen D31 is provided by the content server 19 that uses network to provide mail ordering to sell the content providers of (usually said " ecommerce ") service.User's commodity (in Figure 17, the MATSUZAKA beef of SUKIYAKI, 500 yuan every kilogram) that selection needs from the listed commodity of distribution menu screen D31.Then, will buy request through network and be sent to content server 19 from portable terminal 11.

The content server 19 of having received the request of purchase turns back to portable terminal 11 with settlement method screen D32.As a result, select screen D32 to be presented in the display part 21.

The user selects " * * bank " by the settlement method hypothesis of selecting to list among the screen D32.Be stored among the fundamental block 40-3 of UIM 12 * * the clearing program of bank starts by the control module 30 of UIM 12 and shows checkout screen D34.

The user imports personal identification (ID) number as settlement information.Portable terminal 11 attempt through communication unit 34 be connected with network * * account settlement server of bank so that show the screen D35 that is just being inserted.

One accomplishes discriminating, just shows quantity purchase affirmation screen D36.

The user confirms quantity and the input validation paid.Portable terminal 11 displaying contents providers' payment affirmation screen D37 is mail reservation and date of payment etc.

[1.4.15.3] travel frequently use (the inspection door right-of-way manually starts) of the pass

According to present embodiment, through the suitable program of storage in UIM 12, portable terminal 11 can be used as the pass of travelling frequently.The example of an operation will be described below.

At first, the user presses the button 23.UIM menu screen D41 shown in Figure 18 is displayed on display part 21.User's select to travel frequently " 00 railway " of use of the pass.Therefore, the control module 30 of UIM 12 is carried out 00 railway programs in fundamental block 40-1, so that menu screen D42 is presented at display part 21.

When display screen D42, " 4. application program starts setting to user's selection automatically.”。Start automatically to be provided with and confirm that thereby screen D43 is shown the prompting user and selects.

Select as the user under the situation of " being ", startup is set up automatically.Select as the user on the other hand " deny " situation under, automatic startup is not set up.

The gate of railroad is equipped with ticket checking reader/register.Pass before the gate, the user carries out following operations.

At first, the user presses U button 23.UIM menu screen D41 shown in Figure 19 is displayed on display part 21.Then, the user selects the pass employed " 00 railway ".Therefore, the control module 30 of UIM 12 is carried out 00 railway programs in fundamental block 40-1, and in the display part 21 display menu screen D42.The user selects " the 1. pass ".The current program of a part that constitutes 00 railway programs is started by control module 30.According to this current program, control module 30 beginnings and the ticket reader/recorder communication that is used for current inspection.For example, under the situation that this communication is accomplished through public key cryptography, current checked operation is carried out by the following step that describes below.

(1) each its other party of side's inspection.

(2) ticket checking reader/register request portable terminal 11 transmits the information of the relevant pass of travelling frequently.

(3) portable terminal 11 is through public-key encryption pass information and send it to ticket checking reader/register.Pass information display screen D53 is presented at the display part of portable terminal 11.

(4) pass information of travelling frequently that the ticket checking reader/the register deciphering receives, and when concluding it is under the situation of validated user, open the gate and allow him to get into.

Simultaneously, the message screen D54 that is used for the user is expressed thanks is presented at display part 21.

Above description relates to the pass of travelling frequently.Usually be used as when portable terminal 11 under the situation of personality card function, data field 42 is updated with the numeric data of expression corresponding to the later number of deduction actual cost in the superincumbent operation (4).

[1.4.15.4] travel frequently use (door right-of-way, automatically start) of the pass

When the screen D43 shown in demonstration Figure 18, the user can select " being " and automatic breakdown is set.Operation below carrying out.Specifically, when the portable terminal that is set to automatic Starting mode 11 during near the station door, the registering signal that transmits from ticket checking reader/register receives through portable terminal 11.Therefore, the current Automatic Program ground that constitutes the part of 00 railway programs is started by the control module among the UIM 12 30, and with manually start similar current having checked.

The influence of [1.5] first embodiment

As stated, according to present embodiment, even divided when storing each program when the memory block of memory module, portable terminal only provides communication function to UIM, and has no additional load to put on portable terminal.So can the built-in function of portable terminal not had a negative impact.

In addition, procedure stores, activation, stop using and deletion is not accomplished through portable terminal but under the control of distribution management server.So when keeping security, user's comfort level is improved.

[2] second embodiment

According to the first above-mentioned embodiment, the program of being carried out by UIM 12 is stored in fundamental block 40-1 among the same UIM in 40-6.Yet will not be stored in the fundamental block by whole executive routines in a second embodiment.

The configuration of [2.1] second embodiment

Figure 21 is the block scheme of the configuration of display routine dissemination system according to a second embodiment of the present invention.

In Figure 21, UIM 12, content server 19-1 are shown to 19-6 and 19X and distribution management server 16A.Distribution management server 16A with the distribution management server 16 of first embodiment add that to have only the exclusive function of present embodiment corresponding.Content server 19-1 has the function similar with the content server of first embodiment 19 to 19-6 and 19X.As in first embodiment according to present embodiment, system has an authentication server, and is not shown among Figure 21.

According to present embodiment, UIM 12 comprises the application area 12B that the application area 12C shown in Figure 22 replaces first embodiment.Program storage area 12C is divided into seven fundamental block 40-1 to 40-7 and a free fundamental block 40-F1.

Each has program area 41 and data field 42 to fundamental block 40-1 to 40-7 and free fundamental block 40-F1.Program (application program or applet) is stored in the program area 41.On the other hand, data field 42 storing therein by the used data of program stored in the program area 41 of same basic or free fundamental block.

In this case, fundamental block 40-1 is separate to 40-7 and free fundamental block 40-F1, and the program that is stored in the given program area 41 can not be visited the data field 42 of other piece basically.This also is the situation of first embodiment.The participation of not distributing management server 16A can not be distributed or deleted the program that is stored in the program area 41.But, can be under the situation that electronic money is downloaded from ATM through distribution management server 16A or direct control data district, local terminal 42.This point is also similar with first embodiment.

According to present embodiment, the distribution that is stored in the program of fundamental block 40-1 in the 40-7 is by distribution management server 16A control.But the program that is stored among the free fundamental block 40-F1 can't help to distribute management server 16A control, but is controlled by user oneself.

According to first embodiment, according to the dispense request from portable terminal 11, the program that calm server 19 is transmitted sends to UIM 12 through distribution management server 16.On the other hand, according to present embodiment, distribution management server 16A receives the program distribution request from portable terminal 11, and obtains program through the accessed content server as required, and it is distributed to the UIM 12 of portable terminal 11.According to present embodiment, 16A is similar with the distribution management server 16 of first embodiment for the distribution management server, because 12 program distribution is by relaying and management from the content server to UIM.But, be not unique function of distribution management server 16A according to this operation of present embodiment.Specifically, distribution management server 16A is for the user's of UIM12 interests, can stored programme or the information of storage representation program address, and any program of storage in this device can be obtained by the user through distributing management server 16A.On this meaning, distribution management server 16A demonstrates the function similar with the cache memory that is used for UIM 12.

For program distribution of managing UIM 12 and the function that demonstrates similar cache memory, distribution management server 16A comprises distribution administrative unit 50.Distribution administrative unit 50 has user information storage unit 51 and program information storage unit 52.

Program information storage unit 52 storing therein program itself or storage and can be distributed to the corresponding URL of program of UIM 12.The information of this URL be expression content server 19-1 in the 19-6 specific address and the residing content server of specific program.Be stored in program information storage unit 52 and be used to preset sequence; URL information or program itself can be confirmed according to the memory capacity of program information storage unit 52; Or under the situation of enough memory capacity, can select by the content providers of operation Distributor as requested.

For example; When the portable terminal 11 to designated user has sent the program distribution request; And program or its URL that will not meet the particular dispensed request are stored under the situation in the program information storage unit 52, and the possibility of storage new procedures or its URL is presented in program information storage unit 52.Under such a case, program information storage unit 52 accessed content servers and the program that needs according to acquisition request and storage user from portable terminal 11.

User information storage unit 51 comprise corresponding to according to n (n＞1) unique user information memory cell 53-1 of n people of system applies of the present invention to 53-n.Each each unique user information memory cell 53-K has actual dispensed information memory cell 54 and virtual distributing information storage unit 55.

Actual dispensed information memory cell 54 storing therein of unique user information memory cell 53-K are corresponding to the pointer data of actual dispensed to the program of the UIM 12 of user K.Pointer data is used for having represented to store the specific region of the program information storage unit 52 of program or URL., actual dispensed information memory cell 54 makes it possible to will be distributed to distribution management server 16A again to any program (if by deletion) among the 40-7 at the fundamental block 40-1 of UIM 12 immediately.

On the other hand, virtual distributing information storage unit 55 storages and the available corresponding pointer data of program of unique user information memory cell 53-K.Although not with its actual UIM 12 that is distributed to user K, can be distributed to the UIM 12 that hope has the user K of such program immediately.Through the use of virtual distributing information storage unit 55, the user of UIM 12 can accept following service.

(a) pointer data with the program that requires to be distributed to UIM 12 is stored in the virtual distributing information storage unit 55 temporarily.Whenever needs distributions is stored in when having the program of pointer data in the required virtual distributing information storage unit 55, the user always utilizes portable terminal 11 that request is sent to distribution management server 16A.Distribution management server 16A reads the pointer data of requestor from virtual distributing information storage unit 55, and obtain and the program of distribution particular pointer data appointment to UIM 12.In this case, the pointer data with the program that is distributed to UIM 12 moves to actual dispensed information memory cell 54 from virtual distributing information storage unit 55.

(b) quantity of the fundamental block in UIM 12 is limited.So all fundamental blocks are occupied and have no the fundamental block of the program that can be used for storage distribution to take place.Under such a case, distribute management server 16A from memory block reading pointer data, and it is sent to virtual distributing information storage unit 55 from the memory block of actual dispensed information memory cell 54 corresponding to given fundamental block 40-X the UIM 12.The distribution program be sent to UIM 12, it is written into fundamental block 40-X in UIM 12, and the pointer data of program be written into actual dispensed information memory cell 54 in the corresponding memory block of fundamental block 40-X in.Even under the whole occupied situation of fundamental block, this process makes it possible to be stored in the fundamental block through dispense request acquisition program and with it.In this process,, can provide request once more to distribution management server 16A, and can accomplish the process described in the preceding text (a) if desired for the program of evicting from from fundamental block.

To provide explanation below with the function of the corresponding distribution management server of free fundamental block 40-F1 16A.As stated, about free fundamental block 40-F1, the not control program distribution of distribution management server 16.The user can optionally write down or delete the program among the free fundamental block 40-F1 through operating mobile terminal 11.

When the actual dispensed information memory cell 54 of user information storage unit 53 has the corresponding memory block of fundamental block 40-F1 with UIM 12.But in this memory block, do not have stored program pointer data, comprise that program is recorded in or from the inferior logarithmic data of fundamental block 40-F1 deletion or the information data of its RUL and have.When in free fundamental block 40-F1, not having whatever under the situation of storage, can with expression should the fact (" zero " data etc.) data storage in this is distinguished.

If the program among the free fundamental block 40-F1 of UIM 12 is by being deleted, it does not resemble the program stored in the 40-7 at fundamental block 40-1, keeps this state till being write down by user oneself again.

On the other hand, temporarily change under the situation of another program when the user hopes to make the program among the free fundamental block 40-F1, a kind of like this change usually can write it through user oneself again to be carried out.

Under such a case, though with procedure stores in free fundamental block 40-F1, distribution management server 16A then can not carry out the charge process.

Free fundamental block 40-F1 can be changed, thus it can be as required by the user to handle to the same mode of 40-7 with fundamental block 40-1.Specifically, before changing, seven fundamental block 40-1 can be used as eight fundamental block 40-1 to 40-8 to 40-7 and a free fundamental block 40-F1.

Under such a case, mean the information that this piece of free radical 40-F1 become fundamental block 40-8 greatly and write through the distribution management server 16A among the system region 12A (Fig. 4) of UIM 12.So far can handle as area distribution management server 16A corresponding to fundamental block 40-8 as the zone in the actual dispensed information memory cell 54 of the zone processing corresponding with free fundamental block 40-F1; And utilize this zone, beginning and the same management of fundamental block 40-1 to 40-7.

The fundamental block that has been changed into fundamental block 40-8 by this way by the user can return to free fundamental block 40-F1 again.Can not change fundamental block 40-1 into free fundamental block to 40-7.

[2.2] configuration of distribution management server

The configuration of distribution management server is displayed among Figure 23.

Distribution management server 16A generally is configured to: transmit control unit 61, above-mentioned user information storage unit 51, above-mentioned program information storage unit 52 and secure communication control device 62.

Transmit control unit 61 control exterior content server 19-1 are between the 19-6 or the transmission between portable terminal 11 (content server 19-1 is to the transmission between 19-6 and the portable terminal 11).Transmit control unit 61 is also controlled the mutual transmission between user information storage unit 51, program information storage unit 52 and the secure communication control device 63.In addition; Transmit control unit 61 is control distribution administrative unit 50, user information storage unit 51, program information storage unit 52 and secure communication control device 63 on the one hand, asks on the other hand simultaneously in distribution administrative unit 50, user information storage unit 51, program information storage unit 52 and secure communication control device 63, to carry out various processing.

Program information storage unit 52 plays basically and is used for the program distribution that allows is arrived the inlet effect of the fundamental block 40-1 of UIM12 to 40-7.

Secure communication control device 63 is differentiated the information (encrypted program etc.) of sending from content server 19-1 to 19-6, preserves the public-key cryptography that matches with the private key that is had by each UIM, and management is to the distribution of content server 19-1 to the 19-6 public-key cryptography.

The operation of [2.3] second embodiment

[2.3.1] record in user information storage unit

In the example shown in Figure 21, content server 19-1 is under the control of distribution management server 16A to 19-6.Hope to use the user of program stored (applet) in any one of content server in the user information storage unit 51 of sending out management server 16A, to write down specific program.

Below with reference to Figure 24 with the declare record process.

At first, the menu request that the user can program recorded sends to distribution management server 16A from portable terminal 11.This request is sent to program information storage unit 52 (step S131) through the transmit control unit 61 of distribution management server 16A.

The menu list of all programs that the program information storage unit 52 that has received request is prepared to be write down.Specifically, all programs (its program itself or URL) are stored in program information storage unit 52, and through transmit control unit 61 menu list are sent to portable terminal 11 (step S132).

This menu list receives and is presented at display part 21 through portable terminal 11.In this case, the explanation of user's program that can obtain to require from distribution management server 16A through operating operation part 22 and it is presented at display part 21.

In case the program of request distribution is confirmed that by the user of operating operation part 22 portable terminal 11 will comprise the program information storage unit 52 (step S133) that the recording of information request of specifying specific program is sent to distribution management server 16A.

Program information storage unit 52 is according to the program record request, and record (register) is by the program (step S134) of user's request in user information storage unit 51.

Operation among the step S134 will specifically describe.At first, the hypothetical record request is sent from the portable terminal 11 of the UIM 12 that is equipped with or is equipped with given user K.In this case; Program information storage unit 52 is according to record request; The program of identification user request confirms to be used to specify the pointer data of the interior zone of program information storage unit 52, and the URL information of the position of representation program or its program itself are stored in program information storage unit 52.In case obtain pointer data by this way by the program of user's request; 52 of program information storage unit are accessed in the content of storage in each district with the actual dispensed information memory cell 54 of the corresponding unique user information memory cell of user K 53-K, and confirm the fundamental block 40-X (1≤X≤7) that in the fundamental block of the UIM 12 of user K, can be used to store thus.To be recorded in by the pointer data of the program of user request in the zone with the corresponding actual dispensed information memory cell 54 of fundamental block 40-X (step S134).Also the UIM12 of possibility user K has no the fundamental block 40-X (1＜X＜7) that can be used to store.Under such a case, program information storage unit 52 is the record pointer data in by virtual distributing information storage unit 55 user's appointment or that be provided with automatically.

In step S141, menu list possibly have no the program that needs.Under such a case, the content server that can 54 visits of requestor information memory cell needs through operating mobile terminal 11 users.Like this, program information storage unit 54 obtains program or its URL according to user's request from the content server that the user needs, and in the vacant district in program information storage unit 54 it is preserved.In operating process, the position of expression acquisition program or the pointer data of RUL are recorded in the actual dispensed information memory cell 54 with the mode the same with aforesaid operations thus.

After accomplishing the record of requestor through the user in this way, distribution management server 16A just begins the user or has distributed the charge process of the content providers of specific program.

Then, user information storage unit 51 will write down notice through transmit control unit 61 and send to portable terminal 11 (step S135).

Portable terminal 11 confirms to send to distribution management server 16A (step S136) once receiving that the record notice is received record.

User information storage unit 51 1 receives that from the portable terminal 11 of the UIM 12 of the user K that wherein is equipped with or links to each other therewith record is notified through transmit control unit 61; Just having confirmed to store has been the content providers 19 of the program of user K record pointer data, and will activate permission and ask to send to content server 19 (step S137).

Use contract for approved programme, the content server 19 that has received activation permission request will activate and allow to send to user information storage unit 51 (step S138).Thereby user information storage unit 51 is thought allow to use and is stored in the pointer data that is used for that district of the actual dispensed information memory cell 54 of the unique user information storage area 53-K of the corresponding user K of fundamental block 40-X.

User information storage unit 51 is sent the record of the record completion of expression portable terminal 11 and is accomplished notice (step S139).The record tabulation that notice comprises a program listing of the pointer data of record in being provided at user information storage unit 51 accomplished in this record.

The user can confirm the record tabulation from the display part 21 of portable terminal 11.

[2.3.1.1] writes down UIM (the content servers store program) in fundamental block

Received that the user K that writes down tabulation can ask to distribute him and ask program recorded and it is write UIM 12.To this operation be described with reference to Figure 25.

User K carries out the operation that selection needs distributing programs from the record tabulation.Then, the dispense request that comprises the record list pointer of location number in the tabulation of expression record is sent to the user information storage unit 51 (step S141) of distribution management server 16A from distribution terminal 11, and specific program is positioned in this record tabulation.

User information storage unit 51 once receive from the portable terminal 11 of user K dispense request from the tabulation of the record that specific dispense request, comprises in that district of actual dispensed information memory cell 54 of the corresponding unique user information memory cell of pointer 53-K read the URL of the program that the pointer data of the position of designated store program own maybe need distribute.The dispense request that will comprise pointer data sends to program information storage unit 52 (step S142).

The zone of the pointer data appointment in the 52 visit particular dispensed requests of program information storage unit.When the URL of program is stored under the situation in this zone, ask to utilize the program distribution (step S143) of URL request from content server 19.

Content server 19 is once receiving that this dispense request asks 18 pairs of authentication servers distribution management server to issue public-key cryptography (step S144).

When allowing content server 18 to write under the situation of UIM 12, authentication server 18 will be used to distribute the public-key cryptography of management server and issue content server 19 (step S145).

Content server 19 is used to distribute the public key encryption program of management server, and as the program that has the certificate key it is distributed to the secure communication control device 62 (step S146) of distribution management server 16A.

Secure communication control device 62 storing therein is managed the server-specific key with the distribution that distribution management server public key matches, and utilizes this private key encryption to have the program of certificate key.Encrypt under the case of successful when this, the program that writes public text is obtained.

Secure communication control device 62 obtains the UIM public-key cryptography corresponding with specifying UIM 12 from authentication server (being meant first embodiment), and passes through UIM public key encryption program, and it is sent to UIM 12.In UIM 12, utilize the UIM private key decrypted program that matches with the UIM public-key cryptography.In case successful decryption, the program in the public text is obtained.UIM 12 writes this program (step S147) in fundamental block 40-X.UIM 12 confirms fundamental block 40-X through use with the program information storage unit 52 employed identical algorithms among the distribution management server 16A.So in step S147, that kind of having confirmed among the step S134 as Figure 24, identical fundamental block 40-X obtained.Perhaps; The record that distribution management server 16A from the step S139 of Figure 24 transmits is accomplished notice and can be comprised among the given step S134 and the information of determined unappropriated fundamental block 40-X in the step S147 of Figure 25;, program is stored among the fundamental block 40-X by the customizing messages appointment.

When the end of program write operation, UIM 12 will write and accomplish the secure communication control device 62 (step S148) that notice is sent to distribution management server 16.This writes the information that notice comprises the fundamental block 40-X that is used in reference to the program that is written into surely of accomplishing.

When the completion notice is write in secure communication control device 62 receptions of distribution management server 16, in order to ask to allow to carry out the program that writes UIM 12, user information storage unit 51 will activate request and send to content server 19 (step S149).

The content server 19 that has received this activation request will activate and allow to send to user information storage unit 51 (step S150).

The user information storage unit 51 that has received this activation permission will activate notice and send to UIM 12 (step S151).

One receives the activation notice in UIM 12, and the activation marker that correspondence has write the fundamental block 40-X of program becomes " 1 " from " 0 ", and executive routine becomes possibility in specific fundamental block thereafter.

Finish when program activates, UIM 12 activates the activation confirmation notice that finishes is sent to distribution management server 16A together with the information (for example specifying the information of fundamental block 40-X) of designated program user information storage unit 51 (step S152) with representation program.

User information storage unit 51 is received the zone of actual dispensed information memory cell 54 of the unique user information memory cell 53-K of the definite corresponding fundamental block 40-X of activation confirmation notice once the UIM 12 from user K.In this zone, be written among the UIM 12 of user K with the corresponding pointer data of the program that writes fundamental block 40-X.In this zone, activate completion information and be written into a kind of like this form of given pointer coexistence.After this operation, accomplish to the activation of 40-7 the fundamental block 40-1 of all UIM 12 in each zone whether distribution management server 16A can grasp through inserting user information storage unit 51.

When the EO of the information that writes the activation completion, user information storage unit 51 notice portable terminals 11 are accomplished as the record of program listing, and advising process can be performed and while end operation (step S153) thereafter.

(step S154) accomplished in the activation of distribution management server 16A content of announcement server 19 programs.

[2.3.1.2] writes down (under the situation of distribution management server stores program itself) in the UIM fundamental block

In Figure 25 in the operation displayed example; The program that the user need distribute itself is not to be stored in distribution management server 16A but be stored in content server 19. by comparison; In the operation displayed example, the program that the user need distribute itself is stored in distribution management server 1 6A in Figure 26.Operation displayed example among Figure 26 will be described below.

The record tabulation that user access receives from distribution management server 16A, and accomplish selections need the operation of program.Comprise with the tabulation of the corresponding record of specific program in the dispense request of pointer send to the user information storage unit 51 (step S161) of distribution management server 16A from portable terminal 11.

User information storage unit 51 1 is received dispense request from the portable terminal 11 of user K, just from dispense request that district of actual dispensed information memory cell 54 of the corresponding unique user information memory cell 53-K of pointer in the record tabulation that comprises read storage ground or the pointer data of the program that the request of reading is distributed itself of the URL of designated program.The dispense request that will comprise this pointer data sends to program information storage unit 52 (step S162).

52 visits of program information storage unit are by the zone of the pointer data appointment in the dispense request.When program itself being stored under the situation of specific region, secure communication control device 62 request authentication servers 18 are issued the certificate key and are promptly sent the request of the required UIM public-key cryptography of encipheror itself and send it to the UIM 12 (step S163) of user K.

When the program of corresponding dispense request is to allow to write under the situation of program of UIM 12, authentication server 18 sends to secure communication control device 62 (step S164) with the UIM public-key cryptography.

Secure communication control device 62 receives these UIM public-key cryptography, and is legal once definite this key, just utilizes the program encryption of UIM public-key cryptography to distribution, and generation has the program of certificate key thus.

When the user at portable terminal 11 complete operations when allowing program distribution, the program that the secure communication control device 62 of distribution management server 16A will have a certificate key sends to the UIM 12 (step S165) of portable terminal 11.

UIM 12 stores the UIM private key that matches with the UIM public-key cryptography there, and utilizes this this program of UIM private key deciphering.Identical program is written among the fundamental block 40-X.

Ensuing class of operation is similar to the corresponding operation that shows among Figure 25.Step S166 among Figure 26 is corresponding to S153 with the step S148 among Figure 25 to S171.

[2.3.1.3] writes down (when distribution management server stores program itself, the control device of secure communication is simultaneously preserved under the situation of UIM public-key cryptography) in the UIM fundamental block

When portable terminal 11 sent to distribution management server 16A with dispense request, the UIM public-key cryptography that secure communication control device 62 save routines of distribution management server 16A are distributed to UIM 12 possibly take place.When in a short time, program distribution being arrived under the situation of identical UIM, such phenomenon possibly take place for example.Figure 27 has shown the example of complete operation under such a case.In this operation example, as with dispense request corresponding programs itself time, utilize the UIM public-key cryptography be stored in secure communication control device 62 with program encryption and write UIM 12.Except lack corresponding to step S163 and S164 be used for obtain the operation of UIM public-key cryptography from authentication server 18, among Figure 27 among operation displayed and Figure 26 operation displayed similar.Step S181 among Figure 27, S182, S183 to S189 respectively with Figure 26 in step S161, S162, S165 corresponding to S171.

[2.3.1.4] be record in the free fundamental block of UIM

Through operating mobile terminal 11, the user can be in the free fundamental block 40-F1 of UIM 12 logging program.This operation is displayed among Figure 28.

Under the situation among the free fundamental block 40-F1 that program is recorded in UIM 12, user's operating mobile terminal 11 is so that the content server 19X that access needs and will distribute the request that needs program and send to content server 19X (step S191).

The content server 19X that has received this dispense request arrives the program distribution of request the secure communication control device 62 (step S192) of distribution management server 16A.

User's complete operation to be allowing being distributed to free fundamental block 40-F1, and will represent that the information of specific operation sends to distribution management server 16A from portable terminal 11.Then, secure communication control device 62 is with the UIM 12 (step S193) of program distribution to portable terminal 11.Can program be sent with the form of encrypting or not encrypting.UIM 12 writes free fundamental block 40-F1 with this program.

When the termination routine write operation, UIM 12 will write to accomplish to notify and be sent to distribution management server 16 (step S184).

The user information storage unit 51 of distribution management server 16 receives this from the UIM of user K 12 and writes and accomplish notice, and upgrades the information (step S195) that comprises the distribution time number in the district that is stored in the single information memory cell of the corresponding user of free fundamental block 40-F1.

In case accomplish this renewal operation, the activation notice that user information storage unit 51 will write the program of free fundamental block 40-F1 sends to UIM 12 (step S196).

According to this notice, UIM 12 accomplishes the activation of program, and the program that will be illustrated among the free fundamental block 40-F1 activates the user information storage unit 51 (step S197) that the activation answer notification of accomplishing is sent to distribution management server 16.

User information storage unit 51 receives that once the UIM 12 from user K activating answer notification writes down the information of accomplishing that activates the district of the 53-K of user information storage unit separately corresponding with free fundamental block 40-F1.User information storage unit 51 is accomplished with form notice portable terminal 11 records of program listing, thus terminating operation (step S198).

[2.3.1.5] is from the user information storage unit delete program

The process of logging program in the deletion user information storage unit 51 is described referring now to Figure 29.

Through carrying out predetermined operation, the user can be presented at display unit 21 with the logging program tabulation that receives from distribution management server 16A.In this case, the user specifies the program and the notice deletion that need to distribute the program among the management server 16A.The program record delete request that will comprise the appointed information that appointment will be deleted sends to the user information storage unit 51 (step S201) of distribution management server 16A.

When by the program of being deleted from the fundamental block 40-1 of UIM 12 under the situation of any one deletion of 40-7, user information storage unit 51 will represent that the user hopes that cancelbot uses the cancellation request to send to the content server 19 (step S202) of distributing specific program.On the other hand, hereinafter will be described when not deleted situation under, under the guiding of distribution management server 16A simultaneously being carried out operation from fundamental block 40-1 to 40-7 delete program at the fundamental block 40-1 of UIM 12 in any one of 40-7 by the program that deleted.

Content server 19 allows notice to send to the user information storage unit 51 (step S203) of distribution management server 16A once receiving that the cancellation request will be cancelled.

User information storage unit 51 is deleted the information of asking the program of deletion among the relevant step S201 once receiving that cancellation allows to notify, and after deletion, the logging program tabulation is sent to portable terminal 11 (step S204).

[2.3.1.6] is from UIM fundamental block delete program

Referring now to Figure 30 explanation process from the fundamental block 40-1 of UIM 12 to the 40-7 delete program.

Through carrying out predetermined operation, the user can be presented at display unit 21 with the logging program tabulation that is sent to portable terminal 11.In this case, suppose that the user specifies the program that needs and sends its notice of deletion.The fundamental block 40-1 that has stored the UIM 12 of delete program is determined to one of them of 40-7, and the deletion request that will comprise the information of specifying specific fundamental block is sent to the user information storage unit 51 (step S211) of distribution management server 16A from portable terminal 11.

User information storage unit 51 1 is received the deletion request, just will delete to allow notice to send to UIM 12 (step S212).

UIM 12 1 receives that deletion allows notice, the program of user's appointment from fundamental block deletion step S211 just, and will delete completion and notify and send to user information storage unit 51 (step S213).

Therefore, user information storage unit 51 is deleted the information of relevant corresponding program under the control of transmit control unit 61, and will delete to notify and be issued to content server 19 (step S214).

In addition, user information storage unit 51 is accomplished with form notice portable terminal 11 deletions of program listing, thus end operation.

[2.3.1.6.1] carries out from the situation of fundamental block delete program under the guiding of distribution management server simultaneously.

As stated; If under the guiding of distribution management server; From fundamental block 40-1 to 40-7 delete program process with from user information storage unit 51 delete programs with to carrying out; 51 programs through the specified request deletion of the user information storage unit of distribution management server will be deleted notice and sent to UIM, substitute the operation of above-mentioned steps S211 and S212.

[2.3.1.7] forbids the situation that user information storage unit is used

Can carry out the de-activation procedure of user information storage unit according to present embodiment, use user information storage unit 51 to prevent the user.For example supspend under the situation of distribution management server 16A to user's service, carry out this de-activation procedure user information storage unit when distribution management server 16A temporarily stops to serve the request that the content providers of content server 19 maybe should be installed.In case this de-activation procedure to user information storage unit is accomplished, and then forbids program recorded in the user information storage unit 51 is distributed to UIM 12, thereby forbids the program of deletion record in UIM 12.

Referring now to Figure 31 the user information storage unit de-activation procedure is described.Description wherein relates to the situation of content server 19 requests to the user information storage unit de-activation procedure.

At first, content server 19 sends to the user information storage unit de-activation request user information storage unit 51 (step S221) of distribution management server 16A.

User information storage unit 51 1 is received the user information storage unit de-activation request, the use (dead status) that just is under an embargo, and stop using to allow notice to send to content server 19 (step S222) user information storage unit.

Secondly, user information storage unit 51 sends to portable terminal 11 with the user information storage unit deactivation notice it means greatly and has banned use of user information storage unit 52 (step S223).

Therefore, the user of portable terminal 11 can confirm to have banned use of user information storage unit 51.

The situation that [2.3.1.7.1] user information storage unit is activated by the distribution management server

Under the situation that user information storage unit is activated by distribution management server 16A; User information storage unit 51 use (stopping using) that is under an embargo, and the user information storage unit deactivation notice sent to the portable terminal 11 (step S223) that expression bans use of user information storage unit 51.

[2.3.1.8] bans use of the situation of program stored in the UIM fundamental block

Referring now to Figure 32 the de-activation procedure of fundamental block is described, to ban use of free fundamental block 40-F1 at fundamental block 40-1 program stored or UIM 12 in the 40-7.

When portable terminal 11 is stolen or content providers request user forbids that under the situation to its use, this process is performed.In case carry out this process, forbid that then the user uses the program that (comprises free fundamental block) in the fundamental block that is stored in that is comprised.Description below wherein relates to the user service server 65 of being responsible for user's service, for example when portable terminal 11 is stolen, takes adequate measures, according to the situation from the process of user's the inactive fundamental block of report request.

Figure 32 has shown the process flow diagram of fundamental block de-activation procedure.

At first, user service server 65 sends to the fundamental block de-activation request user information storage unit 51 (step S231) of distribution management server 16A.

User information storage unit 51 1 is received the fundamental block de-activation request, just deactivation notice is sent to UIM 12 (step S232).

Thereby the UIM 12 inactive fundamental blocks that satisfy the fundamental block de-activation request, and send inactive reply (the step S233) of fundamental block that expression has banned use of fundamental block.

Secondly, user information storage unit 51 is stopped using fundamental block to accomplish to notify and is dealt into the fundamental block (step S234) that user service server 65 expressions have banned use of UIM 12.

In addition, user information storage unit 51 is dealt into portable terminal 11 expressions with the user information storage unit tabulation and bans use of fundamental block (fundamental block can comprise free fundamental block), thus end operation process (step S235).

The influence of [2.4] second embodiment

As stated, according to second embodiment, can distributing programs in the scope of the quantity of the memory block that is no more than memory module (UIM), and improved the convenience degree of operation with regard to customer-side.

In addition, the distribution management server can be easy to manage the activation of distributing programs/stop using, and distribution and activation that can distributing programs/stop using.

[3] modification of embodiment

[3.1] first revise

Foregoing description relates to the situation that wherein comprises single distribution management server.However, can a plurality of distribution management servers be provided for distribution procedure.

Under such a case, can with in the memory block information stores of each UIM program stored and relevant each program in public database.

[3.2] second revise

Except that foregoing description, relate to the situation that the distribution management server directly links to each other with circuit switching network, through constituting the Internet and the internet gateway of packet network, the distribution management server can link to each other with circuit switching network.

[3.3] the 3rd revise

Although only be described to memory module more than the UIM, the present invention also is applicable to various IC-card storeies with same effect.In this case, memory module can be installed in fixed terminal and portable terminal.

Claims

1. program distribution system that is used for distributing programs, this program distribution system comprises:

Portable terminal, it is configured to be received in the program that can be wirelessly transmitted to portable terminal under the unactivated encrypted state,

This portable terminal comprises Subscriber Identity Module, and wherein portable terminal is configured to be sent to Subscriber Identity Module to the program under the unactivated encrypted state;

Subscriber Identity Module comprises a plurality of memory blocks; Wherein Subscriber Identity Module is configured to program is deciphered; And in the memory block of the procedure stores under the unactivated state in said a plurality of memory blocks; Subscriber Identity Module has the information of the memory block of said program to be sent to the distribution management server with writing to accomplish to notify with designated store after having stored said program

Said distribution management server is recorded in the information of the program of designated store in the database as the information information corresponding that stores the memory block of said program with expression,

Said distribution management server activates request with program and sends to said Subscriber Identity Module, and said program activates the information of the memory block of having asked to comprise designated store the program that will be activated,

Wherein only when in response to Subscriber Identity Module the program that can send to portable terminal being activated the reception of request, the storable program of Subscriber Identity Module is only and can be activated by Subscriber Identity Module, and

The program that is stored in the memory block can not be carried out by the user before being activated.

2. program distribution according to claim 1 system; Wherein Subscriber Identity Module is configured to receiving position information; This positional information representes will be used to store a said memory block of this program, and this positional information can send to portable terminal and can be sent to Subscriber Identity Module.

3. program distribution according to claim 1 system, wherein portable terminal is configured to send the request of program distribution to portable terminal.

4. program distribution according to claim 1 system; Wherein but portable terminal further comprises and is used to control the data transmission of portable terminal and the operation control unit of operation, but wherein operation control unit be configured in response at portable terminal to the reception of program, program is sent to Subscriber Identity Module.

5. program distribution according to claim 1 system, wherein only in response to Subscriber Identity Module during to the reception of the program de-activation request that can send to portable terminal, the storable program of Subscriber Identity Module is only and can be stopped using by Subscriber Identity Module.

6. program distribution according to claim 1 system, wherein only in response to Subscriber Identity Module during to the reception of the program deletion request that can send to portable terminal, the storable program of Subscriber Identity Module is only can be by the Subscriber Identity Module deletion.

7. program distribution according to claim 1 system; Said memory block in the wherein said memory block is configured to store numeric data with program safely; Wherein Subscriber Identity Module can be by indication with executive routine, so that be applied to the monetary liability that portable terminal takes place to numeric data.

8. program distribution according to claim 1 system; Wherein each said memory block comprises program area and data area; Subscriber Identity Module is configured to stored programme in the program area in a said memory block, and the storage data relevant with program in the data area in an identical said memory block.

9. program distribution according to claim 8 system, wherein Subscriber Identity Module is configured to optionally make and can be stored in can be visited by another program that can store and carry out in another memory block one of at least in program and the related data in the said memory block.

10. portable terminal that is used for distributing programs, this portable terminal comprises:

But storage unit and operation control unit, but wherein operation control unit is configured to control based on the control program that comprises in the storage unit data transmission and the operation of portable terminal;

But the communication unit of communicating by letter with operation control unit, this communication unit are configured to be received in the program that can be wirelessly transmitted to portable terminal under the unactivated encrypted state;

The Subscriber Identity Module interface unit of communicating by letter with communication unit, wherein communication unit is configured to be sent to the Subscriber Identity Module interface unit to the program under the unactivated encrypted state; With

With the Subscriber Identity Module of Subscriber Identity Module interface unit coupling, wherein the Subscriber Identity Module interface unit is configured to be sent to Subscriber Identity Module to the program under the unactivated encrypted state;

Wherein Subscriber Identity Module comprises a plurality of memory blocks, and wherein Subscriber Identity Module be configured to program decipher and with unactivated state in the memory block of procedure stores in said memory block,

Wherein the storable program of Subscriber Identity Module only can be activated when in response to Subscriber Identity Module program being activated the reception of asking by Subscriber Identity Module; This program activates request and can send to communication unit and can pass through the reception of Subscriber Identity Module interface unit by Subscriber Identity Module, and

11. portable terminal according to claim 10; Wherein communication unit further is configured to receive the positional information that can be wirelessly transmitted to portable terminal; This positional information representes to want a stored program said memory block; Wherein positional information can be sent to Subscriber Identity Module from communication unit through the Subscriber Identity Module interface unit, with the notice Subscriber Identity Module procedure stores of being deciphered wherein.

12. portable terminal according to claim 10; But further comprise the display part of communicating by letter with communication unit with operation control unit; But wherein through the indication of operation control unit and display part, communication unit capable of using sends the request of program distribution to portable terminal.

13. portable terminal according to claim 10; But wherein the Subscriber Identity Module interface unit be configured to the operation control unit direct communication transmitting and receive data, but and wherein the Subscriber Identity Module interface unit further be configured to need not to transmit and receive data the intervention of operation control unit with the communication unit direct communication.

14. portable terminal according to claim 13; Further comprise external apparatus interface; External apparatus interface is configured to the communication facilities exchange message outside with portable terminal, but wherein the Subscriber Identity Module interface unit further is configured to directly communicate by letter need not the intervention of operation control unit with the communication facilities exchange message with external apparatus interface.

15. portable terminal according to claim 10; Wherein can only can stopped using during to the reception of program de-activation request in response to Subscriber Identity Module by Subscriber Identity Module by the Subscriber Identity Module program stored, this program de-activation request can send to communication unit and can be received through the Subscriber Identity Module interface unit by Subscriber Identity Module.

16. portable terminal according to claim 10; Wherein can only can in response to the Subscriber Identity Module reception that deletion is asked to program the time, be deleted by Subscriber Identity Module by the Subscriber Identity Module program stored, this program deletion request can send to communication unit also can be by Subscriber Identity Module through the reception of Subscriber Identity Module interface unit.

17. portable terminal according to claim 10; A wherein said memory block is configured to store numeric data with program safely; And wherein Subscriber Identity Module can be by indication with executive routine, so that be applied to the monetary liability that portable terminal takes place to numeric data.

18. portable terminal according to claim 10; Wherein each said memory block comprises program area and data area, and Subscriber Identity Module further is configured in the program area of said memory block stored programme and the storage data relevant with program in the data area of an identical said memory block.

19. portable terminal according to claim 18, wherein Subscriber Identity Module further is configured to optionally to make and can be stored in can be visited by another program that can store and carry out in another memory block one of at least in program and the related data in the said memory block.

20. portable terminal according to claim 10, wherein Subscriber Identity Module is configured to utilize the Subscriber Identity Module private key that is stored in the Subscriber Identity Module to come program is deciphered.

21. portable terminal according to claim 10, wherein Subscriber Identity Module is configured to the visit of control program to other memory block.