JP2003152718A - Mobile terminal, information management system, information management method, management program, and recording medium for recording the management program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mobile terminal, an information management system, an information management method, a management program, and a recording medium for recording the management program that can enhance the performance of the mobile terminal and improve the security at the same time. SOLUTION: The mobile terminal 3 comprises: an entry section 31; an interrupt controller 32; a management section 33; a cache 34; an IC card interface 36; a ROM 37; a RAM 38; a transmission reception section 39; and a display section 40. The IC card interface 36 acquires a route certificate 4 stored in an IC card 2 and the route certificate 4 is written in the cache 34 provided to the mobile terminal 3. Further, the management section 33 restricts the write of the certificate 4 to the cache 34.

Description

Detailed Description of the Invention

[0001]

The present invention relates to a mobile terminal device, an information management system using the mobile terminal device, an information management method,
The present invention relates to a management program and a recording medium recording the management program.

[0002]

2. Description of the Related Art In recent years, electronic commerce and the like have become popular, and PKI (Public Key Infra)
A security system using a public key encryption technique called "structure" is used. A case where a mobile terminal device such as a mobile phone transmits and receives a message using this security system will be described. The mobile terminal device on the transmission side sends a transmission message by the secret key held by the user of the mobile terminal device, or
An electronic signature of the message is generated by encrypting the message digest of the transmitted message. Then, the mobile terminal device on the transmitting side attaches the electronic signature, the public key for decrypting the electronic signature, and the public key certificate to the message and transmits the message. Here, the public key certificate means that the authenticity of the public key is a certification authority (CA: Certificate).
(Certification Authority). The root certificate is a certificate that proves by itself that the public key of the certificate authority that issued the public key certificate is authentic without being certified by another certificate authority. The mobile terminal device on the receiving side confirms that the public key certificate is authentic by the root certificate, and confirms that the public key is authentic by the public key certificate confirmed to be authentic. Then, the mobile terminal device on the receiving side decrypts the electronic signature using the public key, and confirms the authenticity of the document by comparing it with the public key certificate or the message digest of the public key certificate.

Therefore, if the root certificate itself is rewritten, the public key certificate and public key cannot be trusted, and the security system using PKI cannot function normally. That is, rewriting the root certificate itself is a fatal problem for the security system. The problem of rewriting such information is not limited to the root certificate, and is also applicable to public key certificates and various other information handled by the mobile terminal device. In order to solve such a problem, conventionally, information such as a root certificate is pre-installed in an IC card and writing after that is prohibited, and only when the mobile terminal device uses the information such as the root certificate. , That I
The information was managed by accessing the C card and acquiring the information.

[0004]

However, in the above-described information management method, it is necessary to access the IC card each time the mobile terminal device uses information such as the root certificate. Since the access speed to the IC card (the speed for reading information) is limited due to the IC card interface, the access time to the IC card is generally long. For example, a contact type IC card interface has an access speed of about 9600 bps. Therefore, in the conventional information management method, a long access time is required every time the mobile terminal device uses the information, which deteriorates the performance of the mobile terminal device. In addition, for the user of the mobile terminal device, an IC is added to the mobile terminal device each time information is used.
Performing an operation to acquire information from the card was complicated. Therefore, it is conceivable to provide a cache with a short access time in the mobile terminal device and store information such as a root certificate in the cache to improve the performance of the mobile terminal device. However, the cache is made with an emphasis on performance improvement by increasing the access speed, and is not made with security in mind. Therefore, the cache may be easily accessed and the stored information may be rewritten, and the security of the cache is very low.

Therefore, the present invention has been made in view of the above points, and a mobile terminal device, an information management system, an information management method, a management program and a management program capable of simultaneously improving the performance and security of the mobile terminal device. An object of the present invention is to provide a recording medium on which is recorded.

[0006]

In order to achieve the above object, a portable terminal device according to the present invention has an acquisition unit for acquiring information from a storage device for preventing unauthorized alteration of stored information, and an acquisition thereof. It is characterized by comprising a storage unit in which the information acquired by the unit is written, and a management unit that restricts writing to the storage unit. According to the present invention as described above, the acquisition unit acquires the information stored in the recording device, and the information is
It is written in the storage unit included in the mobile terminal device. Since the information is stored in the storage unit included in the mobile terminal device in this manner, it is not necessary to access the storage device each time the mobile terminal device uses the information, and the performance of the mobile terminal device that uses the information is improved. Can be made. Further, writing to the storage unit is restricted by the management unit, and the information to be written to the storage unit is acquired from the storage device that prevents unauthorized alteration of the stored information. Therefore, the security of the mobile terminal device is improved, and it is possible to prevent unauthorized falsification of information. Thus, the mobile terminal device according to the present invention is
It is possible to improve the performance and security of the mobile terminal device at the same time.

Further, the management section can restrict writing to the storage section by controlling the authority to write to the storage section. According to this, writing to the storage unit can be easily regulated by controlling the writing authority. Further, it is preferable that the management unit restricts writing to the storage unit by permitting writing of information at a predetermined timing and prohibiting writing at a time other than the predetermined timing. According to this, writing is prohibited except at a predetermined timing, and the risk of rewriting the information written in the storage unit can be reduced,
The security of the mobile terminal device can be improved.

The predetermined timing is preferably a user operation performed by a user who uses the mobile terminal device. According to this, information can be written in the storage unit in accordance with a user operation. Therefore, the user feels that the information stored in the storage unit of the mobile terminal device is likely to be rewritten, for example, when the user has been away from the mobile terminal device for a long time or when the mobile terminal device is lost. Then, the information can be newly acquired from the storage device, written in the storage unit, and the information in the storage unit can be updated. Further, it is preferable that the predetermined timing is when the power is turned on. According to this, writing to the storage unit is performed when the power is turned on. Therefore, the information in the storage unit is surely updated when the power is turned on.

Further, it is preferable that the storage unit provided in the mobile terminal device is a cache. According to this, since the access speed to the cache is high, the performance of the mobile terminal device can be further improved. The information stored in the storage device is a public key certificate certifying that the public key used by the user of the mobile terminal device issued by the certificate authority is authentic, and the public key of the certificate authority is authentic. Is preferably a root certificate that certifies itself without being certified by another certification authority. According to this, the reliability of the root certificate, the public key certificate, and the public key can be improved, and the security system using the public key cryptography can function normally.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing the configuration of an information management system 1 according to this embodiment. As shown in FIG. 1, the information management system 1 according to the present embodiment is
It is composed of a C card 2 and a mobile terminal device 3. IC
The card 2 is a storage device that prevents unauthorized tampering of stored information, that is, a storage device that prevents unauthorized rewriting of stored information. As a method to prevent unauthorized tampering of information, use a storage method that can only read the information but cannot write it, or perform an authentication process to authenticate whether access to the information is permitted, and depending on the authentication result. And permitting writing of information, and erasing stored information in the case of unauthorized access.
The IC card 2 is a device with high tamper resistance. High tamper resistance means that it is resistant to electrical and mechanical attacks to break security. As the storage device, other than the IC card 2, a SAM built-in device having a tamper resistant security application module (SAM) built therein may be used. The shape of the storage device is not limited, and a storage device other than a smart card or a card type can be used. The IC card 2 is a UIM (Use
r Identity Module). The UIM is an IC card that stores user information of the mobile terminal device 3. According to the UIM, the mobile terminal device 3 to be used can be flexibly changed by replacing the card as necessary.

In this embodiment, the IC card 2 includes an interface 21, a CPU 22, a ROM 23, and an EE.
It is composed of a PROM 24 and a RAM 25. The interface 21 provides and acquires information with the mobile terminal device 3 under the control of the CPU 22. The interface 21 includes a contact type interface and a non-contact type interface. The contact interface is
The mobile terminal device 3 is connected to the mobile terminal device 3, and information is provided and acquired through electrical contact with the mobile terminal device 3. The non-contact type interface provides information via radio waves,
Is what you get.

The EEPROM 24 is a user information storage unit and stores user information. EEPROM24,
It is a non-volatile memory in which information can be retained even when power is not supplied and information can be electrically rewritten. The stored user information is information about the user, and includes, for example, subscriber information, a telephone number, a telephone directory, a public key certificate of a public key used by the user, a root certificate 4, and the like. Here, the root certificate 4 will be described. In the security system using the public key cryptography, the user of the mobile terminal device 3 registers his private key and the corresponding public key in advance in the certificate authority (hereinafter referred to as “CA1”), and the certificate authority CA
Ask 1 to issue a public key certificate that certifies that the user's public key is authentic. The public key certificate includes CA1 that is an issuer (Issuer) for authentication, a user who has the public key that is a subject to be certified (Subject), an expiration date, a public key, and a signature of the issuer CA1. . The format of the public key certificate is specified by ITU-T standard such as X.509. The public key certificate is encrypted with the issued CA1 private key.

The CA1 that issued the public key certificate asks a certificate authority higher than itself (hereinafter referred to as "CA2") to prove that the public key certificate issued to the user is authentic. Specifically, since the public key certificate has the information encrypted by the private key of CA1 issued as described above as the digital signature, the digital signature given to the public key certificate is decrypted. Public key (hereinafter "verification public key")
A certificate (hereinafter referred to as “verification public key certificate”) that certifies that the certificate is authentic is issued by a higher-level certificate authority CA2. The issuer (I
upper-level certificate authority CA2 that is a certificate), certificate authority CA1 that is a person to be certified (Subject), expiration date,
The verification public key and the signature of the issuer CA2 are included. Similarly, the certificate authority CA2 provides a higher-level certificate authority (hereinafter referred to as "CA3") with a verification public key certificate that proves that the verification public key certificate issued to CA1 is authentic. Get it published. Repeat this work,
Each certification authority forms a hierarchical structure by having a certification authority higher than itself certify that its public key is authentic.

However, the last certification authority that certifies the public key, that is, the highest certification authority in the hierarchical structure, does not receive the certification of the authenticity of its own public key from another certification authority. You need to prove yourself. In this way, a public key certificate that certifies that the public key is authentic without being certified by another certificate authority is called a root certificate 4. In the root certificate 4, the issuer (Issue
r) and the target person (Subject) are the same. However,
Issuing of the verification public key certificate of the certificate authority does not necessarily have to be performed by a higher-level certificate authority, but certificate authorities of the same level may issue and certify. Further, it is arbitrary how much the work of proving that the public key certificate is authentic is repeated. That is, the number of layers of the hierarchical structure of the certificate authority is arbitrary. For example, a public key certificate issued by the certificate authority CA1 may be used as the root certificate.

The user of the portable terminal device 3 on the sending side encrypts the message with his / her own private key, attaches the public key, the user's public key certificate, the verification public key certificate, and the root certificate, and sends the message. . The received mobile terminal device 3 repeats the operation of decrypting the verification public key certificate in order from the root certificate with the verification public key certificate issued by the higher-level certificate authority, and the public key certificate of the user. Make sure the calligraphy is authentic. Next, the public key is confirmed to be authentic by the public key certificate confirmed to be authentic. Then, the received digital signature is decrypted using the public key.

The ROM 23 is a non-rewritable program storage section, and stores various programs read and executed by the CPU 22. The programs stored in the ROM 23 include the authentication / encryption program 5 and the like. CP
U22 reads and executes the program stored in ROM23. The CPU 22 uses the authentication / encryption program 5
By executing, the authentication process and the encryption / decryption process are performed as follows. The CPU 22 stores the user information, which needs to be encrypted, in the EEPROM 24 after encrypting the user information. The CPU 22 receives the password (PIN: Per) when the mobile terminal device 3 requests the user information to be provided.
request input of the personal identity number). The CPU 22 collates the entered password with the set password. When the verification results match, the CPU 22 acquires the encrypted user information from the EEPROM 24 and decrypts it. And the CPU 22
Provides the decrypted information to the mobile terminal device 3 via the interface 21. The CPU 22 does not provide the information when the passwords do not match. RAM25
Is a temporary storage memory for data processing.

The portable terminal device 3 is a portable terminal device that acquires and uses the information stored in the IC card 2. The mobile terminal device 3 is, for example, a mobile phone or a personal digital assistant (PDA). The mobile terminal device 3 includes an input unit 31.
An interrupt controller 32, a management unit 33, a cache 34, an IC card interface 36, and an R
The OM 37, the RAM 38, the transmitting / receiving unit 39, and the display unit 4
It consists of 0 and. The management unit 33 also includes a processing unit 33a.
And ROM 33b. The input unit 31 is used by the user to input an instruction for operating the mobile terminal device 3, and includes, for example, keys such as a numeric keypad and a cross key, and switches. The IC card interface 36 is
It is an acquisition unit that acquires user information such as the root certificate 4 from the IC card 2 under the control of the processing unit 33a. The IC card interface 36 includes a contact type interface and a non-contact type interface. The contact type interface connects to the IC card 2 and
Information is provided and acquired through electrical contact with. The non-contact type interface provides and acquires information via radio waves or the like.

The cache 34 is a storage unit in which user information such as the root certificate 4 obtained from the IC card 2 by the processing unit 33a via the IC card interface 36 is written. Since the cache 34 is a storage unit placed in the CPU 35, the access speed to the cache 34 is faster than other storage means in the mobile terminal device 3. As the cache 34, for example, SRAM or the like is used. Upon receiving the interrupt, the interrupt controller 32 notifies the processing unit 33a that the interrupt has occurred. That is, the interrupt controller 32 provides the processing unit 33a with an event that is a factor of interrupt generation. In the present embodiment, the interrupt controller 32 includes the input unit 3
An interrupt generated by a user operation is input from 1.

The ROM 33b is a non-rewritable program storage unit, and stores the cache management program 6 read and executed by the processing unit 33a. The recording medium for recording the cache management program 6 is preferably a recording medium for preventing tampering of stored information,
It is more preferable that the recording medium has tamper resistance. The processing unit 33a controls each unit included in the mobile terminal device 3 and performs various processes. The processing unit 33a includes the CPU 3
5 is provided. The management unit 33 is realized by the processing unit 33a executing the cache management program 6 stored in the ROM 33b. The management unit 33 regulates writing to the cache 34. The management unit 33 also regulates reading of information stored in the cache 34. The management unit 33 has a right to write information such as the root certificate 4 in the cache 34 (hereinafter referred to as “write right”) and a right to read information such as the root certificate 4 stored in the cache 34 (hereinafter referred to as “read right”). That is, the writing and reading to the cache are restricted. The management unit 33 controls the write right and the read right by setting the write right and the read right in the processing unit 33a and canceling the setting.

The management unit 33 also permits writing of information to the cache 34 at a predetermined timing, and prohibits writing at times other than the predetermined timing. Specifically, the write right is set to the processing unit 33a at a predetermined timing, and then the set write right is released to prohibit writing (write protect). The management unit 33 also releases the write-protected state. For example, when the state before setting the write right is the write-protected state to the cache 34, the management unit 33 releases the write-protected state once and then sets the write right. Further, the management unit 33 may cancel the write protection state when the power is turned off.

Here, the predetermined timing can be set when the user operates or when the power is turned on. The user operation includes a dedicated operation in which the user requests writing to the cache 34 and an operation such as power-on that is not a dedicated operation in which writing is requested. The power may be turned on by a user operation or may be turned on remotely. As a dedicated operation for requesting writing to the cache 34, for example, a dedicated key for requesting writing to the cache is provided and the dedicated key is pressed, or a predetermined key is provided without providing the dedicated key. It is possible to set an operation such as pressing the keys in a predetermined order. In the present embodiment, the predetermined timing is set both when the power is turned on and when the user operates to request writing.

When a user operation such as a dedicated operation for requesting power-on or writing to the cache 34 is performed on the input unit 31, an interrupt generated by the user operation is input to the interrupt controller 32. Then, the interrupt controller 32 notifies the processing unit 33a that an interrupt has occurred. That is, the interrupt controller 32 provides a power ON event and a user operation event to the processing unit 33a. The processing unit 33a that received the notification
That is, the processing unit 33a receiving the power ON event or the user operation event reads the cache management program 6 from the ROM 33b, activates the interrupt handler, and realizes the management unit 33. An interrupt handler is a process (processing) that is created and activated as a new process when an interrupt occurs. The management unit 33 investigates the interrupt factor, and if the interrupt factor is a predetermined factor that permits writing of information to the cache 34, that is, a dedicated operation that requests power-on or writing to the cache 34, the interrupt factor is interrupted. The process is executed and the write right is set in the processing unit 33a.

Similarly, when the write-protection state is set to be released when the power is turned off, a user operation such as power-off is performed on the input section 31 or the power is turned off remotely. When turned off, an interrupt is input from the input unit 31 to the interrupt controller 32. Then, the interrupt controller 32 notifies the processing unit 33a that an interrupt has occurred. Upon receiving the notification, the processing unit 33a reads the cache management program 6 from the ROM 33b, activates the interrupt handler, and
To realize. Then, the management unit 33 releases the write protected state. In this way, the interrupt handler can be activated and the management unit 33 can be realized by the extension of the interrupt generated when the power is turned ON / OFF.

When the write right is set, the processing section 33a controls the IC card interface 36 so that the IC
User information such as the root certificate 4 and public key certificate is acquired from the IC card 2 via the card interface 36. The processing unit 33a writes the acquired root certificate 4, public key certificate, and the like in the cache 34. Management unit 33
After the writing by the processing unit 33a is finished, the setting of the write right is canceled and the writing to the cache 34 is prohibited.
In addition, the management unit 33, regarding the read right, the processing unit 33a.
Can always be set for.

The ROM 37 is a non-rewritable program storage section, which is read and executed by the processing section 33a.
An SL (Secure Sockets Layer) program 7 and the like are stored. SSL is a protocol that performs authentication and encryption of information when transmitting and receiving information on a network such as the Internet, and prevents impersonation, data theft, and falsification by an unauthorized third party. The SSL program 7 is a program that causes the processing unit 33a to execute SSL authentication processing and SSL encryption processing.
The processing unit 33a reads and executes the SSL program 7 to perform the SSL authentication process and the SSL encryption process. In the SSL authentication processing, for example, the server requests the mobile terminal device 3 to transmit the public key certificate, the root certificate, etc., and the mobile terminal device 3 transmits the user's public key certificate, the root certificate, etc. to the server. Then, the server can do so by collating the transmitted information. Further, the authentication process may be performed using the user ID and password of the mobile terminal device 3. In addition, the server transmits the public key certificate of the server to the mobile terminal device 3, so that the mobile terminal device 3
Users can authenticate the server and perform mutual authentication.

The SSL encryption process is performed as follows, for example. First, the mobile terminal device 3 and the server exchange information for generating a common key such as the type of encryption that can be used, and generate a common key for encrypting the information itself transmitted and received by the server. The server encrypts the generated common key with the public key of the user of the mobile terminal device 3,
Send to. The mobile terminal device 3 decrypts with the private key of itself and extracts the common key. After that, the mobile terminal device 3 transmits / receives information by encrypting a message or the like with the common key. R
The AM 38 is a temporary storage memory for data processing. The transmission / reception unit 39 transmits / receives information to / from another terminal device, a server, or the like via a network or the like according to the control of the processing unit 33a. The display unit 40 outputs information and the like under the control of the processing unit 33a, and is, for example, an LCD or the like.

Next, an information management method using the information management system will be described. FIG. 2 is a flowchart showing the procedure of the information management method. First, a user operation for turning on the power is performed on the input unit 31, and the power is turned on (S1).
01). The input unit 31 inputs an interrupt generated in the interrupt controller 32, and the interrupt controller 32
Notifies the processing unit 33a that an interrupt has occurred (S10).
2). That is, the interrupt controller provides the power-on event to the processing unit 33a. Upon receipt of the interrupt notification, the processing unit 33a reads the cache management program 6 from the ROM 33b and executes it to activate the interrupt handler and implement the management unit 33 (S103). Management department 3
3 investigates the interrupt factor (S104), recognizes that the interrupt factor is the power-on event, executes the interrupt process, and sets the write right to the processing unit 33a (S104).
105).

The processing unit 33a controls the IC card interface 36 to control the IC card interface 36.
The root certificate 4 and the public key certificate are acquired from the IC card 2 via the, and written in the cache 34 (S10).
6). After that, the management unit 33 releases the setting of the write right and prohibits writing to the cache 34 (S10).
7), the read right is set in the processing unit 33a (S10).
8). Then, the processing unit 33a reads the SSL from the ROM 37.
The program 7 is read, the root certificate and public key certificate are read from the cache 34, and SSL authentication processing is performed using the root certificate and public key certificate (S10).
9). After that, the processing unit 33a performs SSL encryption processing to send and receive information (S110). Finally, the input unit 3
1, the user operation to turn off the power is performed,
When the power is turned off (S111), the input unit 31 inputs the interrupt generated in the interrupt controller 32,
The interrupt controller 32 notifies the processing unit 33a that an interrupt has occurred. Then, the processing unit 33a has the ROM 33b.
The cache management program 6 is read from and executed, the interrupt handler is activated, and the management unit 33 is realized. The management unit 33 investigates the interrupt factor, recognizes that the interrupt factor is the power OFF event, executes the interrupt process, and releases the write-protected state (S11).
2).

Next, another information management method using the information management system will be described. FIG. 3 is a flowchart showing the procedure of another information management method. Here, the power is off
When the write operation is performed, the write protected state is not released and the write protected state is maintained. First, a user operation for requesting writing to the cache 34 is performed on the input unit 31 (S201). The input unit 31 inputs an interrupt generated in the interrupt controller 32,
The interrupt controller 32 notifies the processing unit 33a that an interrupt has occurred (S202). Upon receipt of the interrupt notification, the processing unit 33a reads the cache management program 6 from the ROM 33b and executes it to activate the interrupt handler and implement the management unit 33 (S203). Management department 3
3 investigates the interrupt factor (S204), recognizes that the interrupt factor is a user operation event requesting writing to the cache 34, executes interrupt processing, and releases the write prohibition to the cache 34, The write right is set in the processing unit 33a (S205).

The processing unit 33a controls the IC card interface 36 so that the IC card interface 36
The root certificate 4 and the public key certificate are acquired from the IC card 2 via the, and written in the cache 34 (S20
6). After that, the management unit 33 releases the setting of the write right and prohibits writing to the cache 34 (S20
7), the read right is set in the processing unit 33a (S20).
8). Then, the processing unit 33a reads the SSL from the ROM 37.
The program 7 is read, the root certificate and public key certificate are read from the cache 34, and the root certificate 4
And SSL certificate processing using the public key certificate (S
209). After that, the processing unit 33a performs SSL encryption processing to send and receive information (S210). Finally, a user operation for turning off the power source is performed on the input unit 31, and the power source is turned off (S211).

According to the information management system 1 and the information management method according to the present embodiment, the IC card interface 3
6 obtains the root certificate 4 and the public key certificate stored in the IC card 2, and the root certificate 4 and the public key certificate are written in the cache 34 provided in the mobile terminal device 3.
Since the root certificate 4 is stored in the cache 34 provided in the mobile terminal device 3, the mobile terminal device 3 stores the root certificate 4 in the cache 34.
It is not necessary to access the IC card 2 each time the mobile terminal device 3 uses the root certificate 4, etc.
The performance of can be improved. In particular, since the storage unit in which the root certificate 4 is written is a cache, the access speed can be further increased and the performance of the mobile terminal device 3 can be further improved.

Writing to the cache 34 is restricted by the management unit 33, and the root certificate 4 and the like are acquired from the IC card 2. Therefore, the security of the mobile terminal device 3 is improved, and the unauthorized falsification of information can be prevented. Therefore, the mobile terminal device 3 can simultaneously improve the performance and security of the mobile terminal device 3. or,
Since the information stored in the IC card 2 is the public key certificate or the root certificate, the root certificate 4 or the public key certificate,
The reliability of the public key can be improved, and the security system using the public key cryptography can function normally.

Further, the management unit 33 can easily regulate the writing of information to the cache 34 and the reading of information from the cache 34 by setting or canceling the write right or the read right. The management unit 33 also permits writing of the root certificate 4 and the like at a predetermined timing, and prohibits writing at times other than the predetermined timing. Therefore, writing is prohibited except at a predetermined timing, the risk of rewriting the information written in the cache 34 can be reduced, and the security of the mobile terminal device 3 can be improved.

Further, in the present embodiment, both the power-on time and the user operation requesting writing are set as the predetermined timing. Therefore, first, when the power is turned on, writing to the cache 34 is performed by the extension of the interrupt. Therefore, the information in the cache 34 is surely updated when the power is turned on. Also, the cache 34 can be written in response to a user operation. Therefore, when the user feels that the information stored in the cache 34 is likely to be rewritten, for example, when the user is away from the mobile terminal device 3 for a long time or when the mobile terminal device 3 is lost. In addition, it is possible to newly acquire the root certificate and the like from the IC card 2, write it in the cache 34, and update the information stored in the cache 34. Therefore, when the power is turned on, the information stored in the cache 34 can be surely updated, and the user who wants to update the information stored in the cache 34 frequently or the information can be updated at a desired timing. It is possible to meet the demand of the user who desires.

The present invention is not limited to the above embodiment, but various modifications can be made. An interrupt timer is provided to notify the interrupt controller 32 of time,
The information stored in the cache 34 may be updated periodically by setting the time or interval at which the interrupt handler is activated. In addition, the SSL program 7 is stored in the ROM 37.
Is stored, but is stored in the program that uses other root certificates and the like, and in the IC card 2, and the management unit 33
Under the regulation of (3), a program that uses other user information or the like stored in the cache 34 may be stored.

[0036]

As described above, according to the portable terminal device, the information management system, the information management method, the management program and the recording medium recording the management program of the present invention, it is possible to improve the performance and security of the portable terminal device. Can be realized at the same time.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of an information management system according to an embodiment of the present invention.

FIG. 2 is a flowchart showing a procedure of an information management method according to the embodiment of the present invention.

FIG. 3 is a flowchart showing a procedure of another information management method according to the embodiment of the present invention.

[Explanation of symbols]

1 Information management system 2 IC card 3 Mobile terminal devices 4 root certificate 5 Authentication / encryption program 6 Cache management program 7 SSL Program 21 Interface 22,35 CPU 23, 33b, 37 ROM 24 EEPROM 25,38 RAM 31 Input section 32 interrupt controller 33 Administration Department 33a processing unit 34 cache 36 IC card interface 39 Transmitter / receiver 40 Display

Front page continuation (51) Int.Cl. ⁷ identification code FI theme code (reference) G06K 19/073 H04M 1/727 5K027 H04B 7/26 11/00 302 5K067 H04L 9/08 H04L 9/00 675B 5K101 H04M 1 / 675 H04B 7/26 M 1/727 109S 11/00 302 H04L 9/00 601E H04Q 7/38 601B 675D G06K 19/00 P F Term (reference) 5B017 AA02 BA04 CA14 5B019 DB10 FA10 5B035 AA13 BB09 CA11 5B058 CA KA02 KA04 KA31 KA35 YA20 5J104 AA08 AA12 EA10 EA19 EA22 MA05 NA02 NA35 PA14 5K027 AA11 BB04 GG01 HH23 MM03 5K067 AA30 AA32 BB04 BB21 DD17 DD05 DD15DD05 DD05 DD15 DD15 DD17 DD12 DD17 DD15 DH15KK15 AK15 KK15K15K15K17K12

Claims (12)

[Claims] 1. An acquisition unit that acquires the information from a storage device that prevents unauthorized tampering of the stored information, a storage unit in which the information acquired by the acquisition unit is written, and a write in the storage unit. A mobile terminal device, comprising: a management unit that regulates. 2. The mobile terminal device according to claim 1, wherein the management unit regulates writing in the storage unit by controlling authority to write in the storage unit. 3. The mobile terminal device according to claim 1, wherein the management unit permits writing of the information at a predetermined timing and prohibits writing at a time other than the predetermined timing. . 4. The mobile terminal device according to claim 3, wherein the predetermined timing is a user operation performed by a user of the mobile terminal device. 5. The mobile terminal device according to claim 3, wherein the predetermined timing is when the power is turned on. 6. The mobile terminal device according to claim 1, wherein the storage unit is a cache. 7. The information stored in the storage device is a public key certificate issued by a certificate authority and certifying that the public key of the user of the mobile terminal device is authentic. 7. The mobile terminal device according to any one of 1 to 6. 8. The information stored in the storage device is a root certificate for certifying that the public key of the certificate authority that issues the public key certificate is authentic without being certified by another certificate authority. The mobile terminal device according to claim 1, wherein the mobile terminal device is provided. 9. An information management system comprising: a storage device that prevents unauthorized tampering of stored information; and a mobile terminal device that acquires information stored in the storage device, wherein the mobile terminal device comprises: It is characterized by comprising an acquisition unit for acquiring the information stored in the storage device, a storage unit in which the information acquired by the acquisition unit is written, and a management unit for restricting writing to the storage unit. Information management system. 10. An information management method using a mobile terminal device for acquiring the information from a storage device for preventing unauthorized tampering of stored information, comprising: storing the information in a storage unit of the mobile terminal device. A step of permitting writing at a predetermined timing; a step of obtaining the information from the storage device; a step of writing the obtained information in the storage portion; and a step of inhibiting writing to the storage portion. Information management method characterized by. 11. An acquisition unit that acquires the information from a storage device that prevents unauthorized alteration of the information stored in the mobile terminal device, a storage unit in which the information acquired by the acquisition unit is written, and the storage unit. A management program that functions as a management means that regulates writing to. 12. An acquisition unit that acquires the information from a storage device that prevents unauthorized tampering of the information stored in the mobile terminal device, a storage unit in which the information acquired by the acquisition unit is written, and the storage unit. A recording medium readable by a mobile terminal device, in which a management program for functioning as a management unit for restricting writing to a mobile terminal device is recorded.