JP2003219475A - Communication terminal and radio communication terminal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method of securing an IC card in order to prevent it from becoming detrimental, the IC card being a memory medium such as USIM cards used in communication terminals. <P>SOLUTION: When a USIM card securing means 104 issues a collation command three times in succession, using an unauthorized PIN value, a USIM card 100 turns to a block mode disabling access to the card. When the card securing means 104 further issues an UNBLOCK PIN command ten times in succession, the card 100 turns to a mode disabling a user to cancel the block mode. These operations cause the card 100 to turn to the block mode disabling the read/write in a file, i.e., a request of access to a PIN, thus preventing the USIM card 100 from being illegally used. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication terminal and a wireless communication terminal that perform communication using a storage medium such as an IC card.

[0002]

2. Description of the Related Art Global sys which is a radio communication system currently put to practical use in Europe, Asia, etc.
tem for mobile communicat
The mobile wireless phone used in Ion (hereinafter, referred to as GSM) is a Subscriber Identity.
It is essential to use a SIM card, which is a storage medium called a Module (hereinafter referred to as SIM) card. This SIM card includes an authentication algorithm necessary for communication with a base station, information about a telephone number which is identification information assigned to the mobile wireless telephone by the wireless communication system and which identifies the mobile wireless telephone. By inserting the SIM card into the mobile wireless telephone, the mobile wireless telephone is brought into a state capable of communicating with the base station of the wireless communication system, that is, making and receiving a call with the communication partner.

Further, GSM is a standard in which communication between a portable radio telephone and a base station cannot be performed in a state where a SIM card is not inserted. The SI including the authentication algorithm necessary for communication with the base station, the information about the telephone number, which is the identification information for identifying the mobile wireless telephone assigned to the mobile wireless telephone by the wireless communication system, and the like.
The method of using the M card is the International Mobile called the next-generation mobile wireless telephone.
Telecommunication system
2000 (hereinafter referred to as IMT-2000) has been taken over, and as a SIM card,
UNIVERSE Subscriber Ide
The standardization of an entity module (hereinafter, USIM) card is in progress.

This USIM card is used in addition to the authentication algorithm necessary for communication with the base station and the information about the telephone number which is the identification information for identifying this portable wireless telephone assigned to the portable wireless telephone by the wireless communication system.
When the card is mounted on the terminal, a so-called telephone directory data is stored, in which a telephone number used for making and receiving a call and a destination name corresponding to this telephone number are stored. Specifically, the USIM card has an MF (Master File) and a DF (Dedic) as shown in FIG.
arated file), ADF (Applicatio)
n Dedicated File), EF (Elem
Entry file) and various information is EF
Included in. Each EF is READ / UP as shown in FIG.
An access condition of ALW / PIN / ADN / NEV is set for four access methods of DATE / DEACTIVATE / ACTIVATE.

For example, the condition for reading EF1 is "ALW (A
1ways) ”, the mobile radio telephone can unconditionally read the data of EF1, and when the UPDATE condition is set to“ PIN ”,
When writing data to EF1, the portable radio telephone is I
Personal Identity for C card
Cation Number (hereinafter referred to as PIN)
Is issued to execute the authentication procedure and USIM for it
If the response from the card is authentication OK, it means that information can be written in EF1.

PIN is a password for the USIM card, and when this PIN authentication succeeds, READ / read to a file for which "PIN" is set in the access condition
READ / UPDATE / DEACTIVATE / ACTIVATE access methods are possible. Also, for example, the access condition of EF2 is
READ is "ADM", UPDATE is "NE".
V ”. In this case, READ of EF2 is specified by a specific person (Ad
It means that only "ministrator" is possible, and no UPDATE can be done (Never).

FIG. 8 shows the E existing in the EF of the USIM card.
The access condition of F_IMSI is shown. In this example, E
The access condition for READ of F_IMSI is "PIN"
In the case of UPDATE, the access condition is "ADM". Information related to the telephone number (included in EF_IMSI) that is identification information for identifying the mobile wireless phone, information related to the authentication algorithm necessary for communication with the system, and information related to the telephone directory that stores the telephone number of the communication partner. The access condition for READ / UPDATE is generally "PIN". Typically,
The input of "PIN" is often performed immediately after turning on the power of the mobile wireless telephone.

[0008] In order for the user to turn on the power of the mobile terminal and make the terminal callable, the USIM card is in a state where PIN authentication is unnecessary, or PIN authentication is performed by the user when PIN authentication is required. It is necessary in some cases to be OK. If the mobile wireless telephone is dropped, the terminal is often in a callable state. In such a state, the mobile wireless telephone may be illegally used by a malicious third party. So the SIM being inserted
As a method of stopping the incoming / outgoing call processing by the telephone number of the card or the USIM card, it is general to perform the processing of stopping the communication by the telephone number corresponding to the portable wireless telephone on the communication network side of the wireless communication system.

Further, as a method of prohibiting access to the telephone directory, short mail, and other user-operable functions included in the dropped portable radio telephone body, the portable radio telephone from the radio communication system side to the relevant portable radio telephone can be used. There has already been proposed a method of transmitting a control signal for locking a function that can be used by the mobile radio telephone and receiving the control signal, performing processing such as locking the corresponding function or erasing the corresponding information.

[0010]

However, in the above technique, the unauthorized use of the identification information of the mobile wireless telephone required for communication included in the USIM card is prohibited, or the unauthorized use of the function of the mobile wireless telephone is prohibited. It does not mean that the contents of the USIM card cannot be seen by a third party. For this reason, there is a problem that the information contained in the USIM card such as personal information such as a telephone directory contained in the USIM card remains unlawfully used by a third party.

Therefore, the present invention has been made to solve the above problems, and is a storage medium such as a USIM card used in a communication terminal such as a portable radio telephone.
An object of the present invention is to provide an IC card security method for preventing the disadvantage of a C card owner.

[0012]

In order to achieve the above object, the present invention according to claim 1 stores information necessary for communication and uses a removable IC card for communication with a communication system. In a communication terminal that performs communication, a detection unit that detects access prohibition information that prohibits access to an IC card from information acquired from a communication system, and an IC card authentication from the access prohibition information that this detection unit detects. Acquiring means for acquiring necessary authentication information, and issuing an authentication command for making an IC card using the authentication information acquired by this acquiring means, and the IC for the authentication command
Authentication command control means for receiving and analyzing the response from the card, and IC received by the authentication command control means
If the response from the card is judged as successful authentication, IC
It is characterized by comprising an IC card protection means for prohibiting access to the card.

Further, the present invention according to claim 5 is obtained through a wireless line in a wireless communication terminal which stores information necessary for communication and communicates with the communication system using a removable IC card. IC card block information selecting means for detecting information for blocking the IC card from the information, and IC card protecting means for prohibiting access to the IC card when the IC card block information selecting means selects IC card block information. It is characterized by having.

[0014]

BEST MODE FOR CARRYING OUT THE INVENTION The present embodiment will be described below with reference to the drawings. Mobile radio telephone 9 shown in FIG.
Reference numeral 9 is a portable wireless telephone that can be used in a wireless communication system using a USIM card. The wireless communication system includes, for example, IMT-2000, but is not limited to this, and any system that performs wireless communication with the system by using a card such as a USIM card that stores information necessary for communication may be used. .

The portable radio telephone 99 has a control unit 1000,
A hardware control unit (HWC) 105, a wireless unit 106,
It is composed of a memory 107. In addition, the control unit 100
0 is the USIM card block information detection means 101, the authentication information acquisition means 102, the authentication command control means 103,
It is composed of a USIM card protection means 104.
The control unit 1000 is a control unit that controls the software operation of the mobile wireless phone 99, and is mainly configured by a microprocessor. The HWC 105 is a mobile phone 9
9 is a control unit for controlling the hardware operation of 9. Radio section 1
Reference numeral 06 is provided with an antenna and the like, receives a radio signal from the radio communication system, and transmits a radio signal to the radio communication system.

Next, the protection processing operation of the USIM card by the portable radio telephone 99 will be described with reference to FIG. First, U
The SIM card block information detecting means 101 inserts the USIM card 1 from the information acquired by the portable wireless telephone 99 via the wireless unit 106 and the HWC 105.
The USIM card block information which is the information for prohibiting the access of 00 is detected (step 201). When the USIM card block information detecting unit 101 detects USIM card block information, the detected information is notified to the authentication information acquiring unit 102 (step 201).

The authentication information acquisition means 102 is a PIN (Persona) included in the USIM card block information.
l Identification Number) and sends the read PIN value to the authentication command control means 103 (step 202). The authentication command control means 103 needs the PIN verification received from the authentication information acquisition means 102 (PIN status is Enable.
e) or PIN verification is not necessary (PIN status is Disable
In step e), either of the following two processes is performed. The mobile terminal already holds information about whether PIN authentication is necessary.

When PIN verification is required (PIN status is E
authentication) to the USIM card 100 using the PIN value (specifically, VERIFY
PIN) is issued (step 203). If the PIN verification is unnecessary (PIN status is Disable), the value of the PIN is used to PI the USIM card 100.
Enable command (specifically ENABLE P
IN) is issued. This issued authentication command or P
Successful collation from USIM with respect to INEEnable command (for example, SW (Status Word) = 90)
00) response (step 204),
The authentication command control means 103 determines that the command issuance has succeeded (step 205).

As a result, the portable radio telephone 99 is able to obtain the USIM card block information notified via the radio section.
Judgment will be made by a valid user of the USIM card 100. After that, the portable radio telephone 99 is inserted into the USI
The process moves to protect the M card 100 from being illegally used. The USIM card protection means 104 issues various commands to the USIM card 100 so that the USIM card 100 is not illegally used. Here, it is assumed that the USIM card block information is transmitted to the mobile wireless telephone as follows, for example.

A legitimate user of the portable radio telephone and the USIM card inserted in the portable radio telephone exists in the wireless communication system in order to request the protection processing of the USIM card when the portable radio telephone is lost. USI
In the M card management center, for example, the phone number of the USIM card and the correct PI for using the USIM card
N (Personal Identification)
Register the value of Number). As a PIN registration method, various methods such as normal telephone registration, Internet registration, and mail registration can be considered. For example, the USIM card management center notifies the registered information to the location registration center existing in the wireless communication system,
The location registration center creates a USIM card block list consisting of the notified telephone number and the corresponding PIN value as shown in FIG. The location registration center refers to the USIM card block list every time the mobile wireless telephone is location-registered, and searches for a corresponding telephone number.

When the corresponding telephone number exists, the wireless communication system transmits the incoming call information (paging channel) to the portable wireless telephone corresponding to the telephone number.
After that, a control signal (for example, S
ACCH (SLOW ASSOCIATED CONT
ROL CHANNEL) etc.) and sets and sends USIM card block information. This USIM card block information is made up of an area for setting a "length of PIN value" and an area for setting a "PIN value" as shown in FIG. 4, for example.

Upon receiving this control signal, the USIM card block information selecting means 101 receives the US contained therein.
The IM card block information is taken out, and the USIM card protection means 104 sets the USIM card 100 so that it is not illegally used. The USIM card block information can be sent as a message to the mobile wireless telephone 99 as follows. For example, the USIM card management center that has received the registration of the loss of the mobile wireless phone notifies the message center of the wireless communication system of the registered telephone number and the correct PIN value of the USIM card. Create a USIM card block list consisting of the notified telephone number and the corresponding PIN value.

The message center obtains the information of the mobile radio telephones whose location is registered from the location registration center at any time, and refers to the USIM card block list every time the location registration information is obtained, and searches for a corresponding telephone number. To do. If the corresponding telephone number exists, "special character string" is set for the mobile wireless telephone with the telephone number.
A text message consisting of a text in which object and "PIN value" are set is sent as USIM card block information.

The portable radio telephone receiving this text message differs from an ordinary message when the "special character string" is set in the subject.
Recognize as M card block information. The USIM card block information selection unit 101 extracts the USIM card block information included in the text message, and the USIM card protection unit 104 issues a command to the USIM card 100 so that the USIM card 100 is not illegally used. In this way, USIM card block information is
It may be included in control information such as SACCH, or may be included in data communication such as special mail.

Next, the specific operation of the USIM card protection means 104 will be described. For example, USIM card 10
By issuing illegal PINs continuously for 0, PI
Transition N to the block state. Specifically, USI
When it is determined that the PIN value notified by the M card block information is correct, the USIM card protection means 104 continuously issues a verification command (specifically, a VERIFY PIN) using a value other than the correct PIN value.

The USIM card protection means 104 has an illegal P
Issuing the verification command three times in succession using the IN value
The USIM card 100 transits to the block state, which is a state where the card cannot be accessed. USIM in this state
The card protection unit 104 can stop issuing the command, and may continue issuing the unauthorized UNBLCOK PIN command. When the USIM card protection unit 104 continues to issue the UNBLCOK PIN command 10 times in succession, the USIM card 100 transits to a state in which the block state cannot be released by the user operation.
By these operations, USIM card 100 is block
It is possible to prevent the USIM card 100 from being illegally used by changing to the state, making it impossible to read / write a file having a PIN access condition.

As another example, it is possible to issue a command for deactivating a specific EF included in the USIM card. Specifically, US
When it is determined that the PIN value notified by the IM card block information is correct, the USIM card protection means 104
A command for deactivating a specific EF (specifically, DEACTIVATE FILE) is issued. This makes it impossible to read or write the deactivated EF.
In this embodiment, a file with a PIN access condition does not become readable and writable, but deactivated E
Since only F becomes unreadable / writable, it becomes impossible to read / write the target EF, and it is possible to prevent the USIM card 100 from being illegally used.

The specific E included in the USIM card
It is also possible to issue a write command to F in order to make the contents of EF meaningless. Specifically, P notified by USIM card block information
When it is determined that the value of IN is correct, the USIM card protection means 104 issues a write command (specifically UPDATE) to a specific EF and writes meaningless data. As a result, the EF written with meaningless data becomes meaningless even when read. By these operations, it is possible to prevent the USIM card 100 from being used illegally.

It is also possible to have the USIM card management center judge the validity of the notification of loss. In this case, the authentication command issued by the authentication command control unit 103 (specifically, VERIFY PIN) or PI
Enable command (specifically ENABLE P
It is not necessary to decide whether to perform the USIM card protection processing by the USIM card protection means 104 based on the content of the response to the issuance of (IN). As a method for determining the validity of the lost notification in the USIM card management center, for example, a password for determining the validity of the lost notification is registered in the USIM card management center at the same time as the purchase of the USIM card. When actually requesting USIM card protection processing, register the phone number and password in the USIM card management center, but if this registered password does not match the password already registered in the USIM card management center, USIM card management Center is U
Cancel SIM card protection processing request. If the password is correct, the USIM card management center accepts the USIM card protection processing request. Subsequent procedures for sending USIM card block information to the applicable mobile wireless phone and the US
The format of the IM card block information is the same as that of the above-mentioned embodiment.

The operation will be described with reference to FIG. USI
Mobile wireless phone 99 that received M card block information
Is selected by the USIM card block information selection means 101 (step 5).
01). When USIM Card Block Information is selected,
The information is notified to the USIM card protection means 104. The USIM card protection means 104 uses the notified US
Using the IM card block information, the process proceeds to USIM card protection processing (step 502).

USIM card block information selection means 10
1 is notified of USIM card block information, U
The SIM card protection means 104 uses the invalid PIN value to execute the verification command (specifically, the VERIFY PIN).
Is issued continuously. The illegal PIN may be a PIN arbitrarily selected by the USIM card protection means 101,
A value other than the PIN notified by the USIM card block information may be used. If the PIN value arbitrarily selected by the USIM card protection means 104 is correct, a response indicating successful verification (specifically, SW = 9000) is returned from the USIM card 100.
There is no problem if the value of PIN issued by 04 is changed. USI
If the M card protection means 104 issues a verification command three times consecutively using an incorrect PIN value, the USIM card 10
0 transits to the block state. In this state, the USIM card protection means 104 may stop issuing the command, or may continue issuing the unauthorized UNBLCOK PIN command. When the USIM card protection means 104 continues to issue the UNBLCOK PIN command 10 times in succession, the USIM card 100 is operated by the user.
The state transits to a state where the lock state cannot be released. By these operations, the USIM card 100 transits to the block state, it becomes impossible to read and write the file having the PIN access condition, and it is possible to prevent the USIM card 100 from being used illegally.

It is also possible to issue a command for deactivating a specific EF included in the USIM card. Specifically, when the USIM card block information selecting unit 101 notifies the USIM card block information, the USIM card protecting unit 104 causes the specific E
Command to deactivate F (specifically DEAC
(TIVATE FILE) is issued. This makes it impossible to read or write the deactivated EF. In this case, the file having the PIN access condition is not readable / writable, but only the inactivated EF is readable / writable. These operations make it impossible to read and write the target EF and prevent the USIM card 100 from being used illegally.

In addition, a specific E included in the USIM card
It is also possible to issue a write command to F in order to make the contents of EF meaningless. Specifically, USIM card block information selection means 101
When you receive USIM card block information from
The IM card protection unit 104 issues a write command (specifically UPDATE) to a specific EF to write meaningless data. As a result, the EF written with meaningless data becomes meaningless even when read. These operations can prevent unauthorized use of the USIM card 100.

In the above-described embodiment, the portable radio telephone is described as an example, but the present invention is not limited to the portable radio telephone. The present invention can be applied to any communication terminal that performs communication using an IC card that stores information such as a USIM card. Further, the communication terminal is not limited to a terminal capable of making a call, and for example, a PDA (Personal Data Assistant) having a data communication card or a communication function can be used.
ts), and the present invention can be applied to these as well.

[0035]

As described above, according to the present invention, it is determined whether the IC card provided in the communication terminal and capable of being illegally used is a remote operation by a legitimate user, If it is determined that the remote operation is performed by a legitimate user, the legitimate IC card user can be protected from illegal use of the IC card.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a mobile wireless phone according to an embodiment of the present invention.

FIG. 2 is a sequence diagram showing an operation of the mobile wireless phone according to the embodiment of the present invention.

FIG. 3 is a USIM card block list consisting of telephone numbers and corresponding PIN values according to an embodiment of the present invention.

FIG. 4 shows a SACCH (SL according to an embodiment of the present invention.
OW ASSOCIATED CONTROL CHAN
NEL) and the like) showing USIM card block information.

FIG. 5 is a sequence diagram showing an operation of the mobile wireless phone according to the embodiment of the present invention.

FIG. 6 is a block diagram showing the configuration of a USIM card according to an embodiment of the present invention.

FIG. 7 is a table showing access conditions of each EF.

FIG. 8 EF_IMS present in EF of USIM card
The table which shows the access conditions of I.

[Explanation of symbols]

99 ... Portable wireless phone 100 ... USIM Card 1000 ... Control unit 101 ... USIM card block information detecting means 102 ... Authentication information acquisition means 103 ... Authentication command control means 103 104 ... USIM card protection measures 105 ... Hardware control means (HWC) 106 ... Wireless unit

Claims (8)

[Claims] 1. A communication terminal that stores information necessary for communication and communicates with a communication system using a removable IC card, prohibits access to the IC card from information acquired from the communication system. I is selected from detection means for detecting access prohibition information and access prohibition information detected by this detection means.
Acquiring means for acquiring the authentication information necessary for authenticating the C card, and issuing an authentication command for making an IC card by using the authentication information acquired by the acquiring means, and receiving the response from the IC card to the authentication command. An authentication command control means for analyzing and an IC card protection means for prohibiting access to the IC card when the response from the IC card received by the authentication command control means is judged to be successful in authentication. Communication terminal. 2. The IC card protection means uses the authentication information different from the authentication information acquired by the authentication information acquisition means to transit to a state in which the authentication command control means is prohibited from accessing the IC card. The communication terminal according to claim 1, characterized in that the authentication command is continuously issued until it is executed. 3. The communication terminal according to claim 1, wherein the IC card protection unit causes the authentication command control unit to issue a command for deactivating a specific file included in the IC card. 4. The communication terminal according to claim 1, wherein the IC card protection unit causes the authentication command control unit to issue a command for rewriting the content of a specific file included in the IC card. 5. A wireless communication terminal which stores information necessary for communication and which communicates with a communication system using a removable IC card, includes information for blocking the IC card from information acquired through a wireless line. Radio communication characterized by comprising IC card block information selecting means for detecting, and IC card protecting means for prohibiting access to the IC card when the IC card block information is selected by this IC card block information selecting means. Terminal. 6. The IC card protection means uses the arbitrary authentication information to cause the authentication command control means to continuously issue an authentication command until a transition to a state in which access to the IC card is prohibited is made. The wireless communication terminal according to claim 5. 7. The wireless communication terminal according to claim 5, wherein the IC card protection unit causes the authentication command control unit to issue a command for deactivating a specific file included in the IC card. 8. The wireless communication terminal according to claim 5, wherein the IC card protection unit causes the authentication command control unit to issue a command for rewriting the content of a specific file included in the IC card.