JP2003250183A - Ic card, terminal, communication terminal, communication station, communication apparatus and communication control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To surely evade the unauthorized use and leakage of the information of a user identification code or the like stored in an IC card even in the case that the IC card of a user detachably mounted on a portable telephone set or the like is passed into the hands of a malicious third person by being lost or stolen. <P>SOLUTION: A terminal identification code for identifying the portable telephone set is stored in the terminal identification information storage means of the IC card. A permission decision means compares the terminal identification code inputted from the portable telephone set with the terminal identification code stored in the terminal identification information storage means. The permission decision means decides whether to permit or inhibit the output of the user identification code or the like requested by the portable telephone set to the portable telephone set on the basis of the compared result. In the case that the portable telephone set is owned by the malicious third person, since the terminal identification codes are different, the user identification code of the like is not outputted and the unauthorized use and the leakage are evaded. <P>COPYRIGHT: (C)2003,JPO

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to an IC card in which information for identifying a user is stored, a terminal to which the IC card is detachably mounted, a communication terminal, a communication station, and a communication station communicate with each other. The present invention relates to a communication device and a communication control method.

[0002]

2. Description of the Related Art UIM (User
CPU (Central Processing) called Identity Module)
An IC (Integrated Circuit) card with a built-in unit is used. UIM has upward compatibility with an IC card with a built-in CPU called SIM (Subscriber Identity Module). SIM is a globally popular GSM (Global
System for Mobile Communications) mobile phone
Used in (Mobile Subscriber). SIM and UIM
Usually, it is detachably attached to a mobile phone terminal (Mobile Equipment).

User identification information, telephone numbers, etc. are stored in SIM
And memorized in UIM. This is because different terminals use the same telephone number, or different carriers' SIMs and UIMs are used on the same terminal.

When the terminal is equipped with SIM or UIM, the mobile phone operates as a mobile station in the mobile communication network. For example, if the user removes the SIM or UIM from the terminal they have been using until then, and attaches the removed SIM or UIM to the terminal to be used next, it will be the same as that used on the previous terminal on the next terminal. You can communicate by phone number.

If the terminal is not equipped with SIM or UIM, the mobile phone cannot communicate except in the case of an emergency call. This is because the communication fee is charged to the user whose identification information is stored in SIM or UIM. By removing the SIM or UIM from the mobile phone terminal, the terminal and billing target become independent, so if you change the SIM or UIM attached to the terminal for each charging carrier, you can use the same terminal for different carriers. It can also be used.

[0006] The communication fee is charged based on the information stored in the SIM and UIM.
It is expected to be widely used in electronic commerce, and in this case, payment in electronic commerce etc.
Will be performed based on the information stored in. By storing transaction details and personal information in the UIM, it is possible to provide services according to the taste of the user.

Due to the function provided by the IC card such as UIM, the mobile phone will be used not only as a means for communication and communication but also as an interface in various applications such as commercial transactions and identification.

As described above, the usage patterns of mobile phones are diversifying, but mobile phones and PDAs (Personal Data Assistance)
The problem when managing user identification information, billing information, personal information, etc. on a mobile terminal such as ants) is the loss or theft of the mobile terminal.

The portable terminal is downsized on the assumption that it is carried by the user, and the use place is often not limited, so that the risk of loss or theft is not small. If the user's identification information, billing information, personal information, etc. are managed by the mobile terminal, the mobile terminal may be lost or stolen, and the mobile terminal may be misused or leaked to a malicious third party. There is a risk of doing it. If the usage patterns of mobile terminals are diversified, the damage to users due to unauthorized use will also be diversified, and the damage may be greater than ever.

As a technique for avoiding such damage to the user, Japanese Patent Laid-Open No. 2001-168980 discloses, for example, when the mobile communication terminal receives a prohibition signal from the base station, the mobile communication terminal uses a credit card. The technology for prohibiting access to the memory for storing the card information is described.

Even if the mobile phone is taken by a malicious third party due to loss or theft, if the IC card is attached to the terminal, access to the IC card is prohibited by using such a technique. This makes it possible to avoid unauthorized use of various information stored in the IC card.

[0012] However, if the IC card is removed from the original terminal or if only the IC card is lost or stolen, the terminal to which the IC card is attached cannot be specified, so access to the IC card is prohibited. I can't.

If there are terminals available to the user in a plurality of places, only the IC card needs to be carried between those places, so that only the IC card of the terminal and the IC card can be lost or stolen. There is a risk that it will happen. The IC card that is detachably attached to the mobile terminal is a plug-in type SI
Like M and UIM, the size is often about the size of a stamp, and the risk of loss is not small.

Therefore, in the technique disclosed in Japanese Patent Laid-Open No. 2000-308140, the mobile radio communication device body is attached to the terminal and the body identification code for identifying the owner stored in the terminal body. Read from the existing IC card
Based on the card identification code for identifying the owner of the IC card, it is determined whether or not to permit communication.

In this technique, for example, if an IC card different from the one mounted at the time of the previous communication is mounted on the main body of the mobile radio communication device, the identification codes do not match and communication is prohibited. . If a malicious third party obtains an IC card, a new card that has not existed before will be installed in the mobile wireless communication device itself, so communication will not be permitted and the IC card will not be used illegally. To be prevented.

[0016]

[Patent Document 1] Japanese Unexamined Patent Application Publication No.
As described in Japanese Patent Publication No. 000-308140,
When the terminal compares the identification codes, there is a possibility that the information to be protected may be collected by analyzing the circuits and signals in the other terminals in which the IC card is mounted.

Further, if the terminal stores an identification code or the like, if the terminal is taken over by a malicious third party, the information may be collected by analyzing the terminal. Furthermore, when IC cards of different carriers are installed in one terminal, if the user's identification information differs for each carrier, the identification code of each IC card will be stored in the terminal, so malicious When the terminal is passed to a third party, all of this information is compromised at once.

The present invention has been made in view of the above problems in the prior art, and one of a terminal and an IC card detachably attached to the terminal is in the hands of a malicious third party. Even if it happens, IC cards, terminals, communication terminals, communication stations, communication stations that can prevent unauthorized use or leakage of user identification information, billing information, personal information etc. stored in IC cards communicate An object is to provide a communication device and a communication control method.

[0019]

The present invention employs the following means in order to achieve the above object.

For example, in an IC card which is detachably attached to a mobile communication terminal such as a mobile phone and other terminals and which inputs and outputs information to and from the terminal, the terminal identification information storage means identifies the terminal. The terminal identification information is stored. The permission determination means compares the terminal identification information input from the attached terminal with the terminal identification information stored in the terminal identification information storage means. Then, the permission determining means determines, based on the comparison result, whether to permit or prohibit outputting the request information requested by the terminal to the mounted terminal.

For example, the permission determining means permits the output of the request information when the terminal identification information of the attached terminal and the terminal identification information stored in the terminal identification information storage means match,
When the terminal identification information is different, the output of the request information is prohibited.

Even if a malicious third party obtains only the IC card, the combination of the terminal and the IC card is different in that case. Since the comparison result determines whether to permit or prohibit the output of the requested information, a malicious third party cannot illegally use the information stored in the IC card by using another terminal. Also, even if another terminal with an IC card attached is analyzed, the request information is not output to that terminal.
Nor can they be retrieved from the terminal. Further, since it is not necessary to store the information about the IC card in the terminal, even if the terminal on which the IC card is mounted gets into the hands of a malicious third party, there is very little possibility that the information will be collected from the terminal. . Moreover, if the IC card is sealed in order to expose the circuit of the IC card in an attempt to analyze the IC card itself, the circuit itself is destroyed. Therefore, it is extremely unlikely that the information stored in the IC card will be collected by the analysis of the IC card. Further, even when IC cards of different carriers are installed in one terminal, the terminal identification information is stored in the IC card,
Even if the terminal gets into the hands of a malicious third party, there is no danger that this information will be compromised at once.

In addition to the terminal identification information, this IC card may be provided with an authentication information storage means for storing authentication information indicating that the request for the request information is valid. The authentication information is
For example, it is a password that a (valid) user keeps secret from others. Information such as biometrics may be used as the authentication information.

The permission determining means compares the authentication information input from the attached terminal with the authentication information stored in the authentication information storage means when the terminal identification information is different. Then, the permission determination means prohibits the output of the request information only when the authentication information also differs. When the authentication information matches, output of the request information is permitted.

When the user uses a terminal other than the one in which the IC card is combined, the user may input the authentication information into the IC card via the terminal. Since the comparison and storage of the authentication information is performed by the IC card, the authentication information is surely protected.

Further, the terminal identification information storage means of the IC card stores the terminal identification information of the terminal for which the output of the request information was previously permitted by the permission determination means, for example.

In this case, the IC card may be provided with the terminal identification information updating means. The terminal identification information updating unit automatically updates the terminal identification information stored in the terminal identification information storage unit to the terminal identification information of the attached terminal when the authentication information matches.

Therefore, even if the terminal subsequently requests information,
At that time, the user does not need to input the authentication information. By this, the terminal identification information stored in the terminal identification information storage means is updated to the terminal identification information of the terminal different from that before, but to restore the original, the IC card is attached to the original terminal. Then, the authentication information may be matched.

In the IC card, the permission determining means determines whether or not to permit the output of the charging usage information, at least when the request information is the charging usage information used for charging. The billing usage information is, for example, user identification information for identifying a billing target, for example, user identification information. If the charge usage information is not output from the IC card to the terminal, at least the victim can be prevented from suffering financial damage.

The authentication information storage means may store not only authentication information but also transaction authentication information used for authentication in electronic commerce.

When the terminal identification information is different, the permission determining means does not immediately permit the output of the request information even when the authentication information matches. When the authentication information matches, the permission determining means compares the transaction authentication information input from the attached terminal with the transaction authentication information stored in the authentication information storage means. Then, the permission determination means permits the output of the charging usage information if the transaction authentication information also matches.

If the user identification information or the like is illegally used in electronic commerce, the damage to the user is particularly likely to be serious. However, by performing the authentication using the transaction authentication information, such damage can be caused. It can be suppressed more reliably.

Further, the IC card may be provided with an encryption means. The encryption unit encrypts the request information output to the attached terminal when the permission determining unit permits the attached terminal to output the request information.

In this case, even if the output of the request information is permitted, the plaintext request information is not output from the IC card to the terminal. Therefore, even if the request information is collected outside the IC card, the collected request is collected. The risk of unauthorized use and leakage of information can be suppressed.

Further, only the predetermined terminal identification information may be stored in the terminal identification information storage means of the IC card. In this case, the terminal identification information storage means may store only one terminal identification information, or may store a plurality of terminal identification information.

Further, when such an IC card is mounted,
In a preferable communication terminal that communicates through an electric communication line, the terminal identification information of the self terminal is stored in the self terminal identification information storage means. The communication permission determining means is attached with the terminal identification information of the own terminal stored in the own terminal identification information storage means.
It is output to the C card, and it is determined whether the communication using the request information is permitted or prohibited according to the determination by the permission determination means of the attached IC card with respect to the terminal identification information of the own terminal.

The communication using the request information includes not only the communication of the user identification information itself, but also the communication of the user identification information, such as communication in a service in which the user identified by the user identification information is charged. And the communication of relevant information.

If the request information is not output from the IC card, communication using the request information cannot be performed, but this communication terminal double-protects the request information by deciding whether to permit or prohibit the communication itself. .

Further, various terminals to which the IC card as described above is detachably mounted may be provided with the authentication information changing means. The authentication information changing means is used to change the stored contents of the authentication information storage means. The contents to be changed include normally used authentication information and transaction authentication information. The authentication information changing means may be provided in the IC card itself.

Further, a communication terminal used for communication with a communication device via an electric communication line, and a device detachably attached to the communication terminal for inputting / outputting information to / from the communication terminal.
In the communication station including the C card, the output encryption unit is included in the IC card and is used to encrypt the user identification information for identifying the user output to the communication terminal. The terminal identification information storage means provided in the communication terminal stores terminal identification information for identifying the terminal for the communication terminal. The encrypted combination information generation means outputs at least the user identification information of the combination information representing the combination of the terminal identification information of the communication terminal and the user identification information stored in the own terminal identification information storage means, and is encrypted by the output encryption means. The encrypted combination information is generated. The communication permission determining means receives, from the communication device to which the encrypted combination information is transmitted by the communication terminal, proof information that proves that the combination information restored from the encrypted combination information represents a valid combination. Only in this case, decide whether to permit or prohibit the communication using the user identification information.

In this communication station, the user identification information is output from the IC card to the communication terminal, but the user identification information is encrypted. Therefore, even if the user identification information output from the IC card is collected by a malicious third party, the risk of leakage of the user identification information is reduced. In addition, whether or not the combination information is valid is compared by the communication device, and if the communication terminal is proved to be valid, the communication terminal is permitted to communicate using the user identification information. Some third party cannot illegally use the user identification information.

In this communication station, the encrypted combination information generating means is provided, for example, in the communication terminal, and the terminal identification information of the communication terminal stored in the own terminal information storing means and the encryption output from the IC card to the communication terminal. The encrypted combination information is generated using the generated user identification information.

The encrypted combination information generating means is an IC
It may be provided on the card. In this case, the encrypted combination information generating means encrypts using the terminal identification information of the communication terminal input to the IC card from the communication terminal and the user identification information encrypted by the output user identification information encryption means. Generate combination information.

The output encryption means includes a user identification information storage means for storing user identification information and a user identification information encryption for encrypting the user identification information stored in the user identification information storage means. And a conversion means.

The output encryption means generates the encryption combination information by using the public key corresponding to the secret key used by the communication device for decryption, for example.

Here, the certification information is, for example, that the combination information is certified by the network connection device for connecting the mobile communication terminal to the mobile communication network. Further, the proof information may be proof that the combination information is valid by an electronic commerce server that manages electronic commerce.

In a preferable communication device that communicates with a communication station via a telecommunication line as described above, the combination storage means stores a combination of user identification information and terminal identification information. The combination information restoring means restores the combination information from the encrypted combination information transmitted by the communication station. The certification information generation means is a combination of the user identification information and the terminal identification information represented by the combination information restored by the combination information restoration means among the combinations of the user identification information and the terminal identification information stored in the combination storage means. If there is a combination that matches with, proof information that proves that the combination information represents a valid combination is generated.

Further, in a communication station equipped with an IC card as described above and a communication terminal to which the IC card is attached, in order to control the communication performed using the communication terminal, the IC card is used to control the communication. The stored terminal identification information is compared with the terminal identification information of the communication terminal input to the IC card from the communication terminal. Then, based on the comparison result of the terminal identification information, the IC card determines whether to permit or prohibit output of the request information to the communication terminal.
Then, only when the request information is output from the IC card to the communication terminal, the communication using the request information is performed by the communication terminal.

In another communication station, in order to control the communication performed using the communication terminal, the user identification information for identifying the user output from the IC card to the communication terminal is encrypted. Using the user information and the terminal identification information of the communication terminal stored in the communication terminal, at least the user identification information of the combination information representing the combination of the user identification information and the terminal identification information of the communication terminal is encrypted. Generated encrypted combination information is generated. The encrypted combination information is transmitted to the communication device using the communication terminal via the telecommunication line. Then, communication using the user identification information is performed only when the communication terminal receives the certification information from the communication device.

[0050]

DETAILED DESCRIPTION OF THE INVENTION Embodiments of the present invention will be described below with reference to the accompanying drawings. In the following embodiments, the present invention is provided as a mobile communication system or a device constituting a communication system including the mobile communication system or a part thereof.

The mobile communication system is a system for a mobile phone to make a call or perform data communication with another mobile phone or the like. The mobile communication system includes a mobile phone serving as a mobile station, a base station system device, an exchange, and the like.

FIG. 2 schematically shows the relationship between the mobile phone, the base station system device, and the exchange.

As shown in FIG. 2, the base station system device 100 includes a radio base station device 101 installed in a base station and a base station control device 102 installed in a mobile switching center. The mobile phone 103 is wirelessly connected to the wireless base station device 101. The wireless base station device 101 is a base station control device 102.
Controlled by. The base station control device 102 is used not only for connection control of incoming and outgoing calls and channel switching control between base stations, but also for operation management of each connected radio base station device 101. The base station control device 102 is connected to the backbone network by an exchange 104 installed in a mobile exchange. The backbone network is constructed by an ATM (Asynchronous Transfer Mode) network that connects scattered exchanges 104 and gateway exchanges. The mobile communication network of the mobile communication system is provided by these devices and the backbone network.

When the mobile phone 103 makes a call to communicate with another communication device, it sends a call request to the exchange 104 via the radio base station apparatus 101 and the base station control apparatus 102. When the exchange 104 confirms that the call origination request is made by the authorized regular user, it makes a line setting request to the gateway exchange. The gateway exchange receives the request from the exchange 104, and receives the request from the exchange 104.
A telecommunications line for connecting the mobile phone 03 with other mobile phones is set up in the mobile communication network. The mobile phone 103 communicates with another mobile phone or the like through the set telecommunication line.

The call origination request includes a user identification code for identifying the user. The exchange 104 confirms based on this user identification code whether or not the user is an authorized user. Further, the exchange 104 associates billing information required for billing such as line connection time with the user identification code,
Send to billing center. As a result, when communication is performed using the mobile phone, the user identified by the confirmed user identification code is charged.

In this embodiment, the mobile phone 103
Acquires a user identification code from the IC card when transmitting a call request.

FIG. 3 schematically shows the hardware configuration of the mobile phone.

As shown in FIG. 3, the mobile phone 103 is
The mobile communication terminal 105 and the IC card 106 detachably attached to the mobile communication terminal 105 are provided.

In the mobile communication terminal 105, the key input unit 1051 is, for example, a numeric key, a power key, or various function keys provided on the surface of the housing of the mobile communication terminal 105.
The user uses the key input unit 1051 to turn on / off the power, input numbers and characters, and move the cursor.

A liquid crystal display can be used for the display unit 1052. On the display unit 1052, numbers and characters input from the key input unit 1051 and the mobile communication terminal 10 are displayed.
A setting screen for performing the operation setting 5 is displayed.

The memory unit 1053 includes, for example, a RAM and a flash memory. The RAM is used as a work area of the CPU. The flash memory is used to hold a terminal identification code for identifying a terminal unique to the mobile communication terminal 105, information indicating the operation setting of the mobile communication terminal 105, and the like.

The voice input / output unit 1054 is a microphone or a speaker. The voice input / output unit 1054 is used by the user to make a call and play a ring tone.

The communication unit 1055 is a radio circuit such as an antenna and a modulation circuit for performing radio communication with the base station.

The interface unit 1056 is used for the mobile communication terminal 105 and the IC card 106 to input / output information.

The control unit 1057 includes, for example, a CPU and a DS.
P is included. The control unit 1057 controls the entire mobile communication terminal 105 by performing input / output with the above-mentioned units. The control unit 1057 is used not only for voice processing such as voice encoding and decoding, but also for executing applications.

In the IC card 106, the nonvolatile memory unit 1061 has a flash memory and an EEPR.
An OM or other electrically rewritable nonvolatile memory is used. The non-volatile memory unit 1061 stores other information such as a user identification code, a telephone directory registered by the user, a call history, and necessary applications.

The interface unit 1062 is, for example, an IC
A contact pin of a predetermined type is provided on the surface of the card 106. This contact pin is used for the mobile communication terminal 10
5, the interface unit 1062 of the IC card 106 and the interface unit 1056 of the mobile communication terminal 105 are detachably connected.

The control unit 1063 has the interface unit 10
62 and the non-volatile memory unit 1061 input / output control, encryption processing and encryption / decryption processing, OS and OS
Run the application that runs on it. A CPU is used for the control unit 1063. A coprocessor is also typically provided for cryptographic processing.

In this mobile phone 103, as shown by the broken line in FIG.
I removed IC card 106 from I
It is also possible to mount the C card 106 on another mobile communication terminal 105. Application Example 1 In this application example 1, the present invention is applied to the mobile communication terminal 105, the IC card 106, or the mobile phone 10.
Applies to 3. <IC Card> In this application example 1, the IC card 106 to which the present invention is applied is the user identification code stored in the non-volatile memory unit 1061 for the mobile communication terminal 105 to send the call request to the exchange 104. Even if you request
If the request is not valid, the user identification code is not output.

For example, by causing the control unit 1063 of the IC card 106 to execute a control program for performing this control, the above IC card 106 functions as an IC card to which the present invention is applied.

In this case, as shown in FIG. 1, the control unit 1063 of the IC card 106 operates as the permission determination unit 1, and the non-volatile memory unit 1061 (partial area thereof) serves as the terminal identification information storage unit 2. Used.

The terminal identification information storage means 2 stores a terminal identification code. The terminal identification code is, for example, the same terminal identification code as that of the mobile communication terminal 105 of the user who has offered to the telecommunications carrier, which is registered in advance by the telecommunications carrier. When the user uses a plurality of mobile communication terminals 105,
A plurality of terminal identification codes may be stored in the terminal identification information storage means 2.

The permission determining means 1 has a comparing means 3 and a determining means 4. The comparison unit 3 compares the terminal identification code input from the mounted mobile communication terminal 105 via the interface unit 1062 with the terminal identification code stored in the terminal identification information storage unit 2. When a plurality of terminal identification codes are stored in the terminal identification information storage means 2,
The comparison means 3 compares all the stored terminal identification codes with the input terminal identification code.

The deciding means 4 permits or prohibits outputting the user identification code required by the mounted mobile communication terminal 105 to the mounted mobile communication terminal 105 based on the comparison result by the comparing means 3. Decide

Here, FIG. 4 is a flow chart for explaining a communication control method by the mobile phone equipped with this IC card.

As shown in FIG. 4, when the command requesting the user identification code is received from the mobile communication terminal 105 (S401), the comparison means 3 compares the terminal identification codes (S402). The command includes the mobile communication terminal 105
The memory unit 1053 includes the terminal identification code stored therein, and the comparison unit 3 acquires this terminal identification code from the command. Further, the comparison means 3 reads the terminal identification code from the terminal identification information storage means 2. Comparison means 3
Compares the terminal identification code input from the mobile communication terminal 105 with the terminal identification code read from the terminal identification storage means 2 and outputs the comparison result to the determination means 4.

When the terminal identification code input from the mobile communication terminal 105 matches any one of the terminal identification codes read from the terminal identification information storage means 2, the determination means 4
Determines to permit the user identification code stored in the non-volatile memory unit 1061 to be output to the mounted mobile communication terminal 105. In this case, the mobile communication terminal 10
In response to the command from 5, response data including the user identification code is created (S403).

When the terminal identification code input from the mobile communication terminal 105 is different from any of the terminal identification codes read out from the terminal identification information storage means 2, the determination means 4 stores in the nonvolatile memory section 1061. It is determined that the stored user identification code is prohibited from being output to the mounted mobile communication terminal 105. In this case, response data representing an error is created for the command from the mobile communication terminal 105 (S404).

The response data created in step S403 or S404 is transmitted from the IC card 106 to the mobile communication terminal 105 through the interface section 1062.

Thus, in this IC card 106,
When the terminal identification codes are different, the user identification code is not output to mobile communication terminal 105. IC card 106
If it is lost or stolen and is taken by a malicious third party different from the original user, the third party will use an IC card on a terminal different from the mobile communication terminal 105 used by the user. 106 will be attached. Therefore, IC card 1
The user identification code stored in 06 is not output to the mobile communication terminal of a malicious third party.

In this case, since the mobile communication terminal cannot obtain the user identification code, it cannot make a call request using the user identification code. As a result, it is possible to prevent unauthorized use of the IC card (user identification code thereof). Further, even if another terminal on which the IC card is mounted is analyzed, the request information is not output to that terminal, and therefore it is not possible to collect them from the terminal. Furthermore, since it is not necessary to store information about the IC card in the terminal, I
Even if the terminal on which the C card is mounted is taken by a malicious third party, there is very little risk that information will be collected from the terminal. Moreover, if the IC card is sealed in order to expose the circuit of the IC card in an attempt to analyze the IC card itself, the circuit itself is destroyed. Therefore, IC
It is extremely unlikely that the information stored in the IC card will be collected by the card analysis. Furthermore, even when IC cards of different carriers are installed in one terminal,
Since the terminal identification information is stored in the IC card, even if the terminal is handed over to a malicious third party, there is no danger that these pieces of information will be exposed at once.

If personal information such as communication history, telephone directory, and transaction details of electronic commerce is stored in the nonvolatile memory unit 1061 of the IC card 106, if this personal information is leaked, the user May suffer financial and psychological damage. Therefore, even when the mobile communication terminal 105 requests personal information or the like from the IC card 106, the permission determining means 1 outputs the request information requested by the mobile communication terminal 105 to the IC card 106, similarly to the user identification code. It may be determined whether to permit or prohibit output to the mobile communication terminal 105.

Further, the IC card 106 may be provided with the encryption means 5 as shown in FIG. This encryption means 5 is, for example, by the permission determination means 1 the mobile communication terminal 10
The user identification code permitted to be output to 5 is encrypted. In this case, the mobile communication terminal 105 has the encryption means 5
Response data including the user identification code encrypted by is transmitted. Of course, the encryption means 5 may encrypt not only the user identification code but also other information output to the mobile communication terminal 105.

By thus outputting the encrypted user identification code from the IC card to the mobile communication terminal, it is possible that a malicious third party may extract the plaintext user identification code from the mobile communication terminal. It can be further suppressed.

<Mobile Communication Terminal> The mobile communication terminal 105 is
By causing the control unit 1057 to execute a control program corresponding to the control of the IC card 106 described above, the control unit 1057 functions as the mobile communication terminal 105 to which the present invention is applied.

In this case, in the mobile communication terminal 105, FIG.
As shown in, the control unit 1057 operates as the communication permission determining unit 6, and the memory unit 1053 (a partial area thereof) is used as the own terminal identification information storage unit 7.

The own terminal identification information storage means 7 stores a terminal identification code unique to this mobile communication terminal 105. The communication permission determining means 6 outputs the terminal identification code of its own terminal to the mounted IC card 106, and uses the user identification code according to the determination by the permission determining means 1 of the IC card 106 for the terminal identification code of its own terminal. Decide whether to allow or prohibit making outgoing calls.

FIG. 7 is a flow chart for explaining the relationship between the operation of the mobile communication terminal and the IC card.

As shown in FIG. 7, the mobile communication terminal 105
When making a call origination request to the exchange 104, reads out the terminal identification code of the own terminal from the own terminal identification information storage means 7, and creates a command including the terminal identification code and requesting the user identification code (S701). .

The mobile communication terminal 105 sends the created command to the IC card 1 via the interface unit 1056.
It is transmitted to 06 (S702). When the IC card 106 receives the command, the steps S401 to S4 already described.
In accordance with 05, the IC card 106 to the mobile communication terminal 105
Response data for the command is transmitted to.

When the mobile communication terminal 105 receives the response data from the IC card 106 (S703), the communication permission determining means 6 determines whether the response data contains the user identification code or represents an error. (S70
4).

If the communication permission determining means 6 determines that the response data includes the user identification code, it determines to permit the communication (S705). In this case, a call origination request is generated using the user identification code included in the response data, and the mobile communication terminal 103 transmits the call origination request to the exchange 104 via the wireless base station 101. On the other hand, when it is determined that the response data represents an error, the communication permission determining unit 6 determines to prohibit the communication (S7).
06). The mobile communication terminal 105 displays a message to the effect that the terminal identification codes are different on the display unit 1052 as necessary, but does not send the call origination request.

In the application example 1, the present invention is applied to the mobile communication terminal, but the present invention can also be applied to a PDA to which an IC card is detachably mounted, other terminals, and the like. This terminal includes not only a communication terminal that performs communication but also a terminal that does not perform communication by itself. Even if the terminal does not communicate, the request information is displayed on the display unit, so that the request information may be leaked. (Modification 1 of Application Example 1) In Application Example 1, when the mobile communication terminal 105 in which the terminal identification code is not registered in advance in the terminal identification information storage means 2 is mounted, the mobile communication terminal 10 is installed.
No. 5 could not acquire the usage identification code.

However, even when the user purchases a new terminal, the I
The C card 106 may be attached. In this case, it is inconvenient for the user to request the telecommunications carrier to register the terminal identification code of the new mobile communication terminal in the terminal identification information storage means 2.

Therefore, as shown in FIG. 8, the IC card 1
The non-volatile memory unit 1061 of 06 is used not only as the terminal identification information storage unit 2 but also as the authentication information storage unit 8.

The authentication information storage means 8 stores an authentication code. The authentication code is, apart from the terminal identification code, password or biometric information indicating that the request for user identification information is valid.

When the terminal identification codes are different, the permission determining means 1 compares the authentication code input from the mounted mobile communication terminal 105 with the authentication code stored in the authentication information storage means 8, and the authentication code. Also, the output of the user identification code is prohibited only when there is a difference.

FIG. 9 is a flow chart for explaining the relationship between the operations of the mobile communication terminal and the IC card when using the authentication code.

When the terminal identification codes match, the steps S403 and S405 as described above are performed. In this example, when the terminal identification codes are different, the permission determining means 1 immediately determines the user identification code. Do not prohibit output. For example, when the terminal identification codes are different, the comparison means 3
Does not output the comparison result to the determination means 4, and the mobile communication terminal 10
5 is notified that the terminal identification codes are different.

Upon receiving this notification, the mobile communication terminal 105 displays a screen requesting the password stored in the memory unit 1053 on the display unit 1052 as shown in FIG. 9 (S901).

When the user inputs the password using the key input unit 1051, the mobile communication terminal 105
The input of the password is accepted (S902), an authentication request command including the accepted password is created and transmitted to the IC card 106 (S903).

When the IC card 106 receives the authentication request command (S904), the comparison means 3 acquires the password from the authentication request command. Further, the comparison means 3 reads the password from the authentication information storage means 8, compares the read password with the password input from the mobile communication terminal 105 and the password read from the authentication information storage means 8 (S905), and compares The result is output to the determination means 4.

When the comparison result shows that the passwords are also different, the determining means 4 makes a determination to prohibit outputting the user identification code to the mobile communication terminal 105. In this case, response data representing an error is created (S40
4). Therefore, a third party who does not know the password cannot acquire the user identification code from the IC card 106.

On the other hand, when the comparison result shows that the passwords match each other, the determining means 4 determines to allow the user identification code to be output to the mobile communication terminal 105. In this case, similar to the above-mentioned IC card, response data including the user identification code is created (S403).

The created response data is sent to the mobile communication terminal 1
05 (S405), and the step S70 already described.
3 to S706, it is determined whether the mobile communication terminal 105 permits or prohibits communication.

Thus, if the IC card is provided with the authentication information storage means 8, even when the user purchases a new mobile communication terminal, the user identification stored in the IC card by the new mobile communication terminal is identified. Code is available.

[0107] In this example, the password is required to be input when the outgoing call is requested next time. Therefore, as shown in FIG. 10, the control unit 1 of the IC card 106
It is preferable to operate 063 as the terminal identification information updating means 9.

When the comparison result indicating that the passwords match each other is input from the permission determining means 1, the terminal identification information updating means 9 stores it in the terminal identification information storage means 2 as in step S906 shown by a broken line in FIG. The created terminal identification code is updated to the terminal identification code input from the mobile communication terminal 105.

In this case, in the terminal identification information storage means 2,
The permission determining means 1 stores the terminal identification code of the terminal for which the output of the user identification code was previously permitted.

Thus, when the user identification code is requested next time, the terminal identification code will match, so that the password entry is not required.

In addition, the malicious third party may use the mobile phone 103.
When not only making a telephone call using a user but also conducting an electronic commerce by illegally using a user identification code of another person, the damage to the user may be further serious. Therefore, at least when the request information is the billing usage information used for billing such as the user identification code, it is preferable that the permission determining unit 1 decides whether to permit or prohibit the output of the billing usage information. . If the output of the billing usage information is controlled, at least the financial damage to the user can be suppressed.

Then, not only the normal authentication code but also the transaction authentication information used for the authentication in the electronic commerce is stored in the authentication information storage means 8, and the authentication using this is also performed.

In this case, if the terminal identification code is different and the authentication code is also different, the same procedure S40 as described above is performed.
4, S405 is performed, but even when the authentication codes match, the permission determining means 1 does not immediately determine to permit the output of the user identification code. Even if the authentication codes match, for example, the comparison unit 3 does not output the comparison result to the determination unit 4 and notifies the mobile communication terminal 105 that the authentication codes match. The procedure after the mobile communication terminal 105 receives this notification is the procedure in which the authentication code in FIG. 9 is replaced with the transaction authentication code.

That is, when the mobile communication terminal 105 receives the notification, it displays on the display unit 1052 a screen requesting the password for electronic commerce stored in the memory unit 1053, for example.

Then, the user inputs the key input section 1051.
When a password for electronic commerce is input using, the mobile communication terminal 105 accepts the input of the password, generates an authentication request command including the password for electronic commerce, and sends it to the IC card 106.

When the IC card 106 receives the authentication request command, the comparison means 3 acquires the password for electronic commerce from the authentication request command. Further, the comparison means 3 is
The password for electronic commerce is read from the authentication information storage means 8, the password for electronic commerce input from the mobile communication terminal 105 is compared with the password for electronic commerce read from the authentication information storage means 8, and the comparison result is determined. Output to the means 4.

When the comparison result indicates that the passwords for electronic commerce are different, the determining means 4 prohibits outputting the user identification code to the mobile communication terminal 105 even if the ordinary passwords match. Make a decision. In this case, response data representing an error is created. For this reason,
Even if they know the password, if they do not know the password for electronic commerce, a third party cannot perform electronic commerce using the user identification code.

On the other hand, when the comparison result indicates that the passwords for electronic commerce match, the determining means 4 determines to permit the user identification code to be output to the mobile communication terminal 105. In this case, the IC card 10 described above
Similar to 6, response data including the user identification code is created.

The created response data is sent to the mobile communication terminal 1
05, the mobile communication terminal 105 determines whether to permit or prohibit the communication.

Thus, if not only the normal authentication code but also the transaction authentication code is stored in the authentication information storage means 8, a malicious third party can illegally use the user's identification code to carry out electronic commerce. By doing so, it is possible to further reduce the possibility of financial damage to the user. (Modification 2 of application example 1) When using the authentication code or the transaction authentication code as described above, if the same code is always used, those authentication codes can be identified by a malicious third party. The nature is enhanced. Therefore, for example, the control unit 1057 of the mobile communication terminal 105 may be caused to execute a program, and the control unit 1057 may operate as the authentication information changing unit 10 as shown in FIG.

The authentication information changing means 10 performs control for changing the stored contents such as the authentication code and the transaction authentication code stored in the authentication information storage means 8 in accordance with the user's instruction.

When changing the password, the user gives an instruction to that effect using the key input unit 1051, and the authentication information changing means 10 inputs the previous password which has been used so far, as shown in FIG. Display the screen asking for 1
It is displayed on 052 (S1201). When the user inputs the previous password and the authentication information changing unit 10 accepts it (S1202), the authentication information changing unit 10 generates a verification request command requesting verification of the accepted previous password. This verification request command is sent to the mobile communication terminal 10
5 to the IC card 106 (S1203).

When the IC card 106 receives the verification request command from the mobile communication terminal 105 (S1204), the comparison means 3 obtains the previous password from the verification request command and compares it with the password stored in the authentication information storage means 8. Yes (S1205). Regardless of whether the comparison result indicates a match or a difference, response data including this comparison result is created for each collation request command (S1206, S1207), and from the IC card 106. Response data is transmitted to the mobile communication terminal 105 (S1208).

When the mobile communication terminal 105 receives this response data (S1209), the authentication information changing means 10 acquires the comparison result from the response data (S1210). If the comparison results are different, the password changing process ends.

When the comparison result indicates that the results match, the authentication information changing means 10 displays a screen for inputting a new password on the display unit 1052 (S121).
1). When the user inputs a new password using the key input unit 1051 and the authentication information changing unit 10 accepts the new password (S1212), a change request command requesting that the received new password be updated with the previous password is generated. It The change request command includes the previous password and the new password and is transmitted to the IC card 106 (S
1213).

Upon receipt of this change request command (S1214), the IC card 106 acquires the previous password and the new password from the change request command. Comparison means 3
Compares the acquired previous password with the password stored in the authentication information storage means 8 (S1215). When the comparison result indicates that they match, the IC card 106
Is the authentication information storage means 8 based on the acquired new password.
The previous password stored in is updated (S1216).

The password is changed by such a procedure, for example. As a result, the risk that the authentication code or the transaction authentication code is specified is suppressed, and as a result, the information such as the user identification code is prevented from being illegally used or leaked. As in this example, each time communication is performed, if the authentication code and the transaction authentication code before the change are compared with those stored in the authentication information storage means, those changes are performed more safely.

Further, in this example, the control unit 1057 of the mobile communication terminal 105 is operated as the authentication information changing unit 10. However, by operating the control unit 1063 of the IC card 106 as the authentication information changing unit, for example, the IC card The authentication information changing unit may be provided in 106. In this case, the mobile communication terminal 105 is simply used as an input unit or a display unit of the IC card 106, and the authentication code and the transaction authentication code are changed according to the control of the authentication information changing unit of the IC card 106. . Further, for example, the IC card 106 itself may be provided with an input unit for inputting an authentication code or a transaction authentication code and a display unit for displaying various messages. If the IC card 106 is provided with an input unit and a display unit, it is of course unnecessary to send and receive request commands and response data. Further, it is not necessary to compare the authentication code before the change and the transaction authentication code with each communication. (Modification 3 of Application Example 1) In Modification 1, if the authentication codes match, the terminal identification code stored in the terminal identification information storage unit 2 is input from the mobile communication terminal 105 by the terminal identification information updating unit 9. The terminal identification code was updated. In this case, the authentication code is required to update the terminal identification code, but by using the mobile communication terminal 5 in which the terminal identification code is stored in the terminal identification information storage means 2, it is possible to safely update the terminal identification code. It is also possible to do this.

In this case, the control unit 10 of the IC card 106
When the terminal identification code input from the mobile communication terminal 105 is different from the terminal identification code stored in the terminal identification information storage means 63, the terminal identification code 63 receives the terminal identification code input from the mobile communication terminal 105. Remember.

In the terminal identification information storage means 2, for example, up to two terminal identification codes are stored, but the permission determination means 1
While the two terminal identification codes are stored in the terminal identification information storage unit 2, the mobile communication terminal 10 stores the user identification code.
No decision is made to allow output to 5.

Further, the control unit 1063 of the IC card 106
If the terminal identification code input by the mobile communication terminal 105 matches the terminal identification code stored in the terminal identification information storage means 2 while the two terminal identification codes are stored in the terminal identification information storage means 2. , The matching terminal identification code is deleted from the terminal identification information storage means 2.

For example, the user has a new mobile communication terminal 105.
When changing the terminal to be used because the user has purchased, the user first needs to change the IC card 1 from the existing mobile communication terminal 105.
Remove 06. In this state, only one terminal identification code is stored in the terminal identification information storage means 2.

Next, the user inserts the removed IC card into the new mobile communication terminal 105 and instructs the mobile communication terminal 105 to change the terminal. The control unit 1057 of the mobile communication terminal 105 generates a verification request command for requesting verification of the terminal identification code of the new mobile communication terminal 105 according to the instruction of the user, and sends it to the IC card 106.

When the IC card 106 receives this collation request command, the comparison means 3 compares the terminal identification code input from the new mobile communication terminal with the terminal identification code stored in the terminal identification information storage means 2.

Whether the user installs the IC card 106 on the new mobile communication terminal 105 or the malicious third party installs the IC card 106 on the mobile communication terminal 105 of the third party, the comparison result Means that the terminal identification codes are different.

When the comparison result shows that the terminal identification code is different, the control unit 1063 of the IC card 106 is input from the new mobile communication terminal 105 (different from the one stored in the terminal identification information storage means 2). The terminal identification code is stored in the terminal identification information storage means 2.

As a result, the two terminal identification codes are stored in the terminal identification information storage means 2. When the two terminal identification codes are stored in the terminal identification information storage unit 2, the control unit 1063 of the IC card 106 creates response data indicating an error, and the created response data is used as the mobile communication terminal 105.
Send to.

When the mobile communication terminal 105 receives this response data, the mobile communication terminal 105 displays a message to the effect that the terminal identification codes are different on the display section 1052.

Next, the user removes the IC card 106 from the new mobile communication terminal 105, and removes the removed IC.
Mobile communication terminal 10 that has used the card 106 so far
Attach to 5. When the user gives an instruction to delete the terminal identification code to the conventional mobile communication terminal 105,
The control unit 1057 of the mobile communication terminal 105 generates an erase request including the terminal identification code of its own terminal, and transmits the generated erase request to the IC card 106.

When the IC card 106 receives the erasing request, the comparing means 3 obtains the terminal identification code from the erasing request, and the obtained terminal identifying code and the two terminal identifying codes stored in the terminal identifying information storing means 2. Compare with. When the comparison result of the comparison unit 3 indicates that the acquired terminal identification code and the terminal identification code stored in the terminal identification information storage unit 2 match, the control unit 1063 sets the matching terminal identification code to the terminal identification information. It is deleted from the storage means 2.

If the IC card 106 is installed in the mobile communication terminal 105 that has been used up to now, the terminal identification codes match, so the matching terminal identification code is deleted, and the terminal identification information storage means 2 stores Only the terminal identification code of the new mobile communication terminal 105 will be stored.

Control unit 1063 creates response data indicating that erasing is completed, and transmits the response data to mobile communication terminal 105. When mobile communication terminal 105 receives this response data, control unit 1057 causes display unit 1052 to display a message notifying that the terminal identification code has been updated (or that the deletion of the terminal identification code has been completed).

After that, the user is notified of the new mobile communication terminal 10
5, the IC card 106 can be used. To restore the usable mobile communication terminal 105, the user may replace the new mobile communication terminal 105 with the existing mobile communication terminal 105. Further, in the state where the new mobile communication terminal 105 and the terminal identification code of the mobile communication terminal 105 so far are stored in the terminal identification information storage means 2, the IC card 106 is used in the mobile communication terminal 105 so far.
New mobile communication terminal 10
In step 5, the terminal identification code may be erased.

On the other hand, when the comparison result of the comparison means 3 indicates that the obtained terminal identification code and the terminal identification code stored in the terminal identification information storage means 2 are different, the control unit 1063 determines that the terminal identification code is different. The terminal identification code stored in the information storage means 2 is not erased. The control unit 1063 creates response data indicating an error and transmits the response data to the mobile communication terminal 105. When mobile communication terminal 105 receives this response data, control unit 1057 displays a message informing that an error has occurred in updating the terminal identification code.

If only the IC card 106 is taken by a malicious third party due to loss or theft, the IC card 10
6 is a mobile communication terminal 10 of a third party different from that of the user
It will be attached to 5. In this case, neither of the two terminal identification codes stored in the terminal identification information storage means 2 is erased, or only the terminal identification code of the mobile communication terminal 105 of a third party is erased. Therefore, the third party
The card 106 cannot be illegally used and the terminal identification code cannot be updated.

It should be noted that the updating of the terminal identification code does not necessarily require the authentication code, but can be combined with the authentication code. For example, when the user gives an instruction to delete the terminal identification code, the user is requested to enter the authentication code. Then, when the input authentication code matches the one stored in the authentication information storage means 8 and the terminal identification code also matches, the control unit 1063 sets the terminal identification code stored in the terminal identification information storage means 2 to the same. to erase. Application Example 2 In Application Example 1, the IC card 106 controls the output of the user identification code, so that the unauthorized use or leakage of the user identification code is suppressed. In this case, even if the circuit or signal in the mobile communication terminal 105 is analyzed, the user identification code is not output to the mobile communication terminal 105, so the user identification code is the mobile communication terminal 1
It is extremely unlikely that a malicious third party will collect it by the analysis of 05. Further, even if an attempt is made to analyze the IC card 106, if the IC card 106 is unsealed, the circuit itself of the IC card 106 will be destroyed, so the risk of collecting the user identification code from there is extremely small.

If the user identification code is encrypted and is not decrypted in the mobile communication terminal 105 for comparison or the like, the plaintext user identification code is collected from the mobile communication terminal 105. Possibility is suppressed. Further, in order to confirm that the call origination request is made by the authorized regular user, the plaintext user identification code may be obtained by the exchange 104, for example.

Therefore, in the application example 2, the output encryption means 1 is provided in the IC card 106 which constitutes the mobile phone 103.
1 is provided. The output encryption unit 11 encrypts the user identification code output to the mobile communication terminal 105. In order to realize this output encryption means 11, for example, FIG.
As shown in, the control unit 1063 of the IC card 106
User identification information encryption means 12 according to the control program
To work as. The non-volatile memory unit 1061 (partial area) of the IC card 106 is used as the user identification information storage unit 13.

The user identification information storage means 13 stores a plaintext user identification code. Also, the user identification information encryption means 12 encrypts the user identification code stored in the user identification information storage means 13. For this encryption, a public key corresponding to the private key used by the exchange 104, which the mobile communication terminal 105 sends the call request to decrypt, can be used.

The encrypted user identification code obtained by encrypting the user identification code is output to the mobile communication terminal 105 via the interface section 1062.

The memory unit 1053 (partial area) of the mobile communication terminal 105 constituting the mobile phone 103 is used as the own terminal identification information storage means 14. The own terminal identification information storage means 14 is also the own terminal identification information storage means 7.
Similarly, the terminal identification code unique to the mobile communication terminal 105 is stored.

Further, the control unit 10 of the mobile communication terminal 105
57 operates as the encrypted combination information generating means 15 and the communication permission determining means 16.

The encrypted combination information generating means 15 generates encrypted combination information. This encrypted combination information is stored in the own terminal identification information storage means 14 and the mobile communication terminal 10 is stored.
At least the user identification code of the combination information indicating the combination of the terminal identification code No. 5 and the user identification code is the information encrypted by the output encryption unit 11.

Here, the encrypted combination information generating means 15
Generates an encrypted combination information by combining the encrypted user identification code input from the IC card 106 and the terminal identification code of the own terminal stored in the own terminal identification information storage means 14.

The communication permission determining means 16 is the mobile communication terminal 1
Only when the mobile communication terminal 105 receives response data certifying that the combination information restored from the encrypted combination information represents a valid combination from the exchange to which the encrypted combination information is transmitted by 05. Permits making a call request using the identification code.

Further, the exchange 104 corresponding to the above-mentioned portable telephone 103 is provided with a combination storage means 17, as shown in FIG. FIG. 15 shows the stored contents of the combination storage means. As shown in FIG. 15, the combination storage means 17 stores, for example, a combination of a user identification code of a user who has a contract with a telecommunications carrier and a terminal identification code used by the user. .

The combination information restoring means 18 is the mobile phone 1
The combination information is restored from the encrypted combination information transmitted to the exchange 104 by 03. When the encrypted combination information is configured by combining the encrypted user identification code and the plaintext terminal identification code, the combination information restoration means 18 uses the above-mentioned secret key to convert the encrypted user identification code. Decrypt and restore the user identification code. As a result, the combination information indicating the combination of the user identification code and the terminal identification code is restored.

The certification information generating means 19 includes the user identification code represented by the combination information restored by the combination information restoring means 18 among the combinations of the user identification code and the terminal identification code stored in the combination storing means 17. When there is a combination that matches the combination with the terminal identification code, data that proves that the combination information represents a valid combination is generated.

FIG. 16 is a flow chart for explaining a communication control method by a portable telephone which communicates with such an exchange.

When the user gives an instruction to make a call using the key input unit 1051, the control unit 1057 of the mobile communication terminal 105.
Generates a command requesting the user identification code from the IC card 106 and sends it to the IC card 106. When the IC card 106 receives this command, the user identification information encryption means 12 reads the user identification code from the user identification information storage means 13 and encrypts the user identification code. When the encrypted user identification code is generated by the output encryption means 11 (S1601), the IC card 10
6 creates response data including the encrypted user identification code, and transmits the created response data to the mobile communication terminal 105.

When the mobile communication terminal 105 receives the response data, the encrypted combination information generating means 15 acquires the encrypted user identification code from the response data. In addition, the encrypted combination information generating means 15 has its own terminal identification information storing means 14
The terminal identification code of its own terminal is read from and the read terminal identification code and the encrypted user identification code are combined to generate encrypted combination information (S1602). When the encrypted combination information is generated, the mobile communication terminal 105 creates an authentication request including the generated encrypted combination information, and transmits the authentication request to the wireless base station device 101 using the communication unit 1055 (S1603). ). The transmission request is issued by the wireless base station device 1
It is transferred to the exchange 104 via 01.

When the exchange 104 receives the authentication request from the mobile communication terminal 105 (S1604), the combination information restoring means 18 of the exchange 104 acquires the encrypted combination information from the authentication request and uses the encrypted combination information for encryption. The combination information is restored by decoding the person identification code (S1605).

When the combination information is restored, the proof information generation means 19 stores in the combination storage means 17 a combination that matches the combination of the user identification code and the terminal identification code represented by the restored combination information. It is determined whether or not (S1606).

If it is determined that there is a matching combination,
The proof information generation means 19 creates response data certifying that the combination information represents a valid combination (S160).
7).

On the other hand, if it is determined that there is no matching combination, the certification information generating means 19 creates response data indicating that the combination information does not represent a valid combination (S1608).

The response data created in step S1607 or S1608 is transmitted from the exchange 104 to the mobile communication terminal 105 via the radio base station.

When the mobile communication terminal 105 receives the response data to the call origination request (S1610), the communication permission determining means 16 determines whether or not the response data proves that the combination information represents a valid combination (step S1610). S161
1).

When it is determined that the response data proves that the combination information represents a valid combination, the communication permission determining means 16 uses the user identification code for which the authentication request has been made for communication. Allow making outgoing requests.
When the mobile communication terminal 105 makes a call request to the wireless base station, an electric communication line to another mobile phone or the like is set and communication is started (S1612).

If it is determined that the response data does not prove that the combination information represents a valid combination, the communication permission determining means 16 prohibits making a call request,
The display unit 1052 displays the prohibition (S161).
3).

In this example, the mobile phone has been described as the communication station, but the communication station is not limited to this. PHS (Pers
The present invention can also be applied to other communication stations such as an onal handyphone system).

Further, when the IC card 106 receives the command, the user identification information encryption means 12 of the output encryption means 11 encrypts the user identification code stored in the user identification information storage means 13. , But is not limited to this. For example, the output encryption unit 11 may encrypt the user identification code when the user identification code is stored in the non-volatile memory unit 1061. In this case, the nonvolatile memory unit 1061 stores the encrypted user identification code. Then, when the IC card 106 receives the command, the output encryption unit 11 stores the user identification code encrypted in advance in the non-volatile memory unit 106.
It will be read from 1. In this way, by storing the user identification code encrypted in advance in the non-volatile memory unit 1061, the non-volatile memory unit 106 should be stored.
Even if 1 is analyzed, the risk that a plaintext user identification code is collected can be suppressed.

Further, in this example, the control unit 1057 of the mobile communication terminal 105 operates as the encrypted combination information generating means 15, but it is not limited to this. IC
The control unit 1063 of the card 106 may be operated as the encrypted combination information generating means 15. In this case, when the user instructs to make a call, the mobile communication terminal 105
Reads the terminal identification code of the own terminal from the own terminal identification information storage means 14 and transmits a command including the read terminal identification code to the IC card 106. IC card 1
When 06 receives this command from the mobile communication terminal 105, the encrypted combination information generating means 15 of the IC card 106.
Acquires the terminal identification code from the received command. The encrypted combination information generation means 15 generates encrypted combination information using this terminal identification code and the encrypted user identification code generated by the output encryption means 11. The IC card 106 transmits the response data including the encrypted combination information to the mobile communication terminal 105. When the mobile communication terminal 105 receives the response data from the IC card 106, the mobile communication terminal 105 acquires the encrypted combination information from the response data, and transmits an authentication request including the encrypted combination information to the wireless base station.

As described above, the encrypted combination information generating means 1
5 is not the mobile communication terminal 105 but the IC card 106
You may be prepared for. (Modification 1 of Application Example 2) In Application Example 2, the mobile phone 10
3 has transmitted the authentication request to the exchange 104, the present invention is not limited to this. An authentication request is transmitted to a base station control device that connects the mobile phone 103 to a mobile communication network, another network connection device such as a gateway switch, and a billing center device that collectively manages billing to contracted users. May be. In this case, the network connecting device and the billing center device are provided with the combination storing means 17, the combination information restoring means 18, and the certification information generating means 19.
For example, when the billing center device is provided with these means, the network connection device such as the exchange 104 is the mobile telephone 10
3 relays the communication between the charging center device and the charging center device.

Operations of the mobile phone 103, the exchange 104, and the billing center device when the exchange 104 performs this relay will be described with reference to FIGS. 17 and 18. Here, in FIG.
Is a flowchart showing the relationship between the operations of the mobile phone 103 and the exchange 104, and FIG. 18 is a flowchart showing the operation of the charging center apparatus.

As shown in FIG. 17, the operation of the mobile phone 103 is similar to that of the mobile phone described with reference to FIG. 16, and as shown in FIG. 16 is the same as that of the exchange described with reference to FIG. 16, except that it is transferred from the switch and the determination result is transmitted to the exchange 104.

As shown in FIG. 17, in accordance with steps S1601 to S1603, an authentication request including encrypted combination information is transmitted from mobile phone 103 to exchange 104, and exchange 104 receives the authentication request (S1604). The authentication request is transferred to the billing center device (S1701).

As shown in FIG. 18, when the charging center device receives the authentication request transferred from the exchange 104 (S
1801), combination information restoration means 1 of the charging center device
8 acquires the encrypted combination information from the authentication request, and decrypts the encrypted user identification code of the encrypted combination information to restore the combination information (S1802).

When the combination information is restored, the proof information generation means 19 stores in the combination storage means 17 a combination that matches the combination of the user identification code and the terminal identification code represented by the restored combination information. It is determined whether or not (S1803).

If it is determined that there is a matching combination,
The proof information generation means 19 creates response data certifying that the combination information represents a valid combination (S180).
4).

On the other hand, if it is determined that there is no matching combination, the certification information generating means 19 creates response data indicating that the combination information does not represent a valid combination (S1805).

The response data representing the determination result created in step S1804 or S1805 is transmitted from the billing center device to the exchange 104 (S1806).

When the exchange 104 receives the response data from the charging center device (S1702), the exchange 104
Transfers the response data to the mobile phone 103 (S
1609).

When the mobile phone 103 receives the response data (S1610), it is determined whether the communication is permitted or prohibited according to the steps S1611 to S1613.

By making the determination in the charging center device in this way, the information about the contracted user can be collected in the combination storage means 17 of the charging center device. Since the combination information is restored by the billing center device, it is possible to prevent unauthorized use or leakage of the user identification code. (Modification 2 of Application Example 2) In Application Example 2, the user identification code is used to identify the charging target that occurs when the mobile phone 103 communicates using the mobile communication network. However, it is not limited to this. For example, a user identification code may be used for settlement of electronic commerce. In this case, the mobile phone 103 may control communication of electronic commerce performed using the user identification code.

When the mobile phone 103 is used for electronic commerce, for example, as shown in FIG.
Is an electronic commerce server 109 on the Internet 108.
Connected to. The communication packet from the mobile phone 103 is transferred to the gateway switch gateway switch 111 through the wireless base station device 101, the base station control device 102, the switch 104, and the backbone network 110. The gateway exchange 111 connects the backbone network 110 to another communication network such as the Internet 108 by using a gateway device 112 that performs protocol conversion and the like. Mobile terminal 1
The communication packet from 03 is the gateway exchange 11
1, is transferred to the electronic commerce server 109 via the gateway device 112 and the Internet 108. Also, the communication packet from the electronic commerce server 109 is transferred to the mobile phone 103 by following the reverse route. The electronic commerce is performed by the mobile phone 103 exchanging a communication packet indicating the transaction content with the electronic commerce server 109.

The electronic commerce server 109 is provided with the combination storage means 17, the combination information restoration means 18, and the certification information generation means 19 described above.

Communication permission determining means 16 of the mobile phone 103
Permits the electronic commerce communication that identifies the user by the user identification code only when the response data proving that the combination represented by the combination information is valid in the electronic commerce is received from the electronic commerce server 109. To do.

The operation procedure of the mobile phone 103 and the electronic commerce server 109 in this case is as follows.
4 is replaced with the electronic commerce server 109.

The proof information generation means 19 of the electronic commerce server 109, if the balance of the settlement account associated with the user identification code is insufficient, creates the user identification code and the terminal identification code. Even if the combination is legal,
It may be determined that the electronic commerce is not valid, and a determination indicating that the electronic commerce is not valid is made.

The IC card in each of the above examples is, for example,
Although it corresponds to UIM, the present invention may be applied to an IC card in which a memory card such as an SD (Secure Digital) memory card is expanded. In this case, the software and hardware configurations of the memory card are expanded to the same configuration as UIM. In such an extended memory card, an OS (Operating System) and libraries used by various applications are also prepared.

[0191]

As described above, according to the present invention, when the terminal identification information for identifying the terminal such as the mobile phone having the IC card attached is different from the terminal identification information stored in the IC card, Request information such as a user identification code required by the terminal for the IC card is not output to the terminal. Therefore, even if the user's IC card is taken by a malicious third party due to loss or theft, it is possible to prevent the request information of the IC card from being illegally used or leaked.

[Brief description of drawings]

FIG. 1 is a diagram showing a schematic configuration of an IC card according to an application example 1 of the invention.

FIG. 2 is a diagram schematically showing a configuration of a mobile communication system including a mobile phone to which the present invention is applied.

FIG. 3 is a diagram for explaining the hardware configuration of a mobile phone.

FIG. 4 is a flowchart for explaining a communication control method using an IC card in Application Example 1 of the present invention.

FIG. 5 is a diagram showing a schematic configuration of another IC card in Application Example 1 of the invention.

FIG. 6 is a diagram showing a schematic configuration of a mobile communication terminal in Application Example 1 of the present invention.

FIG. 7 is a flowchart for explaining the relationship between the operations of the IC card and the mobile communication terminal in the application example 1 of the present invention.

FIG. 8 is a diagram showing a schematic configuration of an IC card according to a first modification of the first application example of the present invention.

FIG. 9 is a flowchart for explaining the relationship between the operations of the IC card and the mobile communication terminal in the first modification of the first application example.

FIG. 10 is a diagram showing a schematic configuration of another IC card in Modification 1 of Application Example 1.

FIG. 11 is a diagram showing a schematic configuration of a mobile phone in a second modification of the first application example of the present invention.

FIG. 12 is a flowchart showing a procedure for changing a password in Modification 2 of Application Example 1.

FIG. 13 is a diagram showing a schematic configuration of a mobile phone according to an application example 2 of the invention.

FIG. 14 is a diagram showing a schematic configuration of an exchange in Application Example 2 of the invention.

FIG. 15 is a diagram showing stored contents of a combination storage means in an application example 2 of the present invention.

FIG. 16 is a flowchart for explaining a communication control method by a mobile phone according to an application example 2 of the present invention.

FIG. 17 is a flowchart for explaining a communication procedure between a mobile phone and a billing center device in a first modification of the second application example of the present invention.

FIG. 18 is another flowchart for explaining the communication procedure between the mobile phone and the billing center device in the first modification of the second application example of the present invention.

FIG. 19 is a diagram for explaining a connection relationship between a mobile phone and an electronic commerce server.

[Explanation of symbols]

1 permission decision means 2 Terminal identification information storage means 3 comparison means 4 decision means 5 encryption means 6 Communication permission determining means 7 Own terminal identification information storage means 8 Authentication information storage means 9 Terminal identification information updating means 10 Authentication information changing means 11 Output encryption means 12 User identification information encryption means 13 user identification information storage means 14 Own terminal identification information storage means 15 Encrypted combination information generating means 16 Communication permission determining means 17 Combination storage means 18 Combination information restoring means 19 proof information generation means 103 mobile phone 104 exchange 105 mobile communication terminal 106 IC card 109 Electronic Commerce Server

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) H04M 3/42 G06K 19/00 P 5K067 F term (reference) 5B017 AA06 BB09 BB10 CA14 5B035 AA13 BB09 CA11 5B058 CA27 KA31 KA35 YA20 5K024 AA63 BB04 CC11 5K027 AA11 BB09 5K067 AA32 BB04 DD17 EE02 EE16 HH32 HH36 KK13 KK15

Claims (25)

[Claims] 1. An IC card detachably mounted on a terminal for inputting and outputting information to and from the terminal, the terminal identification information storing means storing terminal identification information for identifying the terminal, Based on the comparison result of comparing the terminal identification information input from the attached terminal with the terminal identification information stored in the terminal identification information storage means, the request information requested by the terminal is output to the attached terminal. An IC card provided with a permission decision means for deciding whether to permit or prohibit the thing. 2. The permission decision means permits the output of the request information when the terminal identification information of the mounted terminal and the terminal identification information stored in the terminal identification information storage means match, The IC card according to claim 1, wherein the output of the request information is prohibited when the terminal identification information is different. 3. In addition to the terminal identification information, an authentication information storage unit for storing authentication information indicating that the request for the request information is valid is provided, and the permission determination unit is different in the terminal identification information. 3. The authentication information input from the mounted terminal is compared with the authentication information stored in the authentication information storage means, and the output of the request information is prohibited only when the authentication information also differs. The listed IC card. 4. The IC according to claim 3, wherein the terminal identification information storage means stores terminal identification information of a terminal whose output of the request information was previously permitted by the permission determination means.
card. 5. The terminal identification information updating means for updating the terminal identification information stored in the terminal identification information storage means to the terminal identification information of the attached terminal when the authentication information matches. The listed IC card. 6. The IC card according to claim 3, wherein the permission decision means decides whether or not to permit the output of the billing use information, at least when the request information is billing use information used for billing. . 7. The authentication information storage means stores not only the authentication information but also transaction authentication information used for authentication in electronic commerce, and the permission determination means, when the terminal identification information is different, When the authentication information matches, the transaction authentication information input from the mounted terminal is compared with the transaction authentication information stored in the authentication information storage means, and if the transaction authentication information also matches. 7. The IC card according to claim 6, wherein output of the billing usage information is permitted. 8. The IC card according to claim 3, further comprising an authentication information changing unit for changing the contents stored in the authentication information storing unit. 9. The IC card according to claim 6, wherein the billing usage information is user identification information for identifying a user. 10. An encryption unit for encrypting the request information output to the attached terminal, when the permission determining unit permits the attached terminal to output the request information. The IC card according to claim 1. 11. The IC card according to claim 1, wherein the terminal identification information storage means stores only the terminal identification information for one or more predetermined terminals. 12. The IC card according to claim 1, wherein the terminal is a mobile communication terminal. 13. A communication terminal to which the IC card according to claim 1 is detachably mounted, and which communicates through an electric communication line, comprising: own terminal identification information storage means for storing terminal identification information of the own terminal; The terminal identification information of the own terminal stored in the own terminal identification information storage means is output to the attached IC card, and the request is made in accordance with the determination of the attached IC card with respect to the terminal identification information of the own terminal by the permission determination means. A communication terminal, comprising: a communication permission determining means for determining whether to permit or prohibit communication using information. 14. A terminal to which the IC card according to claim 3 or 7 is detachably mounted, the terminal including an authentication information changing unit for changing the stored contents of the authentication information storing unit. 15. A communication terminal used for communication with a communication device via an electric communication line, and an IC card detachably mounted on the communication terminal for inputting / outputting information to / from the communication terminal. A communication station provided with the IC card, an output encryption unit for encrypting user identification information for identifying a user output to the communication terminal, and the communication terminal Own terminal identification information storage means for storing terminal identification information for identifying a terminal for the communication terminal; terminal identification information of the communication terminal and user identification information stored in the own terminal identification information storage means. Encrypted combination information generating means for generating encrypted combination information in which at least the user identification information of the combination information indicating a combination with is encrypted by the output encryption means, and the communication terminal From the communication device to which the encrypted combination information has been transmitted by the communication terminal, only when the certification information certifying that the combination information restored from the encrypted combination information represents a valid combination is received. A communication station, comprising: a communication permission determining means for determining whether to permit or prohibit communication using the user identification information. 16. The encrypted combination information generation means is provided in the communication terminal, and is output from the IC card to the communication terminal from the terminal identification information of the communication terminal stored in the own terminal information storage means. The communication station according to claim 15, wherein the encrypted combination information is generated using the encrypted user identification information. 17. The encryption combination information generating means is provided in the IC card, and the terminal identification information of the communication terminal input to the IC card from the communication terminal and the output user identification information encryption means are used. The communication station according to claim 15, wherein the encrypted combination information is generated using the encrypted user identification information. 18. The output encryption means includes user identification information storage means for storing user identification information, and user identification information for encrypting the user identification information stored in the user identification information storage means. The communication station according to claim 15, further comprising encryption means. 19. The IC card according to claim 15, wherein the output encryption unit generates the encrypted combination information by using a public key corresponding to a secret key used by the communication device for decryption. 20. The IC card according to claim 15, wherein the communication terminal is a mobile communication terminal. 21. The certification information is certified by a network connecting device for connecting the mobile communication terminal to a mobile communication network that the combination information is valid. IC card. 22. The IC card according to claim 15, wherein the certification information is certified by an electronic commerce server that manages electronic commerce that the combination information is valid. 23. A communication device which communicates with the communication station according to claim 15 via a telecommunication line, and a combination storage means for storing a combination of user identification information and terminal identification information, said communication station. Of the combination information restoring means for restoring the combination information from the encrypted combination information transmitted by, and the combination information restoring means of the combination of the user identification information and the terminal identification information stored in the combination storage means. When there is a combination that matches the combination of the user identification information and the terminal identification information represented by the restored combination information,
A communication device, comprising: proof information generating means for generating proof information for certifying that the combination information represents a valid combination. 24. A communication provided with a communication terminal used for communication via an electric communication line, and an IC card detachably attached to the communication terminal for inputting / outputting information to / from the communication terminal. A communication control method for controlling communication performed by a station using the communication terminal, comprising: terminal identification information for identifying a terminal stored in the IC card; and communication from the communication terminal to the IC card. A procedure in which the IC card compares the input terminal identification information of the communication terminal, and based on the comparison result of the terminal identification information, the request information requested by the communication terminal to the IC card is output to the communication terminal. The IC card determines whether to permit or prohibit the request, and only when the request information is output from the IC card to the communication terminal, A communication control method including a procedure for performing communication using information. 25. A communication terminal used for communication with a communication device via an electric communication line, and an IC card detachably attached to the communication terminal for inputting / outputting information to / from the communication terminal. Is a communication control method for controlling communication performed using the communication terminal, the user identification information for identifying a user output from the IC card to the communication terminal. Using encrypted user information and terminal identification information for identifying the terminal for the communication terminal stored in the communication terminal, the user identification information and the terminal identification information of the communication terminal And a step of generating encrypted combination information in which at least the user identification information is encrypted, of the combination information representing a combination with, and transmitting the encrypted combination information to a communication device using the communication terminal. Order, from the communication device to which the encrypted combination information is transmitted by the communication terminal, the communication terminal, proof information for certifying that the combination information restored from the encrypted combination information represents a valid combination. A communication control method comprising a procedure of performing communication using the user identification information only when received.