JP2004289690A - Mobile terminal device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mobile terminal device with which personal data can be easily accessed from a user who owns the mobile terminal device, and further can be surely protected from access from a third person. <P>SOLUTION: A mobile terminal device 1 is provided with a radio part 1 for performing voice or data communications with a base station 8 of a mobile communication network (PLMN) 7 by radio, a memory part 6 for saving personal data such as a telephone directory, and a control part 3 for controlling the whole. When access is requested for referring to and editing personal data, the control part 3 immediately permits access when a data protection function is not set but even when the data protection function is set, the control part permits access to personal data when its location is registered. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a mobile terminal device, and in particular, when there is a request for access to personal data such as a telephone directory for reference, editing, etc., it is possible to improve the usability by the user himself and prevent access from a third party. The present invention relates to a mobile terminal device as described above.
[0002]
[Prior art]
2. Description of the Related Art In recent years, the storage capacity of mobile terminal devices such as mobile phones has increased with the increase in the density of semiconductor memories. There is also a model in which an external storage device such as a memory card can be connected. For this reason, it is possible to save images taken by the camera attached to the main body, or to access and access the Internet or the like to download and save information such as melody data, Java (registered trademark) contents, stocks, banks and the like. Became.
[0003]
Also, in a GSM (Global System for Mobile communications) type portable terminal device used in cellular phones in many countries such as Europe, a card called SIM (Subscriber Identity Module) storing subscriber information and the like is mounted. be able to. As a result, the telephone number is fixed for each main body of the wireless portable terminal device, whereas the wireless portable terminal device equipped with the SIM card is specified as the wireless portable terminal device used by the user. Even if the main body is replaced, there is no need for procedures such as a model change, and the convenience of shopping without cash is provided.
[0004]
The increase in the stored information in this way means that the amount of personal data also increases. If the portable terminal device is lost or stolen, the stored personal data (for example, an electronic telephone directory) is lost. There is a risk that a third party may refer to (view) or edit (add, delete, modify, etc.) or leak. Therefore, it is necessary to protect personal data of the portable terminal device from being accessed in case of loss or theft.
[0005]
Conventionally, the protection of personal data is based on the verification of a password. Each time a user attempts to access personal data, the user inputs a preset password, and the input password and the password registered in the mobile terminal device. The access is permitted when is matched.
[0006]
In a mobile terminal device using a SIM card, reading and writing of the SIM card is under the control of a telephone carrier, and writing and the like cannot be performed on the user side. Therefore, personal data such as a telephone number cannot be stored. Therefore, a configuration is adopted in which the telephone directory function is stored in a nonvolatile memory built in the main body of the wireless portable terminal device. For this reason, when lending a portable terminal device without a SIM card to another person, even if the use of the SIM card can be refused, personal data in the non-volatile memory built into the portable terminal device cannot be referred to another person. Can not be. To prevent this, personal data in a semiconductor memory (EEPROM) is automatically erased when the SIM card is pulled out of the body of the mobile phone, so that the personal data cannot be referenced by a third party. There is a proposal for a telephone (for example, see Patent Document 1).
[0007]
[Patent Document 1]
JP 2000-300254 A
[0008]
[Problems to be solved by the invention]
However, according to the conventional mobile terminal device, in a configuration in which access is permitted only by a password, even a person himself / herself must input a password every time personal data is accessed, which is inconvenient. Also, if the password has a small number of digits, even a third party may successfully access the password by repeatedly inputting the password.
[0009]
As a countermeasure, a method of sending a command from the network to the portable terminal device to mask access to the functions and personal data of the portable terminal device is conceivable, but a command is sent from the network side to the portable terminal device to protect personal data. In this case, access cannot be masked if the mobile terminal device is out of the communication range or another SIM is attached. In addition, the configuration of Patent Document 1 does not function at all if the mobile terminal device is lost or stolen with the SIM card attached.
[0010]
Accordingly, it is an object of the present invention to provide a portable terminal device in which access to personal data can be easily performed by the person himself / herself, and can be surely protected against access from a third party.
[0011]
[Means for Solving the Problems]
In order to achieve the above object, the present invention has, as a first feature, a mobile terminal including a wireless unit for wirelessly communicating voice and data with a mobile communication network, and a storage medium for storing personal data. The present invention provides a mobile terminal device comprising a control unit for permitting access to the personal data on condition that location registration is performed when the data protection function is set in the device.
[0012]
According to this configuration, even if the data protection function is set, access to the personal data stored in the storage medium is permitted if the location registration is performed. Therefore, as long as the portable terminal device is within the range of the mobile communication network, personal data can be easily accessed by the user. Location registration is a condition for access from third parties, so if you request the mobile communication network to prohibit incoming and outgoing calls in case of theft, etc., you will not be able to access your personal data. Can be protected.
[0013]
In order to achieve the above object, the present invention has, as a second feature, a wireless unit for wirelessly communicating voice and data with a mobile communication network by a GSM system or a W-CDMA system, and storing personal data. When a data protection function is set in a portable terminal device having a storage medium capable of loading a SIM card, the condition that the IMSI in the SIM card can be checked and the location information is registered And a control unit for permitting access to the personal data.
[0014]
According to this configuration, in a GSM or W-CDMA portable terminal device that can use a SIM card, access to personal data stored in a storage medium can be performed even if a data protection function is set. If the IMSI in the SIM card can be checked and the location registration has been completed, it is permitted. Therefore, personal data can be easily accessed from the person. Location registration is a condition for access from third parties, so if you request the mobile communication network to prohibit incoming and outgoing calls in case of theft, etc., you will not be able to access your personal data. Can be protected.
[0015]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[First Embodiment]
FIG. 1 shows a configuration of the portable terminal device according to the first embodiment of the present invention.
The mobile terminal device 10 includes a wireless unit 1 including a transmitting circuit, a receiving circuit, and a signal processing circuit, an antenna 1a connected to the wireless unit 1, a display unit including a liquid crystal display and a driving circuit. 2, a control unit 3 including a CPU and an interface circuit, an operation unit 4 including numeric keys, a SIM card 5, and a memory unit 6 using a semiconductor memory. I have. The memory unit 6 stores personal data such as a telephone directory, a schedule, download data from the Web and the like, and photograph data in addition to a program for operating the mobile terminal device 1 as a mobile phone and a multi-function device.
[0016]
Here, the mobile terminal device 10 is a GSM mobile phone that operates using a battery (not shown) as a power supply, and wirelessly connects a base station 8 (an antenna 8a of a public land mobile network (PLMN) 7) to a PLMN (Public Land Mobile Network). With). FIG. 1 shows an example of the GSM type mobile terminal device. However, in the case of a PDC (Personal Digital Cell) type mobile terminal device used in Japan, the SIM card 5 becomes unnecessary. In this case, the telephone number of the portable terminal device 1 is set by the manufacturer or the distributor.
[0017]
Each of the wireless unit 1, the display unit 2, the operation unit 4, the SIM card 5, and the memory unit 6 is connected to the control unit 3 via a bus or an interface (not shown). Processing, output processing, connection processing, display processing, and the like are executed according to a request or a situation. For example, when connecting to the PLMN for a telephone call, the user directly inputs numbers using the operation unit 4 or opens a telephone directory, selects a desired telephone number, confirms the telephone number displayed on the display unit 2, and then makes a call. By pressing the button (off-hook), the control unit 3 controls the wireless unit 1 to transmit a radio wave and establish a connection. After the line connection, the control unit 3 maintains the connection state with the base station, stops the transmission of the wireless unit 1 according to the on-hook, and sets the wireless unit 1 in a standby state. When sending a mail, the document input by the user through the operation unit 4 is displayed on the display unit 2 and stored in the memory unit 6.
[0018]
The mobile terminal device 1 has a protection function against access to personal data such as a telephone directory, and the execution is executed by the control unit 3 based on a program stored in the memory unit 6 as shown in FIG. Is done.
[0019]
FIG. 2 shows an authentication process in the portable terminal device of FIG. In the following flowchart, steps are represented by S.
When referring to or editing personal data in the electronic telephone directory stored in the memory unit 6 of the mobile terminal device 1, the user of the mobile terminal device 1 operates a predetermined button of the operation unit 4 to access data. Is requested (S101). In response to this request, it is checked whether a protection function has been set (S102). If it is determined that the protection function is set (Yes), it is checked whether or not the location is currently registered in the PLMN (Public Land Mobile Communication Network) (S103). If the location has been registered, access to personal data is permitted (S107).
[0020]
If the location has not been registered, access to personal data is prohibited (S104). Then, if access is desired, a message indicating that a password is to be entered is displayed on the display unit 2 (S105). When the user inputs a password by operating the operation unit 4 in response to the password request in S105, it is determined whether or not the input content matches the registered password (S106). If the password is correct, access to personal data is permitted (S107). Thereafter, it is checked whether or not the data access has been completed (S108). If the completion has been confirmed, the process waits to accept the next access request, and if it has been completed, permits the access to the personal data.
[0021]
FIG. 3 shows a location registration process of the portable terminal device 1 according to the GSM method.
When the mobile terminal device 1 is turned on (S201), the control unit 3 selects a PLMN according to the list in the SIM card 5 (S202), and when the selection is completed (S203). Location registration is performed (S204), and connection to the PLMN is performed. When the connection is disconnected during the connection (S206), the process returns to S202, and the subsequent processing is executed again. If the registration has failed, registration of the next list in the SIM card 5 with the PLMN is attempted (S205 and S203). If registration of all the lists in the SIM card 5 has failed, the service becomes a no service (S207).
[0022]
FIG. 4 shows details of the protocol in the location registration of FIG.
First, the mobile terminal device 1 activates a call control (CC) protocol, and transmits a channel request (RR) to a RR (Radio Link) protocol and a data link layer 2 (data) according to a mobility management (MM) protocol. request to the PLMN 7 via the link layer 2: L2). The PLMN 7 that has received this request assigns to the RR of the mobile terminal device 1 (assignment). In the mobile terminal device 1, a request for location update is issued to the RR and MM of the PLMN 7, and a reply of approval is sent from the L2 of the PLMN 7 to the MM of the mobile terminal device 1. Next, an authentication request is issued from the MM of the PLMN 7 to the MM of the mobile terminal device 1, and a response (authentication response) is output from the MM of the mobile terminal device 1 to the MM of the PLMN 7 in response to the authentication request.
[0023]
Further, the MM of the PLMN 7 sends a ciphering mode command (command) to the RR of the portable terminal device 1. On the other hand, the encryption mode is set by the RR of the mobile terminal device 1. Next, the MM of the PLMN 7 notifies the MM of the mobile terminal device 1 of permission to update the location. Next, a request for reassignment of the user identifier TMSI (Temporary Mobile Subscriber Identity) is issued from the MM of the mobile terminal device 1 to the MM of the PLMN 7, and in response to this, a channel release (channel) from the RR of the mobile terminal device 1 to the MM of the PLMN 7 is performed. release) is performed and then a disconnection is made, and then a confirmation reply is made from L2 of the PLMN 7, whereby the RR connection is terminated.
[0024]
FIG. 5 shows processing for setting and canceling the personal data protection function.
In FIG. 5, S301 to S310 are processing of “setting”, and S311 to S315 are processing of “cancel”. First, the “setting” process will be described. The user operates the operation unit 4 to request "setting" of the personal data protection function (S301). In response to this request, the control unit 3 checks the current state (S302). If it has already been set, the process ends. If not set, a message is displayed on the display unit 2 to request the user to input a password (S303). When the user inputs the password (S304), the control unit 3 displays a message on the display unit 2 and prompts the user to input the password again (S305). When the user inputs the password again (S306), the control unit 3 collates the first input (S303) with the second input (S306) (S307). If the input passwords match (S308), the password is stored in the memory unit 6 (S309), and the protection function is set to "set" (S310).
[0025]
Next, the “cancel” process will be described with reference to FIG. When the user operates the operation unit 4 and requests "release" of the personal data protection function (S311), the control unit 3 checks the current state (S312). If it has not been set, the process is terminated. If it has been set, a message is displayed on the display unit 2 and the user is required to input a password (S313). When the user operates the operation unit 4 to input a password (S314), the control unit 3 collates the password (registered password) stored in the memory unit 6 with the entered password (S514). The function is set to "cancel" (S515).
[0026]
The above operation sets the personal data protection function. Normally, a mobile phone is used in a state where location registration has been completed in a network. In this situation (in a state where the location is already registered), when the user accesses the personal data such as a telephone directory to access or edit the personal data, it is not necessary to input the password. However, in a situation where the mobile terminal device 1 is out of the service area and the location cannot be registered, the personal data protection function can be set by inputting the password.
[0027]
If the user has lost or stolen the mobile terminal device 1, in order to prevent billing due to use by a third party (call, etc.), the operator of the PLMN 7 is requested to prohibit incoming and outgoing calls of the mobile terminal device 1. I do. The operator sets the network so that the use of the mobile terminal device 1 is prohibited. As a result, the mobile terminal device 1 cannot perform location registration in the network (PLMN7), and therefore cannot make or receive calls. In this situation, even if a third party tries to access or edit personal data such as a telephone directory, the user is required to enter a password. Can be prevented. Further, since it is not necessary to transmit a command which is conventionally required, no new countermeasure is required on the network side.
[0028]
According to the first embodiment of the present invention, the following effects can be obtained.
(1) If the location is registered, it is not necessary to input a password, so that the user of the portable terminal device can access personal data without being aware of the personal data protection function as long as the user is within the service area. .
(2) Even outside the service area where location registration is not possible, access to personal data is possible only by inputting a password.
(3) If the mobile terminal device is lost or stolen, it is possible to prohibit registration (location registration) in the PLMN by requesting the PLMN operator from the user. Since input is required, access by a third party can be prevented.
[0029]
[Second embodiment]
Next, a second embodiment of the present invention will be described. The present embodiment is directed to a mobile terminal device that employs a GSM method in which a SIM card can be mounted, a W-CDMA (Wideband-Code Division Multiple Access) method, or the like. A user identifier IMSI (International Mobile Subscriber Identity) assigned to each user is written in the SIM card. By using the IMSI and the information of the location registration, it can be set as a condition for judging whether data access is possible or not.
[0030]
FIG. 6 shows a data access process according to the second embodiment of the present invention.
When the user refers to or edits personal data such as a telephone directory, the user operates the operation unit 4 to make a data access request (S401). The control unit 3 having received the data access request checks whether the data protection function is set (S402). When the data protection function is not set, data access is permitted (S409), and personal data is output to the display unit 2 or the like in response to an input operation of the operation unit 4. If the end of the data access is determined by the end of the reference, the editing, and the like (S410), the process returns to S401, and enters the standby state.
[0031]
If it is determined in S402 that the data protection function is set (Yes), the control unit 3 reads the IMSI in the SIM card 5 (S403), and performs collation with the IMSI stored in the memory unit 6 (S404). ). As a result of the collation, if the IMSIs match (Yes), it is next checked whether or not the location is registered in the PLMN 7 (S405). If the location has not been registered (No), data access is prohibited (S406), a message is displayed on the display unit 2, and the user is prompted to enter a password (S407). When the user inputs a password by operating the operation unit 4, the control unit 3 checks the password with the password registered in the memory unit 6 (S408). If the passwords match, the control unit 3 permits data access (S409). If it is confirmed in S405 that the location registration has been completed, data access is permitted (S409).
[0032]
If the IMSI collation does not match in S404 (No), data access is prohibited (S406), and the user is required to input a password (S407). In response to this, when the user inputs the password by operating the operation unit 4, the control unit 3 checks the registered password (S408), and permits the data access if they match (S409).
[0033]
FIG. 7 shows a process of “setting” and “cancellation” of the personal data protection function according to the second embodiment. In the figure, S501 to S512 are processing of “setting”, and S513 to S517 are processing of “cancel”. First, the “setting” process will be described.
[0034]
The user makes a request for “setting” of the personal data protection function by operating the operation unit 4 (S501). In response to the request for “setting”, the control unit 3 checks the contents already set (S502). If it has already been set, the process ends. If not set, a message is displayed on the display unit 2 to urge the user to enter a password (S503). When the password is input by the user (S504), the control unit 3 displays a message on the display unit 2 and prompts the user to input the password again (S505). When the password is input again by the user (S506), the control unit 3 collates the password input first and the password input second (S507). If the collation matches (Yes), the password is stored in the memory unit 6 (S509). Next, the protection function is set to “set” (S510). Further, it reads out the IMSI of the SIM card 5 (S511) and stores it in the memory unit 6 (S512). Thus, the “setting” process ends.
[0035]
Next, the processing for releasing the personal data protection function in FIG. 7 will be described. The user operates the operation unit 4 to request "release" of the personal data protection function (S513). Upon receiving this request, the control unit 3 checks the setting state of the personal data protection function (S514). If the personal data protection function has been set, the processing for the "cancel" request ends. If not set, a message is displayed on the display unit 2 to prompt the user to enter a password (S515). When the password is input by the user (S516), the control unit 3 checks the password registered in the memory unit 6, and if the password matches, the control unit 3 "releases" the personal data protection function (S517). Thus, the “cancel” process ends.
[0036]
A user of a mobile terminal device (specifically, a mobile phone) using a SIM card card and configured according to the GSM system, the W-CDMA system, or the like, attaches the SIM card to the terminal, and performs the above-described operation to obtain the personal data of the present invention. Set the protection function. Usually, a mobile phone is used in a state where location registration has been completed in a network. In this situation, when the user accesses personal data such as a telephone directory for reference or editing, it is not necessary to input a password. On the other hand, in a situation where the location cannot be registered due to being out of service area or the like, access is enabled by inputting a password. In the process of FIG. 6, S405 may be deleted, and only the IMSI collation may be set as the condition of the access permission.
[0037]
When the user loses or stolen the portable terminal device, the operator of the network such as PLMN is prohibited from making or receiving a call of the portable terminal device in order to prevent billing due to use by a third party (call, etc.). Ask. The operator sets the network so that the use of the portable terminal device is prohibited. This makes it impossible for the portable terminal device to register its location in the network, and makes it impossible to make and receive calls. In this situation, even if a third party tries to refer to or edit personal data such as a telephone directory, the user is required to enter a password, and the third party cannot know the correct password. Cannot access.
[0038]
Further, when a third party uses the portable terminal device by replacing it with another SIM card, an outgoing / incoming call is possible if the replaced SIM card can be registered in the network. However, in this situation, when a third party tries to access personal data such as a telephone directory for reference or the like, the IMSI stored in the mobile terminal device does not match the IMSI of the attached SIM card. Therefore, the user is required to enter a password. Third parties who do not know the password cannot enter the correct password, and consequently cannot access the personal data.
[0039]
According to the second embodiment of the present invention, the following effects can be obtained.
(1) In the mobile terminal device 1 using a SIM card of the GSM system or the W-CDMA system, etc., the IMSI stored in the device matches the IMSI of the SIM card, and the location can be further registered. This eliminates the need to enter a password, so that personal data can normally be accessed without being conscious of the setting of the personal data protection function.
(2) In the portable terminal device 1 using a SIM card of the GSM system or the W-CDMA system, if the IMSI stored in the device matches the IMSI of the SIM card, a password is input. This makes it possible to access personal data even outside the area where location registration is not possible.
(3) Even if the portable terminal device 1 using the SIM card of the GSM system or the W-CDMA system is lost or stolen, the user can request the network such as the PLMN to prohibit the location registration. Third parties can be prevented from accessing personal data.
(4) Even if the mobile terminal device 1 using the SIM card is lost or stolen, if the IMSI stored in the device does not match the IMSI of the SIM card, a password must be input. Therefore, even if a third party attaches another SIM card to the portable terminal device 1, it is possible to prevent the third party from accessing personal data.
[0040]
In each of the above embodiments, the case where the mobile terminal device 1 is a mobile phone has been described. However, the present invention is not limited to the mobile phone, and is connected to a PLMN or the like by wireless and connected to a method of performing location registration. The present invention can be widely applied to portable terminal devices. The portable terminal device includes a PDA (Personal Digital Assistant) device having a wireless communication function, in addition to a portable telephone.
[0041]
In each of the above embodiments, the procedure of inputting the password twice is required when setting the personal data protection function. However, the procedure may be performed three or more times.
[0042]
【The invention's effect】
As is apparent from the above description, according to the portable terminal device of the present invention, when the data protection function is set, the configuration including the control unit that permits access to personal data on condition that location registration is performed is provided. Therefore, even if the data protection function is set, access to the personal data stored in the storage medium is permitted if the location registration has been performed, and the mobile terminal device may be within the range of the mobile communication network. This makes it easier for the individual to access personal data. In addition, in the case of theft, loss, etc., if only requesting the mobile communication network to prohibit outgoing / incoming calls, access is subject to location registration, so personal data cannot be accessed by a third party. Personal data can be reliably protected.
[0043]
According to another portable terminal device of the present invention, the SIM card can be used in the GSM or W-CDMA portable terminal device, and even if the data protection function is set, the SIM card in the SIM card can be used. Since the control unit that permits access to the personal data is provided on condition that the IMSI can be verified and that the position information is registered, the personal data can be easily accessed by the user. For access from a third party, location registration is a condition, so in the case of theft, if you request the mobile communication network to prohibit incoming and outgoing calls, you will not be able to access personal data. Can be protected.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a configuration of a mobile terminal device according to a first embodiment of the present invention.
FIG. 2 is a flowchart illustrating an authentication process in the mobile terminal device of FIG. 1;
FIG. 3 is a flowchart illustrating a location registration process of the GSM mobile terminal device.
FIG. 4 is a timing chart showing details of a protocol in the position registration processing of FIG. 3;
FIG. 5 is a flowchart showing processing for setting and releasing a personal data protection function.
FIG. 6 is a flowchart illustrating a data access process according to the second embodiment of the present invention.
FIG. 7 is a flowchart illustrating processing for setting / releasing a personal data protection function according to the second embodiment.
[Explanation of symbols]
1 Radio section
1a, 8a antenna
2 Display
3 control part
4 Operation unit
5 SIM card
6 Memory section
7 PLMN (Public land mobile communication network)
8 base stations
10 Mobile terminal equipment

Claims (12)

In a mobile terminal device including a wireless unit that wirelessly communicates voice and data with a mobile communication network and a storage medium that stores personal data,
A portable terminal device, comprising: a control unit that permits access to the personal data on condition that location registration is performed when a data protection function is set. The mobile terminal device according to claim 1, wherein the control unit performs the location registration when a power is turned on. The mobile terminal device according to claim 1, wherein the control unit prohibits access to the personal data and performs a display prompting for a password when the location registration is not set. The control unit permits access to the personal data when a password is input according to the display and when the input password matches a password stored in the storage medium. The mobile terminal device according to claim 3, wherein The control unit, in response to the setting request of the data protection function, if the data protection function is not set, displays a message prompting the user to input a plurality of passwords, 2. The portable terminal device according to claim 1, wherein when all match, the password is stored and the data protection function is enabled. In response to the data protection function release request, the control unit displays a message prompting the user to enter a password when the data protection function is not set, and the password entered according to the display is registered. 2. The portable terminal device according to claim 1, wherein the data protection function is released when the value matches the condition. A wireless unit that wirelessly communicates voice and data with a mobile communication network by a GSM (Global System for Mobile communications) method or a W-CDMA (Wideband-Code Division Multiple Access) method, and a storage medium for storing personal data. And a mobile terminal device capable of mounting a SIM (Subscriber Identity Module) card.
When the data protection function is set, a control unit is provided which permits access to the personal data on condition that the IMSI (International Mobile Subscriber Identity) in the SIM card can be checked and location information is registered. A mobile terminal device characterized by the above-mentioned. The mobile terminal device according to claim 7, wherein the control unit compares an IMSI stored in advance with an IMSI of the SIM, and determines a match of the IMSI based on a match. The mobile terminal device according to claim 7, wherein the control unit prohibits access to the personal data and performs a display prompting a password input when the IMSI cannot be verified. The controller, when a password is input in accordance with the display, permits access to the personal data when the input password matches a password stored in the storage medium. The mobile terminal device according to claim 9. The control unit, in response to the setting request of the data protection function, if the data protection function is not set, displays a message prompting the user to input a plurality of passwords, The portable terminal device according to claim 7, wherein when all match, the password and the IMSI are stored and the data protection function is enabled. In response to the data protection function release request, the control unit displays a message prompting the user to enter a password when the data protection function is not set, and the password entered according to the display is registered. 8. The portable terminal device according to claim 7, wherein the data protection function is released when the value matches the condition.

Images