JP2004348475A - Cellular phone terminal, ic card, management device, settlement terminal, and ic card management method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To restrict the use of an IC card embedded in a cellular phone terminal when the IC card is separated from a user due to loss or theft even if it is usable with a noncontact interface. <P>SOLUTION: In the cellular phone terminal which can communicate with a management device via a base station and a network, the IC card embedded in the cellular phone terminal is provided with a means which automatically sets the restriction on the use of the IC card based on a signal from the management device. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a technology related to a mobile phone terminal incorporating an IC card, and more particularly to a technology for restricting the use of an IC card built in a mobile phone terminal that is distant from a user due to loss, theft, or the like.
[0002]
[Prior art]
There is known a mobile phone terminal in which an IC card is built in the mobile phone terminal and various services using the mobile phone terminal can be enjoyed by the IC card. In such a mobile phone terminal with a built-in IC card, the IC card transmits and receives data to and from an external system via wireless communication, and a contact interface that transfers data to and from the mobile phone terminal main body via physical contacts. A device that includes a non-contact interface to perform is known (see Patent Document 1).
[0003]
In addition, in a mobile phone terminal having a caller ID notification function, it has a phone number holding unit for loss authentication that holds a set of phone numbers and matches the phone number held in the phone number holding unit for loss authentication When a caller ID notification is received and remote operation start data is received, it is authenticated as a lost mobile phone terminal, and outgoing calls are prohibited, lost / contact messages are displayed, and a loss warning is sounded. There is also a known technique (see Patent Document 2).
[0004]
[Patent Document 1]
JP 2002-351623 A
[0005]
[Patent Document 2]
JP 2002-368868 A
[0006]
[Problems to be solved by the invention]
In the prior art disclosed in Patent Document 1 described above, an electronic ticket or the like is purchased and downloaded to an IC card using the wireless function of the mobile phone terminal, and the IC card is used by the IC card using a non-contact interface. use. Therefore, after purchasing an electronic ticket, if the mobile phone terminal is removed from the user's hand due to loss or theft in an unused state, the IC card built in the mobile phone terminal without permission by a third party There is a possibility that the electronic ticket downloaded in the above will be used using a contactless interface.
[0007]
Further, in the prior art disclosed in Patent Document 2 described above, when the mobile phone terminal is separated from the user due to loss or theft, the use of the wireless function of the mobile phone terminal is prohibited. it can. However, when an IC card having a non-contact interface is built in the mobile phone terminal, use of the IC card using the non-contact interface cannot be prohibited.
[0008]
The present invention has been made in view of the above points. The purpose of the present invention is to use an IC card built in a mobile phone terminal away from the user due to loss, theft, etc., even if it is used by a non-contact interface. Even if it is possible, it is to be able to restrict the use of the IC card.
[0009]
[Means for Solving the Problems]
In order to achieve the above object, in a representative invention of a mobile phone terminal according to the present invention, in a mobile phone terminal capable of communicating with a management device via a base station and a network, an IC card built in the mobile phone terminal Has means for automatically setting the use restriction of the IC card based on a signal from the management device.
[0010]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[0011]
1 to 13 relate to a mobile phone system according to a first embodiment of the present invention (hereinafter referred to as the first embodiment), and FIG. 1 illustrates an IC used in the mobile phone system of the first embodiment. It is a block diagram which shows the structural example of the mobile telephone terminal which incorporated the card | curd. Note that the “mobile phone terminal” in the present invention refers to all mobile terminals having a telephone function, including a mobile phone such as a CDMA system, a personal handy-phone system (PHS), and a PDA having a mobile phone function. This includes things.
[0012]
In FIG. 1, 100 is a mobile phone terminal (the main body of the mobile phone terminal), 200 is an IC card built in the mobile phone terminal 100, and this IC card 200 is connected to the mobile phone terminal 100 via a physical contact. This is a dual interface type IC card having a contact interface function for exchanging data and a non-contact interface function for exchanging data with an external system through very short distance wireless communication.
[0013]
In the mobile phone terminal 100, 101 is an arithmetic processing unit, 102 is a radio unit that performs radio communication with a base station, and 103 is an antenna for the radio unit 102, which is connected to the radio unit 102. Reference numeral 104 denotes a display unit, 105 denotes a key input unit, 106 denotes a voice processing unit, 107 denotes a microphone, 108 denotes a speaker, and the microphone 107 and the speaker 108 are connected to the voice processing unit 106. Reference numeral 109 denotes a storage unit, and 110 denotes a portable terminal system program in the storage unit 109. Reference numeral 111 denotes a narrow-area wireless communication unit that performs direct wireless communication with an external device by short-range wireless communication. Reference numeral 112 denotes an antenna for the narrow-area wireless communication unit 111, which is connected to the narrow-area wireless communication unit 111. Reference numeral 113 denotes a biological information reading unit that reads biological characteristic information such as fingerprints and irises, and includes an image sensor and image processing means. Reference numeral 114 denotes an IC card R / W (read / write) unit to which the contact interface of the IC card 200 is connected, and reference numeral 115 denotes an IC card antenna for performing communication using the non-contact interface function of the IC card 200. . In the first embodiment, the IC card antenna 115 is provided on the mobile phone terminal 100 side. However, the IC card 200 includes the IC card antenna 115, and the IC card antenna 115 is provided in the IC card 200. It may be configured to be connected to the connection unit 201 that functions as a dual interface circuit.
[0014]
On the other hand, in the IC 200, 201 is a connection unit that is a dual interface having a contact interface function and a non-contact interface function, 202 is an arithmetic processing unit, 203 in the arithmetic processing unit 202, 203 is a biometric authentication processing unit, 204 Is a usage restriction processing unit. Reference numeral 205 denotes a storage unit. In this storage unit 205, 206 is terminal information having terminal-specific information such as a telephone number of the mobile phone terminal 100, 207 is payment information such as credit and debit, and 208 is an IC. A security status for managing the usage restrictions of the card 200, a payment counter value 209 for holding the number of offline payments, and 210 for performing a biometric authentication process as identification of the user of the mobile phone terminal 100 It is the user's biometric information to be used.
[0015]
Note that “offline payment” as used in this specification refers to simple credit transactions, etc., when the payment terminal uses the IC card 200 to make an inquiry about the user's authentication to the center station (payment server) unlike online payment. It refers to borrowing a small amount, paying a small amount using electronic money, and so on.
[0016]
FIG. 2 is a diagram showing a configuration example for restricting the use of the IC card of the mobile phone terminal 100 from the telephone company 302. In FIG. 2, 300 is a base station, 301 is a radio wave, 302 is a telephone company, 303 is a network, 304 is a wireless communicable range, and 305 is a management device.
[0017]
In the configuration shown in FIG. 2, the mobile phone terminal 100 transmits and receives a radio wave 301 to and from the base station 300. The management device 305 of the telephone company 302 can restrict the use of the IC card 200 of the mobile phone terminal 100 via the network 303 and the base station 300.
[0018]
FIG. 3 shows each message transmitted and received between the management apparatus 305 and the mobile phone terminal 100 via the network 303 and the base station 300 when the mobile phone terminal 100 is in the range 304 in which wireless communication with the base station 300 is possible. It is a figure which shows a specific example of a structure and each message | telegram structure exchanged between the mobile telephone terminal and the IC card.
[0019]
As shown in FIG. 3, the use prohibition message 400, the prohibition process completion message 403, the access prohibition message 405, the application use prohibition request message 407, the data access prohibition message 410, and the prohibition completion message 413 are included. , Access prohibition release message 415, prohibition release completion message 417, biometric information transmission message 419, biometric authentication completion message 422, release permission message 426, release permission response message 428, release completion message 430, and release completion There is a response message 432, which is configured by adding information data to a message identification code or a message identification code.
[0020]
The use prohibition message 400 is a message sent from the management apparatus 305 via the network 303 and the base station 300 to restrict the use of the IC card 200 to the mobile phone terminal 100, and indicates that the use prohibition message 400 is a use prohibition message 400. The prohibition information 402 indicating the content to be restricted is added to the message identification code 401 shown.
[0021]
The prohibition process completion message 403 is a message sent from the mobile phone terminal 100 to the management apparatus 305 as a response to the use prohibition message 400, and the message identification code 404 indicating the prohibition process completion message 403 is added to the message of the mobile phone terminal. Unique terminal information 206 such as a telephone number, payment information 207 such as user credit information, security status 208, and signature data 450 for ensuring the authenticity of the added information (that no alteration has been made) The electronic information is generated using a predetermined key for checking).
[0022]
The access prohibition telegram 405 is a telegram requesting that the mobile phone terminal 100 prohibits access to the IC card from the IC card 200, and includes only the telegram identification code 406 indicating the access prohibition telegram 405.
[0023]
Similarly to the access prohibition message 405, the application use prohibition message 407 is a message that requests the IC card 200 to prohibit the use of the specified application, and the message identification code 408 indicating the application use prohibition message 407 is displayed. The designated application information 409 indicating the designated application is added.
[0024]
Similarly to the access prohibition message 405, the data access prohibition message 410 is a message that requests the IC card 200 to prohibit the use of the specified data area, and is a message identification code 411 indicating the data access prohibition message 410. Further, the designated data area information 412 indicating the designated data area is added.
[0025]
The prohibition completion message 413 is a message sent from the mobile phone terminal 100 to the management apparatus 305 as a response to the access prohibition message 405, the application use prohibition message 407, and the data access prohibition message 410, and is a prohibition completion message 413. It is comprised only with the message | telegram identification code | symbol 414 shown.
[0026]
The access prohibition release message 415 is a message for requesting the IC card 200 from the mobile phone terminal 100 to release the specified access prohibition to the IC card, and is a message identification indicating the access prohibition release message 415. It is comprised only with the code | symbol 416. FIG.
[0027]
The prohibition cancellation completion message 417 is a message sent to the mobile phone terminal 100 from the IC card 200 as a response to the access cancellation message 415, and includes only a message identification code 418 indicating the prohibition cancellation completion message 417. The
[0028]
The biometric information transfer message 419 is a message requesting biometric authentication processing with the biometric information read from the biometric information reading unit 113 from the mobile phone terminal 100 to the IC card 200, and is a biometric information transfer message 419. The biometric information 421 read from the biometric information reading unit 113 is added to the electronic message identification code 420 shown.
[0029]
The biometric authentication completion message 422 is a message sent from the IC card 200 to the mobile phone terminal 100 as a response to the biometric information transmission message 419, and an authentication result is added to the message identification code 423 indicating the biometric authentication completion message 422. Authentication result information 424 and signature data 451 for ensuring the authenticity of the added information are added.
[0030]
The release permission message 426 is a message sent from the mobile phone terminal 100 to the management apparatus 305. The release permission message 426 includes a message identification code 427 indicating the release permission message 426 and unique terminal information 206 such as a phone number of the mobile phone terminal. And payment information 207 such as user credit information, a security status 208, and signature data 452 for ensuring the authenticity of the added information.
[0031]
The release permission response message 428 is a message sent from the management apparatus 305 to the mobile phone terminal 100 as a response to the release permission message 426, and is composed only of a message identification code 429 indicating the release permission response message 428. The
[0032]
The cancellation completion message 430 is a message sent from the mobile phone terminal 100 to the management apparatus 305, and the message identification code 431 indicating the cancellation completion message 430 includes unique terminal information 206 such as the phone number of the mobile phone terminal. And payment information 207 such as user credit information, a security status 208, and signature data 453 for ensuring the authenticity of the added information.
[0033]
The cancellation completion response message 432 is a message sent from the telephone company 302 to the mobile phone terminal 100 as a response to the cancellation completion message 430, and is composed only of a message identification code 433 indicating the cancellation completion response message 432. The
[0034]
FIG. 4 is a diagram showing a specific example of the configuration of the security status 208 stored in the storage unit 205 of the IC card 200. This security status 208 stores access permission / prohibition states of the IC card itself, each application, and each data area for determining whether the IC card permits or prohibits external access. In FIG. 4, 501 is a status of chip access that holds whether access to the IC card itself is permitted / prohibited, 502 is an access status to the application “a”, 503 is an access status to the application “b”, Reference numeral 504 denotes an access status to the data area “A”, 505 denotes an access status to the data area “B”, and 506 denotes an access status to the data area “C”.
[0035]
In the security status 208 shown in FIG. 4, when the IC card permits access from the outside, “0” and when prohibited, “1”, the status 505 of the data area “B” in the security status 208 is Since it is “1”, access from the outside is prohibited. When it is desired to permit external access to the status 505 of the data area “B”, the status 505 of the data area “B” is rewritten from “1” to “0”. Similarly, the other statuses 501 to 504 and 506 may be rewritten from “0” to “1” when it is desired to prohibit access when the status “0” is externally permitted.
[0036]
FIG. 5 shows a specific example of the configuration of the management apparatus DB (database) 550 provided in the management apparatus 305 of the telephone company 302 and the management apparatus (payment server) connected to the payment terminal via a network at the time of payment such as credit. The state of the security status 208 is managed and stored for each mobile phone number. In FIG. 5, 551 is a mobile phone number, 552 is an ID unique to the IC card 200 built in the mobile phone terminal 100 having this mobile number, 553 is the IC card itself, each application, each data obtained from the security status 208 Area access permission / prohibition state (shown simplified in the figure, but is the access permission / prohibition state of all items described in FIG. 4), 554 is the latest date when the access permission / prohibition state was updated .
[0037]
In the example illustrated in FIG. 5, the DB managed by the mobile phone number has been described. However, the management may be performed for each IC card 200 built in the mobile phone terminal 100 or for each owner of the mobile phone terminal 100. Further, although the IC card itself obtained from the security status 208, each application, and the access permission / prohibition state 552 of each data area are stored, the security status 208 may be stored as it is. The update date 554 may be stored as the update date. Further, the terminal information 206 and the payment information 207 may be associated and managed together with these DBs.
[0038]
Next, the operation of the mobile phone system according to the first embodiment will be described.
FIG. 6 shows an example of the processing procedure of the mobile phone terminal 100 when the management device 305 of the telephone company 302 requests the mobile phone terminal 100 to restrict the use of the IC card 200 via the network 303 and the base station 300. It is a flowchart which shows an example.
[0039]
Hereinafter, a case where the user has lost or stolen the mobile phone terminal 100 will be described as an example. First, a user who has lost or stolen the mobile phone terminal 100 has lost or stolen the mobile phone terminal 100 or lost or stolen the mobile phone terminal 100 by the telephone company 302 with which the user has a contract. Since it has been stolen, contact is made to restrict the use of the IC card 200 of the lost or stolen mobile phone terminal 100. In response to this, the telephone company 302 restricts the use of the IC card 200 to the mobile phone terminal 100 (IC card) according to the contract contents or according to the use restriction contents of the IC card 200 requested by the user. Communication with itself, each application, and each data area is prohibited).
[0040]
The management device 305 of the telephone company 302 that has received the communication from the user sends a use prohibition message 400 to the lost or stolen mobile phone terminal 100 via the network 303 and the base station 300, and the mobile phone corresponding thereto. Wait for a response from the terminal 100. When the mobile phone terminal 100 is turned on in step S600, the mobile phone terminal 100 enters a standby state waiting for a telegram from the base station 300 (step S601), and receives a use prohibition telegram 400 from the base station 300 in step S602. 101 determines the content of the prohibition information 403 added to the message identification code 401 (step S603).
[0041]
If the determination result of the prohibited content (usage restriction content) indicates that access to the IC card 200 is prohibited, a process for prohibiting access to the IC card 200 from the outside of the mobile phone terminal 100 is performed (access prohibited message 405). Step S604). If the determination result of the prohibited content indicates that the use of the application in the IC card 200 is prohibited, a process for prohibiting access to the application in the IC card 200 is performed (the application use prohibition request message 407 is sent; step) S605). In addition, when the determination result of the prohibited content indicates that access to the data area in the IC card 200 is prohibited, a process for prohibiting access to the data area in the IC card 200 is performed (data access prohibition message 410 is transmitted). Step S606).
[0042]
After the above process, it is confirmed that the prohibition completion message 413 is returned from the IC card 200, and the prohibition process completion message 403 is sent to the management device 305 of the telephone company 302 (step S607). The management apparatus 305 of the telephone company 302 that has received the prohibition processing completion message 403 inquires the corresponding telephone number from the terminal information 206 added to the message 403 from the management apparatus DB 550 provided in the management apparatus 305, and performs security. The status prohibition state 553 and the update date 554 are updated.
[0043]
FIG. 7 is a flowchart showing a specific example of a processing procedure in the case where the IC card 200 of the mobile phone terminal 100 in the use prohibited state (use restricted state) is released from the use prohibited state.
[0044]
When the mobile phone terminal 100 is turned on, or when an application installed in the mobile phone terminal 100 is activated, the mobile phone terminal 100 inquires the contents of the security status 208 to the IC card 200. Then, it is determined whether or not the IC card 200 has a use prohibition setting (step S700). If there is no use prohibition setting in the security status 208 of the IC card 200, a screen 800 as shown in FIG. 9, for example, indicating that there is no use prohibition setting in the IC card is displayed on the display unit 104 (step S701). In step S700, if the security status 208 of the IC card 200 is set to prohibit use, the IC card has a use prohibition state, but the prohibition is canceled when the identity verification is performed by biometric authentication. For example, a screen 801 as shown in FIG. 10 is displayed on the display unit 104 (step S702).
[0045]
Hereinafter, a case where authentication processing using a fingerprint as biometric authentication is used for identity verification will be described as an example. The biometric authentication is not limited to fingerprints, and other authentication methods using an iris or the like may be used for identity verification.
[0046]
Now, when the user of the mobile phone terminal 100 selects to perform identity verification on the screen 801 shown in FIG. 10, the user reads the biometric information by reading the finger corresponding to the biometric information 210 stored in the IC card 200. This is applied to the part 113. Thereby, the cellular phone terminal 100 reads the biometric information 421 by the biometric information reading unit 113 (step S703), adds the biometric information 421 to the biometric information transmission message 419, and sends it to the IC card 200.
[0047]
The biometric authentication processing unit 203 of the IC card 200 performs biometric authentication by comparing the biometric information 421 received by the biometric information transmission message 419 with the biometric information 210 stored in the storage unit 205 (step S704). Then, the IC card 200 adds the biometric authentication result information 424 to the biometric authentication completion message 422 and sends it to the mobile phone terminal 100.
[0048]
The mobile phone terminal 100 determines the authentication result information 424 added to the received biometric authentication completion message 422 (step S705). If the authentication fails, the mobile phone terminal 100 indicates that the authentication fails and the identity confirmation cannot be confirmed. For example, a screen 802 as shown in FIG. 11 is displayed on the display unit 104 (step S702).
[0049]
If the authentication is successful, the mobile phone terminal 100 sends an access prohibition release message 415 to the IC card 200. When the IC card 200 receives the access prohibition release message 415, the use restriction processing unit 204 rewrites the prohibited state in the security status 208 into the permitted state (step S707). After the rewriting is completed, the IC card 200 sends a prohibition release completion message 417 to the mobile phone terminal 100.
[0050]
When receiving the prohibition cancellation completion message 417, the mobile phone terminal 100 displays the screen 800 as shown in FIG. 9, for example, on the display unit 104, which indicates that there is no use prohibition setting on the IC card (step S708).
[0051]
FIG. 8 shows that the management device 305 of the mobile phone company 302 manages the update of the security status of the management device DB 550 when the IC card 200 of the mobile phone terminal 100 that is in the prohibited use state is released from the prohibited state. It is a flowchart which shows one specific example of a processing procedure.
[0052]
Up to step S701, the operation is the same as in FIG. In step S <b> 700, the mobile phone terminal 100 inquires the IC card 200 about the contents of the security status 208, and determines whether or not the IC card 200 has a use prohibition setting. If there is no use prohibition setting in the security status 208 of the IC card 200, a screen 800 as shown in FIG. 9, for example, indicating that there is no use prohibition setting in the IC card is displayed on the display unit 104 (step S701). If the security status 208 of the IC card 200 is set to prohibit use in step S700, the mobile phone terminal 100 cancels the use of the IC card 200 in the use prohibition state. A telegram 426 is sent to the management device 305 of the telephone company 302. The management device 305 that has received the release permission message 426 inquires of the mobile phone number registered in the management device DB 550 from the terminal information 206 added to the message. If the inquired mobile phone number is found and there is no loss / theft notification for this mobile phone number (or after the loss / theft, the mobile phone terminal 100 returns to the correct owner and the loss / theft notification is canceled. The management device 305 sends a release permission response message 428 determined to be permitted to the mobile phone terminal 100. In addition, if the inquired mobile phone number is not found, or if the inquired mobile phone number is found and there is a report of loss or theft to the mobile phone number, the management device 305 determines that the release permission is determined to be unauthorized. Response message 428 is sent to mobile phone terminal 100.
[0053]
The mobile phone terminal 100 that has received the release permission response message 428 determines the content of the permission response message 428 (step S710), and if not allowed, indicates that the release of the prohibited state has not been permitted. A screen 803 as shown in FIG. 12 is displayed on the display unit 104 (step S708).
[0054]
If it is determined in step S710 that permission is given, the process proceeds to step S702, and thereafter, the same operations as in FIG. 7 are performed up to step S708.
[0055]
In step S708, after the screen 800 as shown in FIG. 9, for example, shown in FIG. 9 indicating that the IC card is not set to be prohibited from use is displayed on the display unit 104, the mobile phone terminal 100 displays the management device 305 of the telephone company 302. In response, a release completion message 430 is transmitted. The management apparatus 305 that has received the cancellation completion message 430 updates the security status state 553 of the telephone number in the management apparatus DB 550 and the update date 554 that were inquired in step S709. After the update, the management device 305 of the telephone company 302 sends a cancellation completion response message 432 to the mobile phone terminal 100.
[0056]
FIG. 13 is a flowchart showing a specific example of the processing procedure of the IC card 200 when the cellular phone terminal 100 requests prohibition of use of the IC card, cancellation of prohibition of use of the IC card, or biometric authentication.
[0057]
When the IC card 200 is in a standby state waiting for a message from the mobile phone terminal 100 (step S900), when receiving a message from the mobile phone terminal 100 in step S901, the IC card 200 determines the contents of the message (step S900). S902). If the received electronic message is not an electronic card requesting the IC card use prohibition cancellation, IC card use prohibition, or biometric authentication, but the IC card 200 communicates with the correct normal IC card, the IC card 200 Normal IC card processing is performed (step S903).
[0058]
Further, when the received electronic message is a message for canceling the use prohibition of the IC card, the use prohibition of the IC card, or biometric authentication, the message is the use prohibition release of the IC card (in the access prohibition release message 414). Is the use of an IC card prohibited (access prohibition message 405 or application use prohibition request message 407 or data access prohibition message 410), or is a message requesting biometric authentication (whether it is a biometric information transmission message 419)? Is determined (step S904).
[0059]
If the determination result in step S904 is an access prohibition release message 415, a use prohibition release process is performed (step S905), and a prohibition release completion message 417 is sent to the mobile phone terminal 100 (step S908).
[0060]
If the determination result in step S904 is an access prohibition message 405, an application use prohibition request message 407, or a data access prohibition message 410 (access to the IC card 200 or application use in the IC card 200 is prohibited). Prohibition or access prohibition to the data area in the IC card 200), use prohibition processing corresponding to each telegram 405, 407, 410, that is, access prohibition processing to the IC card, or IC card The application use prohibition process in 200 or the data area access prohibition process in the IC card 200 is performed (step S906), and a prohibition completion message 413 is sent to the mobile phone terminal 100 (step S909).
[0061]
The use prohibition process (step S906) of the IC card 200 permits the chip access 501 of the security status 208 in the storage unit 203 of the IC card 200 when the message received from the mobile phone terminal 100 is the access prohibition message 405. Rewrite from state to prohibited state. Further, when the message received from the mobile phone terminal 100 is the application use prohibition request message 407, the application “a” 502 or the application “b” 503 in the security status 208 in the storage unit 203 of the IC card 200 is selected. The application corresponding to the designated application information added to the use prohibition request message 407 is rewritten from the permitted state to the prohibited state. If the message received from the mobile phone terminal 100 is the data access prohibition message 410, the data area “A” 504 to the data area “C” 506 in the security status 208 in the storage unit 203 of the IC card 200 has data The data area corresponding to the designated data area information 412 added to the access prohibition message 410 is rewritten from the permitted state to the prohibited state.
[0062]
If the determination result in step S904 is the biometric information transmission message 419, biometric authentication processing is performed (step S907), and a biometric authentication completion message 422 is sent to the mobile phone terminal 100 (step S910).
[0063]
As described above, in the first embodiment, the management device 305 of the telephone company 302 is incorporated in the mobile phone terminal 100 that is lost or stolen by the user via the network 303 and the base station 300. The card 200 can be prohibited from using the predetermined function (use restriction). In addition, in order to return the use-prohibited IC card 200 to the permitted state, the mobile phone terminal 100 receives the release permission response message 428 determined to be permitted from the management apparatus 305 and succeeds in the identity verification by biometric authentication. Therefore, a third party other than the correct owner of the mobile phone terminal 100 can be surely prohibited from using the IC card 200. Therefore, the use of the above-described offline payment using the non-contact interface function of the IC card 200 can be surely prohibited, and the use of value and the borrowing of value by a malicious third party can be surely prevented. .
[0064]
In addition to the case where a user is lost or stolen, the above-mentioned method is used not only for temporarily suspending applications that are no longer used, but also for reliably protecting specified data areas from tampering. Can be used. In addition, when setting the use prohibition of the IC card 200 of the mobile phone terminal 100 that is not lost or stolen but held by the correct owner, the correct owner himself / herself is not connected via the management device 305. It is preferable that the use prohibition of the IC card 200 can be set only by operating the mobile phone terminal 100. Also in this case, in order to return the use prohibition state to the permission state, it is desirable to perform identity verification by biometric authentication. In addition, as a precondition for setting the use prohibition, identification may be required by biometric authentication.
[0065]
Next, a mobile phone system according to a second embodiment (hereinafter referred to as the second embodiment) of the present invention will be described. 14 to 23 relate to the mobile phone system according to the second embodiment, and FIG. 14 is a diagram showing an outline of the mobile phone system according to the second embodiment. In addition, in each figure of this embodiment including FIG. 14, the same code | symbol is attached | subjected to the component equivalent to previous 1st Embodiment, and the description is omitted in order to avoid duplication.
[0066]
In FIG. 14, 1000 is a payment terminal, 1001 is a non-contact IC card R / W (read / write), 1002 is a payment server, and the mobile phone terminal 100 and the IC card 200 incorporated therein are simplified. Although shown in a simplified form, it has the same configuration as FIG. The contactless IC card R / W 1001 is connected to the payment terminal 1000, and the payment terminal 1000 and the payment server 1002 can communicate with each other as needed via the network 303. In the second embodiment, the settlement server 1002 corresponds to the management device of the first embodiment described above.
[0067]
In the mobile phone system of the second embodiment, an example of the operation is the above-described offline credit settlement using the non-contact interface function provided in the IC card 200 built in the mobile phone terminal 100 (here. Then, for example, the case where the borrowing of a small lot) is performed will be described.
[0068]
FIG. 15 illustrates a case where the mobile phone terminal 100 is between the settlement terminal 1000 and the mobile phone terminal 100 when the mobile phone terminal 100 is outside the range 304 in which wireless communication with the base station 300 (not shown in FIG. 15) is possible, or It is a figure which shows one specific example of each message | telegram structure exchanged between the payment terminal 1000 and the IC card 200, or between the portable terminal 100 and the IC card 200. In the communication shown in FIG. 15, in the second embodiment, the mobile phone terminal 100 and the IC card 200 use the IC card antenna 115 on the mobile phone terminal 100 side to make a payment via the non-contact IC card R / W 1001. Although communication with the terminal 1000 is performed, when the IC card antenna 115 is built in the IC card 200, the mobile phone terminal 100 uses the narrow area wireless communication unit 111 and the antenna 112 for settlement. The IC card 200 may communicate with the terminal 1000, and the IC card 200 may directly communicate with the payment terminal 1000 via the non-contact IC card R / W 1001 using the IC card antenna 115 and the connection unit 200.
[0069]
As shown in FIG. 15, the messages include a payment counter read message 1100, a payment counter value response message 1102, a biometric authentication request message 1105, a biometric authentication result message 1107, a payment permission determination message 1110, and a permission determination response. There is a telegram 1112, each of which has a configuration in which information data is added to the telegram identification code or the telegram identification code. In addition to the message shown in FIG. 15, the message shown in FIG. 3 is also used, but the message shown in FIG. 3 is omitted to avoid duplication.
[0070]
The payment counter reading message 1100 is a message for requesting the number of offline payments made from the payment terminal 1000 to the mobile phone terminal 100 or from the payment terminal 1000 to the IC card 200. It consists only of a telegram identification code 1101 indicating that it is a telegram 1100.
[0071]
The settlement counter value response message 1102 is a message transmitted from the IC card 200 to the mobile phone terminal 100 or from the IC card 200 to the settlement terminal 1000 as a response to the settlement counter read message 1100. The payment counter value 209 is added to the message identification code 1104 indicating the response message 1103.
[0072]
The biometric authentication request message 1105 is a message for requesting biometric authentication from the payment terminal 1000 to the mobile phone terminal 100, and includes only a message identification code 1106 indicating the biometric authentication request message 1105.
[0073]
The biometric authentication result message 1107 is a message sent from the mobile phone terminal 100 to the payment terminal 1000 as a response to the biometric authentication request message 1105, and an authentication result is added to the message identification code 1108 indicating the biometric authentication result message 1107. Authentication result information 424 indicating the credibility of the added information and signature data 451 for ensuring the authenticity of the added information.
[0074]
The settlement permission determination message 1110 is a message that requests the payment processing from the payment terminal 1000 to the mobile phone terminal 100 or the IC card 200 to determine whether or not payment processing can be performed, and indicates a payment permission determination message 1110. It consists only of the identification code 1111.
[0075]
The acceptability determination response message 1112 is a message sent from the mobile phone terminal 100 or the IC card 200 to the settlement terminal 1000 as a response to the settlement permission determination message 1110, and indicates a message indicating whether or not it is the permission determination response message 1112. A determination result information 1114 indicating a determination result and signature data 1115 for ensuring the authenticity of the added information are added to the identification code 1113.
[0076]
Next, the operation of the second embodiment will be described. FIGS. 16 to 18 show determination of use restriction of the IC card 200 and restriction of use when performing offline payment processing using the non-contact interface function of the IC card 200 built in the mobile phone terminal 100. FIG. It is a flowchart which shows the specific example of the operation | movement performed with the payment terminal 1000, the mobile telephone terminal 100, and the IC card 200 about a process, respectively.
[0077]
FIG. 16 is a flowchart showing a specific example when the payment terminal 1000 determines whether payment is possible in the second embodiment.
[0078]
In step S1200, the payment terminal 1000 is in a state of waiting for a response from the IC card 200 using the non-contact interface of the IC card by the user appropriately operating the payment terminal 1000, etc. The IC card 200 makes a predetermined response to the settlement terminal 1000 using the IC card antenna 115.
[0079]
When payment terminal 1000 receives a response from IC card 200 in step S1201, payment terminal 1000 sends a payment counter read message 1100 to IC card 200. When the IC card 200 receives the settlement counter read message 1100, the IC card 200 sends a settlement counter value response message 1102 to which the settlement counter value 209 stored in the storage unit 205 is added to the settlement terminal 1000.
[0080]
The settlement terminal 1000 determines the settlement counter value 209 added to the received settlement counter value response message 1102 (step S1202), and performs settlement processing when the number of offline settlements has not been exceeded (step S1202). Step S1210).
[0081]
If the number of payments that can be made offline is exceeded, it is determined whether biometric authentication for identity verification has already been performed (step S1203). If biometric authentication has already been performed and the identity has been confirmed, payment terminal 1000 performs payment processing (step S1210).
[0082]
If it is determined in step S1203 that biometric authentication has not yet been performed, settlement terminal 1000 sends biometric authentication request message 1105 to mobile phone terminal 100. When the mobile phone terminal 100 receives the biometric authentication request message 1105 from the payment terminal 1000, it indicates that offline payment is not possible, but offline authentication is possible by performing identity verification through biometric authentication. For example, FIG. A screen 804 as shown is displayed on the display unit 104. Here, a case where authentication processing using a fingerprint as biometric authentication is used for identity verification will be described as an example. Note that biometric authentication is not limited to fingerprints, and other authentication processing such as iris may be used for identity verification.
[0083]
Now, on the screen 804 shown in FIG. 19, when the user of the mobile phone terminal 100 selects to perform identity verification, the user moves his / her finger corresponding to the biological information 210 stored in the IC card 200 to the biological information. This is applied to the reading unit 113. Thereby, the cellular phone terminal 100 reads the biometric information 421 by the biometric information reading unit 113 (step S1204), adds the biometric information 421 to the biometric information transmission message 419, and sends it to the IC card 200.
[0084]
The IC card 200 performs biometric authentication by comparing the biometric information 421 received by the biometric information transmission message 419 with the biometric information 210 stored in the storage unit 205 by the biometric authentication processing unit 203 (step S1205). Then, the IC card 200 adds the authentication result information 424 to the biometric authentication completion message 422 and sends it to the mobile phone terminal 100.
[0085]
The mobile phone terminal 100 adds the authentication result 424 and the signature 451 added to the received biometric authentication completion message 422 to the biometric authentication result message 1107, and sends the biometric authentication result message 1107 to the settlement terminal 1000.
[0086]
The payment terminal 1000 determines the authentication result information 424 added to the received biometric authentication result message 1107 (step S1206). If the authentication is successful, the payment terminal 1000 performs a payment process (step S1210). If the authentication is successful, the payment terminal 1000 sends a message indicating this to the mobile terminal 100, and the mobile terminal device 100 can receive the payment offline up to a predetermined number of times. For example, a screen 804 as shown in FIG. 21 is displayed on the display unit 104, and a settlement counter value update request is sent to the IC card 200, so that the settlement count value 209 of the IC card 200 (offline ) Is rewritten to “1”.
[0087]
If the authentication fails, the settlement terminal 1000 either prohibits access to the IC card 200, prohibits use of an application in the IC card 200, or prohibits access to a data area in the IC card 200. The use prohibition message 400 to which the prohibition information 402 is added is sent to the mobile phone terminal 100.
[0088]
When the mobile phone terminal 100 receives the usage prohibition message 400, the arithmetic processing unit 101 determines the content of the prohibition information 402 added to the message identification code 401. If the determination result of the prohibited content indicates that access to the IC card 200 is prohibited, an access prohibited message 405 is sent to the IC card 200, and the use restriction processing unit 204 of the IC card 200 performs access prohibition processing to the IC card. Is executed (step S1207). If the determination result of the prohibited content indicates that the use of the application in the IC card 200 is prohibited, an application use prohibition request message 407 is sent to the IC card 200, and the use restriction processing unit 204 of the IC card 200 causes the inside of the IC card. The application use prohibition process is executed (step S1207). If the determination result of the prohibited content indicates that access to the data area in the IC card 200 is prohibited, the data access prohibition message 410 is sent to the IC card 200 and the use restriction processing unit 204 of the IC card 200 performs the IC card 200. The data area access prohibition process is executed (step S1207).
[0089]
After the processing of step S1207, the IC card 200 sends a prohibition completion message 413 to the mobile phone terminal 100. Upon receiving this, the mobile phone terminal 100 sends a prohibition processing completion message 403 to the settlement terminal 1000. For example, a screen 805 as shown in FIG. 20 is displayed on the display unit 104 to indicate that offline payment processing is impossible.
[0090]
The payment terminal 1000 that has received the prohibition process completion message 403 sends the prohibition process completion message 403 to the payment server 1002 (step S607), and stops the payment process (step S1209).
[0091]
Upon receiving the prohibition processing completion message 403, the payment server 1002 inquires of the telephone number corresponding to the terminal information 206 added to the message 403 from the management apparatus DB 550 provided in the payment server 1002, and sets the corresponding telephone number. The security status prohibition state 553 and the update date 554 corresponding to the number are updated.
[0092]
In the flowchart shown in FIG. 16, when determining the number of payments possible with the payment counter value (step S1202), a mechanism for determining whether payment is possible by setting an upper limit value of the payment amount that can be settled offline. Absent.
[0093]
FIG. 17 is a flowchart showing a specific example when the mobile phone terminal 100 determines whether or not payment is possible in the second embodiment.
[0094]
In FIG. 17, the operations up to step S1201 are the same as those in FIG. After step S <b> 1201, the payment terminal 1000 sends a payment permission determination message 1110 to the mobile phone terminal 100. When the mobile phone terminal 100 receives the settlement permission determination message 1110, it sends a payment counter read message 1100 to the IC card 200. When the IC card 200 receives the payment counter reading message 1100, the IC card 200 sends a payment counter value response message 1102 to which the payment counter value 209 stored in the storage unit 205 is added to the mobile phone terminal 100.
[0095]
The mobile phone terminal 100 determines the payment counter value 209 added to the received payment counter value response message 1102 (step S1300), and if the number of offline payments has not been exceeded, payment processing is possible. The determination result information 1114 and the signature 1115 indicating this are sent to the settlement terminal 1000. Then, the payment terminal 1000 that has received the permission determination response message 1112 determines that payment processing is possible based on the determination result information 1114 (step S1303), and performs payment processing (step S1210).
[0096]
If it is determined in step S1300 that the number of offline payments has been exceeded, the mobile phone terminal 100 determines whether biometric authentication for identity verification has already been performed (step S1301). If biometric authentication has already been performed and the identity has been confirmed, the mobile phone terminal 100 sets the determination result information 1114 indicating that payment processing is possible and the permission determination response message 1113 with the signature 1115 added thereto. It is sent to the terminal 1000. Then, the payment terminal 1000 that has received the permission determination response message 1112 determines that payment processing is possible based on the determination result information 1114 (step S1303), and performs payment processing (step S1210).
[0097]
If it is determined in step S1301 that biometric authentication has not been performed yet, the mobile phone terminal 100 cannot perform offline payment, but can perform offline payment by performing identity verification through biometric authentication. For example, a screen 804 as shown in FIG. 19 is displayed on the display unit 104.
[0098]
Now, on the screen 804 shown in FIG. 19, when the user of the mobile phone terminal 100 selects to perform identity verification, the user moves his / her finger corresponding to the biological information 210 stored in the IC card 200 to the biological information. This is applied to the reading unit 113. Thereby, the cellular phone terminal 100 reads the biometric information 421 by the biometric information reading unit 113 (step S1204), adds the biometric information 421 to the biometric information transmission message 419, and sends it to the IC card 200. The IC card 200 performs biometric authentication by comparing the biometric information 421 received by the biometric information transmission message 419 with the biometric information 210 stored in the storage unit 205 by the biometric authentication processing unit 203 (step S1205). Then, the IC card 200 adds the authentication result information 424 and the signature 451 to the biometric authentication completion message 422 and sends it to the mobile phone terminal 100.
[0099]
The mobile phone terminal 100 determines the authentication result information 424 added to the received biometric authentication completion message 422 (step S1302). If the authentication is successful, the determination result information 1114 indicating that the payment process is possible. And a permission determination response message 1112 to which the signature 1115 is added is sent to the settlement terminal 1000. Then, the payment terminal 1000 that has received the permission determination response message 1112 determines that payment processing is possible based on the determination result information 1114 (step S1303), and performs payment processing (step S1210). If the authentication is successful, the mobile terminal device 100 displays, for example, a screen 804 as shown in FIG. 21 on the display unit 104, indicating that payment can be made offline up to a predetermined number of times. The apparatus 100 sends a settlement count value update request to the IC card 200 and rewrites the settlement count value 209 (the number of times of offline settlement is performed) of the IC card 200 to “1”.
[0100]
If the authentication fails in the determination in step S1302, the determination result information 1114 indicating that the payment process is not possible and the permission determination response message 1112 added with the signature 1115 are sent to the payment terminal 1000. . Then, the payment terminal 1000 that has received this permission determination response message 1112 determines that the payment processing is not possible based on the determination result information 1114 (step S1303), and the same operation as that after the determination in step S1206 in FIG. To do.
[0101]
In the flowchart shown in FIG. 17, when determining the number of payments possible with the payment counter value (step S1300), it is possible to determine whether or not payment is possible by setting an upper limit value of the payment amount that can be settled offline. Absent.
[0102]
FIG. 18 is a flowchart showing a specific example when the IC card 200 determines whether payment is possible in the second embodiment.
[0103]
In FIG. 18, the operations up to step S1201 are the same as those in FIGS. After step 1201, the payment terminal 1000 sends a payment permission determination message 1110 to the IC card 200. When the IC card 200 receives the settlement permission determination message 1110, the settlement counter value 209 stored in the storage unit 205 is determined by the arithmetic processing unit 202 (step S1400), and the settlement counter value 209 is within a range that allows settlement. If there is, the determination result information 1114 indicating that payment processing is possible and the availability determination response message 1112 to which the signature 1115 is added are transmitted to the mobile phone terminal 100.
[0104]
The mobile phone terminal 100 that has received this permission determination response message 1112 determines that payment processing is possible based on the permission determination result information 1114 (step S1401), and the determination result information 1114 and signature that indicate that payment processing is possible as it is. The permission determination response message 1112 to which 1115 is added is transferred to the settlement terminal 1000. The payment terminal 1000 that has received the permission determination response message 1112 determines that payment processing is possible based on the permission determination result information 1114 (step S1303), and performs payment processing (step S1210).
[0105]
If it is determined in step S1400 that the payment counter value 209 is in a range where payment is impossible, the IC card 200 is prohibited from accessing the IC card 200 by the use restriction processing unit 204 or the application in the IC card 200 is used. Or prohibiting the access to the data area in the IC card 200 is executed (step S1207). In this case, which access prohibition process is to be performed must be held in advance as an IC card setting. After this processing, the IC card 200 sends to the mobile phone terminal 100 a determination result information message 1112 to which determination result information 1114 and a signature 1115 indicating that the payment processing is impossible is added.
[0106]
The mobile phone terminal 100 that has received the permission determination response message 1112 determines that the payment process is not possible based on the determination result information 1114 (step S1401), and the determination result information 1114 indicating that the payment process is not possible. The availability determination response message 1112 with the signature 1115 added is transferred to the payment terminal 1000 and a screen (not shown) indicating that offline payment is not possible is displayed. The payment terminal 1000 that has received the permission determination response message 1112 determines that the payment processing is not possible based on the determination result information 1114 (step S1303), and sends a prohibition processing completion message 403 to the payment server 1002 (step S1303). S607), the settlement process is stopped (step S1209). Upon receiving the prohibition processing completion message 403, the payment server 1002 inquires the telephone number corresponding to the terminal information 206 added to the message 403 from the management apparatus DB 550 provided in the payment server 1002, and the corresponding telephone number. The security status prohibition state 553 and the update date 554 corresponding to are updated.
[0107]
In the flowchart shown in FIG. 18, when determining the number of payments possible with the payment counter value (step S1400), an upper limit value of the payment amount that can be settled offline is set. Absent.
[0108]
Here, also in the second embodiment, when the IC card 200 in the prohibited use state is released from the prohibited state, the same operation as in FIG. 7 described above may be performed. The mobile phone terminal 100 that has received the prohibition cancellation completion message 417 from the IC card 200 sends the cancellation completion message 430 to the payment server 1002 or to the payment server 1002 via the payment terminal 1000, whereby the IC card 200 The updated security status 208 is notified to the payment server 1002, whereby the payment server 1002 updates the prohibited state 553 and the update date 554 of the management apparatus DB 550 provided in the payment server 1002.
[0109]
FIG. 22 is a diagram showing a modification of the configuration of the payment terminal 1000 in the mobile phone system according to the second embodiment. In this example shown in FIG. 22, the payment terminal 1000 is different from the configuration of FIG. The payment server 1002 is not connected via the network 303. In the settlement terminal 1000 connected to the non-contact IC card R / W 1001 shown in FIG. 22, 1500 is an arithmetic processing unit, 1501 is an IC card R / W (read / write) unit, and 1502 is a contact IC card. is there.
[0110]
In this example shown in FIG. 22, in the case of electronic money, electronic tickets, royalties, etc., between the mobile phone terminal 100 and the payment terminal 1000, the IC card 200 is changed to the contact type IC card 1502, or the contact type IC card 1502 is changed. This is a configuration that can be considered when a value is transferred to the IC card 200.
[0111]
In the example shown in FIG. 22, the mobile phone terminal 100, the IC card 200, and the payment terminal 1000 perform substantially the same operations as those in FIGS. 16, 17, and 18, and the payment terminal 1000 prohibits the payment server 1002. Only the prohibition process completion notification process (step S607) for sending a completion message is not performed. Further, the payment process in step S1210 is a payment process between the IC card 200 and the contact type IC card 1502.
[0112]
FIG. 23 is a diagram illustrating an example of communication between mobile phone terminals in the mobile phone system according to the second embodiment. 23, reference numeral 100 ′ denotes a mobile phone terminal having the same function as the mobile phone terminal 100 described above. In this example shown in FIG. 23, the mobile phone terminal 100 and the mobile phone terminal 100 ′ have a narrow area. Communication is performed via the wireless communication unit 111 and the antenna 112, and the IC cards 200 built in both terminals 100 and 100 ′ also communicate with each other via the narrow area wireless communication function of both terminals 100 and 100 ′.
[0113]
In this example shown in FIG. 23, in the case of electronic money, electronic tickets, etc., the IC card 200 of the mobile phone terminal 100 is changed from the IC card 200 of the mobile phone terminal 100 to the IC card 200 of the mobile phone terminal 100 ′. Alternatively, this is an example of communication that can be considered when value moves from the IC card 200 of the mobile phone terminal 100 ′ to the IC card 200 of the mobile phone terminal 100.
[0114]
In this example shown in FIG. 23, the operations of the mobile phone terminal 100, the mobile phone terminal 100 ′, and the IC card 200 are abbreviated as FIGS. 16, 17, and 18 by replacing one mobile phone terminal with a payment terminal. In this case, the mobile phone terminal replaced with the settlement terminal does not perform only the prohibition process completion notification process (step S607) for sending the prohibition process completion message to the settlement server 1002. Further, the payment process in step S1210 is a payment process between the IC cards 200.
[0115]
As described above, in the second embodiment, when offline settlement using the IC card 200 is performed, if it is determined that settlement is impossible by determining the number of settlements and the amount that can be settled, automatically, Since the offline payment is prohibited and the use restriction of the IC card 200 is set, the IC card 200 built in the mobile phone terminal 100 that is lost or stolen by the user is offline by a malicious third party. Damage caused by payment can be minimized. In addition, the above processing can be automatically executed without realizing that the correct owner has lost the mobile phone terminal 100.
[0116]
In each of the above-described embodiments, the case where biometric authentication is performed as identification is described as a specific example. However, identification may be performed by inputting a PIN (Personal Identifier Number) or the like.
[0117]
Further, in each of the embodiments described above, determination of the number of possible payments and determination of the payment possible amount is performed. However, offline payment is a mechanism in which payment processing cannot be performed unless identity verification processing is always performed. It doesn't matter.
[0118]
Here, the mobile phone system described above is realized by a program for causing the above-described processing to function, and the object of the present invention may be this program itself. In the present invention, since the system configuration is connectable to a network, the program may be downloaded from the network and installed in a recording medium of a terminal or device.
[0119]
【The invention's effect】
As described above, according to the present invention, the management device prohibits the use of the predetermined function for the IC card incorporated in the mobile phone terminal that has been lost or stolen by the user (restricts the use). )be able to. Therefore, the offline payment using the non-contact interface function of the IC card can be surely prohibited, and the use of value or the borrowing of value by a malicious third party can be surely prevented.
In addition, when offline payment using an IC card is performed and it is determined that payment is not possible by determining the number of possible payments and the payment possible amount, offline payment is automatically prohibited and the IC card Since the usage restriction is set, the damage caused by offline payment of an IC card embedded in a mobile phone terminal that has been lost or stolen by a malicious third party can be minimized. . In addition, the above processing can be automatically executed even if the correct owner does not notice that the mobile phone terminal has been lost (even if the user does not report loss / theft to the management device).
In general, according to the present invention, even if an IC card built in a mobile phone terminal that is away from the user due to loss, theft, or the like is usable by a non-contact interface, the use of the IC card It can be excellent in the defense against unauthorized use that it can be restricted.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a configuration example of a mobile phone terminal incorporating an IC card used in a mobile phone system according to a first embodiment of the present invention.
FIG. 2 is an explanatory diagram showing an outline of the mobile phone system according to the first embodiment of the present invention.
FIG. 3 is an explanatory diagram showing an example of a message format exchanged in the mobile phone system according to the first embodiment of the present invention.
FIG. 4 is an explanatory diagram showing a specific example of a security status stored in an IC card in the mobile phone system according to the first embodiment of the present invention.
FIG. 5 is an explanatory diagram showing a specific example of data stored in the management apparatus DB of the management apparatus in the mobile phone system according to the first embodiment of the present invention.
FIG. 6 is a flowchart showing a specific example of a processing procedure of the mobile phone terminal in the mobile phone system according to the first embodiment of the present invention.
FIG. 7 is a flowchart showing a specific example of a processing procedure of the mobile phone terminal and the IC card in the mobile phone system according to the first embodiment of the present invention.
FIG. 8 is a flowchart showing a specific example of processing procedures of the mobile phone terminal, the IC card, and the management device in the mobile phone system according to the first embodiment of the present invention.
FIG. 9 is an explanatory diagram showing an example of a screen displayed on the mobile phone terminal in the mobile phone system according to the first embodiment of the present invention.
FIG. 10 is an explanatory diagram showing an example of a screen displayed on the mobile phone terminal in the mobile phone system according to the first embodiment of the present invention.
FIG. 11 is an explanatory diagram showing an example of a screen displayed on the mobile phone terminal in the mobile phone system according to the first embodiment of the present invention.
FIG. 12 is an explanatory diagram showing an example of a screen displayed on the mobile phone terminal in the mobile phone system according to the first embodiment of the present invention.
FIG. 13 is a flowchart showing a specific example of the processing procedure of the IC card in the mobile phone system according to the first embodiment of the present invention.
FIG. 14 is an explanatory diagram showing an outline of a mobile phone system according to a second embodiment of the present invention.
FIG. 15 is an explanatory diagram showing an example of a message format exchanged in the mobile phone system according to the second embodiment of the present invention.
FIG. 16 is a flowchart showing a specific example of processing procedures of the mobile phone terminal, the IC card, and the payment terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 17 is a flowchart showing another specific example of processing procedures of the mobile phone terminal, the IC card, and the payment terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 18 is a flowchart showing still another specific example of processing procedures of the mobile phone terminal, the IC card, and the payment terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 19 is an explanatory diagram showing an example of a screen displayed on a mobile phone terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 20 is an explanatory diagram showing an example of a screen displayed on a mobile phone terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 21 is an explanatory diagram showing an example of a screen displayed on the mobile phone terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 22 is an explanatory diagram showing a modified example of the payment terminal in the mobile phone system according to the second embodiment of the present invention.
FIG. 23 is an explanatory diagram showing an example of communication between mobile phone terminals in the mobile phone system according to the second embodiment of the present invention.
[Explanation of symbols]
100, 110 'mobile phone terminal
101 arithmetic processing unit
102 Radio unit
103 Antenna
104 Display section
105 Key input section
106 Speech processing unit
107 microphone
108 Speaker
109 storage
110 Mobile terminal system program
111 Narrow Wireless Communication Department
112 Antenna
113 Biological information reading unit
114 IC card R / W section
115 IC card antenna
200 IC card
201 connection
202 arithmetic processing unit
203 Biometric authentication processing unit
204 Usage restriction processing part
205 storage unit
206 Terminal information
207 payment information
208 Security status
209 Settlement counter value
210 Biological information
300 base station
302 Telephone company
303 network
304 Wireless communication range
305 management device
1000 payment terminals
1001 Non-contact IC card R / W
1002 Payment server

Claims (18)

A mobile phone terminal capable of communicating with a management device via a base station and a network,
An IC card built in the mobile phone terminal has means for automatically setting use restriction of the IC card based on a signal from the management device. An IC card having a non-contact interface function is built-in, and this IC card is a mobile phone terminal that can be settled with a settlement terminal by the non-contact interface function,
The IC card of the mobile phone terminal automatically sets the use restriction of the IC card based on a signal based on a payment impossible determination by the payment terminal, a payment impossible determination by the mobile phone terminal, or a payment impossible determination of the IC card itself. A mobile phone terminal comprising means for performing In the mobile phone terminal according to claim 2,
The mobile phone terminal characterized in that the settlement impossibility determination is performed when the number of settlements with the IC card exceeds a predetermined allowable number or when the settlement amount with the IC card exceeds a predetermined allowable amount. The mobile phone terminal according to any one of claims 1 to 3,
The use restriction of the IC card described above restricts access to the IC card, restricts use of a predetermined application installed in the IC card, or restricts use of a predetermined data area in the IC card. A mobile phone terminal characterized by being able to select either of The mobile phone terminal according to any one of claims 1 to 3,
Biometric information reading means for reading biometric information for performing biometric authentication,
The IC card of the mobile phone terminal cancels the above-described use restriction setting of the IC card by a signal based on the identity verification by biometric authentication using the biometric information read by the biometric information reading means. A mobile phone terminal comprising means. An IC card built in a mobile phone terminal capable of communicating via a management device, a base station and a network,
An IC card comprising means for automatically setting usage restrictions on an IC card based on a signal from the management device. An IC card that is built in a mobile phone terminal and has a non-contact interface function, and can be settled with a payment terminal by this non-contact interface function,
Characterized in that it has means for automatically setting the use restriction of the IC card based on a signal based on the payment impossible determination by the payment terminal, the payment impossible determination by the mobile phone terminal or the payment impossible determination of the IC card itself. IC card. In the IC card according to claim 7,
The IC card is characterized in that the settlement impossible determination is performed when the number of settlements with the IC card exceeds a predetermined allowable number or when the settlement amount with the IC card exceeds a predetermined allowable amount. The IC card according to any one of claims 6 to 8,
The use restriction of the IC card described above restricts access to the IC card, restricts use of a predetermined application installed in the IC card, or restricts use of a predetermined data area in the IC card. An IC card characterized by being able to select either of The IC card according to any one of claims 6 to 8,
Storage means for storing biometric information used for biometric authentication;
A biometric authentication unit that compares the biometric information stored in the storage unit with the biometric information read by the biometric information reading unit of the mobile phone terminal and performs identity verification;
A means for canceling the setting of the restriction on the use of the above-mentioned IC card by a signal based on the fact that the identity is confirmed by the biometric authentication;
An IC card characterized by having. The IC card according to any one of claims 6 to 10,
What is claimed is: 1. An IC card comprising storage means for storing a security status for managing whether use of an IC card is restricted or permitted. The IC card according to any one of claims 6 to 10,
An IC card comprising a contact interface function and a non-contact interface function. A management device capable of communicating with a mobile phone terminal incorporating an IC card via a base station and a network,
Means for sending a signal for automatically setting the use restriction of the IC card to the IC card of the mobile phone terminal;
Means for storing and managing information on the use restriction of the IC card set in the IC card of the mobile phone terminal;
A management terminal comprising: A payment terminal that can communicate with an IC card with a non-contact interface function built in a mobile phone terminal and communicate with the non-contact interface function of the IC card,
A determination means for determining whether payment by the IC card is possible by exchanging information with the IC card of the mobile phone terminal;
A means for sending a signal for automatically setting the use restriction of the IC card to the IC card of the mobile phone terminal when the determination result by the determination means is a payment impossible determination;
A payment terminal, comprising: An IC card management method in a management apparatus capable of communicating with a mobile phone terminal incorporating an IC card via a base station and a network,
Transmitting a signal instructing the use restriction of the IC card built in the mobile phone terminal;
Based on the signal indicating the completion of processing transmitted from the mobile phone terminal after the setting of the use restriction of the IC card is completed, the information on the use restriction of the area corresponding to the IC card of the mobile phone terminal in the database is updated. And the steps to
An IC card management method comprising: An IC card management method in an IC card having a non-contact interface function built in a mobile phone terminal and a payment terminal capable of making a payment by communicating with the non-contact interface function of the IC card,
Determining whether payment by the IC card is possible by exchanging information with the IC card of the mobile phone terminal;
A step of sending a signal for automatically setting the use restriction of the IC card to the IC card of the mobile phone terminal when the determination result of the determining step is a settlement impossible determination; ,
An IC card management method comprising: A program for a mobile phone terminal that incorporates an IC card and can communicate with a management device via a base station and a network,
Receiving a signal instructing use restriction of the IC card sent from the management device, and determining the content of use restriction;
Based on the contents of the use restriction determined in the determining step, a step of sending a signal for automatically setting the use restriction of the IC card to the IC card;
Receiving a signal indicating processing completion sent from the IC card, and sending a signal indicating processing completion to the management device;
A program that causes a computer to execute. A program for an IC card built in a mobile phone terminal,
Setting the use restriction of the IC card based on a signal instructing the use restriction of the IC card coming from the outside of the IC card or based on a predetermined determination result of the IC card itself;
Comparing the stored biometric information with the biometric information read by the biometric information reading means, and performing identity verification;
The step of canceling the setting of the use restriction of the above-mentioned IC card when the identity is confirmed,
A program that causes a computer to execute.

Images