JP2005050263A - Portable terminal and service processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide proper notice to a user on a process performed by an IC module (a secure element having an IC card function) mounted on a portable terminal through non-contact communication with a service terminal. <P>SOLUTION: The secure element 100 has a control part 102 for performing the process related to service by the non-contact communication with the service terminal 120 installed in a prescribed place, and performing control to transmit information about a processing result or processing contents thereof or the like to the portable terminal 140. The portable terminal 140 has a process decision part 160 for deciding whether or not a change performed to data on a state related to the service by the process without requiring confirmation to the user satisfies conditions set to call user's attention, and performing control such that a display part 150 provides the notice to the user according to the decision that it satisfies the conditions. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  In the present invention, various types of mobile terminals can be used by attaching an IC card including an IC module to a mobile terminal (mobile phone, PDA, etc.) or incorporating an IC module that realizes the function of the IC card. It relates to technology that provides services. Here, the IC module is a module constituted by one or a plurality of IC chips, and includes a processor and a memory, and the processor realizes a predetermined function by executing a program stored in the memory. It suffices to have any specific structure.

  In recent years, IC card readers / cards have been installed at predetermined locations such as check-out counters at vending machines, shops, transportation entrances such as ticket gates at stations, entrances and exits of event venues such as concerts, and gates in offices and factories. A service terminal equipped with a writer is installed, and non-contact communication is performed with the IC card held by the user, settlement with electronic money, point services for purchasing products, payment for use of transportation, electronic ticket The technology that makes it possible to provide various services such as entrance processing, entrance / exit, and work management is underway.

  An IC module mounted on an IC card includes a CPU or MPU processor that performs logical operations or arithmetic operations, and a memory such as a ROM, RAM, or EEPROM that stores programs and data. In the case of an IC card that performs non-contact communication, in addition to these, a non-contact interface for performing non-contact communication with a reader / writer is provided. An IC module for an IC card is configured such that programs and important data are sealed in an IC chip so that important information and keys and logic for accessing the information cannot be seen from devices other than authorized devices. It is possible to store important information and perform cryptographic processing in the module.

  Recently, the memory mounted on the IC card has also become large, and since a plurality of applications can be stored simultaneously, a plurality of services can be used with a single IC card. . Thus, for example, if two or more applications such as a prepaid ticket for getting on and off a specific railway and an electronic ticket for entering a specific concert venue are stored in one IC card, There is no hassle of taking out a different IC card every time, and a single IC card can support various services.

  Furthermore, in addition to the non-contact interface with the reader / writer, the IC card has a contact interface for connecting to an external device, so that the IC card equipped with the IC module can be connected to a portable terminal such as a mobile phone or PDA. Can be used. Thus, the portable terminal to which the IC card is connected becomes a portable terminal equipped with an IC module. Alternatively, by incorporating the IC module itself into the mobile terminal (also in this case, the IC module and the part other than the IC module in the mobile terminal can be regarded as being connected via a contact interface), A portable terminal equipped with an IC module can be realized.

Patent Document 1 discloses a technique of using various electronic commerce services using a mobile phone equipped with an e-commerce module, and in particular, when performing a commercial transaction, a user inputs a password from a keypad of the mobile phone. The following inventions have been described with respect to such demands. That is, in the invention of Patent Document 1, password input is required when using as electronic money at the time of shopping, but password input when using as a commuter (commuting) commuter pass at the station ticket gate. The user can set whether or not to input a password so that the password is not necessary. When the password input is set to be unnecessary, the user can recognize the set state by turning on the indicator of the mobile phone.
JP 2003-125043 A

  One of the major advantages of the non-contact type IC card is that the service terminal can be processed by touch and go. For this reason, even in a non-contact type IC module-equipped mobile terminal, there is a high possibility that many password-free applications are applied.

  However, in the technique of Patent Document 1 described above, the user can know that the password is not required by turning on the indicator lamp. It is impossible to know at all whether such processing has been performed. Note that the contents and results of processing may be displayed on the display screen of the service terminal. However, when a touch-and-go processing speed is required, the user holds the mobile terminal with an IC module over the service. It is difficult to accurately read the display on the display screen while passing through the terminal side. Further, in the case of a mobile terminal with an IC module, unlike the case of a single IC card, it is possible to display the contents and results of processing using the display unit of the mobile terminal, but such a process is performed without password. If all the processes are displayed in detail, it is cumbersome and the user's attention is distracted, and there is a high possibility that they cannot be noticed even if unintended processes or errors are made.

  In view of the above-described background, the present invention relates to a process performed by an IC module mounted on a mobile terminal by non-contact communication with a service terminal on a mobile terminal connected to the IC module via a contact interface. An object of the present invention is to provide a mechanism that can appropriately notify a user using a user interface function such as a display unit.

  The portable terminal according to the present invention includes a connection interface means for connecting to an IC module that performs a process related to a service provided by the service terminal by non-contact communication with a service terminal installed at a predetermined location, and the process allows the IC to A determination means for determining whether or not a change made without requesting confirmation from the user regarding the status data related to the service managed by the module satisfies a condition set as calling for the user's attention; And user interface means for notifying the user in accordance with the determination that the condition is satisfied.

  With this configuration, when a user passes a predetermined place to use a certain service, when the IC module-equipped mobile terminal is held over the service terminal, processing is performed by non-contact communication between the service terminal and the IC module. As a result, the status data related to the service may be changed by this process. This change is performed without requiring the user to input a password or a PIN (personal identification number called personal ID number) before starting the process or requesting approval of the change before the process is confirmed. If the mobile terminal determines that the change satisfies the conditions set as alerting the user, the user is notified using the user interface function of the mobile terminal. For example, a user's attention is alerted by shining the display part of a portable terminal, making a sound, or using a vibration function.

  In the portable terminal according to the present invention, the IC module connected to the connection interface means is valid with respect to the service with respect to predetermined data of the data related to the processing in the IC module and a program for performing the processing. It is good also as a structure which controls so that access from other than the terminal which has authority may not be performed.

  With this configuration, since a terminal other than a terminal (for example, a service terminal that performs the service) that has a legitimate authority regarding the service cannot access the program in the IC module or highly confidential data, security such as e-commerce is required. It can also handle services. Note that information (for example, processing results or processing contents) sent from the IC module to the determination unit of the mobile terminal is only data that is permitted (relatively low confidentiality) by a program in the IC module. Is received by the mobile terminal via.

  The connection interface means in the portable terminal according to the present invention may detachably connect an IC card on which the IC module is mounted.

  As a result, the user of the mobile terminal can replace the IC card according to the service he wants to use, and when using any IC card, of the changes caused by the processing performed between the service terminal and the IC card. Alternatively, notifications can be received through the user interface function of the mobile terminal, selectively for those that need attention.

  The IC card may have a non-contact interface for performing the non-contact communication.

  As a result, the IC card can communicate with the service terminal via the non-contact interface, while transmitting predetermined information to the portable terminal via the connection interface means.

  The portable terminal according to the present invention may further include a non-contact interface unit for the IC module and the service terminal to perform the non-contact communication.

  With this configuration, even if the IC module only has an interface with the outside for the connection interface with the portable terminal, the non-contact interface means of the portable terminal can be used to connect with the service terminal via the interface. Non-contact communication can be performed.

  In the mobile terminal according to the present invention, the information received via the connection interface means includes information that can identify an application program that has executed the process related to the service in the IC module, and the determination means includes the change Judgment may be made using the conditions according to the application program that performed the above.

  As a result, the mobile terminal can identify which application program has executed the process to which the change to be determined is executed, so that the IC card is replaced and a different application program is executed, or When one of a plurality of application programs existing in the IC card is executed, a judgment criterion suitable for the executed application program, that is, the service used can be used.

  In the portable terminal according to the present invention, the information received via the connection interface means includes information capable of detecting a change content of the state data in the IC module, and the determination means includes the change content It may be determined whether or not the condition is satisfied.

  As described above, since the information capable of detecting the change content is transmitted from the IC module side, it is possible to determine whether or not to notify the user of the user's attention on the portable terminal side. Examples of the information that can detect the change contents include a set or difference of data before and after processing, or a type of processing (subtraction, addition, overwriting of a character string, etc.). When the received information is held, since the data in the state before the processing is held, only the data in the state after the processing may be transmitted from the IC module side.

  One example of the state data in the portable terminal according to the present invention is data of a monetary value currently owned by the user, depending on whether or not a process of reducing the monetary value has been performed. It may be determined whether or not the set condition is satisfied.

  As a result, for example, a prepaid ticket with a commuter pass is a service that passes through the ticket gate without touching and going, that is, passwordless, and the monetary value does not change. The user is not notified when getting off within the toll zone, etc., and is selectively notified to the user when processing that consumes monetary value is performed (such as getting on and off the commuter pass outside the zone) Can be performed. In addition, for example, in the point service, when the monetary value increases (saves and saves points), the user is not notified, and the processing that consumes the monetary value is performed (using points). To the user) can be selectively notified. Here, based on the degree of decrease in monetary value (eg, the amount of decrease is greater than or equal to the threshold, the ratio of the decreased amount to the remaining amount is greater than or equal to the threshold), the necessity of notification to the user is determined. Also good. As described above, the user's attention can be appropriately drawn about the service processing result.

  In the example in which the state data in the mobile terminal according to the present invention is data of monetary value currently owned by the user, depending on whether or not the monetary value is equal to or less than a threshold value as a result of the processing. It may be determined whether or not the set condition is satisfied.

  Thus, for example, if the minimum amount required to use the service (minimum amount of goods sold for vending machines, minimum fare for transportation, etc.) is set as a threshold, the balance will be less than the threshold By being notified to the user, the user can perform charge processing for increasing the balance in the IC module in advance before using the service next time. It is possible to avoid a situation where the flow of touch-and-go by the user is hindered.

  The threshold value may further include means for receiving information regarding a fee for the mobile terminal according to the present invention to use the service via a wireless network, and the threshold may be set based on the received information regarding the fee. Good.

  As a result, for example, even if the minimum amount required to use the service is revised, information on the new product sales amount, fare, etc. can be obtained via the wireless network, and the threshold is set based on the revised fee Therefore, the function of notifying the user in advance of the possibility of a shortage of balance can be effectively activated.

  In the example in which the state data in the portable terminal according to the present invention is data of monetary value currently owned by the user, and the predetermined place is a place where the user passes when getting on and off the transportation Predicts the amount of money needed to use the transport after passing through the predetermined location, and based on the predicted amount, the monetary value has decreased to the point where the user should be alerted A threshold for determining whether or not may be set.

  As a result, when the user passes through the place where the service terminal with the transportation facility is installed (for example, at the ticket gate) (when boarding or getting off), the user next passes the installation location of another service terminal of the transportation facility. (When getting off at the destination or at the place where you just got off) You can predict how much the monetary value in the IC module will be reduced, and set the threshold dynamically based on the prediction result By doing so, it is possible to notify the user of the possibility of a shortage of balance more accurately.

  The required amount of money is at least the information on the type of transportation, the monetary value consumed when the user uses the transportation, the day of the week when the consumption occurred, and the time when the consumption occurred. You may predict based on one.

  Thus, for example, the required amount can be predicted based on the minimum boarding fare that differs depending on which railway application program the user has executed, or the user's monetary value consumption trend (for example, when and how much amount is consumed) Or the like) and the necessary amount can be predicted by referring to this. The required amount may be predicted by comparing the user's consumption tendency with the current date and time.

  The above required amount is also based on data relating to the fare when the data relating to the fare of the transportation facility is obtained and the predetermined place where the user has passed is outside the section of the user's regular ticket. Thus, the prediction may be made by calculating the amount from the predetermined place where the user has passed to the place in the section of the regular ticket.

  As a result, for example, because the user uses the railway in a place that does not go regularly beyond the section of the regular ticket, even if the user does not have the necessary fee, the regular ticket The required amount up to the section is predicted, and the user is notified whether the balance in the IC module is sufficient. For this purpose, for example, data on fares can be acquired via a wireless network. Information specifying the station where the user got on and off and information specifying the section of the user's regular ticket may not be output outside the IC module as highly confidential information. In this case, the mobile terminal separately acquires information such as allowing the user to input information on the regular section or using the position information of the mobile terminal obtained by GPS or the like.

  The required amount of money is based on the data on the fare of the transportation facility and the data on the location where the user should go after passing the predetermined location, and based on the data on the fare from the predetermined location. In addition, it may be predicted by calculating an amount up to a place where the user is expected to get off from the transportation facility based on data regarding the place to go.

  Thereby, for example, by predicting the place where the user gets off from the schedule information of the user held by the mobile terminal (including the date and place information as the action schedule), the required amount up to that point is predicted, and the IC The user is notified whether the balance in the module is sufficient. It is also possible to predict the place of getting off by collating the schedule information with the current date and time. Further, the place where the user has boarded may be specified from schedule information, position information of the portable terminal, and the like.

  Another example of the state data in the portable terminal according to the present invention is data indicating a place where the user should go after passing the predetermined place, and the place to go as a result of the processing is newly determined or It may be determined whether or not the set condition is satisfied depending on whether or not the change has been made.

  Thus, for example, when a concert ticket or air ticket passes through the entrance of the concert venue or the check-in counter of the airline company, the service terminal installed there confirms the seats in the venue or on the plane (where to go) ) Is written in the IC module, if the seat information temporarily stored in the IC module or the portable terminal at the time of purchase matches the confirmed seat, the user is not notified and the seat at the time of purchase If the information is not given or the provisional seat is different from the confirmed seat, the user can be notified. Further, for example, when a service terminal installed there passes a place where a meeting to be attended in the building is written in the IC module when passing through the gate of the building, for example, to the selective user as well. Notification can be made.

  Still another example of the state data in the portable terminal according to the present invention is data on an action schedule after the user passes through the predetermined place, and the time of the action schedule is newly obtained as a result of the processing. It may be determined whether or not the set condition is satisfied depending on whether or not it is determined or changed.

  As a result, for example, when passing through the entrance of a company when going to work, when the service terminal installed there writes the time of the schedule determined on that day into the IC module, it is held in the IC module or mobile terminal from the previous day or earlier. If there is no change with respect to the time of the schedule, the user is not notified, and if the time has been changed or newly determined, the user can be notified.

  Still another example of the state data in the portable terminal according to the present invention is data on an event scheduled after the user passes the predetermined location, and the content of the event is new as a result of the processing. It may be determined whether or not the set condition is satisfied depending on whether or not it is determined or changed.

  As a result, for example, when passing through the entrance of an event venue, the service terminal installed there writes the confirmed contents of the event (the program, title, performer, panel, etc.) to the IC module. If there is no change to the contents of the event held in the module or portable terminal, the user is not notified, and if the contents are changed or newly determined, the user is notified. it can.

  The service processing method according to the present invention performs a process related to a service provided by the service terminal by non-contact communication between an IC module mounted on a portable terminal and a service terminal installed at a predetermined location. Whether the status data related to the service managed by the module is changed, and the change made without requesting the user to confirm the status data satisfies the conditions set as an alert to the user In response to the determination that the condition is satisfied, the user is notified by a user interface function provided in the portable terminal.

  It should be noted that all the matters described above regarding the mobile terminal according to the present invention are also applicable to the service processing method according to the present invention. In addition, the present invention can be implemented as a program for executing service processing stored in the memory of a mobile terminal, or as a storage medium for storing such a program. The determination performed in the mobile terminal or the service processing method according to the present invention includes at least one of a schedule management function, a memo pad function, an e-mail function, an Internet access function, and a mobile terminal location specifying function. It is also possible to refer to the information obtained from it.

  As described above, according to the present invention, in a non-contact IC module-equipped mobile terminal, even when the password-free setting is made to take advantage of the non-contact type of touch and go, the service terminal and the IC module If a process that should raise the user's attention is performed through this communication, this can be notified to the user by using the user interface function of the mobile terminal, so that there are no unintended processes or errors The user can easily check whether or not.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  In this embodiment, the IC module mounted on the portable terminal has tamper resistance required for the IC card function, and can keep the confidentiality of programs and important data confined in the IC module. It shall be possible. For this reason, the IC module in this embodiment is called a secure element (SE).

  FIG. 1 shows a configuration example of a secure element (SE) 100, a service terminal 120, and a mobile terminal 140 according to the present embodiment. The SE 100 may be mounted on an IC card that can be attached to and detached from the mobile terminal 140 or may be built in the mobile terminal. In the former case, the SE 100 constitutes an IC card, and in the latter case, the whole of the SE 100 and the portable terminal 140 is called a portable terminal.

  The SE 100 includes a control unit 102 that controls operation of application programs in the SE and communication with other devices, and a memory 104 that stores application programs for receiving services, data related to services, and the like. The control unit 102 represents a functional block, and is actually realized by a CPU, an EEPROM, and the like. The SE 100 also includes an interface (contactless I / F) 106 for performing contactless communication with the service terminal 120 and an interface (contacting I / F) 108 for connecting to the mobile terminal 140. The control unit 102 also has a function of transmitting information such as a processing result or processing content by an application program in the SE to the control unit 142 of the mobile terminal 140 via the contact I / F 108.

  The service terminal 120 is installed at a predetermined location such as a vending machine, a checkout counter, a ticket gate of a station, an airport check-in counter, a concert hall entrance, an office or a factory gate, and the application program in the service terminal. A control unit 122 that controls the operation of the device and communication with other devices, and a memory 124 that stores application programs for providing services, necessary data, and the like. The service terminal 120 also has an interface 126 that can perform contactless communication with the SE 100. When the user passes through a predetermined location, the SE 100 that is being carried close to the service terminal 120 allows the predetermined service to be performed. Can receive.

  The mobile terminal 140 includes a control unit 142 that controls the operation of the mobile terminal and communication with other devices, a memory 144 that stores application programs and necessary data for causing the mobile terminal to perform various operations, and a mobile phone network. A communication unit 148 that performs communication and a contact I / F 146 that can be connected to the contact I / F 108 of the SE 100 are provided. The portable terminal 140 also includes an operation unit 152 that accepts user operations using a keypad, buttons, microphones, and the like, and a display unit 150 that performs output to the user using a display screen of the portable terminal, an incoming call display LED, and other dedicated display lights. Is provided. The display unit 150 is not limited to an output for the user's vision, but may be an output for an auditory sense (speaker or headphone jack) or an output for a tactile sense (vibration function). As will be described in detail later, the processing determination unit 160 has a function of determining information such as processing results and processing contents received by the control unit 142 from the SE 100 and sending an output command to the display unit 150.

  FIG. 2 shows another configuration example of the present embodiment. The secure element (SE) 200 is the same as the SE 100 in FIG. 1 except that the non-contact I / F 106 is not provided. The portable terminal 240 is the same as the portable terminal 140 of FIG. 1 except that a non-contact I / F 246 is added. Service terminal 220 is the same as service terminal 120 in FIG. 1 except that contactless I / F 126 performs contactless communication with contactless I / F 246 of portable terminal 240. The SE 200 performs non-contact communication with the service terminal 220 using the non-contact I / F 246 of the portable terminal 240 via the contact I / Fs 108 and 146. The SE 200 may be mounted on an IC card that can be attached to and detached from the mobile terminal 240, or may be embedded in the mobile terminal. In the former case, the SE 200 constitutes an IC card, and in the latter case, the whole of the SE 200 and the portable terminal 240 is called a portable terminal.

  3 (a) and 3 (b) show the user about each process of the service performed by touch-and-go through the above-described cooperative communication between the SE, the service terminal, and the mobile terminal. Show how appropriate notifications are made. Here, even when consuming value (monetary value) in the past, processing was done without a password, so we took an example of a service where the value could decrease while the user was not conscious, explain.

  In cooperation with the SE, the mobile terminal in this example clearly notifies the user of the consumption of value during processing by contactless communication with the service terminal. For this reason, the result or content of the processing performed in the SE is notified to the mobile terminal after the non-contact communication processing is completed, and processing for consuming (subtracting) the value is performed in the processing determination unit 160 of the mobile terminal. If yes, the user's attention is urged by turning on the LED of the display unit 150 or the like. Even when deletion or invalidation processing is performed as equivalent to subtraction, a notification instruction (for example, an LED lighting instruction) is issued to the mobile terminal. As described above, even one service is notified according to the processing contents performed in the SE.

  For example, in the case of a railway ticket gate service, there is a ticket gate application (application program) in the SE, in which commuter pass data and electronic money are stored in a securely protected form. In this ticket gate application, there are cases where only the commuter pass data is used and there is a case where payment is accompanied outside the commuter pass section. When getting on and off in the regular section, it can be known on the mobile terminal side that value has not been consumed, so the LED of the mobile terminal remains off. On the other hand, when the ticket gate is settled when entering or leaving the ticket gate outside the commuter pass section, the mobile device can know that the value has been consumed. Make a clear display, such as letting the user know, and notify the user.

  For example, in the case of a service using a point card, there is a point application (application program) in the SE, and the data of the current point is stored in a secure protected form. In this point application, there are cases where points are accumulated and settled, and points are used to purchase at a discount price. When points are accumulated, the LED of the mobile terminal is kept off, but when payment processing is performed using points, a clear display such as lighting the LED in blue is given to the user To do.

  In FIG. 3A, processing A in which value is not consumed, such as ticket gate processing with a commuter pass or point accumulation processing, is performed between the SE application 112 (ticket gate application or point application) and the service terminal application 128. The case where it was performed by non-contact communication is shown. This non-contact communication is performed via the non-contact I / Fs 106 and 126. The control unit 102 controls execution of the application 112 in the SE and communication via the non-contact I / F 106, and the control unit 122 performs service. The execution of the application 128 in the terminal and the communication via the non-contact I / F 126 are controlled.

  The control unit 102 of the SE can extract information to be transmitted to the mobile terminal from processing performed by the application 112 that controls the operation of the control unit 102. Which information is to be extracted may be instructed by the application 112 to the control unit 102 or may be created in advance so that the control unit 102 extracts predetermined information. For example, the control unit 102 can acquire a value value that is securely written as a processing result, and can transmit this value to the control unit 142 of the portable terminal. In addition to this, a value value before processing may be acquired, and information including a value value before processing and after processing, or information on a difference between values before processing and after processing may be transmitted. Alternatively, the type of processing performed (subtraction or addition) and the amount (how much subtraction / addition) may be transmitted, or only the type of processing performed may be transmitted. In addition, when the type of processing that has been performed is sent, the type may be sent only when a change is made to the value value, or the type of processing that indicates no change when no change has been made. May be sent. Then, the control unit 142 of the mobile terminal receives the transmitted information, and the process determination unit 160 determines whether or not a process of consuming value has been performed based on the information received by the control unit 142. To do.

  In FIG. 3A, since the value is not consumed as a result of the process A, the display unit 150 of the portable terminal is not instructed. However, depending on the application 154 installed in the mobile terminal, there is a possibility that notification of the processing result may be requested even if value is not consumed. In that case, the control unit 142 of the mobile terminal, not the process determination unit 160, notifies the application 154 of the result information of the process A using the received information, so that the process determination unit 160 is the user. For example, information such as the current value value (after processing) is displayed on a display screen or the like different from, for example, the LED used to call attention. The display screen used for displaying the processing result information by the application 154 of the mobile terminal can be the same as the display unit 150 used by the process determining unit 160 to call the user's attention. Even in such a case, the display for calling the user's attention is more conspicuous than the normal display such as blinking the entire display screen.

  In FIG. 3 (b), processing B that consumes value, such as settlement processing for use exceeding a regular interval and processing using points, is an SE application 112 (ticket gate application or point application) and service terminal application 128. The case where it was performed by non-contact communication between is shown. The SE control unit 102 extracts information such as a value value, a change thereof, or a processing type of the application 112, and transmits the information to the control unit 142 of the mobile terminal. Based on the information received by the control unit 142, the mobile terminal process determination unit 160 detects that the process of consuming value has been performed, sends an instruction to the display unit 150 (for example, LED) of the mobile terminal, and Call attention. In addition to this, the control unit 142 of the mobile terminal notifies the mobile terminal application 154 of the result information of the process B based on the received information, so that the display screen of the mobile terminal Information such as the value of the value (after processing) and the payment amount (difference between the value before processing and the value after processing) may be displayed.

  The information sent from the control unit 102 of the SE to the control unit 142 of the portable terminal may include information that can identify the application program that executed the process in addition to the above-described processing result or information on the content. As a result, the process determining unit 160 of the mobile terminal receives the information that can detect that the process of consuming the value has been received, whether the value is consumed by the ticket gate application or the point application. It is possible to discriminate whether or not there is a difference, and it is also possible to vary the determination criterion depending on the application as will be described later. Such identification of application programs is effective not only when there are a plurality of application programs in one IC card but also when the user replaces and uses the IC card. For example, when different services such as a ticket gate application and a point application are mounted on different OSs, the IC card is different for each service, and the user has as many IC cards as the number of services to be used. When replacing these IC cards, the application program of the attached IC card can be identified on the portable terminal side. If one application (or service) corresponds to one IC card, the identification information of the IC card may be sent from the SE to the portable terminal.

  The control unit 102 of the SE exists independently of each application in the SE and can control these apps in common, so that the control unit 102 itself extracts predetermined information regardless of an instruction from the application 112. If a new application that performs a different service is added to the same SE, the new application is processed in the same way as when the processing result or content information of the existing application is transmitted to the mobile terminal side. Can be transmitted to the portable terminal side.

  Then, on the mobile terminal side, if the above processing result or content information is transmitted, regardless of the difference of the application executed in the SE or the difference of the SE connected to the contact I / F. Since the process determination unit 160 determines the received information based on a common determination criterion, the process determination unit 160 can be easily realized while maintaining the consistency of the notification that alerts the user. As a result, both the value consumption process in one application (for example, a ticket gate application) and the value consumption process in another application (for example, a point application) are alerted consistently. In other words, even if one IC card is removed and another IC card is inserted, it is maintained, so that the user does not have to be confused.

  On the other hand, when the SE control unit 102 extracts information in accordance with an instruction from the application 112, the processing result or content information received by the mobile terminal may be different depending on the application. Even in this case, if the process determination unit 160 of the portable terminal receives information that can identify the application program that has performed the process, a determination suitable for each application can be made.

  FIG. 4 illustrates the cooperative operation between the SE control unit 102 and the mobile terminal processing determination unit 160 described above, taking a ticket gate application as an example. First, when a user holds a mobile terminal equipped with an SE over a service terminal, the SE control unit 102 knows that the service terminal is installed at the ticket gate of the railway where the service terminal is located, and the ticket gate application corresponding to the service. (For example, the application 112) is activated (S401). Then, a ticket gate processing command is received by non-contact communication with the service terminal (S403), and the ticket gate processing (for example, the boarding station and commuter pass data is transmitted to the service terminal according to this command, and the service terminal returns in response thereto. (E.g., subtracting the settlement amount from the value for the railway in the SE) (S405). The reception of the ticket gate processing command and the ticket gate processing are performed by the application 112 under the control of the control unit 102, and information such as the processing result or processing content is sent to the mobile terminal side by the control unit 102 (S407). . The process determination unit 160 of the mobile terminal determines whether or not the value of the value in the SE has been reduced based on the received information (S409). When the subtraction is determined, the LED of the portable terminal is turned on to call the user's attention (S411) and the process ends. When it is determined that the subtraction is not the subtraction, the process ends without doing anything. In any case, the ticket gate result may optionally be displayed on the display screen of the portable terminal based on the received information before the end (S413).

  FIG. 4 shows an example in which notification is always made to alert the user as long as the process consumes value. However, if the number of notifications still seems annoying, it is assumed that notification is truly necessary. It is possible to narrow down the notification when it is done. The time when notification is truly necessary depends on the nature of the application and the like, and is set by a service provider or the user himself. Examples of various settings will be described below.

  First, even when the value is consumed, the display unit of the portable terminal is turned on when the value subtraction amount is large (for example, exceeding 500 yen), but when the subtraction amount is small (for example, 500 yen or less). There may be a determination method of keeping the light off. Similarly, even when the value is consumed, when the ratio of the subtraction amount to the total amount of the value is large (for example, subtraction of 501 yen or more with respect to the remaining amount of 5000 yen, that is, more than 10%), the display unit of the portable terminal is displayed. There may be a determination method of turning on the light but leaving it off when the subtraction ratio is small (for example, 10% or less). In such a method, the amount and ratio of subtraction serving as a threshold may be common to a plurality of applications, or may be set different for each application.

  If the value balance is lower than the threshold value, the display unit of the mobile terminal is turned on. If not, there is a determination method that the display is kept off. FIG. 5 illustrates a cooperative operation with the SE control unit 102 in the case where the mobile terminal includes a process determination unit 160 that employs this determination method, taking a ticket gate application as an example. For example, as shown in FIG. 6A, the threshold value used as a criterion for determination is held in a memory 144 that is referred to by the process determination unit 160. These numerical values can be arbitrarily set by the user for each service or process. It is also possible to set numerical values provided by service providers. Note that the threshold management table shown in FIG. 6A may be held as TLV structure data.

  When the user holds the mobile terminal carrying the SE over the service terminal, the SE control unit 102 knows that the service terminal is installed at the ticket gate of the railway where the service terminal is located, and for the A railway corresponding to the service. A ticket gate application (for example, the application 112) is activated (S501). Then, a ticket gate processing instruction is received by non-contact communication with the service terminal (S503), and the ticket gate processing (for example, the boarding station and commuter pass data is transmitted to the service terminal in accordance with this command, and the service terminal returns in response thereto. (E.g., subtracting the settlement amount from the value for the railway in the SE) (S505). Information such as the processing result or processing content is sent to the mobile terminal side by the control unit 102 (S507). At this time, when it is desired to change the judgment threshold value for each application as shown in FIG. 6A, the identification information of the processed application is also sent to the mobile terminal side. If it is desired to change the threshold depending on whether the process performed as shown in FIG. 6A is an entrance process or an entry process, process identification information is also sent to the mobile terminal side. If it is not desirable for security to output even the identification information of the entry / exit process, a threshold management table is adopted, for example, the larger one of the numerical values at the time of entry and at the time of entry. It should be created so that one threshold is used for one application.

  Based on the received information, the processing determination unit 160 of the mobile terminal knows that the application that has processed is a ticket gate application for A railway, and if security permits, the processing performed is the one at the time of ticket gate entry. Knowing that there is, if referring to the threshold management table of FIG. 6A based on these pieces of information, 150 yen is obtained as the threshold (S509). On the other hand, for example, if the application that has performed the process is a ticket gate application for the B railway and the security permits, it is known that the performed process is the one at the time of entering the ticket gate. Referring to the threshold management table in a), 120 yen is obtained as the threshold. These thresholds indicate, for example, that if the value of the value is not increased by performing a charge process for increasing the electronic money in the SE, the same type of service terminal cannot be used next time due to insufficient balance. It is set so that the user can be notified. In this example, the threshold when entering the ticket gate (when getting off) is based on the minimum boarding fare required when entering the next railway (ride), What is necessary is just to set based on the value which estimated appropriately the additional fare required when getting off.

  Now, based on the information received on the portable terminal side, the process determining unit 160 determines whether or not the value balance in the SE has fallen below the threshold set as described above by the ticket gate process (S511). . If it is determined that the value is below the threshold, the LED of the mobile terminal is turned on to call the user's attention (S513), and the process ends. If it is determined that the value is not below the value, the process ends without doing anything. In any case, the ticket gate result may be optionally displayed on the display screen of the portable terminal based on the received information before the end (S515).

  In addition, if it is determined that the threshold value is below the threshold, the user's attention is raised as described above, and the online charge application is automatically started at the end so that the user can immediately perform the necessary charge processing. Also good. The charging process can also be performed by contactless communication between the service terminal that performs charging and the SE, but can also be performed by the SE communicating with a remote bank service terminal, for example, via the communication unit 148 of the mobile terminal. This is called charge processing.

  In addition, the threshold illustrated in FIG. 6A may need to be changed due to the revision of the railway fare, but the processing determination unit 160 of the mobile terminal is connected to the wireless network via the communication unit 148. It is also possible to automatically change the data such as the revised minimum boarding fare by obtaining communication with the fare database server.

  It is also possible to dynamically calculate a threshold value as a criterion for determination so as to be a value customized by the user (S509). In this case, an example of calculated data or data serving as a basis for the calculation is shown in FIG. The data in FIG. 6B is also held in the memory 144 used by the process determination unit 160.

  In one example, the user's value consumption tendency is stored as a management table, and the threshold value is dynamically updated. For example, as shown as average consumption value in FIG. 6B, an average value consumption value is held for each day of the week and time zone. This data is stored, for example, by storing in the memory 144 date and time information obtained from a clock inside the portable terminal and information of the amount of value consumed when processing result or content information is received from the SE. It is obtained by calculating the average value of the consumption for the past several weeks or months for each day of the week and time. Note that the value consumed in the ticket gate entry process is the amount of the additional fare, but the fare for the boarding / alighting section obtained by adding this to the minimum boarding fare drawn during the entry process may be stored instead. Then, the process determination unit 160 that operates according to FIG. 5 reads out the average value of the value consumption amount for the corresponding day of the week and time period based on the date and time indicated by the clock inside the mobile terminal at the time of (determination), Based on the above, it is possible to set a threshold value as a criterion for determination. When the current process is a ticket gate entry process, referring to FIG. 6A, a threshold based on the lowest boarding fare for the same railway is set, and when the current process is a ticket gate entry process, FIG. Referring to b), a threshold value based on an additional fare that is likely to be required when getting off the vehicle may be set.

  Moreover, as shown as a high-frequency boarding / exiting section in FIG. 6 (b), a set of stations that boarded and exited a plurality of times and the top several data of the required amount may be stored. For example, every time the user exits the ticket gate entry process at the service terminal, the data includes information on the boarding station and the getting-off station obtained there (there is no security problem even if these information are output outside the SE). In this case, the data is transmitted from the SE side to the mobile terminal side, stored in the memory 144, and obtained by counting how many times the same set of boarding stations and getting-off stations is stored for the past several weeks or months. It is done. In addition, the amount of value (additional fare) consumed during the ticket gate entry process when the corresponding boarding / exiting may be stored as the amount of the necessary fare corresponding to the set of boarding / exiting stations. The fare for the boarding / exiting section obtained by adding the minimum boarding fare may be stored, or the fare database may be referenced to check the fare for the corresponding boarding / exiting section. Then, the process determining unit 160 operating according to FIG. 5 obtains information on the boarding station that the SE obtains from the service terminal (if there is no security problem) and transmits it to the mobile terminal side when the ticket gate process performed is an entrance process. The high frequency boarding / exiting section shown in FIG. 6B is searched using as a key, and a threshold value serving as a judgment criterion is set based on the amount of the required fare corresponding to the section with the highest frequency among the matching ones. it can.

  As another example, the threshold value may be dynamically updated in cooperation with other mobile terminal internal or online registration data. For example, it is possible to link with a fare database stored in a remote database server that can be accessed via the memory 144 or the communication unit 148 of the portable terminal. That is, by referring to the fare database based on the regular section indicated by the commuter pass information in FIG. 6B and the information on the station where the user is currently (at the time of judgment), entry / exit outside the regular section In this case, the amount from the boarding station / get-off station to the regular section can be calculated. By setting the threshold according to this amount, the user can know at a glance whether or not the remaining amount of value is sufficient to return to the regular interval when using a station away from the regular interval. Here, a boarding station / alighting station is a mobile terminal obtained by the information if the information of the station where the user holds the service terminal is sent from the SE to the mobile terminal, and by GPS or the like otherwise. The position information can be specified.

  In addition, when the mobile terminal has a schedule management application, a notepad application, an e-mail application, or the like, it is possible to link with date and location information existing in data managed by these applications. For example, the process determination unit 160 of the mobile terminal searches the date and time and location information such as the schedule using the date and time indicated by the clock inside the mobile terminal as the key (at the time of value consumption by the ticket gate entrance process), If there is, the required amount can be calculated by predicting the exit station from the corresponding location information and referring to the fare database. By setting the threshold value according to this amount, the user can know at a glance whether or not the remaining amount of value is sufficient for the entry process at the ticket gate of the station to be headed. The information of the boarding station used for calculating the amount is obtained by the information when the information on the station where the user holds the SE is sent from the SE to the portable terminal, and by the GPS or the like otherwise. It can be specified by the information included in the position information or schedule of the mobile terminal.

  As described above, by clearly informing the user that the value has been subtracted, the user's anxiety that the value may have been used without notice is lost. If subtraction is performed when a process that should not be subtracted is intended, it can be immediately recognized that the payment is strange. In addition, by clearly informing the user that the value balance has fallen below the threshold and urging the user to charge, for example, the number of users who are stopped by the ticket gates can be reduced, and the ticket gates can be passed smoothly. By notifying that the balance is insufficient according to the threshold value, usability is improved.

  In the following, in the service that performs entrance / entry processing, this incidental processing is also performed in the case of performing additional processing that is not essential for the processing for permitting entrance / entry (thus, the user may not be conscious). Thus, a description will be given by taking as an example a service in which data that is a guideline for the next action for the user may be changed. In the following example, a character string, not a value value or the like, is transmitted from the SE control unit 102 to the control unit 142 of the mobile terminal. Are matched, and the matching / mismatching of corresponding portions of the character string is verified.

  For example, in order to pass through an entrance to an event venue or an airport check-in counter (entrance processing), it is necessary to indicate that a ticket has been purchased in advance. For this reason, there is a ticket application in SE, and ticket data (information that can specify the date and time of the event or flight, the name of the event or flight, the location of the venue or the name of the boarding airport, etc.) is securely protected. Stored in the form. FIG. 7 shows an example of an operation performed by the processing determination unit 160 of the mobile terminal according to the present embodiment in cooperation with the SE control unit 102 in such a ticket entry service.

  First, when a user holds a mobile terminal equipped with an SE over a service terminal, the SE control unit 102 activates a ticket application (for example, the application 112) corresponding to the service provided by the service terminal (S701). Then, a ticket processing command is received by contactless communication with the service terminal (S703), and ticket processing (for example, ticket data is transmitted to the service terminal in accordance with this command, and accompanying data returned from the service terminal in response to this is transmitted. Receiving) (S705). The service terminal determines whether to allow or reject the user's entry based on the ticket data transmitted from the SE. The accompanying data returned from the service terminal includes, for example, information about the seats finally assigned to the user (this is called location information), and the final confirmed performance or performer in the event. Information, and finally confirmed flight number information in the case of an airplane (these are referred to as content information). The accompanying data received via the non-contact I / F 106 may be written in the memory 104 in the SE. However, the non-sensitive data among the accompanying data is obtained by using the contact I / F 108 as processing result or content information. Is transmitted to the control unit 142 of the portable terminal (S707).

  Based on the received information, the mobile terminal processing determination unit 160 has changed either the location information or the content information already written in the memory 144 of the mobile terminal (at the time of ticket purchase or appropriately thereafter). It is determined whether or not (S709). Even when the location information and the content information are not written in the memory of the portable terminal and are written for the first time by the ticket processing, they are handled in the same manner as when the written information is changed. If it is determined that there is a change, the LED of the mobile terminal is turned on to call the user's attention (S711), and the process ends. If it is determined that there is no change, the process ends without doing anything. In any case, before the end, optionally, the ticket processing result (for example, accompanying data sent back to the SE from the service terminal and transmitted to the mobile terminal) is displayed on the display screen of the mobile terminal. It does not matter (S713).

  The control shown in FIG. 7 described above can be applied to an entrance service that does not use a ticket. For example, a service that transmits data specifying a user securely stored in the SE to a service terminal installed at a gate of a visited building, and allows only a user who is scheduled to visit to enter the building. Is mentioned. At this time, if the service terminal returns to the SE of the user permitted to enter, accompanying data indicating in which room in the building the meeting that the user is scheduled to attend is to be returned, The process determination unit 160 of the mobile terminal that has received the accompanying data from the SE turns on the LED or the like of the mobile terminal when the location information already written in the memory of the mobile terminal is changed by the accompanying data. The user can be alerted, and can remain off when there is no change or new information.

  Also, for example, in order to pass through an entrance / exit of a place where entry / exit management is required, such as an office or factory, it is necessary to indicate that the employee is permitted to enter the room, for example. In such a situation, it is convenient to perform work management as well as entrance / exit management with the same application. For this reason, it is assumed that a work management application exists in the SE and employee data is stored in a secure protected form. FIG. 8 shows an example of the operation performed by the process determination unit 160 of the portable terminal according to the present embodiment in cooperation with the SE control unit 102 in such an attendance management service using employee cards.

  First, when a user holds a mobile terminal equipped with an SE over a service terminal, the SE control unit 102 activates a work management application (for example, the application 112) corresponding to the service provided by the service terminal (S801). Then, on the basis of the employee data transmitted by the SE through contactless communication with the service terminal, the service terminal executes entry / exit processing and attendance / exit management (S803), and the determined schedule for the employee on the day is associated data. Is transmitted from the service terminal to the SE (S805). This accompanying data is transmitted to the control unit 142 of the portable terminal as processing result or content information (S807), and the processing determining unit 160 of the portable terminal is already written in the memory 144 of the portable terminal by this accompanying data. It is determined whether or not the schedule information (in particular, the time information here) has been changed (S809). Even when the time information is not written in the memory of the portable terminal and is written for the first time due to the reception of the accompanying data, it is handled in the same manner as when the written information is changed. If it is determined that there is a change, the LED of the mobile terminal is turned on to call the user's attention (S811), and the process ends. If it is determined that there is no change, the process ends without doing anything. In any case, the received work management processing result or accompanying data may optionally be displayed on the display screen of the portable terminal or the like before the end (S813).

  As described above, when the determination target is different depending on each application, the determination method may be different, and the process determination unit 160 may perform different operations for each application, but may perform operations common to various applications. Is possible. For example, the process determining unit 160 receives data before processing and data after processing from any application of SE, and compares the numerical value before processing with the numerical value after processing when the data is a numerical value. Thus, it is determined whether or not the value subtraction process has been performed, and when the data is a character string, by comparing the character string before the process with the character string after the process, What is necessary is just to judge whether information, such as a place, content, time, etc. were changed. The process determining unit 160 can determine whether the received data before and after the process is a numerical value or a character string based on, for example, a data attribute flag included in the information received from the SE. As described above, if the operation of the process determining unit 160 is shared by the process of extracting and comparing the data sets before and after the process, it is appropriate for a large number of applications even in a portable terminal having a low processing capacity. User notification can be realized.

  The embodiment described above is merely an example, and the present invention is not limited to the above-described embodiment, and can be implemented with various modifications and applications.

  As described above, when the portable terminal according to the present invention is used, the connected IC module performs various processes by non-contact communication with the service terminal, and the change caused thereby should alert the user. In some cases, the user interface function of the mobile terminal is used to clearly notify the user, which is useful, for example, for electronic payment, entrance / entry processing, transportation use settlement processing, and the like.

The figure which shows the structural example of the secure element (SE) which concerns on embodiment, a service terminal, and a portable terminal The figure which shows the other structural example of SE which concerns on embodiment, a service terminal, and a portable terminal The figure which shows the mode of the cooperative communication between SE, the service terminal, and a portable terminal in the case of the process A (process not to notify) The figure which shows the mode of the cooperation communication between SE in the case of the process B (process used as notification), a service terminal, and a portable terminal The figure which shows the operation example of the control part of SE in the case of notifying a user according to consumption of value, and the control part of a portable terminal The figure which shows the operation example of the control part of SE in the case of notifying a user according to the balance of value, and the control part of a portable terminal The figure which shows the example of the table which manages the information of the threshold value compared with the balance of value The figure which shows another example of the table which manages the information of the threshold value compared with the balance of value The figure which shows the operation example of the control part of SE, and the control part of a portable terminal in the case of performing a user notification according to the change of a place or the content The figure which shows the operation example of the control part of SE in the case of performing a user notification according to the change of time, and the control part of a portable terminal

Explanation of symbols

100, 200 Secure element (SE)
102 control unit 104 memory 106 contactless interface 108 contact interface 112 application program 120, 220 service terminal 122 control unit 124 memory 126 contactless interface 128 application program 140, 240 portable terminal 142 control unit 144 memory 146 contact interface 148 communication unit 150 display Unit 152 operation unit 154 application program 160 process determination unit

Claims (20)

A connection interface means for connecting to an IC module that performs processing related to a service provided by the service terminal by non-contact communication with a service terminal installed in a predetermined place;
Whether the change made without requesting confirmation from the user for the status data related to the service managed by the IC module by the processing satisfies a condition set to alert the user Determining means for determining based on information received via the connection interface means;
A portable terminal comprising user interface means for notifying a user in response to a determination that the determination means is satisfied.   The IC module connected to the connection interface means receives data from a terminal other than a terminal having a right for the service with respect to predetermined data of the data related to the processing in the IC module and a program for performing the processing. The mobile terminal according to claim 1, wherein the mobile terminal is controlled so as not to be accessed.   2. The portable terminal according to claim 1, wherein the connection interface means detachably connects an IC card on which the IC module is mounted.   The portable terminal according to claim 3, wherein the IC card includes a non-contact interface for performing the non-contact communication.   2. The portable terminal according to claim 1, further comprising non-contact interface means for the non-contact communication between the IC module and the service terminal. The information received via the connection interface means includes information that can identify an application program that has executed the processing related to the service in the IC module,
2. The mobile terminal according to claim 1, wherein the determination unit is configured to perform determination using the condition according to the application program that has performed the change. The information received via the connection interface means includes information capable of detecting the change contents of the state data in the IC module,
The mobile terminal according to claim 1, wherein the determination unit determines whether the change content satisfies the condition.   The data of the state is data of a monetary value currently owned by the user, and it is determined whether or not the set condition is satisfied depending on whether or not a process for reducing the monetary value has been performed. The mobile terminal according to claim 1, wherein the mobile terminal is determined.   The data of the state is data of a monetary value currently owned by the user, and whether or not the set condition is satisfied depending on whether or not the monetary value is equal to or less than a threshold value as a result of the processing. The mobile terminal according to claim 1, wherein the mobile terminal is determined. Means for receiving information on a fee for using the service via a wireless network;
The mobile terminal according to claim 9, wherein the threshold is set based on the received information related to the fee. The predetermined place is a place where the user passes when getting on and off the transportation,
Means for predicting the amount of money required for a user to use the transportation facility after passing the predetermined location;
The mobile terminal according to claim 9, wherein the threshold is set based on the predicted amount.   The amount of money based on at least one of the information of the type of transportation, the monetary value consumed when the user uses the transportation, the day of the week when the consumption occurred, and the time when the consumption occurred The mobile terminal according to claim 11, wherein the mobile terminal is predicted. Means for obtaining data relating to the fare of the transportation means;
When the predetermined place where the user has passed is outside the section of the user's commuter pass, from the predetermined place where the user has passed to a place within the section of the commuter pass The mobile terminal according to claim 11, wherein the amount is predicted by calculating the amount. Means for obtaining data relating to the transportation fare and data relating to a location to which the user should go after passing the predetermined location;
Predicting the amount of money by calculating the amount to the place where the user is expected to get off from the transportation based on the data about the fare from the predetermined place based on the data about the place to go. The mobile terminal according to claim 11.   The state data is data indicating a place where the user should go after passing the predetermined place, and is set according to whether or not the place to go is newly determined or changed as a result of the processing. The mobile terminal according to claim 1, wherein it is determined whether or not a predetermined condition is satisfied.   The data of the state is data on an action schedule after the user passes through the predetermined place, and the setting is performed depending on whether the time of the action schedule is newly determined or changed as a result of the processing. The mobile terminal according to claim 1, wherein it is determined whether or not a specified condition is satisfied.   The data of the state is data about an event scheduled after the user passes through the predetermined location, and depending on whether the content of the event is newly determined or changed as a result of the processing, The mobile terminal according to claim 1, wherein it is determined whether or not a set condition is satisfied. A service processing method executed on a mobile terminal,
Processing related to the service provided by the service terminal by non-contact communication between the IC module mounted on the portable terminal and the service terminal installed in a predetermined place;
The status data related to the service managed by the IC module is changed by the processing,
Determining whether a change made without requiring confirmation from the user for the data in the state satisfies a condition set to call the user's attention;
A service processing method comprising: notifying a user by a user interface function of the portable terminal in response to a determination that the condition is satisfied. The mobile terminal has at least one of a schedule management function, a notepad function, an e-mail function, an Internet access function, and a mobile terminal location specifying function,
19. The service processing method according to claim 18, wherein the determination is performed with reference to information obtained from the at least one function. A program for executing a service process stored in a memory of a mobile terminal,
Receiving information from an IC module that performs processing related to a service provided by the service terminal by non-contact communication with a service terminal installed in a predetermined place;
Whether the change made without requesting confirmation from the user for the status data related to the service managed by the IC module by the processing satisfies a condition set to alert the user Based on the received information,
A program for notifying a user by a user interface function provided in the portable terminal in response to a determination that the condition is satisfied.

Images