JP2006221477A - Portable communication terminal device, security system for the same, and security method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a low-power consumption portable communication terminal device requiring no user operation for a security lock and to provide a security system and a security method for the portable information terminal device. <P>SOLUTION: For ensuring security of the portable information terminal device 100 and preventing illegal use and the like by a third person in the case of mislaying, short-range communication from a radio tag transmission/reception part 110 in the portable information terminal device 100 to/from a radio tag 200 equipped in the vicinity of a possessor is carried out in operation of a function, and only when authentication is verified, use of the function is allowed. When a communication range between the radio tag 200 and the portable information terminal device 100 is set to several meters, use of the function is locked in operation by the third person, for example, illegally obtaining the device 100 because the radio tag 200 is separated in the distance. Since radio communication for authentication is carried out only in operation of the function, the radio communication frequency can be reduced and consequently, power consumption is suppressed. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a mobile communication terminal device such as a mobile phone, and more particularly to a security protection system in which a small communication module called an IC tag, a wireless tag or the like and a mobile communication terminal device are combined.

  Protecting personal information in portable communication terminal devices and communication systems that are becoming increasingly multifunctional is a very important issue. In addition, in an electronic money function that can be used, some functions have been installed because personal authentication and security lock are indispensable functions when using electronic money.

  However, the actual identity authentication, security lock function, and the like that often require the user to perform some kind of operation, such as entering a password when unlocking or unlocking, are often used. In addition, fingerprint authentication is becoming a simple operation recently, but it is not only a big deal in fingerprint information reading and information processing, but also user operation does not change, so it is not used even if functions are installed Is the actual situation.

  In addition, the mobile information terminal device periodically accesses the wireless card possessed by the user to authenticate the user, ensuring security and preventing damage or loss due to misuse or theft by a third party. A portable information terminal device is also known (see Patent Document 1).

FIG. 7 is a diagram showing a security system for a mobile phone having the above-described functions.
The security system includes a mobile phone 10 and a wireless card 20. The wireless card 20 includes a storage unit 21 that stores authentication data and a security control unit 22 that transmits the authentication data in response to an authentication request. The mobile phone 10 includes a storage unit 11 that stores verification data and a security control unit 12 that periodically transmits an authentication request to the wireless card 20. Authentication data is transmitted from the wireless card 20 to the authentication request within a predetermined time. When the response is received, the received authentication data is collated with the collation data stored in the storage unit 11, and the function of the mobile phone 20 is limited when collation cannot be obtained.

For example, when the user has the mobile phone 10 and the wireless card 20 at the same time, the mobile phone 10 can periodically receive the verification data from the wireless card 20, so the function of the mobile phone 10 is not limited. However, when the mobile phone 10 is illegally acquired, the telephone function is limited, so that the mobile phone can be illegally used and security can be ensured.
JP 2001-352579 A

  The conventional mobile phone shown in FIG. 7 is configured to periodically access a wireless card, and is convenient in that it does not require a user to perform a special operation to ensure security. Since a mobile phone periodically transmits a radio signal, the power consumption for this is large, and this has the great drawback that the continuous use time of a mobile phone using a battery power source is shortened.

  An object of the present invention is to solve the above problems, and provide a mobile communication terminal device, a security system for a mobile information terminal device, and a security method that do not require a user operation for a security lock and can reduce power consumption. For the purpose.

  The portable information terminal device of the present invention is a portable information terminal device that can set the operation of a specific function to a prohibited state, and communicates with an authentication wireless tag during an input operation of the specific function from an input operation unit, A wireless tag transmission / reception unit that acquires information of a wireless tag as an authentication key, and a control unit that cancels the prohibition state of the operation of the specific function when authentication by the authentication key is established, After the operation of the specific function is completed, the operation of the function is controlled to be prohibited, or the operation of the function is controlled to be prohibited after a predetermined period. In addition, a specific function for prohibiting the operation can be set by the user, and a plurality of types can be registered as authentication wireless tags.

  A security system for a portable information terminal device according to the present invention is a security system for a portable information terminal device that can release the setting of the operation of a specific function of the portable information terminal device to a prohibited state by authentication with a wireless tag. The information terminal device communicates with an authentication wireless tag at the time of input operation of the specific function from the input operation unit, acquires a wireless tag information as an authentication key, and performs authentication by the authentication key. A control unit that cancels the prohibition state of the operation of the specific function when established, and the wireless tag includes a transmission / reception unit that transmits information of the authentication key in response to an authentication request from the wireless tag transmission / reception unit It is characterized by that.

  A security method for a portable information terminal device according to the present invention is a security method for a portable information terminal device capable of setting the operation of a specific function to a prohibited state, and performing an authentication request to a wireless tag during an input operation of the specific function A step of performing authentication processing based on wireless home information as an authentication key of a response from the wireless tag, and a step of releasing the prohibition state of the operation of the specific function only when authentication is established as a result of the authentication processing. , Including.

(Function)
In order to ensure the security of portable information terminal devices and prevent misuse by third parties when misplaced, authentication was established by short-range communication with a wireless tag provided near the owner of the portable information terminal device at the time of operation Only available when By setting the communication distance between the wireless tag and the portable information terminal device to be about several meters, the use of the function is locked when the distance from the wireless tag is increased at the time of operation by a third party or the like who has been illegally picked up. The number of wireless communications for authentication can be reduced, and power consumption is suppressed.

  According to the present invention, the trigger for communication for authentication with the wireless tag is generated due to the key operation of the portable information terminal device when using a function such as telephone call. User operation for securing only is not necessary, security lock processing is executed unconsciously, and transmission of radio signals can be minimized, so that power consumption can be suppressed.

  In addition, the security lock release upon successful authentication by the wireless tag improves the convenience of the user by enabling the use of the released function for a certain period of time, and the wireless tag triggered by the key operation of the function Communication is also stopped, so that wasteful communication can be reduced and current consumption can be reduced.

  Furthermore, by enabling the setting of turning on / off the security lock function using the wireless tag according to the function of the portable information terminal device (for example, turning on the security lock function for mail viewing and turning off the security lock function for other operations) It is possible for the user to arbitrarily determine the level of security by making the authentication with a wireless tag unnecessary.

  In addition, the wireless tag information of the portable information terminal device can be stored and rewritten, and by appropriately allowing the user to register and set as an authentication tag, it is possible to cope with the loss of the wireless tag serving as the authentication key. By having a plurality of wireless tags as authentication tags, it is possible to install the portable information terminal device for each personal use place.

An embodiment of a portable communication terminal device having a wireless tag transceiver according to the present invention, a security system for a portable information terminal device, and a security method will be described below.
(Description of configuration)
FIG. 1 is a diagram showing a configuration of a portable information terminal device and a security system according to the present embodiment.
This embodiment includes a portable information terminal device 100 and a wireless tag 200. The portable information terminal device 100 includes an antenna 101, a modem unit 102, a memory 103, a display unit 104, a key input operation unit 105, a control unit 106 that processes signals from each unit, a speaker 107, a microphone 108, an audio processing unit 109, and the like. In addition to the basic components for realizing the telephone function, the wireless tag transceiver 110 for the wireless tag 200 related to ensuring the security of the portable information terminal device 100 is provided.

FIG. 2 is a diagram showing the configuration of the wireless tag 200 and the wireless tag transceiver 110 of the present invention.
The wireless tag 200 is configured as a communication module including a wireless communication IC 201 and a wireless communication antenna 202 as a basic configuration. In the wireless communication IC 201 portion of the wireless tag 200, a nonvolatile memory 203 for storing data, an RF circuit 204 for wireless communication, and a logic circuit 205 that connects them are integrated.

  Here, the wireless tag 200 has an authentication module function by the nonvolatile memory 203 and the logic circuit 205, and identification information unique to the wireless tag 200 is stored in the nonvolatile memory 203. Note that the communication antenna 202 of the wireless tag 201 employs either a configuration integrated on an IC chip or a configuration external to the IC.

  The wireless tag transceiver 110 built in the portable information terminal device 200 is a wireless tag reader that receives information from the authentication module of the external wireless tag 200. When reading the data of the wireless tag 200, the wireless tag transceiver 110 outputs a calling signal from the receiving device 110 and transmits a radio wave from the antenna 112 connected to the receiving device 110. When the radio tag 200 receives this radio wave with the antenna 202, a power generation unit (not shown) generates power by electromagnetic induction and supplies power to the IC circuit by operating the radio wave, and the logic circuit 205 operates the authentication in the nonvolatile memory 203. Information is read out and transmitted wirelessly as a response wave to the call from the receiving device 110.

  The radio tag transceiver 110 transmits the radio wave and receives the response wave based on a command from the control unit 106, and the received information is transferred to the control unit 106. The control unit 106 has a collation function for storing received information in the memory 103 in accordance with a program, or comparing / matching information with already stored wireless tag information or the like.

  The control unit 106 further controls other operations of the portable information terminal device 100 according to a predetermined program. That is, the control unit 106 controls the operation of each circuit by an operation signal input from the key input operation unit 105, and performs communication control, display control of the display unit 104, read / write control of the memory 103, and transmission / reception control of the wireless tag transceiver 110. And the following functions. That means

(1) By user operation from the key input operation unit 105, making and receiving calls, videophone functions, sending and receiving mails via the Internet, reading mails, browsing home pages, outputting phone book data, editing and browsing phone books, Control function such as schedule function, credit processing function,
(2) Similarly, a setting function for selectively or totally prohibiting (security locking) the activation and operation of the function (1) of the portable information terminal device by the user's key operation,

(3) A function that does not respond to the key operation related to the security locked function by the user's key operation, and displays the use prohibition display or alarm display by setting,
(4) When a user operates a key, a trigger signal is sent to the wireless tag as a trigger to collect authentication key information (identification information, etc.) recorded in the wireless tag. A function for detecting a match with authentication key information (establishment of authentication), a function for detecting whether or not a response from the wireless tag is received,

(5) A function for maintaining a security lock when authentication is established or a response from the wireless tag is not received,
(6) A function that unlocks the security lock of the function when authentication is established and responds to the use operation of the function,
(7) A function for setting the security lock state again after the operation of the function is completed after the security lock is released due to the establishment of the authentication.

(Description of operation)
FIG. 3 is a flowchart showing the operation and method of the portable information terminal device 100.
The user selects and sets a security lock function in advance from the key input operation unit 105 of the portable information terminal device.

  When the user performs a key operation or the like for a function that has been set to the security lock state, for example, mail browsing, telephone directory browsing, or telephone call, the control unit 106 starts the operation of the flowchart shown in FIG. 3 regarding the operation of the function. Is done.

  When a key input operation such as activation of a function of the portable information terminal device 100 is performed (s301), the control unit 106 confirms whether the function is a security lock setting target (s302).

  When the function is a security lock setting target, the control unit 106 instructs the wireless tag transceiver 110 to collect data for authentication by the wireless tag 200.

  The wireless tag transceiver 110 transmits an authentication request radio wave (s303), waits for reception of a response wave (s304), and receives wireless tag tag information such as identification information from the wireless tag 200 (s304). Forward to.

The control unit 106 reads and compares the tag information received from the wireless tag transceiver 110 and the verification information registered in the memory 103 in advance (s305), and determines whether or not they match (s306). If the information matches, the authentication is established, the security lock state of the function is released (security lock is released) (s307), and the portable information terminal device responds to the user's operation (s308).
Thereafter, the control unit 106 responds to the operation until an end operation related to the function such as application termination is detected (s308, s309). When the end operation is detected, the security lock setting state of the function is again detected. Return to (s310).

  In the above-described operation, when the function of the user operation is not set as the security lock target in the determination step s302 of whether or not the user is in the security lock state at the time of user operation, and The process proceeds to step s308 and the operation is permitted.

  In step 304 of waiting for reception of the tag information of the wireless tag of the wireless tag transceiver 110, if no data is received from the wireless tag, the security lock state is continued and the execution of the function is blocked. Here, when tag information is not received in step s304 (NO), by repeating step s303 only a fixed number of times, the transmission is re-executed a fixed number of times, and if reception fails in any case, communication is stopped. It can be configured to continue the security lock state.

  Further, in the authentication determination step s306, the security lock state is continued even when the tag information comparison result shows a mismatch (authentication failure), and the execution of the function is blocked. As described above, the specific operation is permitted due to the success of the authentication, and the lock state of the specific operation cannot be released due to the communication failure (in this case, the authentication result is not established) as well as the authentication failure.

  In addition, according to the above flowchart, when the setting regarding the function of a security lock is not made, it cannot be overemphasized that all the functions always respond to the user's key operation regarding the function of a portable information terminal device.

  According to the present embodiment, only when a function set as a security lock target is operated (for example, when an application of the function is activated), an authentication request is wirelessly transmitted to the wireless tag, and security is performed. Since the wireless transmission operation of the authentication request including the operation of the function that is not the lock target is not performed, the power consumption is greatly suppressed.

(Embodiment 2)
In the embodiment, the RFID tag information is collected by using the key operation of the function to be set as a trigger, the security lock is released when the verification by the received RFID tag information is established, and after the use of the function is completed, the first security Although it is configured to return to the locked state, it is assumed that it will be operated by the correct user for a while after the authentication is established, so a predetermined timer period is provided after releasing the security lock, and the security lock is released after that time If configured, the number of wireless communications can be further reduced.

  That is, in the second embodiment, a timer for a predetermined time is used in place of the function of re-entering the security lock state when the operation of the function is ended after the security lock is released by the establishment of the function (7) of the first embodiment. And a function to start the timer when authentication by the wireless tag is established at the time of key input operation of the security locked function (at the time of releasing the security lock) and to return to the security lock state after a predetermined time.

  FIG. 4 is a flowchart showing the operation and method after releasing the security lock. After the security lock is released (s307), a timer having a predetermined set time is started, and whether or not the set time of the timer has passed (expired) is confirmed (s401). The state responding to the key operation is continued (s308), and upon expiration, the state is returned to the security lock state (s402). After authentication is established, for the same setting period, the wireless communication to the wireless tag is not performed for the same function even after the end of the application and the activation (starting) operation of the same function again as a trigger. Is possible.

(Embodiment 3)
In the above embodiment, an example in which an authentication module function for performing authentication processing is provided in the control unit 106 has been described. However, an authentication module having a similar function can be installed outside the control unit 106, and wireless It is obvious that the tag transmission / reception unit 110 can be provided inside or outside the tag transmission / reception unit 110.

  In addition, two examples of returning to the security lock state again after releasing the security lock state have been described. However, it is possible to configure the user to perform the lock after the release every time.

  Furthermore, although a unique wireless tag is assumed as a wireless tag for requesting authentication, a plurality of wireless tags can be used for authentication. In this case, several types of wireless tags can be registered in the portable information terminal device by the user as authenticable wireless tags. Further, it is preferable to use identification information of a wireless tag as authentication tag information and set it as an authentication key.

  FIG. 5 is a diagram showing an embodiment of the present invention. The configuration of the key input operation unit 105, the control unit 106, the memory 103, the wireless tag transmission / reception unit 110, and the wireless tag 200 of the portable information terminal device, particularly, the configuration of the control unit 106 is shown as a combination of functional elements.

  The control unit 106 according to the present embodiment decodes the operation of the key input operation unit 105 and sets a lock target function, a block 1061 for performing internal control of a predetermined function, and the like, and sets security lock or unlock for each function. Block 1062, operation function detection for detecting activation of user function, input operation and triggering communication to the wireless tag 200 based on output of control functions such as call, mail, scheduler, block 1063, blocks 1061, 1062 Based on the output of the authentication module function block 1065, blocks 1061, 1062, and 1065 for comparing and collating the authentication key information recorded in advance in the memory 103 with the authentication key information received from the wireless tag 200. Block 106 of the function for releasing the lock state of the function when established Comprises the functions of blocks 1067 security lock function of setting again locked state the function after the security lock release. Hereinafter, the operation of the first embodiment will be described.

  First, as an initial setting, when the user performs an input operation for setting the security lock, the corresponding portion of the setting block is set (locked) (“1”), and the corresponding of the function block 1063 unless the above-described authentication is established. Function activation or operation is not permitted.

  Next, when the operation function detection block 1064 detects the operation of the function in response to the operation of the specific function of the user, and the function is in the locked state, a trigger signal is generated, and the wireless tag transceiver 110 transmits the wireless tag 200. To send authentication key information. When the wireless tag transmission / reception unit 110 receives the authentication key information from the wireless tag 200, the authentication module function 1065 compares the authentication key with the authentication key read from the memory 103. The controlled and locked functions are individually reset (unlocked) ("0"). If the authentication keys do not match, the set state (“1”) continues and remains locked. This is the same as when authentication fails, of course, when communication fails, but a signal indicating communication failure may be output from the wireless tag transmission / reception unit 110 to the block 1068 to continue the locked state. it can. Thereafter, when the operation of the function is finished, the security lock function block 1067 is reset to the initial setting state.

  FIG. 6 is a diagram showing another embodiment of the present invention. The control unit 106 according to the second embodiment includes functional blocks similar to those according to the first embodiment. However, instead of the security lock function block 1067 that sets the lock state again after the security lock is released, the control unit 106 is fixed after the function lock is released. The security lock function block 1068 having the time timer function is provided.

The operation of the second embodiment is the same as that of the first embodiment until the respective operations according to the establishment / non-establishment of the authentication by the function operation, but after unlocking the function by the individual release function block 1068, the block 1068 of the security lock machine is a block. Based on the change in the output of 1062, the timer function resets to the initial setting state after a predetermined time such as several minutes to several hours. In this case, it is possible to configure so that the timer time is set for each function.
Needless to say, in the above-described embodiments and the like, it can be configured such that all lock functions are once released when authentication is established.

FIG. 1 is a diagram showing a configuration of a portable information terminal device and a security system of the present invention. FIG. 2 is a diagram showing the configuration of the wireless tag 200 and the wireless tag transceiver 110 of the present invention. FIG. 3 is a flowchart showing the operation and method of the portable information terminal device 100. FIG. 4 is a flowchart showing the operation and method after unlocking security. It is a figure which shows Example 1 of this invention. It is a figure which shows Example 2 of this invention. It is a figure which shows a prior art.

Explanation of symbols

100 mobile information terminal device 103 memory 105 key input operation unit 106 control unit 110 wireless tag transmission / reception unit 1061 decoder function block 1062 function setting block 1063 function block 1064 operation function detection block 1065 authentication module block 1066 individual function release block 1067 1068 Security lock block 200 Wireless tag

Claims (14)

A portable information terminal device that can set the operation of a specific function to a prohibited state, and communicates with an authentication wireless tag during an input operation of the specific function from an input operation unit, and stores information on the wireless tag as an authentication key A portable information terminal device comprising: a wireless tag transmission / reception unit to be acquired; and a control unit that cancels the prohibited state of the operation of the specific function when authentication by the authentication key is established. The portable information terminal device according to claim 1, wherein the control unit controls the operation of the specific function to a prohibited state after the operation of the specific function is completed. The portable information terminal device according to claim 1, wherein the control unit controls the operation of the function to a prohibited state after a predetermined period after the operation of the specific function is finished. 4. The portable information terminal device according to claim 1, wherein a specific function for prohibiting an operation can be set by a user. 4. The portable information terminal device according to claim 1, wherein a plurality of types can be registered as a wireless tag for authentication by a user. A security system for a portable information terminal device capable of releasing the setting to the prohibited state of the operation of the specific function of the portable information terminal device by authentication with a wireless tag,
The portable information terminal device communicates with a wireless tag for authentication at the time of an input operation of the specific function from the input operation unit, and obtains information of a wireless tag as an authentication key, and the authentication key A control unit that cancels the prohibition state of the operation of the specific function when authentication is established,
The wireless system includes a transmission / reception unit that transmits information on the authentication key in response to an authentication request from the wireless tag transmission / reception unit. The security system for a portable information terminal device according to claim 6, wherein after the operation of the specific function is finished, the control unit prohibits the operation of the function. The security system according to claim 6, wherein the control unit prohibits the operation of the function after a predetermined period after the operation of the specific function is completed. 9. The security system according to claim 6, 7 or 8, wherein a specific function for prohibiting an operation can be set by a user. 9. The security system according to claim 6, 7 or 8, wherein a user can register a plurality of types as wireless tags for authentication. A security method for a portable information terminal device capable of setting the operation of a specific function to a prohibited state, the step of requesting an authentication to the wireless tag during an input operation of the specific function, and an authentication key for a response from the wireless tag A security method, comprising: performing an authentication process based on wireless home information; and releasing an operation prohibition state of the specific function only when authentication is established as a result of the authentication process. 12. The security method according to claim 11, further comprising a step of prohibiting the operation of the function after the operation of the specific function is finished. 12. The security method according to claim 11, further comprising a step of prohibiting the operation of the function after a predetermined period after the operation of the specific function is completed. 14. The security method according to claim 11, further comprising a step of setting a specific function that prohibits the operation in advance by a user operation.

Images