JP2007068016A - Mobile terminal device and security management method thereof - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a non-contact card function from being illegally utilized by a third person, while ensuring user convenience, when a non-contact card is lost or stolen. <P>SOLUTION: A mobile terminal device comprises a service area detection section 20 for detecting the status of radio waves received from a base station device (in-service status and out-of-service status), an IC card part 12 for communicating with an external reader/writer without contact, an authentication section 17 for carrying out user authentication processing when communicating with the reader/writer without contact, and a control section 11 for switching whether or not to perform authentication processing due to the authentication section 17 in accordance with the radio wave status detected by the service area detection section 20. If the radio wave status is out-of-service status, the control section 11 allows the authentication section 17 to carry out authentication processing. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a mobile terminal device and a security management method thereof, and more particularly to a mobile terminal device having a contactless card function and a security management method thereof.

Currently, mobile terminals equipped with a contactless card function are widely used. These mobile terminals often store information that requires high security, such as charge information for electronic money used for electronic money services. In order to ensure the security of information in such portable terminals, for example, when these portable terminals are lost or stolen, use of the contactless card function is restricted remotely via a network (so-called remote lock) ) Is generally performed.
Japanese Patent Application No. 2003-16398

  In order to perform the remote lock as described above, it is assumed that the power of the mobile terminal is on and the mobile terminal is in the communication range. For this reason, the remote lock cannot be performed when the power of the mobile terminal is off or when the mobile terminal is outside the communication range. However, the contactless card function in the mobile terminal can be used regardless of the power state of the mobile terminal and the radio wave reception state of the mobile terminal. For this reason, when a malicious third party uses the mobile terminal with the power off, or uses it in a location outside the communication range, unauthorized use of the contactless card function is allowed. is there.

  On the other hand, as a technology to ensure security other than remote lock, in order to prevent unauthorized use by others in case of loss or theft, an authentication process is requested prior to use of the contactless card function, and based on the authentication result, There has been proposed a portable terminal that switches whether to use a function (for example, see Patent Document 1). However, in such a portable terminal, authentication processing is required even during normal use of the contactless card function, so that it cannot be used when it is desired to be used, resulting in inconvenience in convenience for the user. .

  The present invention has been made in view of the above points, and is capable of preventing unauthorized use of a contactless card function by a third party when lost or stolen while ensuring user convenience. And a security management method thereof.

  A mobile terminal device according to the present invention includes a radio wave state detection unit that detects a radio wave state received from a base station device, a non-contact communication unit that performs non-contact communication with an external reader / writer, and a non-contact type with the reader / writer. It comprises authentication means for executing user authentication processing when performing communication, and control means for switching presence / absence of authentication processing by the authentication means in accordance with the radio wave state.

  According to this configuration, since the control unit switches the presence / absence of the authentication processing by the authentication unit according to the radio wave state, it is possible to switch the security in the mobile terminal device according to the radio wave state. For example, when the radio wave condition is out of communication range, the authentication process is executed. When the radio wave condition is out of communication range, control is performed so that the authentication process is omitted. Since the user authentication process is executed when the mobile terminal device is used, it is possible to prevent unauthorized use of the contactless card function by a third party when the mobile terminal device is outside the communication range. On the other hand, since the authentication process is omitted when the mobile terminal exists in the communication area, the authentication process is requested even when a legitimate user carries the mobile terminal device within the communication area. There is no loss of user convenience. As a result, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience.

  In the mobile terminal device of the present invention, the control unit causes the authentication unit to perform an authentication process when the radio wave state is an out-of-communication state, while authenticating the authentication unit when the radio wave state is a communication-range state. It is preferable not to perform processing. According to this configuration, when the radio wave state is the out-of-communication state, when performing contactless communication, the user authentication process is executed, so that the third party in the case where the mobile terminal device exists outside the communication range It is possible to prevent unauthorized use of the contactless card function. On the other hand, since the authentication process is omitted when the mobile terminal exists in the communication area, the authentication process is requested even when a legitimate user carries the mobile terminal device within the communication area. There is no loss of user convenience.

  In the mobile terminal device of the present invention, it is preferable that the control unit causes the authentication unit to perform an authentication process when the out-of-communication state continues for a predetermined time. According to this configuration, since the situation where the use of the contactless card function is restricted is avoided until the radio wave state temporarily becomes an out-of-communication state, the mobile terminal that is more convenient for the user An apparatus can be provided.

  In the mobile terminal device of the present invention, the non-contact communication means inquires of the control means whether or not non-contact communication is permitted according to the security level notified from the control means, and the control means Accordingly, the authentication unit may perform authentication processing. According to this configuration, since the non-contact communication unit inquires whether the non-contact communication is permitted or not according to the security level notified from the control unit, the non-contact communication can be controlled according to the contents of the security level. . In addition, since the control unit causes the authentication process to be performed in response to an inquiry from the non-contact communication unit, the authentication process can be controlled according to the security level set in the own device.

  Further, in the mobile terminal device of the present invention, the contactless communication means permits or disallows contactless communication when the control means receives a notification of a security level set when the radio wave state is an out-of-service state. On the other hand, when a notification of a security level set when the radio wave state is a communication range state is received, the contactless communication may be performed without inquiring whether or not the contactless communication is permitted. According to this configuration, the authentication process is requested only when the radio wave state is an out-of-communication state, while the non-contact communication can be performed without requesting the authentication process when in the communication-range state.

  Furthermore, the mobile terminal device according to the present invention further includes power detection means for detecting a power state in the own device, and the control means switches permission / rejection of non-contact communication by the non-contact communication means according to the power state. You may do it. According to this configuration, it is possible to switch the security in the mobile terminal device according to the power state. For example, by restricting the execution of non-contact communication when the power state is the power-off state, and controlling the execution of non-contact communication when the power is on, the non-contact communication in the power-off state is controlled. Since execution is restricted, it is possible to prevent unauthorized use of the contactless card function by a third party when the mobile terminal device is in a power-off state. On the other hand, when the mobile terminal is in a power-on state, the non-contact communication is allowed to be executed. Therefore, the execution is limited until a legitimate user executes the non-contact communication in a power-on state. Therefore, the convenience of the user is not impaired. As a result, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience.

  In the mobile terminal device of the present invention, the control means restricts execution of non-contact communication by the non-contact communication means when the power state is a power-off state, while the power state is a power-on state. It is preferable to allow execution of non-contact communication by the non-contact communication means. According to this configuration, since execution of contactless communication in the power-off state is restricted, it is possible to prevent unauthorized use of the contactless card function by a third party when the mobile terminal device is in the power-off state. Become. On the other hand, when the mobile terminal is in a power-on state, the non-contact communication is allowed to be executed. Therefore, the execution is limited until a legitimate user executes the non-contact communication in a power-on state. Therefore, the convenience of the user is not impaired.

  A security management method according to the present invention is a security management method for a mobile terminal device that performs contactless communication with an external reader / writer, detects a radio wave state received from a base station device, and contacts the reader / writer without contact. The presence or absence of a user authentication process when performing communication is switched according to the radio wave state.

  According to this method, since the presence / absence of the authentication processing is switched according to the detected radio wave condition, it is possible to switch the security in the mobile terminal device according to the radio wave condition. For example, when the radio wave condition is out of communication range, authentication processing is executed, and when the radio wave condition is out of communication range, control is performed so that authentication processing is omitted. Since the user authentication process is executed when the mobile terminal device is used, it is possible to prevent unauthorized use of the contactless card function by a third party when the mobile terminal device is outside the communication range. On the other hand, since the authentication process is omitted when the mobile terminal exists in the communication area, the authentication process is requested even when a legitimate user carries the mobile terminal device within the communication area. There is no loss of user convenience. As a result, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience.

  In the security management method of the present invention, it is preferable that the authentication process is performed when the radio wave state is an out-of-communication state, whereas the authentication process is not performed when the radio wave state is a communication range state. In this case, when the radio wave state is out of the communication range and the contactless communication is performed, the user authentication process is executed. Therefore, the mobile terminal device is operated by a third party when the mobile terminal device is out of the communication range. It is possible to prevent unauthorized use of the contactless card function. On the other hand, since the authentication process is omitted when the mobile terminal exists in the communication area, the authentication process is requested even when a legitimate user carries the mobile terminal device within the communication area. There is no loss of user convenience.

  In the security management method of the present invention, it is preferable that the authentication process is performed when the out-of-communication state continues for a predetermined time. In this case, since the situation where the use of the contactless card function is limited is avoided until the radio wave state temporarily becomes out of the communication range, the mobile terminal device that is more convenient for the user Can be provided.

  Furthermore, in the security management method of the present invention, a power state in the mobile terminal device may be detected, and permission / inhibition of non-contact communication may be switched according to the power state. In this case, the security in the mobile terminal device can be switched according to the power supply state. For example, by restricting the execution of non-contact communication when the power state is the power-off state, and controlling the execution of non-contact communication when the power is on, the non-contact communication in the power-off state is controlled. Since execution is restricted, it is possible to prevent unauthorized use of the contactless card function by a third party when the mobile terminal device is in a power-off state. On the other hand, when the mobile terminal is in a power-on state, the non-contact communication is allowed to be executed. Therefore, the execution is limited until a legitimate user executes the non-contact communication in a power-on state. Therefore, the convenience of the user is not impaired. As a result, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience.

  Furthermore, in the security management method of the present invention, execution of contactless communication is restricted when the power state is a power-off state, while execution of contactless communication is permitted when the power state is a power-on state. preferable. In this case, since the execution of contactless communication in the power-off state is restricted, unauthorized use of the contactless card function by a third party when the mobile terminal device is in the power-off state can be prevented. . On the other hand, when the mobile terminal is in a power-on state, the non-contact communication is allowed to be executed. Therefore, the execution is limited until a legitimate user executes the non-contact communication in a power-on state. Therefore, the convenience of the user is not impaired.

  According to the mobile terminal device and the security management method thereof according to the present invention, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience. Become.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is a diagram showing a schematic configuration of a service providing system using a contactless card function of a mobile terminal device according to an embodiment of the present invention. A service providing system shown in FIG. 1 includes a mobile terminal (mobile phone) 1 according to the present invention, an external R / W 2 disposed in a store of a service provider that provides services to the mobile terminal 1, And a service providing apparatus 3 connected to the external R / W 2. Then, after necessary information is exchanged between the mobile terminal 1 and the external R / W 2 by information communication using the contactless card function of the mobile terminal 1, the service providing apparatus 3 can provide an electronic payment service or the like. It is configured to provide various services to the mobile terminal 1.

  Further, the service providing system shown in FIG. 1 has a management device 5 connected via a communication network such as a communication carrier network 4 (for example, a PDC-P (Personal Digital Cellular-Packet) network for mobile communication). is doing. The management device 5 controls whether the functions of the mobile terminal 1 can be used via the communication carrier network 4. In particular, in the present embodiment, use of the contactless card function is restricted (remote lock) in response to a request from the user of the mobile terminal 1. Since the remote lock by the management device 5 is based on the premise of communication with the mobile terminal 1, it can be performed only when the mobile terminal 1 exists within the communication range, and the mobile terminal 1 exists outside the communication range. Cannot be performed when the power is off or when the power is off.

  A mobile terminal 1 shown in FIG. 1 has the configuration shown in FIG. FIG. 2 is a diagram showing a schematic configuration of a mobile terminal apparatus according to an embodiment of the present invention. Note that the configuration shown in FIG. 2 is simplified for explaining the present invention, and it is assumed that the components mounted on a normal mobile terminal device are provided. Here, a case where the contactless card function of the mobile terminal 1 is FeliCa (registered trademark) will be described.

  The mobile terminal 1 includes a control unit 11 that controls the entire terminal, an IC card unit 12 that implements a contactless card function, a display control unit 13 that controls display used in the mobile terminal 1, A display 14 that displays display-controlled characters, images, and videos, an operation input unit 15 that receives an operation input from a user, and a power detection unit 16 that detects a power state (on state or off state) of the mobile terminal 1. An authentication unit 17 that performs user authentication processing when the contactless card function is used in a predetermined case, a storage unit 18 that stores information including authentication information used for the authentication processing, and a network such as the communication carrier network 4 A communication control unit 19 that controls communication with the mobile terminal 1, an out-of-range detection unit 20 that detects a radio wave reception state (communication range state or out-of-communication state) of the mobile terminal 1, and an antenna 18. That.

  The IC card unit 12 includes a non-contact IC chip 121 that buffers Felica content and a controller (Felica operating system) 122 for realizing a non-contact card function. The non-contact IC chip 121 records a security level that is set according to the radio wave reception state and power state of the mobile terminal 1. The storage unit 18 includes an authentication information storage unit 181 that stores authentication information used for authentication processing. In the authentication process described below, a case where a user ID and a password (password) are used as authentication information will be described. However, the present invention is not limited to this, and other information such as user biometric information is used. It may be used as authentication information.

  The IC card unit 12 performs contactless card communication with the external R / W 2. That is, when the IC card unit 12 receives an electromagnetic wave transmitted from the external R / W 2, a current flows through the coil of the IC card unit 12 according to the electromagnetic wave, so that the controller 122 is activated and the IC card unit 12 can be used. It becomes. In this activated state, various information (for example, Felica content) can be acquired from the external R / W 2. Note that the IC card unit 12 is configured to control the control unit 11 when communicating various information with the external R / W 2 in a predetermined case (when the security level is set to level 2 and level 3 described later). Need permission. That is, in this case, communication with the external R / W 2 cannot be performed without the permission of the control unit 11.

  The power detection unit 16 detects the power state of the mobile terminal 1 that is switched in accordance with a user instruction, and outputs power state information (power on information or power off information) to the control unit 11. The out-of-range detection unit 20 detects a reception radio wave state that is switched according to the location of the mobile terminal 1 and outputs out-of-range information (in-range information or out-of-range information) to the control unit 11. The power source detection unit 16 functions as a power source detection unit, and the out-of-area detection unit 20 functions as a radio wave state detection unit.

  The control unit 11 controls the security level of the mobile terminal 1 (hereinafter referred to as “security level”) according to out-of-service information output from the out-of-service detection unit 20 or power supply state information output from the power supply detection unit 16. Switch. In the present embodiment, the control unit 11 sets three security levels 1 to 3 (hereinafter, appropriately referred to as “levels 1 to 3”) according to out-of-service information or power state information. Specifically, when receiving out-of-range information from the out-of-range detecting unit 20 (that is, when the mobile terminal 1 is in the communication range), the level 1 is set, and the out-of-range information is received from the out-of-range detecting unit 20 When the level 2 is set in the case (that is, when the mobile terminal 1 is outside the communication range) and the power-off information is received from the power detection unit 16 (that is, when the power of the mobile terminal 1 is cut off) Set level 3 to.

  The control unit 11 sequentially switches the security level according to the location of the mobile terminal 1 or the power state. The non-contact IC chip 121 in the IC card unit 12 records the security level switched by the control unit 11 in this way. FIG. 3 is a diagram illustrating an example of the security level recorded on the non-contact IC chip 121. FIG. 3 shows the contents of the security level recorded from 8 am on August 11, 2005 to 8:01 am on August 12.

  As shown in FIG. 3, the non-contact IC chip 121 records the date and time when the security level was switched, the status at that time, and the security level. In the example shown in FIG. 3, the reception radio wave state of the mobile terminal 1 becomes an out-of-service state at 8 o'clock on August 11, 8:35, 18:14, and 7:55 on August 12. , While the security level is set to level 2, the mobile terminal 1 receives at 8: 6, 8:42, 18:15 on August 11, and 8: 1 on August 12 The radio wave state becomes the communication range state, and the security level is set to level 1. Further, the mobile terminal 1 is turned off at 22:50 on August 11, and the security level is set to level 3, while the mobile terminal 1 is set at 6:30 on August 12. Is turned on and the security level is set to level 1.

  When the control unit 11 receives a request for permission to use the non-contact IC card function from the IC card unit 12, the control unit 11 executes a process according to the currently set security level. As will be described in detail later, when the currently set security level is level 2, the control unit 11 causes the authentication unit 17 to execute an authentication process, and whether to use the non-contact IC card function according to the authentication result. To decide. On the other hand, if the currently set security level is level 3, the control unit 11 is temporarily activated to limit the use of the non-contact IC card function. Note that when the security level currently set is level 1, the IC card unit 12 does not output a request for permission to use the non-contact IC card function, so the control unit 11 executes some processing. Never do.

  The authentication unit 17 executes an authentication process in response to an execution instruction from the control unit 11. The authentication process is stored in advance in the authentication information storage unit 182 and the user ID and password input from the user via the operation input unit 15 on the authentication screen displayed on the display 14 under the control of the display control unit 13. The authentication information (user ID and password) is compared. The authentication unit 17 outputs the authentication result obtained by such authentication processing to the control unit 11.

  Next, in the mobile terminal device having the above configuration, a process when an instruction to use a non-contact IC card function is given will be described. As described above, the mobile terminal 1 switches the security level according to the received radio wave state or the power state. In the following, for convenience of explanation, a case where the power source is in an on state and a case where the power source is in an off state will be described separately. First, processing when the use of the non-contact IC card function is instructed when the mobile terminal 1 is powered on will be described with reference to FIG. FIG. 4 is a sequence diagram for explaining processing when the use of the non-contact IC card function is instructed when the mobile terminal device according to the present embodiment is powered on.

  When the mobile terminal 1 is powered on, the communication control unit 19 monitors radio waves transmitted from the nearest base station. When the communication control unit 19 receives a radio wave from the base station, the out-of-range detection unit 20 detects whether the received radio wave state is within the communication range or out of the communication range according to the radio wave. Then, the out-of-service information corresponding to the detection result is output to the control unit 11. When the outside area information is received (ST101), the control unit 11 sets the security level according to the outside area information (ST102). In this case, when the in-range information is received from the out-of-range detecting unit 20, the security level is set to level 1, while when the out-of-range information is received, the security level is set to level 2. Then, the control unit 11 notifies the set security level to the IC card unit 12 (more specifically, the controller 122) (ST103).

  Upon receiving this notification, the IC card unit 12 records the security level in the non-contact IC chip 121 (ST104). The security level is recorded by the IC card unit 12 every time a security level notification is received from the control unit 11. After recording the security level according to the notification from the control unit 11 as described above, the IC card unit 12 monitors reception of electromagnetic waves from the external R / W 2 (ST105). When receiving the electromagnetic wave from the external R / W2, the IC card unit 12 determines whether the currently set security level is level 2 (ST106). Here, the reason why the security level is level 2 is to determine whether or not the permission of the control unit 11 is required when using the non-contact IC card function. If the current security level is set to level 2, IC card unit 12 outputs a request for permission to use the non-contact IC card function to control unit 11 (ST107).

  Upon receiving this permission request, the control unit 11 outputs an authentication process notification instructing display of an authentication screen that prompts the user to input a user ID and password used for the authentication process by the authentication unit 17 to the display control unit 13 (ST108). Upon receiving this authentication processing notification, the display control unit 13 displays, for example, the authentication screen shown in FIG. 5A on the display 14 (ST109). FIG. 5A is a diagram showing an example of an authentication screen displayed on the display 14 of the mobile terminal 1. In a state where such an authentication screen is displayed on the display 14, the control unit 11 waits for a password input from the user via the operation input unit 15 (ST110). When a password or the like is input from the user, control unit 11 outputs an authentication instruction that instructs authentication unit 17 to execute an authentication process (ST111). This authentication instruction includes a password input by the user.

  Upon receiving the authentication instruction, authentication unit 17 executes an authentication process (ST112). Here, the authentication unit 17 compares the authentication information (user ID and password) stored in the authentication information storage unit 181 with the user ID and password included in the authentication instruction, and the user who entered the password or the like is authorized. Determine if you are a user. And the result (authentication result) is output to the control part 11 (ST113). Upon receiving the authentication result, control unit 11 determines whether or not the user is a legitimate user according to the authentication result (ST114). If it is determined that the user is a legitimate user, the control unit 11 outputs a communication instruction indicating permission to use the non-contact IC card function to the IC card unit 12 (ST115). Upon receiving this communication instruction, the IC card unit 12 executes communication processing with the external R / W 2 (ST116).

  On the other hand, if it is determined that the user is not a legitimate user, the control unit 11 does not give an instruction to the IC card unit 12 and displays an unusable screen indicating that the non-contact IC card function cannot be used. Is displayed to the display control unit 13 (ST117). The display control unit 13 that has received the unavailable notification displays, for example, the unavailable screen shown in FIG. 5B on the display 14 (ST118). FIG. 5B is a diagram showing an example of the unavailable screen displayed on the display 14 of the mobile terminal 1. By displaying such an unusable screen on the display 14, the user is notified that the contactless card function cannot be used.

  As described above, in the mobile terminal device according to the present embodiment, the presence or absence of the authentication process by the authentication unit 17 is switched according to the received radio wave state in the mobile terminal device. In particular, in the mobile terminal device according to the present embodiment, authentication unit 17 performs authentication processing when the radio wave state is out of communication range, while authentication unit 17 performs authentication processing when the communication state is within communication range. I am trying not to. As a result, when the radio wave state is an out-of-communication state where remote lock is impossible, the user authentication process is executed when the contactless card function is used, so the mobile terminal device is out of the communication range. It is possible to prevent unauthorized use of the contactless card function by a third party.

  If it is determined in ST106 that the currently set security level is not level 2, the IC card unit 12 proceeds to ST116 and executes communication processing with the external R / W2. Thus, since the authentication process is omitted when the mobile terminal 1 is in the communication area, the mobile terminal device is carried in the communication area where the authorized user can be remotely locked. Since the authentication process is not requested until this point, the convenience of the user is not impaired. As a result, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience.

  Further, in the sequence shown in FIG. 4, the security level is set according to the out-of-service information from the out-of-service detection unit 20 in ST102. It is preferable as an embodiment to determine that it will continue for a second). In this case, since the situation where the use of the contactless card function is restricted is avoided until the reception radio wave state temporarily becomes the out-of-communication state, the mobile terminal that is more convenient for the user 1 can be provided.

  Next, processing when the use of the non-contact IC card function is instructed when the power of the mobile terminal apparatus having the above configuration is shifted to the off state will be described with reference to FIG. FIG. 6 is a sequence diagram for explaining the processing when the use of the non-contact IC card function is instructed when the power of the mobile terminal apparatus according to the present embodiment is on.

  When the power of the mobile terminal 1 is turned off by the user, the power detection unit 16 detects that the power state of the mobile terminal 1 has been switched from the on state to the off state. In response to this, power-off information is output to the control unit 11. When receiving the power-off information (ST201), the control unit 11 notifies the IC card unit 12 (more specifically, the controller 122) of the security level according to the power-off information (ST202). Here, the level 3 set according to the power-off state of the mobile terminal 1 is notified as the content of the security level. And after notifying a security level, the control part 11 transfers to a power-off state (ST203).

  Upon receiving this notification, the IC card unit 12 records the security level in the non-contact IC chip 121 (ST204). After recording the security level according to the notification from the control unit 11 in this way, the IC card unit 12 monitors reception of electromagnetic waves from the external R / W 2 (ST205). When receiving the electromagnetic wave from the external R / W2, the IC card unit 12 determines whether the currently set security level is level 3 (ST206). Here, the reason why the security level is level 3 is to determine whether or not the permission of the control unit 11 is required when using the non-contact IC card function. If the current security level is set to level 3, IC card unit 12 outputs a request for permission to use the non-contact IC card function to control unit 11 (ST207).

  When this permission request is received in the state of shifting to the power-off state, control unit 11 is temporarily activated (ST208). Then, a non-permission notification notifying that the use of the non-contact IC card function is not permitted is output to the IC card unit 12 (ST209). After outputting this disapproval notice, control unit 11 again shifts to the power-off state (ST210). When receiving this non-permission notice, the IC card unit 12 does not respond to the electromagnetic wave from the external R / W 2. Accordingly, when the mobile terminal 1 is powered off, use of the non-contact IC card function is restricted.

  Thus, in the mobile terminal device according to the present embodiment, the security level is switched according to the power supply state in the mobile terminal device. In particular, in the mobile terminal device according to the present embodiment, the use of the contactless card function is restricted when the power state is the power off state, while the use of the contactless card function is permitted when the power is on. . This restricts the use of the contactless card function in the power-off state, and therefore prevents unauthorized use of the contactless card function by a third party in the power-off state where the mobile terminal device cannot be remotely locked. Is possible. On the other hand, since the use of the contactless card function is allowed when the mobile terminal is in a power-on state, the use of the function is restricted until a legitimate user uses the contactless card function in a power-on state. Therefore, the convenience of the user is not impaired. As a result, it is possible to prevent unauthorized use of the contactless card function by a third party at the time of loss or theft while ensuring user convenience.

  The present invention is not limited to the embodiment described above, and can be implemented with various modifications. For example, in the above embodiment, the case where the contactless card function is Felica is described, but the present invention is similarly applied to the case where the contactless card function is a contactless card function other than Felica. Can do. In addition, various modifications can be made without departing from the scope of the present invention.

  For example, in the above embodiment, when the power state of the mobile terminal 1 is detected and the use of the non-contact card function is instructed in the power off state, only the control unit 11 is temporarily activated to It shows the case of refusing to use the contact card function. However, the present invention is not limited to this, and the components such as the authentication unit 17 are also activated in response to the use of the contactless card function. As described above, the user authentication process is performed as in the case where the radio wave state is the out-of-communication state. May be performed. In this case, even in the power-off state, the contactless card function can be used through the user authentication process, so that it is possible to provide a more convenient mobile terminal device.

It is a figure which shows schematic structure of the service provision system using the non-contact card function of the mobile terminal device which concerns on one embodiment of this invention. It is a figure which shows schematic structure of the mobile terminal device which concerns on the said embodiment. It is a figure which shows an example of the security level recorded on the non-contact IC chip which the mobile terminal device which concerns on the said embodiment has. It is a sequence diagram for demonstrating the process when the utilization of a non-contact IC card function is instruct | indicated when the power supply of the mobile terminal device which concerns on the said embodiment is an ON state. (A) It is a figure which shows an example of the authentication screen displayed on the display of the mobile terminal device which concerns on the said embodiment. (B) It is a figure which shows an example of the unusable screen displayed on the display of the mobile terminal device which concerns on the said embodiment. It is a sequence diagram for demonstrating the process when the utilization of a non-contact IC card function is instruct | indicated when the power supply of the mobile terminal device which concerns on the said embodiment is an ON state.

Explanation of symbols

1 Mobile terminal 2 External R / W
DESCRIPTION OF SYMBOLS 3 Service provision apparatus 4 Communication carrier network 5 Management apparatus 11 Control part 12 IC card part 13 Display control part 14 Display 15 Operation input part 16 Power supply detection part 17 Authentication part 18 Storage part 19 Communication control part 20 Outer detection part 21 Antenna 121 Non-contact IC chip 122 Controller

Claims (12)

  Radio wave state detection means for detecting the radio wave state received from the base station apparatus, non-contact communication means for performing non-contact communication with an external reader / writer, and user authentication processing when performing non-contact communication with the reader / writer A mobile terminal device comprising: an authenticating unit that executes: and a control unit that switches the presence or absence of an authentication process by the authenticating unit according to the radio wave state.   The control unit causes the authentication unit to perform an authentication process when the radio wave state is an out-of-communication state, and prevents the authentication unit from performing an authentication process when the radio wave state is a communication range state. The mobile terminal device according to claim 1.   The mobile terminal apparatus according to claim 2, wherein the control unit causes the authentication unit to perform an authentication process when the out-of-communication state continues for a predetermined time.   The non-contact communication means inquires of the control means whether or not non-contact communication is permitted according to the security level notified from the control means, and the control means causes the authentication means to perform an authentication process in response to the inquiry. The mobile terminal device according to claim 1, wherein the mobile terminal device is a mobile terminal device.   The non-contact communication means inquires whether the non-contact communication is permitted or not when the control means receives a notification of a security level set when the radio wave state is an out-of-communication state. 4. The mobile terminal device according to claim 3, wherein when receiving a notification of a security level set in the case of the above, the non-contact communication is performed without inquiring whether or not non-contact communication is permitted.   The power supply detection means which detects the power supply state in a self-apparatus is provided, The said control means switches the permission or non-permission of the non-contact communication by the said non-contact communication means according to the said power supply state. 6. The mobile terminal device according to any one of 5 above.   The control unit restricts execution of non-contact communication by the non-contact communication unit when the power state is a power-off state, and non-contact communication by the non-contact communication unit when the power state is a power-on state. The mobile terminal device according to claim 6, wherein execution of the mobile terminal device is permitted.   A security management method for a mobile terminal device that performs contactless communication with an external reader / writer, and detects a radio wave state received from a base station device and authenticates a user when performing contactless communication with the reader / writer A security management method, wherein the presence or absence of processing is switched according to the radio wave state.   9. The security management method according to claim 8, wherein the authentication process is performed when the radio wave state is an out-of-communication state, and the authentication process is not performed when the radio wave state is a communication-range state.   The security management method according to claim 9, wherein the authentication process is performed when the out-of-communication state continues for a predetermined time.   The security management method according to any one of claims 8 to 10, wherein a power state in the mobile terminal device is detected, and permission / inhibition of non-contact communication is switched according to the power state.   12. The security management according to claim 11, wherein execution of contactless communication is restricted when the power state is a power off state, while execution of contactless communication is permitted when the power state is a power on state. Method.

Images