JP2011164735A - Communication terminal device, its program, and personal information protection method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a communication terminal device, along with its program and a personal information protection method, capable of preventing leakage of personal information stored in communication terminal device, and capable of restoring the personal information. <P>SOLUTION: In the case of the initial junction of a master unit 10 and a slave unit 20 of communication terminal device, a random generation unit 11 is made to generate random numbers, and an encryption key and a decryption key are generated based on the random numbers, and the encryption key is stored in the master unit 10, and the decryption key is stored in the slave unit 20. All the personal information is stored in storage units 16 and 17 as two types of data, that is, encryption information encrypted with the encryption key and non-encrypted non-encryption information in the master unit 10. When it is detected that the master unit 10 has moved to the outside of a range, all the personal information data of the non-encryption information are deleted. Then, when it is detected that the master unit 10 has moved to the inside of the range, and its junction with the slave unit is carried out, the encryption information is decrypted with the decryption key stored in the slave unit, and the non-encrypted personal information is restored. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a communication terminal device, a program thereof, and a personal information protection method for preventing leakage of personal information stored in the communication terminal device when the communication terminal device such as a mobile phone is in the hands of a third party. .

  As a method for protecting personal information stored in a communication terminal device such as a mobile phone that is passed to a third party, a method for remotely deleting the personal information using public wireless communication has been proposed. However, when the communication terminal device is placed outside the service area where public radio communication radio waves do not reach, there arises a problem that the personal information cannot be deleted remotely.

  In response to this problem, a method has been proposed in which personal information stored in a communication terminal device such as a mobile phone is deleted when it is out of service area. For example, as shown in FIG. 8, when it is detected that the mobile phone 8-1 is located in the area 8-3 within which radio waves of public wireless communication reach, the personal information 8 stored in the mobile phone 8-1 is stored. -2 is retained. However, when it is detected that it is located outside the area 8-3 within which radio waves of public wireless communication can reach, the personal information 8-2 is deleted. Such a personal information protection method is known, for example, from Patent Document 1 and the like.

JP 2009-31938 A

  In the conventional personal information protection method for deleting personal information stored inside a communication terminal device when it is out of service area, when the communication terminal device is used in an environment where it is not always out of service area There is no problem. However, when used in an environment that often goes out of service (for example, overseas), personal information stored inside the communication terminal device is often deleted, so personal information is frequently deleted. It will be bad for usability.

  Therefore, a personal information protection method is desired in which personal information once deleted is restored when the communication terminal apparatus moves out of the service area and then returns to the service area. An object of the present invention is to prevent personal information stored inside a communication terminal apparatus from leaking outside the service area and to restore the personal information when the communication terminal apparatus returns to the service area.

  A communication terminal device as one form for solving the above problem is detachably separated into a first device and a second device, and the separated first device and the second device are wirelessly connected. A first storage means for storing first data and second data which is encrypted data of the first data; and Means for deleting the first data from the first storage means when it is detected that wireless connection with the apparatus is not possible, and the second device decodes the second data Second storage means for storing a key, and when either the first device or the second device has deleted the first data, the first device and the second device The second data is restored on the condition that the wireless connection with the device is detected. Those having a decoding means for decoding using the key.

  Moreover, the program as another form which solves the said subject is separated into the 1st apparatus and the 2nd apparatus so that attachment or detachment is possible, and said 1st apparatus and said 2nd apparatus of the isolation | separation state are separated. A program for causing a wirelessly connected communication terminal device to function, wherein the first device stores first data and second data that is encrypted data of the first data in a first storage means. And when the wireless connection between the second device and the second device is detected, the second device is caused to function as a device for deleting the first data from the first storage device. , Functioning as a means for storing the decryption key for the second data in the second storage means, and when either the first device or the second device has been deleted. The first device and the second device are wireless On condition sensing that a connection of the variable, the second data is intended to function as means for decoding using the decoded key.

  In another aspect of the invention, the personal information protection method is detachably separated into a first device and a second device, and the first device and the second device are separated. A method for protecting personal information stored in a communication terminal device that is wirelessly connected to the first device, wherein the second data is the first data and the encrypted data of the first data in the first device. A step of storing data in the first storage means, and a step of deleting the first data from the first storage means when it is detected that wireless connection with the second device is impossible In the second apparatus, the second storage means stores a decryption key for the second data in a second storage means. In the first apparatus or the second apparatus, the first apparatus If the data has been deleted, the first On condition detecting that the location and the second device is a variable of a wireless connection, said second data, and has a step of decrypting by using said decryption key.

  When the first device goes out of service, the unencrypted personal information stored in the first device is deleted to prevent leakage of personal information, and the first device returns to the service area. When joined with the second device, the deleted non-encrypted personal information can be restored with the decryption key stored in the second device.

It is explanatory drawing of the function of the process at the time of the production | generation of an encryption key, the process at the time of personal information registration, and a detection outside a service area. It is explanatory drawing of the function of a process when a main | base station returns to the inside from a non-service area, and is joined with a subunit | mobile_unit. It is explanatory drawing of the function of a process when a main | base station returns to the inside from a non-service area, and is joined with a subunit | mobile_unit. It is a figure which shows the example of a processing flow of encryption key generation. It is a figure which shows the example of a processing flow after personal information registration. It is a figure which shows the structural example of the functional block of a main | base station and a subunit | mobile_unit. It is a figure which shows the structural example of the hardware block of a main | base station and a subunit | mobile_unit. It is explanatory drawing of the conventional personal information protection method.

  The disclosed communication terminal device is detachably separated into a first device and a second device. Here, a separation type mobile phone is taken as an example of the communication terminal device, and the first device is referred to as a parent device and the second device is referred to as a child device. The separation-type mobile phone generates a random number when the master unit and the slave unit are joined for the first time, generates an encryption key and a decryption key based on the random number, stores the encryption key in the base unit, and stores the decryption key in the child unit. Store in the machine.

  In the parent device, the personal information stored in the parent device is stored as two types of data: encrypted information encrypted with an encryption key and unencrypted information that is not encrypted. When it is detected that the parent device has moved out of the service area, the personal information data of the non-encrypted information is deleted. When the parent device moves into the area and is joined to the child device, the encrypted information is decrypted with the decryption key stored in the child device, and the unencrypted personal information is restored.

In order to realize the above-described functions, the following personal information protection function is added to the base unit and the handset of the separate mobile phone.
(1) Function of generating encryption key FIG. 1A shows a function of generating the encryption key. As a function of generating an encryption key, the base unit 10 includes a random number generation unit 11, an encryption key generation unit 12, a decryption key generation unit 13, and an encryption key storage unit 14. The slave unit 20 includes a decryption key storage unit 21. Is provided. When the master unit 10 is joined to the slave unit 20 for the first time, the encryption key generation unit 12 generates an encryption key and the decryption key generation unit 13 generates a decryption key based on the code generated by the random number generation unit 11. The encryption key is stored in the encryption key storage unit 14 of the machine 10 and the decryption key is stored in the decryption key storage unit 21 of the slave 20.

(2) Function at the time of personal information registration FIG. 1B shows a processing function at the time of personal information registration. When the personal information is input by the personal information registration function (for example, the phone book editing function) of the base unit 10, the base unit 10 encrypts the personal information with the encryption key in the encryption unit 15, and the encrypted The personal information is stored in the encrypted information storage unit 16. At the same time, unencrypted personal information is stored in the non-encrypted information storage unit 17.

(3) Function at the time of out-of-range detection FIG. 1C shows a processing function at the time of out-of-range detection. When the base unit 10 is separated from the handset 20 and detects that the base unit 10 is located outside the service area where public radio communication radio waves do not reach, the unencrypted individual stored in the non-encrypted information storage unit 17 Delete information. As a result, when the user loses the master device 10 or when the master device 10 is stolen and the user is in an out-of-service state where the user cannot remotely delete personal information, the encryption is performed. It is possible to prevent personal information that has not been converted from being deleted in the parent device 10 and leaking personal information to a third party.

(4) Function when returning from outside the service area to the service area FIGS. 2 and 3 show processing functions when the parent device 10 returns from the service area to the service area and joined to the child device 20. When the base unit 10 returns to the user and detects that the base unit 10 is located within a public radio communication radio wave reach, the encryption information stored in the encryption information storage unit 16 of the base unit 10 is stored as the slave unit 20. Is decrypted by the decryption unit 22 in the handset 20 using the decryption key stored in the decryption key storage unit, and the decrypted personal information is recorded in the unencrypted information storage unit 17 in the base unit 10. And restore.

  Various methods are conceivable for the out-of-service detection and the detection of returning to the service area. For example, when the target separation mobile phone can be wirelessly connected such as the Bluetooth communication function between the parent device and the child device in the separated state, and both are connected by wire connection between terminals in the joined state Is detected when the base unit and the slave unit are separated and further out of the communication range of the Bluetooth communication function, and when the mobile unit returns to the communication range of the Bluetooth communication function, or It can be set as the structure which detects that it returned to the area when it joined and it became a wired connection state.

  FIG. 2 shows a configuration example in which the slave unit 20 includes the decoding unit 22, but a configuration in which the decoding unit is provided in the master unit 10 can be used. A configuration example in which the decoding unit is provided in the parent device 10 is shown in FIG. In the configuration example of FIG. 3, the encryption information stored in the encryption information storage unit 16 of the parent device 10 is stored in the parent device 10 using the decryption key stored in the decryption key storage unit 21 of the child device 20. Decrypted by the decryption unit 18, the decrypted personal information is recorded in the unencrypted information storage unit 17 in the parent device 10 and restored. Moreover, it can also be set as the structure provided with a decoding part in both a main | base station and a subunit | mobile_unit.

  Since the encrypted information and the unencrypted information of the personal information are stored in the base unit 10, the decryption process becomes unnecessary by using the unencrypted information when referring to the personal information in normal use. It is possible to prevent a decoding process delay in a mobile phone having a low capability and to prevent power consumption due to the decoding process.

  FIG. 4 shows an example of the processing flow for generating the encryption key. In the master unit, when the personal information protection function is set, when the initial connection with the slave unit is detected (4-1), a random number is generated (4-2), and an encryption key is generated (4-3). The encryption key is stored in the master unit (4-4). Next, a decryption key is generated (4-5), and the decryption key is transferred to the slave unit (4-6). In the slave unit, when the decryption key is transferred from the master unit after the personal information protection function is set, the decryption key is stored in the storage unit in the slave unit (4-7).

  FIG. 5 shows an example of a processing flow after personal information registration. In the master unit, when the personal information protection function is set, when the update of the personal information such as the phone book is detected (5-1), the personal information data such as the phone book is encrypted (5-2). ). Then, the encrypted personal information data such as the phone book is stored in the encrypted information storage unit (5-3), and the unencrypted personal information data such as the phone book is stored in the non-encrypted information storage unit. (5-4).

  Thereafter, when the master unit detects that it is located outside the service area where public radio communication radio waves do not reach and is separated from the slave unit (5-5), the encryption stored in the non-encrypted information storage unit Data of personal information such as a telephone directory that has not been converted is deleted (5-6).

  After that, it is monitored whether or not it is located within a range where radio waves of public wireless communication can reach, and if it is located within the range (5-7), data of personal information such as an encrypted telephone directory is stored. A request is made to the slave unit for decryption (5-8). Upon receiving the decryption request, the slave unit uses the decryption key stored in the slave unit to decrypt the encrypted personal information data such as the telephone directory (5-9). The master unit restores the decrypted personal information data such as the telephone directory to the non-encrypted information storage unit (5-10).

  In the above-described processing flows 5-7 and 5-8, the encryption is performed when it is detected that the parent device is located within the service area, or when it is detected that the parent device and the child device are connected. It can be configured to request the slave unit to decrypt personal information data such as a telephone directory.

  FIG. 6 shows a configuration example of functional blocks of the parent device and the child device. The base unit 10 includes a call control unit 6-1, a wireless control unit 6-2, a personal information protection unit 6-3, a telephone directory editing unit 6-4, a key input control unit 6-5, and a display screen control unit 6-6. 6. Bluetooth communication unit 6-7 is provided. The subunit | mobile_unit 20 is provided with the Bluetooth communication part 6-8, the personal information protection part 6-9, and the key input control part 6-10.

  The call control unit 6-1 has a function of setting a communication channel for an outgoing call to another communication terminal apparatus or an incoming call from another communication terminal apparatus. The wireless control unit 6-2 is a functional unit that performs public wireless communication using the WCDMA method or the like, and has a function that enables wireless communication with other communication terminal devices.

  The personal information protection unit 6-3 has a function related to personal information protection shown in FIGS. The phone book editor 6-4 has functions related to input, editing, and deletion of personal information. The key input control unit 6-5 has a function of controlling input of key information operated by the user with respect to the parent device 10. The display screen control unit 6-6 has a function of controlling the display screen displayed to the user. The Bluetooth communication unit 6-7 has a function that enables short-range communication with the child device 20.

  Moreover, in the subunit | mobile_unit 20, the Bluetooth communication part 6-8 has a function which enables short distance communication with the main | base station 10. FIG. The personal information protection unit 6-9 has a function related to personal information protection shown in FIGS. The key input control unit 6-10 has a function of controlling input of key information operated by the user with respect to the slave unit 20.

  FIG. 7 shows a configuration example of hardware blocks of the parent device and the child device. The base unit 10 includes a wireless control unit 7-1, a central processing unit (CPU) 7-2, a memory 7-3, a key input unit 7-4, a display screen 7-5, and a Bluetooth communication unit 7-6. The handset 20 includes a Bluetooth communication unit 7-7, a central processing unit (CPU) 7-8, a memory 7-9, and a key input unit 7-10.

  In the base unit 10, a wireless communication unit 4-1 is a hardware unit that performs public wireless communication using the WCDMA method or the like. The central processing unit (CPU) 7-2 is a hardware unit that performs control including processing related to the above-described personal information protection in the parent device. The memory 7-3 is a memory for storing various information including an encryption key, encrypted information of personal information, non-encrypted information of personal information, and the like. The key input unit 7-4 is a key that the user operates to input to the parent device. The display screen 7-5 is a hardware unit that displays information such as images and characters to the user. The Bluetooth communication unit 7-6 is a hardware unit that enables near field communication with the child device 20.

  In the handset 20, the Bluetooth communication unit 7-7 is a hardware unit that enables short-range communication with the base unit 10. The central processing unit (CPU) 7-8 is a hardware unit that performs control including processing relating to the above-described personal information protection in the slave unit. The key input unit 7-10 is a key operated by the user for input to the slave unit.

  In the memory 7-3 and the memory 7-9, a series of programs that exhibit the same functions as the functional blocks shown in FIG. 6 are stored in advance. Then, the CPU 7-2 reads and executes these programs. As a result, each program becomes a process for executing each function.

  Note that the above-described programs are not necessarily stored in the memory 7-3 and the memory 7-9. For example, it may be stored in a “portable physical medium” such as a flexible disk (FD), a CD-ROM, an MO disk, a DVD disk, a magneto-optical disk, or an IC card. Or you may memorize | store in the "other computer (or server)" connected to a separation type mobile phone via a public line, the internet, LAN, WAN etc. Then, the separation type mobile phone may read and execute each program from the above-described flexible disk or the like.

  In this way, the personal information protection function is added to the base unit and handset of the separated mobile phone, the base unit stores the encryption key, the handset stores the decryption key, and the base unit is in an out-of-service state. If this happens, the personal information in the base unit that is not encrypted is deleted. In this way, personal information is prevented from leaking, and the deleted unencrypted personal information can be easily restored using the decryption key in the slave unit by joining the slave unit when the master unit returns to the service area. It becomes possible to do.

  In addition, as for the personal information, both plaintext data and encrypted data are stored in the master unit, and the processing response can usually be speeded up by using plaintext data. If the master unit is stolen while the master unit and the slave unit are separated and the user is talking using the slave unit, the master unit is taken out of the communication range with the slave unit. Is detected and the plaintext data is deleted. As a result, it becomes impossible to refer to the personal information data in the base unit alone, so that the security of the personal information data is maintained.

  In addition, it is not theft, and even if the master unit and the slave unit are out of the communication range accidentally and the plaintext data is deleted by the above configuration, the encrypted data remains, so the master unit When the main unit and the slave unit return to a state within the communication range, or when the master unit and the slave unit are connected, the plain text data is automatically generated, and the personal information of the plain text data can be left. It becomes possible.

DESCRIPTION OF SYMBOLS 10 Parent machine 11 Random number generation part 12 Encryption key generation part 13 Decryption key generation part 14 Encryption key storage part 15 Encryption part 16 Encryption information storage part 17 Non-encryption information storage part 20 Child machine 21 Decryption key storage part 22 Decryption part

Claims (4)

A communication terminal device that is detachably separated into a first device and a second device, and wherein the separated first device and the second device are wirelessly connected,
The first device is:
First storage means for storing first data and second data which is encrypted data of the first data;
A means for deleting the first data from the first storage means when it is detected that wireless connection with the second device is impossible;
The second device is:
Second storage means for storing a decryption key of the second data;
Either the first device or the second device is
When the first data has been deleted, the second data is used as the decryption key on condition that the first device and the second device can be wirelessly connected. A communication terminal apparatus comprising: a decoding unit that performs decoding.   The communication terminal apparatus according to claim 1, wherein the decoding means is provided in both the first apparatus and the second apparatus. A program for functioning a communication terminal device that is detachably separated into a first device and a second device, and in which the first device and the second device in a separated state are wirelessly connected,
Said first device;
Means for storing first data and second data which is encrypted data of the first data in a first storage means;
When it is detected that wireless connection with the second device is impossible, the first device is made to function as a means for deleting the first data,
Said second device,
Function as means for storing the decryption key of the second data in the second storage means;
Either the first device or the second device,
When the first data has been deleted, the second data is stored as the decryption key on the condition that the first device and the second device can be wirelessly connected. A program for functioning as a means for decoding by using. A method for protecting personal information stored in a communication terminal device that is detachably separated into a first device and a second device, and wherein the separated first device and the second device are wirelessly connected. There,
In the first device,
Storing first data and second data which is encrypted data of the first data in a first storage means;
A step of deleting the first data from the first storage means when it is detected that wireless connection with the second device is impossible;
In the second device,
Storing the decryption key of the second data in a second storage means;
In the first device or the second device,
When the first data has been deleted, the second data is stored as the decryption key on the condition that the first device and the second device can be wirelessly connected. A personal information protection method executed by the communication terminal device.

Images