JP2011181033A - Authentication system, mobile communication terminal device, authentication method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform authentication processing with good operability and in a high security level in the case of data transfer between a mobile communication terminal device and another information device. <P>SOLUTION: When a user inputs a password generation instruction from an input/output part 20, a password generation part 14 generates a password and records it in a storage part 15. A mail transmission part 13 transmits the generated password to a personal computer 30 by e-mail. A password extraction part 33 in the personal computer extracts the password from the e-mail, and an authentication request part 35 transmits an authentication request including the password to a mobile communication terminal device 10 via a cable 50. When the password under the authentication request and the password recorded in the storage part 15 coincide with each other, the authentication part 16 of the mobile communication terminal device 10 determines authentication OK to permit data transfer between the mobile communication terminal device and the personal computer 30. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an authentication technique for transferring data between a user's mobile communication terminal device and another information device.

  Various types of data such as phone book data and schedule book data are exchanged between a mobile communication terminal device such as a user's mobile phone and PHS terminal device and other information devices (such as a mobile communication terminal device and a personal computer). In recent years, this has been actively done. The phone book data and the like is data relating to user privacy, and it is necessary to prevent copying and copying to other information devices by unauthorized persons when the mobile communication terminal device is lost or stolen. For this reason, when data transfer is performed between the user's portable communication terminal device and another information device, authentication processing is generally performed prior to the data transfer.

  As such an authentication technique, the following technique is known (for example, see Non-Patent Document 1). In the technique described in Non-Patent Document 1, as shown in the sequence diagram of FIG. 8, the user inputs the same password P to the mobile communication terminal device 100 and the personal computer 200 prior to data transfer (steps S101 and S201). ). Thereafter, an authentication request is transmitted from the mobile communication terminal device 100 to the personal computer 200 (step S102).

  Thereby, the personal computer 200 applies the hash function H to the device-specific manufacturing number and time stamp, obtains the hash value α, and transmits it to the mobile communication terminal device 100 (steps S202 and S203). Further, the personal computer 200 applies a hash function to the hash value α and the password P to obtain the hash value β2.

  On the other hand, when the hash value α is sent from the personal computer 200, the mobile communication terminal device 100 applies the same hash function as that of the personal computer 200 to the hash value α and the password P to obtain the hash value β1. Calculate (step S103). Thereafter, the mobile communication terminal device 100 transmits the hash value β1 to the personal computer 200 (step S104).

  Thereby, the personal computer 200 compares the hash value β1 sent from the mobile communication terminal device 100 with the hash value β2 obtained in step S204 (step S205). And when both do not correspond (step S205 is NO), it determines with authentication NG and complete | finishes a process. On the other hand, when both match (step S205 is YES), it determines with authentication OK and notifies that to the mobile communication terminal device 100 (step S206). Thereby, authentication is completed and data transfer between the mobile communication terminal device 100 and the personal computer 200 is started.

  In addition to the above, the following authentication technique is known (for example, see Patent Document 1). In the technique described in Patent Document 1, as shown in FIG. 9, when the user of the mobile phone 300 uses a personal computer 400 for personal use, the password generation unit 501 in the management device 500 uses the one-time password. The generated one-time password is associated with the device ID of the personal computer 400 and stored in the password storage unit 502 while being generated and transmitted to the mobile phone 300.

  The user of the mobile phone 300 displays the one-time password sent from the management device 500 on the display unit and inputs the displayed one-time password to the personal computer 400. As a result, the personal computer 400 transmits the input one-time password to the management apparatus 500.

  The authentication unit 503 in the management apparatus 500 performs authentication by checking whether or not the combination of the one-time password sent from the personal computer 400 and the transmission source device ID is stored in the password storage unit 502. I do. If such a combination is not stored, an authentication NG is transmitted to the personal computer 400 and its use is prohibited. On the other hand, when such a combination is stored in the password storage unit 502, an authentication OK is transmitted to the personal computer 400 to permit its use. Thereafter, data can be transferred between the personal computer 400 and the mobile phone 300.

JP 2007-241368 A

MCPC GL-003, Object Exchange Implementation Guidelines, Ver.1.0, March 1, 2001, 7th page

  The techniques described in Non-Patent Document 1 and Patent Document 1 have the following problems, respectively.

  The technique described in Non-Patent Document 1 has a problem that operability is poor because the user needs to input a password to each of the two information devices that perform data transfer each time data is transferred. In addition, since it is necessary to input a password to two information devices, there is a high risk that a simple password is used, and it is difficult to increase the security level.

  On the other hand, the technique described in Patent Document 1 can reduce the number of times a user inputs a password (one-time password), so that the operability compared to the technique described in Non-Patent Document 1 is achieved. Can be made high. However, in order to increase the security level, it is necessary to use a complicated password with a large number of digits. Such a password input operation places a burden on the user even if the number of operations is one. . That is, there is a problem that sufficient operability cannot be obtained even by the technique described in Patent Document 1. Moreover, in the technique described in Patent Document 1, since the one-time password sent from the management device to the user's mobile phone is displayed on the display unit, there is a risk that the one-time password will be seen and There is a problem that it is difficult to increase the security level.

[Object of the invention]
Accordingly, an object of the present invention is to provide an authentication system that solves the problem of poor operability and the difficulty of increasing the security level.

A first authentication system according to the present invention includes:
A mobile communication terminal device, and an information device for transferring data between the mobile communication terminal device,
The mobile communication terminal device
A password generator for generating a password;
A password storage unit in which the password generated by the password generation unit is recorded;
A transmission destination information storage unit in which information indicating the information device is recorded as transmission destination information indicating a transmission destination of a password;
A password transmission unit that transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via a first transfer path;
An authentication unit that performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit;
When the authentication unit succeeds in authentication, it comprises a lock management unit that permits data transfer between the own device and the information device,
The information device is
An authentication request unit is provided that transmits an authentication request including the password sent via the first transfer path to the mobile communication terminal device via the second transfer path.

The mobile communication terminal device according to the present invention is
A password generator for generating a password;
A password storage unit in which the password generated by the password generation unit is recorded;
A destination information storage unit in which destination information indicating a password destination is recorded;
A password transmission unit that transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via a first transfer path;
An authentication unit that performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit;
When the authentication unit succeeds in authentication, the authentication unit includes a lock management unit that permits data transfer between the information processing apparatus and the information device.

An authentication method according to the present invention includes:
The password generation unit of the mobile communication terminal device generates a password and records the generated password in the password storage unit,
The password transmission unit of the mobile communication terminal device transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via the first transfer path. Send
The authentication unit of the information device transmits an authentication request including the password sent via the first transfer path to the portable communication terminal device via the second transfer path,
The authentication unit of the mobile communication terminal device performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit. Do.

The program according to the present invention is:
Computer
A password generation unit that generates a password and records it in a password storage unit;
A password transmission unit that transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via the first transfer path;
An authentication unit that performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit;
When the authentication unit succeeds in authentication, the authentication unit functions as a lock management unit that permits data transfer between the device itself and the information device.

  According to the present invention, it is possible to obtain an effect that it is possible to provide an authentication system with high operability and high security level.

It is a block diagram which shows the structural example of the 1st Embodiment of this invention. It is a figure which shows the structural example of the memory | storage part 15 used in the 1st Embodiment of this invention. It is a sequence diagram for demonstrating the operation | movement of the 1st Embodiment of this invention. It is a sequence diagram for demonstrating the operation | movement of the 2nd Embodiment of this invention. It is a figure which shows the structural example of the memory | storage part 15 used in the 3rd Embodiment of this invention. It is a sequence diagram for demonstrating operation | movement of the 3rd Embodiment of this invention. It is a figure which shows the structural example of the memory | storage part 15 used in the 4th Embodiment of this invention. It is a sequence diagram for demonstrating the technique described in the nonpatent literature 1. FIG. 10 is a block diagram for explaining a technique described in Patent Document 1.

  Next, embodiments of the present invention will be described in detail with reference to the drawings.

[First embodiment of the present invention]
Referring to FIG. 1, a first embodiment of an authentication system according to the present invention includes a mobile communication terminal device 10 such as a mobile phone or a PHS terminal device, and a personal computer 30. In the present embodiment, when data is transferred between the mobile communication terminal device 10 and the personal computer 30, the two are physically connected by a cable 50 such as a USB cable.

  The mobile communication terminal device 10 includes a control unit 11, a radio unit 12, a mail transmission unit 13, a password generation unit 14, a storage unit 15 including a nonvolatile memory, an authentication unit 16, and a lock management unit. 17, an external communication unit 18, a data transfer unit 19, and an input / output unit 20 including a numeric keypad, an LCD, and the like.

  The control unit 11 controls each part of the apparatus. The wireless unit 12 exchanges data with a wireless base station (not shown).

  As shown in FIG. 2, the storage unit 15 includes a password storage unit 151, a transfer lock flag storage unit 152, and a mail address storage unit 153. In the mail address storage unit 153, the mail address of the personal computer 30 is recorded.

  The password generation unit 14 generates a password for authenticating with the personal computer 30 and records it in the password storage unit 151 in the storage unit 15. The password generation unit 14 passes the generated password and the mail address of the personal computer 30 recorded in the mail address storage unit 153 of the storage unit 15 to the mail transmission unit 13. As a password generation method, for example, a method of generating a random number and using it as a password, or performing a calculation using a hash function for the current time and using the obtained hash value as a password is used. be able to.

  The e-mail transmission unit 13 generates an e-mail (sometimes simply referred to as e-mail) including the password passed from the password generation unit 14 as an e-mail body or an attached file, and generates the e-mail as a password. The data is transmitted via the wireless unit 12 to the mail address passed from the unit 14 (to the personal computer 30). In the present embodiment, the mail transmission unit 13 embeds the password passed from the password generation unit 14 at a predetermined position in the mail body, and the password is included in the e-mail. A predetermined character string (including symbols, etc.) is embedded in a subject (subject), an e-mail with the source address as the mail address of the mobile communication terminal device 10 and the destination address as the mail address of the personal computer 30 is sent. Generate.

  The external communication unit 18 is an interface function unit when the mobile communication terminal device 10 is connected to an external device by USB (Universal Serial Bus), IrDA (Infrared Data Association), Bluetooth, or the like.

  The authentication unit 16 compares the password included in the authentication request sent from the personal computer 30 with the password recorded in the password storage unit 151. If the two match, the authentication is OK. If they do not match, it is determined as authentication NG.

  When the authentication unit 16 determines that the authentication is OK, the lock management unit 17 changes the transfer lock flag recorded in the transfer lock flag storage unit 152 to the transfer permission state (unlock state), and the authentication NG If it is determined, the state is changed to a transfer prohibited state (lock state).

  The data transfer unit 19 refers to the transfer lock flag storage unit 152 when data transfer is instructed by the user or the personal computer 30, and is instructed if the transfer lock flag recorded therein is in the unlocked state. If the data is transferred via the external communication unit 18 and is in the locked state, the data transfer is not performed.

  The mail transmission unit 13, the password generation unit 14, the authentication unit 16, the lock management unit 17, the external communication unit 18, and the data transfer unit 19 can be realized by a CPU (central processing unit). A disk, a semiconductor memory, and other recording media on which a program for causing the CPU to function as each unit is prepared, and the CPU reads the program. The CPU realizes the above-described units on its own CPU by controlling its own operation according to the read program.

  The personal computer 30 includes a control unit 31, a mail reception unit 32, a password extraction unit 33, a storage unit 34, an authentication request unit 35, and an external communication unit 36.

  The control unit 31 controls each unit in the personal computer 30. The mail receiving unit 32 receives an e-mail addressed to the personal computer 30.

  If the e-mail received by the mail receiving unit 32 is an e-mail that is sent from the mobile communication terminal device 10 and includes a password in the text, the password extracting unit 33 determines the e-mail text in advance. The password incorporated in the predetermined position is extracted and recorded in the storage unit 34. Whether or not the e-mail is from the mobile communication terminal device 10 is determined based on the source address of the e-mail, and whether or not a password is embedded in the mail body is predetermined in the subject. The determination is made based on whether or not the character string being embedded is embedded.

  The external communication unit 36 is an interface function unit when the personal computer 30 is connected to an external device by USB, IrDA, Bluetooth, or the like.

  The authentication request unit 35 carries the authentication request including the password recorded in the storage unit 34 via the external communication unit 36 after the portable communication terminal device 10 and the personal computer are connected via the external communication unit 36. It transmits to the communication terminal device 10.

  The control unit 31, the mail reception unit 32, the password extraction unit 33, the authentication request unit 35, and the external communication unit 36 in the personal computer 30 cause the CPU to read programs for realizing the above-described units, and cause the CPU to read the programs. This can be realized by performing an operation according to the above.

[Description of Operation of First Embodiment]
Next, the operation of the present embodiment will be described in detail with reference to the sequence diagram of FIG.

  The user of the mobile communication terminal device 10 inputs a password generation instruction from the input / output unit 20 when transferring data with the personal computer 30. This instruction is transmitted to the password generation unit 14 via the control unit 11. At this time, the transfer lock flag recorded in the transfer lock flag storage unit 152 is in a locked state (step S0).

  The password generation unit 14 generates a password and records the generated password in the password storage unit 151 in the storage unit 15. Further, the password generation unit 14 passes the generated password and the e-mail address of the personal computer 30 recorded in the e-mail address storage unit 153 to the e-mail transmission unit 13 (step S1).

  The mail transmission unit 13 embeds the password passed from the password generation unit 14 in a predetermined position of the mail body, embeds a predetermined character string indicating that the e-mail includes the password in the subject, Is created as an e-mail address of the mobile communication terminal device 10 and the destination is the e-mail address of the personal computer 30, and is transmitted via the wireless unit 12 (step S2).

  This electronic mail is received by the mail receiving unit 32 in the personal computer 30. The password extraction unit 33 is configured such that the e-mail is transmitted from the mobile communication terminal device 10 and a predetermined character string is embedded in the subject. Therefore, a password is embedded in the e-mail. The password embedded in the predetermined position of the mail text is extracted and recorded in a password storage unit (not shown) of the storage unit 34 (step S3).

  Thereafter, the user physically connects the mobile communication terminal device 10 and the personal computer 30 using the cable 50 such as a USB cable (step S4). The connection time by the cable 50 may be before the password is generated.

  When the control unit 31 detects that the mobile communication terminal device 10 and the personal computer 30 are in a physically connected state (step S5), the control unit 31 activates the authentication request unit 35. Thereby, the authentication request part 35 reads a password from the memory | storage part 34, produces | generates the authentication request containing the read password, and transmits it to the mobile communication terminal device 10 (step S6).

  When receiving the authentication request from the personal computer 30 via the external communication unit 18, the authentication unit 16 in the mobile communication terminal device 10 is recorded in the password included therein and the password storage unit 151 in the storage unit 15. Compared passwords are compared (step S7). If they match, it is determined that the authentication is OK, and the fact is displayed on the input / output unit 20 and the personal computer 30 is notified. That is, if the passwords match, the authentication state is entered (step S8). On the other hand, if the two do not match, it is determined as authentication NG, and the process ends.

  When the authentication unit 16 determines that the authentication is OK, the lock management unit 17 changes the lock flag recorded in the transfer lock flag storage unit 152 of the storage unit 15 to the unlocked state (step S9). As a result, data can be transferred between the mobile communication terminal device 10 and the personal computer 30 (step S10). For example, if the user inputs a transfer instruction for instructing transfer of the phone book data to the personal computer 30 from the input / output unit 20, the data transfer unit 19 stores the transfer lock flag storage unit 152 in advance of the data transfer. The state of the recorded transfer lock flag is determined. In this case, since the transfer lock flag is in the unlocked state, the data transfer unit 19 reads the phone book data from the storage unit 15, for example, and the read phone book data is personalized via the external communication unit 18 and the cable 50. Transfer to computer 30. When the transfer lock flag is in the locked state, the data transfer unit 19 does not perform data transfer.

  When the data transfer is completed, the user physically disconnects the mobile communication terminal device 10 and the personal computer 30 by removing the cable 50 (step S11). When the control unit 11 detects that the mobile communication terminal device 10 and the personal computer 30 are physically disconnected, the lock management unit 17 in the mobile communication terminal device 10 is recorded in the transfer lock flag storage unit 152. The transfer lock flag is changed to the locked state, and the password recorded in the password storage unit 151 is discarded (steps S12 and S13). Further, when the control unit 31 in the personal computer 30 detects physical disconnection, the control unit 31 discards the password recorded in the storage unit 34 (step S14).

  Thereafter, even if an unauthorized person who has illegally acquired the mobile communication terminal apparatus 10 physically connects the mobile communication terminal apparatus 10 and the personal computer of the unauthorized person and inputs a data transfer instruction from the input / output unit 20 Since the transfer lock flag recorded in the storage unit 15 is in the locked state, the data transfer unit 19 does not perform the data transfer process and can prevent unauthorized copying of the data of the mobile communication terminal device 10. . For example, even if an unauthorized person inputs a password generation instruction from the input / output unit 20 and causes the mobile communication terminal device 10 to perform the above-described steps S1 and S2, the password transmission destination is used by the unauthorized person. Since it is limited to the personal computer 30 of the user who cannot, security is maintained.

  In the embodiment described above, authentication requests and data are exchanged between the mobile communication terminal device 10 and the personal computer 30 via the cable 50 such as a USB cable. Data or the like may be exchanged using a technology or a near field data communication technology using infrared rays such as IrDA.

[Effect of the first embodiment]
According to the present embodiment, it is possible to obtain an effect that it is possible to provide an authentication system with high operability and a high security level. That is, in the present embodiment, the mobile communication terminal device 10 transmits the password generated by the password generation unit 14 to the personal computer 30 using the mail transmission unit 13 (password transmission unit), and the personal computer 30 The authentication request unit 35 is used to transmit an authentication request including the password sent from the mobile communication terminal device 10 to the mobile communication terminal device 10, and the mobile communication terminal device 10 uses the authentication unit 16. Since the user does not need to perform any password input operation such as performing authentication by comparing the password in the password storage unit 151 with the password being requested for authentication, the operability can be improved. In addition, since the password cannot be seen while entering the password, and the complicated password generated by the password generation unit 14 can be used, the security level can be increased.

[Second embodiment of the present invention]
Next, a second embodiment of the authentication system according to the present invention will be described. The present embodiment is characterized in that a password is transmitted from the mobile communication terminal device to the personal computer when the mobile communication terminal device and the personal computer are physically connected by a cable.

  The configuration of the present embodiment is almost the same as that of the embodiment shown in FIG. 1, and the processing performed by the control units 11 and 31 and the processing performed by the password extraction unit 33 are different from those of the first embodiment. This difference will be described.

  Referring to the sequence diagram of FIG. 4, when transferring data between the mobile communication terminal device 10 and the personal computer 30, the user connects both with the cable 50 (step S <b> 41). Thereby, the mobile communication terminal device 10 and the personal computer 30 are in a physically connected state (step S42). When detecting that the mobile communication terminal device 10 and the personal computer 30 are physically connected, the control unit 11 in the mobile communication terminal device 10 instructs the password generation unit 14 to generate a password. Thereby, the password generation part 14 performs the same process as step S1 and S2 mentioned above.

  On the other hand, in the personal computer 30, the mail receiving unit 32 receives an email from the mobile communication terminal device 10, and the password extracting unit 33 extracts the password from the email and records it in the password storage unit of the storage unit 34. This is notified to the control unit 31 (step S3 ′). Thereby, the control unit 31 activates the authentication request unit 35. When activated, the authentication request unit 35 performs the same process as in step S6 described above. The subsequent processing is the same as in the first embodiment.

[Effect of the second embodiment]
In this embodiment, since the portable communication terminal device 10 and the personal computer 30 are connected by the cable 50, the password is transmitted from the portable communication terminal device 10 to the personal computer 30. Can be made higher than in the first embodiment.

[Third embodiment of the present invention]
Next, a third embodiment of the present invention will be described. This embodiment provides data transfer when the mobile communication terminal device has a key operation restriction function that restricts key operations when there is no key operation for a certain period of time or when the housing is folded. Prior to this, the key operation restriction can be automatically released.

  The storage unit 15 of the present embodiment includes a key operation lock flag storage unit 154 and a key operation restriction release password storage unit 155 in addition to the storage units 151 to 153 shown in FIG. (See FIG. 5). The key operation lock flag storage unit 154 stores a key operation lock flag indicating whether or not to restrict the key operation. In addition, the key operation restriction release password storage unit 155 stores a password (key operation restriction release password) for releasing the key operation restriction.

  The control unit 11 in the mobile communication terminal device 10 is recorded in the key operation lock flag storage unit 154 when there is no key operation for a certain period of time or when the case of the mobile communication terminal device 10 is folded. The key operation lock flag is set to the locked state, and when the key operation restriction release password is input, the key operation lock flag is set to the unlocked state. The control unit 11 enables all key operations performed in the input / output unit 20 when the key operation lock flag is in the unlocked state, and performs the operation in the input / output unit 20 when in the locked state. Restrict some key operations. The control unit 11 restricts the key operation so that the key operation for inputting the key operation restriction release password is directed even when the key operation lock flag is in the locked state.

  Referring to the sequence diagram of FIG. 6, when transferring data between the mobile communication terminal device 10 and the personal computer 30, the user connects both with the cable 50 (step S <b> 41). As a result, both are physically connected (step S42).

  When the mobile communication terminal device 10 and the personal computer 30 are connected, the control unit 11 inputs a password generation instruction to the password generation unit 14. Thereby, the password generation unit 14 determines whether or not the key operation lock flag recorded in the storage unit 15 is in a locked state (step S61). If not in the locked state (NO in step S61), the mobile communication terminal device 10 and the personal computer 30 perform the same processing as in the second embodiment described above (step S62).

  On the other hand, when the key operation lock flag is in the locked state (YES in step S62), a data transfer password (may be referred to as a data transfer password) is generated and recorded in the password storage unit 151. In addition, the generated password and the mail address of the personal computer 30 recorded in the mail address storage unit 153 are passed to the mail transmission unit 13. Further, the password generation unit 14 passes the password (may be referred to as a cancellation password) recorded in the key operation restriction cancellation password storage unit 155 to the mail transmission unit 13 (step S63).

  As a result, the mail transmitting unit 13 embeds the data transfer password and the release password in predetermined positions in the mail body, and sets a predetermined character string indicating that the e-mail includes two types of passwords. It is embedded in the subject, and an e-mail is created with the sender as the mail address of its own device and the destination as the mail address of the personal computer 30, and the created e-mail is sent to the personal computer 30 via the wireless unit 12 (step S 64). ).

  This electronic mail is received by the mail receiving unit 32 in the personal computer 30. Based on the character string embedded in the subject of the e-mail, the password extraction unit 33 determines that two kinds of passwords are embedded in the e-mail, and is incorporated at a predetermined position in the mail body. The data transfer password and the release password are extracted and recorded in the data transfer password storage unit and the release password storage unit (not shown) in the storage unit 34 (step S65).

  When two types of passwords are recorded in the storage unit 34, the control unit 31 activates the authentication request unit 35. Thereby, the authentication request part 35 produces | generates the authentication request | requirement containing the password for data transfer recorded in the memory | storage part 34, and the password for cancellation | release, and transmits to the portable communication terminal device 10 (step S66).

  When the authentication unit 16 in the mobile communication terminal apparatus 10 receives the authentication request via the external communication unit 18, the authentication unit 16 compares the data transfer password included in the request with the password recorded in the password storage unit 151. If they match, it is determined that the authentication is OK, and the transfer lock flag recorded in the transfer lock flag storage unit 152 is changed to the unlocked state. On the other hand, if they do not match, it is determined as authentication NG, and the process ends. If it is determined that the authentication is OK, the authentication unit 16 further compares the password for cancellation in the authentication request with the password recorded in the key operation restriction cancellation password storage unit 155. If the two match, the key operation lock flag recorded in the key operation lock flag storage unit 154 is set to the unlocked state. If the two do not match, the process ends (step S67).

  In step S67, the transfer lock flag and the key operation lock flag are unlocked, whereby the mobile communication terminal device 10 and the personal computer 30 are in an authentication state, and the key operation restriction is released for the mobile communication terminal device 10. (Step S69). As a result, data can be transferred between the mobile communication terminal device 10 and the personal computer 30 (step S69). Thereafter, when the cable 50 is removed from the mobile communication terminal device 10 and the personal computer 30 (step S70), the mobile communication terminal device 10 discards the password recorded in the password storage unit 151 and transfers the transfer lock flag storage unit. Both the flag 152 and the flag recorded in the key operation lock flag storage unit 154 are changed to the locked state (steps S71 and S72).

[Effect of the third embodiment]
According to the present embodiment, when the mobile communication terminal device has a key operation restriction function for restricting key operation when there is no key operation for a certain period of time or when the housing is folded, Prior to data transfer, it is possible to obtain an effect that the key operation restriction can be automatically released. The reason is that the mobile communication terminal device 10 transmits a key operation restriction release password to the personal computer 30, and the personal computer 30 transmits an authentication request including the key operation release password to the mobile communication terminal device 10. This is because when the mobile communication terminal device 10 matches the password included in the authentication request with a predetermined password, the key operation restriction is canceled.

[Fourth embodiment of the present invention]
Next, a description will be given of a fourth embodiment of the authentication system according to the present invention. The present embodiment is characterized in that even a personal computer that does not include the password extraction unit 33 or the authentication request unit 35 can perform data transfer with the mobile communication terminal device 10. In the following description, differences between the present embodiment and the above-described first embodiment will be described.

  The personal computer 30 used in this embodiment does not incorporate the password extraction unit 33 and the authentication request unit 35. In addition, the storage unit 15 used in the present embodiment is provided with a batch file storage unit 156 in addition to the storage units 151 to 153 provided in the storage unit 15 used in the first embodiment. (See FIG. 7). The batch file storage unit 156 includes a template of a batch file (program file) for performing a process of transmitting an authentication request including a password to the mobile communication terminal device 10 via the external communication unit 36 in the personal computer 30. It is recorded.

  When transferring data between the mobile communication terminal device 10 and the personal computer 30, the user inputs a password generation instruction from the input / output unit 20 as in the first embodiment described above. This password generation instruction is transmitted to the password generation unit 14 via the control unit 11. Thereby, the password generation unit 14 first generates a password, and records the generated password in the password storage unit 151 in the storage unit 15. Thereafter, a batch file template is input from the batch file storage unit 156, and the generated password is embedded in a predetermined password embedded portion of the template to complete the batch file. Then, the completed batch file and the mail address of the personal computer 30 recorded in the mail address storage unit 153 are passed to the mail transmission unit 13.

  The mail transmission unit 13 uses the batch file passed from the password generation unit 14 as an attached file, the mail address of the personal computer 30 passed from the password generation unit 14 as the destination, the mail address of the own device 10 as the transmission source, An e-mail is generated with a predetermined character string (a character string indicating that a batch file for transmitting an authentication request is attached) as a subject, and the generated e-mail is transmitted via the wireless unit 12 To do. This e-mail is received by the mail receiving unit 32 in the personal computer 30 and placed in the inbox.

  Thereafter, the user connects the mobile communication terminal device 10 and the personal computer 30 with the cable 50, and opens the attached file (batch file) attached to the e-mail. As a result, the batch file is executed in the personal computer 30 (executed by the CPU in the personal computer 30), and an authentication request including the password embedded in the batch file is created, via the external communication unit 36. It is transmitted to the mobile communication terminal device 10. The subsequent operations are the same as those in the first embodiment.

[Effect of the fourth embodiment]
In the present embodiment, data is transferred to and from the mobile communication terminal device 10 using the personal computer 30 that does not have a special function (the function that the password extraction unit 33 or the authentication request unit 35 has). The effect that it becomes possible to obtain can be acquired. The reason is a batch file in which the password generated by the password generation unit 14 is embedded in the personal computer 30 from the mobile communication terminal device 10, and this file is embedded in this file by being executed. This is because an electronic mail having a batch file for transmitting an authentication request including a password to the personal computer 30 as an attached file is transmitted to the personal computer 30.

  The present invention is preferably applied to a mobile phone, a PHS terminal device, and the like.

DESCRIPTION OF SYMBOLS 10 Mobile communication terminal device 11 Control part 12 Wireless part 13 Mail transmission part 14 Password generation part 15 Storage part 16 Authentication part 17 Lock management part 18 External communication part 19 Data transfer part 20 Input / output part 30 Personal computer 31 Control part 32 Mail reception Unit 33 Password extraction unit 34 Storage unit 35 Authentication request unit 36 External communication unit 50 Cable 100 Mobile communication terminal device 151 Password storage unit 152 Transfer lock flag storage unit 153 Mail address storage unit 154 Key operation lock flag storage unit 155 Key operation restriction release Password storage unit 156 Batch file storage unit 200 Personal computer 300 Mobile phone 400 Personal computer 500 Management device 501 Password generation unit 501 Password storage unit 502 Password storage unit 503 Authentication unit

Claims (8)

A mobile communication terminal device, and an information device for transferring data between the mobile communication terminal device,
The mobile communication terminal device
A password generator for generating a password;
A password storage unit in which the password generated by the password generation unit is recorded;
A transmission destination information storage unit in which information indicating the information device is recorded as transmission destination information indicating a transmission destination of a password;
A password transmission unit that transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via a first transfer path;
An authentication unit that performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit;
When the authentication unit succeeds in authentication, it comprises a lock management unit that permits data transfer between the own device and the information device,
The information device is
An authentication request unit is provided that transmits an authentication request including the password sent via the first transfer path to the portable communication terminal device via the second transfer path. Authentication system. The authentication system according to claim 1,
The first transfer path is an email;
The second transfer path is a cable or a wireless connection;
The authentication system, wherein the transmission destination information is a mail address of the information device. The authentication system according to claim 2,
The password generation unit generates a password when the mobile communication terminal device and the information device are connected by a cable. The authentication system according to claim 3,
The mobile communication terminal device includes a key operation restriction unit that restricts key operations,
The password transmission unit transmits a key operation restriction release password to the information device in addition to the password generated by the password generation unit,
The authentication request unit transmits an authentication request including a key operation restriction release password sent from the mobile communication terminal device in addition to the password to the mobile communication terminal device,
The authentication unit compares a key operation restriction release password included in the authentication request with a predetermined password, and if both match, releases the key operation restriction by the key operation restriction unit. An authentication system characterized by The authentication system according to claim 2,
The password transmission unit is an executable file in which the password generated by the password generation unit is embedded, and when the file is executed, an authentication request including the password embedded in the file is sent to the second Send an email with the executable file sent to the transmission path to the information device,
The information device executes an execution format file sent from the mobile communication terminal device instead of the authentication request unit, thereby executing an authentication request including a password embedded in the execution format file. An authentication system comprising execution means for transmitting to a communication terminal device. A password generator for generating a password;
A password storage unit in which the password generated by the password generation unit is recorded;
A destination information storage unit in which destination information indicating a password destination is recorded;
A password transmission unit that transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via a first transfer path;
An authentication unit that performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit;
A mobile communication terminal device comprising: a lock management unit that permits data transfer between the device itself and the information device when the authentication unit succeeds in authentication. The password generation unit of the mobile communication terminal device generates a password and records the generated password in the password storage unit,
The password transmission unit of the mobile communication terminal device transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via the first transfer path. Send
The authentication unit of the information device transmits an authentication request including the password sent via the first transfer path to the portable communication terminal device via the second transfer path,
The authentication unit of the mobile communication terminal device performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit. An authentication method characterized by performing. Computer
A password generation unit that generates a password and records it in a password storage unit;
A password transmission unit that transmits the password generated by the password generation unit to the information device indicated by the transmission destination information recorded in the transmission destination information storage unit via the first transfer path;
An authentication unit that performs authentication by comparing the password in the authentication request sent from the information device via the second transfer path with the password recorded in the password storage unit;
A program for functioning as a lock management unit that permits data transfer between its own device and the information device when the authentication unit succeeds in authentication.

Images