JP2015177279A - telematics terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a telematics terminal capable of transmitting an emergency call to an emergency contact address even in the case where UIM detection is failed.SOLUTION: When performing initialization processing on an UIM 2, control means 10 of a telematics terminal 1 reads a subscriber identification code from the UIM 2, holds the read code in a RAM 14, and then performs UIM detection processing (S5) for detecting the UIM 2. If the UIM 2 cannot be normally detected, a state of the UIM 2 is determined as an abnormal state. When a request of connection to a mobile communication network 3 is received after the state of the UIM 2 is determined as an abnormal state, the control means 10 confirms whether the request of connection to the mobile communication network 3 depends on an operation of transmitting an emergency call. If the request depends on an operation of transmitting an emergency call, an emergency call is transmitted by connecting to the mobile communication network 3 while utilizing the subscriber identification code being held in the RAM 14.

Description

  The present invention relates to a telematics terminal used in telematics (Telematics) that provides services using a mobile communication network, and more particularly to a telematics terminal having an emergency call function for sending an emergency call to an emergency contact in an emergency.

  One of the telematics that provides information services to automobiles etc. using mobile communication networks is a vehicle emergency call service that sends emergency calls to designated emergency contacts when an emergency such as a traffic accident occurs (for example, , Patent Document 1) has been studied for practical use.

  In order to use the vehicle emergency call service, it is necessary to mount a telematics terminal having at least a mobile communication function in the vehicle. Patent Document 1 discloses a conventional technology that uses a telematics terminal for a vehicle emergency call service. In addition to the mobile communication function, it has a function to send an emergency call in an emergency, a function to detect vehicle position information included in the emergency call, and a function to detect an emergency using a collision detection sensor and a rollover detection sensor Is described.

  In order to perform data communication using a mobile communication network, a UIM (UIM: User Identity Module) serving as a subscriber identification module for mobile communication is required as in the case of a mobile phone. The UIM is a medium that stores information and applications necessary for mobile communication.

  A terminal for mobile communication equipped with a UIM detects a UIM by transmitting a command (STATUS command defined in 3GPP TS 31.101) in order to confirm that the UIM is attached. If the process is performed periodically (for example, every 30 seconds) and the UIM detection fails, the UIM state is determined to be abnormal, and a message indicating that the UIM is abnormal is displayed on the display. It is common to limit the functions that can be used in a mobile communication terminal.

  UIM detection failures occur for various reasons. For example, in Patent Document 2, when an ETC card, which is a contact IC card, is inserted into an on-board device for ETC, the contact point between the on-board device for ETC and the ETC card is caused by vibration during traveling of the vehicle. It is described that a defect occurs and the ETC card becomes inactive while running. In Patent Document 3, in order to cancel the inactive state of the ETC card, the car navigation connected to the ETC on-board unit is turned on again after the ETC on-board unit is turned off. Perform a reset operation.

  The cause of UIM detection failure may be due to not only the above-described cause but also a security function provided by the UIM. Since the UIM is sometimes used for mobile payments, the IC chip mounted on the UIM is required to have security functions against failure use analysis, side channel attacks, and physical attacks in the same way as an IC chip for a credit card. .

  For example, a sensor (for example, a clock frequency sensor, a power sensor, and a temperature sensor) that measures an operation state as an IC card with a countermeasure against failure use analysis that varies the operation state (for example, clock frequency, power, and temperature). An IC card provided with is disclosed in Patent Document 3. In Patent Document 3, the measurement result of the sensor that measures the operation state is included in the response. However, as described in “Background Art” of Patent Document 3, the measurement result of the sensor that measures the operation state is When the standard value is deviated, the operation of the IC card is generally stopped.

  When a UIM equipped with the security function described above is attached to a mobile communication terminal, if for some reason the measurement result of the sensor that measures the operating state deviates from the reference value, the UIM operation stops and the UIM Since the detection fails, the functions available in the mobile communication terminal are limited.

  In particular, in the case of a vehicle emergency call service, considering the fact that the system operates when an emergency such as a traffic accident occurs, the operating state (eg, voltage) of the UIM is affected by the impact when the traffic accident occurs. It can be assumed that the UIM operation stops due to the above-described security function.

JP 2000-232533 A JP 2009-80540 A JP 2012-27667 A

  Accordingly, an object of the present invention is to provide a telematics terminal capable of sending an emergency call to an emergency contact address even when UIM detection fails in the UIM detection process for detecting a UIM attached. .

  In the first invention for solving the above-described problem, when a UIM is initialized, a subscriber identification code is read from the UIM and stored in a memory, and then a predetermined command is transmitted to the UIM and is attached. The UIM detection process for detecting the UIM is periodically performed, and when the UIM cannot be normally detected in the UIM detection process, the UIM state is determined to be an abnormal state and the available functions are limited. A control means, and when the control means receives a connection request to the mobile communication network after determining that the state of the UIM is abnormal, the connection request to the mobile communication network sends an emergency call. If it is due to the operation to send an emergency call, the subscriber identification code stored in the memory is used to connect to the mobile communication network and If originated the broadcast, not due operation of transmitting an emergency call, a telematics terminal, characterized in that no connection to the mobile communication network. According to the first invention described above, even when the UIM detection process fails, an emergency call can be transmitted using the subscriber identification code held in the memory.

  Further, according to a second invention, in the telematics terminal described in the first invention, if the UIM cannot be normally detected in the UIM detection process, the control means re-initializes the UIM, It is characterized in that when the number of failures in the initialization process continuously exceeds a specified value, it is determined that the UIM is in an abnormal state. According to the second invention described above, when the UIM cannot be normally detected in the UIM detection process, the UIM abnormality can be resolved by the reinitialization process by reinitializing the UIM. Then, before the telematics terminal determines that the UIM is in an abnormal state, the UIM abnormality can be resolved.

  Further, the third invention is the telematics terminal according to the first invention or the second invention, further comprising environment measuring means for measuring the operating environment of the UIM, wherein the control means is in an abnormal state of the UIM. If it is determined that there is an environmental abnormality from the output of the environmental measurement means, the confirmation result is stored in the memory, and after determining that the UIM is in an abnormal state, When a connection request to the mobile communication network is received by the operation of sending a report, the subscriber identification code stored in the memory is used to connect to the mobile communication network only when an environmental abnormality occurs. , Sending emergency calls. According to the third invention described above, an emergency call can be sent only when the reason why the UIM cannot be normally detected in the UIM detection process can be determined as an abnormality in the operating environment of the UIM. In the case of a cause, it is possible not to send an emergency call.

  As described above, according to the present invention, it is possible to provide a telematics terminal capable of sending an emergency call to an emergency contact address even if UIM detection fails in the UIM detection process for detecting the UIM that is attached.

FIG. 3 is a diagram illustrating a telematics terminal according to the first embodiment. The figure explaining the file structure of UIM. FIG. 1 is a first diagram illustrating the operation of a telematics terminal that changes the state of a UIM. FIG. 1 is a diagram for explaining the operation of a telematics terminal when it receives a connection request to a mobile communication network. FIG. 6 is a diagram illustrating a telematics terminal according to a second embodiment. FIG. 2 is a second diagram illustrating the operation of a telematics terminal that changes the state of a UIM. FIG. 2 is a diagram for explaining the operation of the telematics terminal when receiving a connection request to the mobile communication network.

From here, preferred embodiments of the present invention will be described. The following description is not intended to limit the scope of the present invention, but is provided to aid understanding.
(Embodiment 1)

  FIG. 1 is a diagram illustrating a telematics terminal 1 according to the first embodiment. The telematics terminal 1 according to the first embodiment is a terminal having an emergency call function for transmitting an emergency call to an emergency contact number of an emergency center 4b using a mobile communication network 3 when an emergency such as a traffic accident occurs. In FIG. 1, the telematics terminal 1 is installed in the vehicle 4a. Note that it is considered that the telematics terminal 1 is provided with various functions such as e-mail by connecting to a computer cloud in addition to the emergency call function described above.

  As shown in FIG. 1, a UIM 2 used by being mounted on a telematics terminal 1 is a kind of contact type IC card, and an IC module in which an IC chip is mounted on a contact substrate having eight contact terminals is used as a card substrate. The physical and logical characteristics are defined in 3GPP TS 31.101, and the file structure is defined in 3GPP TS 31.102.

  FIG. 2 is a diagram illustrating the file structure of UIM2. In the file structure 20 illustrated in FIG. 2, the UIM 2 according to the first embodiment includes one MF (Master File) 21 and an ADF_UIM 22 that is an application dedicated file (ADF) that stores information related to the UIM 2. Have at least. Below the ADF_UIM 22, there are an EF 23a for storing a subscriber identification code as a basic file (EF: Elementary File) 23 for storing information necessary for connection to the mobile communication network 3, and a contact information for the emergency center 4b. An EF 23b for storing an emergency contact number is provided. In FIG. 2, only the EF 23b for storing the emergency contact number is shown as the EF 23 for storing information related to the emergency call, but an EF 23 for storing the blood type, medical history, etc. of the subscriber may be provided.

  As shown in FIG. 1, the telematics terminal 1 according to the first embodiment includes a mobile communication unit 11, a control unit 10, and a UIM interface 12, and further, as a memory, a ROM (Read # Only And a RAM (Random Access Memory) 14 which is a volatile memory.

  The mobile communication means 11 of the telematics terminal 1 is a means for the telematics terminal 1 to perform mobile communication, and a circuit for modulating and transmitting an electrical signal encoding data to be transmitted using the mobile communication network 3, An electric signal received via the mobile communication network 3 is constituted by a circuit that demodulates and then decodes the electric signal, and the mobile communication means 11 of the telematics terminal 1 is connected with an antenna 11a for mobile communication.

  The UIM interface 12 of the telematics terminal 1 is a means for the telematics terminal 1 to communicate with the UIM2, and is a connection terminal that is electrically connected to the contact terminal of the UIM2, and modulates an electrical signal that encodes data to be transmitted to the UIM2. The circuit includes a transmitting circuit, a circuit that decodes an electric signal received from the UIM 2 and then decodes it.

  The control means 10 of the telematics terminal 1 is specifically a CPU, and the control means 10 of the telematics terminal 1 holds information indicating the state of UIM2 in the RAM 14 and can be used in the telematics terminal 1 according to the state of UIM2. Restricted functions. A computer program whose function is restricted according to the state of the UIM 2 is stored in the ROM 13.

  FIG. 3 is a first diagram illustrating the operation of the telematics terminal 1 that changes the state of the UIM 2. When the telematics terminal 1 is activated, the control means 10 of the telematics terminal 1 changes the state of the UIM 2 to a pre-initialization state (S1) and then executes an initialization process (S2). Note that the UIIM2 state is changed by changing the information indicating the UIM2 state stored in the RAM 14.

  The pre-initialization state is a state before the UIM 2 is initialized. In the pre-initialization state, the control means 10 of the telematics terminal 1 has not acquired a subscriber identification code or the like from the UIM 2.

  The initialization process executed by the control means 10 of the telematics terminal 1 includes a UIM2 reset process and a process for acquiring information for connection to the mobile communication network 3 from the UIM2 and storing it in the RAM 14. Note that the information acquired from the UIM 2 includes the subscriber identification code stored in the EF 23a and the emergency contact information stored in the EF 23b.

  The control means 10 of the telematics terminal 1 checks whether or not the initialization process is successful (S3), and when the initialization process is successful, changes the state of the UIM 2 from the pre-initialization state to the operating state (S4). . The operating state is a state after the initialization process is successful, and is a state in which the functions available in the telematics terminal 1 are not limited.

  If the initialization process fails, the control means 10 of the telematics terminal 1 displays a message or the like on the display (for example, a car navigation display) that prompts the user to confirm the UIM 2 wearing state, and then changes the UIM 2 state. The process returns to S1 without making a transition to the operating state.

  The control means 10 of the telematics terminal 1 executes the UIM detection process for detecting the UIM2 attached to the telematics terminal 1 after succeeding in the initialization process and changing the state of the UIM2 to the operating state (S5). In the UIM detection process (S5), the control means 10 of the telematics terminal 1 transmits a predetermined command (for example, the above-mentioned STATUS command) to the UIM2, and compares the response received from the UIM2 with the expected value of the response. The control means 10 of the telematics terminal 1 determines that the UIM2 is successfully detected if the response received from the UIM2 matches the expected value of the response, and otherwise (the response received from the UIM2 and the expected value of the response are If there is a mismatch, or if a response cannot be received from UIM2 even after a certain period of time), it is determined that UIIM2 detection has failed.

  Next, the control means 10 of the telematics terminal 1 confirms the result of the UIM detection process (S5) (S6). If it is determined that the UIM2 has been successfully detected, a predetermined time interval (for example, 30 seconds) is set. After the elapse, the process returns to S5 and executes the UIM detection process (S5).

  Further, the control means 10 of the telematics terminal 1 determines that the detection of the UIM 2 has failed, and otherwise executes a reinitialization process (S7). Note that the reinitialization process (S7) includes a UIM2 reset process, and the control means 10 of the telematics terminal 1 executes the reinitialization process (S7), the state of UIM2 held in the RAM 14 and the subscription. The person identification code and the emergency contact information are not deleted from the RAM 14.

  The control means 10 of the telematics terminal 1 confirms whether or not the re-initialization process (S7) is successful. If the re-initialization process (S7) is successful, the process returns to S5 and executes the UIM detection process (S5). To do. If the re-initialization process fails, the control means 10 of the telematics terminal 1 increments the re-initialization process (S7) failure count, and the re-initialization process (S7) failure count at this point Then, it is confirmed whether the specified number of times set in the re-initialization process (S7) has been exceeded (S9).

  If the number of failures in the reinitialization process (S7) does not exceed the specified number of times set in the reinitialization process (S7), the control means 10 of the telematics terminal 1 returns to S7 and performs the reinitialization process (S7 ). If the number of failures in the reinitialization process (S7) exceeds the specified number set in the reinitialization process (S7), the control means 10 of the telematics terminal 1 changes the UIM2 state to the operating state. After changing from the abnormal state to the abnormal state (S10), it waits until there is a connection request to the mobile communication network 3 (S11).

  The re-initialization process (S7) is repeatedly executed until the number of failures of the re-initialization process (S7) exceeds the specified number of times set in the re-initialization process (S7). This is to activate the activated UIM2. If the UIM2 is not in an inoperable state, the UIM2 can be activated by the reinitialization process (S7), but the number of failures in the reinitialization process (S7) is set in the reinitialization process (S7). When the number of times is exceeded, it is considered that the UIM 2 is inoperable for some reason.

  FIG. 4 is a first diagram for explaining the operation of the telematics terminal 1 when a connection request to the mobile communication network 3 is received. When receiving a request for connection to the mobile communication network 3, the control means 10 of the telematics terminal 1 first checks whether the UIM 2 is in a pre-initialization state (S20).

  The timing at which the telematics terminal 1 according to the first embodiment receives a connection request to the mobile communication network 3 is the timing at which a service using mobile communication is received. When the service using mobile communication is a service related to an emergency call, the emergency call is sent when the operation for sending the emergency call is performed. Note that the operation of sending an emergency call is the operation of the user who sends the emergency call or the operation of the airbag. In the case of a service for receiving content, the timing for receiving this service is when the time interval for receiving content elapses or when an operation for receiving content is performed.

  When the UIM 2 is in a pre-initialization state, the control means 10 of the telematics terminal 1 cannot obtain information necessary for connection to the mobile communication network 3 from the UIM 2. Is rejected (S24), and this procedure ends without connecting to the mobile communication network 3.

  When the state of UIM2 is not a pre-initialization state, the state of UIM2 is either an operating state or an abnormal state. If the initialization process is successful, the information necessary for connection to the mobile communication network 3 can be acquired from the UIM 2, so that the control means 10 of the telematics terminal 1 issues a connection request to the mobile communication network 3. If it is due to the operation of sending an emergency call (for example, the operation of the user who sends the emergency call or the operation of the airbag), the mobile communication is confirmed. Accept the connection request to the network 3 (S23), connect to the mobile network using the subscriber identification code held in the RAM 14, and send an emergency call to the emergency contact number held in the RAM 14 This procedure ends. The emergency call generally includes a subscriber identification code, and may include other information (for example, the blood type and medical history of the subscriber).

  Moreover, the control means 10 of the telematics terminal 1 confirms whether the state of UIM2 is an operation state, if the connection request | requirement to the mobile communication network 3 is not by the operation | movement which transmits an emergency call. If the UIM 2 is in operation, the control means 10 of the telematics terminal 1 accepts the connection request to the mobile communication network 3 (S23) and connects to the mobile communication network 3 using the subscriber identification code. This procedure ends.

  Further, the control means 10 of the telematics terminal 1 is in an abnormal state unless the UIM 2 is in an operating state. Therefore, as one of the function restrictions of the telematics terminal 1, the control means 10 is connected to the mobile communication network 3. The connection request is denied (S24), and this procedure ends without connecting to the mobile communication network 3.

As described above, according to the above-described first embodiment, the telematics terminal 1 makes an emergency call urgently as long as the UIM2 initialization process is successful even after the UIM2 state is determined to be abnormal. You will be able to make calls to your contacts.
(Embodiment 2)

  FIG. 5 is a diagram illustrating the telematics terminal 5 according to the second embodiment. The telematics terminal 5 according to the second embodiment is a terminal having an emergency call function for transmitting an emergency call to the emergency contact number of the emergency center 4b using the mobile communication network 3 when an emergency such as a traffic accident occurs. Thus, as in the first embodiment, even if the UIM 6 has an abnormality, the terminal can make an emergency call to the emergency contact number of the emergency center 4b.

  In the above-described first embodiment, an emergency call can be transmitted even if the UIM 6 is in an abnormal state regardless of the reason that the UIM 6 is in an abnormal state. If the reason for the abnormal state is due to abnormal operating environment of UIM6, and it can be determined that the reason for the abnormal state of UIM6 is due to abnormal operating environment of UIM6 Only emergency calls can be sent.

  In the second embodiment, the physical and logical characteristics and file structure of the UIM 6 used by being attached to the telematics terminal 5 are the same as those in the first embodiment. However, as shown in FIG. 5, the UIM 6 according to the second embodiment In order to provide tamper resistance for failure utilization analysis, as in Patent Document 3, at least one operation state measurement sensor 60 for measuring the operation state of the UIM 6 is provided. A security function is provided to make the UIM 6 inoperable when outside the reference range. The operation state measurement sensor 60 that measures the operation state of the UIM 6 means a sensor circuit that measures a clock frequency, a sensor circuit that measures power, a sensor circuit that measures temperature, and the like.

  As shown in FIG. 5, the telematics terminal 5 according to the second embodiment includes a mobile communication unit 51, a control unit 50, and a UIM interface 52 as in the first embodiment, and further, a read-only memory as a memory. A ROM 53 (Read # Only Memory) and a RAM (Random Access Memory) 54 which is a volatile memory. Note that the mobile communication means 51 and the UIM interface 52 included in the telematics terminal 5 according to the second embodiment are the same as those in the first embodiment, and thus description thereof is omitted here.

  In addition, the telematics terminal 5 according to the second embodiment includes an environment measuring unit 55 that measures the environment of the UIM 6. In FIG. 5, as the environment measuring unit 55, an environment measuring unit that is an acceleration sensor that measures acceleration applied to the UIM 6. 55a and environmental measuring means 55b which is a temperature sensor for measuring the internal temperature of the telematics terminal 5 are shown. In the second embodiment, a reference range is set in advance for each environment measurement unit 55. When the measurement result is out of the reference range, the environment measurement unit 55 outputs a warning signal indicating that the measurement result is out of the reference range. It is configured to output.

  The control means 50 of the telematics terminal 5 is specifically a CPU, and the control means 50 of the telematics terminal 5 holds information indicating the state of the UIM 6 in the RAM 54 and can be used by the telematics terminal 5 according to the state of the UIM 6. Restricted functions. A computer program for restricting functions according to the state of the UIM 6 is stored in the ROM 53.

  FIG. 6 is a second diagram illustrating the operation of the telematics terminal 5 that changes the state of the UIM 6. 7 are the same as the processing contents related to S1 to S6 in FIG. 3, and thus the description thereof is omitted here.

  When the UIM 6 cannot be normally detected in the UIM detection process (S34), the control means 50 of the telematics terminal 5 determines whether or not an environmental abnormality has occurred by checking whether the environment measuring means 55 outputs a warning signal. (S36).

  When the environmental abnormality occurs, that is, when at least one of the environmental measuring means 55 outputs a warning signal, the control means 50 of the telematics terminal 5 stores an environmental abnormality flag indicating that the environmental abnormality has occurred in the RAM 54. After the occurrence of an environmental abnormality is recorded (S37), the UIM 6 is changed from the operating state to the abnormal state (S38), and waits for a connection request to the mobile communication network 3. (S39).

  Further, the control means 50 of the telematics terminal 5 does not record the occurrence of the environmental abnormality without recording the occurrence of the environmental abnormality when the environmental abnormality does not occur, that is, when all the environment measuring means 55 does not output the warning signal. The state is changed from the operating state to the abnormal state (S38), and the system waits until there is a connection request to the mobile communication network 3 (S39).

  When the UIM 6 cannot be normally detected in the UIM detection process (S34), the control means 50 of the telematics terminal 5 confirms the occurrence of the environmental abnormality because the reason that the UIM 6 cannot be normally detected is This is to confirm whether it depends on the operating environment. For example, when the environment measuring means 55a, which is an acceleration sensor, outputs a warning signal, it can be determined that a large acceleration has occurred due to an emergency or the like and the UIM 6 has become inoperable. Further, when the environment measuring means 55b, which is a temperature sensor, outputs a warning signal, it can be determined that the UIM 6 has become inoperable due to an increase in temperature due to an emergency or the like.

  FIG. 7 is a second diagram illustrating the operation of the telematics terminal 5 when a connection request to the mobile communication network 3 is received. Upon receiving a connection request to the mobile communication network 3, the control means 50 of the telematics terminal 5 first checks whether the UIM 6 is in a pre-initialization state (S40).

  The timing at which the telematics terminal 5 according to the second embodiment receives a connection request to the mobile communication network 3 is the same as the timing at which a service using mobile communication is received, as in the first embodiment. When the service using mobile communication is a service related to an emergency call, the emergency call is sent when an operation for sending an emergency is performed. Note that the operation of transmitting an emergency situation is the operation of the user who transmits the emergency call or the operation of the airbag. In the case of a service for receiving content, the timing for receiving this service is when the time interval for receiving content elapses or when an operation for receiving content is performed.

  When the UIM 6 is in the pre-initialization state, the control means 50 of the telematics terminal 5 cannot acquire the subscriber identification code necessary for connection to the mobile communication network 3 from the UIM 6. The connection request is denied (S45), and this procedure ends without connecting to the mobile communication network 3.

  When the state of the UIM 6 is not the pre-initialization state, the control unit 50 of the telematics terminal 5 checks whether the state of the UIM 6 is an operating state (S41). If the UIM 6 is in the operating state, there is no need to limit the function of the telematics terminal 5, so whether or not the connection request to the mobile communication network 3 is due to the operation of sending an emergency call. The control means 50 of the telematics terminal 5 accepts the connection request to the mobile communication network 3 (S44), connects to the mobile communication network 3 using the subscriber identification code stored in the RAM 54, This procedure ends.

  If the UIM 6 is not in an operating state, the UIM 6 is in an abnormal state. Therefore, the control means 50 of the telematics terminal 5 operates to send an emergency call when a connection request to the mobile communication network 3 is issued (for example, emergency It is confirmed whether it is due to the operation of the user who sends the report or the operation of the airbag (S42).

  If the operation is not based on the operation of issuing an emergency call, the control means 50 of the telematics terminal 5 denies the connection request to the mobile communication network 3 (S45), and this procedure is performed without connecting to the mobile communication network 3. Ends.

  Further, if the connection request to the mobile communication network 3 is due to an operation of transmitting an emergency call, the control means 50 of the telematics terminal 5 confirms whether the occurrence of an environmental abnormality is recorded (S43), It is confirmed whether the reason why the UIM 6 is in an abnormal state is due to an abnormality in the operating environment of the UIM 6.

  If the occurrence of an environmental abnormality is recorded in the control means 50 of the telematics terminal 5, the cause of the abnormal state of the UIM 6 is due to an abnormality in the operating environment of the UIM 6. If it is determined that it is not, the connection request to the mobile communication network 3 is accepted (S44), the subscriber identification code stored in the RAM 54 is used to connect to the mobile communication network 3, and the RAM 54 stores the request. Send an emergency call to the current emergency contact number and the procedure ends. The emergency call generally includes a subscriber identification code, and may include other information (for example, the blood type and medical history of the subscriber).

  In addition, if the occurrence of an environmental abnormality is not recorded, the control means 50 of the telematics terminal 5 does not cause the UIM 6 to be in an abnormal state because the UIM 6 has an abnormal operating environment. It is determined that there is a possibility of unauthorized use, the connection request to the mobile communication network 3 is denied (S45), and this procedure ends without connecting to the mobile communication network 3.

  Thus, according to the second embodiment, even after the telematics terminal 5 determines that the UIM 6 state is abnormal, the UIM 6 initialization process succeeds and the UIM 6 state becomes abnormal. However, the emergency call can be sent to the emergency contact address only when it can be determined that the UIM 6 is in the operating environment.

1,5 Telematics terminal 10,50 Control means 11,51 Mobile communication means 12,52 UIM interface 13,53 ROM
14,54 RAM
55 Environmental measurement means 2, 6 UIM
3 Mobile communication network

Claims (3)

When the UIM is initialized, the subscriber identification code is read from the UIM and stored in the memory, and then the UIM detection processing for detecting the UIM installed is performed, and the UIM is detected normally in the UIM detection processing. If not, a control means is provided for determining that the UIM is in an abnormal state and limiting available functions;
When the control means receives a connection request to the mobile communication network after determining that the state of the UIM is abnormal, the connection request to the mobile communication network is due to an operation of issuing an emergency call. If it is due to the action of sending an emergency call, the subscriber identification code stored in the memory is used to connect to the mobile communication network, send the emergency call, and send the emergency call. A telematics terminal that is not connected to a mobile communication network unless it is due to operation.   If the UIM cannot be normally detected in the UIM detection process, the control means performs a re-initialization process on the UIM, and if the number of times that the re-initialization process continuously fails exceeds a predetermined value, the UIM The telematics terminal according to claim 1, wherein the state is determined to be an abnormal state. And an environmental measuring means for measuring the operating environment of the UIM. When the control means determines that the UIM is in an abnormal state, the control means checks whether an environmental abnormality has occurred from the output of the environmental measuring means. When the confirmation result is stored in the memory, and it is determined that the UIM is in an abnormal state, an environment abnormality occurs when a connection request to the mobile communication network is received by an operation for issuing an emergency call. 3. The telematics terminal according to claim 1, wherein an emergency call is transmitted by connecting to a mobile communication network by using the subscriber identification code held in a memory only when the information is received.

Images