JP2016035686A - Service application issuing device, installer, service application issuing system, service application issuing method, and installing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a service application issuing device in which, when an error occurs at the time of issuing an IC card, a UI application determines whether the error has occurred in initialization or in personalization, and starts reprocessing that matches the state of issuance.SOLUTION: A service application issuing device is equipped with an issued data distribution server that distributes to mobile terminals of users issuance data that activates a service application (hereinafter abbreviated to SA) that emulates the actions of IC cards distributed from an SA distribution server to the mobile terminals and with a management server that responds to inquiries from the SA and manages the utilization and non-utilization of the SA installed on the mobile terminals. Issuance of dummy data by the issued data distribution server as the issuance data to a mobile terminal is deemed to have completed issuance and, if the management server finds by inquiry that no issuance data is issued to a mobile terminal regarding the SA, issuance data is issued to the mobile terminal to activate the SA.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a service application issuing device, an installer, a service application issuing system, a service application issuing method, and an installation method.

In recent years, services have been performed in which data such as content is transmitted from a server to a mobile terminal by transmitting and receiving data from a server to a mobile terminal such as a smartphone.
A portable device that supports NFC (Near Field Communication) defined by the International Organization Standardization (ISO) as a standard for contactless IC (Integrated Circuit) card interface, which is an advanced form of use of this mobile terminal. There is a terminal. With the spread of NFC-compatible mobile terminals, the use of credits using a contactless IC payment service is increasing as a payment method using mobile terminals (see, for example, Patent Document 1). That is, by using this NFC, transmission / reception of data to / from an R / W (Reader / Writer) device in a payment service system can be performed by a mobile terminal as well as a credit IC card.

As described above, when the mobile terminal is applied to a settlement service in the same manner as an ID card having a short-range wireless communication function, a service application that emulates an IC card is installed. And the payment function of IC cards, such as a credit card, is emulated with respect to a portable terminal by the installed service application.
In the future, not only credit cards but also IC cards such as prepaid cards, point cards or employee ID (Identification) cards will be installed on mobile devices such as NFC-compatible smartphones. It is expected to do this.

In addition, as a feature of the service using the NFC rules described above, an information processing technique using wireless communication called OTA (Over The Air) is used. In OTA, for example, using a wireless communication, a telephone number or identification information is written to or deleted from a mobile communication terminal such as a mobile phone, firmware update, automatic content distribution, and content download sales are performed.
Conventionally, a system for performing IC card issuance processing using an OTA has been developed, which has been performed using an IC (Integrated Circuit) card issuing machine. The IC card issuance process is a process for making an IC card available to the IC card holder, and includes the following 0-order to secondary issuance processes.

  That is, in the 0th issue, a unique identifier is written to the IC card and the IC card is individualized. In the primary issue, the application is installed on the IC card, the initial setting is performed, and the IC card is initialized. In the secondary issue, personalization is performed for personal setting of the holder or writing personal information on the IC card.

FIG. 5 is a diagram showing a configuration of a conventional service application issuing system.
In the service application issuance system shown in FIG. 5, a service application for emulating an IC card on the mobile terminal 5 is stored in a UICC (Universal Integrated Circuit Card) 52 of the mobile terminal 5 in a non-contact storage card. 53 or a UI (User Interface) application on the built-in memory. The non-contact storage card 53 is a memory card using a flash memory such as an SD (Secure Digital) card (registered trademark). Examples of the UICC 52 include a SIM (Subscriber Identity Module) card and a UIM (User Identity Module) card. The UICC 52 has, for example, a CPU (Central Processing Unit) and a memory, and emulates an IC card of a service application after being activated.
Each of company A service center 10_A and company Z service center 10_Z is a service center of a company that provides IC card services. The access code and password are mailed to the user who requested the service, or by e-mail. Send it.

  The mobile terminal 5 needs a UI application for installing the service application when the service application is installed in the UICC 52. The control unit 51 downloads a UI application from the distribution service server 3 such as GooglePlay (registered trademark). Then, the control unit 51 installs the downloaded UI application in the contactless storage card 53 or the built-in memory of the mobile terminal 5. A Mobile Network Operator (MNO) -Trusted Service Manager (TSM) server 4 distributes service applications to the mobile terminal 5. An SP (Service Provider) -Trusted Service Manager (TSM) server 2 'performs user authentication and issuance and management of issuance data for service applications.

FIG. 6 is a sequence diagram showing an operation example of a service application issuing system in conventional card issuing of a service application. With reference to FIGS. 5 and 6, issuance of service applications will be described.
The service application is distributed by the MNO-TSM server 4. The SP-TSM server 2 ′ performs user authentication and issuance and management of issuance data for service applications (F101, F102).
That is, when the SP-TSM server 2 ′ authenticates the user and determines that the user is correctly authenticated, the SP-TSM server 2 ′ transmits authentication information indicating that the user is correctly authenticated to the portable terminal 5.

Then, when the authentication information is input, the UI application requests the MNO-TSM server 4 to perform initialization in issuing the service application to the UICC 52 (F103). Then, the MNO-TSM server 4 secures an area for installing the service application in the UICC 52 and installs the service application in the secured area to initialize the UICC 52 (F104). After the initialization is completed, the MNO-TSM server 4 outputs an issue response indicating that the initialization is completed to the mobile terminal 5 (F105, F106).
Upon receiving the issuance response, the UI application adds the identification information of the UICC 52 and the identification information of the service provider, and transmits a personalization request to the SP-TSM server 2 ′ (F107).

  As a result, the SP-TSM server 2 'issues issuance data to the service application of the mobile terminal 5, and activates the service application installed in the mobile terminal 5 (F108). This issuance data is data for enabling use of a service application that emulates a predetermined IC card installed in the UICC 52 of the mobile terminal 5 corresponding to the owner (to activate the service application) (described later). ).

  Then, the service application outputs a personalization completion notification indicating that the service application has been normally activated (personalized) to the SP-TSM server 2 'via the TSM Proxy (F109). Then, the SP-TSM server 2 'detects that personalization of the service application has been completed normally, and outputs a personalization response to the mobile terminal 5 (F110). At this time, the SP-TSM server 2 'changes the issue status from unissued to issued in the application issue table in which the internal access code is associated with the issue status indicating the issue state. Further, the service application transmits a completion processing request indicating that the issuance of the IC card is completed to the MNO-TSM server 4 (F111). Then, the MNO-TSM server 4 changes the issue status from unissued to issued, and transmits a completion response to the UI application (F112).

JP 2004-193722 A

However, when issuing IC card personal data using OTA and installing the IC card service function on the mobile terminal, wireless communication in OTA becomes unstable, the installation process ends in the middle, and an issue error occurs. There is a case. Further, the issue of an IC card may be interrupted due to a failure on the server side that issues the IC card.
In addition, the UI application has only one type of command when the issuance request starts issuance, and the notification indicating the issuance status is not supplied from any server until the completion of issuance of the IC card in the UICC 52 (end of personalization and initialization). .

For this reason, when an issuance error occurs, in the present service application issuance scheme, an error has occurred in the initialization of the service application by the MNO-TSM server 4, or the service application is personalized by the SP-TSM server 2 ′. Cannot determine whether an error has occurred.
For example, when the process up to initialization ends normally and an error occurs in personalization, the issue process may be restarted from personalization. However, since the issuance state of the service application in the UICC 52 is unknown, it is not possible to resume from personalization. Therefore, the UI application requests the MNO-TSM server 4 to initialize the UICC 52, and once deletes the data of the UICC 52, the UI application performs the issuing process from initialization.

  As described above, the MNO-TSM server 4 is requested to delete the service application data in the UICC 52, and the MNO-TSM server 4 deletes the UICC 52 data. Then, after the application data is deleted, the card issuance state in the SP-TSM server 2 'and the MNO-TSM server 4 is set as unissued. After this, the MNO-TSM server 4 re-initializes the issuance of the IC card. Therefore, it takes time to perform reprocessing, and the time loss increases.

On the other hand, it is conceivable that the UI application has a request for issuing service application initialization and personalization, and the initialization and personalization processes are performed separately.
However, when an error occurs during the issuance of the IC card, the IC card issuance state is synchronized in the UICC 52, the SP-TSM server 2 ′, and the MNO-TSM server 4 regardless of the issuance state of the IC card. It cannot be changed.

  The present invention has been made in view of such circumstances, and when an error occurs when an IC card is issued, the UI application can determine whether the error has occurred, whether it is initialized or personalized, and is in an issued state. It is an object of the present invention to provide a service application issuing device, an installer, a service application issuing system, a service application issuing method, and an installation method capable of starting the corresponding reprocessing.

  The present invention has been made to solve the above-described problems, and the service application issuing device according to the present invention provides a service application for emulating the operation of the IC card selected by the user to the mobile terminal of the user. The issue data distribution server that distributes the issue data that activates the service application distributed from the service application distribution server to be distributed to the mobile terminal, and is installed in the mobile terminal in response to an inquiry from the service application A management server that manages the operation and non-operation of a service application, the issued data distribution server issuing dummy data as the issued data to the mobile terminal, and the management server in the inquiry Previous If the issue data to the portable terminal has not been issued to the service application, characterized by activating said service application issues the issue data to the mobile terminal.

  In the service application issuance apparatus of the present invention, the issuance data distribution server performs initialization for installing the service application on the mobile terminal, and the management server activates the service application installed on the mobile terminal with the issuance data. It is characterized by performing personalization.

  The service application issuing device of the present invention is characterized in that the dummy data includes identification information for identifying the service application installed in the mobile terminal.

  The installer of the present invention is installed in the mobile terminal, and after the service application that emulates the operation of the IC card selected by the user is downloaded from the service application issuing device, and the service application is installed in the mobile terminal An installer that performs a process of receiving issuance data for activating the service application from the service application device. When the application is initialized and the service application is activated by the issuance data, a dummy is used as the issuance data. The service application issuance process is terminated once data is received, and an inquiry from the service application is made to determine whether the service application can be operated. In response to access to the management server that manages the operation and non-operation of the service application installed in the mobile terminal, the issue data for activating the service application is fetched from the management server. And

  The installer of the present invention is characterized in that the dummy data includes identification information for identifying the service application installed in the portable terminal.

  The installer of the present invention temporarily stores the identification information in the storage unit of the portable terminal, and when accessing the management server, reads the identification information from the storage unit, adds it to the inquiry, and transmits it to the management server It is characterized by that.

  The service application issuance system of the present invention downloads a service application that emulates the operation of an IC card selected by a user from a service provider, and a user terminal on which an installer for installing the service application is installed, and a user Distributing to the mobile terminal issuance data that activates the service application distributed from a service application distribution server that distributes a service application that emulates the operation of the selected IC card to the mobile terminal of the user In response to inquiries from the issue data distribution server and the service application installed on the mobile terminal, the service application installed on the mobile terminal is activated and deactivated. A management server for managing, and the issue data distribution server issues dummy data as the issue data to the portable terminal, and the management server issues the inquiry from the installer of the portable terminal. At this time, when the issued data is not issued to the service application of the mobile terminal, the service application is activated by issuing the issued data to the mobile terminal.

  In the service application issuance system of the present invention, the issuance data distribution server performs initialization to install the service application on the mobile terminal, and the management server activates the service application installed on the mobile terminal with the issuance data. It is characterized by performing personalization.

  The service application issuance system according to the present invention is characterized in that the dummy data includes identification information for identifying the service application installed in the portable terminal.

  In the service application issuance method of the present invention, the issuance data distribution server is distributed from the service application distribution server that distributes the service application that emulates the operation of the IC card selected by the user to the mobile terminal of the user. Issuing data distribution process for distributing issuance data to activate the service application to the mobile terminal, and management server responds to inquiries from the service application, and operates and deactivates the service application installed on the mobile terminal The issuing data distribution server issues dummy data as the issuing data to the mobile terminal, and the management server issues the issuing to the mobile terminal in the inquiry. If the data has not been issued to the service application, characterized by activating said service application issues the issue data to the mobile terminal.

  The installation method of the present invention is installed in a mobile terminal, causes a service application that emulates the operation of an IC card selected by a user to be downloaded from a service application issuing device, and the service application is installed in the mobile terminal. Thereafter, an installation method by an installer that performs processing for receiving issuance data for activating the service application from the service application device, and when the service application is activated by the issuance data when the application is initialized, Dummy data is received as issue data, the service application issuance process is temporarily terminated, and whether or not the service application can be operated is determined. In response to an inquiry from the application, at the timing to access and confirm the management server that manages the operation and non-operation of the service application installed in the mobile terminal, issue data for activating the service application is sent from the management server. It is characterized by capturing.

  The service application issuance method of the present invention includes a process of downloading a service application that emulates an operation of an IC card selected by a user from a service provider and mounting an installer for installing the service application on a mobile terminal, Issuing data that activates the service application distributed from the service application distribution server that distributes the service application that emulates the operation of the IC card selected by the user to the mobile terminal of the user. The process of delivering to the mobile terminal and the service application installed in the mobile terminal in response to an inquiry from the service application installed in the mobile terminal by the management server The issue data distribution server issues dummy data as the issue data to the portable terminal, and the management server of the portable terminal At the time of the inquiry from the installer, if the issued data is not issued to the service application of the mobile terminal, the service application is activated by issuing the issued data to the mobile terminal. Features.

  According to the present invention, when an error occurs when issuing a service application that emulates the function of an IC card, the UI application can determine whether an abnormality (error) in issuing the service application has occurred due to personalization or initialization. Thus, it is possible to provide a service application issuing device, an installer, a service application issuing system, a service application issuing method, and an installation method that can start reprocessing according to the issue state.

It is a schematic block diagram which shows the structural example of the service application issuing system by one Embodiment of this invention. It is a figure which shows the structural example of the service application issue table which manages the user memorize | stored in the user database. It is a sequence diagram which shows the operation example of the service application issuing system in the card issuing of the service application in this embodiment. It is a sequence diagram which shows the operation example of the service application issuing system in the card issuing of the service application in this embodiment. It is a figure which shows the structure of the conventional service application issuing system. It is a sequence diagram which shows the operation example of the service application issuing system in the card issuing of the conventional service application.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a schematic block diagram showing a configuration example of a service application issuing system according to an embodiment of the present invention. In FIG. 1, the service application issuing system includes an SP-TSM server 2, a distribution service server 3, an MNO-TSM server 4, a portable terminal 5, a PI (post insurance) server 6, and a user database 21. In this embodiment, the SP-TSM server 2 is an example of an issue data distribution server, the MNO-TSM server 4 is an example of an application issue server, and the PI server 6 is an example of a management server. Here, the SP-TSM server 2, the user database 21, and the MNO-TSM server 4 can be configured as an application issuing device having the functions of each. In addition, the same reference numerals are given to the same components as in the conventional example.

  The SP-TSM server 2 transmits dummy data, which is a dummy of issuance data for activating the service application, to the portable terminal 5 and performs dummy issuance (pseudo personalization) for the service application installed in the UICC 52. This issuance data is issued by a service provider that provides a service for each IC card. The SP-TSM server 2 has a user database 21 to be described later, and manages dummy data corresponding to user authentication and data issued to the user. However, in this embodiment, the SP-TSM server 2 transmits dummy data to the mobile terminal 5 instead of the issued data. The dummy data has the same data configuration as the issued data, but data other than identification information for identifying the user's service application is replaced with dummy information. Here, the dummy data includes data that can be determined that personalization has been completed on the issuing device side. That is, the dummy data includes identification information that allows the PI server 6 to identify a service application that has been pseudo-personalized by the SP-TSM server 2.

That is, the dummy data includes identification information that identifies a service application installed in the UICC 52 of the mobile terminal 5. As the service application identification information, for example, a member number that is a part of the issued data may be used, or any information that can identify the user service application such as an access code and a password may be used.
In addition, the SP-TSM server 2 falsely activates the service application in the UICC 52 using dummy data, and writes and stores this dummy data in a storage area specified by a UI application described later in the portable terminal 5.

A user database 21 is connected to the SP-TSM server 2.
In the user database 21, a service application issuance table (described later) in which an access code, a password, and an issuance status are stored correspondingly is written and stored. This issuance status is a status indicating the issuance status of the service application, and there are two statuses: unissued indicating that the service application has not been issued and issued indicating that the service application has been issued.
When an application for issuing a service application is made by a user, the SP-TSM server 2 makes an access code, password, SP (service provider) code, service of the user to the service application issue table of the user database 21. Generate a record with a code and issue status. This record also includes dummy data corresponding to the service application installed in the mobile terminal 5. At this time, the SP-TSM server 2 sets the issuance status of the newly created record in the service application issuance table of the user database 21 as unissued.

  The MNO-TSM server 4 is a server owned by a carrier contracted by a service provider (operator) of a company that provides IC card services, and makes a distribution request for a service application installed in the UICC 52 of the mobile terminal 5. Supplied (distributed) to the portable terminal 5. The MNO-TSM server 4 stores an application table corresponding to a service application provided from the service provider of each IC card and service identification information for identifying the service application in a database (not shown).

  The PI server 6 manages the operation and non-operation of the service application installed in the mobile terminal 5. That is, the PI server 6 detects whether or not the service application for each portable terminal 5 is unusable due to unauthorized use. The service application installed in the portable terminal 5 periodically accesses the PI server 6 and detects whether or not its service application is in a usable state. Here, when the service application is not in a usable state, that is, when the service application is not usable, the service application is set so as not to emulate the IC card by locking itself.

Further, in this embodiment, when the PI server 6 receives an inquiry from the service application for the first time after the service application is installed and issued, the identification included in the inquiry is received. Issuance data corresponding to the information is read from a service application issuance table stored in a storage unit (not shown) and transmitted to the mobile terminal 5 inquired.
The issuance data is data for personalizing (activating) a service application that emulates a predetermined IC card installed in the UICC 52 of the portable terminal 5 in accordance with the owner. The data type of the issue data will be described later.

FIG. 2 is a diagram illustrating a configuration example of a service application issuance table that manages users stored in the user database 21.
The service application issuance table includes ICCID (UICC identification information), access code, password, SP (service provider) code, service code, member number (card member number), user name (dummy data), expiration date (dummy) Data) and issuance status. The SP code is information for identifying the service provider. The service code is a code for identifying the IC card service to be emulated, and is set for each payment brand, for example.

  The access code is data used for issuing a service application, which is supplied to the user when applying for issuing the service application together with a password. This access code is user identification information for identifying a user. In this embodiment, the dummy data is set as a configuration including an IC card member number, a member dummy name, and a dummy expiration date. The issue status indicates the issue state of the service application. The issuance data is data in which the member name and the expiration date of the IC card in the dummy data are correct.

Here, the membership number is a PAN (Primary Account Number), which is an identification number for each settlement brand of each user given to a service application corresponding to the IC card service.
The expiration date indicates the usable period of the issued IC card, and the name is the name of the user who applied for the use of the IC card. The member name and the IC card expiry date in the dummy data described above are dummy, and data that is meaningless or meaningful but not related to the service is used.

  Returning to FIG. 1, the SP-TSM server 2 refers to the service application issuance table stored in the user database 21 when performing user authentication processing, and accesses supplied from the mobile terminal 5 (UI application). It is determined whether each of the code and the password is registered. Thereby, when the access code and the password are written in the service application issuance table, the SP-TSM server 2 transmits the authentication information indicating that the authentication has been correctly performed to the portable terminal 5 as being normally authenticated. To do. The authentication information includes, for example, service application identification information for identifying the service application, the URL of the SP-TSM server 2, and the like.

  Further, the SP-TSM server 2 stores dummy data in advance in a service application user record in the service application issuance table of the user database 21. That is, the dummy data is stored in the SP-TSM server from the service provider before the service provider sends the access code and password to the user, that is, when the application for the IC card service is received from the user. 2 is written in the service application table of the user database 21.

  Then, the SP-TSM server 2 determines that the personalization of the service application in the portable terminal 5 has been normally performed by issuing dummy data corresponding to the service application, and the corresponding record in the service application issue table of the user database 21 is determined. Change the issue status from unissued to issued. In the present embodiment, the SP-TSM server 2 determines that the service application has been normally issued when the personalization completion notification is transmitted from the mobile terminal 5.

  At this time, at the stage of receiving the personalization completion notification, the portable terminal 5 determines that only initialization has been normally performed because personalization has not actually been performed. On the other hand, at the stage of receiving the issue error, the mobile terminal 5 determines that an abnormality has occurred during initialization because personalization has not actually been performed as described above. As described above, in this embodiment, it is possible to determine whether the cause of the issue error is an abnormality in initialization or an abnormality in personalization. Thereby, according to this embodiment, when it is determined that the initialization has been completed normally and personalization has ended abnormally, the issuing process can be performed from the personalization, and the time required for the reissuing process in the issue error Can be shortened.

  The distribution service server 3 distributes the UI application to the mobile terminal 5 that has made the distribution request. The distribution service server 3 is a server that provides a distribution service for digital contents (applications, movies, music, books, etc.) for mobile terminals, and is a server provided at a site such as Google Play (registered trademark), for example. Here, the UI application is an installer for installing the service interface in the portable terminal 5, and the service application is distributed to the MNO-TSM server 4 and the service is provided to the SP-TSM server 2. This is an application for requesting distribution of issued data for activating (personalizing) the application.

  The MNO-TSM server 4 is a server managed by the telecommunications company (carrier) of the mobile terminal 5 with which the user has contracted. Yes. As described above, the MNO-TSM server 4 has an application table in which service application identification information and a service application identified by the service application identification information are written in advance. The MNO-TSM server 4 has a service application issue table shown in FIG.

Then, when initialization of the UICC 52 is requested from the mobile terminal 5 as a service application initialization process, the MNO-TSM server 4 authenticates the user and the SP-TSM server 2 authenticates the user and authenticates the registration. In the UICC 52, an area for installing a service application is secured.
In addition, the MNO-TSM server 4 extracts the service application to be installed in the secured area from the authentication information transmitted from the mobile terminal 5 (authentication information transmitted from the SP-TSM server 2 to the mobile terminal 5). Read from the application table according to the identification information. Then, the MNO-TSM server 4 transmits the read service application to the mobile terminal 5 and installs it in the UICC 52 via the UI application.

The mobile terminal 5 is a terminal held by each user, and is, for example, a mobile phone, a smartphone, or a tablet terminal.
The mobile terminal 5 includes a control unit 51, a UICC 52, and a non-contact storage card 53.

The control unit 51 transmits / receives data to / from an external device using a wireless base station (not shown) and the Internet 100, and performs processing such as data writing to the contactless storage card 53. Further, the control unit 51 has a transmission / reception function using near field communication such as NFC, and performs transmission / reception of data with the R / W device in the same manner as the IC card.
The non-contact storage card 53 is a storage unit configured by a non-volatile memory, and a UI application, TSM Proxy, and the like are installed. Further, this UI application and TSMProxy may be installed in the internal memory of the mobile terminal 5 instead of the non-contact storage card 53. TSMProxy is a program and is installed in advance when, for example, the mobile terminal 5 is sold.

  The UICC 52 is an IC card having unique identification information, and stores its own unique identification information and mobile terminal subscriber information (such as a telephone number if the mobile terminal is a mobile phone). This unique identification information is identification information for identifying the UICC 52. For example, if the UICC 52 is a SIM card, it is an IMSI (International Mobile Subscriber Identity). Further, a service application that emulates the operation of the IC card service selected by the user is installed in the UICC 52 by the UI application. The UICC 52 includes a CPU and a memory inside, and emulates an IC card by a service application.

  The UI application transmits a request for issuing a service application to the MNO-TSM server 4 and starts an IC card issuing process. In addition, the UI application extracts identification information from dummy data that the SP-TSM server 2 writes and stores in a predetermined area of the storage unit (for example, the non-contact storage card 53), adds the extracted identification information, An inquiry is made to the PI server 6 as to whether or not the service application of the portable terminal 5 is usable.

  The TSM Proxy has a URL (IP address) of the MNO-TSM server 4 and accesses each of the SP-TSM server 2 and the MNO-TSM server 4 by switching the URLs, and makes each request for issuing a service application. The TSM proxy agent function is included.

  Each of the company A service center 10_A to the company Z service center 10_Z is a service center of a company that provides services that can be used by the mobile terminal 5. When an application for use of a predetermined IC card service is made by a user, an access code for identifying the individual user and a different password for each user are sent to the user's home by mail or the like. .

  Here, each of the company A service center 10_A to the company Z service center 10_Z may supply an access code and a password by electronic mail via the Internet 100. The supplied access code includes, for example, user identification information for identifying a user, service application identification information for identifying a service application, and the like.

  Further, each of Company A to Company Z receives a new record for the service application issuance table in the user database 21 when an application for use of the IC card is made by the user via the SP-TSM server 2. Generate and store ICCID, access code, password, SP code, and service code. At this time, the SP-TSM server 2 generates a membership number described in the service application issuance table of the user database 21, a dummy name and dummy data of an expiration date, and writes the dummy data to the service application issuance table. Manage the service application issue status.

3 and 4 are sequence diagrams showing an operation example of the service application issuance system in service application card issuance in the present embodiment.
Prior to the processing by the sequence of FIG. 3, the user has applied for the IC card service to the service company (any of company A to company Z) that he / she wants to receive, and the user accesses by mail or e-mail. A code and password are received from each service company. In the SP-TSM server 2, the ICCID, access code, password, SP code, service code, membership number, dummy name, dummy expiration date, and issue status are already written in the service application issue table of the user database 21. .

  On the other hand, in the PI server 6, ICCID, access code, password, SP code, service code, membership number, name, expiration date, and issue status are already written in a service application issue table of a database (not shown). The application issuance table has the same configuration as that shown in FIG. 2, and issuance data is written and stored instead of dummy data. Here, the issue status is not issued in each of the SP-TSM server 2 and the PI server 6. In the following description, it is assumed that the dummy data includes a membership number.

  Further, the user has downloaded the UI application from the distribution service server 3 (see FIG. 1) to the mobile terminal 5. At this time, in the mobile terminal 5, the control unit 51 installs the downloaded UI application in the contactless storage card 53 or the built-in memory.

Sequence F1:
The user activates the UI application on the mobile terminal 5 and selects a service icon of a predetermined IC card that has already been applied from among service icons displayed on the display screen of the mobile terminal 5 (not shown).
Thereby, the UI application displays, for example, an input field for inputting an access code, a password, and the like on the display screen of the mobile terminal 5.

Next, the user inputs an access code, a password, and the like in the input field with an input unit (not shown) in the input field on the display screen of the mobile terminal 5.
The UI application transmits the input access code, password, etc. to the SP-TSM server 2 through the control unit 51 together with the identification information (ICCID) of the UICC 52 and the action parameter (installation action), thereby performing authentication processing. Request.

Sequence F2:
When the action parameter (installation action) is input, the SP-TSM server 2 refers to the service application issuance table of the user database 21 using the supplied access code, password, etc., and authenticates the user. At this time, the SP-TSM server 2 receives the access code and password supplied from the user, and the access code and password stored in the service application issuance table registered by the service application corresponding to the user. Are detected, and it is determined whether or not the issue status in the detected record is unissued.

At this time, if the issue status in the detected record is already issued, the SP-TSM server 2 ends the process and notifies the portable terminal 5 that it has been issued. On the other hand, if the issue status is not issued, the SP-TSM server 2 performs the following processing.
When the SP-TSM server 2 detects in the service application issuance table that the issuance status in the record that matches the access code and password supplied from the user is unissued, the SP-TSM server 2 is encrypted with respect to the portable terminal 5. Send authentication information. At this time, the SP-TSM server 2 writes and stores the supplied ICCID in the corresponding record in the service application issue table of the user database 21.

Sequence F3:
When the authentication information is supplied from the SP-TSM server 2, the UI application transmits the authentication information to the MNO-TSM server 4 together with an action parameter (initialization). At this time, the UI application requests the MNO-TSM server 4 to secure the area for installing the service application in the UICC 52 and to initialize the service application in the secured area.

Sequence F4:
When an initialization request is supplied from the mobile terminal 5, the MNO-TSM server 4 secures an area for installing a service application in the internal memory of the UICC 52 in the mobile terminal 5 via the UI application.
Then, the MNO-TSM server 4 extracts service application identification information from the authentication information, and reads the service application indicated by the service application identification information from the application table based on the extracted service application identification information.
In addition, the MNO-TSM server 4 installs a service application in the reserved area in the memory inside the UICC 52 via the UI application.

Sequence F5:
Then, the UICC 52 transmits an issuance completion notification indicating that the installation of the service application is completed to the MNO-TSM server 4 via the UI application.
At this time, the UI application determines from the notification from the CPU of the UICC 52 that the service application has been installed in the predetermined predetermined area in the UICC 52.

Sequence F6:
When the MNO-TSM server 4 receives the issuance completion notification from the portable terminal 5, the MNO-TSM server 4 transmits an issuance response indicating that the initialization is completed to the portable terminal 5.

Sequence F7:
When the issuance response is supplied from the MNO-TSM server 4, the CPU of the UICC 52 accesses the SP-TSM server 2. At this time, the TSM Proxy changes the communication destination URL from the MNO-TSM server 4 to the SP-TSM server 2.
Then, the CPU of the UICC 52 reads the ICCID from its own storage unit, and issues a personalization request for requesting issuance of issuance data for activating the service application including the ICCID, authentication information, and action parameter (personalized action) to the SP-TSM. Send to server 2.

Sequence F8:
When the personalization action is supplied together with the authentication information, the SP-TSM server 2 refers to the service application issuance table in the user database 21, and the ICCID and the service application identification information supplied from the mobile terminal 5 are matched. Check if there is a record with service application identification information.
Then, as a result of referring to the service application issuance table in the user database 21, the SP-TSM server 2 detects this record in which the ICCID and the service application identification information matching the ICCID and the service application identification information are detected. Read dummy data in the record.

Then, the SP-TSM server 2 transmits dummy data read from the service application issue table of the user database 21 to the mobile terminal 5.
The CPU of the UICC 52 writes the dummy data supplied from the SP-TSM server 2 to a predetermined location of the service application installed in a predetermined area of the UICC 52, and dummy activation of the service application (dummy false personalization) I do.
At this time, the SP-TSM server 2 writes the dummy data in a predetermined area of the contactless storage card 53 of the mobile terminal 5, for example. This process completes the dummy personalization for the UICC 52. However, at this time, the service application is not activated, and the mobile terminal 5 is not provided with a function for emulating the operation of the IC card of the service to be received, and issuance of this service application is terminated. Absent.

Sequence F9:
The CPU of the UICC 52 sends a personalization completion notification indicating that the service application has been normally activated to the SP-TSM server 2 via the UI application based on the operation indicated by the falsely activated service application. Send.
Then, the SP-TSM server 2 determines that the personalization of the service application for the mobile terminal 5 has been normally performed by receiving the personalization completion notification. The SP-TSM server 2 changes the issue status in the record corresponding to the issued issue data in the service application issue table of the user database 21 from unissued to issued, and deletes dummy data.

Sequence F10:
When the process associated with the completion of personalization of the service application in the user database 21 is completed, the SP-TSM server 2 sends a personalized response, which is a notification indicating that the process of personalizing the service application has been completed, to the mobile terminal 5. Output.

Sequence F11:
When the UI application receives the personalization response from the SP-TSM server 2, the UI application outputs a completion processing request indicating that all processes in the false personalization of the service application have been completed to the MNO-TSM server 4.
As a result, the MNO-TSM server 4 changes the issue status in the record corresponding to the ICCID included in the completion request from unissued to being issued in the service application issue table owned by itself.

Sequence F12:
When receiving the completion processing request from the mobile terminal 5, the MNO-TSM server 4 transmits a completion response to the mobile terminal 5.
Thereby, the UI application detects that the service application issuance processing for the mobile terminal 5 has been completed, including dummy personalization.

Sequence F13:
The service application installed in the UICC 52 issues a PI request asking the PI server 6 whether or not it can be used.
The UI application reads the member number from the dummy data stored in the non-contact storage card 53 when the dummy personalization ends and the PI request is issued.
The UI application adds this member number to the PI request for determining whether or not the issued IC card can be used, and sends the PI request with the member number added to the PI server 6. To send.

Sequence F14:
When a PI request is supplied from the mobile terminal 5, the PI server 6 extracts a membership number from the PI request.
Then, the PI server 6 searches for a record corresponding to the extracted membership number from the service application issue table in its own database.
The PI server 6 determines whether the issue status in the retrieved record in the service application issue table is unissued or issued. Here, when the issue status in the record is not issued, the PI server 6 reads the issue data from the record and transmits the issue data to the mobile terminal 5.

  In the mobile terminal 5, the UI application writes the issuance data supplied from the SP-TSM server 2 to a predetermined location of the service application installed in a predetermined area of the UICC 52, and activates the service application (personalization). . As a result, the service application is activated, and a function for emulating the operation of the IC card of the service desired to be received is added to the portable terminal 5, and the service application is issued.

Sequence F15:
Based on the operation indicated by the activated service application, the UI application transmits a personalization completion notification indicating that the service application has been normally activated to the PI server 6.
Then, the PI server 6 determines that the personalization of the service application for the mobile terminal 5 has been normally performed by receiving the notification of the completion of personalization. In the service application issue table of its own database, the PI server 6 changes the issue status in the record corresponding to the issued issue data from unissued to issued and deletes the issued data.

Sequence F16:
When the process associated with the completion of personalization of the service application in its own database is completed, the PI server 6 outputs a PI response that is a notification indicating that the process of personalizing the service application is completed to the mobile terminal 5.

Sequence F17:
When the UI application receives the PI response from the PI server 6, the UI application outputs a completion processing request indicating that all processes in the personalization of the service application have been completed to the MNO-TSM server 4.
As a result, the MNO-TSM server 4 changes the issue status in the record corresponding to the ICCID included in the completion processing request from unissued to issued in the service application issue table owned by itself.

Sequence F18:
When receiving the completion processing request from the mobile terminal 5, the MNO-TSM server 4 transmits a completion response to the mobile terminal 5.
Thereby, the UI application detects that the service application issuance processing for the mobile terminal 5 has been completed, including dummy personalization.

  As described above, according to the present embodiment, when personalization completion notification is received, since personalization is not actually performed, the UI application determines that only initialization is normally performed when receiving personalization completion notification. To do. On the other hand, if the UI application receives an issuance error during issuance of the service application, as described above, since the personalization is not actually performed, it is determined that an abnormality has occurred in the initialization.

In addition, according to the present embodiment, since a PI request is transmitted to the PI server 6 and used as a trigger for actual personalization processing, when an issuance error is received from the PI server 6, an abnormality occurs during the personalization processing. Can be detected.
As described above, in this embodiment, it is possible to determine whether the cause of the issue error is an abnormality in initialization or an abnormality in personalization.
As a result, according to the present embodiment, it is possible to clearly detect whether an abnormality that occurred during issuance of a service application has occurred during initialization or personalization. For this reason, when initialization is completed normally and personalization ends abnormally, issue processing can be performed from personalization, compared to the conventional method of restarting issue from initialization when an issue error occurs. Thus, it is possible to reduce the time required for the reissue process in the case of an issue error.

  Also, the programs for realizing the functions of the UI application, the SP-TSM server 2, the MNO-TSM server 4, and the PI server 6 in FIG. 1 are recorded on a computer-readable recording medium and recorded on this recording medium. Service information management processing may be performed by causing the computer system to read and execute the program. Here, the “computer system” includes an OS and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system.

  Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case, and a program that holds a program for a certain period of time are also included. Further, the program may be a program for realizing a part of the functions described above, and is a so-called differential file that can realize the functions described above in combination with a program already recorded in the computer system. May be.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design and the like within a scope not departing from the gist of the present invention.

2 ... SP-TSM server 3 ... Distribution service server 4 ... MNO-TSM server 5 ... Mobile terminal 6 ... Management server 10_A ... Company A service center 10_Z ... Company Z service center 21 ... User database 51 ... Control unit 52 ... UICC
53. Non-contact memory card 53
100 ... Internet

Claims (12)

Issued data for activating the service application distributed from a service application distribution server that distributes a service application that emulates the operation of the IC card selected by the user to the mobile terminal of the user. Publishing data distribution server to distribute,
A management server that responds to inquiries from the service application and manages the operation and non-operation of the service application installed in the mobile terminal;
The issuance data distribution server issues the dummy data as the issuance data to the portable terminal, and the management server issues the dummy data to the portable terminal in the inquiry. If the service application has not been issued, the service application is issued by issuing the issue data to the mobile terminal and activating the service application.   The issue data distribution server performs initialization to install the service application on the mobile terminal, and the management server performs personalization to activate the service application installed on the mobile terminal with the issue data. The service application issuing device according to claim 1. The service application issuing device according to claim 1, wherein the dummy data includes identification information for identifying the service application installed in the mobile terminal. After the service application installed in the mobile terminal and emulating the operation of the IC card selected by the user is downloaded from the service application issuing device, and the service application is installed in the mobile terminal, the service application device An installer for performing a process of receiving issuance data for activating the service application;
When the service application is activated by the issued data when the application is initialized, dummy data is received as the issued data, the service application issuance process is temporarily terminated, and the availability of the service application is determined. In response to an inquiry from the service application, at the timing of accessing and confirming the management server that manages the operation and non-operation of the service application installed in the mobile terminal, the issue data that activates the service application is managed. An installer that is imported from a server. The installer according to claim 4, wherein the dummy data includes identification information for identifying the service application installed in the mobile terminal. The identification information is temporarily stored in a storage unit of the portable terminal, and when the management server is accessed, the identification information is read from the storage unit, added to an inquiry, and transmitted to the management server. The installer according to claim 4 or 5. A mobile terminal in which an installer for downloading a service application emulating the operation of the IC card selected by the user from the service provider and installing the service application is installed;
Issued data for activating the service application distributed from a service application distribution server that distributes a service application that emulates the operation of the IC card selected by the user to the mobile terminal of the user. Publishing data distribution server to distribute,
A management server that responds to inquiries from the service application installed on the mobile terminal and manages the operation and non-operation of the service application installed on the mobile terminal;
The issuance data distribution server issues dummy data as the issuance data to the portable terminal, and the management server issues the service of the portable terminal upon the inquiry from the installer of the portable terminal. When the issued data has not been issued to the application, the service application is issued by issuing the issued data to the mobile terminal and activating the service application.   The issue data distribution server performs initialization to install the service application on the mobile terminal, and the management server performs personalization to activate the service application installed on the mobile terminal with the issue data. The service application issuing system according to claim 7. The service application issuing system according to claim 7 or 8, wherein the dummy data includes identification information for identifying the service application installed in the mobile terminal. Issuance data that activates the service application distributed from the service application distribution server that distributes the service application that emulates the operation of the IC card selected by the user to the mobile terminal of the user. Issuance data distribution process to distribute to the mobile terminal;
A management server responding to inquiries from the service application and managing the operation and non-operation of the service application installed on the mobile terminal,
The issuance data distribution server issues the dummy data as the issuance data to the portable terminal, and the management server issues the dummy data to the portable terminal in the inquiry. If the service application has not been issued, the service application is issued by issuing the issue data to the mobile terminal and activating the service application. After the service application installed in the mobile terminal and emulating the operation of the IC card selected by the user is downloaded from the service application issuing device, and the service application is installed in the mobile terminal, the service application device An installation method by an installer that performs a process of receiving issuance data for activating the service application,
When the service application is activated by the issued data when the application is initialized, dummy data is received as the issued data, the service application issuance process is temporarily terminated, and the availability of the service application is determined. In response to an inquiry from the service application, at the timing of accessing and confirming the management server that manages the operation and non-operation of the service application installed in the mobile terminal, the issue data that activates the service application is managed. An installation method characterized by importing from a server. Downloading a service application that emulates the operation of the IC card selected by the user from the service provider, and installing an installer for installing the service application on the mobile terminal;
Issuance data that activates the service application distributed from the service application distribution server that distributes the service application that emulates the operation of the IC card selected by the user to the mobile terminal of the user. Delivering to the mobile terminal;
A management server responding to an inquiry from the service application installed in the mobile terminal, and managing the operation and non-operation of the service application installed in the mobile terminal,
The issuance data distribution server issues dummy data as the issuance data to the portable terminal, and the management server issues the service of the portable terminal upon the inquiry from the installer of the portable terminal. A service application issuance method characterized by issuing the issuance data to the mobile terminal and activating the service application when the issuance data has not been issued to the application.

Images