JP3296230B2 - Subscriber / mobile device identification device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a subscriber / mobile unit discriminating apparatus, and more particularly, to not only a subscribed mobile communication network (home network) but also other mobile stations employing a different communication system. The present invention relates to a subscriber / mobile device identification device that can access (roam) a communication network (roaming destination network) even within the network.

[0002]

2. Description of the Related Art A subscriber / mobile unit identification device has an identification number for identifying a subscriber / mobile unit, and further has an authentication program for authenticating the subscriber / mobile unit. are doing. Such a subscriber / mobile device identification device includes a ROM (Read) housed in a mobile device housing.
SIM (Subscriber Id) typified by, for example, an IC card with a CPU, which is removable from a storage device such as an only memory, and a mobile device main body.
entity module). ROM is
The subscriber number is fixedly associated with the mobile device because it is provided in the mobile device housing. SIM is required to carry only the subscriber number separately from the mobile device (card roaming).
Can be. In many cases, a SIM is an I / O with a CPU whose physical standards and electrical characteristics are internationally unified.
It is realized by a C card or an IC device.

[0003]

SUMMARY OF THE INVENTION However, SIM
Since the internal file structure, the authentication calculation procedure, and the input / output information format of the authentication calculation are different for each communication method, if the communication method differs between the SIM and the mobile device, the subscriber / mobile device identification can be performed normally. Can not. Therefore, card roaming is impossible as it is. in this way,
According to the prior art, roaming is possible only between mobile communication networks employing the same communication scheme, and between mobile communication networks employing different communication schemes, for example, PDC (Personal Digital Cell) which is a Japanese standard scheme.
lua) and GSM (Gl
obal System for Mobile co
roaming was not possible.

An object of the present invention is to solve the above-mentioned problems, and more specifically, to a subscriber / mobile device identification which enables easy roaming to a mobile communication network adopting a different communication system. It is intended to provide a device.

[0005]

SUMMARY OF THE INVENTION The present invention relates to a subscriber / mobile unit identification apparatus which is detachable from a mobile unit and holds a number for identifying a subscriber or a mobile unit. In particular, in the present invention, a plurality of storages respectively corresponding to the communication systems of a plurality of mobile communication networks, so that a subscriber or a mobile device can be identified in a plurality of mobile communication networks employing different communication systems. The same identification number for identifying a subscriber or a mobile station is provided in all of these plurality of storage areas, and includes an authentication calculation program according to the input / output format of the home mobile communication network. And a conversion program for converting the input / output format of the authentication calculation program into the input / output format of the roaming destination mobile communication network.
A mobile device identification device is provided.

Accordingly, as long as only one subscriber joins one network and obtains one subscriber identification number or mobile station identification number, the subscriber / mobile station identification can be performed even in a mobile communication network of a different communication system. Therefore, roaming between different types of mobile communication networks using SIM can be realized.

A means for judging a communication system adopted by a mobile communication network located in accordance with an instruction from a mounted mobile device, and a communication system of a mobile communication network located in a roaming destination mobile communication network. Preferably, the system further comprises means for activating the above-mentioned conversion program if the communication method is the same as that of the home mobile communication network, and stopping the operation of the conversion program if the communication method is the same as the home mobile communication network.

[0008] In addition, it has a first authentication calculation program according to the input / output format of the home mobile communication network and a second authentication calculation program according to the input / output format of the roaming destination mobile communication network. In this case, it is preferable that a means for judging a communication method adopted by the mobile communication network located in accordance with an instruction from the attached mobile device, and a communication method of the mobile communication network being located be roaming destination mobile It is preferable that the apparatus further comprises means for selecting the second authentication calculation program when the communication method is that of the communication network, and selecting the first authentication calculation program when the communication method is the same as the home mobile communication network.

As described above, by converting the authentication calculation into the input / output format of the roaming destination network or selecting one corresponding to the roaming destination network, even in a network adopting a different inter-network communication method. Authentication of the subscriber / mobile device can be easily realized.

[0010] Preferably, the plurality of storage areas are provided in a plurality of physically independent IC devices or IC cards, respectively, or are provided in a single IC device.

In the latter case, a plurality of IC chips physically separated from each other are provided in a single IC device, and a plurality of storage areas are provided in each of the plurality of IC chips. A single IC chip may be provided in a single IC device, and a plurality of storage areas may be provided in the single IC chip.

[0012]

Embodiments of the present invention will be described below in detail with reference to the drawings.

FIG. 1 is a diagram showing the configuration of the entire system according to an embodiment of the present invention.

Referring to FIG. 1, reference numerals 1, 2 and N denote first, second and Nth communication systems adopting different communication systems.
A mobile communication network 9; a relay device between heterogeneous mobile communication networks provided on the network side for realizing roaming between a plurality of mobile communication networks having different communication systems; and 10 a communication of the first mobile communication network 1. Mobile device according to the communication method, 20 is a mobile device according to the communication method of the second mobile communication network 2, 100, 200, 30
ICs 0, 400 and 900 can be freely attached to and detached from mobile devices
Each device is shown.

The IC device 100 is a conventional IC device, and has a specification according to the communication system adopted by the first mobile communication network 1. The IC device 100 is used when a user who has subscribed to the first mobile communication network 1 performs communication within the first mobile communication network 1 or within a mobile communication network employing the same communication method. The IC device 200 is also an existing IC device, and has a specification according to the communication system adopted by the second mobile communication network 2. The IC device 200 is used when a user who has subscribed to the second mobile communication network 2 communicates in the second mobile communication network 2 or a mobile communication network adopting the same communication method. The IC device 300 according to the present invention is used when a user who has joined the first mobile communication network 1 performs roaming communication within the second mobile communication network 2. The IC device 400 is according to the present invention, and a user who has subscribed to the first mobile communication network 1 performs communication in the first mobile communication network 1 and roaming communication in the second mobile communication network 2. Use when both. The IC device 900 is according to the present invention, and a user who has subscribed to the first mobile communication network 1 performs communication in the first mobile communication network 1 and roaming communication in the second mobile communication network 2. Sometimes used.

A subscriber contract is signed with the first mobile communication network 1,
The following three types of subscriber / mobile device identification devices are provided to subscribers who have made a roaming contract with the second mobile communication network 2 as a supplementary service (hereinafter, referred to as roaming contract subscribers). . (1) Subscriber / mobile device identification device composed of both IC device 100 and IC device 300, (2) IC
(3) Subscriber / mobile device identification device composed of device 400;
Mobile device identification device.

For example, an IC device represented by a smart card is composed of an IC chip and its base. The IC chip mainly includes a CPU and a memory. The basement is a part for mounting an IC chip, and there is an international standard (ISO-7816) for the shape and the position for mounting the IC chip. It should be noted that IC devices specified by various mobile communication systems do not always completely match with ISO-7816, and the present invention does not assume all the specifications of ISO-7816.

The IC chip comprises an 8-bit CPU and a memory having a capacity of several kilobytes. Needless to say, even if the number of bits and the storage capacity increase in the future, the application of the present invention is not hindered at all.

FIG. 2 shows the IC devices 100 and 20 shown in FIG.
Examples of mechanical structures of 0, 300 or 900 are shown.
The IC devices 100, 200, 300 and 900 are respectively IC chips 160, 260, 360 and 960
And basements 170, 270, 370 and 970.

FIG. 3 shows an example of a mechanical structure of the IC device 400 of FIG. This IC device 400
It has two IC chips mounted on a common basement 470. These IC chips are the IC chip 160 of the IC device 100 and the IC device 300.
Since the configuration is the same as that of the IC chip 360, the same reference numbers are given. Two IC chips 16
0 and 360 are provided at both ends on the same plane of the basement 470 at positions that are point-symmetric with respect to the center point of the basement 470 as shown. In other words, they are provided at the same distances D ₁ and D ₂ from the side and end edges of the basement. Note that two IC chips can be attached to the opposite surface of the basement 470.
The mobile device 10 and the mobile device 20 can share the IC device 400 by using the IC device 400 having such a structure and changing the insertion direction or surface of the mobile device. That is, the IC device 400
It provides functions equivalent to those of the IC device 100 and the IC device 300.

The following table summarizes the relationship between the IC devices and the IC chips mounted thereon.

[0022]

[Table 1]

The IC chip has a program storage area for storing a program for calculation and a data storage area for storing data. The general configuration of the storage area of an IC chip when applied to an IC device is defined by ISO.
Use the terms defined in.

Generally, the storage area of an IC chip has a multilayered file structure. This multi-layered file structure has a data storage area EF (Eleme).
DF (Dedicated File) that manages security information of EFs and EFs.
And an MF (Master File) that can manage all files in the IC chip. Usually, one DF manages a plurality of EFs. Also,
The DF is created for each application of the IC device.

The file structure of the actual storage area of the IC chip in each IC device is determined based on the file structure and the communication system of the first mobile communication network 1 and the second mobile communication network 2. ing.

First, in order to facilitate understanding of the present invention, the file structure of a conventional IC chip will be described with reference to FIGS.

FIGS. 4 and 5 show the IC chip 160 of the IC device 100 corresponding to the communication system of the first mobile communication network 1.
2 shows a conventional file configuration for the storage area of FIG. FIG. 6 shows a conventional file configuration related to the storage area of the IC chip 260 of the IC device 200 according to the communication method of the second mobile communication network 2. Here, the first mobile communication network 1 is a communication system (for example, PDC) for managing a subscriber and a mobile device using an IC device, and the second mobile communication network 2 is a communication for managing only a subscriber using an IC device. It is assumed that each method (for example, GSM) is adopted.

In the conventional configuration shown in FIG.
The IC chip 160, EF for storing subscriber identity SIDN1 ₁ applied in the first mobile communication network 1 architecture
111, stores the subscriber authentication key SAK1 ₁ EF11
2, stores the mobile equipment identification number MTIDN ₁ EF113
And there is EF114 for storing mobile authentication key MTAK _1, they manage DF110, further, MF101 for managing all files in the IC chip is present. Also, as in the conventional configuration shown in FIG.
EF111 storing IDN1 ₁ and subscriber authentication key SA
The EF112 for storing K1 ₁ managed by DF120, a mobile identification number MTIDN ₁ stores EF113 and EF114 for storing mobile unit identification key MTAK ₁ DF13
0 and all files in the IC chip are stored in MF10
2 may be configured to be managed.

In the conventional configuration shown in FIG.
EF which stores a subscriber identification number SIDN2 ₁ assigned in the system of the second mobile communication network 2
141 and EF14 storing subscriber authentication key SAK2 ₁
2 exists and the DF 140 manages them.
An MF 201 that manages all files in the C chip exists.

In the embodiment of the present invention described below, the mobile station identification number MTIDN _{1 of} the first mobile communication network ₁
And the subscriber identification number SIDN2 _{1 of} the second mobile communication network 2
And use the same number space. Further, the subscriber authentication key SAK1 ₁ and mobile authentication key MTAK ₁ of 1 first mobile communication network, are each 64 bits wide, the subscriber authentication key SAK2 ₁ of the second mobile communication network 2 is 128 bits wide And

FIG. 7 shows the I / Os of the IC devices 300 and 400.
FIGS. 8 and 9 show an example of a file configuration relating to the storage area of the C chip 360. FIGS.
An example of a file configuration for each of the 60 storage areas is shown. In each configuration example, there is a DF 150 used when roaming to the second mobile communication network 2.

In the configuration example of FIG. 7, the IC chips 360 of the IC devices 300 and 400 have the mobile unit identification number M assigned to the roaming subscriber in the first mobile communication network 1.
E to store the subscriber identification number is the same value as TIDN ₁
F151 and EF storing the subscriber authentication key SAK2 ₁
152, a DF 150 for managing them, and an MF 30 for managing all files in the IC chip.
There is one.

As described above, the same number as the mobile unit identification number MTIDN ₁ assigned to the roaming contract subscriber on the home network is assigned to the subscriber identification under the DF 150 configured according to the communication system of the second mobile communication network 2. The number is recorded in the storage area EF151. A technique for providing roaming between a plurality of mobile communication networks having different communication systems by providing a similar configuration in the inter-heterogeneous mobile communication network relay device 9 provided on the network side is disclosed by the present applicant. The application is filed on August 15, 1995 and is described in Unpublished Japanese Patent Application No. 7-228611.

[0034] Instead of the mobile station identification number MTIDN ₁ that have been granted in the home network to the roaming agreement subscriber, for the same value as the subscriber identification number SIDN1 ₁ that have been granted in the home network to the roaming agreement subscriber Necessary conversions and additions using network identification numbers, country codes, etc.
The information may be stored in the EF 151 as a subscriber identification number under the control of the F 150. In addition, the identification number of the subscriber or mobile device includes:
Generally, country codes and company codes are added.However, country codes and company codes are omitted in mobile communication systems used only in one country or mobile communication systems exclusively provided by one company. Could be done. In this case, the same value as the Subscriber Identity SIDN1 ₁ is stored in the EF151 as subscriber identification number under DF150.

The subscriber authentication key SAK2 ₁ under the DF150
Are provided by the relay device 9 and by the first mobile communication network 1. In this embodiment, the subscriber authentication key S assigned by the first mobile communication network 1
AK1 on the basis of ₁ and the mobile device authentication key MTAK ₁ has granted a subscriber authentication key SAK2 _1.

In the configuration example shown in FIG. 8, the same EF as that shown in FIG.
There is a DF 110 including 111 to 114, a DF 150 including EFs 151 and 152 similar to that shown in FIG. 7, and an MF 901 that manages all files in the IC chip.

As described above, the same number as the mobile unit identification number MTIDN ₁ assigned to the roaming contract subscriber in the home network 1 and stored in the EF 113 under the DF 110 is used for the communication system of the second mobile communication network 2. Storage area EF as a subscriber identification number under DF150 configured according to
151.

Further, in the configuration example shown in FIG.
The DF 120 and the EF 113 including the EFs 111 and 112 similar to those shown in FIG.
And a DF 150 including EFs 151 and 152 similar to those shown in FIG. 7, and an MF 902 that manages all files in the IC chip.

As described above, the same number as the mobile unit identification number MTIDN ₁ assigned to the roaming contract subscriber in the home network 1 and stored in the EF 113 under the DF 130 is used for the communication system of the second mobile communication network 2. Storage area EF as a subscriber identification number under DF150 configured according to
151.

The data storage area of the IC chip 360 relating to the above-described IC devices 300 and 400 (M in FIG. 7)
F301) has only a file structure corresponding to the second mobile communication network 2, and is applicable only when a roaming subscriber is located in the second mobile communication network 2. On the other hand, the I
Data storage area of C chip 960 (MF901 in FIG. 8)
And the MF 902 in FIG. 9) includes the first mobile communication network 1
DFs corresponding to both the first mobile communication network 1 (home network) and the second mobile communication network 2 (roaming destination network). ) Can be applied when you are either.

FIG. 10 shows IC devices 300 and 400
2 shows one configuration example of an IC chip 360 relating to FIG. As shown in the figure, in this example, the IC chip 360
In addition to the MF301 described above, the authentication program 1
90 and a conversion program (FEP) 303 for performing format conversion between the first and second mobile communication networks.

The authentication program 190 performs an authentication operation created in accordance with the communication method of the first mobile communication network 1. As shown in FIG. 11, a 64-bit authentication key and a 64-bit random number RN1 are generated. Entered or specified,
A 64-bit response RE1 is output as a result. This authentication program 190 is the same as that existing in the IC chip 160.

The FEP 303 converts the random number RN2 (128 bits) into a random number RN1 (64 bits) as shown in FIG.
A first conversion function 303a for converting to a response RE1 (6
(4 bits) to a response RE2 (32 bits). By using the FEP 303 together with the authentication program 190, authentication can be performed in the second mobile communication network 2. Note that such a conversion function is described in Japanese Patent Application Laid-Open
-264668 and JP-A-7-307982.

FIG. 13 shows IC devices 300 and 400
15 shows another configuration example of the IC chip 360 relating to FIG.
As shown in the figure, in this example, in addition to the MF 301 described above, the authentication program 29
0 exists.

The authentication program 290 performs an authentication operation created in accordance with the communication method of the second mobile communication network 2. As shown in FIG. 14, a 128-bit authentication key and a 128-bit random number RN2 are generated. An input or specified, 32-bit response RE2 is output as a result. This authentication program 290 is the same as that existing in the IC chip 260.

As described above, the IC chip 360 is provided with at least one of the authentication program 190 and the authentication program 290, and is provided with the FEP 303 when the authentication program 190 is stored. .

FIG. 15 is a block diagram of the I
One configuration example of the C chip 960 is shown. As shown in this figure, in this example, in addition to the MF 901 or MF 902 described above, the IC chip 960 has a conversion for performing conversion between the authentication program 190 and the format relating to the first and second mobile communication networks. Program (FEP) 30
3 and a controller 304 that determines the communication method of the mobile communication network in which the mobile terminal is located and outputs a control signal.

As shown in FIG. 16, the controller 304 allows the roaming subscriber to communicate with the first mobile communication network 1 and the second mobile communication network 1 according to a command issued from the mobile device to the IC chip.
The mobile communication network 2 is used to determine whether or not the mobile communication network 2 is located, and to control the conversion operation of the FEP 303. The command for the determination is, for example, a DF selection command,
This is the code of the authentication command, or a parameter accompanying the authentication command or its length.

FIG. 17 is a block diagram showing the I
19 shows another configuration example of the C chip 960. As shown in the figure, in this example, in addition to the MF 901 or MF 902 described above, the authentication program 1
90 and 290, and a selector 305 for determining a communication system of a mobile communication network in which the mobile communication network is located based on an instruction from the mobile device and selecting an authentication program.

As shown in FIG. 18, the selector 305 operates according to a command issued from the mobile device to the IC chip.
This is for switching the authentication program by determining whether the roaming contract subscriber is located in either the first mobile communication network 1 or the second mobile communication network 2. The command for determination is, for example, a DF selection command, an authentication command code, or a parameter accompanying the authentication command or its length. In the selector 305, the authentication program 190 and the authentication program 29
Either 0 is selected.

As described above, the IC chip 360 and the IC chip 9
60 configuration examples have been described. These are summarized in the following table.

[0052]

[Table 2]

FIG. 19 shows an IC chip 3 having the configuration of FIG.
FIG. 10 is a diagram illustrating an example of an identification and authentication operation at the time of roaming using the IC device 300 or 400 having the 60.

The roaming subscriber has the second mobile communication network 2
The IC device 300 or 400 is attached to the mobile device 20 in order to perform communication by using. The mobile device 20 transmits the second mobile communication network 2 to the IC chip 360 of the mounted IC device.
The DF 150 selection command specified in (1) is sent. Thereby, the IC chip 360 selects the DF 150. Next, the mobile device 20 reads the subscriber identification number stored in the EF 151 under the DF 150 by reading the IC chip 360.
To request. As a result, the subscriber identification number MTIDN ₁ (the same number as the mobile unit identification number MTIDN ₁ assigned to the roaming subscriber on the home network) stored in the EF 151 is read out, and the mobile unit 2 is read from the IC chip 360.
0 is transferred.

The subscriber identification number MTIDN ₁ is notified to the second mobile communication network 2 via the mobile device 20. Generally, a subscriber identification number is composed of a subscriber's country code, a subscriber's network number, and a subscriber number. Since Subscriber Identity MTIDN ₁ are applied in the first mobile communication network 1 system, and a country code and the network number, the second mobile communication network 2 the subscriber is roaming from another network You can judge that.

Therefore, the second mobile communication network 2 transmits the subscriber identification number MTIDN to the inter-heterogeneous mobile communication network relay device 9.
₁ is presented and the authentication information about the roaming subscriber is queried in the format of the second mobile communication network 2. After converting the data into the format of the first mobile communication network 1, the inter-heterogeneous mobile communication network relay device 9 relays an inquiry about the roaming subscriber to the first mobile communication network 1.

Thus, the first mobile communication network 1 searches for the subscriber authentication information corresponding to the subscriber identification number MTIDN ₁ . By this search, the random number RN1, the response RE
Authentication information including 1 and the like is obtained. As described above, the subscriber's authentication key SAK2 ₁ for the second mobile communication network of this subscriber.
Is a subscriber authentication key SAK1 in the first mobile communication network 1.
₁ and the mobile station authentication key MTAK ₁ , the first mobile communication network 1 uses the subscriber authentication key SAK
2 ₁ and therefore it is possible to calculate the response RE1.

The obtained authentication information is stored in the first mobile communication network 1
Of the second mobile communication network 2
Before transmission to the mobile communication network, it is necessary to perform conversion in the inter-heterogeneous mobile communication network relay device 9 or the first mobile communication network 1.

In the example shown in FIG. 19, this conversion is performed by using a conversion function in the relay device 9 between different types of mobile communication networks. One of the conversion functions is to convert a random number RN1 (64 bits) to a random number RN
2 (128 bits).
The first conversion function 303a in the FEP 303 shown in FIG.
It has the reverse conversion function. The other is a conversion function for converting the response RE1 (64 bits) to the response RE2 (32 bits), and has the same function as the second conversion function 303b in the FEP 303. The subscriber authentication parameters (RN2, RE2) thus converted into the format of the second mobile communication network 2 are sent from the relay device 9 to the second mobile communication network 2.

The second mobile communication network 2 sends a random number RN2 to the IC chip 360 via the mobile device 20, and instructs the IC chip 360 to perform an authentication operation. The IC chip 360 returns the random number RN2 to the random number RN1 by the first conversion function 303a of the FEP 303, and then passes the random number RN2 to the authentication program 190. Authentication program 190
The response RE from the random number RN1 based on the subscriber authentication key SAK2 ₁ stored in EF152 under DF150
Calculate 1. The response RE1 is converted to the response RE2 by the second conversion function 303b of the FEP 303, and then sent to the mobile communication network 2 via the mobile device 20. Mobile communication network 2
Then, the roaming subscriber is authenticated by collating the RE2 sent from the relay device 9 with the response RE2 sent from the mobile device 20.

FIG. 20 is a diagram showing an example of the identification and authentication operation during roaming using the IC device 900 having the IC chip 960 having the configuration shown in FIG.

The subscriber attaches the IC device 900 to the mobile device 20 to perform roaming on the second mobile communication network 2. The mobile device 20 applies the D chip specified by the second mobile communication network 2 to the IC chip 960 of the mounted IC device.
The selection command of F150 is sent. Thereby, the IC chip 9
The controller 304 of 60 knows that the mobile network in which it is located is the second mobile communication network 2 or a mobile network having the same communication system, and controls the FEP 303 to perform a conversion operation. The IC chip 960 selects the DF 150. Next, the mobile device 20 is controlled by the EF15 under the DF150.
1 is read out from the IC chip 9
Require 60. Thereby, from the IC chip 360,
The subscriber identification number MTIDN stored in the EF 151
₁ (the same number as the mobile station identification number MTIDN ₁ assigned to the roaming subscriber on the home network) is read and transferred to the mobile station 20. The subsequent operation is exactly the same as that of the IC chip 360 described with reference to FIG.

When the subscriber attaches the IC device 900 to the mobile device 10 to perform communication on the first mobile communication network 1,
The mobile device 10 is a DF110, or a DF120 and a DF13.
A selection command of 0 is sent to this IC chip 960. As a result, the controller 304 of the IC chip 960 knows that the mobile network in which it is located is the first mobile communication network 1 or a mobile network having the same communication system, and controls the conversion operation of the FEP 303 so that it does not function. I do. IC chip 9
60 selects DF110, or DF120 and DF130.

As described above, unlike the IC chip 360, the IC chip 960 can be used in the first mobile communication network 1 which is a home network. The controller 304 determines whether the network in which the roaming subscriber is located is the first mobile communication network 1 or the second mobile communication network 2, and determines whether the network is the FEP3.
03 is controlled. When the user is in the first mobile communication network 1, the authentication program 190 can be used as it is, so that the function of the FEP 303 is stopped and conversion of random numbers and responses is not performed. When roaming to the second mobile communication network 2, the conversion of the random number and the response described with reference to FIG. 19 is performed.

FIG. 21 is a diagram showing an example of the identification and authentication operation during roaming using the IC device 900 having the IC chip 960 having the configuration shown in FIG.

The subscriber attaches the IC device 900 to the mobile device 20 to perform roaming in the second mobile communication network 2. The mobile device 20 applies the D chip specified by the second mobile communication network 2 to the IC chip 960 of the mounted IC device.
The selection command of F150 is sent. Thereby, the IC chip 9
The selector 305 of 60 recognizes that the mobile network in which it is located is the second mobile communication network 2 or a mobile network having the same communication system as the second mobile communication network 2, and uses the program 290 as an authentication program.
Select The IC chip 960 selects the DF 150. Next, the mobile device 20 operates the EF1 under the DF150.
It requests the IC chip 960 to read the subscriber identification number stored in 51. Thereby, the subscriber identification number MTI stored in the EF 151 is transmitted from the IC chip 960.
DN ₁ (the same mobile station identification number MTIDN ₁ assigned to the roaming subscriber on the home network) is read and transferred to the mobile station 20.

The subscriber identification number MTIDN ₁ is notified to the second mobile communication network 2 via the mobile device 20. Generally, a subscriber identification number is composed of a subscriber's country code, a subscriber's network number, and a subscriber number. Since Subscriber Identity MTIDN ₁ are applied in the first mobile communication network 1 system, and a country code and the network number, the second mobile communication network 2 the subscriber is roaming from another network You can judge that.

Accordingly, the second mobile communication network 2 transmits the subscriber identification number MTIDN to the inter-heterogeneous mobile communication network relay device 9.
₁ is presented and the authentication information about the roaming subscriber is queried in the format of the second mobile communication network 2. After converting the data into the format of the first mobile communication network 1, the inter-heterogeneous mobile communication network relay device 9 relays an inquiry about the roaming subscriber to the first mobile communication network 1.

[0069] Thus searching the authentication information of the subscriber corresponding to the first mobile communication network 1, the subscriber identity MTIDN ₁ thereof. By this search, the random number RN1, the response RE
Authentication information including 1 and the like is obtained. As described above, the subscriber's authentication key SAK2 ₁ for the second mobile communication network of this subscriber.
Is a subscriber authentication key SAK1 in the first mobile communication network 1.
₁ and the mobile station authentication key MTAK ₁ , the first mobile communication network 1 uses the subscriber authentication key SAK
2 ₁ and therefore it is possible to calculate the response RE1.

The obtained authentication information is stored in the first mobile communication network 1
Of the second mobile communication network 2
Before transmission to the mobile communication network, it is necessary to perform conversion in the inter-heterogeneous mobile communication network relay device 9 or the first mobile communication network 1.

In the example shown in FIG. 21, this conversion is performed by using a conversion function in the relay device 9 between heterogeneous mobile communication networks. One of the conversion functions is to convert a random number RN1 (64 bits) to a random number RN
2 (128 bits).
The first conversion function 303a in the FEP 303 shown in FIG.
It has the reverse conversion function. The other is a conversion function for converting the response RE1 (64 bits) to the response RE2 (32 bits), and has the same function as the second conversion function 303b in the FEP 303. The subscriber authentication parameters (RN2, RE2) thus converted into the format of the second mobile communication network 2 are sent from the relay device 9 to the second mobile communication network 2.

The second mobile communication network 2 sends a random number RN2 to the IC chip 960 via the mobile device 20, and instructs the IC chip 960 to perform an authentication operation. Authentication program 290, based on the subscriber authentication key SAK2 ₁ stored in EF152 under DF150 random number RN2
To calculate the response RE2. The calculated response RE2 is
The data is sent to the mobile communication network 2 via the mobile device 20. In the mobile communication network 2, RE 2 sent from the relay device 9 and the mobile device 20
The roaming subscriber is authenticated by collating with the response RE2 sent from.

When the subscriber attaches the IC device 900 to the mobile device 10 to perform communication on the first mobile communication network 1,
The mobile device 10 is a DF110, or a DF120 and a DF13.
A selection command of 0 is sent to this IC chip 960. As a result, the selector 305 of the IC chip 960 knows that the mobile network in which it is located is the first mobile communication network 1 or a mobile network having the same communication system as this, and selects the program 190 as the authentication program. In addition, IC chip 960
Selects DF110 or DF120 and DF130.

As described above, unlike the IC chip 360, the IC chip 960 can be used in the first mobile communication network 1 which is a home network. The selector 305 determines whether the network in which the roaming subscriber is located is the first mobile communication network 1 or the second mobile communication network 2, and selects an authentication program. When the user is in the first mobile communication network 1, the authentication program 190 is used. When roaming to the second mobile communication network 2, the authentication program 290 is used.

As described above, according to the present embodiment, the IC devices 300, 400, and 900 composed of the IC chip 360 and the IC chip 960 enable
The first mobile communication network 1 without changing the mobile device 20
Roaming communication can be performed in the second mobile communication network 2 (roaming destination network) that employs a communication method different from that of the (home network).

The embodiments described above all show the present invention by way of example and not by way of limitation, and the present invention can be embodied in other various modifications and alterations. Therefore, the scope of the present invention is defined only by the appended claims and their equivalents.

[0077]

As described above in detail, according to the present invention, it is possible to identify and authenticate a subscriber with one subscriber / mobile unit identification device even in different mobile communication networks, and to enable roaming communication. Close. Even between heterogeneous mobile communication networks, since there is only one subscriber or mobile unit identification number, the number space can be used effectively, and the difference in specifications between mobile communication networks can be added on the subscriber side. The mobile terminal can roam between heterogeneous mobile communication networks as it is by absorbing the mobile / mobile device identification device.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an entire system according to an embodiment of the present invention.

FIG. 2 is a diagram showing a mechanical structure of the IC device of FIG. 1;

FIG. 3 is a diagram showing a mechanical structure of the remaining IC device of FIG. 1;

FIG. 4 is a diagram showing a file configuration example of a data storage area of the IC chip shown in FIG. 2;

FIG. 5 is a diagram illustrating another example of a file configuration of the data storage area of the IC chip illustrated in FIG. 2;

FIG. 6 is a diagram showing still another file configuration example of the data storage area of the IC chip shown in FIG. 2;

7 is a diagram showing an example of a file configuration of a data storage area of the IC chip shown in FIG.

FIG. 8 is a diagram showing still another file configuration example of the data storage area of the IC chip shown in FIG. 2;

9 is a diagram showing another example of a file configuration of the data storage area of the IC chip shown in FIG. 2;

FIG. 10 is a diagram showing a configuration example of an IC chip having the file configuration of FIG. 7;

11 is a diagram showing an input / output structure of the authentication program of FIG.

FIG. 12 is a diagram showing an input / output structure of the FEP of FIG. 10;

13 is a diagram illustrating another configuration example of the IC chip having the file configuration of FIG. 7;

14 is a diagram showing an input / output structure of the authentication program of FIG.

FIG. 15 is a diagram showing a configuration example of an IC chip having the file configuration of FIG. 8 or FIG.

16 is a diagram showing an input / output structure of the controller of FIG.

17 is a diagram illustrating another configuration example of the IC chip having the file configuration of FIG. 8 or FIG. 9;

18 is a diagram showing an input / output structure of the selector of FIG.

19 is a diagram showing an example of an identification and authentication operation at the time of roaming using an IC device having an IC chip having the configuration of FIG. 10 mounted thereon.

20 is a diagram showing an example of an identification and authentication operation at the time of roaming using an IC device having an IC chip having the configuration of FIG. 15 mounted thereon.

21 is a diagram showing an example of an identification and authentication operation at the time of roaming using an IC device having an IC chip having the configuration of FIG. 17 mounted thereon.

[Explanation of symbols]

1, 2, N Mobile communication network 9 Heterogeneous mobile communication network relay device 10, 20 Mobile device 100, 200, 300, 400, 900 IC device 101, 102, 201, 301, 901, 902 M
F 110, 120, 130, 140, 150 DF 111, 113, 141, 151 Subscriber identification number 112, 142, 152 Subscriber authentication key 113 Mobile device identification number 114 Mobile device authentication key 160, 260, 360, 960 IC chip 170, 270, 370, 470, 970 Basement 190, 290 Authentication program 303 FEP 304 Controller 305 Selector

Continuing from the front page (72) Inventor Yoshihiko Ito 2-3-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo International Telegraph and Telephone Corporation (72) Inventor Shinji Ota 2-3-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo Telephone Co., Ltd. (72) Inventor Fumio Watanabe 2-3-2 Nishi-Shinjuku, Shinjuku-ku, Tokyo International Telegraph and Telephone Co., Ltd. (56) References JP-A-7-59154 (JP, A) JP-A-7- 75157 (JP, A) (58) Field surveyed (Int. Cl. ⁷ , DB name) H04B ^7/ 24-7/26 113 H04Q ^7/ 00-7/38

Claims (8)

(57) [Claims] 1. A subscriber / mobile device identification device which is detachable from a mobile device and holds a number for identifying a subscriber or a mobile device, wherein a plurality of mobile devices adopting different communication systems are used. A plurality of storage areas respectively corresponding to the communication systems of the plurality of mobile communication networks so as to enable identification of the subscriber or the mobile station in the communication network; and The same identification number is stored in all of the plurality of storage areas, and the authentication calculation program according to the input / output format of the home mobile communication network, and the input / output format of the authentication calculation program are set to the roaming destination mobile communication network. A subscriber / mobile unit discriminating apparatus having a conversion program for converting the data into a network input / output format. 2. A means for judging a communication system adopted by an existing mobile communication network based on an instruction from an attached mobile device, and a communication system of a roaming destination mobile communication being used by an existing mobile communication network. 2. The apparatus according to claim 1, further comprising: means for operating the conversion program when the communication method is that of a network, and stopping the operation of the conversion program when the communication method is the same as that of the home mobile communication network. 3. A claim storing a first authentication calculation program according to an input / output format of a home mobile communication network and a second authentication calculation program according to an input / output format of a roaming destination mobile communication network. Item 2. The apparatus according to Item 1. 4. A means for judging a communication method adopted by a mobile communication network located in accordance with an instruction from a mounted mobile device, and a communication method of a roaming destination mobile communication network in a mobile communication network located in the mobile communication network. Means for selecting the second authentication calculation program when the communication method is that of a network, and selecting the first authentication calculation program when the communication method is the same as that of the home mobile communication network. An apparatus according to claim 1. 5. The apparatus according to claim 1, wherein the plurality of storage areas are provided in a plurality of physically independent IC devices, respectively. 6. The storage device according to claim 1, wherein the plurality of storage areas are provided in a single IC device.
The device according to item. 7. A plurality of IC chips physically separated from each other in the single IC device, and the plurality of storage areas are provided in the plurality of IC chips, respectively. 7. The apparatus according to 6. 8. A single IC in said single IC device
7. The apparatus of claim 6, wherein a chip is provided, and wherein said plurality of storage areas are provided within said single IC chip.