JP3921057B2 - Access method and communication terminal - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention provides an access method suitable for a communication terminal to access resources outside the communication terminal. and Communication end The end of the Related.
[0002]
[Prior art]
A communication terminal such as a personal computer or PDA (Personal Digital Assistant) can realize various functions by downloading a program from a computer connected to a network and executing the program. For example, a Java applet written in the Java (registered trademark) programming language is a program that is downloaded to a communication terminal via a network and executed on a browser embedded in the communication terminal.
[0003]
By the way, in data communication using an open network such as the Internet, there is a risk of data tampering and spoofing. Therefore, it is practically difficult to completely guarantee the reliability related to the security of the program provided to the communication terminal via such an open network.
[0004]
As described above, regarding the execution of a program acquired via a network, for example, in the case of a Java applet, communication is performed so that only limited data in the downloaded communication terminal and the download source computer can be accessed. Access is restricted at the terminal. In this way, when executing a Java applet, the communication terminal is a computer other than the download source computer, a peripheral device connected to the communication terminal, another computer capable of data communication with the communication terminal via the network, etc. Could not access.
[0005]
[Problems to be solved by the invention]
Although such an access restriction mechanism has a certain effect in ensuring security, it imposes various operation restrictions on programs provided via the network. That is, the access restriction mechanism is a factor that impairs the original convenience that a function provided in a communication terminal can be freely changed or added by a program provided via a network.
[0006]
On the other hand, in the case of executing the program obtained via the network, if no access restriction is provided, for example, a program altered by a malicious third party is downloaded to the communication terminal by falsification or spoofing of the data described above, There is a possibility that damage caused by unauthorized access accompanying the execution of the program may reach not only the communication terminal but also other computers.
[0007]
The present invention has been made in view of the circumstances described above, and can access resources outside the communication terminal excluding the download source of the program according to the program obtained via the network while ensuring security. how to access and Communication end End It is intended to provide.
[0008]
[Means for Solving the Problems]
In order to solve the above-described problem, the present invention provides a method for a communication terminal to access data stored in an electronic device when the communication terminal executes a terminal program acquired via a network. First step of determining whether or not an electronic device that is determined to be accessed in accordance with the execution of the program is the same as an electronic device that has acquired the electronic device program corresponding to the terminal program When the communication terminal is determined to be the same in the first process, the terminal program is executed, and an access request for the electronic apparatus generated in the processing process by the program is sent to the electronic apparatus. A second step of notifying, and the electronic device to an electronic device program corresponding to the terminal program being executed in the communication terminal I provide an access method and a third step of executing a process corresponding to the access request notified by said second process.
[0009]
Further, in the access method, when the communication terminal acquires a terminal program via a network, the electronic device program corresponding to the program is performed before the first process. The method further includes a fourth step of acquiring identification information for identifying the electronic device from the acquired electronic device, and storing the identification information in association with the terminal program, and in the first step, the communication When the terminal executes the terminal program, the terminal acquires the identification information from an electronic device that is determined to be accessed along with the execution of the program, and the identification information and the fourth process It may be determined whether or not the identification information stored in association with the terminal program is the same.
[0010]
Also, in the above access method, a process performed prior to the first process, in which the server executes a terminal program to be executed in the communication terminal and an electronic apparatus to be executed in the electronic apparatus along with the execution of the program A fifth process of transmitting identification information that differs for each package to each of the terminal program and the electronic device program when transmitting a package including the program for the network via the network; and The communication terminal obtains the terminal program out of the packages transmitted in the process 5, and further includes a sixth process in which the electronic device obtains the electronic device program. In this process, when the communication terminal executes a terminal program, the communication terminal accesses with the execution of the program. The identification information assigned to the electronic device program corresponding to the terminal program is acquired from the electronic device specified, and the identification information and the identification information provided to the terminal program are the same. It may be determined whether or not there is.
[0011]
Further, in the access method, the second process executes the terminal program when the communication terminal is determined to be the same in the first process, and the process is executed in the process by the program. A seventh step of determining whether to permit the access request with reference to access regulation data in which an allowed access type is defined when an access request to the electronic device is generated; And an eighth step of notifying the electronic device of the access request permitted in the seventh step.
[0012]
In the above access method, the electronic device may be a user identification module that stores user information that is detachable from the communication terminal.
[0013]
In order to solve the above problems, the present invention provides a communication terminal for accessing data stored in an electronic device, and receiving means for receiving a terminal program executable on the communication terminal via a network. When the terminal program received by the receiving means is executed, the electronic device that is determined to be accessed in accordance with the execution of the program, and the electronic device that has acquired the electronic device program corresponding to the terminal program Provided is a communication terminal having a determining unit that determines whether or not the device is the same, and an executing unit that executes the terminal program when it is determined that the device is the same.
[0014]
In the communication terminal, when the terminal program is received by the receiving unit, the identification information identifying the electronic device is acquired from the electronic device that has acquired the electronic device program corresponding to the program, and the identification is performed. It further includes identification information storage means for storing information in association with the terminal program, and when the terminal program is executed, the determination means is defined to be accessed along with the execution of the program. The identification information may be acquired from the electronic device, and it may be determined whether or not the identification information and the identification information stored in association with the terminal program by the identification information storage unit are the same. .
[0015]
Further, in the communication terminal, the receiving unit receives a terminal program, to which identification information is attached, executable by the communication terminal via a network, and the determining unit is a terminal received by the receiving unit. When executing a computer program, the identification information given to the electronic device program corresponding to the terminal program is acquired from the electronic device that is determined to be accessed along with the execution of the program. You may make it discriminate | determine whether information and the identification information provided to the said program for terminals are the same.
[0016]
The communication terminal may further include a transmission unit that transmits an access request to the electronic device generated in the process of the terminal program executed by the execution unit to the electronic device.
[0017]
Furthermore, in the communication terminal, the access to the electronic device in the process of the allowed access storage means storing the type of access allowed for the terminal program and the terminal program executed by the execution means When a request occurs, a determination unit that determines whether or not to permit the access request with reference to the allowable access storage unit, and a transmission unit that transmits the access request permitted by the determination unit to the electronic device You may make it have further.
[0031]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. In addition, the same code | symbol is attached | subjected to the common part in each figure. Moreover, this embodiment shows one aspect | mode of this invention, This invention is not limited, It can change arbitrarily in the scope of the present invention.
[0032]
In the following embodiment, a case where the present invention is applied to a mobile communication system will be described. In the following embodiments, an application program refers to an application program written in a Java programming language such as a Java applet or a Java application.
[0033]
[A. First Embodiment]
[A-1. Configuration of First Embodiment]
<1. Configuration of mobile communication system>
FIG. 1 is a block diagram illustrating a configuration of a mobile communication system 10 including a content server 20, a mobile phone 50, and a UIM (User Identity Module) 60 according to the first embodiment of the present invention. As shown in the figure, the mobile communication system 10 includes a plurality of content servers 20, the Internet 30, a mobile communication network 40, a plurality of mobile phones 50, and a plurality of UIMs 60.
[0034]
In FIG. 1, in order to prevent the drawing from becoming complicated, it is accommodated in a predetermined content server 20 constituting the mobile communication system 10, a predetermined base station 41 constituting the mobile communication network 40, and the mobile communication network 40. Only a predetermined mobile phone 50 and a predetermined UIM 60 detachably attached to the mobile phone 50 are shown.
[0035]
Next, each device shown in FIG. 1 will be described.
The content server 20 stores information provided to the mobile phone 50 as file data in, for example, HTML (HyperText Markup Language) format. Further, the content server 20 stores programs such as Java applets and Java applications specified by tags in the file data. The content server 20 provides these file data and application programs to the mobile phone 50 via the Internet 30 and the mobile communication network 40.
[0036]
The mobile communication network 40 includes a mobile packet communication network and a mobile telephone network that are not shown. Here, the mobile packet communication network is a network that provides a packet communication service, and is connected to the Internet 30 via a gateway server. The mobile telephone network is a network that provides a general mobile telephone service. A large number of base stations 41 are installed in the communication service area of the mobile communication network 40, and perform wireless communication with the mobile phone 50 located in each wireless cell.
[0037]
The mobile phone 50 is a mobile device that performs wireless communication with a base station 41 that covers a wireless cell in which the mobile phone is located and receives a call service and a packet communication service. The mobile phone 50 has a WWW (World Wide Web) browser function, and can display the contents of a WWW page (content) provided from the content server 20 on the liquid crystal screen using the browser function. In addition, the mobile phone 50 can download a Java applet that is tagged in the HTML file data and execute the Java applet by using the function of the WWW browser. Further, the mobile phone 50 can execute a Java application downloaded from the content server 20.
[0038]
The UIM 60 is a module in which subscriber information is stored, and has, for example, a form of an IC card (also called a smart card). The UIM 60 is detachable from the mobile phone 50. The UIM 60 includes a microprocessor and can execute an application program for the module. The subscriber information stored in the UIM 60 is, for example, personal information such as the telephone number, credit card number, bank account number, etc. of the UIM 60 owner, calling, incoming calls, telephone calls, etc. Service usage information such as history information and billing information.
[0039]
<2. Content Server Configuration>
FIG. 2 is a block diagram illustrating a hardware configuration of the content server 20 shown in FIG. As shown in the figure, the content server 20 includes a memory 201, a CPU (Central Processing Unit) 202, and a communication interface 203, and these units are connected by a bus 204.
[0040]
The memory 201 stores various programs executed by the CPU 202, HTML file data interpreted and executed by the mobile phone 50, and the like. The memory 201 is provided with an application program storage area 201a (hereinafter referred to as an AP storage area 201a). The AP storage area 201a stores application programs that can be downloaded to the mobile phone 50 and the UIM 60 attached thereto.
[0041]
Here, the application program stored in the AP storage area 201a is executed by referring to the subscriber information in the UIM 60 in the mobile phone 50, for example, an electronic commuter pass or a stock online trading program. is there. Further, as shown in FIG. 3, the application program stored in the AP storage area 201a is executed by the main body AP executed by the CPU of the mobile phone 50 and by the CPU of the UIM 60 during execution of the main body AP. Module AP.
[0042]
The CPU 202 executes various programs stored in the memory 201 to control each unit connected via the bus 204. In response to a download request from the mobile phone 50, the CPU 202 reads out HTML file data and application programs corresponding to the request from the memory 201 and transmits them to the mobile phone 50 via the communication interface 203.
[0043]
The communication interface 203 is a circuit that controls data communication performed between the content server 20 and another device via the Internet 30.
[0044]
<3. Configuration of mobile phone>
FIG. 4 is a block diagram illustrating a hardware configuration of the mobile phone 50 shown in FIG. As shown in the figure, the mobile phone 50 includes a wireless communication unit 501, an operation unit 502, a call processing unit 503, a display unit 504, a UIM interface 505, a CPU 506, and a storage unit 507. These units are connected by a bus 511.
[0045]
The wireless communication unit 501 includes an antenna 501 a and controls wireless data communication performed with the base station 41. Under the control of the CPU 506, the wireless communication unit 501 superimposes various data such as audio data and a download request on a carrier wave, and transmits this signal from the antenna 501a to the base station 41. Also, the wireless communication unit 501 receives a signal transmitted from the base station 41 to the own device via the antenna 501a and demodulates the signal to obtain audio data, HTML file data, an application program, and the like.
[0046]
The operation unit 502 includes a plurality of keys for inputting numbers, characters, operation instructions, and the like, and outputs operation signals corresponding to operations of these keys to the CPU 506. The call processing unit 503 includes, for example, a microphone, a speaker, a voice processing unit, and the like, and performs call processing including call connection / disconnection processing under the control of the CPU 506. The display unit 504 includes a liquid crystal display panel and a drive circuit that performs display control of the liquid crystal display panel. The UIM interface 505 is a circuit that controls data communication performed with the UIM 60 attached to the mobile phone 50.
[0047]
The storage unit 507 includes a ROM (Read Only Memory) 508, a RAM (Random Access Memory) 509, and a nonvolatile memory 510 such as an SRAM (Static-RAM) or an EEPROM (Electrically Erasable Programmable Read Only Memory). .
[0048]
The ROM 508 stores various programs executed by the CPU 506. For example, the ROM 508 includes an operating system for the mobile phone 50 (hereinafter abbreviated as OS), a WWW browser program, and a Java execution environment (hereinafter referred to as a Java execution environment) for executing a program written in the Java programming language on the mobile phone 50. , Abbreviated as JRE) and the like.
[0049]
The RAM 509 is used as a work area for the CPU 506, and temporarily stores, for example, HTML file data downloaded from the content server 20 and application programs.
[0050]
The non-volatile memory 510 has a serial number storage area 510a and an AP storage area 510b. A serial number (manufacturing number) unique to each mobile phone 50 is written in the serial number storage area 510a at the time of factory shipment, for example. In the AP storage area 510b, the main body AP among the application programs downloaded from the content server 20 is stored. Here, as shown in FIG. 5, the main body AP stored in the AP storage area 510b is stored in association with the serial number of the UIM 60 attached to the mobile phone 50 at the time of downloading. .
[0051]
The CPU 506 controls each unit connected via the bus 511 by executing various programs stored in the storage unit 507. The CPU 506 executes download processing (see FIG. 9) and access management processing (see FIG. 10), which will be described later, as processing unique to the present embodiment.
[0052]
<4. UIM Configuration>
FIG. 6 is a block diagram illustrating a hardware configuration of the UIM 60 shown in FIG. As shown in the figure, the UIM 60 includes an external interface 601, a ROM 602, a RAM 603, a CPU 604, and an EEPROM 605, and these units are connected by a bus 606.
[0053]
The external interface 601 is a circuit that controls data communication performed with the mobile phone 50.
[0054]
The ROM 602 stores various programs executed by the CPU 604. For example, the ROM 602 includes a UIM 60 OS, a Java card execution environment (hereinafter abbreviated as JCRE) software for executing a program written in the Java programming language in the UIM 60, and a module received from the mobile phone 50. A loader program for storing the application AP in the EEPROM 605 is stored.
[0055]
The RAM 603 is used as a work area for the CPU 604, and temporarily stores, for example, module APs received from the mobile phone 50.
[0056]
The EEPROM 605 has a serial number storage area 605a, an AP storage area 605b, and a subscriber information storage area 605c. In the serial number storage area 605a, a unique serial number for each UIM 60 is written at the time of factory shipment, for example. The AP storage area 605b stores the module AP received from the mobile phone 50. Here, as shown in FIG. 7, the module AP stored in the AP storage area 605b is associated with the serial number of the mobile phone 50 to which the UIM 60 is attached when the module AP is downloaded. Stored. The subscriber information storage area 605c stores subscriber information such as the above-described personal information and service usage information.
[0057]
The CPU 604 controls each unit connected via the bus 606 by executing various programs stored in the ROM 602 and the EEPROM 605. The CPU 604 executes download processing (see FIG. 9) and access management processing (see FIG. 10), which will be described later, as processing unique to the present embodiment.
[0058]
<5. Application program execution environment>
FIG. 8 is a schematic diagram illustrating the execution environment of the main body AP and the module AP. The functional hierarchy model shown on the left side of the figure shows the execution environment of the main body AP in the mobile phone 50, and the functional hierarchy model shown on the right side of the figure shows the execution environment of the module AP in the UIM 60. is there.
[0059]
First, the functional hierarchy model showing the execution environment of the main body AP on the left side of the figure is an OS (for mobile phone 50) and a Java application manager (hereinafter abbreviated as JAM) in order from the lowest layer side to the upper layer. A Java virtual machine (hereinafter abbreviated as JavaVM) and a plurality of main body APs.
[0060]
Here, the OS has a function of performing basic control of the mobile phone 50. JAM has a function of managing security and the like related to execution of each main body AP. In addition, JavaVM has a function for executing the main body AP under the control of JAM, and converts the bytecode, which is a Java executable file format, into an instruction code that the CPU 506 of the mobile phone 50 can interpret via the OS. Convert. JAM and JavaVM are incorporated in the JRE and stored in the ROM 508 of the mobile phone 50.
[0061]
Next, the functional hierarchy model showing the execution environment of the module AP on the right side of the figure is an OS (for UIM60) and a Java card virtual machine (hereinafter abbreviated as Java Card VM) in order from the lowest layer side to the upper layer. And a loader and a plurality of module APs.
[0062]
Here, the OS has a function for controlling basic control of the UIM 60. This OS includes a card manager function that confirms whether or not each module AP in the UIM 60 is stored and determines which module AP the access request received from the mobile phone 50 is handed over. Ja va The Card VM has a function for executing the module AP, and converts the Java byte code into an instruction code that can be interpreted by the CPU 604 of the UIM 60 via the OS. This Java Card VM is incorporated in the JCRE and stored in the ROM 602 of the UIM 60. The loader has a function of installing data and programs received from the mobile phone 50 in the EEPROM 605 and is executed on the OS.
[0063]
In the UIM 60, each module AP is configured to be able to access only the subscriber information managed by the application in principle according to the specification of the Java Card VM.
[0064]
Next, based on FIG. 8, the operation when the mobile phone 50 accesses the subscriber information in the UIM 60 will be described.
When an access request for subscriber information in the UIM 60 is generated in the processing process by the main body AP, the CPU 506 of the mobile phone 50 first determines whether or not the access request is permitted for ensuring security in accordance with JAM. Judging. As a result, when the access request is permitted, the access request is converted into an instruction code that can be interpreted by the CPU 506 by the Java VM.
[0065]
Here, the access request includes an access command and command-related data. The access command indicates the type of access to the subscriber information, such as reading, rewriting, and deleting. The command-related data is, for example, information specifying data to be rewritten, data for rewriting, information specifying data to be read, and the like. The CPU 506 transmits an access request including this access command and command-related data to the UIM 60 via the UIM interface 505 according to the OS.
[0066]
When receiving the access request via the external interface 601, the CPU 604 of the UIM 60 first specifies the module AP that delivers the access request according to the card manager in the OS. Next, this module AP is activated on the Java Card VM. Then, the CPU 604 executes access processing such as reading, rewriting, and deleting the subscriber information corresponding to the access request in accordance with the module AP.
[0067]
In the functional hierarchy model showing the execution environment of the main body AP shown on the left side of FIG. 8, the Java VM may be a KVM (K Virtual Machine) or the like.
The above is the configuration of the mobile communication system 10 according to the present embodiment.
[0068]
[A-2. Operation of First Embodiment]
Next, the operation of this embodiment will be described.
<1. Download process>
[0069]
When the browsing mode of the WWW page is instructed according to the operation input, the cellular phone 50 reads and executes the WWW browser program from the ROM 508. Then, based on the HTML file data downloaded from the desired content server 20 via the Internet 30 and the mobile communication network 40, the contents of the WWW page are displayed on the display screen. When the user instructs the mobile phone 50 to download an application program by operating input while browsing the WWW page, a download process described below is started.
[0070]
FIG. 9 is a sequence chart illustrating operations of the content server 20, the mobile phone 50, and the UIM 60 when downloading an application program from the content server 20.
[0071]
As shown in the figure, first, the CPU 506 of the mobile phone 50 transmits a download request to the content server 20 (step S101). This download request includes a command for instructing download and information for specifying an application program to be downloaded.
[0072]
When receiving the download request from the mobile phone 50, the CPU 202 of the content server 20 reads the application program corresponding to the download request from the AP storage area 201a (step S102). The application programs read out here are the main body AP and the module AP, which are associated as a pair, as shown in FIG. Then, the CPU 202 downloads the main body AP and the module AP as one package to the mobile phone 50 (step S103). The package downloaded from the content server 20 to the mobile phone 50 may be subjected to compression processing or encryption processing.
[0073]
When the CPU 506 of the mobile phone 50 downloads the package from the content server 20, the CPU 506 performs the following steps S104 to S107 in accordance with the JAM shown in FIG.
[0074]
That is, first, the CPU 506 performs an authentication process for the downloaded package (step S104). This authentication process is a process for confirming the validity of the downloaded package by using, for example, an electronic signature. After this authentication process, the CPU 506 takes out the main body AP and the module AP from the downloaded package (step S105). Then, the CPU 506 transmits the module AP and the serial number (main body serial number) of the mobile phone 50 read from the serial number storage area 510a to the UIM 60 (step S106). The data transmitted from the mobile phone 50 to the UIM 60 may be subjected to encryption processing.
[0075]
The CPU 506 stores the main body AP extracted in step S106 in the AP storage area 510b in association with the serial number (module serial number) of the UIM 60 currently mounted on the mobile phone 50 (step S107). . The module serial number is transmitted from the UIM 60 to the mobile phone 50 when the UIM 60 is attached to the mobile phone 50 and stored in the RAM 509.
[0076]
On the other hand, when the CPU 604 of the UIM 60 receives the module AP and the main body serial number from the mobile phone 50 in step S106, the CPU 604 first activates the loader in the OS. The CPU 604 associates the module AP with the main body serial number according to the loader, and stores the AP storage area. 605 b is stored (step S108). Thereafter, the CPU 604 transmits an installation completion notification indicating that the installation is completed to the mobile phone 50 (step S109). This ends the download process.
[0077]
As described above, in the download process, the main body AP and the module AP are collectively downloaded from the content server 20 to the mobile phone 50. Therefore, communication time and communication cost required for downloading can be reduced.
[0078]
<2. Access management processing>
FIG. 10 is a sequence chart illustrating the operations of the mobile phone 50 and the UIM 60 when the mobile phone 50 accesses the subscriber information in the UIM 60. This access management process is started when the mobile phone 50 is instructed to execute the main body AP.
[0079]
First, the CPU 506 of the mobile phone 50 performs the following steps S201 to S203 in accordance with JAM. That is, before executing the instructed main body AP, the CPU 506 first authenticates the main body AP and the corresponding module AP in order to identify the main body AP for which execution has been instructed ( For example, file name) is acquired (step S201). Further, the main body serial number is read from the serial number storage area 510a (step S202). Then, the CPU 506 transmits the acquired identification information and main body serial number to the UIM 60 (step S203).
[0080]
When receiving the identification information and the main body serial number from the mobile phone 50, the CPU 604 of the UIM 60 performs the following steps S204 to S206 according to the card manager in the OS. That is, the CPU 604 confirms whether the module AP corresponding to the main body AP is stored in the AP storage area 605b according to the received identification information (step S204). Further, the module serial number is read from the serial number storage area 605a (step S205). Then, the CPU 604 transmits the storage presence / absence result and the module serial number to the mobile phone 50 (step S206).
[0081]
When the CPU 506 of the mobile phone 50 receives the result of the presence / absence of storage and the module serial number from the UIM 60, it performs authentication processing between the main body AP instructed to execute the program and the corresponding module AP in accordance with JAM (step). S207).
[0082]
In the present embodiment, the authentication process between the main body AP and the module AP is based on the fact that the module AP corresponding to the main body AP instructed to be executed is stored in the UIM 60, and the mobile phone 50 at this time and this It is to confirm two points that the combination of the UIM 60 attached to the mobile phone 50 is the same as the combination of the mobile phone 50 and the UIM 60 when the main body AP and the module AP are downloaded.
[0083]
Whether the module AP corresponding to the main body AP instructed to execute is stored in the UIM 60 according to the result of the presence / absence of storage of the module AP transmitted from the UIM 60 as the authentication process shown in step S207. Confirm. Further, the CPU 506 compares the module serial number transmitted from the UIM 60 with the module serial number stored in the AP storage area 510b in association with the main body AP that is instructed to be executed. It is confirmed whether the combination of UIM 60 and the UIM 60 is the same as the combination when the main body AP and the module AP are downloaded.
[0084]
On the other hand, the CPU 604 of the UIM 60 also authenticates the main body AP and the module AP according to the card manager (step S208), and notifies the mobile phone 50 of the authentication result (step S209). Here, the authentication process performed in step S208 is the same as the authentication process performed on the mobile phone 50 side.
[0085]
That is, the CPU 604 confirms whether or not the module AP corresponding to the main body AP instructed to execute the program is stored in the UIM 60 according to the result of the presence / absence of storage of the module AP determined in step S204. . The CPU 604 is stored in the AP storage area 605b in association with the main body serial number transmitted from the mobile phone 50 and the module AP corresponding to the main body AP instructed to execute. Body By comparing the serial number, it is confirmed whether or not the combination of the mobile phone 50 and the UIM 60 is the same as the combination when the main body AP and the module AP are downloaded.
[0086]
After the authentication process is performed in both the mobile phone 50 and the UIM 60 in this manner, the CPU 506 of the mobile phone 50 determines whether mutual authentication is established according to JAM (step S210). As a result, when the mutual authentication is not established, the CPU 506 displays a message indicating that the authentication is not established, and cancels the execution of the main body AP (step S211). This also ends the access management process.
[0087]
The case where mutual authentication has not been established specifically refers to the case where the module AP corresponding to the main body AP instructed to execute the program is not stored in the UIM 60, or the mobile phone 50 and the UIM 60. Is different from the combination when the main body AP and the module AP are downloaded.
[0088]
On the other hand, if the CPU 506 determines that mutual authentication has been established in step S210, the CPU 506 first activates the main body AP instructed to execute on the Java VM and starts processing of the main body AP (step S212). ). Next, when an access request for subscriber information in the UIM 60 is generated in the process by the main body AP (step S213), the CPU 506 determines whether or not this access request is permitted for ensuring security in accordance with JAM. Is determined (step S214).
[0089]
When the access request is permitted, the CPU 506 transmits an access request including the access command and command related information described above and the identification information of the main body AP to the UIM 60 (step S215).
[0090]
Note that the CPU 506 proceeds to the process of step S219 when an access request is not generated in step S213 or when the access request is not permitted in step S214. If the access request is not permitted in step S214, a message indicating that an unacceptable access has occurred is displayed on the screen, and the execution of the main body AP may be stopped.
[0091]
When the CPU 604 of the UIM 60 receives an access request from the mobile phone 50 in step S215, the CPU 604 identifies the corresponding module AP according to the card manager. Then, the CPU 604 executes this module AP on the Java Card VM (step S216).
[0092]
Next, in accordance with the module AP, the CPU 604 executes access processing such as reading, rewriting, and deleting the subscriber information in response to the access request from the mobile phone 50 (step S216). When the access process is completed, the CPU 604 transmits an access completion notification indicating that the access process is completed to the mobile phone 50 (step S218). When the access request is reading of subscriber information, the read subscriber information is included in the access completion notification and transmitted to the mobile phone 50.
[0093]
When receiving the access completion notification from the UIM 60, the CPU 506 of the mobile phone 50 determines whether or not to terminate the processing of the main body AP (step S219). If not, the process returns to the above step S213, and the processing of the main body AP is performed. Continue. If the process is finished, the process of the main body AP is finished. Thus, the access management process ends.
[0094]
As described above, according to the present embodiment, when the CPU 506 of the mobile phone 50 is instructed to execute the main body AP acquired from the content server 20 via the Internet 30, the UIM 60 attached to the mobile phone 50 is instructed. The module serial number is acquired from the above and compared with the module serial number associated with the main body AP. Thereby, the CPU 506 determines whether or not the combination of the mobile phone 50 and the UIM 60 at the present time is the same as the combination of the mobile phone 50 and the UIM 60 at the time of downloading the main body AP.
[0095]
When the CPU 506 determines that the combination of the mobile phone 50 and the UIM 60 at the present time is the same as the combination of the mobile phone 50 and the UIM 60 at the time of downloading the main body AP, the CPU 506 executes the main body AP. In the processing process by the main body AP, the main body AP and the corresponding module AP in the UIM 60 operate in cooperation with each other, so that the mobile phone 50 can access the subscriber information stored in the UIM 60. Access is made.
[0096]
That is, when the combination of the mobile phone 50 and the UIM 60 at the time of execution of the main body AP is different from the combination of the mobile phone 50 and the UIM 60 when the main body AP is downloaded, the module AP corresponding to the main body AP is changed to the UIM 60. If it is not stored, the execution of the main body AP is canceled, and the mobile phone 50 cannot access the subscriber information in the UIM 60.
[0097]
As described above, the execution of the main body AP acquired via the Internet 30 is permitted only when the above-described certain condition is established between the mobile phone 50 and the UIM 60, and the mobile phone 50 receives the information from the UIM 60. Can be accessed. Accordingly, the mobile phone 50 can access the subscriber information stored in the UIM 60 outside the mobile phone 50 according to the program while ensuring security when executing the program acquired via the Internet 30. .
[0098]
[A-3. Specific application example]
The outline of the application program to which the present invention is applied will be described below.
<1. Electronic commuter pass application>
A case where the present invention is applied to an electronic commuter pass application program will be described. In this case, the UIM 60 further stores commuter pass information such as a user name, a use section, and a valid period as subscriber information. In addition, the mobile phone 50 performs short-range wireless communication with a control device that determines the user's permission to pass through, for example, HomeRF (Home Radio Frequency) or Bluetooth (registered trademark). It further has a distance wireless communication unit.
[0099]
When passing through the ticket gate, the mobile phone 50 and the UIM 60 attached thereto perform mutual authentication between the main AP for electronic commuter pass and the module AP. Then, after mutual authentication is established, the CPU 506 of the mobile phone 50 activates the main AP for the electronic commuter pass and receives a signal from the control device installed in the ticket gate. Next, in response to the reception of this signal, the CPU 506 transmits an access request instructing reading of commuter pass information to the UIM 60.
[0100]
CPU 60 of UIM 60 4 Activates an electronic commuter pass module AP in response to the reception of the access request, reads the commuter pass information in the UIM 60 according to the module AP, and transmits it to the mobile phone 50. When receiving the commuter pass information from the UIM 60, the CPU 506 of the mobile phone 50 transmits the commuter pass information to the control device by the short-range wireless communication unit. And the control apparatus installed in the ticket gate determines passage permission of the user who possesses this mobile telephone 50 according to the received commuter pass information.
[0101]
<2. Payment application>
Next, a case where the present invention is applied to an application program for settlement processing will be described. In this case, the UIM 60 stores payment usage information used for payment such as a credit card number or a bank account number as subscriber information.
[0102]
When communicating with a server connected to the Internet 30 or a terminal such as POS (Point Of Sales) to make a sales contract for a product and settle a payment, the mobile phone 50 and the UIM 60 attached to the mobile phone 50 Then, mutual authentication is performed between the main body AP for payment processing and the module AP. Then, after mutual authentication is established, the CPU 506 of the mobile phone 50 activates the payment processing main body AP, displays a payment method selection menu on the screen, and prompts the user to select. In response to this, the user selects a settlement method by a key operation. Next, the CPU 506 transmits to the UIM 60 an access request that instructs to read the payment usage information corresponding to the payment method selected by the user.
[0103]
CPU 60 of UIM 60 4 Activates the payment processing module AP in response to the reception of the access request, reads the corresponding payment usage information according to the module AP, and transmits it to the mobile phone 50. When receiving the payment usage information from the UIM 60, the CPU 506 of the mobile phone 50 displays the payment usage information on the liquid crystal screen. When the user enters the password information or the like by key operation and the final payment instruction is determined, the mobile phone 50 encrypts the payment usage information including the password information and the like, such as POS. Send to the destination device. As a result, the settlement processing associated with the sales contract of the product is performed between the counterpart device and the settlement server of the settlement center or financial institution.
[0104]
[B. Second Embodiment]
In the first embodiment, the case where the mobile phone 50 accesses the subscriber information in the UIM 60 attached to the mobile phone 50 has been described. In the present embodiment, a case where data stored in an electronic device such as a personal computer is accessed from a mobile phone will be described.
[0105]
In the present embodiment, the same reference numerals are used for portions common to the first embodiment. Further, the description of the parts common to the first embodiment will be omitted.
[0106]
[B-1. Configuration of Second Embodiment]
FIG. 11 is a block diagram illustrating a hardware configuration of the mobile phone 55 according to the second embodiment. In the figure, the cellular phone 50 is different from the cellular phone 50 of the first embodiment in that an infrared communication unit 550 is provided instead of the UIM interface 505, and the cellular phone 55 performs data communication with the electronic device 70 via the infrared communication unit 550. It is possible to do.
[0107]
The infrared communication unit 550 controls data communication performed with the electronic device 70 by infrared communication (for example, communication according to IrDA (InfraRed Data Association) standard).
[0108]
The electronic device 70 is, for example, a personal computer or a PDA, and has the infrared communication function described above. Further, the electronic device 70 has an execution environment (JRE) of a program described in the Java programming language. Here, unlike the UIM 60 in the first embodiment, the execution environment of the Java program in the electronic device 70 has JAM and Java VM instead of the Java Card VM. The memory in the electronic device 70 stores personal information such as the name and credit card number of the owner of the electronic device 70, for example.
[0109]
In this embodiment, the application program downloaded from the content server 20 to the mobile phone 55 and the electronic device 70 includes a terminal AP executed by the CPU 506 of the mobile phone 55 and an electronic device AP executed by the CPU of the electronic device 70. And is composed of. The electronic device AP is downloaded from the content server 20 to the electronic device 70 via the mobile phone 55.
[0110]
In addition, when the mobile phone 55 in the present embodiment transmits the electronic device AP downloaded from the content server 20 to the electronic device 70 as information for specifying the electronic device to be accessed, data communication with the electronic device 70 is performed. The input / output port number of the mobile phone 55 used in the above is stored in the nonvolatile memory 510 in association with the terminal AP. In the AP storage area 510b of the nonvolatile memory 510, the serial number of the electronic device 70 acquired from the electronic device 70 that downloaded the electronic device AP is stored in association with the terminal AP.
[0111]
[B-2. Operation of Second Embodiment]
Next, the operation of this embodiment will be described.
In the present embodiment, the mobile phone 55 and the electronic device 70 execute the same process as the download process (see FIG. 9) described in the first embodiment. Then, the terminal AP and the electronic device AP in the content server 20 specified by the operation input from the mobile phone 55 in this download process are downloaded to the mobile phone 55 via the Internet 30.
[0112]
The cellular phone 55 first acquires the serial number of the electronic device 70 from the electronic device 70 that transmits the electronic device AP via the infrared communication unit 550, and associates the serial number with the downloaded terminal AP. Store in the AP storage area 510b. In addition, the mobile phone 55 corresponds to the terminal AP as the specific information of the electronic device accessed in the process of the terminal AP, using the input / output port number of the mobile phone 55 used for data communication with the electronic device 70 Then, it is stored in the nonvolatile memory 510.
[0113]
Next, the cellular phone 55 reads the serial number of the own device stored in the serial number storage area 510a, and transmits the serial number and the downloaded electronic device AP to the electronic device 70 by the infrared communication unit 550. The electronic device 70 stores the received serial number of the mobile phone 55 and the electronic device AP in a memory in association with each other.
[0114]
Then, the cellular phone 55 and the electronic device 70 execute processing similar to the access management processing (see FIG. 10) described in the first embodiment, and correspond to the AP for the terminal that is instructed to execute the program. Perform mutual authentication of electronic device APs. Then, when the mutually authenticated terminal AP and electronic device AP operate in cooperation, the mobile phone 55 performs an access process on the personal information in the electronic device 70.
[0115]
More specifically, first, the user operates the electronic device 70 as an access destination so that the electronic device 70 can perform infrared communication with the mobile phone 55. Next, the user performs an operation input for instructing the mobile phone 55 to execute the terminal AP. In response to this, the CPU 506 of the mobile phone 55 reads the input / output port number (information specifying the access destination electronic device) stored in the nonvolatile memory 510 in association with the terminal AP for which execution has been instructed.
[0116]
Next, the cellular phone 55 selects the infrared communication unit 550 in accordance with the read input / output port number, and transmits a call signal for specifying an electronic device in a state capable of performing infrared communication with the cellular phone 55 by infrared communication. Transmitted from the unit 550. Then, the cellular phone 55 specifies the electronic device 70 that has returned a response signal to the call signal.
[0117]
Next, the CPU 506 of the mobile phone 55 acquires the serial number of the electronic device 70 from the identified electronic device 70 via the infrared communication unit 550 and compares it with the serial number associated with the terminal AP. Thus, the CPU 506 determines whether or not the electronic device 70 that is currently performing infrared communication with the mobile phone 55 is the electronic device 70 that has downloaded the electronic device AP that is paired with the terminal AP.
[0118]
When the CPU 506 determines that the electronic device 70 that is performing infrared communication with the mobile phone 55 is the electronic device 70 that has downloaded the electronic device AP that is paired with the execution-specified terminal AP, the CPU 506 Execute AP. In the process of processing by the terminal AP, the terminal AP and the electronic device AP in the electronic device 70 corresponding thereto operate in cooperation with each other, and are stored in the memory of the electronic device 70 from the mobile phone 55. Access to subscriber information is performed.
[0119]
That is, when the terminal AP is executed, the electronic device 70 that performs infrared communication with the mobile phone 55 is different from the electronic device 70 that downloaded the electronic device AP that is paired with the terminal AP, or the electronic device 70 If the electronic device AP corresponding to the terminal AP is not stored, the execution of the terminal AP is canceled, and the mobile phone 55 cannot access the subscriber information in the electronic device 70.
[0120]
As described above, the execution of the terminal AP acquired via the Internet 30 is permitted only when the above-described certain condition is established between the mobile phone 55 and the electronic device 70, and thus the mobile phone. The subscriber information in the electronic device 70 can be accessed from 55. Accordingly, the mobile phone 55 is an electronic device capable of performing infrared communication with the mobile phone 55 outside the mobile phone 55 according to the program while ensuring security when executing the program acquired via the Internet 30. The personal information stored in the memory 70 can be accessed.
[0121]
In the present embodiment, the case where the mobile phone 55 performs infrared communication with the electronic device 70 has been described. However, HomeRF or Bluetooth (registered trademark) may be used instead of infrared communication, for example. Of course, the present invention can also be applied to a case where the mobile phone 55 and the electronic device 70 are connected to each other by a communication cable.
[0122]
Further, the access target is not limited to personal information, and may be other stored data in the electronic device 70. Further, the access from the mobile phone 55 to the electronic device 70 may be activation of a program stored in the electronic device 70 other than data. Further, access to an input / output port in the electronic device 70 may be used.
[0123]
[C. Modified example]
As mentioned above, although embodiment of this invention was described, this embodiment is an illustration to the last, and various deformation | transformation are possible in the range which does not deviate from the meaning of this invention. As modifications, for example, the following can be considered.
[0124]
<Modification 1>
In the first embodiment, the case where the main body AP and the module AP are collectively downloaded from the content server 20 has been described. However, the download procedure may be a procedure as shown in FIG. 12, for example.
FIG. 12 is a sequence chart showing a modified example in the case where an application program is downloaded from the content server 20. In the following description, the description will focus on parts different from the download process (see FIG. 9) described in the above embodiment.
[0125]
As shown in the figure, first, the CPU 506 of the mobile phone 50 transmits a download request to the content server 20 (step S301). When receiving the download request from the mobile phone 50, the CPU 202 of the content server 20 reads the main body AP corresponding to the download request from the AP storage area 201a (step S302). Then, the CPU 202 downloads only the main body AP to the mobile phone 50 (step S303).
[0126]
When the CPU 506 of the mobile phone 50 downloads the main body AP from the content server 20, first, the downloaded main body AP is authenticated in accordance with JAM (step S304). This authentication process is, for example, a process of confirming the validity of the main body AP downloaded by an electronic signature or the like. After this authentication process, the CPU 506 stores the main body AP in the AP storage area 510b in association with the module serial number of the UIM 60 mounted on the mobile phone 50 in accordance with JAM (step S305). Next, the CPU 506 transmits a download request for the module AP corresponding to the stored main body AP to the content server 20 (step S306).
[0127]
The CPU 202 of the content server 20 reads out the module AP in response to the download request from the mobile phone 50 from the AP storage area 201a (step S307). Then, the CPU 202 downloads the module AP to the mobile phone 50 (step S308).
[0128]
When the module AP is downloaded from the content server 20, the CPU 506 of the mobile phone 50 performs module AP authentication processing according to JAM (step S309). Thereafter, the CPU 506 transmits the module AP and the main body serial number of the mobile phone 50 to the UIM 60 according to JAM (step S310).
[0129]
Upon receiving the module AP and the main body serial number, the CPU 604 of the UIM 60 associates the module AP with the main body serial number according to the loader in the OS, and stores the AP storage area. 605 b is stored (step S311). Thereafter, an installation completion notification is transmitted from the UIM 60 to the mobile phone 50 (step S312), and the download process ends.
[0130]
As described above, the download process may be such that the main body AP and the module AP are separately downloaded from the content server 20.
[0131]
<Modification 2>
In the first embodiment and the first modification, the case where the main body AP and the module AP are downloaded from the content server 20 has been described. However, the present invention is also applicable to the case where the main body AP and the module AP are distributed from the content server 20 to each mobile phone 50.
[0132]
In this case, the content server 20 has a distribution destination list in which a communication address (for example, an IP address or a mail address) of the mobile phone 50 as a distribution destination is registered. Then, the content server 20 distributes the main body AP and the module AP to be transmitted to the mobile phone 50 registered in the above-described distribution destination list and the UIM 60 attached thereto.
[0133]
<Modification 3>
In the first embodiment, in the access management process, the main body serial number and the module serial number are used to perform authentication processing between the main body AP instructed to execute the program and the corresponding module AP. did.
[0134]
However, for example, when transmitting the main body AP and the module AP from the content server 20, different identification information is given to both the main body AP and the module AP for each package to be transmitted, and this identification information is assigned to the main body serial number. Also, a configuration may be used instead of the module serial number.
[0135]
In this case, the downloaded main body AP and module AP are stored in the AP storage area 510 b of the mobile phone 50 or the AP storage area 605 b of the UIM 60 in association with the identification information given by the content server 20. When the authentication process between the main body AP and the module AP is performed in the access management process, the CPU 506 of the mobile phone 50 uses the identification information associated with the main body AP instructed to execute the program and the main body AP. It is verified whether the identification information associated with the module AP corresponding to the application AP is the same.
[0136]
With such a configuration, authentication can be performed based on whether the main body AP and the module AP are programs downloaded in the same package. Of course, the contents described in the present modification can be applied not only to download but also to distribution.
[0137]
<Modification 4>
In the first embodiment, the following control may be further performed. That is, as shown in FIG. 13, the content server 20 stores, for each main body AP, access regulation data that defines an access action that the main body AP can execute on the subscriber information in the UIM 60. I remember it. Then, when downloading (or distributing) the main body AP and the module AP, the content server 20 downloads access regulation data corresponding to the main body AP to the mobile phone 50. In the mobile phone 50, the downloaded main body AP and the access regulation data are stored in the nonvolatile memory 510 in association with each other.
[0138]
Then, when the CPU 506 of the mobile phone 50 determines whether or not the access request is an allowable access in the access management process (step S214), the access regulation data corresponding to the main body AP instructed to execute the program is obtained. Refer to to determine whether or not an access request can be made.
[0139]
In the access regulation data shown in the figure, in the “permitted / unavailable” item, “1” indicates permission of the corresponding access action, and “0” indicates disapproval. Further, whether or not the access action is permitted in the access regulation data may be set in units of “methods” in a Java applet or a Java application. For example, permission / inhibition of an access action may be set according to the type of method, such as permitting A method and disallowing B method.
[0140]
With such a configuration, whether or not an access request can be made can be determined according to the type of access to the subscriber information.
[0141]
<Modification 5>
In the first embodiment, when the execution of the main body AP is instructed, the authentication is performed between the main body AP and the corresponding module AP. However, for example, the control configuration described below may be used.
[0142]
That is, when the UIM 60 is attached to the mobile phone 50, at this time, authentication is performed between each main body AP stored in the mobile phone 50 and each module AP stored in the UIM 60. In this configuration, an application program (main body AP and corresponding module AP) that can be executed in the combination of the mobile phone 50 and the UIM 60 is specified.
[0143]
In this way, when the UIM 60 is mounted, if an application program that can be executed in the combination of the mobile phone 50 and the UIM 60 is specified, each time the execution of each application program is instructed, It is not necessary to authenticate the main body AP and the corresponding module AP. Therefore, the processing from when the execution of the application program is instructed until the application program is activated is simplified, and the activation time can be shortened.
[0144]
<Modification 6>
In the first and second embodiments, the content server 20 is connected to the Internet 30. However, the content server 20 may be installed in the mobile packet communication network of the mobile communication network 40. The content server 20 may be configured to be directly connected to a gateway server of the mobile packet communication network via a dedicated line. Further, the gateway server may have a function of the content server 20.
[0145]
<Modification 7>
In the first and second embodiments, the case where the mobile phones 50 and 55 are used as communication terminals has been described. However, the present invention is also applicable to, for example, a PDA or a mobile computer that can perform data communication via the mobile communication network 40. Of course, the present invention can also be applied to PHS (Personal Handyphone System: registered trademark). The Internet 30 may be a network such as a LAN (Local Area Network).
[0146]
<Modification 8>
Further, as shown in FIG. 14, a personal computer (hereinafter simply referred to as a personal computer) capable of performing data communication with the content server 20 only via the Internet 30 without using the mobile communication network 40 as a communication terminal. The present invention can be applied to 80, server 90, and the like.
[0147]
The example shown in FIG. 14 shows a case where the personal computer 80 accesses the server 90, and each of the personal computer 80 and the server 90 has a function of performing data communication via the Internet 30. Further, the content server 20 stores an application program composed of a personal computer AP executed by the access source personal computer 80 and a server AP executed by the access destination server 90.
[0148]
In addition, the personal computer 80 stores in the memory the communication address (for example, IP address) of the electronic device to be accessed as the information for specifying the electronic device to be accessed (the server 90 in this modification) in association with the AP for personal computer. Store.
[0149]
In the present modification, the personal computer 80 and the server 90 execute processing similar to the download processing (see FIG. 9) described in the first embodiment. Then, the personal computer AP and server AP in the content server 20 specified by the operation input from the personal computer 80 in this download process are downloaded to the personal computer 80 via the Internet 30.
[0150]
First, the personal computer 80 acquires the serial number of the server 90 from the server 90 that is the transmission destination of the personal computer AP via the Internet 30, and stores the serial number and the downloaded personal computer AP in association with each other. . Further, the personal computer 80 stores the communication address of the server 90 in the memory in association with the personal computer AP as the specific information of the electronic device to be accessed in the process of the personal computer AP.
[0151]
Next, the personal computer 80 reads out the serial number of the own device, and transmits the serial number and the downloaded server AP to the server 90 via the Internet 30. In the server 90, the received serial number of the personal computer 80 and the server AP are associated with each other and stored in the memory.
[0152]
In the present modification, the server AP may be downloaded directly from the content server 20 to the server 90 instead of being downloaded to the server 90 via the personal computer 80.
[0153]
Then, the personal computer 80 and the server 90 execute the same processing as the access management processing (see FIG. 10) described in the first embodiment, and the personal computer AP instructed to execute the program and the corresponding server Perform mutual authentication of APs. Then, the personal computer AP and the server AP that have been mutually authenticated operate in cooperation, thereby realizing access from the personal computer 80 to the server 90.
[0154]
More specifically, when the personal computer 80 is instructed to execute the personal computer AP acquired from the content server 20 via the Internet 30, the personal computer 80 associates the personal computer with the personal computer AP in accordance with the communication address stored in the memory. The server 90 that the personal computer 80 accesses is specified.
[0155]
Next, the personal computer 80 acquires the serial number of the server 90 from the identified server 90 via the Internet 30 and compares it with the serial number stored in the memory in association with the personal computer AP. Thereby, the personal computer 80 determines whether or not the server 90 currently performing data communication with the personal computer 80 via the Internet 30 is the server 90 that has downloaded the server AP paired with this personal computer AP.
[0156]
The personal computer 80 executes the personal computer AP when it is determined that the server 90 that is performing data communication with the personal computer 80 is the server 90 that has downloaded the server AP that is paired with the personal computer AP. In the processing process by the personal computer AP, the personal computer AP and the corresponding server AP in the server 90 operate in cooperation, whereby the personal computer 80 accesses the server 90 via the Internet 30. .
[0157]
That is, when executing the personal computer AP, if the server 90 communicating with the personal computer 80 is different from the server 90 that downloaded the server AP paired with the personal computer AP, or if this server 90 corresponds to the personal computer AP When the server AP to be executed is not stored, the execution of the personal computer AP is canceled, and the personal computer 80 cannot access the server 90.
[0158]
As described above, the execution of the AP for the personal computer acquired through the Internet 30 is permitted only when the above-described certain condition is established between the personal computer 80 and the server 90, whereby the personal computer 80 sends the server to the server. 90 can be accessed. The access target is not limited to the personal information stored in the server 90, and may be other stored data in the server 90. Further, the access from the personal computer 80 to the server 90 may be the activation of a program other than data, for example, a program stored in the server 90. Further, access to an input / output port in the server 90 may be used.
[0159]
Therefore, when executing the program acquired via the Internet 30, the personal computer 80 performs data communication via the program with resources outside the personal computer 80, that is, the personal computer 80 and the Internet 30, while ensuring security. It is possible to access data stored in electronic devices that can be used, start programs, and access input / output ports.
[0160]
In the present embodiment, the access source personal computer 80 and the access destination server 90 may be any communication device capable of performing data communication with other computers via the Internet 30, and are limited to personal computers and servers. It is not something.
[0161]
<Modification 9>
In the first and second embodiments, the case where the program incorporated via the open network is a program written in a Java programming language such as a Java applet or a Java application has been described. However, in the present invention, of course, a program written in a programming language other than Java may be used as the main body AP, the module AP, or the electronic device AP.
[0162]
For example, in the functional hierarchy model showing the execution environment of the main body AP and the module AP shown in FIG. 15, the main body AP “α” is an application program executed on the OS for the mobile phone 50, The CPU 506 can be executed without going through JAM and JavaVM. The module AP “α” corresponding to the main body AP “α” is an application program executed on the OS for the UIM 60, and can be executed by the CPU 604 without using the Java Card VM. As described above, the present invention can be applied to the main body AP “α” and the module AP “α” that are both executed on the OS.
[0163]
<Modification 10>
In the first and second embodiments, the UIM 60 may be a non-contact type IC card that transmits / receives data to / from communication terminals such as the mobile phones 50 and 55 by wireless communication. In this case, the UIM interface 505 of the mobile phones 50 and 55 controls data transmission / reception performed by wireless communication with the UIM 60 attached to the mobile phones 50 and 55.
[0164]
【The invention's effect】
As described above, according to the present invention, the communication terminal can access resources outside the communication terminal excluding the download source of the program according to the program obtained through the network while ensuring security.
[Brief description of the drawings]
FIG. 1 is a block diagram illustrating a configuration of a mobile communication system including a content server, a mobile phone, and a UIM according to the first embodiment of the present invention.
FIG. 2 is a block diagram illustrating a hardware configuration of a content server according to the embodiment.
FIG. 3 is a diagram illustrating a configuration of an AP storage area of the content server according to the embodiment.
FIG. 4 is a block diagram illustrating a hardware configuration of the mobile phone according to the embodiment;
FIG. 5 is a diagram illustrating a configuration of an AP storage area of a nonvolatile memory in the mobile phone according to the embodiment;
FIG. 6 is a block diagram illustrating a hardware configuration of a UIM according to the embodiment;
FIG. 7 is a diagram illustrating a configuration of an AP storage area of an EEPROM in the UIM according to the embodiment;
FIG. 8 is a schematic view illustrating an execution environment of a main body AP and a module AP according to the embodiment;
FIG. 9 is a sequence chart illustrating operations of the content server, the mobile phone, and the UIM when downloading an application program from the content server according to the embodiment.
FIG. 10 is a sequence chart illustrating an operation of the mobile phone and the UIM when the mobile phone according to the embodiment accesses subscriber information in the UIM.
FIG. 11 is a block diagram illustrating a hardware configuration of a mobile phone according to a second embodiment of the invention.
FIG. 12 is a sequence chart illustrating operations of a content server, a mobile phone, and a UIM when an application program is downloaded from the content server in Modification 1;
FIG. 13 is a diagram illustrating a data configuration of access regulation data according to Modification Example 4;
FIG. 14 is a block diagram illustrating a configuration of a communication system including a content server, a personal computer, and a server according to Modification 8;
FIG. 15 is a schematic view illustrating an execution environment of a main body AP and a module AP according to Modification 9;
[Brief description of symbols]
DESCRIPTION OF SYMBOLS 10 ... Mobile communication system, 20 ... Content server, 30 ... Internet, 40 ... Mobile communication network, 50, 55 ... Mobile phone, 60 ... UIM, 70 ... Electronic device, 80 ... Personal computer, 90 ... Server, 201 ... Memory, 201a ... AP storage area (application program storage area), 202 ... CPU, 203 ... Communication interface, 204 ... Bus, 501 ... Wireless communication unit, 501a ... Antenna, 502... Operation unit 503. Call processing unit 504 ... Display unit 505 ... UIM interface 506 ... CPU 507 ... Storage unit 508 ... ROM 509 ... RAM 510 ... Non-volatile Memory 510a ... serial number storage area 510b ... AP storage area 511 ... bus 550 ... infrared communication 601 ... External interface, 602 ... ROM, 603 ... RAM, 604 ... CPU, 605 ... EEPROM, 605a ... Serial number storage area, 605b. Area, 606 ... Bus.

Claims (10)

A method for a communication terminal to access data stored in an electronic device,
When the communication terminal executes a terminal program acquired via a network, an electronic device that is determined to be accessed along with the execution of the program, and an electronic device program corresponding to the terminal program A first step of determining whether or not the acquired electronic device is the same;
When it is determined that the communication terminal is the same in the first process, the terminal program is executed, and an access request for the electronic apparatus generated in the processing process by the program is notified to the electronic apparatus. The second process,
A third process in which the electronic device executes a process according to the access request notified in the second process in accordance with the electronic device program corresponding to the terminal program executed in the communication terminal. An access method comprising: A process performed prior to the first process,
When the communication terminal acquires a terminal program via a network, the communication terminal acquires identification information for identifying the electronic device from the electronic device that has acquired the electronic device program corresponding to the program, and acquires the identification information. A fourth process of storing the terminal program in association with the terminal program;
In the first step, when the communication terminal executes the terminal program, the identification information is acquired from an electronic device that is determined to be accessed in accordance with the execution of the program, and the identification information And determining whether or not the identification information stored in association with the terminal program in the fourth step is the same. A process performed prior to the first process,
When the server transmits a package including a terminal program executed in the communication terminal and an electronic device program executed in the electronic device along with the execution of the program via the network, the identification is different for each package. A fifth process of assigning and transmitting information to each of the terminal program and the electronic device program;
A sixth process in which the communication terminal acquires the terminal program out of the packages transmitted in the fifth process, and the electronic apparatus acquires the electronic device program;
In the first process, when the communication terminal executes a terminal program, an electronic device program corresponding to the terminal program is changed from an electronic device that is determined to be accessed along with the execution of the program. The access method according to claim 1, wherein the identification information provided is acquired, and it is determined whether or not the identification information and the identification information provided to the terminal program are the same. The second process includes:
The communication terminal executes the terminal program when determined to be the same in the first process, and is permitted when an access request to the electronic device is generated in the processing process by the program A seventh step of determining whether to permit the access request with reference to access regulation data in which an access type is defined;
4. The eighth process according to claim 1, further comprising: an eighth process in which the communication terminal notifies the electronic device of an access request permitted in the seventh process. 5. how to access. The access method according to any one of claims 1 to 4, wherein the electronic device is a user identification module that is detachable from the communication terminal and stores user information. A communication terminal for accessing data stored in an electronic device,
Receiving means for receiving a terminal program executable in a communication terminal via a network;
When the terminal program received by the receiving unit is executed, the electronic device that is determined to be accessed in accordance with the execution of the program, and the electronic device that has acquired the electronic device program corresponding to the terminal program Determining means for determining whether or not are the same;
A communication terminal comprising: an execution unit that executes the terminal program when the determination unit determines that they are the same. When receiving the terminal program by the receiving means, the identification information identifying the electronic device is acquired from the electronic device that has acquired the electronic device program corresponding to the program, and the identification information is used as the terminal program. It further has identification information storage means for storing in association with each other,
When executing the terminal program, the determination unit acquires the identification information from an electronic device that is determined to be accessed along with the execution of the program, and uses the identification information and the identification information storage unit. The communication terminal according to claim 6, wherein it is determined whether or not the identification information stored in association with the terminal program is the same. The receiving means receives a program for a terminal to which identification information is attached that can be executed in a communication terminal via a network,
In the case where the terminal program received by the receiving unit is executed, the determination unit changes the electronic device program corresponding to the terminal program from an electronic device that is determined to be accessed along with the execution of the program. The communication terminal according to claim 6, wherein the assigned identification information is acquired, and it is determined whether or not the identification information and the identification information given to the terminal program are the same. The transmission device according to any one of claims 6 to 8, further comprising: a transmission unit configured to transmit an access request to the electronic device generated in the process of the terminal program executed by the execution unit to the electronic device. The communication terminal according to item. An allowed access storage means for storing a type of access permitted for the terminal program;
A determination unit that determines whether or not to permit the access request with reference to the allowed access storage unit when an access request to the electronic device is generated in the process of the terminal program executed by the execution unit; ,
The communication terminal according to any one of claims 6 to 8, further comprising: a transmission unit that transmits an access request permitted by the determination unit to the electronic device.

Images