JP4665635B2 - Authentication data storage method - Google Patents

Description

The present invention relates to an authentication data storing method applied to a mobile communication system that performs authentication of a mobile communication terminal device connected to the mobile communication network.

  In order to prevent an unauthorized mobile communication terminal device from being used, a communication carrier authenticates a mobile communication terminal device connected to a mobile communication network. The mobile communication terminal device encrypts information including a terminal identification code such as IMEI (International Mobile Equipment Identity) and connects to the mobile communication network, and the authentication server installed by the communication carrier decrypts the received encrypted information. The terminal identification code is acquired to determine whether the terminal is a legitimate terminal.

  In general, the terminal identification code is stored in an electrically erasable and programmable ROM (EEPROM) that is electrically erasable and rewritable provided in the mobile communication terminal device. The terminal identification code stored in the EEPROM is protected by various security so that it can be read and written only by a specific device used by a communication carrier or terminal manufacturer. However, if the terminal identification code is read and written in another mobile communication terminal device by some illegal method, an illegal clone terminal is created. The clone terminal replaces the regular mobile communication terminal device and connects to the mobile communication network, and is regarded as a regular mobile communication terminal device and can communicate.

  A semiconductor device and a mobile communication terminal device are proposed in which device ID information unique to a semiconductor chip is held in a non-rewritable nonvolatile storage means, and the device ID information is used for authentication using SSD of a mobile phone to prevent cloning. (For example, refer to Patent Document 1).

WO01-093275 (pages 15-18)

  In the method described in Patent Document 1, a terminal identification code necessary for authentication is encrypted using device ID information and stored. However, at the time of communication, since the encrypted information is decrypted using the device ID information, the terminal identification code may be obtained illegally. Further, the device ID information stored in the nonvolatile storage means can be read from the outside. Therefore, there is a problem that its own clone terminal is generated.

Then, an object of this invention is to provide the authentication data storage method applied to the mobile communication system which can prevent that a clone terminal is produced | generated.

An authentication data storage method according to the present invention includes a terminal identification code for identifying each terminal used for authentication of a mobile communication terminal connected to a mobile communication network, and an authentication information storage for storing information used for authentication of the mobile communication terminal. An authentication device comprising means and an authentication data storage method for storing in a mobile communication terminal, wherein a device identification code storage for storing a device identification code unique to a terminal device is used as a secret key for encrypting the terminal identification code A device identification code stored in the device identification code storage means from a terminal that enables writing and reading of data in the device identification code storage means provided in the LSI having at least the means and a terminal identification code storage means for storing the terminal identification code In addition, an external interface that enables writing and reading of data in the terminal identification code storage means provided in the LSI The same device identification code stored in the device identification code storage means is stored in the terminal identification code storage means from an external interface that is not capable of reading and writing data in the device identification code storage means, and the device identification code storage After the terminal enabling data writing / reading of the means is made uncontrollable from the outside, the LSI is mounted on the substrate, the device identification code stored in the terminal identification code storage means is read from the external interface , and the read device The identification code and the terminal identification code are stored in the authentication information storage means, and the terminal identification code is overwritten and stored in the area where the device identification code in the terminal identification code storage means is stored from the external interface. The terminal identification code corresponds to the terminal ID (A), and the device identification code corresponds to the device ID (B). The device identification code is stored in advance in the device identification code storage means by a predetermined device used by the manufacturer at the time of manufacture of the mobile communication terminal device, etc., and the LSI having the device identification code storage means is used for mobile communication by the manufacturer. Implemented on the terminal. The terminal identification code is stored in the terminal identification code storage means by a predetermined device used by a communication carrier or the like before selling the mobile communication terminal.

  According to the present invention, even if the terminal identification code is illegally read from the terminal identification code storage means, the device identification code does not flow out. In addition, the device identification code cannot be rewritten. Therefore, it is possible to prevent unauthorized copying of the mobile communication terminal device according to the present invention and to prevent the mobile communication terminal device according to the present invention from being modified to unauthorized copying. In addition, since the device identification code is stored in the terminal identification code storage means until the terminal identification code is stored in the terminal identification code storage means by the communication carrier or the like, the device identification code is unknown at the manufacturing stage of the mobile communication terminal device Can be prevented.

Embodiment 1 FIG.
Hereinafter, a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a first embodiment of a mobile communication system according to the present invention. The mobile communication system shown in FIG. 1 includes mobile communication terminal apparatus 100, base station 109, and authentication server 110. The mobile communication terminal apparatus 100 and the base station 109 can perform wireless communication via a wireless communication line. Base station 109 and authentication server 110 are communicably connected.

  The mobile communication terminal device 100 includes an external interface (I / F) 104, a signal processing unit 106, a transmission / reception unit 107, and an LSI package 108. The LSI package 108 includes a control unit 101, a memory 102, a memory 103, and a calculation unit 105.

  The mobile communication terminal device 100 is an information processing device such as a mobile phone or a PDA (Personal Digital Assistant), and has a communication function.

  The control unit 101 controls each unit of the mobile communication terminal device 100 by performing command decoding and execution control. The control unit 101 reads the terminal ID (A) stored in the memory 103 and outputs it to the calculation unit 105.

  The memory 102 is a read-only memory in which information can be written only once, and is realized by, for example, a PROM (Programmable ROM). The memory 102 stores the device ID (B). The device ID (B) is an ID unique to the device such as a CPU serial number, for example. The device ID (B) is stored in the memory 102 in advance when the mobile communication terminal device 100 is manufactured.

  The memory 103 is a memory capable of erasing and writing data, and is realized by, for example, an EEPROM or a flash memory. The memory 103 stores a terminal identification code (terminal ID (A)), a program for operating the mobile communication terminal device 100, user information, and the like. The memory 103 is accessed by the control unit 101. The terminal ID (A) is stored in the memory 103 by a communication carrier or the like before the mobile communication terminal device is sold.

  The external I / F 104 is connected to another device and has a function of executing processing for controlling communication with the connected device. The external I / F 104 performs communication with a peripheral storage device, for example. By connecting a device used by a telecommunications carrier or terminal manufacturer to the external I / F 104, the terminal ID (A) can be written into or read from the memory 103. Further, software can be written to the memory 103 or the stored software can be upgraded via the external I / F 104.

  The memory bus to which the control unit 101 and the memory 102 are connected is different from the memory bus to which the control unit 101, the memory 103, and the external I / F 104 are connected. Therefore, it is possible to read / write data stored in the memory 103 from a device connected to the external I / F 104, but it is not possible to read / write data stored in the memory 102.

  The operation unit 105 performs arithmetic calculations and logical operations. In addition, the calculation unit 105 has a function of generating an authentication code (C). FIG. 2 is an explanatory diagram showing an outline of the process in which the calculation unit 105 generates the authentication code (C). As illustrated in FIG. 2, the calculation unit 105 encrypts the terminal ID (A) stored in the memory 103 using the device ID (B) stored in the memory 102 as a secret key, and generates an authentication code (C). The calculation unit 105 outputs the generated authentication code (C) to the signal processing unit 106.

  The signal processing unit 106 performs signal processing such as concealment, error correction, interleaving, and modulation processing as processing on information output from the control unit 101 and the arithmetic unit 105, and demodulation processing as processing on a radio signal received by the transmission / reception unit 107. Signal processing. The signal processing unit 106 performs signal processing on the authentication code (C) output from the calculation unit 105 and outputs the result to the transmission / reception unit 107.

  The transmission / reception unit 107 performs wireless communication with the base station 109 via an antenna and a wireless communication line. The transmission / reception unit 107 transmits the information output from the signal processing unit 106 to the base station 109. Further, the transmission / reception unit 107 receives information transmitted by the base station 109 and outputs the information to the signal processing unit 106. The transmission / reception unit 107 transmits the authentication code (C) output from the signal processing unit 106 to the base station 109.

  Base station 109 communicates directly with mobile communication terminal apparatus 100 via a wireless communication line. The base station 109 receives the authentication code (C) transmitted from the mobile communication terminal device 100 and outputs it to the authentication server 110.

  The authentication server 110 includes an authentication database 111 and authenticates the mobile communication terminal device 100 connected to the base station 109. In the authentication server 110, the terminal ID and device ID of each mobile communication terminal device are stored as authentication data in a corresponding area in the authentication database 111. The authentication data is stored in a corresponding area in the authentication database 111 when the communication carrier stores the terminal ID (A) in the memory 103 of the mobile communication terminal device 100.

  The computing unit (not shown) of the authentication server 110 decrypts the authentication code (C) output by the base station 109 using the device ID (B) stored in the authentication database 111 as a secret key and decrypts it. When the received terminal ID (A) corresponds to the device ID (B) used for decryption, it is authenticated as a legitimate mobile communication terminal device.

  In the first embodiment, the device identification code storage means is realized by the memory 102. The terminal identification code storage means is realized by the memory 103. The authentication code generation means is realized by the calculation unit 105. The transmission means is realized by the signal processing unit 106 and the transmission / reception unit 107. The authentication information storage means is realized by the authentication database 111. The authentication unit is realized by a calculation unit of the authentication server 110.

  Next, the operation of the first embodiment will be described with reference to the drawings.

  FIG. 3 is a flowchart illustrating an example of processing in which the device ID (B) is stored in the memory 102.

  When manufacturing the mobile communication terminal device 100, the LSI package 108 has a terminal capable of reading and writing data in the memory 102. A description will be given assuming that data in the memory 102 can be read and written by connecting a predetermined device to the LSI package 108 via this terminal. That is, data in the memory 102 can be read and written by inputting / outputting memory control signals including address signals, data signals, and the like through the signal input / output terminals of the memory 102.

  Before mounting the LSI package 108 on the substrate of the mobile communication terminal device 100, a predetermined device is connected to the LSI package 108, and the device ID (B) is stored in the memory 102 (step S101).

  The predetermined device reads the device ID (B) stored in the memory 102 and stores it in the memory 103 (step S102).

  A terminal that can read and write data in the memory 102 of the LSI package 108 is set in a state in which it cannot be controlled from the outside (step S103). For example, by removing the signal input / output terminal of the memory 102 from the printed board, the memory 102 cannot be controlled from the outside. Next, the LSI package 108 is mounted by soldering or the like on the substrate of the mobile communication terminal device 100 (step S104).

  After the LSI package 108 is mounted on the mobile communication terminal device 100 by the above processing, it is impossible to read the device ID (B) from the outside.

  FIG. 4 is a flowchart illustrating an example of processing in which the terminal ID (A) is stored in the memory 103. The process of storing the terminal ID (A) in the memory 103 is performed by a communication carrier or the like before the mobile communication terminal device 100 is sold. A description will be given assuming that data in the memory 103 can be read and written by connecting a predetermined device to the external I / F 104.

  A predetermined device is connected to the external I / F 104, and the device ID (B) stored in the memory 103 is read (step S201).

  A predetermined device is connected to the authentication server 110, and the device ID (B) read in step S201 and the terminal ID (A) registered in the mobile communication terminal device 100 are associated with each other and stored in the corresponding area in the authentication database 111. (Step S202).

  A predetermined device is connected to the external I / F 104, and the terminal ID (A) is stored in the area where the device ID (B) of the memory 103 was stored (step S203).

  By the above processing, there is no device that stores the device ID (B) other than the authentication database 111 of the authentication server 110 and the memory 102 of the mobile communication terminal device 100.

  FIG. 5 is a flowchart illustrating an example of authentication processing of the mobile communication terminal device according to the first embodiment.

  The control unit 101 of the mobile communication terminal device 100 reads the terminal ID (A) from the memory 103 and outputs it to the calculation unit 105 (step S301).

  The calculation unit 105 reads the device ID (B) from the memory 102 (step S302).

  The calculation unit 105 encrypts the terminal ID (A) output by the control unit 101 using the read device ID (B) as a secret key, generates an authentication code (C), and outputs it to the signal processing unit 106 ( Step S303).

  The signal processing unit 106 performs signal processing on the authentication code (C) and outputs the signal to the transmission / reception unit 107. The transmission / reception unit 107 transmits the authentication code (C) output by the signal processing unit 106 to the base station 109 ( Step S304).

  The base station 109 receives the authentication code (C) and outputs it to the authentication server 110. The authentication server 110 decrypts the authentication code (C) output by the base station 109 using the device ID (B) stored in the authentication database 111 as a secret key (step S305), and the decrypted terminal ID (A) Determines whether or not corresponds to the device ID (B) used for decryption (step S306).

  When the terminal ID (A) decrypted in step S306 corresponds to the device ID (B) used for decryption (Yes), the authentication server 110 indicates that the connected mobile communication terminal device 100 is a regular mobile communication terminal. The device is authenticated (step S307), and the process is terminated. On the other hand, when the decrypted terminal ID (A) does not correspond to the device ID (B) used for decryption (No), the authentication server 110 indicates that the connected mobile communication terminal device 100 is a regular mobile communication terminal device. Is not authenticated (step S308), and the process ends.

  In this embodiment, since it is possible to connect to the memory 103 from the outside via the external I / F 104, it is possible to read data from the memory 103 illegally. However, since the authentication code (C) required for authentication is not stored in the memory 103, it cannot be read out.

  Further, since it is impossible to connect to the memory 102 from the outside via the external I / F 104, the device ID (B) stored in the memory 102 cannot be read illegally. For this reason, even if the terminal ID (A) is illegally read from the memory 103, the device ID (B) does not flow out, so that the mobile communication terminal device 100 cannot be cloned.

  Further, when the terminal ID of another mobile communication terminal apparatus is written in the memory 103 of the mobile communication terminal apparatus 100 and connected to the base station 109, the device ID (B) is encrypted as a secret key in the arithmetic unit 105. Since the authentication server 110 determines and authenticates the combination of the terminal ID and the device ID, it is not authenticated as a regular mobile communication terminal device. Therefore, the mobile communication terminal device 100 cannot be modified into an illegal clone.

  As described above, according to the first embodiment, even if the terminal ID (A) is illegally read from the memory 103, the device ID (B) does not flow out. Further, the device ID (B) cannot be rewritten.

  In general, since a terminal for accessing the memory is drawn out as an external I / F for rewriting stored data, it is technically possible to read electrical information from the terminal. Therefore, in the case of only software protection, it is possible to forcibly upload (copy) the entire area of the memory, and it is possible to create a clone terminal by writing the protected data as it is It is.

  In the authentication data storage method according to the present invention, in order to ensure the security of the device ID (B), which is a secret key, the data itself cannot be read from or written to the external terminal rather than being protected by software. Implement as follows. Therefore, it is possible to prevent unauthorized copying of the mobile communication terminal device according to the present invention and to prevent the mobile communication terminal device according to the present invention from being modified to unauthorized copying.

  In addition, since the device ID (B) is stored in the memory 103 until the terminal ID (A) is stored in the memory 103 by the communication carrier or the like, the device ID (B) is unknown at the manufacturing stage of the mobile communication terminal device. Can be prevented.

Embodiment 2. FIG.
Next, a second embodiment of the present invention will be described with reference to the drawings. FIG. 6 is a block diagram showing a second embodiment of the mobile communication system according to the present invention. The mobile communication system shown in FIG. 6 includes mobile communication terminal apparatus 200, base station 209, and authentication server 210. The mobile communication terminal apparatus 200 and the base station 209 can perform wireless communication via a wireless communication line. The base station 209 and the authentication server 210 are communicably connected.

  The mobile communication terminal apparatus 200 includes a control unit 201, a memory 202, a memory 203, an external interface (I / F) 204, a calculation unit 205, a signal processing unit 206, and a transmission / reception unit 207.

  The mobile communication terminal device 200 is an information processing device such as a mobile phone or a PDA, and has a communication function.

  The control unit 201 controls each unit of the mobile communication terminal device 200 by performing command decoding and execution control. The control unit 201 reads the second terminal ID (E) stored in the memory 203 and outputs it to the calculation unit 205.

  The memory 202 is a read-only memory in which information can be written only once, and is realized by, for example, a PROM. The memory 202 stores the first device ID (B) and the second device ID (D). The first device ID (B) is a device-specific ID such as a CPU serial number, for example. The second device ID (D) is an ID that has no correlation with the first device ID (B) and is unique to other devices. The first device ID (B) and the second device ID (D) are stored in the memory 202 in advance when the mobile communication terminal device 200 is manufactured.

  The memory 203 is a memory capable of erasing and writing data, and is realized by, for example, an EEPROM or a flash memory. The memory 203 stores the second terminal ID (E) generated by the arithmetic unit 205 by encrypting the first terminal ID (A). The memory 203 is accessed by the control unit 201 and the calculation unit 205. The second terminal ID (E) is stored in the memory 203 by a communication carrier or the like before the mobile communication terminal device is sold.

  The external I / F 204 is connected to another device and has a function of executing processing for controlling communication with the connected device.

  The arithmetic unit 205 performs arithmetic calculations and logical operations. In addition, the calculation unit 205 encrypts and decrypts the terminal ID. FIG. 7 is an explanatory diagram illustrating an outline of processing in which the calculation unit 205 generates the second terminal ID (E). As illustrated in FIG. 7, the arithmetic unit 205 uses the device ID (D) stored in the memory 202 as a secret key, and the first terminal ID (A) written by a predetermined device via the external I / F 204. Encrypt and generate a second terminal ID (E). The computing unit 205 stores the generated second terminal ID (E) in the memory 203.

  The computing unit 205 decrypts the second terminal ID (E) using the second device ID (D) as a secret key, and generates a first terminal ID (A). FIG. 8 is an explanatory diagram showing an outline of processing in which the calculation unit 205 generates the first terminal ID (A). As illustrated in FIG. 8, the arithmetic unit 205 decrypts the second terminal ID (E) output by the control unit 201 using the second device ID (D) stored in the memory 202 as a secret key. 1 terminal ID (A) is generated.

  Further, the calculation unit 205 encrypts the generated first terminal ID (A) using the first device ID (B) stored in the memory 202 as a secret key to generate an authentication code (C) (FIG. 2). reference). The calculation unit 205 outputs the generated authentication code (C) to the signal processing unit 206.

  The signal processing unit 206 performs signal processing such as concealment, error correction, and modulation processing as processing for information output from the control unit 201 and the arithmetic unit 205, and demodulation processing as processing for a radio signal received by the transmission / reception unit 207. Perform signal processing. The signal processing unit 206 performs signal processing on the authentication code (C) output from the calculation unit 205 and outputs the result to the transmission / reception unit 207.

  The transmission / reception unit 207 performs wireless communication with the base station 209 via an antenna and a mobile communication network. The transmission / reception unit 207 transmits the information output from the signal processing unit 206 to the base station 209. Also, the transmission / reception unit 207 receives information transmitted by the base station 209 and outputs the information to the signal processing unit 206. The transmission / reception unit 207 transmits the authentication code (C) output from the signal processing unit 206 to the base station 209.

  The base station 209 is a device corresponding to the end of a mobile communication network provided by a communication carrier, and directly communicates with the mobile communication terminal device 200. The base station 209 receives the authentication code (C) transmitted from the mobile communication terminal device 200 and outputs it to the authentication server 210.

  The authentication server 210 includes an authentication database 211 and authenticates the mobile communication terminal device 200 connected to the base station 209. In the authentication server 210, the first terminal ID and the first device ID of each mobile communication terminal device are stored as authentication data in a corresponding area in the authentication database 211. The authentication data is stored in a corresponding area in the authentication database 211 when the communication carrier stores the first terminal ID (A) in the memory 203 of the mobile communication terminal device 200.

  The authentication server 210 also decrypts the authentication code (C) output by the base station 209 using the first device ID (B) stored in the authentication database 211 as a secret key, and decrypts the first terminal. When the ID (A) corresponds to the first device ID (B) used for decryption, it is authenticated as a legitimate mobile communication terminal device.

  In the second embodiment, the terminal identification code decoding means is realized by the calculation unit 205.

  Next, the operation of the second embodiment will be described with reference to the drawings.

  First, a process in which the first device ID (B) and the second device ID (D) are stored in the memory 202 will be described. A description will be given assuming that data in the memory 202 can be read and written by connecting a predetermined device to the memory 202 when the mobile communication terminal device 200 is manufactured.

  Before mounting the memory 202 on the substrate of the mobile communication terminal device 200, a predetermined device is connected to the memory 202, and the first device ID (B) and the second device ID (D) are stored in the memory 202. The memory 202 is mounted on the mobile communication terminal device 200 in a state where a terminal capable of reading and writing data cannot be controlled from the outside. For example, by removing the signal input / output terminal of the memory 202 from the printed circuit board, the memory 202 cannot be controlled from the outside.

  Next, a process in which the second terminal ID (E) is stored in the memory 203 will be described. Description will be made assuming that data can be input to the control unit 201 by connecting a predetermined device to the external I / F 204 before the mobile communication terminal device 200 is sold.

  The first terminal ID (A) input by a predetermined device connected to the external I / F 204 is passed to the control unit 201. The control unit 201 outputs the first terminal ID (A) to the calculation unit 205.

  The calculation unit 205 encrypts the first terminal ID (A) output by the control unit 201 using the second device ID (D) stored in the memory 202 as a secret key, and generates a second terminal ID (E). Is generated. The computing unit 205 stores the generated second terminal ID (E) in the memory 203.

  FIG. 9 is a flowchart illustrating an example of authentication processing of the mobile communication terminal device according to the second embodiment.

  The control unit 201 of the mobile communication terminal device 200 reads the second terminal ID (E) from the memory 203 and outputs it to the calculation unit 205 (step S401).

  The calculation unit 205 reads the second device ID (D) stored in the memory 202 (step S402), and uses the second device ID (D) as a secret key to output the second terminal ID ( E) is decrypted to generate a first terminal ID (A) (step S403).

  The calculation unit 205 generates the authentication code (C) by encrypting the generated first terminal ID (A) using the first device ID (B) stored in the memory 202 as a secret key, and the signal processing unit 206. (Step S404).

  The signal processing unit 206 performs signal processing on the authentication code (C) and outputs the signal to the transmission / reception unit 207. The transmission / reception unit 207 transmits the authentication code (C) output by the signal processing unit 206 to the base station 209 ( Step S405).

  The base station 209 receives the authentication code (C) and outputs it to the authentication server 210. The authentication server 210 decrypts the authentication code (C) output by the base station 209 using the first device ID (B) stored in the authentication database 211 as a secret key (step S406), and the decrypted first It is determined whether or not the terminal ID (A) corresponds to the first device ID (B) used for decryption (step S407).

  When the first terminal ID (A) decrypted in step S406 corresponds to the first device ID (B) used for decryption (Yes), the authentication server 210 connects the connected mobile communication terminal device. 200 is authenticated as a legitimate mobile communication terminal device (step S408), and the process ends. On the other hand, when the decrypted first terminal ID (A) does not correspond to the first device ID (B) used for decryption (No), the authentication server 210 is connected to the connected mobile communication terminal device 200. It is not authenticated that it is a legitimate mobile communication terminal device (step S409), and the process is terminated.

  As described above, according to the second embodiment, in addition to the effects of the first embodiment, the data stored in the memory 203 and the memory between the control unit 201 and the memory 203 are described. The data passing through the bus is encrypted and protected with the second device ID (D) as a secret key. Since the second device ID (D) has no correlation with the first device ID (B) used for authentication, the authentication code (C) cannot be obtained.

  Even if the second terminal ID (E) is illegally read from the memory 203, the second terminal ID (E) is an encrypted version of the first terminal ID (A). There is an effect that unauthorized copying of the mobile communication terminal device according to the present invention can be prevented more firmly.

  The present invention can be effectively applied when authenticating a mobile communication terminal connected to a mobile communication network.

1 is a block diagram showing a first embodiment of a mobile communication system according to the present invention. It is explanatory drawing which shows the outline | summary of the process in which a calculating part produces | generates an authentication code. It is a flowchart which shows the example of the process in which device ID is memorize | stored in memory. It is a flowchart which shows the example of the process in which terminal ID is memorize | stored in memory. It is a flowchart which shows the example of the authentication process of the mobile communication terminal device in 1st Embodiment. It is a block diagram which shows 2nd Embodiment of the mobile communication system by this invention. It is explanatory drawing which shows the outline | summary of the process in which a calculating part produces | generates 2nd terminal ID. It is explanatory drawing which shows the outline | summary of the process in which a calculating part produces | generates 1st terminal ID. It is a flowchart which shows the example of the authentication process of the mobile communication terminal device in 2nd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Mobile communication terminal device 101 Control part 102 Memory 103 Memory 104 External interface (I / F)
DESCRIPTION OF SYMBOLS 105 Calculation part 106 Signal processing part 107 Transmission / reception part 108 LSI package 109 Base station 110 Authentication server 111 Authentication database

Claims (1)

An authentication apparatus comprising authentication information storage means for storing information used for authentication of the mobile communication terminal, a terminal identification code for identifying each terminal used for authentication of the mobile communication terminal connected to the mobile communication network ; and , an authentication data storing method for storing in the mobile communication terminal,
An LSI including at least device identification code storage means for storing a device identification code unique to a terminal device, which is used as a secret key for encrypting the terminal identification code, and terminal identification code storage means for storing the terminal identification code is provided. In addition, the device identification code is stored in the device identification code storage means from a terminal that enables writing and reading of the data of the device identification code storage means, and the data of the terminal identification code storage means provided in the LSI is written an external interface that allows reading, the device identification code from the external interface can not read writing of data in the storage unit, the device identification code storage means by the same device identification code to that stored in the terminal identification code storage Stored in the means,
After making the terminal that enables writing and reading of data in the device identification code storage means out of control from outside, the LSI is mounted on a substrate,
The terminal identification code reads the device identification code stored in the storage means from the external interface, the read device identification code and the terminal identification code is stored in the authentication information storage unit, the terminal identification code stored from the external interface An authentication data storage method comprising: overwriting and storing the terminal identification code in an area in which the device identification code is stored.

Images