JP4719701B2 - COMMUNICATION CONTROL SYSTEM, COMMUNICATION DEVICE, AND COMMUNICATION CONTROL METHOD - Google Patents

Description

  The present invention comprises a communication device used by a user, a first management device that manages various communication of the communication device under a contract with the communication device, and a second management device that similarly manages other communication devices. If the communication device is moved from the control of the first management device to the control of the second management device by roaming or user operation, the communication device is under the contract of the first management device. The present invention relates to a communication control system, a communication device, and a communication control method for connecting a communication device and another communication device so that they can communicate with each other.

  2. Description of the Related Art Conventionally, mobile communication service systems typified by mobile phones have been widely used. In such a mobile communication service system, a carrier provides communication facilities (for example, frequency) necessary for communication by a mobile terminal (for example, a mobile phone) and uses the communication facilities provided by itself. The mobile terminal and user information to be registered are registered, and the communication fee used by the user at the mobile terminal is collected from the user. In addition, a mobile terminal owned by a user needs to perform user registration (contract) with a carrier that provides communication facilities in order to communicate with other mobile terminals.

  Recently, users can freely roam and roam overseas. Specifically, communication can be performed using communication facilities other than the contracted carrier, or a mobile phone used in Japan can be used as is outside the country using the communication facilities of the local carrier. it can. And even if the mobile terminal to which the original contract was made roaming or overseas roaming, it is necessary for the carrier to collect fees and communication charges generated by roaming from the user.

  However, when a mobile terminal used by a malicious user roams, the mobile terminal impersonates a legitimate user terminal with respect to a destination carrier that is not contracted. The communication of the body terminal is connected without going through the source carrier. The problem that occurs in this way will be explained in detail. When roaming, if a destination carrier that is not contracted is impersonated as a legitimate user terminal, services that are not provided by the source carrier Even if a service that can be used at the destination and is not provided in this way, the carrier before movement cannot charge the user for a communication fee. In addition, when connected without going through the source carrier, the source carrier cannot grasp (manage) the communication used by the destination of the mobile terminal and charges a communication fee related to the communication. I can't.

  Therefore, various techniques for preventing such malicious mobile terminals and carriers from intervening in the mobile communication service system are disclosed. For example, in Patent Document 1 (Japanese Patent Application Laid-Open No. 2006-245831), a shared key is held between a carrier before movement and a mobile terminal, and when the mobile terminal moves the carrier, the shared key is changed. A technique for preventing impersonation by using and authenticating is disclosed.

  More specifically, when the mobile terminal moves the carrier, the mobile terminal calculates the authentication data 1 using the shared key and transmits it to the destination carrier. Subsequently, when the destination carrier receives the authentication data 1 from the mobile terminal that has moved, the destination carrier requests the pre-movement carrier to calculate the authentication data 2, and the pre-movement carrier uses the shared key (shared key). The authentication data 2 generated using is received. Then, the destination carrier compares the authentication data 1 and the authentication data 2 and, if they are the same data, permits the communication of the mobile terminal.

JP 2006-245831 A

  However, the above-described conventional technique always prevents spoofing since a malicious third party can impersonate a mobile terminal equipped with a telephone device and use a carrier when a shared key leaks to the outside. And the mobile terminal that has moved the carrier can communicate without going through the source carrier after passing the authentication, and the mobile terminal that has moved the carrier cannot be reliably managed There was a problem.

  Accordingly, the present invention has been made to solve the above-described problems of the prior art, and it is possible to reliably prevent spoofing when moving a carrier used by a telephone device, An object of the present invention is to provide a communication control system, a communication device, and a communication control method capable of reliably managing a telephone device that has moved.

In order to solve the above-described problems and achieve the object, the present invention provides a communication apparatus used by a user and a first management apparatus that manages various communications of the communication apparatus by placing the communication apparatus under a contract and other A second management device that similarly manages the communication device, and the communication device is moved under the control of the first management device from the control of the first management device by roaming or the user's operation A communication control system for connecting the communication device and another communication device so that they can communicate with each other under a contract of the first management device. Operation prohibiting means for prohibiting operation acceptance of each function in the communication device from the user when the user moves from the control of the management device to the control of the second management device, and each function in the communication device Allow operation acceptance to A use permission request for requesting the operation is transmitted to the first management device via the second management device, and a use permission response for permitting the operation acceptance is transmitted via the second management device to the first management device. The operation permitting means for permitting operation acceptance to each function prohibited by the operation prohibiting means, and the first management apparatus is the destination from the communication apparatus. Use permission transmitting means for transmitting the use permission response to the communication device after authenticating that the communication device is under a contract of the own device when receiving the use permission request via the management device. When the second management device receives the use permission request from the communication device, the second management device transfers the use permission request to the first management device, and sends the use permission response from the first management device. If received, Characterized in that the authorization response with a, a usage permission transfer means for transferring to the communication device.

Further, the present invention is the above invention, wherein the use permission transfer means of the second management device transfers the use permission request received from the communication device to the first management device. When various service information provided by the management device is added to the use permission request and transferred, the use permission transmission means of the first management device receives the use permission request from the second management device. The service information added to the use permission request by the use permission transfer unit of the second management device is compared with the service information provided by the first management device, and the communication device after moving is compared. Service information that can be provided is determined, the determined service information is added to the use permission response and transmitted to the communication device, and the second management device transmits use permission transmission of the first management device. means Based on a more determined service information, and further comprising a service control means for controlling the communication of the communication device.

Further, the present invention provides the communication device according to the above invention, wherein the use permission transmission means of the first management device receives the use permission request from the communication device via the second management device. A transmission permission request for requesting permission to transmit to another communication device is transmitted from the communication device to the second management device by transmitting a use permission response for other functions other than the transmission function in the communication device to the communication device. The transmission permission response for permitting the transmission is transmitted to the communication device, and the use permission transfer means of the second management device receives the use permission request from the communication device. The use permission request is transferred to the first management device, and when the use permission response is received from the first management device, the use permission response is transferred to the communication device, and Communication device When the call permission request is received, the call permission request is transferred to the first management device, and when the call permission response is received from the first management device, the call permission response is sent to the communication device. And the operation permission means of the communication device transmits the use permission request to the first management device via the second management device, and sends the use permission response to the second management device. When receiving from the first management device via the first, the operation acceptance to other functions excluding the transmission function among the functions prohibited by the operation prohibiting means is permitted, and the transmission permission request is transmitted to the second When the transmission permission response is received from the first management device via the second management device and transmitted to the first management device via the management device, it is prohibited by the operation prohibiting means. Special feature to allow outgoing function To.

Further, according to the present invention , in the above invention, the operation permission means of the communication device encrypts the use permission request and transmits it to the first management device via the second management device. The use permission transmission means of the management device decrypts and recognizes the encrypted use permission request when receiving the encrypted use permission request from the telephone device via the second management device. The use permission response is encrypted and transmitted to the communication device.

Also, in the present invention according to the first aspect, the operation permission means of the communication device may send the use permission request and the electronic signature signed by the communication device to the first management device via the second management device. And the use permission transmission means of the first management device receives the use permission request and the electronic signature from the communication device via the second management device, and the electronic signature is valid. On the condition, the use permission response is transmitted to the communication device.

In addition, according to the present invention , in the above invention, when the communication prohibition unit of the communication device terminates communication between the communication device and another communication device, the communication from the user permitted by the operation permission unit is performed. It is characterized in that operation reception to each function in the apparatus is prohibited again.

In addition, the present invention provides a second management for managing a communication device used by a user and the communication device under a contract, and a first management device for managing various communications of the communication device and other communication devices in the same manner. In the communication control system configured by the device, when the first management device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the first management device The communication device that connects communication with another communication device under the contract of the first management device, and when the mobile device moves from the control of the first management device to the control of the second management device, the use Via the second management device, an operation prohibiting means for prohibiting an operation reception to each function in the communication device from a user, and a use permission request for requesting permission to accept an operation to each function in the communication device. The first management Operation to each function prohibited by the operation prohibiting means when receiving a use permission response permitting the acceptance of the operation from the first management device via the second management device. And an operation permission means for permitting reception.

In addition, the present invention provides a second management for managing a communication device used by a user and the communication device under a contract, and a first management device for managing various communications of the communication device and other communication devices in the same manner. And when the communication device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the first management device A communication control method suitable for connecting the communication device and another communication device so that they can communicate with each other under a contract, wherein the communication device is under control of the first management device. An operation prohibiting step for prohibiting an operation reception to each function in the communication device from the user when the user moves under the control of the second management device, and an operation reception to each function in the communication device is permitted. Permission request that requires When a use permission response is received from the first management device via the second management device, transmitted to the first management device via the second management device and permitting the operation acceptance. An operation permission step for permitting operation acceptance to each function prohibited by the operation prohibition step, and the first management device is used from the communication device via the second management device as a destination. When receiving a permission request, after authenticating that the communication device is under a contract of its own device, the use permission transmission step of transmitting the use permission response to the communication device, and the second management device, When the use permission request is received from the communication device, the use permission request is transferred to the first management device, and the use permission response is received from the first management device. The response is transferred to the communication device. A usage permission transfer step of, characterized by including.

According to the present invention , when the communication device moves from the control of the first management device to the control of the second management device, the communication device prohibits an operation reception from the user to each function in the communication device. Then, a use permission request for permitting operation reception to each function in the communication device is transmitted to the first management device via the second management device, and a use permission response for permitting operation reception is transmitted to the second When receiving from the first management device via the first management device, permits the operation acceptance to each prohibited function, the first management device from the communication device to the second management device that is the destination When the use permission request is received via the communication device, the communication device authenticates that it is under the contract of its own device, transmits a use permission response to the communication device, and the second management device permits use from the communication device. When the request is received, the use permission request is transferred to the first management device. When the use permission response is received from the first management device, the use permission response is transferred to the communication device, so that impersonation can be reliably prevented when moving the carrier used by the communication device. It is possible, and it is possible to reliably manage the communication device that has moved the carrier.

  For example, since the first management device transmits an operation permission only to the communication device under contract when the communication device moves the carrier, impersonation is performed when moving the carrier used by the communication device. It is possible to prevent it reliably. In addition, the communication device needs to communicate with the first management device in order to release the operation prohibition, and receives the operation permission from the first management device, so even if it is connected to another communication device, Since the connection is made via one management device, the first management device can reliably manage the communication device that has moved the carrier.

  Furthermore, the first management apparatus can forcibly route communication to its own network even when a contracted communication apparatus moves a carrier. For example, the second management apparatus bears an access charge burden. Therefore, it is possible to prevent intentionally avoiding the signal routing to the first management device defined in the technical standard such as 3GPP (3rd Generation Partnership Project). In addition, the first management device can forcibly route communication to the company network, so that the user (user) enclosure business can be performed.

According to the present invention , when the second management device transfers the use permission request received from the communication device to the first management device, the second management device permits use of various service information provided by the second management device. When the first management apparatus receives the use permission request from the second management apparatus, the first management apparatus adds the service information added to the use permission request by the second management apparatus, and the first management apparatus Service information provided by the management device is determined, service information that can be provided to the moved communication device is determined, the determined service information is added to the use permission response, and transmitted to the communication device. Since the second management device controls communication of the communication device based on the service information determined by the first management device, the first management device can reliably manage the communication device that has moved the carrier. Is possible.

  For example, when the service provided by the second management device is different from the service provided by the first management device, the second management device communicates with the communication device based on the service provided by the first management device. As a result, it is possible to prevent the communication device from moving the carrier and using a service higher than the original contract. As a result, the first management device reliably manages the communication device that has moved the carrier. Is possible.

Further, according to the present invention , when the first management device receives a use permission request from the communication device via the second management device, the first management device sends a use permission response for other functions excluding the transmission function in the communication device. When a transmission permission request is transmitted from the communication device via the second management device to request transmission to another communication device and permitted to be transmitted to another communication device, a transmission permission response for permitting transmission is transmitted to the communication device. When the second management device receives a use permission request from the communication device, the second management device transfers the use permission request to the first management device and receives a use permission response from the first management device. The use permission response is transferred to the communication device, and when a call permission request is received from the communication device, the call permission request is transferred to the first management device, and the call permission response is sent from the first management device. If you receive The answer is transferred to the communication device, and the communication device transmits a use permission request to the first management device via the second management device, and sends a use permission response to the first management device via the second management device. When received from the device, permit operation acceptance to other functions excluding the calling function among the prohibited functions, send a call permission request to the first management device via the second management device, When a transmission permission response is received from the first management device via the second management device, the prohibited transmission function is permitted, so that unauthorized communication by a malicious third party can be prevented more firmly. As a result, security can be increased.

  Specifically, by using a usage permission response and a transmission permission response, even if either the usage permission response or the transmission permission response is stolen by a malicious third party, a transmission that generates a charge will occur. As a result, it is possible to increase the security as a result of being able to firmly prevent malicious third parties from intervening by eavesdropping on usage permission responses and outgoing permission responses. is there.

According to the present invention , the communication device encrypts the use permission request and transmits the request to the first management device via the second management device, and the first management device receives the second management from the telephone device. When an encrypted use permission request is received via the device, the encrypted use permission request is decrypted and recognized, and the use permission response is encrypted and transmitted to the communication device, thus maintaining higher security. However, it is possible to manage the communication apparatus that has moved the carrier.

  For example, when communication is performed using the SIP protocol (Session Initiation Protocol), the communication device encrypts the INVITE signal using an encryption key or an encryption method shared with the first management device as a use permission request. As a result, the first management device encrypts and transmits the use permission response to the communication device, so that the second management device and other devices can prevent the use permission response from being wiretapped, It is possible to manage a communication device that has moved a carrier while maintaining higher security.

Further, according to the present invention , the communication device transmits the use permission request and the electronic signature signed by the communication device to the first management device via the second management device. When a use permission request and an electronic signature are received from the device via the second management device, a use permission response is transmitted to the communication device on condition that the electronic signature is valid. Compared to the case where the electronic signature is not transmitted together with the request, the first management apparatus can surely manage the communication apparatus that has moved the carrier.

  For example, when the communication device does not transmit an electronic signature, the first management device cannot determine whether the received use permission request is actually transmitted from an authorized (contracted) communication device. When transmitting an electronic signature, the first management apparatus authenticates that the electronic signature is valid, and the received use permission request is transmitted from an authorized (contracted) communication apparatus. As a result of the determination, the first management apparatus can reliably manage the communication apparatus that has moved the carrier.

Further, according to the present invention , when communication between the communication device and the other communication device is completed, the communication device again prohibits operation acceptance from the authorized user to each function in the communication device. It is possible to manage communication devices that have moved firmly.

  For example, since a mobile phone is prohibited from accepting operations when the call ends, each time it is necessary to make a call, it is necessary to send a use permission request to allow operation acceptance. It is possible to manage a communication device that has moved more firmly than when a use permission request is once transmitted to a management device and operation acceptance is permitted.

  Embodiments of a communication control system according to the present invention will be described below in detail with reference to the accompanying drawings. In the following, the main terms used in the present embodiment, the outline and features of the communication control system according to the present embodiment, the configuration of the communication control system and the flow of processing will be described in order, and finally various modifications to the present embodiment will be described. An example will be described.

[Explanation of terms]
First, main terms used in this embodiment will be described. The “communication control system (corresponding to the“ communication control system ”recited in the claims”) used in this embodiment is a mobile phone that performs various communications such as voice communication, Internet communication, and image communication, and a mobile phone. Provided by “source carrier management device” that provides communication equipment (for example, frequency, IP address (Internet Protocol), etc.) to mobile phones under control and source carrier management device A “destination carrier management device” different from the communication equipment to be connected is connected by a network such as a VoIP network (Voice over Internet Protocol), an IP network (Internet Protocol), or a PSTN network (Public Switched Telephone Network). The “source carrier management device” corresponds to the “first management device” recited in the claims, and the “destination carrier management device” refers to the “second management device” recited in the claims. Corresponds to "device".

  Also, “under contract” here means that the user of the “mobile phone” performs user registration with the “source carrier management device” in order to use the mobile phone, and communicates using the mobile phone. The result shows that the mobile carrier management apparatus is contracted to pay a communication charge such as a call charge or a packet charge.

  Further, “under control” indicates that the mobile phone performs various communications using the communication equipment provided by the source carrier management apparatus or the destination carrier management apparatus. Specifically, “the mobile phone is under the control of the source carrier management device” means that the mobile phone uses communication facilities such as the frequency provided by the source carrier management device when performing various communications. "The mobile phone is under the control of the destination carrier management device" means that the mobile phone uses the communication equipment provided by the destination carrier management device when performing various communications. Indicating that communication is to be performed.

  The “mobile phone (corresponding to the“ communication device ”described in the claims)” is a device having a telephone function such as an analog telephone or a VoIP telephone. In addition, this “mobile phone” is not only a general telephone, but also a mobile communication terminal such as a personal computer or workstation having a telephone function, a home game machine, an Internet TV, a PDA, or a PHS. Good.

[Outline and features of communication control system]
Next, the outline and characteristics of the communication control system according to the first embodiment will be described with reference to FIG. FIG. 1 is a system configuration diagram illustrating the overall configuration of the communication control system according to the first embodiment.

  As shown in FIG. 1, in this communication control system, a cellular phone, a connection destination telephone device, a movement source carrier management device, a movement destination carrier management device, and a connection destination carrier management device use a protocol such as SIP. Are connected to each other via a network. As described above, the source carrier management apparatus manages mobile phones under contract, and similarly, the connection destination carrier management apparatus manages connection destination telephone apparatuses under contract.

  In addition, each carrier management device stores information for uniquely identifying a mobile phone under contract. To give a specific example, the source carrier management device stores the phone number “090-xxx-xxx” of the mobile phone in order to uniquely identify the mobile phone under contract, and the connected carrier management device Similarly, the phone number “03-yyy-yyyy” of the connection destination telephone device is stored. Here, a case where a telephone number is stored as information for uniquely identifying a mobile phone under contract will be described. However, the present invention is not limited to this, for example, at the time of contract (user Any information may be used as long as it is information that can be uniquely identified, such as a terminal number assigned at the time of registration) or a production number assigned at the time of manufacture of the mobile phone.

  Under such a configuration, this communication control system uses a mobile carrier and a mobile phone used by a user under a contract, and similarly manages a source carrier management device that manages various communications of the mobile phone and other telephone devices. The mobile carrier management device is configured when the mobile phone is moved from the control of the mobile carrier management device to the control of the mobile carrier management device by roaming or user operation. Under the contract of the device, the outline is to connect the mobile phone and the connected telephone device so that they can communicate with each other, especially when moving the carrier used by the mobile phone, ensuring impersonation The main features are that it is possible to prevent the problem and that the mobile phone that has moved the carrier can be managed reliably.

  This main feature will be described in detail. When the mobile phone moves under the control of the source carrier management device from the control of the source carrier management device by roaming or user operation, the mobile phone receives the mobile phone from the user. The operation reception to each function in the telephone is prohibited (see (1) and (2) in FIG. 1). Specifically, when a mobile phone moves from under the control of the source carrier management device to under the control of the destination carrier management device, the mobile phone makes a phone call or connects to the Internet. Stop accepting various functions so that no functions are accepted.

  Then, the mobile phone transmits a use permission request for requesting permission to accept operations to each function in the mobile phone to the destination carrier management device (see (3) in FIG. 1). When the use permission request is received from the mobile phone, the use permission request is transferred to the source carrier management device (see (4) in FIG. 1). After authenticating that it is below, a use permission response is transmitted to the mobile phone (see (5) in FIG. 1). Specifically, in the above example, the source carrier management device uses the destination carrier management device that is the destination to which the mobile phone has moved under control as a REGISTER signal or INVITE signal in SIP communication. When receiving a use permission request, the phone number included in the use permission request is stored in the device itself, so it is authenticated that it is under the contract of the device and a one-time password is sent to the mobile phone as a use permission response. To do.

  Subsequently, when the destination carrier management device receives the use permission response from the source carrier management device, the destination carrier management device transfers the use permission response to the mobile phone (see (6) in FIG. 1). When a use permission response permitting acceptance is received from the source carrier management device via the destination carrier management device, operation acceptance to each prohibited function is permitted (see (7) in FIG. 1). Specifically, in the above example, when the destination carrier management device receives a one-time password from the source carrier management device as a response to the REGISTER signal or the INVITE signal, the destination carrier management device transfers the one-time password to the mobile phone. The mobile phone then permits operation acceptance to each prohibited function using the one-time password.

  Then, the mobile phone transmits a connection request, which is a normal call requesting a call connection with the connection destination telephone device, to the movement source carrier management device via the movement destination carrier management device ((8) in FIG. 1). (See (9)), the source carrier management apparatus transfers the connection destination telephone apparatus to the connection destination carrier management apparatus under control (see (10) in FIG. 1). Specifically, in the above example, the mobile phone transmits the telephone number “03-yyy-yyyy” of the dialed connection destination telephone device as an INVITE signal in SIP communication. Then, the destination carrier management device transfers the outgoing call to the source carrier management device, and the source carrier management device connects the telephone number “03-yyyy-yyyy” included in the outgoing call under control. Send to the management device.

  Subsequently, the connection destination carrier management apparatus transmits the connection request to the connection destination telephone apparatus (see (11) in FIG. 1), and the connection destination telephone apparatus sends a connection response to the connection request to the connection destination carrier management apparatus. Transmit (see (12) in FIG. 1). Specifically, in the above example, the connection destination carrier management apparatus transmits a connection request to the connection destination telephone apparatus to which the telephone number “03-yyyy-yyyy” included in the received connection request (outgoing) is assigned. Then, the connection destination telephone device transmits a connection permission (200 OK or the like) to the connection destination carrier management device in response to the connection request by picking up the handset or executing a call operation.

  Then, the connection destination carrier management device transfers the connection response to the movement source carrier management device (see (13) in FIG. 1), and the movement source carrier management device sends the connection response via the movement destination carrier management device. And transmitted to the mobile phone (see (14) and (15) in FIG. 1). Specifically, the connection destination carrier management apparatus transfers the connection response as a signal such as “200 OK” in SIP communication to the movement source carrier management apparatus, and the movement source carrier management apparatus The response is transmitted to the mobile phone via the destination carrier management device.

  Thereafter, the mobile phone is communicably connected to the connection destination telephone apparatus via the movement destination carrier management apparatus, the movement source carrier management apparatus, and the connection destination carrier management apparatus, and executes a call such as a voice call ( (See (16) in FIG. 1).

  As described above, in the communication control system according to the first embodiment, when the mobile phone moves the carrier, the source carrier management apparatus transmits an operation permission only to the mobile phone under the contract, The phone needs to communicate with the source carrier management device in order to release the prohibition of operation, and even when connected to another phone device, the phone will be connected via the source carrier management device. When moving the carrier used by the body terminal, it is possible to reliably prevent spoofing and to reliably manage the mobile terminal that has moved the carrier.

[Configuration of communication control system]
Next, the configuration of the communication control system shown in FIG. 1 will be described with reference to FIGS. FIG. 2 is a block diagram illustrating the configuration of the source carrier management device and the destination carrier management device in the communication control system according to the first embodiment, and FIG. 3 is stored in the registered telephone DB in the source carrier management device. FIG. 4 is a diagram illustrating a configuration example of information, FIG. 4 is a diagram illustrating a configuration example of information stored in a service information DB in the source carrier management device, and FIG. 5 is a registered telephone DB in the destination carrier management device. 6 is a diagram showing a configuration example of information stored in FIG. 6, FIG. 6 is a diagram showing a configuration example of information stored in the service information DB in the destination carrier management apparatus, and FIG. 7 is related to the first embodiment. It is a block diagram which shows the structure of the mobile telephone in a communication control system.

(Moving source carrier management device 10)
As illustrated in FIG. 2, the source carrier management device 10 includes a communication control I / F unit 11, a storage unit 12, and a control unit 15. The communication control I / F unit 11 controls communication related to various types of information exchanged with the mobile phone, the destination carrier management device 20 and the connection destination carrier management device. For example, the communication control I / F unit 11 receives voice communication from a mobile phone, receives a use permission request from a destination carrier management device, or via a source carrier management device. A one-time password is transmitted to the mobile phone, or a connection request is transmitted to the connection destination carrier management device.

  The storage unit 12 stores data and programs necessary for various processes performed by the control unit 15 and includes a registered telephone DB 13 and a service information DB 14 that are particularly closely related to the present invention. The registered telephone DB 13 stores information for the source carrier management apparatus 10 to uniquely identify a mobile phone under contract. Specifically, as shown in FIG. 3, “an identification number uniquely assigned to a telephone under contract, a“ terminal number ”indicating a telephone manufacturing number, and a telephone number“ "01, 01-11-11, 090-xxx-xxxx, 01, 03" or "02, 02-XX-01, 080" as "contract service number" indicating the number of the contracted service -Yyy-yyyy, 01 ", etc. The information including various data and parameters shown here can be arbitrarily changed unless otherwise specified.

  The service information DB 14 stores information related to various services provided to the telephone device under control. As a specific example, as shown in FIG. 4, the service information DB 14 includes “contract service number indicating service contract number to be provided” and “service information” indicating service content to be provided. “01, 1 hour free call per month” “02, packet limit (up to 2000 yen)”, “03, account withdrawal”, etc. are stored. The information including various data and parameters shown here can be arbitrarily changed unless otherwise specified.

  The control unit 15 has a control program such as an OS (Operating System), a program that defines various processing procedures, and an internal memory for storing necessary data. In particular, the control unit 15 is closely related to the present invention. A connection management unit 16 and a use permission transmission unit 17 are provided, and various processes are executed by these.

  The connection management unit 16 manages various communications of the telephone devices under contract. As a specific example, the connection management unit 16 manages the call time for voice communication when a mobile phone under contract performs voice communication, or connects to the Internet when the Internet is connected. It manages the amount of packets used and the service information used by mobile phones. The managed information is collected as a communication fee.

  When the use permission transmission unit 17 receives the use permission request from the destination carrier management apparatus 20, the use permission transmission unit 17 authenticates that the mobile phone is under the contract of the own apparatus, and then uses the destination carrier management apparatus 20 to request the use permission. Service information added to the mobile carrier management apparatus 10 is compared with service information provided by the source carrier management apparatus 10 to determine service information that can be provided to the mobile phone after movement, and use of the determined service information is permitted. Add to response and send to mobile phone. Specifically, in the above example, the use permission transmitting unit 17 uses the destination carrier management device 20 that is a destination to which the mobile phone has moved under control as a REGISTER signal or INVITE signal in SIP communication. When the use permission request is received, the mobile phone number “090-xxx-xxxx” included in the use permission request and the service information “01 provided by the destination carrier management device 20 added to the use permission request” are provided. , "Free call for 3 hours a month", "02, packet limit (up to 2000 yen)" and "03, account withdrawal".

  Then, since the telephone number “090-xxx-xxxx” of the mobile phone included in the use permission request is stored in the registered telephone DB 13 of the own device, the use permission transmitting unit 17 authenticates that it is under the contract of the own device. To do. Subsequently, the use permission transmitting unit 17 obtains “01, 1 hour free call per month” “03, account debit”, which is service information with which the telephone number “090-xxx-xxxx” is contracted, from the service information DB 14. The service information “01, free call for 1 hour per month” “03, account withdrawal” and service information “01, free call for 3 hours per month” “02, packet restriction (up to 2000 yen) "03, Account withdrawal", service information that can be provided to mobile phones after moving is determined as "01, 1 hour free call a month" "03, account withdrawal" The information “01, free call for 1 hour per month” “03, account withdrawal” is added to the one-time password that is a use permission response and transmitted to the mobile phone. Here, since the telephone number is stored in the registered telephone DB 13, it is determined that it is under the contract of its own device. However, the present invention is not limited to this, and a mobile phone such as a manufacturing number or a terminal number is not limited. Any one can be used as long as it can be uniquely identified. The use permission transmission unit 17 corresponds to “use permission transmission means” described in the claims.

(Destination Carrier Management Device 20)
As illustrated in FIG. 2, the destination carrier management device 20 includes a communication control I / F unit 21, a storage unit 22, and a control unit 25. The communication control I / F unit 21 controls communication related to various types of information exchanged with a mobile phone, a source carrier management device, and a connection destination carrier management device. To give a specific example, the communication control I / F unit 21 receives a use permission request from the mobile phone and transfers it to the source carrier management apparatus 10 or receives a use permission request from the source carrier management apparatus 10. And transfer it to a mobile phone.

  The storage unit 22 stores data and programs necessary for various processes performed by the control unit 25, and includes a registered telephone DB 23 and a service information DB 24 that are particularly closely related to the present invention. The registered telephone DB 23 stores information for the destination carrier management apparatus 20 to uniquely identify a mobile phone under contract. As a specific example, as shown in FIG. 5, “an identification number uniquely assigned to a telephone under contract, a“ terminal number ”indicating a telephone manufacturing number, and a telephone number“ "Telephone number", "Contract service number" indicating the contracted service number, "01, 11-22-33, 090-zzz-zzzz, 01" or "02, 99-00-77, 050-aaa" -Aaa, 02 ", etc. The information including various data and parameters shown here can be arbitrarily changed unless otherwise specified.

  The service information DB 24 stores information related to various services provided to the telephone device under control. Specifically, as shown in FIG. 6, the service information DB 24 includes “contract service number indicating service contract number to be provided” and “service information” indicating service content to be provided as “service information”. “01, 3 hours a month free call” “02, packet limit (up to 3000 yen)”, “03, account withdrawal”, etc. are stored. The information including various data and parameters shown here can be arbitrarily changed unless otherwise specified.

  The control unit 25 has a control program such as an OS (Operating System), a program defining various processing procedures, and an internal memory for storing necessary data, and particularly as closely related to the present invention, The connection management part 26, the use permission transfer part 27, and the service control part 28 are provided, and various processes are performed by these.

  The connection management unit 26 manages various communications of telephone devices under contract. As a specific example, the connection management unit 26 manages the call time for voice communication when a mobile phone under contract performs voice communication, or connects to the Internet when the Internet is connected. It manages the amount of packets used and the service information used by mobile phones. The managed information is collected as a communication fee.

  When transferring the use permission request received from the mobile phone to the source carrier management device 10, the use permission transfer unit 27 adds various service information provided by the destination carrier management device 20 to the use permission request and transfers the request. When the use permission response is received from the source carrier management apparatus 10, the use permission response is transferred to the mobile phone. More specifically, in the above example, when the usage permission transfer unit 27 transfers the usage permission request received from the mobile phone to the source carrier management device 10, the destination carrier management device 20 shown in FIG. Various service information to be provided, such as “01, free call for 3 hours per month”, “02, packet restriction (up to 3000 yen per month)”, “03, account debit”, is added to the use permission request and transferred. Further, when the use permission transfer unit 27 receives a one-time password as a use permission response from the source carrier management apparatus 10, the use permission transfer unit 27 transfers the one-time password to the mobile phone.

  The service control unit 28 controls communication of the mobile phone that has moved based on the service information determined by the use permission transmission unit 17 of the source carrier management apparatus 10. Specifically, in the above example, the service control unit 28 normally provides “01, 3 hours free call”, “02, packet restriction (monthly 3000), which is a service provided by the source carrier management device that is its own device. Controls services such as “up to ¥)”, “03, account withdrawal”, etc., but service information “01, 1 hour free per month, added to the one-time password transmitted from the source carrier management device 10 and transferred to the mobile phone. Service information “01 determined and provided by the source carrier management device 10 instead of controlling the communication of the mobile phone based on the service information provided by the own device when the“ call ”“ 03, account withdrawal ”is received. , The mobile phone communication is controlled based on “1 hour free call per month” “03, account withdrawal”.

(Mobile phone 30)
As shown in FIG. 7, the mobile phone 30 includes a communication control I / F unit 31, an input reception unit 32, a storage unit 33, and a control unit 35. The communication control I / F unit 31 controls communication related to various information exchanged with the source carrier management device 10, the destination carrier management device 20, and the connection destination telephone device. Specifically, the communication control I / F unit 31 transmits a use permission request to the source carrier management device, receives a one-time password from the source carrier management device, Perform voice communication.

  The input receiving unit 32 includes a touch panel, a microphone, and the like, and receives various operations. As a specific example, the input receiving unit 32 receives an operation from a telephone number search for making a call to an outgoing call, an operation for connecting to the Internet, and an operation for sending and receiving an e-mail.

  The storage unit 33 stores data and programs necessary for various processes by the control unit 35, and includes a communication information DB 34 particularly closely related to the present invention. The communication information DB 34 stores various information necessary for communication. For example, the communication information DB 34 stores a telephone number or IP address of a connection destination, address information for connecting to the Internet, and the like.

  The control unit 35 has a control program such as an OS (Operating System), a program defining various processing procedures, and an internal memory for storing necessary data, and particularly as closely related to the present invention, The communication connection part 36, the operation prohibition part 37, the operation permission part 38, and the audio | voice process part 39 are provided, and various processes are performed by these.

  The communication connection unit 36 connects various communications with other devices. To give a specific example, when the input accepting unit 32 accepts a call origination operation, the communication connecting unit 36 performs a call origination process on the connection request destination, and the input accepting unit 32 accepts an internet connection operation. If connected to a URL (Uniform Resource Locator) or address information entered by the user, or when using various contracted services, connect to a server that provides the service, or connect from another device When a request is received, a response is sent by user operation.

  The operation prohibition unit 37 prohibits a user from accepting an operation on each function of the mobile phone when moving from the control of the source carrier management device 10 to the control of the destination carrier management device 20. More specifically, in the above example, the operation prohibition unit 37 is used to perform operations from a telephone number search to a call accepted by the input reception unit 32 from the user to an outgoing call, an operation for connecting to the Internet, and sending and receiving e-mails. Do not accept operations. The operation prohibition unit 37 corresponds to “operation prohibition means” described in the claims.

  The operation permission unit 38 transmits a use permission request for requesting permission to accept an operation to each function in the mobile phone to the source carrier management device 10 via the destination carrier management device 20 and permits the operation acceptance. When the use permission response to be received is received from the source carrier management apparatus 10 via the destination carrier management apparatus 20, the operation acceptance to each function prohibited by the operation prohibition unit 37 is permitted. More specifically, in the above example, the operation permission unit 38 sends a use permission request requesting permission to accept an operation to each function in the mobile phone via the movement destination carrier management device 20 to the movement source carrier management device. 10, when a one-time password permitting operation acceptance is received from the source carrier management device 10 via the destination carrier management device 20, “calling” is detected from the telephone number search prohibited by the operation prohibition unit 37. "Accepting operations", "operations for connecting to the Internet" and "operations for sending / receiving e-mail" are permitted. The operation permission unit 38 corresponds to “operation permission means” described in the claims.

  The voice processing unit 39 transmits and receives voice signals in voice communication with other telephone devices. To give a specific example, the voice processing unit 39 sends a voice signal from the own device to the connection destination via the communication control I / F unit 31 when a telephone connection is established with another device. Transmission or reception of an audio signal from the connection destination via the communication control I / F unit 31. Note that the signals transmitted and received here may be analog signals or digital signals.

[Processing by communication control system]
Next, processing by the communication control system will be described with reference to FIG. FIG. 8 is a sequence diagram illustrating the flow of processing in the communication control system according to the first embodiment.

  As shown in FIG. 8, when the operation prohibition unit 37 of the mobile phone 30 moves from the control of the source carrier management device 10 to the control of the destination carrier management device 20, The acceptance of operations for each function is prohibited (steps S801 and S802).

  Subsequently, the mobile phone 30 transmits a REGISTER signal in the SIP signal to the movement destination carrier management apparatus 20, and the movement destination carrier management apparatus 20 transfers the received REGISTER signal to the movement source carrier management apparatus 10 (step S803). .

  Then, the source carrier management apparatus 10 that has received the REGISTER signal generates a challenge value (step S804), and transmits the challenge value and the “401 Unauthorized signal” in the SIP signal to the destination carrier management apparatus 20. The destination carrier management apparatus 20 transmits the challenge value and the “401 Unauthorized signal” to the mobile phone 30 (step S805).

  Then, the mobile phone 30 generates a response value for the received challenge value (step S806), transmits the response value and the REGISTER signal to the movement destination carrier management apparatus 20, and the movement destination carrier management apparatus 20 Then, the response value and the REGISTER signal are transmitted to the source carrier management apparatus 10 (step S807).

  Then, the source carrier management apparatus 10 that has received the response value verifies whether or not the response value is generated based on the challenge value transmitted by the own apparatus (step S808), and the received response value is It is determined that the value is valid, and a “200 OK signal” in the SIP signal is transmitted to the destination carrier management apparatus 20, and the destination carrier management apparatus 20 transfers the received “200 OK signal” to the mobile phone 30. (Step S809).

  Then, the cellular phone 30 transmits a use permission request for permitting acceptance of operations to each function in the cellular phone 30 to the destination carrier management apparatus 20 together with the INVITE signal in the SIP signal (step S810), and the destination The carrier management device 20 adds various service information provided by the own device to the use permission request and transfers it to the source carrier management device 10 (step S811).

  Subsequently, when the source carrier management device 10 receives a use permission request from the mobile phone 30 via the destination carrier management device 20 that is the destination, the source carrier management device 10 stores the phone number of the mobile phone included in the use permission request. The mobile phone 30 authenticates that it is under the contract of its own device based on the fact that the service is added to the use permission request by the destination carrier management device 20 and the source carrier management device 10 The service information to be provided is compared with the service information to be provided, service information that can be provided to the mobile phone 30 after movement is determined, the determined service information is added to the one-time password (step S812), and "401 Unauthorized signal" At the same time, it is transmitted to the mobile phone 30 (step S813).

  Then, the cellular phone 30 permits operation acceptance to each function prohibited by the operation prohibition unit 37 with the received one-time password (step S814).

  When the mobile phone 30 that has received the operation in this way receives an input of the telephone number of the connection destination and a call operation from the user, the mobile phone 30 sends an INVITE signal as a connection request to the destination carrier management device 20 and the mobile phone 30. The data is transmitted to the connection destination telephone device via the former carrier management device 10 and the connection destination carrier management device (step S815).

  The connection destination carrier management apparatus that has received the connection permission “200 OK signal” from the connection destination telephone apparatus transmits the connection permission “200 OK signal” to the mobile phone 30 via the source carrier management apparatus 10 and the destination carrier management apparatus 20. (Step S816). Thereafter, the mobile phone 30 transmits an ACK signal to the connection destination carrier management device through the same route (step S817).

  Thus, the mobile phone 30 can communicate with the connection destination telephone device (step S818), and then receives the disconnection request “BYE signal” transmitted from the connection destination telephone device. Transmits the BYE signal to the mobile phone 30 through the same route (step S819), and the mobile phone 30 disconnects communication by responding to the BYE signal with a “200 OK signal” (step S820). ).

[Effects of Example 1]
Thus, according to the first embodiment, when the mobile phone 30 moves from the control of the source carrier management device 10 to the control of the destination carrier management device 20, each mobile phone 30 in the phone device from the user Sending a use permission request for prohibiting acceptance of operation to the function and requesting acceptance of operation to each function in the mobile phone 30 to the source carrier management device 10 via the destination carrier management device 20, When a one-time password permitting operation acceptance is received from the source carrier management device 10 via the destination carrier management device 20, the source carrier management device 10 permits operation acceptance to each prohibited function. When the use permission request is received from the mobile phone 30 via the destination carrier management device 20 as the destination, it is confirmed that the mobile phone 30 is under the contract of the own device. Then, when the one-time password is transmitted to the mobile phone 30 and the destination carrier management device 20 receives the use permission request from the mobile phone 30, the destination carrier management device 20 transfers the use permission request to the source carrier management device 10. When the one-time password is received from the source carrier management apparatus 10, the one-time password is transferred to the mobile phone 30, so that impersonation can be surely prevented when the carrier used by the mobile phone 30 is moved. As a result, it is possible to reliably manage the mobile phone 30 that has moved the carrier.

  For example, when the mobile phone 30 moves the carrier, the source carrier management apparatus 10 transmits an operation permission (one-time password) only to the mobile phone 30 under the contract, so that the mobile phone 30 uses it. When moving the carrier, it is possible to reliably prevent spoofing. Further, the mobile phone 30 needs to communicate with the source carrier management device 10 in order to release the prohibition of operation, and receives the operation permission from the source carrier management device 10, so that the mobile phone 30 is connected to another phone device. However, the connection is made via the source carrier management apparatus 10, and the source carrier management apparatus 10 can reliably manage the mobile phone 30 that has moved the carrier.

  Further, according to the first embodiment, when the destination carrier management device 20 transfers the use permission request received from the mobile phone 30 to the source carrier management device 10, the destination carrier management device 20 provides various types of When the service information is added to the use permission request and transferred, the source carrier management apparatus 10 receives the use permission request from the destination carrier management apparatus 20 and is added to the use permission request by the destination carrier management apparatus 20. Service information provided by the source carrier management device 10 is compared to determine service information that can be provided to the mobile phone 30 after movement, and the determined service information is used as a one-time password. The destination carrier management device 20 adds the service information determined by the source carrier management device 10 to the mobile phone. Based on, and controls the communication of the mobile phone 30, mobile source carrier management apparatus 10, it is possible to reliably manage the telephone apparatus to move the carrier.

  For example, when the service provided by the destination carrier management device 20 is different from the service provided by the source carrier management device 10, the destination carrier management device 20 uses the service provided by the source carrier management device 10 as follows: Since the communication of the mobile phone 30 is controlled, it is possible to prevent the mobile phone 30 from moving a carrier and using a service higher than the original contract. As a result, the source carrier management device 20 has moved the carrier. The mobile phone 30 can be reliably managed.

  By the way, in the first embodiment, the case where the mobile phone permits the operation reception of various functions in the mobile phone when the one-time password is received in response to the transmitted use permission request has been described. Without limitation, when a mobile phone receives a one-time password in response to a use permission request, it permits operation acceptance to other functions other than the call function among the functions of the mobile phone, and sends a call permission response May be permitted when the mobile station management device receives the message.

  Therefore, in the second embodiment, referring to FIG. 9, when the mobile phone receives a one-time password in response to the use permission request, the mobile phone accepts operations for other functions other than the calling function among the functions of the mobile phone. A case where the call function is permitted when the call permission response is received from the source carrier management apparatus will be described. In the second embodiment, the flow of processing and effects in the communication control system according to the second embodiment will be described.

[Processing by communication control system]
The processing by the communication control system will be described with reference to FIG. FIG. 9 is a sequence diagram illustrating the flow of processing in the communication control system according to the second embodiment.

  As shown in FIG. 9, from step S901 to step S909 until the mobile phone transmits a REGISTER signal, receives a challenge value, transmits a response value, and receives a 200 OK signal from the source carrier management device. This process is the same as the process in steps S801 to S809 described in the first embodiment, and thus detailed description thereof is omitted here.

  Then, the mobile phone transmits a use permission request for permitting operation acceptance to each function in the mobile phone to the destination carrier management device together with the INVITE signal in the SIP signal (step S910), and the destination carrier management device Adds various service information provided by its own device to the use permission request and transfers it to the source carrier management device (step S911).

  Subsequently, the movement source carrier management device stores the telephone number of the mobile phone included in the use permission request when the use permission request is received from the mobile phone via the movement destination carrier management device that is the movement destination. On the basis of this, after authenticating that the mobile phone is under the contract of the own device, the service information added to the use permission request by the destination carrier management device, the service information provided by the source carrier management device, Are compared, the service information that can be provided to the mobile phone 30 after moving is determined, and the determined service information is added to the “one-time password 1” that permits operation acceptance to other functions except the transmission function. (Step S912), together with the “401 Unauthorized signal”, is transmitted to the mobile phone (Step S913).

  Then, the mobile phone permits operation acceptance to other functions except the call function by the received “one-time password 1” (step S914).

  When the mobile phone that has received the operation in this way receives an input operation of the telephone number of the connection destination from the user, it sends an INVITE signal that is a connection request to the destination carrier management device and the source carrier management device. Is transmitted to the connection destination telephone device via the connection destination carrier management device (step S915).

  The connection destination carrier management apparatus that has received the connection permission “200 OK signal” from the connection destination telephone apparatus transmits the connection permission “200 OK signal” to the movement source carrier management apparatus (step S916). Then, “one-time password 2” and “200 OK signal” permitting transmission are transmitted to the mobile phone via the destination carrier management apparatus (step S917). Thereafter, when the mobile phone receives a call permission response from the source carrier management device via the destination carrier management device, the mobile phone permits the prohibited call function (step S918).

  The subsequent processing from step S919 to step S922 until communication is established and disconnected between the mobile phone and the connected telephone number is the same as the processing from step S817 to step S820 described in the first embodiment. Since it is a process, the detailed description is abbreviate | omitted here.

  As described above, according to the second embodiment, when the source carrier management apparatus receives a use permission request from the mobile phone via the destination carrier management apparatus, the function “other than the call function in the mobile phone” "One-time password 1" is transmitted to the mobile phone, and when a call permission request for permitting outgoing calls to other telephone devices is received from the mobile phone via the destination carrier management device, the outgoing call is permitted. When the “one-time password 2” is transmitted to the mobile phone and the destination carrier management device receives the use permission request from the mobile phone, the destination carrier management device transfers the use permission request to the source carrier management device, and manages the source carrier. When “One Time Password 1” is received from the device, the “One Time Password 1” is transferred to the mobile phone, and a call permission request is received from the mobile phone. The call permission request is transferred to the source carrier management device, and when the “one time password 2” is received from the source carrier management device, the “one time password 2” is transferred to the mobile phone. When the telephone transmits a use permission request to the source carrier management device via the destination carrier management device and receives “one-time password 1” from the source carrier management device via the destination carrier management device. The operation acceptance to other functions excluding the transmission function among the prohibited functions is permitted, and a transmission permission request is transmitted to the source carrier management apparatus via the destination carrier management apparatus, and “one-time password 2” is transmitted. Is received from the source carrier management device via the destination carrier management device, the prohibited calling function is permitted, which makes it even more robust. Results that can be prevented, it is possible to increase the security.

  For example, by using two one-time passwords, it is possible to implement stronger security measures, and even if one of the passwords is stolen by a malicious third party, a transmission that generates a fee In addition, since it is impossible to connect to the Internet, it is possible to strongly prevent spoofing by spoofing a one-time password. As a result, it is possible to increase security.

  Although the embodiments of the present invention have been described so far, the present invention may be implemented in various different forms other than the embodiments described above. Therefore, as shown below, (1) encryption of use permission request and use permission response, (2) electronic signature, (3) prohibition of operation acceptance after connection is completed, (4) addition of settlement information, (5) use A description will be given of different embodiments, each of which is divided into (8) programs, such as (6) application to communication services other than telephone communication (voice communication), (7) system configuration, etc.

(1) Encryption of use permission request and use permission response For example, in the first and second embodiments, the mobile phone transmits a use permission request to the source carrier management apparatus via the destination carrier management apparatus without encryption. In the above description, the source carrier management device transmits the use permission response to the mobile phone via the destination carrier management device without encryption. However, the present invention is not limited to this, The telephone transmits the encrypted use permission request to the source carrier management apparatus via the destination carrier management apparatus, and the source carrier management apparatus carries the encrypted use permission response via the destination carrier management apparatus. You may make it transmit to a telephone.

  In this way, it is possible to manage the telephone device that has moved the carrier while maintaining higher security. For example, when communication is performed using the SIP protocol, the telephone device encrypts the INVITE signal using an encryption key and an encryption method shared with the first management device (source carrier management device) and permits use. Since it transmits as a request and the first management device (source carrier management device) encrypts and transmits a use permission response to the telephone device, the second management device (movement destination carrier management device) and other devices As a result, it is possible to manage the telephone device (mobile phone) that has moved the carrier while maintaining higher security.

(2) Electronic Signature The mobile phone may transmit the use permission request and the electronic signature signed by the mobile phone to the source carrier management device via the destination carrier management device. Specifically, the mobile phone transmits the use permission request and the electronic signature signed by the mobile phone to the source carrier management device via the destination carrier management device, and the source carrier management device transmits the request from the mobile phone. When the use permission request and the electronic signature are received via the destination carrier management apparatus, a use permission response is transmitted to the mobile phone on condition that the electronic signature is valid.

  By doing in this way, compared with the case where a communication apparatus does not transmit an electronic signature with a user authentication request | requirement, it is possible to manage reliably the communication apparatus which moved the carrier in a movement origin carrier management apparatus. For example, if the mobile phone does not send an electronic signature, the source carrier management device cannot determine whether the received use permission request is actually sent from a legitimate (contracted) mobile phone. When the electronic signature is transmitted, the source carrier management device authenticates that the electronic signature is valid, and the received use permission request is transmitted from a legitimate (contracted) mobile phone. As a result of the determination, the source carrier management apparatus can reliably manage the communication apparatus that has moved the carrier.

(3) Operation acceptance prohibited after connection is completed In the first and second embodiments, when the mobile phone disconnects communication with another telephone device, the operation acceptance from the user is not prohibited again after that. The case where communication can be performed without the need to obtain a one-time password has been described. However, the present invention is not limited to this, and when a mobile phone disconnects communication with another telephone device, You may make it prohibit operation reception to each function again.

  In this way, it is possible to manage a telephone device that has moved more firmly. For example, since a mobile phone is prohibited from accepting operations when the call ends, each time it is necessary to make a call, it is necessary to send a use permission request to allow operation acceptance. It is possible to manage a telephone device that has moved more firmly than when the use permission request is once transmitted to the management device and operation acceptance is permitted.

(4) Addition of settlement information The source carrier management device is used by the mobile phone under the control of the destination carrier management device when the communication between the mobile phone that has moved the carrier and the other telephone device is completed. A communication fee may be added to the communication disconnection signal and transmitted to the destination carrier management apparatus. In this way, the communication charge used by the mobile phone can be shared in real time between the source carrier management device and the destination carrier management device, resulting in minimal billing error based on the communication fee. It is possible to suppress it.

(5) Timing for transmitting use permission request In the first and second embodiments, the mobile phone transmits the use permission request together with the INVITE signal after transmitting the REGISTER signal in the SIP signal. The invention is not limited to this, and the mobile phone transmits a use permission request together with the REGISTER signal (steps S803 and S903) in the first SIP signal, and permits use together with the REGISTER signal that transmits a response value. The request may be transmitted, and the timing for transmitting the use permission request may be any. Furthermore, these signals may be transmitted after being encrypted.

(6) Application to communication services other than telephone communication (voice communication) In Embodiments 1 and 2, when the present invention is applied to telephone communication (voice communication) when a mobile phone moves from carrier to carrier, that is, The case where the carrier management apparatus before movement manages the mobile phone has been described, but the present invention is not limited to this, and is performed between outgoing and incoming calls such as video communication, chat communication, and file sharing in the communication apparatus. The present invention can be applied to any communication service as long as it is a communication service.

(7) System configuration etc. Further, among the processes described in the present embodiment, all (for example, telephone call processing and incoming call processing) or a part of the processes described as being automatically performed are manually performed. Alternatively, all or a part of the processing described as being performed manually (for example, carrier selection processing by the user) or a part thereof can be automatically performed by a known method. In addition, the processing procedures, control procedures, specific names, and information including various data and parameters (for example, FIGS. 3 to 6) shown in the above documents and drawings are arbitrary unless otherwise specified. Can be changed.

  Further, each component of each illustrated apparatus is functionally conceptual, and does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. For example, the operation prohibition unit and the operation permission unit may be integrated, or the connection management unit may be distributed to the voice connection unit and the Internet connection unit. Further, all or any part of each processing function performed in each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware by wired logic.

(8) Program The communication control method described in the present embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program can be distributed via a network such as the Internet. The program can also be executed by being recorded on a computer-readable recording medium such as a hard disk, a flexible disk (FD), a CD-ROM, an MO, and a DVD and being read from the recording medium by the computer.

  As described above, the communication control system, the telephone device, and the communication control method according to the present invention include a telephone device used by a user and a first management device that manages various communications of the telephone device under a contract with the telephone device. It is composed of a second management device that manages other telephone devices in the same manner, and the telephone device is moved under the control of the first management device from the control of the first management device by roaming or user operation. In some cases, it is useful to connect a telephone device and another telephone device so that they can communicate with each other under the contract of the first management device, and particularly when moving a carrier used by the telephone device. It is suitable for reliably preventing spoofing and for reliably managing the telephone device that has moved the carrier.

1 is a system configuration diagram illustrating an overall configuration of a communication control system according to Embodiment 1. FIG. It is a block diagram which shows the structure of the movement origin carrier management apparatus and movement destination carrier management apparatus in the communication control system which concerns on Example 1. FIG. It is a figure which shows the structural example of the information memorize | stored in registration telephone DB in a movement origin carrier management apparatus. It is a figure which shows the structural example of the information memorize | stored in service information DB in a movement origin carrier management apparatus. It is a figure which shows the structural example of the information memorize | stored in registration telephone DB in a movement destination carrier management apparatus. It is a figure which shows the structural example of the information memorize | stored in service information DB in a movement destination carrier management apparatus. 1 is a block diagram illustrating a configuration of a mobile phone in a communication control system according to Embodiment 1. FIG. FIG. 6 is a sequence diagram illustrating a processing flow in the communication control system according to the first embodiment. FIG. 10 is a sequence diagram illustrating a processing flow in the communication control system according to the second embodiment.

Explanation of symbols

10 Source Carrier Management Device 11 Communication Control I / F Unit 12 Storage Unit 13 Registered Telephone DB
14 Service information DB
DESCRIPTION OF SYMBOLS 15 Control part 16 Connection management part 17 Use permission transmission part 20 Destination carrier management apparatus 21 Communication control I / F part 22 Storage part 23 Registered telephone DB
24 Service information DB
25 control unit 26 connection management unit 27 use transfer unit 28 service control unit 30 mobile phone 31 communication control I / F unit 32 input reception unit 33 storage unit 34 communication information DB
35 Control unit 36 Communication connection unit 37 Operation prohibition unit 38 Operation permission unit 39 Audio processing unit

Claims (10)

It is composed of a communication device used by a user and a first management device that manages various communications of the communication device under a contract with the communication device and a second management device that similarly manages other communication devices, When the communication device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the contract is under the contract of the first management device. A communication control system for connecting the communication device and another communication device so that they can communicate with each other,
The communication device
An operation prohibiting means for prohibiting operation acceptance of each function in the communication device from the user when moving from the control of the first management device to the control of the second management device;
A use permission response for permitting the acceptance of the operation by transmitting a use permission request for permitting the acceptance of an operation to each function in the communication device to the first management device via the second management device. When receiving from the first management device via the second management device, the operation permission means for permitting operation acceptance to each function prohibited by the operation prohibition means,
The first management device is
When the use permission request is received from the communication device via the second management device, the communication device authenticates that the communication device is under a contract of the device, and the communication device A use permission sending means for sending a use permission response;
The second management device is
When the use permission request is received from the communication device, the use permission request is transferred to the first management device, and when the use permission response is received from the first management device, the use permission response is transmitted. Use permission transfer means for transferring the information to the communication device ,
The usage permission transfer means of the second management device transfers various service information provided by the second management device when transferring the usage permission request received from the communication device to the first management device. Add it to the license request and forward it,
The use permission transmission means of the first management apparatus is added to the use permission request by the use permission transfer means of the second management apparatus when the use permission request is received from the second management apparatus. Service information and service information provided by the first management device are compared to determine service information that can be provided to the communication device after movement, and the determined service information is added to the use permission response. To the communication device,
The second management apparatus further includes service control means for controlling communication of the communication apparatus based on service information determined by the use permission transmission means of the first management apparatus. Communication control system. It is composed of a communication device used by a user and a first management device that manages various communications of the communication device under a contract with the communication device and a second management device that similarly manages other communication devices, When the communication device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the contract is under the contract of the first management device. A communication control system for connecting the communication device and another communication device so that they can communicate with each other,
The communication device
An operation prohibiting means for prohibiting operation acceptance of each function in the communication device from the user when moving from the control of the first management device to the control of the second management device;
A use permission response for permitting the acceptance of the operation by transmitting a use permission request for permitting the acceptance of an operation to each function in the communication device to the first management device via the second management device. When receiving from the first management device via the second management device, the operation permission means for permitting operation acceptance to each function prohibited by the operation prohibition means,
The first management device is
When the use permission request is received from the communication device via the second management device, the communication device authenticates that the communication device is under a contract of the device, and the communication device A use permission sending means for sending a use permission response;
The second management device is
When the use permission request is received from the communication device, the use permission request is transferred to the first management device, and when the use permission response is received from the first management device, the use permission response is transmitted. Use permission transfer means for transferring the information to the communication device,
The use permission transmission means of the first management device receives use permission requests from the communication device via the second management device, and permits use of functions other than the transmission function in the communication device. A response is transmitted to the communication device, and the transmission is permitted when a transmission permission request requesting permission to be transmitted to another communication device is received from the communication device via the second management device. A transmission permission response is transmitted to the communication device;
When the usage permission transfer means of the second management device receives the usage permission request from the communication device, the usage permission transfer means transfers the usage permission request to the first management device, and from the first management device, the When the use permission response is received, the use permission response is transferred to the communication device, and when the call permission request is received from the communication device, the call permission request is transferred to the first management device. And when the call permission response is received from the first management device, the call permission response is transferred to the communication device,
The operation permission means of the communication device transmits the use permission request to the first management device via the second management device, and sends the use permission response to the first management device via the second management device. When receiving from one management device, permit operation acceptance to other functions excluding the transmission function among the functions prohibited by the operation prohibiting means, and send the transmission permission request via the second management device When the transmission permission response is received from the first management device via the second management device, the transmission function prohibited by the operation prohibiting unit is permitted. communication control system that is characterized in that. It is composed of a communication device used by a user and a first management device that manages various communications of the communication device under a contract with the communication device and a second management device that similarly manages other communication devices, When the communication device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the contract is under the contract of the first management device. A communication control system for connecting the communication device and another communication device so that they can communicate with each other,
The communication device
An operation prohibiting means for prohibiting operation acceptance of each function in the communication device from the user when moving from the control of the first management device to the control of the second management device;
A use permission response for permitting the acceptance of the operation by transmitting a use permission request for permitting the acceptance of an operation to each function in the communication device to the first management device via the second management device. When receiving from the first management device via the second management device, the operation permission means for permitting operation acceptance to each function prohibited by the operation prohibition means,
The first management device is
When the use permission request is received from the communication device via the second management device, the communication device authenticates that the communication device is under a contract of the device, and the communication device A use permission sending means for sending a use permission response;
The second management device is
When the use permission request is received from the communication device, the use permission request is transferred to the first management device, and when the use permission response is received from the first management device, the use permission response is transmitted. Use permission transfer means for transferring the information to the communication device,
The operation permission means of the communication device encrypts the use permission request and transmits it to the first management device via the second management device,
The usage permission transmission means of the first management device decrypts the encrypted usage permission request when receiving the encrypted usage permission request from the communication device via the second management device. recognizing Te, communication control systems that characterized in that the use permission response encrypted and transmitted to the communication device. It is composed of a communication device used by a user and a first management device that manages various communications of the communication device under a contract with the communication device and a second management device that similarly manages other communication devices, When the communication device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the contract is under the contract of the first management device. A communication control system for connecting the communication device and another communication device so that they can communicate with each other,
The communication device
An operation prohibiting means for prohibiting operation acceptance of each function in the communication device from the user when moving from the control of the first management device to the control of the second management device;
A use permission response for permitting the acceptance of the operation by transmitting a use permission request for permitting the acceptance of an operation to each function in the communication device to the first management device via the second management device. When receiving from the first management device via the second management device, the operation permission means for permitting operation acceptance to each function prohibited by the operation prohibition means,
The first management device is
When the use permission request is received from the communication device via the second management device, the communication device authenticates that the communication device is under a contract of the device, and the communication device A use permission sending means for sending a use permission response;
The second management device is
When the use permission request is received from the communication device, the use permission request is transferred to the first management device, and when the use permission response is received from the first management device, the use permission response is transmitted. Use permission transfer means for transferring the information to the communication device,
The operation permission means of the communication device transmits the use permission request and the electronic signature signed by the communication device to the first management device via the second management device,
The use permission transmitting means of the first management device receives the use permission request and the electronic signature from the communication device via the second management device, provided that the electronic signature is valid. , communication control systems that wherein transmitting the use permission response to the communication device. The use permission transmission means of the first management device receives use permission requests from the communication device via the second management device, and permits use of functions other than the transmission function in the communication device. A response is transmitted to the communication device, and the transmission is permitted when a transmission permission request requesting permission to be transmitted to another communication device is received from the communication device via the second management device. A transmission permission response is transmitted to the communication device;
When the usage permission transfer means of the second management device receives the usage permission request from the communication device, the usage permission transfer means transfers the usage permission request to the first management device, and from the first management device, the When the use permission response is received, the use permission response is transferred to the communication device, and when the call permission request is received from the communication device, the call permission request is transferred to the first management device. And when the call permission response is received from the first management device, the call permission response is transferred to the communication device,
The operation permission means of the communication device transmits the use permission request to the first management device via the second management device, and sends the use permission response to the first management device via the second management device. When receiving from one management device, permit operation acceptance to other functions excluding the transmission function among the functions prohibited by the operation prohibiting means, and send the transmission permission request via the second management device When the transmission permission response is received from the first management device via the second management device, the transmission function prohibited by the operation prohibiting unit is permitted. The communication control system according to claim 1. The operation permission means of the communication device encrypts the use permission request and transmits it to the first management device via the second management device,
The usage permission transmission means of the first management device decrypts the encrypted usage permission request when receiving the encrypted usage permission request from the communication device via the second management device. The communication control system according to claim 1, wherein the use permission response is encrypted and transmitted to the communication device. The operation permission means of the communication device transmits the use permission request and the electronic signature signed by the communication device to the first management device via the second management device,
The use permission transmitting means of the first management device receives the use permission request and the electronic signature from the communication device via the second management device, provided that the electronic signature is valid. The communication control system according to claim 1, wherein the use permission response is transmitted to the communication device. When the communication between the communication device and another communication device is completed, the operation prohibiting unit of the communication device again prohibits operation acceptance of each function in the communication device from the user permitted by the operation permission unit. The communication control system according to any one of claims 1 to 7 , wherein: Consists of a communication device used by a user, a first management device that manages the various communications of the communication device by placing the communication device under a contract, and a second management device that similarly manages other communication devices In the communication control system, when the user moves from the control of the first management device to the control of the second management device by roaming or the user's operation, the one under the contract of the first management device And the communication device for connecting communication with another communication device,
An operation prohibiting means for prohibiting operation acceptance of each function in the communication device from the user when moving from the control of the first management device to the control of the second management device;
A use permission request for requesting permission to accept an operation for each function in the communication device is transferred so that various service information provided by the second management device is added to the use permission request and transferred . A usage permission response that is transmitted to the first management device via the second management device and permits the acceptance of the operation, the service information added to the usage permission request by the first management device, and the first Service information provided by the management device is determined, service information that can be provided to the communication device after movement is determined, and the determined service information is added to the use permission response, whereby the second when received from the management device the first management apparatus via a communication, characterized in that an operation permission means for permitting the operation acceptance for each function is prohibited by the operation prohibition means Location. It is composed of a communication device used by a user and a first management device that manages various communications of the communication device under a contract with the communication device and a second management device that similarly manages other communication devices, When the communication device is moved from the control of the first management device to the control of the second management device by roaming or the user's operation, the contract is under the contract of the first management device. A communication control method suitable for connecting the communication device and another communication device so that they can communicate with each other,
The communication device
An operation prohibiting step for prohibiting operation acceptance of each function in the telephone device from the user when moving from the control of the first management device to the control of the second management device;
A use permission response for permitting the acceptance of the operation by transmitting a use permission request for permitting the acceptance of an operation to each function in the communication device to the first management device via the second management device. When receiving from the first management device via the second management device, an operation permission step for allowing operation acceptance to each function prohibited by the operation prohibition step,
The first management device is
When the use permission request is received from the communication device via the second management device, the communication device authenticates that the communication device is under a contract of the device, and the communication device A use permission sending step for sending a use permission response;
The second management device is
When the use permission request is received from the communication device, the use permission request is transferred to the first management device, and when the use permission response is received from the first management device, the use permission response is transmitted. A permission transfer step for transferring the communication device to the communication device ,
The use permission transfer step of the second management device, when transferring the use permission request received from the communication device to the first management device, various service information provided by the second management device Add it to the license request and forward it,
The use permission transmission step of the first management device is added to the use permission request by the use permission transfer step of the second management device when the use permission request is received from the second management device. Service information and service information provided by the first management device are compared to determine service information that can be provided to the communication device after movement, and the determined service information is added to the use permission response. To the communication device,
The second management apparatus, based on the service information determined by the use permission transmission step of the first management apparatus, characterized in that it further contains do a service control step of controlling the communication of the communication device Communication control method.

Images