JP5277988B2 - Wireless mobile terminal device security setting method and wireless mobile terminal device - Google Patents

Description

  The present invention relates to a security setting method for a wireless portable terminal device and a wireless portable terminal device, and more particularly to a security setting method and a wireless portable terminal device for a wireless portable terminal device such as a cellular phone.

  A wireless portable terminal device such as a cellular phone is a highly convenient device that can be carried by a user and communicate at a desired location and time, but from the standpoint of portability and increasingly smaller size in recent years. There is a problem that it is easy to lose. The lost wireless portable terminal device requires the security of the wireless portable terminal device because personal information stored therein may be stolen or misused by a third party. The wireless portable terminal device can be used in a wireless communication system such as a wireless local area network (LAN) or Bluetooth, and wireless interception by a third party becomes a problem in the wireless communication system.

  Therefore, in Patent Document 1, a wireless mobile terminal device creates a data encryption key when wireless communication is performed using device-specific information that the device itself has, and by setting the encryption key, interception by a third party is performed. A wireless portable terminal device that maintains security to prevent is disclosed.

JP 2003-110543 A

  However, if the wireless portable terminal device is lost, personal information stored inside the wireless portable terminal device may be read by a third party using a personal computer, and may be stolen or misused. In this case, since encryption communication is not performed, the method described in Patent Document 1 cannot be used. Even if a password is set, there is only a simple password that does not depend on the personal computer connected to the password, and security for personal computer connection is insufficient.

  The present invention has been made in view of the above points, and is a combination of an authentication password calculated using one connection password, the individual computer number of the connection destination computer, and the individual number of the device itself, and the computer unique number. An object of the present invention is to provide a wireless mobile terminal device security setting method and a wireless mobile terminal device that can identify a connection destination computer and improve security.

In order to achieve the above object, a security setting method for a wireless portable terminal device according to the present invention includes a first individual number that is an identification number unique to the wireless portable terminal device at a manufacturing stage in a storage unit of the wireless portable terminal device A connection step for connecting the wireless portable terminal device and the computer at the time of initial use in which a password for connection is stored in advance and a unique identification number of the computer is not stored, and the computer connected in the connection step An acquisition step in which the wireless portable terminal device receives and acquires a second individual number that is an identification number unique to the computer from the computer, and input connection input to the wireless portable terminal device that requests input of a connection password a determining step of determining whether or not to match the prestored stored connection password in the password is serial憶部, to decision step When the match determination result is obtained, the first individual number, and the second individual number, a calculation step of calculating an authentication password from the input connection password, computed authentication password and a second The security setting at the time of initial use is performed by the storage step of storing the combination with the individual number in the storage unit of the wireless portable terminal device.

To achieve the above object, a wireless portable terminal device of the present invention, a storage unit and the first individual number which is unique identification number, and a connection password is at least stored in the manufacturing stage, An acquisition unit that receives and acquires a second individual number that is an identification number unique to the computer from the connected computer, an input connection password request unit that requests input of a connection password, and a computer in the storage unit Whether or not the input connection password input based on the input request by the input connection password request means matches the storage connection password stored in the storage unit at the initial use when the unique identification number is not stored determination means for determining, when a match determination result is obtained by the determining means, the first individual number, and the second individual number, password input connection A calculating means for calculating an authentication password and a de, a combination of the calculated authentication password second individual number by calculation means, characterized by having a storage means for storing in the storage unit.

  According to the present invention, the connection destination computer is identified by a combination of the authentication password calculated using one connection password, the individual number of the connection destination computer, and the individual number of the device itself and the unique number of the computer. Therefore, security when connecting to a computer can be improved.

It is a block diagram explaining one Embodiment of the security setting method of the wireless portable terminal device of this invention. It is a flowchart for operation | movement description at the time of normal use of FIG. It is a flowchart for operation | movement description at the time of the initial use of FIG. FIG. 2 is a flowchart for explaining an operation at the time of deletion in FIG. 1. FIG.

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram illustrating an embodiment of a security setting method for a wireless portable terminal device according to the present invention.

  In the figure, a wireless portable terminal 10 of the present embodiment is roughly composed of a control unit 11, a wireless unit 12, an input unit 13, a display unit 14, and a database unit 15, and is a mobile phone, for example. The control unit 11 has a central processing unit (CPU) and comprehensively controls the entire terminal. The wireless unit 12 performs wireless communication with the nearest wireless base station by a known method. The input unit 13 inputs various information. The display unit 14 displays characters, figures, symbols, images, and the like under the control of the control unit 11. The database unit 15 stores a list of combinations of authentication passwords and personal computer 20 individual numbers, which are information unique to the present embodiment, in addition to the operation program of the control unit 11 and telephone directory data.

  A personal computer (hereinafter referred to as a PC) 20 is connected to the wireless portable terminal 10 via a wired cable 40 and transmits its individual number and the like to the wireless portable terminal 10. Note that the wireless portable terminal 10 and the PC 20 are individually owned by users such as individuals and companies.

  On the other hand, the database 30 is owned by a telecommunications carrier and is a database common to a large number of subscribers. The database 30 has a storage unit for each wireless portable terminal, and the individual number of the PC permitted to connect to the storage unit. Remember the list. The wireless portable terminal 10 and the database 30 perform secure wireless communication such as SSH (Secure Shell) communication that performs data encryption / decryption using a common key method and a public key method.

  Next, the operation of the present embodiment will be described with reference to the flowcharts of FIGS.

  First, the operation during normal use will be described with reference to the flowchart of FIG. First, the wireless portable terminal 10 is connected to the PC 20 by the wired cable 40 (step S1), and receives the individual number of the PC 20 (step S2). The individual number of the PC 20 includes, for example, a MAC (Media Access Control) address. Subsequently, the wireless portable terminal 10 confirms whether the received individual number matches the list stored in the database unit 15 (step S3).

  When the wireless portable terminal 10 is used for the first time, the individual numbers of the PC 20 are not stored in the database unit 15 as a list. Will save the list. On the other hand, when it is determined that the received individual number matches the list stored in the database unit 15, the control unit 11 of the wireless portable terminal 10 performs a display requesting input of a connection password on the display unit 14. Thereby, the user operates the input unit 13 to input the connection password (step S4). Note that there is only one connection password for one wireless portable terminal 10. In addition, the connection password is stored in the database unit 15 in the same way as the individual number at the manufacturing stage of the wireless portable terminal 10, but the user can arbitrarily change it after the initial use described later. It shall be possible.

  Next, the control unit 11 of the wireless portable terminal 10 uses the individual number that is its own unique identification number, the individual number of the PC 20 received in step S2, and the connection password input in step S4. An authentication password is calculated (step S5). Note that the individual number of the wireless mobile terminal 10 includes, for example, IMEI (International Mobile Equipment Identity). By this step S5, an authentication password unique to the wireless portable terminal 10 is calculated.

  Subsequently, the control unit 11 of the wireless portable terminal 10 determines whether or not the combination of the authentication password and the individual number of the PC 20 is in the list in the database unit 15 (step S6). A combination of the authentication password and the individual number of the PC 20 is registered in a list in the database unit 15 at the time of initial use to be described later. Therefore, when the user himself / herself is used for the second and subsequent times, it is determined in step S6 that the combination of the authentication password and the individual number of the PC 20 is in the list in the database unit 15.

  And the control part 11 of the wireless portable terminal 10 permits the connection with PC20, when it determines with the combination of the password for authentication and the individual number of PC20 being in the list | wrist in the database part 15 by step S6. (Step S7). As a result, application examples such as storing various information created by the PC 20 to the wireless portable terminal 10 using the PC 20 can be considered, and the stored information in the database unit 15 can be browsed by the PC 20. .

  On the other hand, the control unit 11 of the wireless portable terminal 10 increments the value of the variable k by 1 when it is determined in step S6 that the combination of the authentication password and the individual number of the PC 20 is not in the list in the database unit 15. (Step S8), it is determined whether the value of the variable k after the increment is equal to or greater than a predetermined value (step S9). When it is determined in step S9 that the value of k is less than the predetermined value, the process returns to step S4 and starts again from the input of the connection password. On the other hand, when it is determined in step S9 that the value of k is equal to or greater than the predetermined value, the control unit 11 of the wireless portable terminal 10 does not permit connection with the PC 20 (step S10).

  For example, even if a third party other than the user of the wireless portable terminal 10 obtains the wireless portable terminal 10 by any method and tries to view the stored contents of the database unit 15 of the wireless portable terminal 10 using another PC, Since the third party does not know the password for connection and the individual numbers of the other PCs are also different from those of the PC 20, the predetermined number of times and inconsistencies occur continuously in steps S 6, S 8 and S 9. As a result, since the control unit 11 of the wireless portable terminal 10 does not permit connection with the PC, the stored contents of the database unit 15 cannot be browsed by the PC, and thus security can be ensured.

  Next, the operation at the time of initial use of the wireless portable terminal 10 will be described with reference to the flowchart of FIG. It is assumed that the processes of steps S1 and S2 in FIG. 2 are first performed during this initial use.

  First, the control unit 11 of the wireless portable terminal 10 displays on the display unit 14 a request for permitting the user to connect the PC 20 to the database 30, and whether there is a permission input by the user operating the input unit 13. Whether or not is monitored (step S21).

  When there is a permission input, the control unit 11 of the wireless portable terminal 10 causes the display unit 14 to display a request for input of a connection password (step S22). Thereby, when the user operates the input unit 13 to input the connection password, the control unit 11 of the wireless portable terminal 10 detects the input of the connection password (step S23), and the input connection password is previously set. It is determined whether it matches the connection password stored in the database unit 15 at the manufacturing stage (step S24).

  If the user is a legitimate user of the wireless portable terminal 10, the password for connection is known, so that a coincidence comparison result is obtained in step S24. If this coincidence comparison result is obtained, the control unit 11 of the wireless portable terminal 10 receives the individual number that is its own identification number, the individual number of the PC 20 received in step S2, and the input in step S23. An authentication password is calculated using the connection password from which the comparison result of coincidence is obtained (step S25). Then, the control unit 11 registers a list in which the authentication password calculated in step S25 is associated with the individual number of the PC 20 in the database unit 15 (step S26). As a result, a coincidence comparison result is obtained in step S3 during the second and subsequent normal use of the wireless portable terminal 10.

  Subsequently, the control unit 11 of the wireless portable terminal 10 accesses the database 30 via the wireless unit 12 and starts secure communication (step S27). Subsequently, the control unit 11 transmits the individual number of the PC 20 received in step S2 via the wireless unit 12 to the database 30 and registers it in the database 30 (step S28). This registration is performed in the storage unit assigned to the wireless portable terminal 10 in the database 30. Thereafter, the secure communication is terminated (step S29).

  On the other hand, if the comparison result that the password for connection input in step S23 does not match is obtained in step S24, the value of variable j is incremented by 1 (step S30), and the value of variable j after the increment is It is determined whether the value is equal to or greater than a predetermined value (step S31). If it is determined in step S31 that the value of j is less than the predetermined value, the process returns to step S22 and starts again from the connection password input request display.

  On the other hand, when it is determined in step S31 that the value of j is equal to or greater than the predetermined value, the control unit 11 of the wireless portable terminal 10 disallows access to the database 30 (step S32) and ends the process. As a result, if the predetermined number of times in step S30 and mismatches occur continuously, access from the wireless portable terminal 10 to the database 30 is not permitted, and as a result, the individual number of the PC 20 is not registered in the database 30. It will be.

  Thereby, for example, even if a third party other than the user of the wireless portable terminal 10 obtains the wireless portable terminal 10 by any method and tries to register the individual number of the PC used by the third party in the database 30, The three parties do not know the password for connection, and the number of times of the predetermined value and the disagreement continuously occur in steps S24, S30, S31, and S32. As a result, since the control unit 11 of the wireless portable terminal 10 does not permit access to the database 30, it is not possible to register the personal number of the PC in the database 30, and thus security can be ensured. .

  Note that the connection password can be changed to a value desired by the user before the second and subsequent normal use. In this case, the connection password after change is updated and registered in the database unit 15 and the authentication password calculated using the connection password after change, the individual number of the wireless portable terminal 10 and the individual number of the PC 20 is stored in the database. Update registration in the unit 15.

  Note that the processing in steps S25 and S26 may be executed after the processing in step S29.

  Next, the operation when deleting the individual number in the database 30 will be described with reference to the flowchart of FIG.

  The control unit 11 of the wireless portable terminal 10 first starts secure communication with the database 30 via the wireless unit 12 (step S41). Subsequently, the control unit 11 of the wireless portable terminal 10 deletes the individual number of the PC 20 registered in the database 30 (step S42). Then, the control unit 11 of the wireless portable terminal 10 deletes the combination of the authentication password registered in the database unit 15 and the individual number of the PC 20 (step S43). Thereafter, the wireless portable terminal 10 ends communication with the database 30.

  According to the wireless portable terminal 10 of the present embodiment described above, the authentication password depending on the PC 20 to be connected is calculated using one connection password, and the combination with the individual number of the PC 20 is stored in the database unit 15. Since the PC to be connected can be identified by the authentication password, the security function when connected to the PC can be improved.

  In addition, even if a third party other than a legitimate user of the wireless portable terminal 10 tries to register the personal number of his / her PC in the database 30, access to the database 30 is not permitted. Can prevent additional registration.

  Note that the connection method between the wireless portable terminal 10 and the PC 20 may be short-distance wireless communication (for example, Bluetooth) other than wired communication.

DESCRIPTION OF SYMBOLS 10 Wireless portable terminal 11 Control part 12 Wireless part 13 Input part 14 Display part 15 Database part 20 Personal computer (PC)
30 Database 40 Wired cable

Claims (10)

The storage unit of the wireless portable terminal device stores in advance a first individual number and a connection password, which are identification numbers unique to the wireless portable terminal device at the manufacturing stage, and a unique identification number of the computer. A connection step of connecting the wireless portable terminal device and the computer at the time of initial use which is not stored;
An acquisition step in which the wireless portable terminal device receives and acquires a second individual number that is an identification number unique to the computer from the computer connected in the connection step ;
A determining step input requesting whether the wireless portable terminal input connection password that has been input to the apparatus matches the prestored stored connection password to the SL憶部connection password,
When a matching determination result is obtained by the determination step, a calculation step of calculating an authentication password from the first individual number, the second individual number, and the input connection password;
Storing the calculated combination of the authentication password and the second individual number in the storage unit of the wireless portable terminal device;
A security setting method for a wireless portable terminal device, wherein security setting at the time of initial use is performed by The storage unit of the wireless portable terminal device stores in advance a first individual number and a connection password, which are identification numbers unique to the wireless portable terminal device at the manufacturing stage, and a unique identification number of the computer. A connection step of connecting the wireless portable terminal device and the computer at the time of initial use which is not stored;
An acquisition step in which the wireless portable terminal device receives and acquires a second individual number that is an identification number unique to the computer from the computer connected in the connection step ;
A determining step input requesting whether the wireless portable terminal input connection password that has been input to the apparatus matches the prestored stored connection password to the SL憶部connection password,
When a matching determination result is obtained by the determination step, a calculation step of calculating an authentication password from the first individual number, the second individual number, and the input connection password;
A storage step of storing the calculated combination of the authentication password and the second individual number in the storage unit of the wireless portable terminal device;
A registration step of accessing and registering the second individual number acquired in the acquisition step by accessing an external storage means connected to the wireless portable terminal device;
A non-permission step of disabling access to the external storage means by the wireless portable terminal device when a determination result of inconsistency is continuously obtained a predetermined number of times or more by the determination step;
A security setting method for a wireless portable terminal device, wherein security setting at the time of initial use is performed by In the storage unit of the wireless portable terminal device, the first individual number and the connection password, which are identification numbers unique to the wireless portable terminal device, are stored in advance at the manufacturing stage, and the individual number of the computer is stored. A connection step of connecting the wireless portable terminal device and the computer during normal use,
An individual number acquisition step in which the wireless portable terminal device receives and acquires a second individual number that is an identification number unique to the computer from the computer connected in the connection step ;
A first determination step of determining whether or not the second individual number acquired in the individual number acquisition step is stored in the storage unit of the wireless portable terminal device;
It said first determination when a judgment result that the second individual number is stored is obtained in step has a first input requesting step of requesting the input to the radio portable terminal device of the connection password When,
A first calculation step of calculating an authentication password from the input connection password input in the first input request step and the first and second individual numbers;
A second determination step of determining whether or not the combination of the calculated password for authentication and the second individual number is stored in the storage unit of the wireless portable terminal device;
When it is determined in the second determination step that the combination is stored in the storage unit of the wireless portable terminal device, the contents of the storage unit of the wireless portable terminal device are changed to the second A permission step of allowing a connection of the individual number that can be viewed by the computer;
When the determination result that the combination is not stored in the storage unit of the wireless portable terminal device is obtained by the second determination step, the first input request step, the first calculation step, The second determination step is executed again, and the combination is not stored in the storage unit of the wireless portable terminal device by the second determination step even when the number of executions reaches a predetermined number continuously. And a non-permission step of disabling a connection that allows the computer of the second individual number to view the contents of the storage unit of the wireless portable terminal device. A security setting method for a wireless portable terminal device. When the determination result that the second individual number is not stored is obtained in the first determination step , the connection password to the wireless portable terminal device is input when there is a connection permission input with the computer. A second input request step for requesting input;
Determining whether or not the input connection password input by the input request in the second input request step matches the storage connection password stored in the storage unit of the wireless portable terminal device; A determination step;
When a coincidence determination result is obtained in the third determination step, the first connection number input by the input request of the first individual number, the second individual number, and the second input request step A second calculation step of calculating an authentication password from the password;
A storage step of storing the combination of the authentication password and the second individual number calculated in the second calculation step in the storage unit of the wireless portable terminal device. Item 4. A security setting method for a wireless portable terminal device according to Item 3. A change step of changing the storage connection password stored in the storage unit to an arbitrary value and updating and registering in the storage unit of the wireless portable terminal device;
In the second calculation step, the input connection password input by the input request in the second input request step, which matches the storage connection password changed in the change step, and the first individual 5. The security setting method for a wireless portable terminal device according to claim 4, wherein the authentication password is calculated from a number and the second individual number. A first individual number which is unique identification number, a storage unit against the connection password is at least stored in the manufacturing stage,
Obtaining means for receiving and obtaining a second individual number, which is an identification number unique to the computer, from the connected computer;
An input connection password request means for requesting input of a connection password;
Initial use during a unique identification number of the computer in the storage unit is not stored, the memory input connection password entered on the basis of the input request by the input connection password request means stored in the storage unit connected Determining means for determining whether or not the password matches,
When a determination result of coincidence is obtained by the determination means, calculation means for calculating an authentication password from the first individual number, the second individual number, and the input connection password;
A wireless portable terminal device comprising: storage means for storing a combination of the authentication password calculated by the calculation means and the second individual number in the storage unit. A first individual number which is unique identification number, a storage unit against the connection password is at least stored in the manufacturing stage,
Obtaining means for receiving and obtaining a second individual number, which is an identification number unique to the computer, from the connected computer;
An input connection password request means for requesting input of a connection password;
Initial use during a unique identification number of the computer in the storage unit is not stored, the memory input connection password entered on the basis of the input request by the input connection password request means stored in the storage unit connected Determining means for determining whether or not the password matches,
When a determination result of coincidence is obtained by the determination means, calculation means for calculating an authentication password from the first individual number, the second individual number, and the input connection password;
Storage means for storing a combination of the authentication password calculated by the calculation means and the second individual number in the storage unit;
When a determination result of coincidence is obtained by the determination means , access to the external storage means is permitted, and the second individual number acquired by the acquisition means is transmitted to the external storage means to transmit the external storage A communication means for registering with the means;
And a non-permission unit for disabling access to the external storage unit by the communication unit when the determination unit obtains a non-coincidence determination result continuously for a predetermined number of times or more. Terminal device. A first individual number which is unique identification number, a storage unit against the connection password is at least stored in the manufacturing stage,
The computer's individual number is stored together with the first individual number and the connection password in the storage unit, and is a unique identification number of the computer connected to the computer during normal use and transmitted by the computer An individual number acquisition means for receiving and acquiring the second individual number;
And the input connection for the password request means for requesting the input of the connection for the password,
And a password input connected input based on the input request by the password request means for said input connection, said first individual number stored in the storage unit, and said second acquisition in the individual number acquiring means A first calculating means for calculating an authentication password from the individual number;
First determination means for determining whether or not the combination of the calculated password for authentication and the second individual number is stored in the storage unit;
When the determination result that the combination is stored in the storage unit is obtained by the first determination unit, a connection that allows the computer of the second individual number to browse the contents of the storage unit Connection permission means to be permitted; and
When the determination result that the combination is not stored in the storage unit is obtained by the first determination unit, the input connection password request unit, the first calculation unit, and the first determination unit When the determination result that the combination is not stored in the storage unit is obtained by the first determination unit even when the number of executions reaches the predetermined number continuously. And a non-permission means for disabling a connection that allows browsing of the contents of the storage unit by the computer of the second individual number . When determining whether or not the second individual number acquired by the individual number acquisition means is stored in the storage unit, when a determination result that the second individual number is stored is obtained, Second determination means for requesting input of the password for input connection by the input request means when there is a connection permission input with a computer ;
Based on the determination result of the second determination means , it is determined whether or not the input connection password that is input by the input requesting means matches the storage connection password stored in the storage unit. Third determining means for
Second calculation means for calculating an authentication password from the first individual number, the second individual number, and the input connection password when a matching determination result is obtained by the third determination means. When,
9. The wireless portable device according to claim 8, further comprising: a combination registration unit that registers a combination of the authentication password calculated by the second calculation unit and the second individual number in the storage unit. Terminal device. A change means for changing the storage connection password stored in the storage unit to an arbitrary value and updating and registering in the storage unit;
The second calculation means includes the authentication password based on the input connection password, the first individual number, and the second individual number that match the storage connection password changed by the changing means. The wireless portable terminal device according to claim 9, wherein:

Images