JP5475699B2 - Remote lock system and mobile communication terminal - Google Patents

Description

  The present invention relates to a remote lock system, a mobile communication terminal, a remote lock method, and a communication network server, and particularly to a stolen mobile communication terminal (for example, an information processing terminal equipped with a mobile phone or a data communication card). On the other hand, the present invention relates to a remote lock system, a mobile communication terminal, a remote lock method, and a communication network server that can perform remote lock (stop the function of a mobile communication terminal) more quickly and reliably.

  Recently, mobile phones, PDAs, and information processing terminals having communication functions (for example, mobile PCs equipped with PHS data communication cards) have become widespread as mobile communication terminals, and greatly increase not only for business use but also for personal use. It's being used. In addition, the functions of mobile communication terminals such as mobile phones and PDAs have been improved, high-speed data communication can be performed by connecting to a communication network such as the Internet, and a large amount of user data (for example, e-mail data and address book data). It is also possible to save user personal information).

  By the way, although the convenience of the mobile communication terminal has been improved by the improvement of the function of the mobile communication terminal, the mobile communication terminal has been stolen, and an unauthorized third party has read and misused the user data recorded in the mobile communication terminal. If so, the damage will be greater.

  For this reason, as a security function of a conventional mobile communication terminal, when the mobile communication terminal A is stolen, a signal indicating prohibition of use is sent from the base station or another mobile communication terminal B to the mobile communication terminal A. There is a function called remote lock that locks by stopping.

However, these functions have a problem that the use prohibition signal from the base station or another mobile communication terminal B cannot be transmitted when the mobile communication terminal A is in a state where communication is not possible (out of service area, etc.). Therefore, it is necessary to periodically transmit a use prohibition signal from the base station or another mobile communication terminal B so that the use prohibition signal is received during a period when the mobile communication terminal A can communicate (mobile communication). (The mobile communication terminal A is not locked unless the terminal A transmits a use prohibition signal from the base station or the like within the communicable period.)
In addition, when the lock signal is periodically transmitted, since the mobile communication terminal A cannot be locked immediately when the mobile communication terminal A is turned on or moved within the area, confidential data is copied to an external medium in the meantime. There was a risk.

  As a conventional technique, there is the following remote security system (for example, see Patent Document 1). That is, this remote security system includes an RF receiver that receives a signal from the communication system, and has a security function that can be remotely activated by commanding the RF receiver via the communication system. It is intended to provide. However, in the remote security system of this prior art, when the communication with the communication system is impossible, the security function cannot be activated and the above problem cannot be solved.

  Moreover, there are portable terminal devices as follows (see, for example, Patent Document 2). This portable terminal device is designed to stop key input when the portable terminal device is stolen, and when a theft signal (specific signal) is received from the outside (host computer) Further, a theft state determination means provided inside operates to invalidate the key input. However, in the portable terminal device of this prior art, when it is in a state where communication with the outside is impossible, the security function cannot be operated, and the above-mentioned problems cannot be solved.

JP-A-11-134297 JP-A-3-100894

  As described above, in a conventional mobile communication terminal such as a mobile phone, when the mobile communication terminal is in a state where communication is not possible (out of service area, etc.), there is a problem that a use prohibition signal cannot be transmitted to the mobile communication terminal. In order to avoid this, it is necessary to periodically transmit a use prohibition signal from the base station or another mobile communication terminal so that the use prohibition signal is received during the period when the mobile communication terminal can communicate was there.

  The present invention has been made in order to solve such a problem, and an object of the present invention is to lock a stolen mobile communication terminal more quickly and reliably, and to another mobile communication terminal. Another object of the present invention is to provide a remote lock system, a mobile communication terminal, and a remote lock method that can eliminate the need for periodic transmission of a use prohibition signal from a base station and reduce the load on a communication network.

The remote lock system of the present invention is a remote lock system including a mobile communication terminal and a communication network with which the mobile communication terminal communicates wirelessly, and the mobile communication terminal is connected to the communication network. Whether or not the signal received from the communication network includes a stop request signal for instructing to stop the function of the mobile communication terminal when performing at least one of a transmission request and a location registration request. a stop request signal presence determination means for determining a data storage unit that combined the encrypted data by use of said encryption key and stores encrypted data using the encryption key, encrypted in the data storage unit and encryption key information control unit supplies the key, the determining that the stop request signal is included by the stop request signal presence determination unit If, function the by encryption key information control unit refuses to supply to the data storage unit of the encryption key stop use in the data storage unit, and prohibits the decoding of data of the data storage unit Management means, and on the communication network side, a subscriber information database for recording subscriber data of the mobile communication terminal and stop instruction information for instructing to stop the function of the mobile communication terminal; , When receiving at least one of a call origination request or a location registration request from the mobile communication terminal, refer to the subscriber information database, the mobile communication terminal is not recorded in the subscriber information database, or When information on a stop instruction for prohibiting use of the mobile communication terminal is registered in the subscriber information database, the stop request signal is generated and the mobile Characterized in that it comprises a stop request signal generating means for transmitting the signal terminal.

Further, the mobile communication terminal of the present invention is the remote lock system comprising the mobile communication terminal and a communication network having a function of transmitting a stop request signal for stopping the operation to the mobile communication terminal. A mobile communication terminal, which encrypts and stores data using an encryption key, and combines the data encrypted by using the encryption key, and supplies the encryption key to the data storage unit When performing at least one of a transmission request and a location registration request to the encryption key information control unit and the communication network, the function of the mobile communication terminal is stopped for a signal received from the communication network. The stop request signal presence / absence determining means for determining whether or not a stop request signal for instructing is included and the stop request signal presence / absence determining means If it is determined to contain a stop request signal, refusing to supply to the data storage unit of the encryption key stop use in the data storage unit by said encryption key information control unit, the data And a function management unit that prohibits the decryption of data in the storage unit.

  With such a configuration, the mobile communication terminal stops the operation of the mobile communication terminal in response to a signal received from the communication network side when making a transmission request or a location registration request to the communication network. Determining whether or not a stop request signal (signal for instructing locking of the function of the mobile communication terminal) is included, and if a stop request signal is included, stop using subscriber data; The access function to user data (for example, user personal information such as mail data and address book data) is stopped. If the communication network side receives at least one of a call origination request and a location registration request from the mobile communication terminal, the communication network side refers to the subscriber information database and is the legitimate one registered with the mobile communication terminal? And determining whether or not a stop instruction (lock instruction) is set. If it is illegal or if a stop instruction is set, a stop request signal is generated, Send to mobile communication terminal.

  As a result, when there is at least one of a call origination request and a location registration request from the mobile communication terminal, a stop request signal (a signal for stopping the function of the mobile communication terminal) can be transmitted from the communication network side. For this reason, it is possible to perform remote lock more quickly and reliably for a stolen mobile communication terminal. In addition, it is not necessary to periodically transmit a use prohibition signal (stop request signal) from a base station or another mobile communication terminal to a stolen mobile communication terminal, and the load on the communication network can be reduced. . Further, the suspension of the use of subscriber data makes it impossible to authenticate the communication network and prohibit access to the communication network.

  Also, with such a configuration, it is possible to maintain the confidentiality of data stored in the mobile communication terminal with respect to the stolen mobile communication terminal.

  In the present invention, it is possible to perform remote lock (stop of the function of a mobile communication terminal) more quickly and reliably to a stolen mobile communication terminal. Further, it is not necessary to periodically transmit a use prohibition signal from the base station or another mobile communication terminal to the stolen mobile communication terminal, and the load on the communication network can be reduced.

It is a figure for demonstrating the outline | summary of the remote lock system of this invention. It is a figure which shows the 1st structural example of the remote lock system of this invention. It is a figure which shows the 2nd structural example of the remote lock system of this invention. It is a flowchart which shows the 1st processing method in the remote lock system of this invention. It is a flowchart which shows the 2nd processing method in the remote lock system of this invention. It is a flowchart which shows the 3rd processing method in the remote lock system of this invention. It is a flowchart which shows the 4th processing method in the remote lock system of this invention. It is a flowchart which shows the flow of a process in the communication module shown in FIG. It is a flowchart which shows the flow of a process in the mobile communication terminal shown in FIG. It is a flowchart which shows the flow of a process by the side of the communication network in the remote lock system of this invention. It is a figure which shows the example of a subscriber information database. It is a figure which shows the flow of the terminal lock control which transmits a stop request signal to the mobile communication terminal from the communication network side. It is a figure which shows the addition position of the stop request instruction | indication in the position registration sequence by a cordless telephone. It is a figure which shows the addition position of the stop request instruction | indication in the control sequence at the time of the package transmission by a cordless telephone. It is a figure which shows the other hardware structural example of the remote lock system of this invention. It is a flowchart which shows the outline of the other processing method in the remote lock system of this invention. It is a flowchart which shows the detail of the other processing method in the remote lock system of this invention. It is a figure which shows the other hardware structural example of the remote lock system of this invention. It is a flowchart which shows the other processing method in the remote lock system of this invention.

  The present invention stops the function immediately when a stolen mobile communication terminal A performs communication, thereby periodically transmitting a remote lock signal from a communication network such as a base station or another mobile communication terminal B. Is unnecessary.

  As a function on the communication network side, in response to a request from a contract user of the mobile communication terminal A, the mobile communication terminal A rejects connection by authentication when establishing connection (calling, location registration, etc.) to the rope, and the mobile communication terminal A has a function of transmitting a signal instructing A to stop using subscriber data and stop accessing user data.

  In addition, when the subscriber data is suspended as a function of the mobile communication terminal A, there is a lock function for stopping access to the user data in the mobile communication terminal A and invalidating the input function except for the lock designation release code. Have it.

  When the subscriber data is invalidated, for example, when the user cancels due to loss of the mobile communication terminal, a signal for invalidating the subscriber data is sent to the cancellation terminal, and unnecessary communication is performed. Some are prepared for the purpose of suppression. In the present invention, this function can be set as one of the operating conditions of the user operation of the mobile communication terminal A, whereby a quick mobile communication terminal lock can be realized.

Next, the best mode for carrying out the present invention will be described with reference to the drawings.
FIG. 1 is a diagram for explaining an outline of a remote lock system according to the present invention. In the remote lock system 1A shown in FIG. 1, 2 is a stolen mobile communication terminal (PS), 51 is a base station (CS), and 52 is an authentication server. Note that the base station 51 and the authentication server 52 are devices belonging to the communication network side.

Hereinafter, the flow of the process will be described with reference to FIG.
First, in response to a user request, the rope manager performs a setting for rejecting authentication of the mobile communication terminal 2 in the subscriber information database 46 of the authentication server 52 (setting of a remote lock for instructing to stop the function of the mobile communication terminal) ( Step S1).

  Next, it is assumed that a network connection request (location registration request or transmission request) is generated from the mobile communication terminal 2 (step S2). On the communication network side, an authentication request is issued to the mobile communication terminal 2 in order to authenticate whether or not the connection source mobile communication terminal 2 is valid in the connection sequence (step S3). The mobile communication terminal 2 returns an authentication response to the authentication request (step S4).

  The authentication server 52 confirms the contents of the authentication response of the mobile communication terminal 2, but since authentication refusal is set in the subscriber information database 46 in step S 1, a subscriber data stop request (stop) is sent to the mobile communication terminal 2. Request signal) is issued (step S5).

  Since the mobile communication terminal 2 has received the subscriber data stop request (stop request signal), it stores the invalid setting of the subscriber data 34 (step S6). Thereafter, the subscriber data 34 is not set. In response to this, access to the user data 31 is stopped and other functions are locked (step S7).

[Description of First Configuration Example of Remote Lock System]
FIG. 2 is a diagram showing a first configuration example of the remote lock system of the present invention. In FIG. 2, the remote lock system 1 </ b> A includes a mobile communication terminal 2 and a communication network 40. The communication network 40 is shown as the communication network 40 including the functions of the base station 51 and the authentication server 52 shown in FIG.

  The mobile communication terminal 2 is a voice terminal such as a mobile phone, and shows a portion related to the present invention. The mobile communication terminal 2 includes a key input unit 11 for operating the mobile communication terminal, a display unit 12, a voice input / output unit 13 for inputting / outputting voice, a control unit 20 for controlling the entire mobile communication terminal, and mobile communication. A non-volatile memory 30 is provided for storing data (for example, a program) necessary for terminal processing, user data, subscriber data, and the like. In the non-volatile memory 30, user data (user personal information such as e-mail and address book data) 31, a remote lock operation flag 32, a stop request reception flag 33, and subscriber data (subscriber information) 34 are recorded. .

  The transmission / reception control unit 21 in the control unit 20 of the mobile communication terminal 2 is a processing unit for performing wireless data transmission / reception with the communication network 40. The stop request presence / absence determination unit (stop request signal presence / absence determination means) 22 includes a stop request signal (a signal for instructing locking of the function of the mobile communication terminal) in the signal received from the communication network 40 via the transmission / reception control unit 21. A process is performed to determine whether or not

  The stop request presence / absence determining unit 22 performs on / off control of the switch (SW2) 27. When it is determined that the stop request signal is included in the signal received from the communication network 40, the switch (SW2) 27 is turned off.

  Further, when it is determined that the stop request signal is included in the signal received from the communication network 40, the stop request presence / absence determination unit 22 performs a process of turning on the stop request reception flag 33 (ON). When it is determined that no is included, a process of turning off is performed. If the stop request presence / absence determining unit 22 determines that the stop request signal is included in the signal received from the communication network 40, the stop request presence / absence determination unit 22 performs a process of turning on the remote lock operation flag 32 (ON). When it is determined that no is included, a process of turning off is performed.

  The subscriber data control unit (subscriber data control means) 23 reads the subscriber data (subscriber information) 34 in the nonvolatile memory (subscriber information holding means) 30, and communicates with the communication network via the transmission / reception control unit 21. The process which transmits to 40 is performed. The subscriber data 34 is information used for authentication processing with the communication network 40. When a stop request signal is detected by the stop request presence / absence determining unit 22, the switch (SW2) 27 is turned off. The subscriber data control unit 23 stops reading the subscriber data.

  The lock function unit 24 refers to the remote lock operation flag 32 and performs on / off (ON / OFF) control of the switch (SW1) 26. That is, when the remote lock operation flag 32 is on (ON), the switch (SW1) 26 is turned off (OFF), and use of the user data 31 is stopped.

  The function management unit (function management means) 25 is a processing unit that manages the execution of the functions (input / output function, display function, etc.) of the mobile communication terminal 2, and when the switch (SW1) 26 is off (OFF). Is controlled to stop the function of the mobile communication terminal 2. As a result, the use of the mobile communication terminal 2 is stopped and the user data 31 and the like cannot be read.

  The communication network 40 includes a control unit 41 and a nonvolatile memory 45. The transmission / reception control unit 42 in the control unit 41 is a processing unit for performing wireless data transmission / reception with the mobile communication terminal 2. When the subscriber information control unit 44 receives a call request from the mobile communication terminal 2, the subscriber information control unit 44 refers to the subscriber information database 46 in the nonvolatile memory 45 to determine whether or not the mobile communication terminal is a valid subscriber. And a process of detecting whether or not a function stop instruction (remote lock instruction) is set for the mobile communication terminal 2.

  Further, as a result of referring to the subscriber information database 46 by the subscriber information control unit 44, the stop request generating unit (stop request signal generating means) 43 is not valid for the mobile communication terminal 2 that has issued the transmission request ( Alternatively, a process for generating a stop request signal for remotely locking the mobile communication terminal 2 is performed. The generated stop request signal is transmitted to the mobile communication terminal 2 via the transmission / reception control unit 42.

  FIG. 11 is a diagram illustrating an example of the subscriber information database 46. As shown in FIG. 11, in the subscriber information database 46, telephone numbers, stop instructions, and other necessary information (for example, the type of contract service) are recorded using the subscriber ID as an index. The stop instruction is a setting in which the rope manager rejects the authentication of the mobile communication terminal 2 when the use stop request of the mobile communication terminal 2 is requested by a legitimate user request (stops the function of the mobile communication terminal) Remote lock setting). For example, a case of “x” is a subscriber ID for which authentication is denied. Note that the subscriber ID and the telephone number itself may be deleted in response to a request from a legitimate user so that authentication based on subscriber information cannot be performed.

  With the configuration of the remote lock system 1A described above, when there is a transmission request or a location registration request from the mobile communication terminal 2 to the communication network 40, a stop request signal (stops the function of the mobile communication terminal) from the communication network side. Signal) can be transmitted. For this reason, it is possible to perform remote lock more quickly and reliably for a stolen mobile communication terminal. In addition, it is not necessary to periodically transmit a use prohibition signal (stop request signal) from a base station or another mobile communication terminal to a stolen mobile communication terminal, and the load on the communication network 40 can be reduced. it can. Further, when the use of the subscriber data 34 is stopped, the communication network 40 cannot be authenticated, and access to the communication network can be prohibited.

[Description of Second Configuration Example of Remote Lock System]
FIG. 3 is a diagram showing a second configuration example of the remote lock system of the present invention. A remote lock system 1a shown in FIG. 3 includes a mobile communication terminal 2 shown in FIG. 2 that includes a communication module 3 having a wireless communication function, a key input unit including dial keys and various function buttons, a display unit 12 such as an LCD, and the like. A functional terminal 4 having a function management unit 25 for managing user data such as an address book / photo is connected to the I / F units 14 and 15 (for example, PCMCIA, USB, etc.). .

  In this configuration, the value of the remote lock operation flag 32 determined by the communication module 3 and stored in the nonvolatile memory 30A is notified to the function terminal 4. The lock control unit 24 in the functional terminal 4 performs on / off (ON / OFF) control of the switch (SW1) 26 according to the value of the remote lock operation flag 32 notified from the communication module 3. When the switch (SW1) 26 is off (OFF), the function management unit 25 stops the access function to the user data 31 in the nonvolatile memory 30B. Also, lock operation such as key lock is performed.

  In addition, about each processing part in the communication module 3 and the functional terminal 4, it is the same function as the processing part shown with the same code | symbol in FIG. 2, The description is abbreviate | omitted.

[Description of First Processing Method in Remote Lock System 1A]
In the above-described configuration example of the remote lock system 1A, the call request from the mobile communication terminal 2 to the communication network 40 includes the call operation by the user (in this case, the person who uses the stolen mobile communication terminal 2). Location registration is also targeted. This is because there are cases where a call operation by an unauthorized user cannot be expected, and it is preferable that there are many connection requests.

  FIG. 4 is a flowchart showing a first processing method in the remote lock system 1A of the present invention. This flowchart shows the flow of processing in the mobile communication terminal 2 shown in FIG. 2, and shows the most basic remote lock processing method in the mobile communication terminal 2. The flowchart shown in FIG. 4 shows the flow of processing in the mobile communication terminal 2 shown in FIG. 2, but the same applies when the mobile communication terminal is configured by the communication module 3 and the functional terminal 4 shown in FIG. Is applicable.

Hereinafter, the flow of the process will be described with reference to FIG.
Initially, the mobile communication terminal 2 is in a standby state (step S11). Then, in the mobile communication terminal 2, it is detected whether or not a communication request operation (such as a transmission request) has been performed (step S12). If a communication request is detected, the process proceeds to step S14. If no communication request is detected, the start of location registration of the mobile communication terminal 2 itself is detected (step S13). If the start of location registration is detected, the process proceeds to step S14. If the start of location registration is not detected, the process returns to step S12.

  If a communication request is detected in step S12 or the start of location registration is detected in step S13, communication between the mobile communication terminal 2 and the communication network 40 is started (step S14). With the start of communication, an authentication phase is performed between the mobile communication terminal 2 and the communication network 40. In this authentication phase, the mobile communication terminal 2 determines whether or not a stop request signal has been received from the communication network 40. (Step S15). If the mobile communication terminal 2 does not receive a stop request signal, the communication is continued as it is (step S16). When the communication is completed (step S17), the mobile communication terminal 2 returns to step S12 and enters the standby state again.

  In the authentication phase of step S15, when it is determined that the mobile communication terminal 2 has received the stop request signal from the communication network 40, the mobile communication terminal 2 immediately ends the communication (step S18), and the stop request reception flag 33 Is turned on (step S19), the switch (SW2) 27 is turned off (OFF), and the use of the subscriber data 34 is stopped (step S20). Further, the remote lock operation flag 32 is turned on (step S21), the switch (SW1) 26 is turned off by the lock function unit 24, and access to the user data 31 is stopped (step S22). Thereby, the standby state is terminated and the mobile communication terminal 2 is locked (step S23).

  By such a processing procedure, when there is a transmission request and a location registration request from the mobile communication terminal 2, a stop request signal (remote lock instruction information for stopping the function of the mobile communication terminal 2) can be transmitted from the communication network 40 side. It becomes like this. For this reason, the stolen mobile communication terminal 2 can be locked more quickly and reliably. In addition, periodic transmission of a use prohibition signal from the base station or another mobile communication terminal to the stolen mobile communication terminal 2 becomes unnecessary, and the load on the communication network 40 can be reduced.

[Description of Second Processing Method in Remote Lock System 1A]
Further, the execution timing of the start of location registration can be performed not only when moving between cells but also when the mobile communication terminal 2 is turned on. Accordingly, it is possible to receive from the subscriber information database 46 whether or not there is a use stop request generated during a period in which the mobile communication terminal 2 is powered off.

  FIG. 5 is a flowchart showing a second processing method in the remote lock system 1A of the present invention. This flowchart shows the flow of processing in the mobile communication terminal 2, and the location registration start timing in the mobile communication terminal 2 is performed not only when moving between cells but also when the mobile communication terminal 2 is turned on. It is a thing. The flowchart shown in FIG. 5 can be similarly applied to a case where a mobile communication terminal is configured by the communication module 3 and the functional terminal 4 shown in FIG.

  In the flowchart shown in FIG. 5, the portions surrounded by broken lines (steps S11 to S23) are common to the flowchart shown in FIG. 4, and steps S31 to S36 are newly added to the flowchart shown in FIG. Part. Hereinafter, with reference to the flowchart shown in FIG. 5, the flow of the processing will be described focusing on the newly added steps S <b> 31 to S <b> 36.

  First, the mobile communication terminal 2 is powered on (step S31). In the mobile communication terminal 2, it is determined whether or not the stop request reception flag 33 in the nonvolatile memory 30 is on (ON) (step S32). If the stop request reception flag 33 is on (ON), the process proceeds to step S20, the switch (SW2) 27 is turned off (OFF), and the use of the subscriber data 34 is stopped. Further, the remote lock operation flag 32 is turned on (ON), the switch (SW1) 26 is turned off (OFF), and access to the user data 31 is stopped (step S22). Thereby, the standby state is terminated and the mobile communication terminal 2 is locked (step S23).

  If it is determined in step S32 that the stop request reception flag 33 is off (OFF), the mobile communication terminal 2 starts location registration (step S33). The mobile communication terminal 2 determines whether or not a stop request signal has been received from the communication network 40 in the authentication phase in this location registration (step S34). If it is determined that the stop request signal has been received, the process proceeds to step S18, where the communication is terminated and lock processing of the mobile communication terminal 2 is performed (steps S19 to S23).

  If it is determined in the authentication phase of step S34 that the stop request signal has not been received, the mobile communication terminal 2 continues the location registration process (step S35). Then, when the position registration process is completed, the communication is terminated (step S36), and a transition is made to the standby state (step S11). In addition, the process after step S11 becomes the flow of the same process as the flowchart shown in FIG.

  According to such a processing procedure, when the mobile communication terminal 2 is turned on and makes a location registration request from the mobile communication terminal 2 to the communication network 40, the mobile communication terminal 2 can be remotely locked. Thereby, it is possible to perform remote lock on the stolen mobile communication terminal 2 more quickly and reliably.

  In step S31, instead of turning on the power, the movement between the cells is performed, so that the location registration is performed when the mobile communication terminal 2 moves between the cells, and the remote lock can be performed at that time.

[Description of Third Processing Method in Remote Lock System 1A]
In addition, a timer for measuring a communication time interval is provided in the mobile communication terminal 2 so that when the mobile communication terminal 2 does not perform communication for a certain period of time, the mobile communication terminal 2 voluntarily makes a call request. it can. As a result, access to the communication network 40 occurs within a predetermined time, and a use prohibition signal (stop request signal) can be transmitted from the communication network 40 to the mobile communication terminal 2.

  FIG. 6 is a flowchart showing a third processing method in the remote lock system 1A of the present invention. This flowchart shows the flow of processing in the mobile communication terminal 2, and shows the flow of processing when the mobile communication terminal 2 voluntarily makes a call request. The flowchart shown in FIG. 6 shows the flow of processing in the mobile communication terminal 2 shown in FIG. 2, but the same applies when the mobile communication terminal is configured by the communication module 3 and the functional terminal 4 shown in FIG. Is applicable.

  The flowchart shown in FIG. 6 is obtained by newly adding steps S13A and S17A to the flowchart shown in FIG. 4, and the other processing steps are the same as those shown in FIG. Hereinafter, the newly added processing steps will be described.

  In step S13A, the mobile communication terminal 2 starts communication with the communication network 40 when the measurement time of the timer for measuring the communication interval expires when there is no transmission from the mobile communication terminal 2 for a certain period of time. It is. In step S17A, when communication is terminated without receiving a stop request signal from the communication network 40 (step S17), the communication interval measurement timer is restarted.

  By such a processing procedure, a timer is provided in the mobile communication terminal 2 for measuring a time during which no transmission is made by the mobile communication terminal 2, and when the measurement time of this timer expires, the mobile communication terminal 2 A call origination request can be made to the communication network 40. Thereby, it is possible to perform remote lock on the stolen mobile communication terminal 2 more quickly and reliably. Further, it is not necessary to periodically send a use prohibition signal from another mobile communication terminal or a base station to the stolen mobile communication terminal 2, and the load on the communication network 40 can be reduced.

[Description of Fourth Processing Method in Remote Lock System 1A]
Furthermore, as a method of increasing the call opportunity of the mobile communication terminal 2, if there is no key input for a predetermined time in the mobile communication terminal 2, a call or location registration is performed at the next key access. As a result, the security state can be confirmed and the remote lock operation can be performed during an operation that may be illegally used.

  FIG. 7 is a flowchart showing a fourth processing method in the remote lock system 1A of the present invention. Although this flowchart shows the flow of processing in the mobile communication terminal 2, it can be similarly applied to the case where the mobile communication terminal is configured by the communication module 3 and the functional terminal 4 shown in FIG.

  In the flowchart shown in FIG. 7, a portion surrounded by a broken line (steps S14 to S23) is a common portion with the flowchart shown in FIG. 4, and steps S13B and S17B are characteristic portions in this processing flow.

  The mobile communication terminal 2 starts counting a timer that measures the time during which no key input operation has been performed for a certain period of time. Then, it is determined whether or not the timer measurement time has expired (step S13B). If it is determined that the timer measurement time has not expired, the process returns to step S13B to perform normal operation.

  In step S13B, when it is determined that the timer has expired and a key input is detected, the mobile communication terminal 2 starts communication (step S14). Thereafter, processing similar to the processing steps S14 to S23 shown in FIG. 4 is performed, and the mobile communication terminal 2 is remotely locked.

  In step S17B, in the authentication phase (step S15), when communication is terminated without receiving a stop request signal from the communication network (step S17), the key input detection timer is restarted.

  By such a processing procedure, a timer is provided for measuring a time during which no key input is performed in the mobile communication terminal 2, and when the measurement time of this timer expires, the communication network 40 is instructed at the next key input. To make an outgoing call request. Thereby, it is possible to perform remote lock on the stolen mobile communication terminal 2 more quickly and reliably. Further, it is not necessary to periodically transmit a use prohibition signal from another mobile communication terminal or base station to the stolen mobile communication terminal 2, and the load on the communication network 40 can be reduced.

[Description of processing method in remote lock system 1A when mobile communication terminal is composed of mobile communication terminal and communication module]
The flow charts shown in FIGS. 4, 5, 6 and 7 not only show the flow of processing in the mobile communication terminal 2 shown in FIG. 2, but also the communication module 3 and functional terminals shown in FIG. 4 can be similarly applied to the case where a mobile communication terminal is configured. However, here, a basic process flow in the mobile communication terminal (configured by a communication module and a mobile communication terminal) shown in FIG. 3 will be described. Keep it.

  FIG. 8 is a flowchart showing a flow of processing in the communication module 3 shown in FIG. 3, and FIG. 9 is a flowchart showing a flow of processing in the functional terminal 4. The processing flow will be described below with reference to FIGS.

  Referring to FIG. 8, first, communication module 3 is in a standby state (step S111). Then, it is detected whether or not a communication request (such as a transmission request) has been made from the functional terminal 4 (step S112). If a communication request is detected, the process proceeds to step S114. If the communication request is not detected, the communication module 3 detects the start of its own location registration (step S113). If the start of location registration is detected, the process proceeds to step S114. If the start of location registration is not detected, the process returns to step S112.

  When a communication request is detected in step S112 or the start of location registration is detected in step S113, communication between the communication module 3 and the communication network 40 is started (step S114). With the start of communication, an authentication phase between the communication module 3 and the communication network 40 is performed. In this authentication phase, the communication module 3 determines whether or not a stop request signal has been received from the communication network 40 (step). S115). If the communication module 3 does not receive a stop request signal from the communication network 40, the communication is continued as it is (step S116). When the communication is completed (step S117), the process returns to step S112.

  If it is determined in the authentication phase of step S115 that a stop request signal has been received from the communication network 40, the communication module 3 immediately ends communication (step S118) and turns on the stop request reception flag 33 (ON). (Step S119), the switch (SW2) 27 is turned off (OFF), and the use of the subscriber data 34 is stopped (Step S120). Further, the remote lock operation flag 32 is turned on (step S121), the value of the remote lock operation flag 32 is transmitted to the functional terminal 4 (step S122), and the standby is ended (step S123).

  Next, with reference to FIG. 9, the functional terminal 4 determines whether or not the signal of the remote lock operation flag 32 (flag ON signal) is received from the communication module 3 (step S131). When the signal of the remote lock operation flag 32 is received, the switch (SW1) 26 is turned off (OFF) (step S132), and access to the user data 31 is stopped (step S133). Then, the standby state is terminated and the functional terminal 4 itself is locked (step S134).

[Description of processing method on communication network 40 side in remote lock system]
Next, a processing flow on the communication network 40 side in the remote lock system will be described. FIG. 10 is a flowchart showing a processing flow on the communication network 40 side in the remote lock system of the present invention. Hereinafter, the processing flow will be described with reference to FIG.

  Initially, the communication network 40 is in a standby state (step S201). Then, when there is a notification from the legitimate user about the use stop request of the mobile communication terminal 2 (step S202), the subscriber information of the target user's mobile communication terminal 2 is deleted from the subscriber information database 46 (step S202). S203). Alternatively, as shown in FIG. 11, stop instruction information is recorded in the subscriber information database 46.

  Thereafter, a communication request from the mobile communication terminal 2 is detected (step S204). When there is a communication request, communication with the mobile communication terminal 2 is started (step S205), and an authentication request is sent to the mobile communication terminal 2. Is transmitted (step S206), and an authentication response is received from the mobile communication terminal 2 (step S207). The communication network 40 refers to the subscriber information database 46 based on the authentication response information received from the mobile communication terminal 2 to determine whether the mobile communication terminal 2 is a regular contract terminal, or It is determined whether stop instruction information is set in the mobile communication terminal 2 (steps S208 and S209).

  If it is determined in step S209 that the mobile communication terminal 2 is an authorized contract terminal (or if it is determined that stop instruction information is not set in the target mobile communication terminal 2), the communication is performed as it is. When the process is continued (step S210) and communication with the mobile communication terminal 2 is terminated (step S211), the process returns to step S202. If it is determined in step S209 that the terminal is not a regular contract terminal (or if it is determined that stop instruction information is set in the target mobile communication terminal 2), the mobile communication terminal 2 is A stop request signal is transmitted (step S212), and the communication process is terminated (step S211).

  FIG. 12 is a diagram showing a flow of terminal lock control in which a stop request signal is transmitted from the communication network side to the mobile communication terminal 2. Hereinafter, the flow of the process will be described with reference to FIG.

  First, according to a user request, a setting for remotely locking the mobile communication terminal 2 to the authentication server 52 on the communication network side (setting of a stop instruction) is performed (step S50).

  Subsequently, a call setting request is generated from the mobile communication terminal 2 to the communication network side (step S51).

  On the communication network side, in the connection sequence, a request for authentication is issued to the mobile communication terminal 2 to determine whether the connection source mobile communication terminal 2 is valid (step S52).

  The mobile communication terminal 2 returns a response to the authentication request (step S53).

  On the communication network side, after the called user call is started, a call message is issued to the mobile communication terminal 2 (step S54). Depending on whether or not a UUI (User to User Information) message is added to this call message as a message for instructing a stop request (or message content), a stop request signal is transmitted to the mobile communication terminal 2 to use subscriber data. Instruct to stop.

  The mobile communication terminal 2 that has received the stop request signal has previously set remotes such as subscriber data invalid setting (subscriber data use stop setting), user data access function stop, input / output function stop, etc. In accordance with the lock mode, the mobile communication terminal 2 is locked (step S55).

In the communication system described with reference to FIG. 1, as a timing for instructing a stop request, in the location registration sequence of the cordless telephone shown in FIG. In the previous stage, transmission is made to the mobile communication terminal 2.

  In addition, the timing for transmitting a stop request in the communication system illustrated in FIG. 12 is the end of authentication, for example, by adding it as a UUI message to the CC call 102 in the control sequence at the time of batch transmission by the cordless telephone shown in FIG. After that, it is transmitted to the mobile communication terminal 2 before the call connection.

  As a result, the stop request signal can be transmitted to the mobile communication terminal 2 without imposing a burden on the communication network in the conventional connection sequence.

  Although the embodiment of the present invention has been described above, if the mobile communication terminal 2 or the functional terminal 4 equipped with the communication module 3 is left out of service area where communication with the communication network 40 cannot be performed, the communication network 40 A stop request signal cannot be transmitted to the mobile communication terminal 2 or the function terminal 4. As a security measure in this case, password information may be held in the mobile communication terminal 2 or the functional terminal 4, and a password input may be requested when the mobile communication terminal 2 or the functional terminal 4 is used. . As a result, when the mobile communication terminal 2 or the function terminal 4 is within a communicable area, a stop request signal is transmitted to lock the mobile communication terminal, and when it is out of the service area, a password input is requested. , Can increase security.

  FIG. 15 is a diagram showing a hardware configuration example of a mobile communication terminal for realizing the above operation of the remote lock system of the present invention. In FIG. 15, the description of the same components as those in FIG. 2 is omitted here. For the same reason, description of the communication network 40 is also omitted.

  The base station detection unit 60 in the control unit 20a of the mobile communication terminal 2a searches the base station by the transmission / reception control unit 21a, detects a communicable base station, and outputs the result to the function management unit 25a. The communication network detection unit 61 detects whether the communication network by the base station detected by the base station detection unit 60 is a communication network that supports remote lock, and outputs the result to the function management unit 25a.

The function management unit 25a that has input the result that the base station is not detected from the base station detection unit 60 determines that the mobile communication terminal 2a is out of the communication range. Further, the function management unit 25a that has input the result that the communication network detection unit 61 is not a communication network that supports remote lock determines that the mobile communication terminal 2a is in a communication network that supports remote lock. The function management unit 25a that has determined that the mobile communication terminal 2a is out of the communication range or in the remote lock incompatible communication network notifies the user that the mobile communication terminal 2a is out of the communication range or in the remote lock incompatible state, and inputs the password. A message is displayed on the display unit 12 for prompting. A user who has been notified that the user is out of communication range or in a state not compatible with the remote lock inputs a predetermined password through the key input unit 11 and the voice input / output unit 13. The input password is input to the password determination unit 62 via the function management unit 25a, and is compared with the password stored in advance in the password storage unit 35 in the nonvolatile memory 30a. As a result, if the input password is authentic, the mobile communication terminal 2a performs the normal operation as it is.
On the other hand, if the input password is different from the predetermined password, the password determination unit 62 determines that the password is an illegal password, and outputs the result to the lock function unit 24. The lock function unit 24 locks various operations of the mobile communication terminal 2a to disable the use when an illegal password input is detected from the password determination unit 62.

  FIG. 16 is a flowchart showing the basic operation of another embodiment of the present invention. This flowchart is shown with reference to the most basic lock processing method in the mobile communication terminal 2a shown in FIG.

In the mobile communication terminal 2a, after the power is turned on, a base station search is started (step S300). If the base station can be found by the base station search in step S300, normal communication is started (steps 301 and 302), and the processing after step S15 in FIG. 4 is performed.
If the base station is not found in step 301, it is determined that the communication terminal 20 is out of the communication range, and the user is prompted to input a password (step S303). When the user who is prompted to input a password inputs a predetermined password, it is determined whether or not the input password is authentic (step S304). In step S304, if the input password is authentic, the mobile communication terminal 2a performs the normal operation as it is (step S305). On the other hand, when it is determined that the input password is not a legitimate one but an illegal one, the function of the mobile communication terminal 2a is stopped (step S306).

FIG. 17 is a flowchart for explaining the operation shown in FIG. 16 in more detail.
When the mobile communication terminal 2a is powered on (step S400), it is first determined whether the stop request reception flag 33 in the nonvolatile memory 30a is on (ON) or off (OFF) (step S401). If the stop request reception flag 33 is on (ON), the switch (SW2) 27 is turned off (OFF), and the use of the subscriber data 34 is stopped (step S471). Further, the remote lock operation flag 32 is turned on (ON), the switch (SW1) 26 is turned off (OFF) (step S472), access to the user data 31 is stopped (step S473), and the mobile communication terminal 2a is locked. (Step S474).
In step S401, after it is determined that the stop request reception flag 33 is off (OFF), the mobile communication terminal 2a starts a timer (step S402), determines whether the timer has expired (step S403), and the time is up. The reception state at that time is read (step S404).

  After determining that the stop request reception flag 33 is off (OFF), the mobile communication terminal 2a starts a base station search (step S460). In step S460, the success or failure of the base station search is determined in step S461. If the base station cannot be found, it is determined that the base station search result is unsuccessful (step S462). On the other hand, when the base station is found in step S461, it is determined that the base station search is successful (step S463). If the base station search is successful in step S463, a location registration operation is started (step S464), and it is determined whether or not the communication network of the base station that has succeeded in the search is compatible with remote lock (step S465). . If the communication network of the base station that has succeeded in the search does not support remote lock in step 464, the location registration is continued as it is (step S467), and the communication is terminated (step S468).

On the other hand, if the communication network of the base station that has succeeded in the search supports remote lock, it is determined whether or not a stop request is received in the authentication phase (step S466). If the stop request is not received, location registration is performed. The operation is continued (step S467), and the communication is terminated (step S468). If it is determined in step S466 that a stop request has been received, communication is terminated (step S469), and the stop request reception flag 32 is turned on (step S470). Next, the switch (SW2) 27 is turned off (OFF), and the use of the subscriber data 34 is stopped (step S471). Next, the remote lock operation flag 32 is turned on (ON), the switch (SW1) 26 is turned off (OFF) by the lock function unit 24 (step S472), access to the user data 31 is stopped (step S472), and standby is performed. The state is terminated and the mobile communication terminal 2a is locked.
The communication state of the mobile communication terminal 2a shown in steps S461, S462, S465, S468, and S470 is sequentially stored in step S450. For example, the reception states are “base station search unsuccessful”, “remote lock not supported”, “stop request received”, and “stop request not received”. Although the base station search is described as being performed once here, it may be performed at regular intervals using a timer or the like.

  In step S404, the reception state is read, and in step S405, the reception state is determined. As a result, when it is determined that the result of the reception state is not output, the timer is reset and restarted (step S406), and the process returns to step S403.

  On the other hand, if it is determined in step S405 that there is a reception status result, it is then determined whether reception has succeeded as a result of the base station search (step S407). If the communication state is not successful in the base station search in step S407, a password input request is displayed on a display screen or the like to prompt the user to input a predetermined password (step S408). Next, the presence / absence of a password input is detected (step S409). If the password is not input, the function of the mobile communication terminal 2a is locked (step S411).

When the password is input from the user, the password is checked against the password stored in advance in the password storage unit 34 (step S410). If the input password is correct, the mobile communication terminal 2a is normally operated (step S410). S411). On the other hand, if the input password is illegal compared to the stored password in step S410, the function of the mobile communication terminal 2a is locked (step S412).
If it is determined in step S407 that the search for the base station has been successful, it is then determined whether or not the communication network of the base station that has succeeded in the search supports remote lock (step S413). If the remote lock is supported, the mobile communication terminal 2a performs a normal operation (step S414). On the other hand, if the remote lock is not supported, the process proceeds to step S408, and authentication processing using a password shown in steps S408 to S412 is performed.

  The configuration for requesting password input when out of service area as described above has been described based on the embodiment of the present invention shown in FIG. 2. However, other embodiments of the present invention shown in FIG. Needless to say, it can be similarly implemented.

  For example, the password storage unit 35 and the password determination unit 62 may be provided in either the communication module 3 or the functional terminal 4 in the embodiment of FIG.

In addition, since the hard disk of the mobile communication terminal 2 may be removed and decrypted, as a countermeasure in this case, information on the encryption key is held in the mobile communication terminal 2 and information to be recorded on the hard disk by this encryption key is stored. Encryption may be performed, and when the mobile communication terminal 2 receives a stop request signal from the communication network 40 side, the encryption key information may be locked or deleted.
FIG. 18 is a diagram showing a hardware configuration example of a remote lock system when information to be recorded on the hard disk is encrypted. In addition, description of the part which overlaps with FIG. 2 is abbreviate | omitted here.

The encryption key information reading unit 70 of the control unit 20b of the mobile communication terminal 2b is a processing unit that detects the encryption key information 75 in the mobile communication terminal 2b. In the data storage unit 73 constituted by the hard disk 72 or the like, the data encrypted by the data encryption unit 71 is stored according to the encryption key detected by the encryption key information reading unit 70.
Normally, the encrypted data is decrypted by the data decryption unit 74 in accordance with the encryption key detected by the encryption key information reading unit 70 and can be used by the user.

  The mobile communication terminal 2b includes a control unit 20b and a nonvolatile memory 30b. User data 31, a remote lock operation flag 32, a stop request reception flag 33, subscriber data 34, and encryption key information 75 are recorded in the nonvolatile memory 30b.

  The transmission / reception control unit 21b in the control unit 20b is a processing unit for performing wireless data transmission / reception with the communication network. The stop request presence / absence determination unit 22 performs a process of determining whether or not a stop request signal (signal for instructing operation lock) is included in a signal received from the communication network 40 via the transmission / reception control unit 21b.

  The stop request presence / absence determination unit 22 performs on / off control of the switch (SW2) 27. In this case, when it is determined that the stop request signal is included, the switch (SW2) 27 is turned off. Further, when it is determined that the stop request signal is included, the stop request presence / absence determination unit 22 performs a process of turning on the stop request reception flag 33 and determines that the stop request signal is not included. Is turned off. At this time, encryption information may be erased. Further, when it is determined that the stop request signal is not included, the stop request presence / absence determining unit 22 performs a process of turning on the remote lock operation flag 32 (ON). When the remote lock operation flag 32 is turned on (ON), the lock function unit 24b turns off the switch (SW1) 26 and the switch (SW3) 76.

  When the switch (SW3) 76 is off (OFF), the encryption key information control unit 77 refuses to provide the encryption key information 75 to the encryption key information reading unit 70. When the switch (SW 3) 76 is on, the encryption key information 75 is read and sent to the encryption key information reading unit 70.

  FIG. 19 is a flowchart showing a processing method in the remote lock system of the present invention for encrypting data. This flowchart shows the processing after step S18 of the flowchart shown in FIG. 4, and the other processing is the same as that in FIG.

  When it is determined that the mobile communication terminal 2b has received a stop request signal from the communication network, the mobile communication terminal 2b immediately terminates communication (step S18) and turns on the stop request reception flag 33 (step S500). ), The switch (SW2) 27 is turned off (OFF), and the use of the subscriber data 33 is stopped (step S501). Further, the switch (SW1) 26 is turned off (OFF), and the use of the user data 31 is stopped (step S502). Thereby, the standby state is terminated and the mobile communication terminal 2b is locked. Further, the switch (SW3) 76 is turned off (step S503), the use of the encryption key information 75 is stopped, and the decryption of the data stored in the data storage unit 73 is stopped (step S504).

  By such a processing procedure, when there is a transmission request and a location registration request from the mobile communication terminal 2b, a stop request signal (a lock signal for stopping the function of the mobile communication terminal 2b) can be transmitted from the communication network side. . In addition, the data stored in the mobile communication terminal 2b is encrypted and cannot be decrypted, so that the confidentiality of the data can be improved with respect to the stolen mobile communication terminal 2b.

  The embodiment of the present invention has been described above. However, the remote lock system and the mobile communication terminal of the present invention are not limited to the above-described illustrated examples, and various types are possible without departing from the gist of the present invention. Of course, changes can be made.

  In the present invention, the stolen mobile communication terminal can be locked more quickly and reliably, and the use prohibition signal (stop request signal) from the base station and other communication terminals can be periodically Since the transmission is unnecessary and the load on the communication network can be reduced, the present invention is useful for a remote lock system, a mobile communication terminal, a remote lock method, and the like.

1A, 1a remote lock system 2 mobile communication terminal 3 communication module 4 function terminal 11 key input unit 12 display unit 13 voice input / output unit 14, 15 I / F unit 20, 41 control unit 21 transmission / reception control unit 22 stop request presence / absence determination unit 23 Subscriber Data Control Unit 24 Lock Function Unit 25 Function Management Unit 26 Switch (SW1)
27 Switch (SW2)
76 switch (SW3)
30 Nonvolatile Memory 31 User Data 32 Remote Lock Operation Flag 33 Stop Request Reception Flag 34 Subscriber Data 35 Password Storage Unit 40 Communication Network 42 Transmission / Reception Control Unit 43 Stop Request Generation Unit 44 Subscriber Information Control Unit 45 Nonvolatile Memory 46 Subscriber Information Database 51 Base Station 52 Authentication Server 60 Base Station Detection Unit 61 Communication Network Detection Unit 62 Password Determination Unit 70 Encryption Key Information Reading Unit 71 Data Encryption Unit 72 Hard Disk 73 Data Storage Unit 74 Data Decryption Unit 75 Encryption Key Information 77 Encryption Key Information Control Unit

Claims (2)

A remote lock system comprising a mobile communication terminal and a communication network through which the mobile communication terminal communicates wirelessly,
In the mobile communication terminal,
A stop request signal for instructing to stop the function of the mobile communication terminal is included in a signal received from the communication network when making at least one of a transmission request and a location registration request to the communication network. Stop request signal presence / absence judging means for judging whether or not
A data storage unit that encrypts and stores data using an encryption key and decrypts the data encrypted by using the encryption key ;
An encryption key information control unit for supplying an encryption key to the data storage unit;
When the stop request signal presence determination means determines that the stop request signal is included, the encryption key information control unit rejects the supply of the encryption key to the data storage unit and the data storage unit a function management means the use is stopped, prohibiting the decryption of data of the data storage unit in,
With
On the communication network side,
A subscriber information database that records subscriber data of the mobile communication terminal and information on a stop instruction that instructs to stop the function of the mobile communication terminal;
When at least one of a call origination request and a location registration request is received from the mobile communication terminal, the subscriber information database is referred to, the mobile communication terminal is not recorded in the subscriber information database, or the subscription A stop request signal generating means for generating the stop request signal and transmitting the stop request signal to the mobile communication terminal when information on a stop instruction prohibiting the use of the mobile communication terminal is registered in the user information database. Remote lock system featuring. The mobile communication terminal in a remote lock system comprising a mobile communication terminal and a communication network having a function of transmitting a stop request signal for stopping the operation of the mobile communication terminal,
A data storage unit that encrypts and stores data using an encryption key and decrypts the data encrypted by using the encryption key ;
An encryption key information control unit for supplying an encryption key to the data storage unit;
When making at least one of a call origination request and a location registration request to the communication network, a signal received from the communication network includes a stop request signal instructing to stop the function of the mobile communication terminal Stop request signal presence / absence judging means for judging whether or not
When the stop request signal presence determination means determines that the stop request signal is included, the encryption key information control unit rejects the supply of the encryption key to the data storage unit and the data storage unit mobile communication terminal to use stop, characterized in that it comprises a function management means for inhibiting decoding of data of the data storage unit in.

Images