JP5564066B2 - Security lock method and terminal for a plurality of IC card modules - Google Patents

Description

  The present invention relates to a security lock technique for an IC (Integrated Circuit) card module.

  Among IC card modules, there is a non-contact IC card module that communicates with a nearby external reader / writer device in a non-contact manner. There is “FeliCa (registered trademark)” as a standard of the non-contact IC card module. The card of this standard receives a carrier from an external reader / writer device, receives power supply by electromagnetic induction, and communicates with the reader / writer device by carrier modulation. Especially in Japan, mobile phones and smartphones equipped with FeliCa chips are popular. This functions as electronic money together with an application of “Osaifu-Keitai (registered trademark)”, for example. In addition, by installing an application on the mobile terminal, a function of transferring various secure data such as tickets and coupons can be realized.

  On the other hand, when such a portable terminal is stolen or lost, there is a possibility that electronic money or the like may be illegally used by a third party. For this reason, the FeliCa chip is equipped with a security lock function for preventing unauthorized use by a third party (see, for example, Non-Patent Document 1). The user can lock or unlock the FeliCa card itself by inputting a password (number) to the mobile terminal (remote operation is also possible). The locked mobile terminal prohibits access to the information area of the FeliCa card from an application operated by a user and stops power supply to the non-contact communication antenna.

  As another technique, a “user identification module card” is generally inserted into a mobile terminal that can be connected to a mobile phone network. A typical user identification module card is a UIM (User Identity Module) card. The UIM card is issued by a mobile phone carrier and is an IC card in which unique identification information (for example, contractor information) and authentication information are recorded. The UIM card can also register private information such as an address book and personal identification information for credit settlement in an encrypted manner. Since the UIM card is generally detachable, it may be inserted into a different portable terminal.

  The user identification module card is tamper resistant. “Tamper resistance” refers to the ability to physically and logically protect internal analysis and tampering of semiconductor chips and the like. Normally, the circuit configuration and the program of the user identification module card are logically encrypted, and high confidentiality is maintained for reading from the outside.

  Such a UIM card also has a lock function like the FeliCa chip. The user can lock or unlock the portable terminal by inputting a lock password (number) for the UIM card (remote operation is also possible). The locked mobile terminal prohibits access to the information area of the UIM card from an application operated by a user.

  Furthermore, as another technology, “NFC (Near Field Communication)”, a new standard for contactless IC cards, is spreading worldwide. In particular, a secure element of Type A / B function (ISO14443) in NFC has been mounted on a UIM card. “TypeA / B” is a non-contact communication standard for external reader / writer devices, similar to FeliCa, and there are two types, TypeA and TypeB, depending on the communication method with the reader / writer device. It is prescribed. The NFC card module functions as a non-contact IC card by a card emulation function.

  Therefore, by inserting a UIM card equipped with NFC into a portable terminal equipped with a FeliCa chip, both FeliCa and NFC (Type A / B) contactless communication services can be used.

au, "Osaifu Keitai (EZ FeliCa)", [online], [Search February 8, 2012], Internet <URL: http://www.au.kddi.com/ez_FeliCa/service/security.html>

  However, according to the prior art described above. The lock / unlock operation for the FeliCa chip and the lock / unlock operation for the UIM card were separate. Different lock / unlock operations are cumbersome for the user. In addition, since the UIM card can be inserted into and removed from the mobile terminal, the locked / unlocked state of the FeliCa chip may not match the locked / unlocked state of the UIM card.

  On the other hand, the inventors considered that it is convenient for the user to perform the lock / unlock operation by integrating the FeliCa chip and the NFC in the UIM card. That is, from the viewpoint of the user, the user interface for the lock operation should be unified.

  Therefore, the present invention can simultaneously lock / unlock the first IC card module and the second IC card module included in the user identification module card, even if an unauthorized user identification module card is inserted. An object is to provide a security lock method and a terminal that cannot be unlocked.

According to the present invention, there is provided a security lock method in a terminal equipped with a first IC (Integrated Circuit) card module and a processor that executes an application for controlling the module,
The terminal further includes a second IC card module storing the unique identification information,
For lock operation,
A processor outputting a password input by a user to the second IC card module;
A second IC card module storing a password;
A processor locking both the first IC card module and the second IC card module;
For unlocking operation,
A processor outputting a password input by a user to the second IC card module;
A step in which the second IC card module determines whether or not a password inputted from the processor and a previously stored password match, and outputs a password success notification to the processor when it is determined to be true; ,
The processor has a step of unlocking both the first IC card module and the second IC card module after receiving the password success notification.

According to another embodiment of the security lock method of the present invention,
Before the device is turned off,
The processor stores the unique identification information stored in the second IC card module and the lock / unlock state.
When the terminal is turned on or after the terminal is turned on and an unlock operation is performed, the processor stores the unique identification information and the lock / unlock state stored in advance, It is also possible to determine whether or not the unique identification information and the lock / unlock state stored in the IC card module 2 match each other, and after the determination is true, each step in the unlock operation can be executed. preferable.

According to another embodiment of the security lock method of the present invention,
The first IC card module is a FeliCa (registered trademark) non-contact IC card module,
The second IC card module is preferably a non-contact IC card module of NFC (Near Field Communication) (registered trademark).

According to another embodiment of the security lock method of the present invention,
The second IC card module is included in the user identification module card,
It is also preferable that the user identification module card can be inserted into and removed from the terminal.

According to another embodiment of the security lock method of the present invention,
The device is a mobile device that connects to the mobile phone network,
The user identification module card is a UIM (User Identity Module) card, a SIM (Subscriber Identity Module) card, a USIM (Universal SIM) card or an R-UIM (Removable UIM) card provided by a mobile phone carrier.
The unique identification information is a telephone number or a manufacturing number. The password is preferably a PIN (Personal Identification Number).

According to the present invention, in a terminal equipped with a first IC card module and a processor that executes an application for controlling the module,
A second IC card module storing unique identification information;
Processor
Password transfer control means for outputting a password input by the user to the second IC card module;
In the case of the lock operation, both the first IC card module and the second IC card module are locked, and in the case of the unlock operation, when the password success notification is received from the second IC card module, A lock control means for unlocking both the IC card module and the second IC card module;
The second IC card module
In the case of the lock operation, password storage means for storing the password input from the processor,
A password determination means for determining whether or not a password inputted from the processor and a pre-stored password match in the case of an unlocking operation, and outputting a password success notification to the processor when it is determined to be true; It is characterized by having.

According to another embodiment of the terminal of the present invention,
Processor
Unique identification information storage means for storing the unique identification information stored in the second IC card module and the lock / unlock state before the terminal is turned off;
When the terminal is turned on, or after the terminal is turned on and an unlock operation is performed, the unique identification information and the lock / unlock state stored in advance and the second IC Information determining means for determining whether or not the unique identification information stored in the card module and the locked / unlocked state match, and after the information determining means determines true, the password transfer control means and lock control It is also preferred that the means become effective.

According to another embodiment of the terminal of the present invention,
The first IC card module is a FeliCa (registered trademark) non-contact IC card module,
The second IC card module is preferably an NFC (registered trademark) non-contact IC card module.

According to another embodiment of the terminal of the present invention,
The second IC card module is included in the user identification module card,
It is also preferable that the user identification module card can be inserted into and removed from the terminal.

According to another embodiment of the terminal of the present invention,
The device is a mobile device that connects to the mobile phone network,
The user identification module card is a UIM card, a SIM card, a USIM card or an R-UIM card provided by a mobile phone carrier.
The unique identification information is a telephone number or a serial number. The password is preferably a PIN.

  According to the security lock method and terminal of the present invention, the first IC card module and the second IC card module included in the user identification module card can be locked / unlocked at the same time. Even if a card is inserted, it cannot be unlocked. As a result, when viewed from the user, the first IC card module and the second IC card module can be integrated and locked / unlocked.

It is explanatory drawing showing lock / unlock operation in this invention. It is a functional block diagram of the portable terminal in this invention. It is a functional block diagram of the processor and UIM card in this invention. It is a 1st sequence diagram in the portable terminal in this invention. It is a 2nd sequence diagram in the portable terminal in this invention.

  Below, the form for implementing this invention is demonstrated in detail using drawing.

  According to the present invention, a plurality of IC card modules in a terminal are integrated and locked / unlocked. A transition is made from the unlocked state to a locked state in which the functions of both IC card modules are disabled, using the password input by the user as a key. Further, the locked state is shifted to an unlocked state in which the functions of both IC card modules are validated using the password input by the user as a key.

  FIG. 1 is an explanatory diagram showing a lock / unlock operation in the present invention.

A display screen in a general smartphone will be described as an example.
(S11) In the “function / setting menu”, the user selects “4. Privacy”.
(S12) Next, in the “Privacy Menu”, the user selects “1. Security Lock”.
(S13) Next, in the “security lock menu”, the user selects “2. NFC lock”.
(S14) Here, the mobile terminal displays a password input form on the screen. The user inputs, for example, a 4-digit password such as a PIN (Personal Identification Number) code as a password.
(S15) Thereby, the portable terminal is in a locked state. After that, it is often operated to a sleep state or a power-off state.

(S16) Next, it is assumed that the user turns on the power button, for example, for the operation of turning on the power of the portable terminal or canceling the sleep.
(S17) Then, the mobile terminal displays a password input form on the screen. The user inputs, for example, a 4-digit number such as a PIN code as a password.
(S18) Here, when the password input in S17 matches the password input in S14, the mobile terminal is unlocked.

  FIG. 2 is a functional configuration diagram of the mobile terminal according to the present invention.

  According to FIG. 2, the mobile terminal 1 includes a processor 10, a first IC card module 11, a user identification module (UIM) card 12, a contactless wireless chip 13, a baseband chip 14, and a mobile phone. The wireless chip 15 includes a user interface unit 16, a mobile phone antenna 17, and a non-contact communication antenna 18.

  The first IC card module 11 is embedded in the mobile terminal 1 in advance, and is a non-contact IC card such as a FeliCa (registered trademark) card, for example. The first IC card module 11 includes, for example, a SAM (Secure Application Module) chip that stores FeliCa IC applications. The SAM chip refers to a hardware security module responsible for encryption processing and key management. The first IC card module can communicate with the reader / writer device 2 via the non-contact wireless chip 13 and the non-contact communication antenna 18.

  The user identification module card 12 is provided by a contract with a mobile phone carrier, and can be inserted into and removed from the mobile terminal 1. The user identification module card is, for example, a UIM (User Identity Module) card, and may be a SIM (Subscriber Identity Module) card, a USIM (Universal SIM) card, or an R-UIM (Removable UIM) card (hereinafter, “ It will be described as “UIM card”).

  The UIM card 12 further includes a second IC card module. The second IC card module is a non-contact IC card module such as an NFC (Type A / B) card. The NFC card module can also communicate with the reader / writer device 2 via the non-contact wireless chip 13 and the non-contact communication antenna 18.

  The processor 10 executes processing of the entire mobile terminal 1 and executes an application for controlling the IC card module. The processor 10 is connected to a user-operable user interface unit 16 and can input a password for locking / unlocking from the user. The processor 10 is also connected to the baseband chip 14 and can send and receive data to and from an external communication device.

  One of the baseband chips 14 is connected to the mobile phone wireless chip 15 and the other is connected to the non-contact wireless chip 13. The mobile phone wireless chip 15 is connected to the mobile phone antenna 17 and can transmit and receive data to and from a base station of the mobile phone network. Note that the baseband chip 14 also includes a chip for processing multimedia such as moving images, still images, and sounds.

  The contactless wireless chip 13 is connected to the contactless communication antenna 18 and can transmit and receive data to and from the reader / writer device 2. The contactless wireless chip 13 is a CLF (Contactless Front end) chip and is an RF (Radio Frequency) chip that communicates with the reader / writer device 2 in a contactless manner. The non-contact wireless chip 13 is connected to the first IC card module 11 and the UIM card 12.

  The first IC card module 11 and the second IC card module included in the UIM card 12 are connected to the external reader / writer device 2 via the non-contact wireless chip 13 and the non-contact communication antenna 18. Communicates with electromagnetic waves.

  FIG. 3 is a functional block diagram of the processor and UIM card in the present invention.

[Processor 10]
According to FIG. 3, the processor 10 includes an information storage unit 100, an information determination unit 101, a password transfer control unit 102, and a lock control unit 103.

  The information storage unit 100 stores the unique identification information stored in the second IC card module and the locked / unlocked state at least before the terminal is turned off in the unlocked state. The “unique identification information” may be, for example, a telephone number of the mobile terminal 1 or a manufacturing number (hereinafter, the unique identification information will be described as a telephone number). Note that the information storage unit 100 maintains information storage even when the power of the mobile terminal is turned off.

When the mobile terminal 1 is powered on or after the mobile terminal 1 is powered on and an unlock operation is performed, the information determination unit 101 receives the unique identification information and the lock / lock from the UIM card 12. Get unlock status. First, it is determined whether or not the lock / unlock state stored in the information storage unit 100 matches the lock / unlock state acquired from the UIM card 12. Only when the locked / unlocked state matches, the information determination unit 101 next determines whether or not the telephone number stored in advance in the information storage unit 100 matches the telephone number acquired from the UIM card 12. judge. Only when these determinations match, a lockable notification is output to the password transfer control unit 102 and the function of the lock control unit 103 is enabled.

  The information determination unit 101 outputs the telephone number acquired from the UIM card 12 to the information storage unit 100 when the lock / unlock state is “lock-> unlock”. That is, the processor 10 stores the telephone number acquired from the UIM card 12 as valid.

  The password transfer control unit 102 enables the lock / unlock operation for the mobile terminal 1 after inputting the lockable notification from the information determination unit 101. The password transfer control unit 102 waits for input of a password corresponding to a user operation via the user interface unit 16 (see FIG. 1 described above). The password transfer control unit 102 outputs the password input from the user interface unit 16 to the UIM card 12.

  In the case of a lock operation, the lock control unit 103 locks both the first IC card module 11 and the second IC card module 123 of the UIM card 12. In the case of an unlock operation, when a password success notification (see the password determination unit 122 of the UIM card 12 described later) is received from the UIM card 12, the first IC card module 11 and the second IC card module 123 Unlock both. In addition, the lock control unit 103 outputs information on the lock / unlock state to the information storage unit 100. As a result, the information storage unit 100 stores information on the locked / unlocked state.

[UIM card 12]
The UIM card 12 includes an information storage unit 120, a password storage unit 121, a password determination unit 122, and a second IC card module 123.

  The information storage unit 120 stores in advance a telephone number (unique identification information) provided by a mobile phone carrier.

  In the case of a lock operation, the password storage unit 121 stores a password input from the processor 10 and a locked / unlocked state.

  In the case of the unlock operation, the password determination unit 122 determines whether or not the password input from the processor matches the password stored in advance. When it is determined to be true, the password determination unit 122 outputs a password success notification to the processor. This password success notification is received by the lock control unit 103 of the processor 10.

  The second IC card module 123 is, for example, an NFC Type A / B card module, and operates according to a lock / unlock command from the processor 10.

FIG. 4 is a first sequence diagram in the portable terminal according to the present invention.
FIG. 5 is a second sequence diagram in the portable terminal according to the present invention.

[Unlocked state-> Locked state]
(S401) The processor 10 displays a lock password input form on the user interface unit 16 in response to a user operation. The password input by the user is input to the processor 10. Then, the processor 10 outputs the password to the UIM card 12 via the baseband chip 14 and the non-contact wireless chip 13.
(S402) The UIM card 12 stores a lock password.
(S403) Next, the processor 10 outputs a lock notification to the first IC card module 11 and the UIM card 12 via the baseband chip 14 and the non-contact wireless chip 13. As a result, the first IC card module 11 and the second IC card module 123 of the UIM card 12 are locked.

[Power OFF]
Thereafter, the mobile terminal 1 is operated to turn off the power. Before the power is turned off, the processor 10 stores the unique identification information stored in the UIM card module and the locked / unlocked state.

[Power ON]
Here, comparing FIG. 4 and FIG. 5, according to FIG. 4, immediately after the power is turned on, the UIM card validity confirmation sequence (S411 to S413) is executed. On the other hand, according to FIG. 5, when the unlocking operation is performed after the power is turned on, the UIM card validity confirmation sequence is executed.

[UIM card validity check sequence]
(S411) The processor 10 confirms the validity of the UIM card 12. First, the UIM card 12 outputs a telephone number (unique identification information) and a locked / unlocked state to the processor 10 via the contactless wireless chip 13 and the baseband chip 14.
(S412) The processor 10 determines whether or not the lock / unlock state stored in advance matches the lock / unlock state stored in the UIM card 12. If this determination is false (mismatch), the processor 10 displays an error to the user through the user interface unit 16.
(S413) Further, the processor 10 determines whether or not the unique identification information stored in advance matches the unique identification information stored in the UIM card 12. If the determination is false (mismatch), the processor 10 displays an error to the user through the user interface unit 16. Since the UIM card 12 can be inserted into and removed from the portable terminal 1, unlocking can be avoided when a mismatch between the unique identification information and the locked / unlocked state occurs.

[Locked state-> Unlocked state]
(S421) The processor 10 displays an unlock password input form on the user interface unit 16 in response to a user operation. The password input by the user is input to the processor 10. Then, the processor 10 outputs the password to the UIM card 12 via the baseband chip 14 and the non-contact wireless chip 13.
(S422) The UIM card 12 determines whether or not the password input from the processor 10 matches the password stored in advance. When it is determined to be true, the UIM card 12 outputs a password success notification to the processor 10.
(S423) When receiving the password success notification, the processor 10 outputs an unlock notification to the first IC card module 11 and the UIM card 12 via the baseband chip 14 and the non-contact wireless chip 13. As a result, the first IC card module 11 and the second C card module of the UIM card 12 are unlocked.

  As described above in detail, according to the security lock method and terminal of the present invention, the first IC card module and the second IC card module included in the user identification module card are simultaneously locked / unlocked. And even if an unauthorized user identification module card is inserted, it cannot be unlocked. As a result, when viewed from the user, the first IC card module and the second IC card module can be integrated and locked / unlocked.

  In the various embodiments of the present invention described above, various changes, modifications, and omissions in the scope of the technical idea and the viewpoint of the present invention can be easily made by those skilled in the art. The above description is merely an example, and is not intended to be restrictive. The invention is limited only as defined in the following claims and the equivalents thereto.

DESCRIPTION OF SYMBOLS 1 Mobile terminal 10 Processor 100 Information storage part 101 Information determination part 102 Password transfer control part 103 Lock control part 11 1st IC card module, FeliCa chip 12 UIM card, user identification module card 120 Information storage part 121 Password storage part 122 Password Determination unit 123 Second IC card module, NFC chip 13 Non-contact wireless chip 14 Baseband chip 15 Mobile phone wireless chip 16 User interface unit 17 Mobile phone antenna 18 Non-contact communication antenna 2 Reader / writer device

Claims (10)

A security lock method in a terminal equipped with a first IC (Integrated Circuit) card module and a processor that executes an application for controlling the module,
The terminal further includes a second IC card module storing unique identification information,
For lock operation,
The processor outputting a password input by a user to a second IC card module;
A second IC card module storing the password;
The processor includes locking both the first IC card module and the second IC card module;
For unlocking operation,
The processor outputting a password input by a user to a second IC card module;
The second IC card module determines whether or not the password input from the processor matches the password stored in advance, and outputs a password success notification to the processor when it is determined to be true. Steps,
And a step of unlocking both of the first IC card module and the second IC card module after the processor receives the password success notification. Before the device is turned off,
The processor stores unique identification information stored in the second IC card module and a locked / unlocked state,
When the terminal is turned on, or after the terminal is turned on and the unlocking operation is performed, the processor stores the unique identification information and lock / unlock stored in advance. It is determined whether or not the state matches the unique identification information stored in the second IC card module and the lock / unlock state, and after the determination is true, each step in the case of the unlock operation is executed. The security lock method according to claim 1, wherein the security lock method is enabled. The first IC card module is a FeliCa (registered trademark) non-contact IC card module,
3. The security lock method according to claim 1, wherein the second IC card module is an NFC (Near Field Communication) (registered trademark) non-contact IC card module. The second IC card module is included in the user identification module card,
The security lock method according to any one of claims 1 to 3, wherein the user identification module card is detachable from the terminal. The terminal is a mobile terminal connected to a mobile phone network,
The user identification module card is a UIM (User Identity Module) card, a SIM (Subscriber Identity Module) card, a USIM (Universal SIM) card or an R-UIM (Removable UIM) card provided by a mobile phone carrier.
5. The security lock method according to claim 4, wherein the unique identification information is a telephone number or a manufacturing number. The password is a PIN (Personal Identification Number). In a terminal equipped with a first IC card module and a processor that executes an application for controlling the module,
A second IC card module storing unique identification information;
The processor is
Password transfer control means for outputting a password input by the user to the second IC card module;
In the case of the lock operation, both the first IC card module and the second IC card module are locked, and in the case of the unlock operation, when the password success notification is received from the second IC card module, A lock control means for unlocking both the IC card module and the second IC card module;
The second IC card module
In the case of a lock operation, password storage means for storing a password input from the processor;
In the case of an unlock operation, it is determined whether or not a password input from the processor matches a previously stored password, and when it is determined to be true, a password determination that outputs a password success notification to the processor And a terminal. The processor is
Unique identification information storage means for storing the unique identification information stored in the second IC card module and the lock / unlock state before the terminal is turned off;
When the terminal is turned on, or after the terminal is turned on and the unlocking operation is performed, the previously stored unique identification information and the lock / unlock state, Information determining means for determining whether or not the unique identification information and the locked / unlocked state stored in the IC card module of 2 match, and the password transfer after being determined to be true by the information determining means The terminal according to claim 6, wherein the control unit and the lock control unit are enabled. The first IC card module is a FeliCa (registered trademark) non-contact IC card module,
The terminal according to claim 6 or 7, wherein the second IC card module is an NFC (registered trademark) non-contact IC card module. The second IC card module is included in the user identification module card,
The terminal according to claim 6, wherein the user identification module card can be inserted into and removed from the terminal. The terminal is a mobile terminal connected to a mobile phone network,
The user identification module card is a UIM card, a SIM card, a USIM card or an R-UIM card provided by a mobile phone carrier.
The terminal according to claim 9, wherein the unique identification information is a telephone number or a manufacturing number. The password is a PIN.

Images