JP6073755B2 - Dummy subscriber identification module, communication terminal, authentication system - Google Patents

Description

  The present invention relates to a dummy subscriber identification module that operates like a subscriber identification module, a communication terminal including the dummy subscriber identification module, and an authentication system.

  The subscriber identification module is a module (IC card) in which a unique ID number for specifying a telephone number used in a communication terminal is recorded. The subscriber identification module is referred to as UICC, SIM, UIM, USIM, etc. depending on the standard to which it is compliant. SIM may be used as a general term for these without distinguishing between communication methods. For example, a unique number called IMSI (International Mobile Subscriber Identity) is assigned to the SIM card, and communication is possible by linking this to a telephone number. By inserting and removing the SIM card, the telephone number can be transferred to another communication terminal, or a plurality of telephone numbers can be switched and used by one communication terminal. Patent Document 1 discloses a SIM card that realizes functions such as a credit function in addition to communication control of a communication terminal. The SIM card of Patent Document 1 includes a SIM card storage unit that stores communication data of a communication terminal and a security storage unit that stores secret information such as personal information. The SIM card is a message transmitted from a communication terminal body or a reader / writer device. Based on the included code, it is determined whether the data required for the reply is stored in the SIM card storage unit or the security storage unit.

JP 2010-20513 A

  Since the subscriber identification module is used when authenticating a communication terminal in NW connection, it is generally used in a one-to-one correspondence with the communication terminal. Therefore, if you want to use the same authentication information, telephone number, etc. together in another communication terminal, it is necessary to extract the subscriber identification module from the original communication terminal and reinsert it in another communication terminal. Was damaged. Therefore, an object of the present invention is to provide a dummy subscriber identification module that can omit the attachment / detachment of the subscriber identification module when a plurality of communication terminals are used in combination.

  The dummy subscriber identification module of the present invention includes a dummy PAN unit, a reset unit, an authentication information request unit, and an authentication information transmission unit.

  The dummy PAN unit establishes a personal area network connection, that is, a PAN connection with the subscriber identification module main unit connected to the genuine subscriber identification module, and authenticates the genuine subscriber identification module from the subscriber identification module main unit through the PAN connection. Get information. The reset unit resets the dummy subscriber identification module and notifies the modem unit of the communication terminal of the reset. The authentication information request unit transmits an authentication information request from the modem unit notified of the reset to the dummy PAN unit. The authentication information transmitting unit transmits the authentication information to the modem unit when receiving the authentication information from the dummy PAN unit that has received the authentication information request.

  According to the dummy subscriber identification module of the present invention, the attachment / detachment of the subscriber identification module can be omitted when a plurality of communication terminals are used in combination.

1 is a block diagram illustrating a configuration of an authentication system according to a first embodiment. FIG. 2 is a block diagram illustrating a configuration of a modem unit according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration of a dummy IC unit according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration of a dummy PAN unit according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration of a main body PAN unit according to the first embodiment. FIG. 3 is a sequence diagram illustrating temporary activation and PAN connection operation of the authentication system according to the first embodiment. FIG. 3 is a sequence diagram illustrating an authentication information request operation of the authentication system according to the first embodiment. FIG. 3 is a sequence diagram showing an authentication information receiving operation of the authentication system according to the first embodiment. FIG. 3 is a sequence diagram showing a PAN cutting operation of the authentication system according to the first embodiment. The block diagram which shows the structure of the communication terminal of Example 2, and a dummy subscriber identification module. FIG. 6 is a block diagram illustrating a configuration of a dummy IC unit according to the second embodiment. The block diagram which shows the structure of the subscriber identification module main body apparatus of Example 3. FIG. 10 is a flowchart showing the operation of the subscriber identification module main unit according to the third embodiment.

  Hereinafter, embodiments of the present invention will be described in detail. In addition, the same number is attached | subjected to the structure part which has the same function, and duplication description is abbreviate | omitted.

The terms used in this specification will be explained below.
<PAN>
A PAN (Personal Area Network) is a computer network used for communication between computer devices around a person. The PAN may be used for communication between devices, or may be used for connection (uplink) to an upper network or the Internet. The personal area networking profile is one of Bluetooth (registered trademark) profiles, and is used to construct a small-scale network between Bluetooth-compatible devices.
<Communication terminal>
The communication terminal is a general term for a telephone, particularly a mobile phone, a PHS telephone, or a PDA having a communication function.

  The outline of the authentication system according to the first embodiment will be described below with reference to FIG. FIG. 1 is a block diagram showing the configuration of the authentication system 10000 of this embodiment. As shown in FIG. 1, the authentication system 10000 of this embodiment includes a communication terminal 1, a subscriber identification module main unit 2, and an NW (network) 9. The communication terminal 1 includes a modem unit 11, a dummy subscriber identification module 12, a dummy socket unit 13, a CCPU unit 14, and an ACPU unit 15. The CCPU unit 14 is a communication CPU (electronic circuit), and the ACPU unit 15 is an application CPU (electronic circuit). The subscriber identification module main unit 2 includes a main unit PAN unit 21, a subscriber identification module 22, a main unit socket unit 23, a CPU unit 24, and a main unit NFC unit 25. The subscriber identification module main unit 2 can be mounted as a small device including, for example, a UICC socket, a power-saving PAN communication circuit, an NFC communication circuit, and a simple CPU. In the figure, thin dashed arrows indicate communication by NFC (Near Field Communication), alternate long and short dash arrows indicate communication by PAN, and broken arrows indicate communication by a mobile communication network.

  Hereinafter, the configuration of the modem unit 11 will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the modem unit 11 of this embodiment. As shown in FIG. 2, the modem unit 11 includes a first authentication information request unit 111, an AR transmission unit 112, and a subscriber identification module confirmation unit 113. These operations will be described later.

  Hereinafter, the configuration of the dummy IC unit 121 will be described with reference to FIG. FIG. 3 is a block diagram showing the configuration of the dummy IC unit 121 of this embodiment. As shown in FIG. 3, the dummy IC unit 121 includes an ATR transmission unit 1211, a dummy information transmission unit 1212, a PAN connection confirmation request unit 1213, a reset unit 1214, a second authentication information request unit 1215, An authentication information transmission unit 1216. These operations will be described later.

  Hereinafter, the configuration of the dummy PAN unit 122 will be described with reference to FIG. FIG. 4 is a block diagram showing the configuration of the dummy PAN unit 122 of this embodiment. As shown in FIG. 4, the dummy PAN unit 122 includes a PAN connection command transmission unit 1221, a PAN connection response transmission unit 1222, a PAN encapsulation request transmission unit 1223, a first authentication information transmission unit 1224, and a PAN disconnection completion. A response transmission unit 1225. These operations will be described later.

  Hereinafter, the configuration of the main body PAN unit 21 will be described with reference to FIG. FIG. 5 is a block diagram showing the configuration of the main body PAN unit 21 of this embodiment. As shown in FIG. 5, the main body PAN unit 21 includes a PAN connection completion response transmission unit 211, a third authentication information request unit 212, a PAN encapsulation information transmission unit 213, and a PAN disconnect command transmission unit 214. These operations will be described later.

  Hereinafter, the temporary activation operation and the PAN connection operation of the authentication system 10000 according to this embodiment will be described with reference to FIG. FIG. 6 is a sequence diagram showing provisional activation and PAN connection operation of the authentication system 10000 of this embodiment.

<Temporary startup operation>
Hereinafter, the provisional activation operation will be described. The sequence diagram of FIG. 6 starts immediately after power is supplied to the dummy subscriber identification module 12. The ATR transmission unit 1211 of the dummy IC unit 121 transmits ATR (Answer To Reset), which is initial response information, to the modem unit 11 when power is supplied to the dummy subscriber identification module 12 (S1211). At this time, the ATR transmission unit 1211 needs to transmit the same ATR as the ATR output by the genuine subscriber identification module 22 to the modem unit 11 in order to emulate the genuine subscriber identification module 22. When receiving the ATR from the ATR transmitting unit 1211, the first authentication information requesting unit 111 of the modem unit 11 transmits an authentication information request (Select EF files) to the dummy IC unit 121 (S111). When receiving the authentication information request from the first authentication information request unit 111, the dummy information transmission unit 1212 of the dummy IC unit 121 transmits dummy information that is fake authentication information to the modem unit 11 (S1212). Thereafter, the modem unit 11 and the dummy subscriber identification module 12 transition to the conventional out-of-service standby mode. In this way, when the dummy subscriber identification module 12 is powered on, the dummy information transmission unit 1212 of the dummy IC unit 121 transmits dummy information, which is false authentication information, to the modem unit 11, thereby authenticating the authenticity for the time being. Even if there is no information, provisional activation can be executed.

<PAN connection operation>
Hereinafter, the PAN connection operation will be described. The PAN connection command transmission unit 1221 of the dummy PAN unit 122 transmits a PAN connection command to the main body PAN unit 21 of the subscriber identification module main unit 2 at an arbitrary timing (S1221). Although the transmission timing of the PAN connection command can be arbitrary, for example, the PAN connection command transmission unit 1221 transmits the PAN connection command based on the communication result of the NFC communication between the dummy NFC unit 123 and the main body NFC unit 25. Also good. More specifically, for example, an application that executes PAN connection / disconnection is started in advance in the communication terminal 1, and NFC communication is performed between the dummy NFC unit 123 and the main body NFC unit 25. The trigger may be that a PAN connection request is transmitted to the unit 25. Thus, since the timing of PAN connection establishment is easily understood by the user by using NFC communication as a trigger, the user can easily control the PAN connection. A similar trigger can be set for PAN disconnection described later.

  When the PAN connection command is transmitted, the dummy PAN unit 122 and the main body PAN unit 21 establish a PAN connection. When the PAN connection is established, the PAN connection completion response transmission unit 211 of the main body PAN unit 21 transmits a PAN connection completion response to the dummy PAN unit 122 (S211).

<Authentication information request operation>
Hereinafter, the authentication information requesting operation of the authentication system 10000 of this embodiment will be described with reference to FIG. FIG. 7 is a sequence diagram showing an authentication information requesting operation of the authentication system 10000 of this embodiment. The PAN connection confirmation request unit 1213 of the dummy IC unit 121 transmits a PAN connection confirmation request to the dummy PAN unit 122 at an arbitrary timing (S1213). Step S1213 is an operation for periodically checking whether or not a PAN connection is established between the dummy subscriber identification module 12 and the subscriber identification module main unit 2. Therefore, it is preferable that step S1213 is periodically executed every predetermined time after the dummy subscriber identification module 12 is powered on. When the PAN connection response transmission unit 1222 of the dummy PAN unit 122 receives the PAN connection confirmation request from the PAN connection confirmation request unit 1213, if the PAN connection with the subscriber identification module main unit 2 has already been established, Then, a PAN connection response indicating that is transmitted to the dummy IC unit 121 (S1222). In step S1222, when the PAN connection with the subscriber identification module main unit 2 is not established, the PAN connection response transmission unit 1222 may make no response.

  When receiving the PAN connection response from the PAN connection response transmission unit 1222, the reset unit 1214 of the dummy IC unit 121 resets the dummy subscriber identification module 12 and notifies the modem unit 11 of the reset (S1214). . Step S1214 is an operation performed to receive the card information request from the modem unit 11 again in order for the dummy subscriber identification module 12 to emulate the genuine subscriber identification module 22. When receiving a reset notification from the reset unit 1214, the first authentication information request unit 111 of the modem unit 11 transmits an authentication information request (Select EF files) to the dummy IC unit 121 (S111). A modem provided in a conventional communication terminal has a specification that returns an authentication information request (Select EF files) when a reset is notified from a UIM card or the like or when an ATR is received from the UIM card or the like. Therefore, the modem unit 11 of the present embodiment may be the modem itself provided in the conventional communication terminal and does not require any special specification change.

  When the second authentication information request unit 1215 of the dummy IC unit 121 receives an authentication information request from the first authentication information request unit 111 of the modem unit 11 notified of the reset, the second authentication information request unit 1215 sends the authentication information request to the dummy PAN unit 122. Transmit (S1215). When receiving the authentication information request from the second authentication information requesting unit 1215, the PAN encapsulation request transmitting unit 1223 of the dummy PAN unit 122 encapsulates the authentication information request, and the main body PAN unit of the subscriber identification module main unit 2 21 (S1223). Encapsulation is realized by a Bluetooth network encapsulation protocol (BNEP, Bluetooth Network Encapsulation Protocol). The authentication information request can be implemented with an APDU command.

<Authentication information reception operation>
Hereinafter, the authentication information receiving operation of the authentication system 10000 of this embodiment will be described with reference to FIG. FIG. 8 is a sequence diagram showing an authentication information receiving operation of the authentication system 10000 of this embodiment. When receiving the encapsulated authentication information request from the PAN encapsulation request transmission unit 1223, the third authentication information request unit 212 of the main body PAN unit 21 transmits the authentication information request to the subscriber identification module 22 (S212). ). When receiving the authentication information request from the third authentication information request unit 212, the subscriber identification module 22 transmits authentication information (EF files) to the main body PAN unit 21 (S221). The subscriber identification module 22 is a genuine one possessed by the user, and authentic authentication information (EF files) is transmitted from the subscriber identification module 22. When receiving the authentication information from the subscriber identification module 22, the PAN encapsulation information transmission unit 213 of the main body PAN unit 21 encapsulates the authentication information and transmits it to the dummy PAN unit 122 of the dummy subscriber identification module 12 ( S213). The authentication information can be implemented with an APDU command as described above. Even if the APDU command is skimmed, there is no security problem, which is preferable. When receiving the encapsulated authentication information from the PAN encapsulated information transmitting unit 213, the first authentication information transmitting unit 1224 of the dummy PAN unit 122 transmits the authentication information to the dummy IC unit 121 (S1224). When receiving the authentication information from the first authentication information transmitting unit 1224, the second authentication information transmitting unit 1216 of the dummy IC unit 121 transmits the authentication information to the modem unit 11 (S1216). When receiving the authentication information from the second authentication information transmitting unit 1216, the AR transmitting unit 112 of the modem unit 11 transmits an Attach Request (attach request) to the NW (network) 9 (S112). The SGSN (not shown) in the NW 9 transmits an Attach Accept to the communication terminal via the RNC (not shown) in the NW 9 as well. In addition to this, the modem unit 11 executes PDP Context setting processing and the like. In this way, a network connection is established between the modem unit 11 and the NW 9.

  In this way, the dummy subscriber identification module 12 sends a reset notification to the modem unit 11, and the modem unit 11 notified of the reset executes a card information request (Select EF files), which is a conventional operation, and performs dummy subscription. Since the authentication information (EF files) acquired through the PAN connection is sent back to the modem unit 11 so that the subscriber identification module 12 responds to this, the dummy subscriber identification module 12 is like the genuine subscriber identification module 22. Can behave. The communication terminal 1 and the modem unit 11 may be the same as before and do not need to be modified.

<PAN cutting operation>
Hereinafter, the PAN cutting operation of the authentication system 10000 according to the present embodiment will be described with reference to FIG. FIG. 9 is a sequence diagram showing the PAN disconnection operation of the authentication system 10000 of this embodiment. The PAN disconnection command transmission unit 214 of the main body PAN unit 21 transmits a PAN disconnection command to the dummy PAN unit 122 of the dummy subscriber identification module 12 at an arbitrary timing (S214). Although the transmission timing of the PAN disconnection command can be arbitrary, for example, the PAN disconnection command may be transmitted based on the communication result of NFC communication between the dummy NFC unit 123 and the main body NFC unit 25. Specifically, an application for executing PAN connection / disconnection is started in advance in another communication terminal 1 connected to another dummy subscriber identification module 12, and the dummy NFC unit 123 of the other dummy subscriber identification module 12 is started. NFC communication is executed between the main body NFC unit 25 and the dummy NFC unit 123 of the other dummy subscriber identification module 12 transmits a PAN connection request to the main body NFC unit 25, and the main body NFC unit 25 transmits the PAN connection request. It is good also as a trigger to have received. In this way, the use of NFC communication as a trigger makes it easy for the user to understand the timing of PAN disconnection, so that the user can easily control PAN disconnection and connection switching to another dummy subscriber identification module.

  When the PAN disconnection command is transmitted, the dummy PAN unit 122 and the main body PAN unit 21 disconnect the PAN connection. When the PAN connection is disconnected, the PAN disconnection completion response transmission unit 1225 of the dummy PAN unit 122 transmits a PAN disconnection completion response to the main body PAN unit 21 (S1225). The subscriber identification module confirmation unit 113 of the modem unit 11 transmits a subscriber identification module confirmation request (S113). Step S113 is a process executed at an arbitrary timing, and is executed every predetermined time, for example. As shown in FIG. 9, when step S <b> 113 is executed after the PAN disconnection process, the dummy IC unit 121 makes no response to the modem 11. If there is no response from the dummy IC unit 121 within a predetermined time limit, the dummy subscriber identification module 12 is restarted. When the dummy subscriber identification module 12 is powered on again by the restart, the temporary activation operations of steps S1211, S111, and S1212 are executed, and the modem unit 11 and the dummy subscriber identification module 12 are in the conventional out-of-service standby mode. Transition to.

  When the communication terminal 1 transitions to the out-of-service standby mode, the PAN connection is not executed until the PAN connection command transmission operation in step S1221 is executed again in response to some trigger, and the dummy subscriber identification module 12 is emulated. Stopped. During this time, another dummy subscriber identification module connected to another communication terminal can establish a PAN connection with the subscriber identification module main unit 2 and the other dummy subscriber identification module can start emulating. It is.

  As described above, since the dummy subscriber identification module 12 of this embodiment can emulate the genuine subscriber identification module 22, the attachment / detachment of the subscriber identification module 22 is omitted when a plurality of communication terminals are used together. This improves user convenience.

  Next, a communication terminal and a dummy subscriber identification module according to the second embodiment will be described with reference to FIGS. FIG. 10 is a block diagram showing the configuration of the communication terminal 3 and the dummy subscriber identification module 32 of this embodiment. FIG. 11 is a block diagram showing the configuration of the dummy IC unit 321 of this embodiment. The communication terminal 3 according to the present embodiment is characterized in that the temporary activation operation described above is executed in place of the dummy subscriber identification module 32. Since the communication terminal 3 performs the provisional activation operation, even when the dummy subscriber identification module 32 is not inserted, the communication terminal 3 performs the provisional activation operation, thereby improving the convenience for the user.

  As shown in FIG. 10, the communication terminal 3 of the present embodiment includes a modem unit 11, a dummy socket unit 13, a CCPU unit 14, and an ACPU unit 15 as in the first embodiment, and is included in the communication terminal 1 of the first embodiment. A provisional activation application unit 36 that is not included. The provisional activation application unit 36 includes an ATR transmission unit 1211 and a dummy information transmission unit 1212 that are components in the dummy IC unit 121 in the first embodiment.

  On the other hand, as shown in FIG. 10, the dummy subscriber identification module 32 of this embodiment includes a dummy PAN section 122 and a dummy NFC section 123 as in the first embodiment, and the dummy IC section 121 of the first embodiment is the same as that of the first embodiment. The dummy IC unit 321 is changed to the dummy IC unit 321 in FIG. As illustrated in FIG. 11, the dummy IC unit 321 has a configuration in which the ATR transmission unit 1211 and the dummy information transmission unit 1212 are omitted from the dummy IC unit 121. In short, the ATR transmission unit 1211 and the dummy information transmission unit 1212 are moved from the dummy subscriber identification module 12 to the communication terminal 3, and the temporary activation operation is executed by software processing of the temporary activation application unit 36 of the communication terminal 1. Is done.

  Thus, according to the communication terminal 3 and the dummy subscriber identification module 32 of the present embodiment, in addition to the effects of the first embodiment, the communication terminal 3 can be used even when the dummy subscriber identification module 32 is not inserted. The user's convenience is improved because the temporary activation operation is performed.

  Next, the subscriber identification module main body apparatus of Example 3 is demonstrated with reference to FIG. 12, FIG. FIG. 12 is a block diagram showing the configuration of the subscriber identification module main unit 4 of this embodiment. FIG. 13 is a flowchart showing the operation of the subscriber identification module main unit 4 of this embodiment. The subscriber identification module main unit 4 according to the present embodiment determines whether or not the PAN connection can be switched according to the ID of the dummy subscriber identification module when switching the PAN connection between the plurality of dummy subscriber identification modules. Features. When the subscriber identification module main unit 4 of this embodiment determines whether or not the PAN connection can be switched, the security of the emulation function realized in the present invention can be enhanced.

  As shown in FIG. 12, the subscriber identification module main unit 4 of the present embodiment is similar to the first embodiment in that a main body PAN unit 21, a subscriber identification module 22, a main body socket unit 23, a CPU unit 24, a main unit, An ID acquisition unit 41 that includes the NFC unit 25 and is not included in the subscriber identification module main unit 2 of the first embodiment, a collation unit 42, a change notification unit 43, a PAN connection switching control unit 44, and a list storage unit 45 including. The list storage unit 45 stores a private list that is a list of IDs of dummy subscriber identification modules that allow PAN connection, and a block list that is a list of IDs of dummy subscriber identification modules that do not permit (block) PAN connection. ing. For example, the user registers in the private list the ID of the dummy subscriber identification module of the communication terminal used as a sub-machine. In the block list, for example, the ID of a dummy subscriber identification module of another person's communication terminal, the ID of a dummy subscriber identification module of a communication terminal (for example, digital signage, etc.) existing in a public space, and the like are stored.

  When a PAN connection has already been established between a certain dummy subscriber identification module, here referred to as dummy subscriber identification module 12-A, and the subscriber identification module main unit 4, another dummy subscriber identification module When the NFC communication is performed between the dummy NFC unit 123 and the main body NFC unit 25, which is referred to as a dummy subscriber identification module 12-B here, the ID acquisition unit 41 of the present embodiment uses the NFC communication. An ID is acquired from the dummy subscriber identification module 12-B (S41). The ID may be, for example, specific Bit information stored in the dummy IC unit 121, or a PAN MAC address. The collation unit 42 collates whether or not the acquired ID is included in a predetermined private list (S42A). When the acquired ID is included in the predetermined private list (S42AY), the change notification unit 43 is used for the communication terminal connected to the dummy subscriber identification module 12-A in which the PAN connection has already been established. The change notification of the terminal to be executed is executed (S43). The change notification can be implemented by, for example, a pop-up notification using a proactive command. The PAN connection switching control unit 44 switches the PAN connection from the dummy subscriber identification module 12-A that is currently connected to the PAN to another dummy subscriber identification module 12-B. Specifically, the PAN connection switching control unit 44 disconnects the PAN connection with the dummy subscriber identification module 12-A (S44A), and establishes the PAN connection with the dummy subscriber identification module 12-B (S44B).

  On the other hand, when the ID acquired in step S42A is not included in the predetermined private list (S42AN), the verification unit 42 verifies whether the acquired ID is included in the predetermined block list (S42B). ). When the acquired ID is included in the predetermined block list (S42BY), it is determined that the dummy subscriber identification module 12-B is not preferable for security as an emulation execution subject, and the flow without executing the PAN connection switching control. Ends. On the other hand, even when the acquired ID is not included in the predetermined block list in step S42B (S42BN), the collation unit 42 temporarily stores the ID in the block list (S42C) and performs PAN connection switching control. Is not executed and the flow ends (END). The temporary storage in the block list in step S42C is preferable from the viewpoint of security if it is manually canceled by the user, for example.

  Thus, according to the subscriber identification module main unit 4 of the present embodiment, it is possible to increase the security of the emulation function realized by the present invention by determining whether or not PAN connection switching is possible.

  The various processes described above are not only executed in time series according to the description, but may also be executed in parallel or individually as required by the processing capability of the apparatus that executes the processes. Needless to say, other modifications are possible without departing from the spirit of the present invention.

  Further, when the above-described configuration is realized by a computer, processing contents of functions that each device should have are described by a program. The processing functions are realized on the computer by executing the program on the computer.

  The program describing the processing contents can be recorded on a computer-readable recording medium. As the computer-readable recording medium, for example, any recording medium such as a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory may be used.

  The program is distributed by selling, transferring, or lending a portable recording medium such as a DVD or CD-ROM in which the program is recorded. Furthermore, the program may be distributed by storing the program in a storage device of the server computer and transferring the program from the server computer to another computer via a network.

  A computer that executes such a program first stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. When executing the process, the computer reads a program stored in its own recording medium and executes a process according to the read program. As another execution form of the program, the computer may directly read the program from a portable recording medium and execute processing according to the program, and the program is transferred from the server computer to the computer. Each time, the processing according to the received program may be executed sequentially. Also, the program is not transferred from the server computer to the computer, and the above-described processing is executed by a so-called ASP (Application Service Provider) type service that realizes the processing function only by the execution instruction and result acquisition. It is good. Note that the program in this embodiment includes information that is used for processing by an electronic computer and that conforms to the program (data that is not a direct command to the computer but has a property that defines the processing of the computer).

  In this embodiment, the present apparatus is configured by executing a predetermined program on a computer. However, at least a part of these processing contents may be realized by hardware.

Claims (9)

A personal area network connection, that is, a PAN connection is established with a subscriber identification module main unit connected to the genuine subscriber identification module, and authentication information of the genuine subscriber identification module is obtained from the subscriber identification module main unit through the PAN connection. A dummy PAN section to be acquired;
Resetting the dummy subscriber identification module and notifying the modem part of the communication terminal of the reset;
An authentication information request unit for transmitting an authentication information request from the modem unit notified of the reset to the dummy PAN unit;
A dummy subscriber identification module including an authentication information transmitting unit that transmits the authentication information to the modem unit when the authentication information is received from the dummy PAN unit that has received the authentication information request. A dummy subscriber identification module according to claim 1, comprising:
An ATR transmitter for transmitting ATR as initial response information to the modem unit when power is supplied to the dummy subscriber identification module;
A dummy subscriber identification module including a dummy information transmission unit that transmits dummy information that is false authentication information to the modem unit when an authentication information request is received from the modem unit that has received the ATR. A dummy subscriber identification module according to claim 1 or 2,
A dummy NFC unit that performs NFC communication with the subscriber identification module main unit;
A dummy subscriber identification module including a PAN connection command transmission unit that transmits a PAN connection command to the subscriber identification module main unit based on a communication result of the NFC communication. A dummy subscriber identification module according to claim 1 or 2,
A dummy NFC unit that performs NFC communication with the subscriber identification module main unit;
When a PAN disconnection command transmitted from the subscriber identification module main unit is received based on the communication result of the NFC communication, the PAN disconnection process is executed and a PAN disconnection completion response is sent to the subscriber identification module main unit A dummy subscriber identification module including a PAN disconnection completion response transmission unit for transmitting. A modem unit that transmits an authentication information request to the dummy subscriber identification module when a reset is notified from the dummy subscriber identification module that is a fake subscriber identification module or when an ATR that is initial response information is received; ,
A personal area network connection, that is, a PAN connection is established with a subscriber identification module main unit connected to the genuine subscriber identification module, and authentication information of the genuine subscriber identification module is obtained from the subscriber identification module main unit through the PAN connection. A dummy PAN section to be acquired;
Performing a reset of the dummy subscriber identification module and notifying the modem unit of the reset;
An authentication information request unit for transmitting an authentication information request from the modem unit notified of the reset to the dummy PAN unit;
A communication terminal including a dummy subscriber identification module including an authentication information transmitting unit that transmits the authentication information to the modem unit when the authentication information is received from the dummy PAN unit that has received the authentication information request. The communication terminal according to claim 5, wherein
An ATR transmitter for transmitting ATR as initial response information to the modem unit when power is supplied to the dummy subscriber identification module;
A communication terminal including a dummy information transmitting unit that transmits dummy information, which is false authentication information, to the modem unit when an authentication information request is received from the modem unit that has received the ATR. The communication terminal according to claim 5 or 6,
The dummy subscriber identification module is
A dummy NFC unit that performs NFC communication with the subscriber identification module main unit;
A communication terminal including a PAN connection command transmission unit that transmits a PAN connection command to the subscriber identification module main unit based on a communication result of the NFC communication. The communication terminal according to claim 5 or 6,
The dummy subscriber identification module is
A dummy NFC unit that performs NFC communication with the subscriber identification module main unit;
When a PAN disconnection command transmitted from the subscriber identification module main unit is received based on the communication result of the NFC communication, the PAN disconnection process is executed and a PAN disconnection completion response is sent to the subscriber identification module main unit A communication terminal including a PAN disconnection completion response transmission unit that transmits. A modem unit that transmits an authentication information request to the dummy subscriber identification module when a reset is notified from the dummy subscriber identification module that is a fake subscriber identification module or when an ATR that is initial response information is received; ,
A personal area network connection, that is, a PAN connection is established with a subscriber identification module main unit connected to the genuine subscriber identification module, and authentication information of the genuine subscriber identification module is obtained from the subscriber identification module main unit through the PAN connection. A dummy PAN section to be acquired;
Performing a reset of the dummy subscriber identification module and notifying the modem unit of the reset;
An authentication information request unit for transmitting an authentication information request from the modem unit notified of the reset to the dummy PAN unit;
An authentication information transmitting unit that transmits the authentication information to the modem unit when the authentication information is received from the dummy PAN unit that has received the authentication information request;
A dummy NFC unit that performs NFC communication with the subscriber identification module main unit;
A communication terminal including a dummy subscriber identification module including:
A main body PAN unit that establishes the PAN connection with the dummy subscriber identification module and transmits the authentication information to the dummy subscriber identification module through the PAN connection;
A main body NFC unit that performs NFC communication with the dummy subscriber identification module;
When the PAN connection with the dummy subscriber identification module is established, when the NFC communication is executed between another dummy subscriber identification module and the main body NFC unit, the other through the NFC communication. An ID acquisition unit for acquiring an ID from the dummy subscriber identification module of
A collation unit for collating whether or not the ID is included in a predetermined private list;
A subscriber identification module main unit including a PAN connection switching control unit that switches the PAN connection from the dummy subscriber identification module to the other dummy subscriber identification module when the ID is included in a predetermined private list. Including authentication system.

Images