JP7376217B1 - Information processing device, information processing method and program - Google Patents

Abstract

An object of the present invention is to manage the risk of a third party different from a user illegally acquiring and using a communication profile. [Solution] A first base station that is a base station connected to a second information terminal 2B that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network. 3A, and a second base station 3B that is a base station to which a second information terminal 2B that stores a second communication profile that is a communication profile to which the first communication profile is switched is connected. The information processing apparatus 1 includes a profile control section 131 and a profile control section 132 that controls the state of the second communication profile based on the positional relationship between the first base station 3A and the second base station 3B. [Selection diagram] Figure 2

Description

The present invention relates to an information processing device, an information processing method, and a program.

A device is known that remotely provisions a communication profile to a communication device (for example, see Patent Document 1).

JP 2019-146097 Publication

A problem has arisen in which a third party different from the original user illegally obtains a communication profile using illegally obtained user authentication information.

The present invention has been made in view of these points, and it is an object of the present invention to manage the risk of a third party who is not the original user illegally acquiring and using a communication profile.

In the information processing apparatus according to the first aspect of the present invention, a first information terminal storing a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected. A first base station that is a base station is identified, and a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched is connected. a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station; and has.

The profile control unit may invalidate the second communication profile when the first base station and the second base station are not the same base station or adjacent base stations.

The profile control unit disables the second communication profile and enables the first communication profile when the positional relationship between the first base station and the second base station is not in a predetermined relationship. may be converted into

The profile control unit may enable the second communication profile when the first base station and the second base station are the same base station or adjacent base stations.

The profile control unit enables the second communication profile and disables the first communication profile when the positional relationship between the first base station and the second base station is a predetermined relationship. may be converted into

The device further includes a profile issuing unit that issues the second communication profile and stores it in the second information terminal when an operation to issue the second communication profile is performed, and the specifying unit is configured to issue the second communication profile and store it in the second information terminal. The unit may specify, as the second base station, a base station to which the second information terminal to which the second communication profile is stored is connected.

The profile issuing unit is configured to perform a predetermined communication profile after the profile control unit invalidates the second communication profile when the first base station and the second base station do not have a predetermined positional relationship. It is not necessary to issue the communication profile to which the first communication profile is to be switched until the period elapses.

When the operation to issue the second communication profile is performed, (1) the identifying unit identifies the base station to which the first information terminal is connected as the first base station; 2) The profile control unit may invalidate the first communication profile.

When the positional relationship between the first base station and the second base station is not in a predetermined relationship, the profile control unit (1) invalidates the second communication profile, and (2) Until a predetermined period has elapsed after the second communication profile has been invalidated, the identification unit selects a fourth communication profile in which a fourth communication profile, which is a communication profile to which the third communication profile is to be switched, is stored. The fourth communication profile may be invalidated when the fourth base station to which the information terminal connects matches the second base station.

The profile control unit further includes a contract information acquisition unit that acquires the address of the user, and the profile control unit determines whether the first base station and the second base station have a predetermined positional relationship (1). ) disabling the second communication profile if the location of the second base station is not within a predetermined range from the user's address; If it is within a predetermined range, the second communication profile may be activated.

The profile control unit further includes a history information acquisition unit that acquires history information indicating the history of base stations to which the first information terminal has connected, and the profile control unit is configured to control communication between the first base station and the second base station. If the positional relationship is not in a predetermined relationship, and (1) the second base station is not included in the history information, the second communication profile is invalidated, and (2) the second base station If the station is included in the historical information, the second communication profile may be enabled.

The identifying unit further identifies terminal identification information for identifying the second information terminal, and the profile controlling unit determines that the positional relationship between the first base station and the second base station is in a predetermined relationship. If not, (1) invalidates the second communication profile, and (2) determines the communication to which the third communication profile is to be switched until a predetermined period elapses after the invalidation. Even if the fourth communication profile is invalidated when the terminal identification information of the fourth information terminal in which the fourth communication profile that is the profile is stored matches the terminal identification information of the second information terminal. good.

The first information terminal and the second information terminal may be the same information terminal.

In the information processing method of the second aspect of the present invention, a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, which is executed by a computer, is stored. A step of identifying a first base station that is a base station to which the information terminal connects, and a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched is connected. a step of identifying a second base station that is a base station for the first base station; and a step of controlling the state of the second communication profile based on the positional relationship between the first base station and the second base station. , has.

In the program according to the third aspect of the present invention, a first information terminal storing a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected to a computer. identifying a first base station that is a base station that connects to a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is to be switched; specifying a certain second base station; and controlling the state of the second communication profile based on the positional relationship between the first base station and the second base station. .

According to the present invention, it is possible to manage the risk that a third party different from the original user illegally acquires and uses a communication profile.

1 is a diagram illustrating an overview of an information processing system S according to an embodiment. 1 is a block diagram showing the configuration of an information processing device 1. FIG. 3 is a diagram showing an example of a data structure of base station information stored in a storage unit 12. FIG. 3 is a diagram illustrating an example of a data structure of contractor information acquired by a contract information acquisition unit 134. FIG. 3 is a diagram illustrating an example of a data structure of history information acquired by a history information acquisition unit 135. FIG. 3 is a flowchart showing the flow of processing in the information processing device 1. FIG. It is a figure explaining the outline of information processing system S concerning a modification.

[Overview of information processing system S]
FIG. 1 is a diagram illustrating an overview of an information processing system S according to an embodiment. The information processing system S is a system for managing communication profiles of information terminals accessing a mobile network. The information processing system S includes an information processing device 1, an information terminal 2, and a base station 3.

A communication profile (also simply referred to as a profile) is information necessary to connect to a mobile network and use mobile communication services provided by a communication carrier. The communication profile includes an ICCID (IC Card IDentifier) that identifies the profile, an IMSI (International Mobile Subscriber Id) that identifies the user, information on the connection destination, and the like.

The information processing device 1 is a device for issuing a communication profile and controlling the state of the communication profile. The information processing device 1 is, for example, a server. The information processing device 1 may be a subscriber information management device that is a device that manages information of users connected to a mobile network.

The information terminal 2 is a terminal used by a user who has subscribed to a communication service. The information terminal 2 has a SIM (Subscriber Identity Module) or an eSIM (embedded Subscriber Identity Module), and has a function of accessing a mobile network. The information terminal 2 is, for example, a smartphone, a tablet, or a personal computer.

The base station 3 is a wireless base station device that relays wireless access based on 5G (5th Generation), LTE (Long Term Evolution), and the like.

By the way, when a user signs a contract for a communication service and issues a new SIM, the SIM is generally issued after verifying the user's identity. However, if a subscribed user who is using a communication service with a physical SIM switches to an eSIM and uses communication services, the carrier will verify the user's identity at the time of contracting for the service. In some cases, identity verification may not be performed. Therefore, in the information processing system, it is necessary to manage the information processing system so that a third party who has stolen the user information of the original user cannot illegally acquire and use the communication profile.

Processing in the information processing system S will be explained. In FIG. 1, user UA is a user who has subscribed to a mobile communication service, and user UB is a malicious user who stole user UA's subscriber information and impersonated user UA. In FIG. 1, an information terminal 2A (also referred to as a first information terminal 2A) and an information terminal 2B (also referred to as a second information terminal 2B) are information terminals used by a user UA and a user UB, respectively. The information terminal 2A stores a communication profile before switching (first communication profile).

User UB performs an operation to issue a communication profile using user UA's subscriber information (for example, user ID and password) stolen from user UA. The information terminal 2B that has received the operation transmits a request to issue a communication profile after switching (also referred to as a second communication profile) to the information processing device 1 ((1) in FIG. 1). The profile issuance request includes, for example, a user ID indicating the user to whom the profile is to be issued. The information processing device 1 issues a communication profile after switching, and transmits the issued communication profile after switching to the information terminal 2B ((2) in FIG. 1). Note that the communication profile issuance request may be configured to include a session ID. The session ID is an ID that is issued at the time of login and identifies the session. In this case, the user who requests issuance of the communication profile is specified based on the session ID.

The information processing device 1 specifies the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects ((3) in FIG. 1). The information processing device 1 determines whether the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects have a predetermined relationship ((4) in FIG. 1). An example of the predetermined relationship is that the base station 3A and the base station 3B are the same base station or that they are adjacent to each other. The base station 3A and the base station 3B are adjacent to each other, for example, when the area accommodated by the base station 3A and the area accommodated by the base station 3B partially or completely overlap.

The information processing device 1 controls the state of the communication profile based on the determination result ((5) in FIG. 1). That is, when the base station 3A and the base station 3B are the same or adjacent base stations, the information processing device 1 makes the communication profile stored in the information terminal 2B valid. The information processing device 1 invalidates the communication profile stored in the information terminal 2B when the base station 3A and the base stations 3 and B are not the same or adjacent base stations.

By configuring the information processing system S in this way, it is possible to manage the risk that a third party different from the original user illegally acquires and uses the communication profile.

Note that in the following explanation, the information terminal 2B is not limited to information terminals used by malicious users, but requests the issuance of a communication profile after switching, and uses the issued communication profile after switching to access the mobile network. The following explanation assumes that it is an information terminal to be connected. Note that the information terminal 2A and the information terminal 2B may be the same terminal.

[Configuration of information processing device 1]
FIG. 2 is a block diagram showing the configuration of the information processing device 1. As shown in FIG. The information processing device 1 includes a communication section 11, a storage section 12, and a control section 13. The control section 13 includes a specifying section 131 , a profile controlling section 132 , a profile issuing section 133 , a contract information acquiring section 134 , and a history information acquiring section 135 .

The communication unit 11 is a communication interface for transmitting and receiving data to and from other devices via a network. The storage unit 12 is a storage medium including a ROM (Read Only Memory), a RAM (Random Access Memory), an SSD (Solid State Drive), a hard disk drive, and the like. The storage unit 12 stores in advance a program to be executed by the control unit 13.

The control unit 13 is, for example, a processor such as a CPU (Central Processing Unit). The control unit 13 functions as a specifying unit 131 , a profile control unit 132 , a profile issuing unit 133 , a contract information acquisition unit 134 , and a history information acquisition unit 135 by executing programs stored in the storage unit 12 .

The identifying unit 131 identifies the first base station 3A to which the first information terminal 2A in which the first communication profile is stored is connected. The identifying unit 131 identifies the second base station 3B to which the second information terminal 2B that stores the second communication profile that is the communication profile to which the first communication profile is to be switched is connected. As an example, the identifying unit 131 acquires information about the base station 3 to which the first information terminal 2A and the second information terminal 2B are connected from the subscriber information management device. As an example, the identifying unit 131 manages subscriber information for the base station 3 to which the first communication profile and the second communication profile are connected, using the IMSI included in the first communication profile and the second communication profile as a key. A query is made to the device to identify the base station 3 to which each terminal connects.

The profile control unit 132 controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station 3A and the second base station 3B. As an example, the profile control unit 132 controls the state of the second communication profile based on whether the first base station 3A and the second base station 3B are the same base station or adjacent base stations. Control. The profile control unit 132 makes the second communication profile valid when the positional relationship between the first base station 3A and the second base station 3B is a predetermined relationship, and sets the second communication profile to a valid state, and If the positional relationship between the second base station 3B and the second base station 3B is not in a predetermined relationship, the second communication profile is set to be in an invalid state.

As an example, the storage unit 12 stores base station information indicating whether base stations are adjacent to each other. FIG. 3 is a diagram illustrating an example of the data structure of base station information stored in the storage unit 12. In the base station information shown in FIG. 3, a base station is associated with a plurality of base stations adjacent to the base station. In other words, it indicates that the base station is not adjacent to any base station other than the adjacent base station associated with the base station. The profile control unit 132 refers to the base station information stored in the storage unit 12 and determines whether the first base station 3A and the second base station 3B are the same base station or adjacent base stations. judge.

Further, the storage unit 12 stores base station information indicating the location information of the base station 3 or the distance between base stations, and the profile control unit 132 refers to the base station information and connects the first base station 3A and The state of the second communication profile may be controlled based on whether the distance to the second base station 3B is less than or equal to a threshold value.

The profile control unit 132 invalidates the second communication profile when the first base station 3A and the second base station 3B are not the same base station or adjacent base stations. That is, the profile control unit 132 prevents access to the network using the second communication profile when the first base station 3A and the second base station 3B are not the same base station or adjacent base stations. to control.

In order to prevent duplicate service usage by the same user, when a second communication profile is issued, the profile control unit 132 invalidates the first communication profile. Communication by the information terminal 2A is restricted. However, if there is a possibility that the second communication profile has been issued illegally, it is necessary to enable the information terminal 2A that stores the first communication profile to communicate so that the original user can use the communication service. Therefore, when the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship (for example, when they are the same or adjacent base stations), the profile control unit 132 The communication profile may be disabled and the first communication profile may be enabled.

In addition, when the positional relationship between the first base station 3A and the second base station 3B is in a predetermined relationship (for example, when they are the same or adjacent base stations), the profile control unit 132 controls the second communication You may also enable your profile. That is, at the time of issuance of the communication profile, only some functions of the second communication profile are enabled, and it is determined that the first base station 3A and the second base station 3B are in a predetermined relationship. In this case, the profile control unit 132 may enable all of the second communication profiles.

Furthermore, the functions of the first communication profile may not be restricted at the time the second communication profile is issued, and the first communication profile may be enabled at the same time as the second communication profile is enabled. . Specifically, the profile control unit 132, when the positional relationship between the first base station 3A and the second base station 3B is a predetermined relationship (for example, when they are the same or adjacent base stations), The second communication profile is enabled and the first communication profile is disabled.

The information processing device 1 thus connects the base station 3A to which the information terminal 2A in which the first communication profile is stored is connected, and the base station 3B to which the information terminal 2B in which the second communication profile is stored is connected. Based on the relationship, the status indicating whether the communication profile is valid or invalid is controlled. By configuring the information processing device 1 in this way, it is possible to manage the risk that a third party different from the original user illegally acquires and uses the communication profile.

The process of issuing a communication profile will be explained. When an operation to issue a second communication profile is performed, the profile issuing unit 133 issues the second communication profile and stores it in the second information terminal 2B. Specifically, the profile issuing unit 133 causes the information terminal 2B to display a screen for performing an operation to issue the second communication profile. The information terminal 2B receives an operation from the user to request issuance of a second communication profile. The information terminal 2B that has received the user's operation transmits a profile issuance request to the information processing device 1. Then, when receiving the profile issuance request, the profile issuing unit 133 issues a second communication profile and stores it in the second information terminal 2B.

The information terminal 2B storing the second communication profile becomes able to access the mobile network. The specifying unit 131 specifies, as the second base station 3B, the base station 3 to which the second information terminal 2B to which the profile issuing unit 133 has stored the second communication profile is connected. The identifying unit 131 may identify the base station 3 to which the first information terminal 2A is connected at the time of issuing the second communication profile as the first base station 3A.

Note that when an operation to issue the second communication profile is performed, the identifying unit 131 may identify the base station 3 to which the first information terminal 2A is connected as the first base station 3A. In this case, when the profile issuing unit 133 receives the second communication profile issuance request, the specifying unit 131 specifies the base station 3A to which the information terminal 2A connects. Furthermore, when an operation to issue a second communication profile is performed, the profile control unit 132 may invalidate the first communication profile.

By the way, if the profile control unit 132 determines that the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects do not have a predetermined relationship, a malicious user may issue a communication profile. It may be requested. Therefore, the information processing device 1 may be configured so as not to issue the second communication profile for a certain period of time in such a case.

When the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, the profile issuing unit 133 is configured to issue a profile for a predetermined period after the profile control unit 132 invalidates the second communication profile. The communication profile to which the first communication profile is to be switched is not issued until the time period elapses. When the profile control unit 132 determines that the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects are different, the first communication When the profile issuance unit 133 receives a profile issuance request that includes the user ID of the user who uses the profile, the profile issuance unit 133 displays a screen indicating that the communication profile after switching cannot be issued with the information that sent the profile issuance request. Display it on terminal 2. The predetermined period is determined based on sufficient time for the original user to check the situation or sufficient time to reduce the malicious user's desire to attack. The predetermined period is set to one day, several days, etc., for example. Note that the predetermined period in the following explanation is also the same period.

By configuring the information processing device 1 in this way, it is possible to reduce the risk that a third party different from the original user illegally acquires and uses the communication profile, and it is possible to protect the user.

By the way, if the profile control unit 132 determines that the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects do not have a predetermined relationship, the base station 3B to which the information terminal 2B connects There is a possibility that there is a malicious user connecting from the network, and it is necessary to prevent the malicious user from further stealing communication profiles of other users. Therefore, in this case, if the base station 3 connected to the information terminal 2 storing the communication profile matches the base station 3B connected to the information terminal 2B, the information processing device is configured to invalidate the issued communication profile. 1 may be configured.

In this case, the switching destination communication profile issued in response to the received profile issuance request is referred to as the fourth communication profile, and the communication profile before switching to the fourth communication profile is referred to as the third communication profile. . The information terminal 2 that stores the third communication profile and the information terminal 2 that stores the fourth communication profile are referred to as a third information terminal 2 and a fourth information terminal 2, respectively. The base station 3 to which the third information terminal 2 connects and the base station 3 to which the fourth information terminal 2 connects are referred to as a third base station 3 and a fourth base station 3, respectively.

If the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, the profile control unit 132 disables the second communication profile until a predetermined period elapses after invalidating the second communication profile. In the meantime, if the fourth base station 3 connected to the fourth information terminal 2 storing the fourth communication profile and the second base station 3B match, the identifying unit 131 determines the fourth communication profile. may be disabled. The specifying unit 131 specifies the base station 3 to which each of the third information terminal and the fourth information terminal 2 connects. Then, when the base station 3 to which the fourth information terminal 2 connects is the same as the base station 3B to which the second information terminal 2B connects, the profile control unit 132 invalidates the fourth communication profile and Activate communication profile 3. Note that when the base station 3 to which the fourth information terminal 2 connects and the base station 3 to which the second information terminal 2B connects are adjacent base stations, the profile control unit 132 Profiles may be disabled.

By configuring the information processing device 1 in this way, it is possible to reduce the risk that a malicious user will illegally acquire and use a communication profile.

By the way, if the profile control unit 132 determines that the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects do not have a predetermined relationship, the user using the information terminal 2B may have malicious intent. It is highly likely that you are a user of Therefore, in such a case, the information processing device 1 may be configured to invalidate the issued communication profile when a profile issuance request is received again from the same information terminal as the information terminal 2B.

The specifying unit 131 further specifies terminal identification information (for example, IMEI) that identifies the second information terminal 2B. As an example, the identification unit 131 acquires information identifying the second information terminal 2B from the subscriber information management device.

If the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, the profile control unit 132 controls the identification unit 131 until a predetermined period elapses after invalidation. When the terminal identification information of the fourth information terminal 2 storing the fourth communication profile that is the communication profile to which the third communication profile is switched matches the terminal identification information of the second information terminal 2B. Disable the fourth communication profile. Specifically, the profile issuing unit 133 causes the fourth information terminal 2 to store the fourth profile in response to a profile issuing request received from the fourth information terminal 2. The specifying unit 131 specifies the terminal identification information of the fourth information terminal 2 in which the fourth profile is stored and the base station 3 to which the fourth information terminal 2 is connected. The profile control unit 132 determines whether the terminal identification information of the second information terminal 2B and the terminal identification information of the fourth information terminal 2 match. If the terminal identification information of the second information terminal 2B and the terminal identification information of the fourth information terminal 2 match, the profile control unit 132 invalidates the fourth communication profile and replaces the third communication profile with the terminal identification information of the fourth information terminal 2. Activate.

Note that the profile control unit 132 selects a base station 3B to which the terminal identification information of the fourth information terminal 2 and the terminal identification information of the second information terminal 2B match, and to which the second information terminal 2 connects. It may be determined whether or not the base station 3 to which the fourth information terminal 2 is connected matches. In this case, the profile control unit 132 invalidates the fourth communication profile when both the terminal identification information and the base station match.

By configuring the information processing device 1 in this way, it is possible to reduce the risk of a malicious user illegally using a communication profile.

Even if the first base station 3A and the second base station 3B do not have a predetermined relationship, there is a possibility that the original user is using the information terminal 2B after switching. Therefore, the information processing device 1 may be configured to control the communication profile based on the user's address and information on the base station 3 to which the user was previously connected.

The contract information acquisition unit 134 acquires the user's address. FIG. 4 is a diagram illustrating an example of the data structure of the contractor information acquired by the contract information acquisition unit 134. In the subscriber information shown in FIG. 4, a user ID, a user's telephone number, and a user's address are associated with each other. The user ID is an IMSI, for example, and is information that can be associated with a communication profile. The contract information acquisition unit 134 may acquire the contract information stored in the storage unit 12, or may acquire all or part of the contractor information from an external device (not shown).

When the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, the profile control unit 132 controls whether the location of the second base station 3B is within a predetermined range from the user's address. If not, the second communication profile is invalidated. When the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, the profile control unit 132 controls whether the location of the second base station 3B is within a predetermined range from the user's address. If so, enable the second communication profile. If the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, the profile control unit 132 determines whether the location of the first base station 3A and the user's address are within a predetermined range. Determine if there is. The predetermined range is a value determined based on the range normally included in the user's living area, and is, for example, several kilometers. The predetermined range may include the same or adjacent municipalities.

An example will be described in which the communication profile is controlled based on information on the base station 3 to which the information terminal 2A used by the user was previously connected. The history information acquisition unit 135 acquires history information indicating the history of the base station 3A to which the first information terminal 2A is connected. FIG. 5 is a diagram illustrating an example of the data structure of history information acquired by the history information acquisition unit 135. In the history information shown in FIG. 5, the user ID, the connected base station 3, and the date and time of connection to the base station 3 are associated.

When the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, and the second base station 3B is not included in the history information, the profile control unit 132 Disable the second communication profile. When the positional relationship between the first base station 3A and the second base station 3B is not in a predetermined relationship, and the second base station 3B is included in the history information, the profile control unit 132 Activate the second communication profile.

It is considered that base stations 3 that are frequently connected in the history information are likely to exist in the user's living area. Therefore, the profile control unit 132 determines that the second base station 3B is included in the base station history information a predetermined number of times or more and that the positional relationship between the first base station 3A and the second base station 3B is determined. The history information indicates that the second base station 3B has been included in the base station history information a predetermined number of times or more within a predetermined period of time, or that the second base station 3B has been connected to the second base station 3B for a predetermined time or more. It may be a condition that it be shown.

By configuring the information processing device 1 in this way, even if the first base station 3A and the second base station 3B do not have a predetermined relationship, there is a possibility that the original user is using them. If it is considered that the communication profile is high, switching the communication profile can be determined to be effective, and user convenience can be improved.

[Flow of processing in information processing device 1]
FIG. 6 is a flowchart showing the flow of processing in the information processing device 1. The flowchart shown in FIG. 6 starts from the time when the profile issuing operation is accepted. The profile issuing unit 133 receives a profile issuing operation from the information terminal 2B (S01), and the profile issuing unit 133 issues a second communication profile (S02). The profile issuing unit 133 stores the issued second communication profile in the information terminal 2 (S03).

The identifying unit 131 identifies the first base station 3A to which the information terminal 2A connects (S04). The identifying unit 131 identifies the second base station 3B to which the information terminal 2B connects (S05). The profile control unit 132 determines whether the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects are the same or adjacent base stations (S06).

If the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects are the same or adjacent base stations (YES in S06), the profile control unit 132 enables the second communication profile. (S07). The profile control unit 132 invalidates the first communication profile (S08), and the information processing device 1 ends the process.

If the base station 3A to which the information terminal 2A connects and the base station 3B to which the information terminal 2B connects are not the same or adjacent base stations (NO in S06), the profile control unit 132 invalidates the second communication profile. (S09), and the information processing device 1 ends the process.

[Effects of information processing device 1]
By configuring the information processing device 1 as described above, it is possible to manage the risk that a third party different from the original user illegally acquires and uses a communication profile.

<Modified example>
In the above description, the information terminal 2B sends a second communication profile issuance request to the information processing device 1 and obtains the communication profile, but the configuration is such that separate information terminals perform these steps. may be done. An overview of the information processing system S in this case is shown in FIG.

Specifically, the profile issuing unit 133 receives a communication profile issuing request from the information terminal 2C ((1) in FIG. 7). Upon receiving the communication profile issuance request, the profile issuing unit 133 sends information (for example, URL (Uniform Resource Locator) or SM-DP+ (Subscription Manager - Data Preparation +)) server address for acquiring the second communication profile. A two-dimensional code image (including the activation code) is generated and transmitted to the information terminal 2C via the communication unit 11 for display ((2) in FIG. 7).

The information terminal 2B accepts an operation requesting acquisition of the second communication profile. The operation for requesting acquisition of the second communication profile is, for example, an operation of reading a two-dimensional code image displayed on the screen of the information terminal 2C, or inputting the URL or activation code displayed on the information terminal 2C. This is an operation to do. The information terminal 2B that has received the user's operation transmits a profile acquisition request to the information processing device 1 ((3) in FIG. 7). Then, when the profile issuing unit 133 receives the profile acquisition request, it transmits the second communication profile and stores it in the second information terminal 2B ((4) in FIG. 7).

Since (5) to (7) in FIG. 7 are processes corresponding to (3) to (5) in FIG. 1, their explanation will be omitted. Further, the information terminal 2C and the information terminal 2A may be the same terminal.

Furthermore, the present invention makes it possible to contribute to Goal 9 of the Sustainable Development Goals (SDGs) led by the United Nations, "Create a foundation for industry and technological innovation."

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments, and various modifications and changes can be made within the scope of the gist. be. For example, in the above embodiments, switching of communication profiles has been described as an example, but the present invention is not limited to this. That is, the present invention may be applied when additionally issuing a communication profile to the same user. In this case, the second (fourth) communication profile is a communication profile issued to the user who uses the first (third) communication profile.

Further, for example, all or part of the device can be configured by being functionally or physically distributed and integrated in arbitrary units. In addition, new embodiments created by arbitrary combinations of multiple embodiments are also included in the embodiments of the present invention. The effects of the new embodiment resulting from the combination have the effects of the original embodiment.

1 Information processing device 2 Information terminal 3 Base station 11 Communication unit 12 Storage unit 13 Control unit 131 Specification unit 132 Profile control unit 133 Profile issuing unit 134 Contract information acquisition unit 135 History information acquisition unit

Claims (19)

identifying a first base station to which a first information terminal in which a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected; an identifying unit that identifies a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a profile issuing unit that issues the second communication profile and stores it in the second information terminal when an operation to issue the second communication profile is performed;
a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station;
has
The identifying unit identifies, as the second base station, a base station to which the second information terminal to which the profile issuing unit has stored the second communication profile is connected;
The profile issuing unit is configured to perform a predetermined communication profile after the profile control unit invalidates the second communication profile when the positional relationship between the first base station and the second base station is not in a predetermined relationship. not issuing a communication profile to which the first communication profile is to be switched until a period elapses;
Information processing device. identifying a first base station to which a first information terminal in which a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected; an identifying unit that identifies a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station;
has
When the positional relationship between the first base station and the second base station is not in a predetermined relationship, the profile control unit:
(1) Invalidating the second communication profile and
(2) Until a predetermined period has elapsed after the second communication profile was invalidated, the fourth communication profile, which is the communication profile to which the third communication profile is to be switched, is stored by the specific unit. invalidating the fourth communication profile when a fourth base station to which a fourth information terminal connects and the second base station match;
Information processing device. identifying a first base station to which a first information terminal in which a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected; an identifying unit that identifies a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station;
a contract information acquisition unit that acquires the user's address;
has
When the positional relationship between the first base station and the second base station is not in a predetermined relationship, the profile control unit
(1) If the location of the second base station is not within a predetermined range from the user's address, disable the second communication profile;
(2) activating the second communication profile if the location of the second base station is within a predetermined range from the user's address;
Information processing device. identifying a first base station to which a first information terminal in which a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected; an identifying unit that identifies a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station;
a history information acquisition unit that acquires history information indicating a history of base stations to which the first information terminal has connected;
has
When the positional relationship between the first base station and the second base station is not in a predetermined relationship, the profile control unit
(1) If the second base station is not included in the history information, invalidate the second communication profile;
(2) activating the second communication profile if the second base station is included in the history information;
Information processing device. identifying a first base station to which a first information terminal in which a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected; an identifying unit that identifies a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station;
has
The identifying unit further identifies terminal identification information that identifies the second information terminal, and identifies a fourth information terminal that stores a fourth communication profile that is a communication profile to which the third communication profile is to be switched. Identify the terminal identification information of
When the positional relationship between the first base station and the second base station is not in a predetermined relationship, the profile control unit:
(1) Invalidating the second communication profile and
(2) Until a predetermined period has elapsed after the invalidation, if the terminal identification information of the fourth information terminal and the terminal identification information of the second information terminal match, the fourth communication deactivate the profile,
Information processing device. identifying a first base station to which a first information terminal in which a first communication profile, which is information for connecting an information terminal used by a user to a mobile communication network, is connected; an identifying unit that identifies a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a profile control unit that controls whether the second communication profile is valid or invalid based on the positional relationship between the first base station and the second base station;
has
the first information terminal and the second information terminal are the same information terminal ;
Information processing device. The profile control unit disables the second communication profile when the first base station and the second base station are not the same base station or adjacent base stations.
The information processing device according to any one of claims 1 to 6 . The profile control unit disables the second communication profile and enables the first communication profile when the positional relationship between the first base station and the second base station is not in a predetermined relationship. to become
The information processing device according to any one of claims 1 to 6 . The profile control unit enables the second communication profile when the first base station and the second base station are the same base station or adjacent base stations.
The information processing device according to any one of claims 1 to 6 . The profile control unit enables the second communication profile and disables the first communication profile when the positional relationship between the first base station and the second base station is a predetermined relationship. to become
The information processing device according to any one of claims 1 to 6 . further comprising a profile issuing unit that issues the second communication profile and stores it in the second information terminal when an operation to issue the second communication profile is performed;
The identifying unit identifies, as the second base station, a base station to which the second information terminal to which the profile issuing unit has stored the second communication profile is connected.
The information processing device according to any one of claims 2 to 6 . When an operation is performed to issue the second communication profile,
(1) The identifying unit identifies a base station to which the first information terminal is connected as the first base station, and
(2) the profile control unit disables the first communication profile;
The information processing device according to any one of claims 1 to 6 . computer executes
A first base station that specifies a first base station to which a first information terminal that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected; specific steps,
a second specifying step of specifying a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
an issuing step of issuing the second communication profile and storing it in the second information terminal when the operation of issuing the second communication profile is performed;
a control step of controlling a state of the second communication profile based on the positional relationship between the first base station and the second base station;
has
In the second specifying step, specifying, as the second base station, a base station to which the second information terminal to which the second communication profile was stored in the issuing step connects;
In the issuing step, if the positional relationship between the first base station and the second base station is not in a predetermined relationship, the second communication profile is invalidated in the control step for a predetermined period of time. does not issue a communication profile to which the first communication profile is to be switched until a period of time elapses;
Information processing method. computer executes
A first base station that specifies a first base station to which a first information terminal that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected; specific steps,
a second specifying step of specifying a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a control step of controlling a state of the second communication profile based on the positional relationship between the first base station and the second base station;
has
In the control step, if the positional relationship between the first base station and the second base station is not in a predetermined relationship,
(1) Invalidating the second communication profile and
(2) Fourth information storing a fourth communication profile, which is a communication profile to which the third communication profile is to be switched, until a predetermined period has elapsed after the second communication profile was invalidated. invalidating the fourth communication profile when a fourth base station to which the terminal connects and the second base station match;
Information processing method. computer executes
A first base station that specifies a first base station to which a first information terminal that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected; specific steps,
a second specifying step of specifying a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
an obtaining step of obtaining the address of the user;
a control step of controlling a state of the second communication profile based on the positional relationship between the first base station and the second base station;
has
In the control step, when the positional relationship between the first base station and the second base station is not in a predetermined relationship,
(1) If the location of the second base station is not within a predetermined range from the user's address, disable the second communication profile;
(2) activating the second communication profile if the location of the second base station is within a predetermined range from the user's address;
Information processing method. computer executes
A first base station that specifies a first base station to which a first information terminal that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected; specific steps,
a second specifying step of specifying a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
an acquisition step of acquiring history information indicating a history of base stations to which the first information terminal has connected;
a control step of controlling a state of the second communication profile based on the positional relationship between the first base station and the second base station;
has
In the control step, when the positional relationship between the first base station and the second base station is not in a predetermined relationship,
(1) If the second base station is not included in the history information, invalidate the second communication profile;
(2) activating the second communication profile if the second base station is included in the history information;
Information processing method. computer executes
A first base station that specifies a first base station to which a first information terminal that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected; specific steps,
a second specifying step of specifying a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a control step of controlling a state of the second communication profile based on the positional relationship between the first base station and the second base station;
has
In the second specifying step, terminal identification information for identifying the second information terminal is further specified, and a fourth communication profile that is a communication profile to which the third communication profile is switched is stored. Identify the terminal identification information of the information terminal,
In the control step, if the positional relationship between the first base station and the second base station is not in a predetermined relationship,
(1) Invalidating the second communication profile and
(2) Until a predetermined period has elapsed after the invalidation, if the terminal identification information of the fourth information terminal and the terminal identification information of the second information terminal match, the fourth communication deactivate the profile,
Information processing method. computer executes
A first base station that specifies a first base station to which a first information terminal that stores a first communication profile that is information for connecting an information terminal used by a user to a mobile communication network is connected; specific steps,
a second specifying step of specifying a second base station that is a base station to which a second information terminal that stores a second communication profile that is a communication profile to which the first communication profile is switched;
a control step of controlling a state of the second communication profile based on the positional relationship between the first base station and the second base station;
has
the first information terminal and the second information terminal are the same information terminal;
Information processing method. to the computer,
A program for executing the information processing method according to claim 13 .

Images