JPH10164656A - Portable terminal, managing center therefor and supervisory and control part therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable terminal, portable terminal managing center and supervisory and control part of the terminal hardly performing unauthorized speaking by generating a new certificate key based on a certificate key and history information, using the new certificate key, converting certificate data sent from a base station into certificate response data and transferring the data to the base station. SOLUTION: A control part 1100 of portable terminal 1000 performs entire control or history information calculation/storage, etc. A storage part 1200 stores portable terminal identification numbers, fixed certificate keys and history information or the like of respective registered portable terminals. Based on the fixed certificate keys and history information stored in the storage part 1200, a converting part 1300 generates the new certificate key. In the case, since the history information is successively reloaded at the time point of speaking end, the newly generated certificate key becomes a successively variable certificate key so as to be hardly illegally acquired.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a portable terminal, a portable terminal management center, and a portable terminal monitoring controller. More particularly, the present invention relates to a portable terminal with cloning measures, a portable terminal management center, and a portable terminal monitoring control. About the department.

[0002]

2. Description of the Related Art In a radio communication system using a portable terminal, an identity number such as an ID of another person's portable terminal is stolen in a wireless section, and an identity number such as the stolen ID is written in a portable terminal of itself, thereby impersonating another person. However, the problem of cloning using a mobile terminal for another person's billing has become a problem.

Conventionally, in order to prevent such unauthorized use by a portable terminal, for example, a mobile communication handbook by Saito and Tachikawa, Ohmsha, p. 152, a unique authentication key is assigned to each mobile terminal in advance for each mobile terminal.

A portable terminal sends a service request to a base station to connect to the base station. The base station generates an authentication random number R required for performing authentication, and transmits the authentication random number to the mobile terminal. The mobile terminal converts the random number for authentication into authentication response data using the authentication key assigned to each mobile terminal, and sends the data back to the base station. The base station compares the authentication response data sent from the mobile terminal with the authentication response data previously obtained in the base station, and permits the connection only when the two match. If the mobile terminal is not a valid mobile terminal, since the mobile terminal does not have an authentication key corresponding to the mobile terminal, the base station rejects the connection because the conversion to the authentication response data is not performed correctly. By using such an authentication method, the base station checks an unauthorized portable terminal.

[0005]

In the conventional terminal authentication, a unique authentication key assigned in advance to each portable terminal is used. Therefore, if this authentication key is known, another portable terminal is required. A clone portable terminal can be easily created simply by inputting an authentication key into a storage device such as a ROM. Therefore, there has been a problem that using such a clone portable terminal, a fraudulent call may be made at the charge of another person by impersonating another person.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a portable terminal, a portable terminal management center, and a portable terminal monitoring and control unit, which are difficult to make unauthorized calls.

[0007]

To achieve the above object, the present invention provides a portable terminal identification number, an authentication key given in advance for each portable terminal, and history information indicating the past use status of the portable terminal. And a conversion unit that generates a new authentication key based on the authentication key and the history information stored in the storage unit, and a new authentication key generated by the conversion unit. A control unit for converting the authentication data sent from the base station to authentication response data, and transferring the authentication response data converted by the control unit to the base station. Since the authentication key is sequentially updated, it is difficult to perform unauthorized use.

In the portable terminal, preferably, the history information stored in the storage unit includes a past call count,
It is composed of a past call start time, a past call end time, a past call time, and a past call position.

Preferably, the portable terminal further includes unauthorized opening detection means for detecting unauthorized opening of the housing containing the storage unit, and based on a detection signal of unauthorized opening of the housing by the unauthorized opening detecting means. The storage contents of the storage unit are deleted.

To achieve the above object, the present invention provides a storage unit for storing a portable terminal identification number, an authentication key given in advance for each portable terminal, and history information indicating a past use state of the portable terminal. A conversion unit that generates a new authentication key based on the authentication key and the history information stored in the storage unit, and uses the new authentication key generated by the conversion unit to convert the authentication data into authentication response data. To
Compare with the authentication response data sent from the mobile terminal,
A control unit for permitting a call when the two match with each other is provided, and with such a configuration, the authentication key is updated successively, so that unauthorized use becomes difficult.

In the portable terminal, preferably, the history information stored in the storage unit includes a past call count,
It is composed of a past call start time, a past call end time, a past call time, and a past call position.

In order to achieve the above object, the present invention provides a storage unit for storing an upper limit of a call fee for each portable terminal, A control unit for sending a command of a stop command of the mobile terminal to the management center. With such a configuration, unauthorized use can be easily determined based on whether or not the call charge exceeds an upper limit value. It will be.

In order to achieve the above object, the present invention provides a storage unit for storing a past call start time and a past call position of a portable terminal, a past call start time stored in the storage unit and a past call start time. Within a certain amount of time,
When the call position is equal to or longer than a preset distance from the previous call position, the control center is provided with a control unit for sending a command of a stop command of the mobile terminal to the management center. With location and time information,
It is possible to easily judge unauthorized use.

[0014]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A portable telephone system according to an embodiment of the present invention will be described below with reference to FIGS. First, an overall configuration of a mobile phone system according to an embodiment of the present invention will be described with reference to FIG. FIG.
1 is a block diagram of a mobile phone system according to one embodiment of the present invention.

The mobile phone system includes a plurality of mobile terminals 10.
00-1, 1000-2, 1000-3, a plurality of base stations 2100-1, 1, 2100-2, 2100-3, an exchange control station 2200, a management center 2300, and a monitoring control unit 2400. I have.

A plurality of portable terminals 1000-1, 1000-
21000-3 are movable, and at the time of a call, the nearest base stations 2100-1 and 2100-
2, 2100-3 are connected by wireless communication. The switching control station 2200, on the other hand,
Are connected to a plurality of telephones 3200 and other communication devices through the base stations 2100-1, 2100-2, 2
100-3, and is connected to a desired portable terminal 1000.
-1,1000-2,1000-3 and desired telephone 32
The exchange control for 00 is performed.

The management center 2300 has an authentication means therein.
It is determined whether or not 1,1000-2, 1000-3 is a legitimate use. If it is determined that the use is legitimate, connection is permitted to the exchange control station 2200, and unauthorized use is performed. , The exchange control station 2200
Is to refuse the connection. Management Center 230
0 will be described later with reference to FIG.

The monitoring control unit 2400 controls each mobile terminal 100
0-1, 1000-2, and 1000-3 are monitored, and by a method different from that of the management center 2300,
An illegal use is checked, and if it is determined that the use is illegal, the exchange control station 2200 is refused the connection. The detailed configuration of the monitoring control unit 2400 will be described later with reference to FIG.

Next, referring to FIG. 2, a portable terminal 100 used in a portable telephone system according to an embodiment of the present invention will be described.
0 will be described. FIG. 2 is a block diagram of a mobile terminal used in the mobile phone system according to one embodiment of the present invention.

The portable terminal 1000 includes a control unit 1100,
The storage unit 1200 includes a storage unit 1200, a conversion unit 1300, an interface unit 1400, a wireless circuit unit 1500, a baseband processing unit 1600, and a clock 1700.

The control unit 1100 controls the entire portable terminal 1000 and calculates and stores history information.
The storage unit 1200 stores a mobile terminal identification number, a fixed authentication key of each registered mobile terminal, and history information. Here, the history information will be described later with reference to FIG. 4. For example, for example, the past number of calls of each registered mobile terminal, the past call destination telephone number, the past call start time, the past call end It consists of time, past call time, and past call position. Also, the storage unit 1200
Also stores control data and information on control procedures.

The conversion unit 1300 generates a new authentication key according to the present embodiment based on the fixed authentication key and the history information stored in the storage unit 1200. Here, since the history information is sequentially rewritten at the end of the call, the newly generated authentication key is a sequentially variable authentication key. Therefore, compared to the case of the conventional fixed authentication key, it is difficult to obtain illegally by another person, and it is also difficult to make an unauthorized call.

The interface unit 1400 is a portable terminal 1
A keypad 1810 for inputting keys constituting an input / output unit of 000, a display 1820 for outputting a display,
A sounder 1830 for outputting a ring tone or the like;
Controls input and output during 0.

The radio circuit section 1500 includes an antenna 1900
This is a high-frequency circuit unit that processes a radio signal received by the wireless communication device. The baseband processing unit 1600 includes the wireless circuit unit 150
The signal sent from 0 is demodulated into a low-frequency signal, and an audio signal is output from the speaker 1850. Further, an audio signal input from microphone 1860 is modulated by baseband processing section 1600, converted to a high-frequency signal by radio circuit section 1500, and emitted via antenna 1900.

The clock 1700 measures time, and stores the time
A time signal serving as a reference of time information such as a past call start time, a past call end time, and a past call time in the history information stored in 200 is generated.

Each component is, for example, DSP, C
It can be realized by an electronic device such as a PU, a ROM, a RAM and various CMOSs.

Next, referring to FIG. 3, a management center 23 used in the mobile phone system according to one embodiment of the present invention will be described.
00 will be described. FIG. 3 is a block diagram of a management center used in the mobile phone system according to one embodiment of the present invention.

The management center 2300 includes a control unit 2310
, A storage unit 2320, a conversion unit 2330, an interface unit 2340, and a clock 2350.

The control unit 2310 controls the entire management center 2300 and calculates and stores history information. The storage unit 2320 stores the mobile terminal 1000 shown in FIG.
In the same manner as the storage unit 1200, a mobile terminal identification number, a fixed authentication key of each registered mobile terminal, and history information are stored. Here, the history information includes, for example, the past number of calls for each registered mobile terminal, the past telephone number of the other party, the past call start time, the past call end time, the past call time, the past call Consists of a position. However, the storage unit 1200 of the mobile terminal 1000
Is only the information of each mobile terminal 1000, whereas the storage unit 2330 of the management center 2300 stores all the mobile terminals 1000-1 and 1000-1.
, 1000-3,..., The fixed authentication key of each mobile terminal, and all the history information are stored. The history information is stored in the individual mobile terminals 1000-1 and 100.
Are rewritten sequentially at the end of the call of 0-2, 1000-3,...
The history information stored in the storage unit 200 and the history information stored in the storage unit 2320 of the management center 2300 are the same. The storage unit 2320 also stores control data and information on control procedures.

The conversion unit 2330 generates a new authentication key according to the present embodiment based on the fixed authentication key and the history information stored in the storage unit 2320.

Interface unit 2340 controls connection with switching control station 2200. The clock 2350 measures time and generates a time signal serving as a reference for time-related information such as a past call start time, a past call end time, and a past call time in the history information stored in the storage unit 2320. doing.

Each component is, for example, DSP, C
It can be realized by an electronic device such as a PU, a ROM, a RAM and various CMOSs.

Next, the configuration of the portable terminal used in the portable telephone system according to the embodiment of the present invention and the conversion unit inside the management center will be described with reference to FIG. FIG.
FIG. 2 is a block diagram of a mobile terminal used in the mobile phone system according to the embodiment of the present invention and a conversion unit inside the management center. Here, the conversion unit 1300 in the mobile terminal 1000 will be described as an example.
The same applies to the configuration of the conversion unit 2320 in 300.

The conversion unit 1300 receives history information and a fixed authentication key from the storage unit 1200 shown in FIG. As the history information, the number of past calls 1210 of the mobile terminal,
It is assumed that the information includes a past call destination telephone number 1220, a past call start time 1230, a past call end time 1240, a past call time 1250, and a past call position 1260.

The past number of calls 1210 of the portable terminal is the total number of past calls since the portable terminal became usable, and is represented by N1 bit information. The control unit 1100
Increment the latest call count 1210 for each call,
It is stored in the storage unit 1200. The past call partner telephone number 1220 is information transferred from the switching control station 2200 (FIG. 1) for each call, and is represented by N2 bit information. The control unit 1100 stores the latest called party telephone number 1220 in the storage unit 1200 for each call.

The past call start time 1230, call end time 1240, and call time 1250 are call connection date / time information obtained by the clock 1700 at the start and end of the call, and are N3 bits, N4 bits, and N5 bits, respectively. It is represented by bit information. The control unit 1100 provides the latest past call start time 1230, call end time 1240,
The call time 1250 is stored in the storage unit 1200.

The past call position 1260 is position information obtained by a position specifying system using a portable terminal, and is represented by N6-bit information. The position specifying system using the PHS is described in, for example, Nikkei Electronics, 1996.7.15, (No. 666). The connection between the specific portable terminal 1000-1 shown in FIG. 1 and the plurality of base stations 2100A, 2100B, 2100C is performed by the plurality of base stations 2100A, 2100B, 2100C that have received the signal from the portable terminal 1000-1. The switching control unit 2200 determines the signal strength and controls the signal strength to be established with the base station having the highest electric field strength. Therefore, if the mobile terminal 100 received by the base station 2100A is
When the electric field strength is largest from 0-1, the base station 21
00A is selected by the exchange control unit 2200. When the mobile terminal 1000 moves, the mobile station 1000 is sequentially switched to the base station having the highest electric field strength according to which movement. Therefore, at the end of the call, the control unit 1100 sets the connected base station 2100 as the past call position 1260 and sets the latest past call position 126 for each call.
0 is stored in the storage unit 1200.

Further, the fixed authentication key 1270 is represented by N7 bits.

Here, the number of past calls 121 of the mobile terminal
0 (N1 bit) and the past destination telephone number 122
0 (N2 bits) and the past call start time 1230 (N
3 bits) and call end time 1240 (N4 bits)
, Call time 1250 (N5 bits), past call position 1260 (N6 bits), fixed authentication key 1270
The total number of bits of (N7 bits) is 128 bits. The 128-bit parallel data is converted by the conversion unit 13
00 is taken in.

The conversion section 1300 includes two pseudo random number generation circuits 1310 and 1320 and an OR circuit 1330. Pseudo random number generation circuits 1310 and 1320
Is a pseudo-random number generation circuit using a feedback shift register as described in, for example, Okamoto, "Introduction to Cryptography", Kyoritsu Shuppan. Pseudo random number generation circuit 1310
Is initialized to the lower 64-bit parallel data of the 128-bit data fetched from the storage unit 1200. In the pseudo-random number generating circuit 1320, the upper 64 bits of parallel data of the 128 bits of data fetched from the storage unit 1200 are initialized. The pseudorandom number generation circuits 1310 and 1320 calculate exclusive OR of the set data to generate 1-bit data, shift the data by one bit, and calculate exclusive OR to calculate the next exclusive OR. It outputs 64-bit serial data, such as generating 1-bit data. Serial data output from the pseudo-random number generation circuits 1310 and 1320 are calculated by an OR circuit 1330 and output as 64-bit serial data.

That is, the conversion unit 1300 receives the input 128
The bit data is divided into two, a predetermined logical operation is performed based on each data, and the resultant is output as 64-bit data. If the input data is 12
When the number is less than 8 bits, a predetermined redundant bit is added to form a 128-bit configuration. When the number is more than 128 bits, the predetermined bit is deleted and a 128-bit configuration can be obtained. In addition, the bit configuration can convert not only 128 bits to 64 bits but also other arbitrary bits. Further, a device having a hardware configuration other than a pseudo-random number generating circuit using a shift register may be used, and the same function may be achieved by software.

In the present embodiment, in addition to the conventionally used fixed authentication key 1270, history information 1210, 1220, 1230, 1240,
It is characterized in that a new authentication key is generated using 1250 and 1260.

Next, an authentication execution procedure in the mobile phone system according to the embodiment of the present invention will be described with reference to FIG. FIG. 5 is a flowchart showing an authentication execution procedure in the mobile terminal and the management center used in the mobile phone system according to one embodiment of the present invention.

In the example shown in FIG. 5, the portable terminal 1000 trying to connect to the base station 2100 authenticates whether it is a legitimate portable terminal permitted to connect.

In step 501, the portable terminal 100
When the user 0 presses the telephone number of the other party to make a call, the mobile terminal 1000 transfers the mobile terminal identification number stored in the storage unit 1200 to the management center 2300 via the base station 2100.

In step 521, the management center 23
00 checks whether the transferred mobile terminal identification number has been registered in advance, and if registered, stores history information and a fixed authentication key corresponding to the transferred mobile terminal identification number from the storage unit 2320. Search for.

Next, in step 502, the conversion unit 1300 of the portable terminal 1000, and in step 522, the conversion unit 2320 of the management center 2300 executes the processing shown in FIG.
As described above, a new authentication key is generated.

In step 523, the management center 23
The control unit 2310 of 00
The authentication data A is transferred via the base station 2100.

In step 503, the portable terminal 100
The control unit 1100 of 0 converts the authentication data A sent from the management center 2300 into an authentication response a based on the new authentication key generated in step 502.
This conversion itself is performed by using authentication data A
Is converted to an authentication response a using an authentication key preset for each mobile terminal. In the present embodiment, the authentication key used for the conversion is different from the conventional one.

Similarly, in step 524, the control unit 2310 of the management center 2300
The authentication data A is converted into an authenticator a 'based on the new authentication key generated in step (1).

Next, at step 504, the control unit 1100 of the portable terminal 1000 sends an authentication response “a” to the management center 2300 via the wireless circuit unit 1500 to the base station 2.
Transfer via 100.

In step 505, the portable terminal 100
0 indicates that the service is waiting for a response.

On the other hand, in step 525, control unit 2310 of management center 2300 compares authentication response a transferred from portable terminal 1000 with authenticator a ′ created in management center 2300 itself in step 524.

At step 526, the management center 23
00 determines whether the comparison results in step 525 match.

If they match, in step 527, the management center 2300 permits the exchange control unit 2200 to talk, and if they do not match, in step 528, the management center 2300 calls the exchange control unit 2200. Reject.

It is to be noted that, in some cases, the contents of the storage unit storing the past history information of each portable terminal and the identification number assigned to each portable terminal may be downloaded to perform fraud. In such a case,
In FIG. 2, an illegal release detecting means 1280 and an erasing circuit 1290 indicated by broken lines may be provided. Unauthorized opening detection means 1280 outputs a power supply voltage signal unless a plurality of screws for stopping the housing of the portable terminal are loosened in a predetermined order. The erasing circuit 1290 may erase the contents stored in the storage unit 1200 composed of, for example, an EEPROM, based on the signal of the unauthorized release detecting means 1280.

In the above description, the rewriting of the history information stored in the storage unit is performed at the end of each call, but may be performed at a plurality of calls. It may be performed in response to a request from the terminal user.

According to this embodiment, a new authentication key is generated using history information that is sequentially rewritten, in addition to the conventional authentication key previously assigned to each portable terminal. Use can be prevented.

Next, a portable telephone system according to a second embodiment of the present invention will be described with reference to FIGS. First, a monitoring control unit of a mobile phone system according to a second embodiment of the present invention will be described with reference to FIG.
FIG. 6 is a block diagram of a monitoring control unit of the mobile phone system according to the second embodiment of the present invention.

Also in the present embodiment, the overall configuration of the mobile phone system is the same as that shown in FIG. In this embodiment, unauthorized use is checked using the monitoring control unit 2400 shown in FIG.

The monitoring control unit 2400 includes a control unit 2410
, A storage unit 2420, an interface unit 2440,
And a clock 2450.

The control unit 2410 controls the entire monitoring control unit 2400, and detects unauthorized use of the portable terminal based on access to the storage unit 2420, call charges and call positions. The storage unit 2420 stores the upper limit of the call fee of the mobile terminal user, the previous call position of the user, the call end time, and the like.

The interface unit 2440 controls connection with the switching control station 2200. The clock 2450 measures time, and generates a time signal serving as a reference for information on time such as the previous call time in the history information stored in the storage unit 2420.

The components are, for example, DSP, C
It can be realized by an electronic device such as a PU, a ROM, a RAM and various CMOSs.

The monitoring control unit 2400 is a device for detecting unauthorized use of a portable terminal based on a call charge and a call position of a portable terminal user, and the management center 2300 is a device for only authenticating the portable terminal. The monitoring control unit 2400 and the management center 2300 may be separate devices or may be the same device.

Next, a procedure for detecting unauthorized use of a portable terminal by the monitoring control unit of the portable telephone system according to the second embodiment of the present invention will be described with reference to FIG. FIG.
It is a flowchart which shows the detection procedure of the unauthorized use of a portable terminal in the monitoring control part of the portable telephone system by 2nd Embodiment of this invention.

In step 700, the monitoring control unit 24
00, the upper limit of the monthly call charge and the upper limit of the daily call charge are registered for each user.

Next, in step 701, the control unit 2410 of the monitoring control unit 2400 monitors the call rate on a daily and monthly basis, and when the call rate for each user exceeds the upper limit of the previously registered call rate. Check if it is.

In step 702, the monitoring control unit 24
The control unit 2410 of 00 determines that the telephone charge is
It is determined whether or not the call charge for each user exceeds the upper limit of the call charge registered in advance. If not, it is determined that the use is legitimate, and the process returns to step 702. If it exceeds, it is determined that the use is illegal, and the process proceeds to step 704.

In step 704, the monitoring control unit 24
The control unit 2410 of 00 transmits a command of the user's portable terminal use stop command to the management center 2300.

Next, in step 705, when receiving the command of the user's portable terminal use stop command, the management center 2300 deletes the user's portable terminal identification number and authentication key. With this operation, the user's mobile terminal cannot be properly authenticated, and thus cannot use the mobile terminal.

In the above description, even if the authorized user uses the service beyond the upper limit of the fee, the user's mobile terminal identification number and authentication key will be deleted. If it is determined in step 703 that the value exceeds the upper limit, the user of the portable terminal may be notified in advance that the value has exceeded the upper limit.

According to the present embodiment, by checking the call charge by the monitoring control unit, unauthorized call can be easily prevented.

Next, a procedure for detecting unauthorized use of a portable terminal by the monitoring control unit of the portable telephone system according to the third embodiment of the present invention will be described with reference to FIG. FIG.
It is a flowchart which shows the detection procedure of the unauthorized use of a portable terminal in the monitoring control part of the portable telephone system by 3rd Embodiment of this invention.

In this embodiment, the overall configuration of the mobile phone system is the same as that shown in FIG.
The configuration of the monitoring control unit 2400 is the same as that described with reference to FIG. In the present embodiment, the monitoring control unit 2400 shown in FIG. 6 is used to check for unauthorized use.

At step 801, the monitoring control unit 24
The control unit 2410 of 00 stores the time information obtained by the clock 2450 and the position information obtained by the position specifying system using the portable terminal in the storage unit 2420 for each user at the start of the call, during the call, or at the end of the call.

Next, in step 802, the control unit 2410 of the monitoring control unit 2400 determines the time information obtained by the clock 2450 and the position identification using the portable terminal at the start of a call, during a call, or at the end of a call. The position information obtained by the system is obtained, and the difference between the current time information and the previous time information is set at a predetermined time T.
It is checked whether or not the distance between the current call position and the previous call position is greater than a predetermined distance D.

At step 803, the monitoring control unit 24
The control unit 2410 of 00 determines the check result in step 802, and if YES, determines that the use is unauthorized, proceeds to step 804, and if NO, determines that the use is valid, returns to step 802. .

If the result of step 803 is YES, for example, at 9:00 am on January 1, the portable terminal is used in the territory of a base station in Tokyo, and the portable terminal having the same identification number becomes the same day. At 9:05 a.m. in the area of a base station in Hokkaido. In other words, based on the usage status of ordinary mobile terminals,
A situation in which different mobile terminals are used while having the same identification number is identified. Here, the time information T and the position information D to be set in advance may be common to all users of the mobile terminal, or may be individually different.

At step 804, the monitoring control unit 24
The control unit 2410 of 00 transmits a command of the user's portable terminal use stop command to the management center 2300.

Next, in step 805, when the management center 2300 receives the command of the user's portable terminal use stop command, the storage unit 2320 of the management center 2300
Deletes the mobile terminal identification number and the authentication key of this user. By this operation, the terminal authentication of the user is not properly performed, so that the mobile terminal cannot be used.

Note that the authorized user is notified that the portable terminal identification number and the authentication key have been deleted.

According to the present embodiment, an illegal call can be easily prevented by checking the call start time and the call position by the monitoring control unit.

[0084]

According to the present invention, unauthorized calls can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram of a mobile phone system according to an embodiment of the present invention.

FIG. 2 is a block diagram of a mobile terminal used in the mobile phone system according to one embodiment of the present invention.

FIG. 3 is a block diagram of a management center used in the mobile phone system according to one embodiment of the present invention.

FIG. 4 is a block diagram of a portable terminal used in a portable telephone system according to an embodiment of the present invention and a conversion unit inside a management center.

FIG. 5 is a flowchart showing an authentication execution procedure in a mobile terminal and a management center used in the mobile phone system according to one embodiment of the present invention.

FIG. 6 is a block diagram of a monitoring control unit of the mobile phone system according to the second embodiment of the present invention.

FIG. 7 is a flowchart showing a procedure for detecting unauthorized use of a mobile terminal in a monitoring control unit of a mobile phone system according to a second embodiment of the present invention.

FIG. 8 is a flowchart showing a procedure for detecting unauthorized use of a mobile terminal in a monitoring control unit of a mobile phone system according to a third embodiment of the present invention.

[Explanation of symbols]

 1000 mobile terminal 1100 control unit 1200 storage unit 1300 conversion unit 1310, 1320 pseudorandom number generation circuit 2100 base station 2200 exchange control station 2300 management center 2310 control unit 2320 storage unit 2330 conversion unit 2400 ... Monitoring control station 2410 ... Control unit 2424 ... Storage unit 3100 ... Public network 3200 ... Telephone

Claims (7)

[Claims] 1. A storage unit for storing a mobile terminal identification number, an authentication key given in advance for each mobile terminal, and history information indicating a past use status of the mobile terminal, and the authentication stored in the storage unit. A conversion unit that generates a new authentication key based on the key and the history information, and using the new authentication key generated by the conversion unit,
A mobile terminal, comprising: a control unit for converting authentication data sent from a base station into authentication response data; and transferring the authentication response data converted by the control unit to the base station. 2. The mobile terminal according to claim 1, wherein the history information stored in the storage unit includes a past call count, a past call start time, a past call end time, a past call time, and a past call time. A mobile terminal comprising: 3. The portable terminal according to claim 1, further comprising: unauthorized opening detection means for detecting unauthorized opening of the housing containing the storage unit, wherein the unauthorized opening detection signal of the housing by the unauthorized opening detecting means is provided. A portable terminal for erasing storage contents of the storage unit based on the information. 4. A storage unit for storing a mobile terminal identification number, an authentication key given in advance for each mobile terminal, and history information indicating a past use status of the mobile terminal, and the authentication stored in the storage unit. A conversion unit that generates a new authentication key based on the key and the history information, and using the new authentication key generated by the conversion unit,
A mobile terminal comprising: a control unit for converting the authentication data into authentication response data, comparing the authentication data with the authentication response data sent from the mobile terminal, and permitting a call when the two match. Management center. 5. The mobile terminal management center according to claim 4, wherein the history information stored in the storage unit is a past call count, a past call start time, a past call end time, a past call time. , And a past communication location. 6. A storage unit for storing an upper limit of a call charge for each mobile terminal, and a command for a stop command of the mobile terminal to the management center when the upper limit of the call charge stored in the storage unit is exceeded. And a control unit for sending a mobile terminal. 7. A storage unit for storing a past call start time and a past call position of the mobile terminal, and a predetermined time based on the information on the past call start time and the past call position stored in the storage unit. And a control unit for sending a command of a stop command of the mobile terminal to the management center when the call position is equal to or longer than a preset distance from the previous call position. Monitoring control unit.