KR100468356B1 - Mobile phone supervision method and apparatus - Google Patents

Abstract

The present invention relates to a method and apparatus for identifying an unauthenticated user (A2) of a mobile phone (M) comprising a terminal identity (m) and a selected security code (PIN1). When the authorized owner A1 locates his authorized SIM-card SIM1 on the mobile phone M and enters the security code PIN1 into the mobile phone M, the mobile phone enters the SIM-card SIM1. Is connected to the terminal identity (m). If the authorized user A1 has lost his mobile phone M, the subscription is blocked. The unauthenticated user A2 subscribes and receives a second SIM-card SIM2, which the user places in the mobile phone M. When the unauthenticated user A2 enters a security code PIN2 'that does not match the selected security code PIN1, the mobile phone M is connected to the SIM-identity s2 of the second SIM card SIM2. Is compared with the terminal identity (m). Since these identities s2, m do not match each other, the mobile phone M automatically sends the identities s2, m to the service node F, and the service node sends a response signal RES to the mobile phone. Confirm receipt of the identity by transmitting to (M). The service node F can obtain the personal user information A2-info about the unauthenticated user A2 of the mobile phone M from the database D2 of the operator P2 via the SIM-identity s2. have.

Description

Methods and devices for supervising mobile phones

The present invention relates to a method and apparatus for identifying a user of a mobile communication unit.

It is known to issue a user card to each mobile communication unit, which has a specific user identity and must be used with the mobile communication unit in order for the unit to be possible. The user card connects the subscriber to a particular operator.

For example, each mobile communication unit, which may be a mobile phone or a wireless phone, has a terminal identity. Such a terminal identity may be the serial number or serial number of a unit called IMEI International Mobile Equipment Identity in European mobile telephone systems, ie GSM systems. The IMEI identity is stored in the circuit of the mobile communication unit and cannot be easily accessed. The above-mentioned user identity belonging to a specific user card is called an IMSI identity (International Mobile Subscription Identity) in the GSM system.

In a GSM system, a user card is called a SIM-card and an IMSI identity is also called a SIM-identity.

When the owner of the mobile communication unit wants to join the mobile communication unit, he requests the operator to purchase a SIM card. This card entitles the user to an operator subscription service, through which the mobile communication unit can use such a network belonging to the operator.

Upon application, the owner states the terminal identity of his mobile communication unit along with personal information such as name, address, telephone number, personal identification number, and this information is stored by the operator in a database or any similar device. The operator can also store information about such services available to the new owner in the same location. Services such as call billing are performed through, for example, user cards.

The operator assigns a specific user identity, so-called SIM-identity, to the SIM card, which relates to the owner information stored in the database. The user identity may also include a specific identification code that identifies the operator managing the subscription to which the SIM card is connected.

Swedish patent 9203351-3 shows a mobile communication unit that can distinguish its user card from other user cards.

If a mobile communication unit belonging to an authenticated user is stolen by an unauthorized user, the authenticated owner reports the theft to an operator managing the subscription used by the stolen mobile communication unit. The operator can then block the user card in the stolen unit so that the unit can no longer be used with the blocked user card.

Unauthenticated users can replace an existing user card in the unit with another user card assigned a user identity, thereby achieving access to the stolen mobile communication unit. The unauthenticated user can then establish a call connection to the subscription belonging to the new user card via the stolen mobile communication unit.

In order to make the stolen unit unusable, it is known that the owner blocks the stolen unit on demand so that an unauthorized user cannot use the stolen mobile communication unit. In this case, the mobile communication unit has an authenticator that can be used by the operator to block the unit, thereby preventing the unit from being used additionally.

Another way to prevent unauthorized users from using a stolen mobile communication unit is to allow a new user card to work with the mobile communication unit, so that when a user card is replaced with a new user card, a particular code is keyed in. (key-in). If not, the mobile communication unit is unavailable.

Therefore, even if an unauthenticated user remains anonymous, it is possible to prevent an unauthenticated user from using the mobile phone. Since a large number of mobile communication units are stolen, it is impossible to guarantee a mobile communication unit these days. Guaranteed mobile communication units result in many claims for each insurance company.

Patent specification WO 95/26115 describes a mobile phone that can be used when the IMSI identity of a SIM-card inserted into a mobile phone matches the identity pre-stored in the mobile phone. The mobile phone compares the two identities and blocks the additional use of the mobile phone when these identities do not match.

Therefore, the operator can allow the mobile phone to be used only by the SIM card belonging to the operator, which SIM-identity matches the identity pre-stored in the mobile phone. When the user replaces the SIM card with an unauthorized SIM card, the mobile phone will be blocked for additional use.

US patent specification 4,843,385 illustrates a wireless device that can be blocked by keying the security identity to the wireless device. The radio cannot be used because it is disabled in its blocked state. In order not to block the wireless device, it is necessary to enter the correct identity. Otherwise, the wireless device automatically sends a message to the operator having the wireless device's identity indicating that the wrong identity has been keyed in, so that appropriate action can be taken.

1A is a schematic diagram of a communication network of the present invention.

Is a graphical representation of a database storage field for storing data in accordance with the present invention.

2 is a schematic block diagram of a mobile telephone and a service node in accordance with the present invention.

3 is a flow chart illustrating a method of the present invention.

4 is a signaling diagram illustrating signaling between a mobile phone and a service node in accordance with the present invention.

The present invention relates to the problem of checking whether a user of a user card is authorized to use a card in a predetermined telecommunication unit. This check can be performed without the user's knowledge of the mobile communication unit.

Another problem related to the present invention is that it is identified as an unauthorized user of the mobile communication unit without prior warning to the unauthorized user.

It is therefore an object of the present invention to establish whether the user of the mobile communication unit is authorized to use his or her user card in the unit to establish the identity of an unauthorized user of the mobile communication unit. It will be done without the user of the mobile communication unit or an unauthorized user being aware of this procedure.

For this purpose, it is proposed according to the invention that when the user card is inserted into the mobile communication unit, the unit automatically requires the insertion of a security code. The user then enters the code into his mobile communication unit. If the security code entered is incorrect and the terminal identity and the user identity do not match each other, the mobile communication unit automatically transmits its terminal identity and the user identity of the inserted user card to the service node.

The service node may be the guarantee company to which the mobile communication unit is guaranteed or the operator responsible for the subscription to which the user card is connected. The information associated with the user identity obtained from the mobile communication unit is then used at the service node to take appropriate action, such as tracking an unauthorized user.

In particular, the problem is solved by the authorized owner of the mobile communication unit specifying the identity of the user card on which the mobile communication unit will operate by entering a security code selected by the authorized owner into the unit when the user card is located in the unit. do. This automatically associates the user identity of the user card with the terminal identity to establish a specific relationship between them.

The mobile communication unit is a quiver that will automatically request a security code whenever a user card is located in it. If the security code entered in response to this request is incorrect, or if the code is not entered into the unit, the unit will compare the user identity belonging to the inserted user card with the terminal identity. If these identities do not exhibit the particular interrelationship described above, the mobile communication unit stores the user identities and automatically sends both identities to the service node. The mobile communication unit then repeatedly transmits the stored user identity and the terminal identity until it receives a response signal from the service node, this procedure being performed without being recognized by the user of the mobile communication unit. The service node confirms receipt of the user identity and the terminal identity sent by the mobile communication unit by sending a response signal to the communication unit.

Upon receiving the response signal, the mobile communication unit stops the transmission of the stored user identity and the terminal identity and deletes the stored user identity.

The service node then contacts the operator of the subscription used by the user card in the mobile communication unit to obtain information associated with the user identity, thereby identifying the user of the user card inserted in the unit.

One advantage provided by the present invention is that an unauthorized user can be tracked through the stolen unit without being aware that an unauthorized user is occurring and without the unit being blocked. The mobile communication unit automatically sends the user identity and the terminal identity to the service node.

When a mismatch is found, the user is temporarily radio-shielded because the mobile communication unit repeatedly transmits the stored user identity and terminal identity until a response signal is obtained without the user of the unit knowing what is happening. Even if the location is located, information relating to the user identity and the terminal identity stored in the unit will eventually be received at the service node.

Another advantage is that the mobile communication unit can be guaranteed since it can track unauthorized users through the mobile communication unit. The invention can also be used by the service node to check if everything is ordered, for example, by contacting the authorized owner of the unit to confirm whether a mistake is made, in case of confusion among user cards.

Another advantage provided by the present invention is that the mobile communication unit is secure against theft by an operator because an unauthorized user who is aware of the operation of the electronic device of the present invention is not interested in owning such a mobile communication unit. Can be marketed.

The invention will be described in more detail below with reference to preferred embodiments and the accompanying drawings.

FIG. 1A illustrates, in particular, a communication comprising one or more wireless communication networks, such as a first wireless communication network RN11, a second wireless communication network RN12, a third wireless communication network RN13, and a public switched telephone network (PSTN). The structure of the network is shown. Each wireless communication network RN11, RN12, RN13 includes an impression of a base station connected to a mobile service switching center (MSC), which operator P1 and P2 and the service node F also operate. It forms an interface to the connected public switched telephone network (PSTN).

Some mobile phone users are located in the wireless communication network RN11, where an authenticated user A1, called the owner, and a base station BS1 connected to the switching center MSC are located. The owner A1 owns a mobile phone M (FIG. 2) which has an inaccessible stored terminal identity called so-called mobile identity m which has been registered at the service node F by itself A1. The mobile identity m identifies the mobile phone M and may be, for example, the serial number of the phone. The service node F may be an insurance company used by one of the operators P1 and P2.

Some mobile phone users exist in the wireless communication network RN12, where there is an unauthorized user A2 and a base station BS2 connected to the mobile service switching center MSC.

1a shows a mobile phone M and its mobile identity m at two different locations, namely the location PosA of the owner A1 and the location PosB of the unauthorized user A2.

Two operators P1 and P2 are connected to the mobile service switching center MSC to provide a subscription for using the wireless communication networks RN11, RN12, RN13. As described in more detail below, operator P1 stores information about his subscribers in database D1, and operator P2 stores information about his subscribers in database D2.

The database D1, D2 comprises a storage field 10, in which information relating to each user A1, A2 of each user card, i.e. SIM-card SIM1, SIM2, SIM3 as described above, is provided in this field. Stored within. When purchasing SIM-cards SIM1, SIM2, SIM3 from operator P1 or from operator P2, SIM-cards SIH1, SlM2, SIM3 are assigned the associated SIM-identities s1, s2, s3. This relates to the corresponding information about the users A1 and A2 of each SIM-card SIM1, SIM2, SIM3.

The identification codes P1-id, P2-id included in the SIM-identities s1, s2, s3 identify the operators P1, P2 with which the SIM-identities s1, s2, s3 are registered.

1B shows a possible structure of the storage field 10 in the databases D1 and D2. The storage field 10 includes five storage units 1, 2, 3, 4 and 5 in which data is stored. The name of each user A1, A2 is stored in the first storage unit 1, the telephone number of each user A1, A2 is stored in the second storage unit 2, and each user A1, A2. Is stored in the third storage unit 3, the personal identity number of each of the users A1 and A2 is stored in the fourth storage unit 4, and the details related to the respective user information A1 and A2 are described. SIM-identities s1, s2, s3 are stored in the fifth storage unit 5. The storage field 10 may include at least five storage units 1, 2, 3, 4, and 5 described above when the user wants to store more user information. When a particular portion of the user information does not need to be stored in the storage field 10, the corresponding storage unit can be excluded. The order in which user information is stored in the storage units 1, 2, 3, 4, 5 may be different from that described, and the structure of the storage field 10 shown is provided only as an example.

FIG. 2 is a schematic block diagram showing the mobile phone M, the first SIM-card SIM1 and the service node F described above. The mobile phone M is in particular an interlinking unit 301, a card space u, a read-in unit 303, a first comparator unit 305, a receiver 306, a transmitter 307, A keypad 309, a display 310, an inquiry unit 313, a second comparator unit 315, a memory unit 317, and a control unit 319, which elements are shown in the figures. It is. Receiver 306 and transmitter 307 are connected to antenna 311. The units are interconnected by data bus 312.

The first SIM card SIM1 in particular comprises a processor 331, which is the element shown in the figure. The SIM-identity S1, which is also shown in the figure and assigned to the first SIM-card SIM1, is stored in the processor 331.

The service node F in particular comprises a receiver 321, a transmitter 322, a localizing unit 323, a computer unit D _F , a control means 329 and a registration unit 330. Receiver 321 and transmitter 322 are connected to antenna 327. Units are interlinked by databus 328.

The memory unit 317 of the mobile telephone M is used for inaccessibly storing the above-mentioned mobile identity m and the selected security code PIN1. This code is used by the owner A1 respectively when the owner removes his first SIM-card SIM1 from the mobile phone M or replaces the card with the mobile phone M. The memory unit 317 is also used, for example, to temporarily store the SIM-identity s2. When the first SIM-card SIM1 is located in the planned card space u of the mobile phone M, the reading unit 303 reads the SIM-identity s1 belonging to the first SIM-card SIM1. To register.

The inquiry unit 313 is used to request that the owner enter his security code PIN1 in response to the request displayed on the display 310. Owner A1 enters security code PIN1 'through keypad 309.

The first comparator unit 300 is used to compare the input security code PIN1 'with the selected and stored security code PIN1.

The interlinking unit 301 connects the SIM-identity s1 and the mobile identity m stored in the memory unit 317 with each other, as described above, and establishes a relationship therebetween.

The second comparator unit 315 in the mobile phone M compares the registered SIM-identity s1 with the mobile identity m to confirm whether or not the relationship established in the interlinking unit 301 is satisfied.

The units u, 301, 303, 305, 306, 307, 309, 313, 315, 317 and 319 of the mobile telephone M are connected to the data bus 312, and the units communicate with each other via this data bus. . The control unit 319 of the mobile telephone M controls the various units u, 301, 303, 305, 306, 307, 309, 313, 315, 317 through the medium of the data bus 312 to control the units. According to the method to perform the desired operation.

The positioning unit 323 of the service mode F comprises, in particular, an identification unit 325 which identifies the operator P2 associated with the SIM-identity s2 received in the service mode F, and the identification unit 325 ) Identifies user A2 of mobile phone M. Element 325 is shown in the figure.

The computer unit D _{F in the} service node F functions to register incoming messages such as SIM-identity s2 and mobile identity m, which are screens D _S of the computer D _F. Appears on the screen.

The registration unit 330 is used for storing the above-mentioned mobile identity m and its corresponding owner A1.

The control means 329 in the service node F controls the various units 321, 322, 323, D _F , 325, 330 via the data bus 328, and the units 321, 322, 323, D _F , 325 and 330 are connected to the data bus 328.

An exemplary embodiment is described below with reference to FIGS. 1A and 2, where the owner A1 seeks to identify an unauthorized user A2 of a lost or stolen mobile phone M. FIG.

When using mobile phone M for the first time, user A1 selects security code PIN1 and enters the code into mobile phone M. The mobile phone M registers the selected security code PIN1 and the code is stored inaccessible in the mobile phone M.

The owner A1 later wishes to subscribe to the operator P1 and thus applies for a first SIM-card SIM1 which entitles him to the subscription service provided by the operator P1. The application includes the owner A1's name, telephone number, address, personal identification number such as personal identification number A1-info and mobile identity m. The operator P1 thus stores the owner information A1-info in the storage field 10 of the database D1 and associates this information with the SIM-identity s1. The first SIM card SIM1 is assigned to the above-described SIM-identity s1 and then transferred to the owner A1. SIM-identity s1 includes an identification code P1-id of operator P1.

The owner A1 can then place the first SIM card SIM1 in the card space u of the mobile phone M. FIG. The mobile phone M reads the SIM-identity s1 of the first SIM-card SIM1 by detecting that the first SIM-card SIM1 is properly positioned in the card space u. The mobile phone M will then ask the owner to enter the security code PIN1, for example in response to a request appearing on the display 310. The owner A1 enters the security code he has selected into the mobile phone M.

The mobile phone M reads-in the input security code PINl 'to select this code and compares it with the stored security code PINl. When these codes match, the mobile phone M associates the SIM-identity s1 with the mobile identity m to register the relationship between the SIM-identity s1 and the mobile identity m. How this is done will be described below with reference to FIG. 2.

The owner A1 can use the mobile phone M and establish communication for the subscription connected to the operator P1.

Assume that an unauthorized user A2 owns the mobile phone M. Owner A1 notifies operator P1 that mobile phone M has been lost. The operator P1 blocks the SIM-identity s1 of the first SIM card SIM1 from the mobile phone M so that the user A2 uses the mobile phone M as the first SIM card SIM1. Makes it impossible to do.

An unauthenticated user A2 wishes to subscribe to the operator P2 and applies for a second SIM-card SIM2 to the operator P2, whereby the user A2 is entitled to the services provided by the operator P2. Is given. In the manner as described above, the user A2 submits an application containing the mobile identity m and the personal information A2-info. The operator P2 stores A2-info about the user A2 in the database D2 and associates this information with the SIM-identity s2. After the SIM-identity s2 is connected to the second SIM-card SIM2, the second SIM-card SIM2 is transferred to the user A2. SIM-identity s2 includes an operator identification code P2-id.

Then, the user A2 places the second SIM card SIM2 in the card space u of the mobile phone M, so that the mobile phone M has a second SIM card SIM2. u) is properly positioned. The mobile phone M reads-in the SIM-identity s2 of the second SIM-card SIM2, and then requires the owner to enter the security code PIN1 described above via the display. User A2 enters code PIN2 'into mobile phone M.

The mobile phone M reads the input code PIN2 'and compares the code with the selected and stored security code PIN1. Since these codes do not match, the mobile phone M compares the SIM-identity s2 with the mobile identity M. This comparison indicates that the relationship described above between the SIM-identity s2 and the mobile identity m is not valid. The mobile phone M then stores the SIM-identity s2 in memory and automatically transfers the SIM-identity s2 and the mobile identity m.

In the GSM system, the so-called Short Message Service (SMS) is used to transmit the SIM-identity s2 and the mobile identity m on a standalone dedicated control channel (SDCCH). SIM-identity (s2) and mobile identity (m) are transmitted via control channel (SDCCH) to computer (D _F ) contained in service node (F) via base station (BS2) and mobile service switching center (MSC). do. SMS-services are used in GSM systems to send simple text messages to and from mobile phones, which may include up to 160 alphanumeric characters.

The mobile phone M periodically repeats the transmission of the stored SIM-identity s2 and the mobile identity m at regular time intervals until a response signal RES is received, each time interval being a duration of T-seconds. Has a period. The message is repeatedly transmitted from the mobile station so that, for example, if the mobile phone M is temporarily located in an area where it is screened wirelessly from the base station BS2, the base station BS2 is the SIM identity and the mobile identity. (m) will eventually receive.

The computer D _F in the service node F receives and registers the mobile identity m and the SIM-identity s2 sent from the mobile phone M and registers it on the screen D _S of itself D _F. Shown in The computer D _F then sends a response signal RES confirming reception and registration of the SIM-identity s2 and the mobile identity m via the switching center MSC and the base station BS2. Send automatically to). As in the case described above, an SMS-service is used to transmit the SIH-identity s2 and the mobile identity m over the control channel SDCCH.

Receiving and registering in the computer (D _F) SIM- identity (s2) and a mobile identity (m) may also also be confirmed by sending the response signal (RES) from the computer (D _F) in the same manner as described above by manually Can be.

Upon reception of the response signal RES, the mobile phone M stops the periodic transmission of the SIM-identity s2 and the mobile identity m, and then deletes the SIM-identity s2 from its memory.

When the service node F is received by the computer (long) and becomes aware of the SIM-identity s2 and the mobile identity m displayed on the screen D _S , the operator identification code from the SIM-identity s2. By reading (P2-id), the operator P2 to which the SIM-identity s2 is registered is identified. The service node F then contacts the operator P2 and obtains personal information A2-info about the user A2 connected to the SIM-identity s2 from the operator database D2.

The service node F contacts the owner A1 connected to the registered mobile identity m and checks whether an error has occurred or whether the owner A1 has lost his mobile phone M. Since it is assumed that the owner A1 has lost his mobile phone M in the case described, the service node F is obtained from the operator P2 to track the user A2 of the mobile phone M. Use personal information (A2-info).

From now on, a variation of the above-described example will be described below.

As in the above example, the owner A1 joins the operator P1 to be issued a first SIM-card SIM1 related to the SIM-identity s1, in which the operator identification code P1-id is issued. Included. The owner A1 places the first SIM card SIM1 in the mobile phone M and enters the security code PIN1 'in response to the request made by the mobile phone M as described above. The mobile phone M connects the SIM-identity s1 with the mobile identity m to register the relationship between the SIM-identity s1 and the mobile identity m.

The owner A1 can now use his mobile phone M to establish communication for the subscription connected to the operator P1.

The owner A1 would like to newly join the operator P2. Therefore, the owner A1 applies for a third SIM-card SIM3 to entitle him to use a new subscription to the operator P2. The application includes personal information A1-info about the mobile identity m and the owner A1. The personal information A1-info is stored in the database D2 by the operator P2 in the same manner as described above and associated with the SIM-identity s3. The third SIM-card SIM3 is issued to the owner A1 after being assigned to the third SIM-identity s3. SIM-identity s3 includes an operator identification code P2-id.

The owner A1 places the third SIM card SIM3 in the card space u of the mobile phone M and enters the security code PIN1 'in response to a request from the mobile phone M. The mobile phone M detects that the third SIM-card SIM3 is properly positioned in the card space u and thus the SIM-identity s3 and the entered security code PIN 'of the SIM-card SIM3. Read it.

The mobile phone M then compares the entered security code PIN1 'with the above selected security code PIN1 stored in the phone. The comparison indicates that these codes match each other so that the mobile phone M combines the SIM-identity s3 with the mobile identity m to establish a relationship between the SIM-identity s3 and the mobile identity m. Register.

The owner A1 can use his mobile phone M to establish communication for the subscription connected to the operator P2.

In this example, the owner A1 will enter the wrong security code PIN4 into the mobile phone M after placing the third SIM-card SIM3 in the card space u. The mobile phone M then reads-in the erroneous security code PIN4 and compares this code with the above-described security code PIN1 selected by the owner A1. The comparison indicates that this code does not match, so that the mobile phone M will continuously compare the SIM-identity s3 assigned to the third SIM-card SIM3 with the mobile identity m. Since the SIM-identity s3 and the mobile identity m are not connected to each other by the mobile phone M, the comparison indicates that the relationship described above between the SIM-identity s1 and the mobile identity when Indicates invalid for identity s3 and mobile identity nl. Then, the mobile phone M stores the SIM-identity s3 in its memory to automatically send out the SIM-identity s3 and the mobile identity m.

The mobile phone M uses the SMS-service described above to send out the SIM-identity s3 and the mobile identity m over the control channel SDCCH. The SIM-identity s3 and the mobile identity m are transmitted via the control channel SDCCH to the computer D _F of the service node F via the base station BSI and the switching center MSC.

As described above, the mobile phone M continuously transmits the stored SIM-identity s3 and the mobile identity m at regular intervals until the response signal RES is received.

The computer D _F in the service node F receives and registers the SIM-identity s3 and the mobile identity m sent by the mobile phone M and displays it on the computer screen D _S. Then, upon confirming that the computer D _F has received the identity, the computer D _F automatically transmits a response signal RES to the mobile phone M via the switching center MSC and the base station BS1. As in the previous case, an SMS-service is used to transmit the SIM-identity s3 and the mobile identity m over the control channel SDCCH.

Upon receiving the response signal RES, the mobile phone M stops transmitting the SIM-identity s3 and the mobile identity m, and then deletes the stored SIM-identity s3 from its memory.

When the service node F notifies on the computer screen D _S that the computer D _F has received the SIM-identity s3 and the mobile identity m, the owner of the registered mobile identity m Carry out a check for A1). The service node F does not take any further action when an error occurs.

An additional alternative to the example described above is that the owner A1 is as described above. In order to achieve the subscription, the operator P1 applies for the first SIM card SIM1. As in the previous case, operator P1 stores personal information A1-info about SIM-identity s1 in database D1 and includes SIM-identity (P1-id) with operator identification code P1-id. s1) is assigned to the first SIM card SIM1.

The owner A1 places the first SIM-card SIM1 in the intended card space u and enters the security code PIN1 'in response to a request from the mobile phone M. The mobile phone M detects that the first SIM-card SIM1 is properly positioned in the card space u and thus the SIM-identity s1 and the entered security code PIN1 of the first SIM-card SIM1. Read-in ').

The mobile phone M compares the entered security code PIN1 'with the selected stored security code PIN1 described above. The comparison indicates that these codes are the same, so that the mobile phone M associates the SIM-identity s1 with the mobile identity m to register the relationship between the SIM-identity s1 and the mobile identity m. .

The owner A1 can use the mobile phone M for communication of the subscription connected to the operator P1.

The owner A1 will remove the first SIM-card SIM-1 and then place it in the intended card space u of the mobile phone M. Then, the mobile phone M detects the presence of the first SIM-card SIM1 to read-in the SIM-identity of the first SIM-card SIM1 so that the selected and stored security code PIN1 is entered. Require.

The owner A1 will enter the faulty security code PIN3. The mobile phone M reads-in the input security code PIN3 and compares this code with the selected and stored security code PIN1. This comparison indicates that the entered security code PIN3 is in error. Then, the mobile phone M compares between the SIM-identity s1 and the mobile identity m. This comparison indicates that the relationship described above between the SIM-identity s1 and the mobile identity m is valid so that no additional procedure is performed in the mobile phone M.

This allows the owner A1 to communicate with the subscription connected to the first SIM card SIM1 using the mobile phone M.

Even if the owner A1 does not enter the security code PIN1 as required by the mobile phone in the prior example, the mobile phone M compares the SIM-identity s1 with the mobile identity m. The comparison indicates that the relationship described above between the SIM-identity s1 and the mobile identity m is valid, so that no further procedure is performed in the mobile phone M.

3A and 3B are flow charts illustrating the method of the present invention as described in the prior examples. The mobile identity m and the security code PIN1 selected by the phone owner A1 are stored in the mobile phone M. Owner A1 registers mobile identity m as service node F, see above.

The method begins with the owner A1 placing the first SIM-card SIM1 in the intended card space u of the mobile phone M (step 101. First SIM-card SIM1). Entitles the user to the subscription service provided by the operator P1, and the SIM-identity s1 assigned to the first SIM-card SIM1 is the personal information A1-info associated with the owner A1. This information is stored in database D1 of operator P1, as described above, SIM-identity s1 includes operator identification code P1-id.

The mobile phone M detects the presence of the first SIM-card SIM1 in the card space u and in step 103 reads out the SIM-identity s1 belonging to the first SIM-card SIM1. Input and requires the security code PIN1 to be entered.

The owner A1 enters the security code PIN1 'in step 105, and the mobile phone M reads the code PIN1'. Then, in step 107, the mobile phone M compares the entered security code PIN1 'with the stored security code PIN1. The comparison indicates that, depending on Y, these codes are identical. In step 109, the mobile phone M connects the read-input SIM-identity s1 to the mobile identity m to register the relationship between the SIM-identity s1 and the mobile identity m.

The unauthenticated user A2 acquires the mobile phone M and replaces the first SIM-card SIM1 with the second SIM-card SIM2, which is provided to the operator P2. Entitlement for the subscription service provided by the SIM-identity (s2) assigned to this second SIM-card (SIM2), which is linked to personal information (A2-info) about the user (A2). It is stored in the database D2 of (P2). SIM-identity s2 includes an operator identification code P2-id.

In step 101, the user A2 places the second SIM card SIM2 in the intended card space u of the mobile phone M.

The mobile phone M detects the presence of the second SIM-card SIM2 in the card space u as described above, and in step 103 reads-in and inputs the SIM-identity s2 and the owner ( The security code PIN1 selected by A1) is required.

In step 105, user A2 enters security code PIN2 'so that mobile phone M reads-in the entered security code PIN2'. Then, the mobile phone M compares the entered security code PIN2 'with the selected and stored security code PIN1 in step 107, where the comparison indicates a mismatch in accordance with N.

In step 111, the mobile phone compares the read-input SIM-identity s2 with the mobile identity m, which comparison indicates that these identities, according to N, do not meet the above-described linked relationship. Then, in step 112, the mobile phone M stores the read-input SIM-identity s2 in memory and in step 113, the read-input SIM-identity s2 and the mobile identity ( send m). In this transmission, the mobile telephone M transmits the SIM-identity s2 and the mobile identity m to the base station BS2 and the switching center MSC through the control channel SDC by using the SMS-service described above. Via computer D _F of service node F.

According to the method step 117 in FIG. 3B, a check is carried out in the mobile phone M to ascertain whether or not a response signal RES has been received from the service node F. FIG. This is referred to as C1 in FIGS. 3A and 3B. According to N, if such a response signal has not been received, in step 114, the mobile phone M is configured to store the SIM-identity s2 and the mobile identity m stored in step 113 at regular time intervals. Transmission continues repeatedly, where each time interval has a duration of T-seconds. It is referred to as C2 in FIGS. 3A and 3B.

In step 115, the computer D _F in the service node F receives and registers the SIM-identity s2 and the mobile identity m sent by the mobile phone M and registers these identities on the computer screen ( D _S ). The computer D _F , at step 116, transmits the response signal RES to the mobile phone M via the switching center MSC and the base station BS2, thereby simulating the SIM-identity s2 and the mobile identity m. Confirm receipt and registration. As in the case of the dictionary, the SMS-service is used to send out the SIM-identity s2 and the mobile identity m over the control channel SDCCH.

The mobile phone M stops the periodic transmission of the SIM-identity s2 and the mobile identity m by receiving the response signal RES according to Y in step 117, whereby the mobile phone M steps At 119, the SIM-identity s2 stored from its memory is deleted.

Then, in step 121, the service node F contacts the operator P2 identified by the identification code P2-id, as described above. The service node F is supplied by the operator P2 with the user personal information A2-info from the operator database D2, which information A2-info is supplied to the SIM-identity received at the service node F. s2). The personal information A2-info may be used by the service node F in step 121 to identify the user A2 of the mobile phone M having the mobile identity m.

In step 123, the service node F contacts the owner A1 connected to the registered mobile identity m such that a mistake has occurred or the owner A1 has stolen his mobile phone M. Check if it is done.

In this example, because the owner A1 has been stolen his mobile phone M, in step 125 it is necessary for the service node to take the required step according to Y. This action is performed in step 127 and a service node F may be included to track the user A2 of the mobile phone M using the personal information A2-info received from the operator P2. .

In the above example, when the owner A2 of the mobile phone M places a third SIM-card SIM3 in the mobile phone M that is not connected to the mobile identity m in step 101, And when the owner A1 enters the wrong security code PIN3 or does not enter the security code PIN1 'in the mobile phone M at the same time in step 107, the owner A1 in step 123. The check performed by the service node F with respect to C) may prevent the service node F from additional operations in accordance with N at step 125.

Alternative embodiments of the present invention will be described below with reference to FIGS. 3A and 3B and prior examples.

As described above, the owner A1 receives the first SIM-card SIM1 to which the SIM-identity s1 including the identification code P1-id is assigned by applying for subscription to the operator P1. In step 101, the owner A1 places the SIM card SIM1 in the intended card space u of the mobile phone M. According to the method described above, this means that the mobile phone M associates the SIM-identity s1 with the mobile identity m in step 109 and registers the relationship between the SIM-identity s1 and the mobile identity m. Do it.

The owner A1 removes the first SIM card SIM1 from the mobile phone M, and then, according to step 101, moves the first SIM card SIM1 to the card space u of the mobile phone M. Will be repositioned into). The mobile phone M thus detects the presence of the first SIM card SIM1 in the card space u, in step 103 reads-in the SIM-identity s1 of the SIM card SIM1 and enters it. The display shows a request for the owner A1 to enter the selected and stored security code PIN1 described above.

In step 105, the owner A1 will enter an incorrect security code PIN3. The mobile phone M reads-in the input security code PIN3 and compares this code with the selected and stored security code PIN1. This comparison indicates that security code PIN3 does not match security code PIN1 (step 107). The mobile phone M continuously compares the read-entered SIM-identity s1 with the mobile identity m (step 111), where this comparison is the SIM-identity s1 and the mobile identity m. Indicates that the relationship satisfies the relationship in the prior example, so that Y is applied so that no further action is taken on the mobile phone (M).

The above-described signaling on the control channel (SDCCH) will be described below with reference to the signaling scheme provided in FIG. The vertical line shows the events occurring at the mobile phone M, the base station BS2, the mobile service switching center MSC and the service node F in the time sequence, where time is referred to as t in the figure.

As described above, the owner A1 has in his possession a mobile telephone M having a mobile identity m registered with the service load F. As shown in FIG. The owner A1 receives the first SIM-card SIM1 with the assigned SIM-identity s1 from the operator P1 by applying for the use of the subscription provided by the operator P1, as fully described above. do. SIM-identity s1 includes an operator identification code P1-id.

Then, the owner A1 places the first SIM-card SIM1 in the card space u of the mobile phone M, and then responds to the request made by the mobile phone M and secure code PIN1. The mobile phone M connects the SIM identity s1 of the first SIM card SIM1 with the mobile identity m.

The owner A1 can use the mobile phone M for communication of subscriptions connected to the operator A1.

The unauthorized user A2 owns the mobile phone M and the owner A1 reports the loss to the operator P1 so that the operator has the SIM-identity of the first SIM-card SIM1 on the mobile phone M. will block (s1) as appropriate. Unauthorized user A2 can no longer use mobile phone M with first SIM-card SIM1.

The user A2 sends an application to the operator P2 an application for a second SIM-card SIM2 which entitles the user to use the service provided by the operator P2 in order to subscribe to the service provided by the operator P2. Will submit. In the same way as described above, the user A2 includes the mobile identity m with the user personal information A2-info in his application. The operator P2 stores the user personal information A2-info in the database D2 and associates this information with the SIM-identity s2. After the SIM-identity s2 is connected to the second SIM-card SIM2, the second SIM-card SIM2 is transferred to the user A2. SIM-identity s2 includes an operator identification code P2-id.

The user A2 will move from the base station BS2 to a place that is shielded in a wireless manner and will place the second SIM card SIM2 in the telephone card space u. The mobile phone M senses the presence of the second SIM-card SIM2 in the card space u and reads-in the SIM-identity s2 of the second SIM-card SIM2. Then, the mobile phone M displays a message requesting the security code PIN1 to be entered above. Then, user A2 enters code PIN2 'in mobile phone M.

The mobile phone M reads the input code PIN2 'as in the case described above and compares this code with the selected and stored code PIN1. Since this code does not match, the mobile phone M compares the SIM-identity s2 with the mobile identity m. This comparison indicates that the relationship described above between the SIM-identity s2 and the mobile identity m is not met. Thus, the mobile phone M stores the SIM-identity s2 in its memory and the SIM-identity s2 and the mobile identity via the control channel SDCCH, as shown by the point 401 in FIG. 4. (m) is sent automatically.

The mobile phone M continuously transmits the above-described identities s2 and m at regular time intervals with a duration of T-seconds, as shown in the figure, and the computer D _F of the service node _F. Waits for the response signal RES.

The user A2 will move away from the screen being screened in a wireless manner, whereby the SIM-identity s2 and the mobile identity m repeatedly transmitted by the mobile phone M will eventually become the base station BS2 at point 403. Will be reached). The mobile phone M uses the SMS-service described above to connect the SIM-identity s2 and the mobile identity m through the control channel SDCCH via the base station BS2 and the switching center MSC in the figure. 405, where the computer D _F of the service node F receives and registers the SIM-identity s2 and the mobile identity m.

The SIM-identity s2 and the mobile identity m received and registered by the computer D _F appear on the screen D _S. The computer D _F then sends the response signal RES via the control center SBCCH via the switching center MSC and the base station BS2 in the manner described above at point 407 in the figure. To send).

The mobile phone M stops transmitting the SIM-identity s2 and the mobile identity m by receiving the response signal RES at the point 409 and deletes the stored SIM-identity s2 from its memory. do.

The service node F recognizes that the computer D _F has received the SIM-identity s2 and the mobile identity m, thereby simulating the SIM from the operator identification code P2-id included in the SIM-identity s2. -The identity of the operator P2 in which the identity s2 is registered is read. The service node F then contacts the operator P2 and receives from the operator P2 personal information A2-info obtained from the database D2 connected to the SIM-identity s2 and the user A2. .

The service node F checks the owner A1 connected to the registered mobile identity m. Since the owner A1 has lost his mobile phone M, the service node F uses the personal information A2-info received from the operator P2 to the user A2 of the mobile phone M. ).

As an alternative to mobile phone M, which transmits SIM-identity s2 and mobile identity m at regular time intervals until a response signal RES is received, the mobile phone M is provided by user A2. Without recognizing this transmission, each time a call connection is established via the second SIM card SIM2 via itself M, the SIM-identity s2 and the mobile identity are over the control channel SDDC. (m) may be configured to transmit. This procedure continues until mobile phone M receives response signal RES at point 409 as described above. Other possibilities are also feasible.

In mobile telephone systems other than the GSM system, a service similar to the SMS-service can be used and a channel other than the SDCCH channel can be used for transmitting the messages and signals between the mobile telephone M and the service node F. Similarly, channels other than the SDCCH channel of the CSM system may be used.

The above-described SIM-identities s1, s2 and s3 correspond to the IMS1 identity (International Mobile Subscription Identity) in the GSM system, and the mobile identity (m) corresponds to the IMEI identity (International Mobile Equipment Identity) in the GSM system. Mobile phone systems other than GSM systems use the user card as a related user identity similar to a SIM card.

It will be appreciated that the present invention cannot be applied when the user A1 initially uses the mobile phone M when not selecting the security code PIN1 in the above example.

Claims (18)

A method of identifying users A1 and A2 of a mobile communication unit M in a mobile communication system, the unit having a terminal identity m and a security code PIN1 selected by an authenticated user A1, The unit (M) comprises a card space (u) for accommodating user cards (SIM1, SIM2, SIM3) having user identities (s1, s2, s3) and connected to operator subscriptions (P1, P2). A method of identifying the users A1 and A2 of the mobile communication unit M, wherein one of the user identities s1 and s3 corresponding to the user cards SIM1 and SIM3 is connected to the terminal identity m. Positioning user cards SIM1, SIM2, SIM3 in the card space u of the mobile communication unit M; Registering the user identities (s1, s2, s3) of the inserted user cards (SIM1, SIM2, SIM3) with the mobile communication unit (M), Matching the request made by the mobile communication unit M to enter the security code PIN1 '; Comparing the required security codes PIN1 'and PIN2' with the selected security code PIN1 in the mobile communication unit M; When the requested security code PIN1 ', PIN2' does not match the selected security code PIN1, a comparison between the registered user identity s1, s2, s3 and the terminal identity m is performed. Performing in the unit M, Storing the registered user identities s2 and s3 in the mobile communication unit M when the registered user identities s2 and s3 and the terminal identity m do not match with each other; Transmitting the stored user identity (s2, s3) and terminal identity (m) from the mobile communication unit (M), Receiving the registered and stored user identity (s2, s3) and terminal identity (m) at a service node (F).  The method of claim 1, Repeating the transmission of the stored user identities (s2, s3) and the terminal identity (m) from a mobile communication unit (M); Transmitting a response signal SES from the service node F, Receiving a response signal RES at the mobile communication unit M, Stopping transmission of said stored user identity (s2, s3) and terminal identity (m) from a telecommunications unit (M). The method of claim 1 or 2, A user A1 having the terminal identity m is registered in the service node F, Identifying at the service node F a registered and authenticated owner A1 of the terminal identity m; And positioning the user A2 of the second communication unit M at a service node F. The method according to claim 1 or 2, Connecting the terminal identity m of the mobile communication unit M with the user identities s1 and s3 of the authenticated user cards SIM1 and SIM3 is the terminal identity m and the user identities s1 and s3. Generating a first result by performing a predetermined operation in between, The comparison performed in the mobile communication unit M between the registered user identity s1, s2, s3 and the terminal identity m, Obtaining a second result by performing the predetermined operation on the registered user identity (s1, s2, s3) and the terminal identity (m); And performing a comparison between the first result and the second result. The method of claim 4, wherein And the registered user identity (s1, s2, s3) and the terminal identity (m) match each other when the first result is the same as the second result. The method according to claim 1 or 2, The comparison made in the mobile communication unit M between the requested security code PIN1 ', PIN2' and the selected security code PIN1 is Recording the required security codes PIN1 'and PIN2' into the mobile communication unit M; Determining in said unit (M) whether said requested security codes (PIN1 ', PIN2') are equal to a selected security code (PIN1). The method of claim 2, And repeatedly transmitting the registered user identity (s2, s3) and the terminal identity (m) from the mobile communication unit (M) at regular time intervals (T).  The method of claim 3, wherein The operator (P1, P2) owns the data storage devices (D1, D2), the user information (A1-info, A2-info) for the various users (A1, A2) to the data storage devices (D1, D2) And store the user information (A1-info, A2-info) in association with the user identities (s1, s2, s3) of each user (A1, A2). The method of claim 8, A mobile communication unit characterized by including the name, address, telephone number and personal identification number of each user A1, A2 in the user information A1-info, A2-info about each user A1, A2. How do I identify users? The method of claim 8, The mobile communication unit M is owned by the user A2, and the registered user identity s2 identifies a specific identification identity P2-id which identifies the operator P2 of the subscription to which each user card SIM2 is connected. Positioning the user A2 of the mobile communication unit M in the service node F, Identifying an operator P2 at the service node F by reading an identification identity P2-id from the registered user identity s2; Reading user information A2-info connected to a user identity s2 registered in the data storage device D2 of the operator P2, Transferring the user information A2-info from the operator P2 to the service node F, Identifying a user (A2) at the service node (F). The method according to claim 1 or 2, The service node (F) is an operator (P1, P2) or insurance company connected to an authenticated user card (SIM1, SIM3). In a mobile communication system, a device for identifying a user A1, A2 of a mobile communication unit M with a terminal identity m and a security code PIN1 selected by an authenticated user A1, the device being a user identity. a card space (u) for accommodating user cards (SIM1, SIM2, SIM3) having (s1, s2, s3) and connected to subscriptions of the operators (P1, P2), the authenticated user cards (SIM1, SIM3) In the user identification device of a mobile communication unit, wherein one of the user identities (s1, s3) corresponding to) is connected to the terminal identity (m), Means (317) in said mobile communication unit (M) for storing said terminal identity (m) and said selected security code (PIN1), Means (303) in said mobile communication unit (M) for registering user identities (s1, s2, s3) of user cards (SIM1, SIM2, SIM3) located in said card space; Means (313) in said mobile communication unit (M) for requesting insertion of a security code (PIN1 '), Means (310) in said mobile communication unit (M) for indicating a request to insert a security code (PIN1 '), Means (315) in the mobile communication unit (M) for comparing the required security codes (PINI ', PIN2') with a selected security code (PIN1), Means (305) in said mobile communication unit (M) for comparing said registered user identity (s1, s2, s3) with a terminal identity (m), Means (317) in said mobile communication unit (M) for storing said registered user identities (s2, s3), Means (307) in the mobile communication unit (M) for transmitting the stored user identity (s2, s3) and the terminal identity (m) from the mobile communication unit; Means 330 in a service node F for registering a user who is entitled to a terminal identity m, Means (321) in said service node (F) for receiving said transmitted and registered user identity (s2, s3) and terminal identity (m). The method of claim 12, Means (D _F ) in said service node (F) for storing said registered user identity (s2, s3) and terminal identity (m), Means 322 in said service node F for sending a response signal RES, A response signal receiving means 306 in the mobile communication unit M, And means (323) in said service node (F) for positioning a user (A2) of said mobile communication unit (M). The method of claim 13, The device (D _F ) for storing the registered user identity (s2) and the terminal identity (m) in the service node (F) means (D) for displaying the registered user identity (s2) and the terminal identity (m). _S ) user identification device of a mobile communication unit, characterized in that it comprises a. The method according to claim 13 or 14, The operators P1 and P2 have data storage devices D1 and D2, and the data storage devices D1 and D2 provide user information A1-info and A2-info related to different users A1 and A2. Adapted to store, wherein the user information (A1-info, A2-info) is connected to a user identity (A1, A2) of each user (s1, s2, s3). The method of claim 15, The service node (F) comprises a means (321) for receiving from the operator (P2) user information (A2-info) connected to the registered user identity (s2). . The method of claim 16, The user A2 owns the mobile communication unit M, and the means 323 for positioning the mobile communication unit M at the service node F, Operator identification means 325, Means (325) for identifying the user (A2) from the user information (A2-info) received from the operator (P2). The method according to any one of claims 12 to 14, The user identity (s1, s2, s3) corresponds to a SIM-code and the user card (SIM1, SIM2, SIM3) corresponds to a SIM-card in a GSM system.