KR20040108136A - Method for restricting read/write operation of mobile phone in info-mobile system - Google Patents

Abstract

PURPOSE: A method for restricting the read/write operations of a mobile terminal in an info mobile system is provided to prevent an outflow of security data using a mobile terminal by receiving header modification information from a base station, in which a mobile terminal is registered, modifying the header information of a file, downloaded to the mobile terminal from an arbitrary storage unit, using the received header modification information, and restricting the read/write operations of the mobile terminal through the modified header information. CONSTITUTION: If a mobile terminal(600) downloads a text file from the first PC(820) and inputs a storage key to store the downloaded file in the memory(S305,S310), the mobile terminal transfers its terminal number to an info mobile base station(400)(S315). The info mobile base station confirms the class of the mobile user, based on previously stored user management information(S320). Based on the user class, the info mobile base station searches previously stored class management information and judges whether a storage function is permitted for the mobile user(S325). In case that the user class is 1, the info mobile base station forwards header modification information(type 1), which indicates that the user can download and store the text file, to the mobile terminal(S330). The mobile terminal changes the header of the text file by using the header modification information(S335) and stores the text file in the memory(S340).

Description

How to limit read / write operation of mobile communication terminal in Infomobile system {METHOD FOR RESTRICTING READ / WRITE OPERATION OF MOBILE PHONE IN INFO-MOBILE SYSTEM}

The present invention relates to a method for restricting read / write operations of a mobile communication terminal, and more particularly, to perform a read / write operation of a mobile communication terminal in a base station in which a mobile communication terminal is registered in order to prevent leakage of security data using the mobile communication terminal. It is about how to limit.

As the technology of mobile communication develops day by day and the performance of memory storage devices including the central processing unit (CPU) rapidly develops, the specifications of mobile communication terminals that users can use are changing. That is, the specifications of the mobile communication terminals have been changed a lot from when they were first released.

Moreover, as semiconductor process technology has advanced, the capacity increase cycle of memory storage devices, which acts as storage, has become much shorter than before, and mobile communication terminals, which used to function only as a call until recently, are now combined with cameras. In addition to storing the video and to transmit the video to the other party's mobile communication terminal. In addition, the space for storing files has been increased from the previous number of MBytes to 32 MBytes so that up to 30 minutes of video can be stored. In addition, 32 document files of 1MByte can be stored. The present invention relates to a case of storing various types of files in a flash memory.

1 is a diagram illustrating a connection state for transferring data between a computer and a mobile communication terminal, and FIG. 2 is an internal block diagram of a mobile communication terminal for storing data downloaded from a computer.

Referring to FIG. 1, the mobile communication terminal 610 uses a data transmission port (eg, a parallel port) 615 as a universal serial bus (USB) 815 of a personal computer (PC) 810. After the connection, the desired file is downloaded from the computer 810 to the synchronous dynamic random access memory (SDRAM) inside the mobile communication terminal 610.

Referring to FIG. 2, an address and a data signal are stored between a memory (eg, flash memory) 613 of a mobile communication terminal 610 and a controller (eg, Advanced Risc Machine) 612. Are connected to respective corresponding ports 616 and 617. That is, the general purpose input output (GPIO) port 616 of the control unit (ARM) 612 and the write protection (WP) port 617 of the memory 613 are connected, and the WP port 617 is connected to the GPIO port 616. The operation of the memory 613 is controlled on the basis of the control signal.

The data downloaded through the data dedicated port 615 of the mobile communication terminal 610 is stored in the SDRAM 611 through the interface unit (I / F) 614. It is determined whether or not data stored in the SDRAM 611 is stored in the memory by the control signal of the control device (ARM) 612. That is, the read / write operation of the memory 613 is controlled by the GPIO signal outputted from the GPIO port 616 of the control unit (ARM) 612 to the WP port 617 of the memory 613. do. For example, when the control unit (ARM) 612 sets the GPIO signal to '1', the data stored in the SDRAM 611 is stored in the memory 613, and when the GPIO signal is set to '0', the SDRAM 611 ) Cannot be stored in the memory 613. However, since the data downloaded to the SDRAM 611 is not normally stored in the memory 613, the control device (ARM) 613 of the mobile communication terminal always sets the GPIO signal to '1' and does not change it thereafter. Do not.

Meanwhile, in the case of a user using a service (eg, June, etc.) that provides paid content to a mobile communication terminal, the data (or contents, etc.) stored in the memory 613 of the mobile communication terminal 610 is propagated as described above. It can also be sent to other mobile communication terminals.

Therefore, the mobile communication terminal can be used as a portable storage medium like a USB driver. That is, as illustrated in FIG. 1, a user of a mobile communication terminal connected to a computer may find a desired file from the computer, download the file to the mobile communication terminal, connect the mobile communication terminal to another computer, and download the file to the computer. have. In this case, a user who works in a place where confidentiality is intentionally stores confidential data on a personal computer in a terminal device and retrieves it.

SUMMARY OF THE INVENTION The present invention has been made to solve such a conventional problem, and a first object of the present invention is to provide a method for limiting read / write operations of a mobile communication terminal for preventing the leakage of security data using the mobile communication terminal.

A second object of the present invention is to provide a method for restricting read / write operations of a mobile communication terminal, which can increase the security of confidential information in a workplace requiring confidentiality.

It is a third object of the present invention to provide a method of limiting read / write operations of a mobile communication terminal registered in a base station of an infomobile system.

A fourth object of the present invention is to provide a method of restricting read / write operations of a mobile communication terminal by changing the header information of a file downloaded to the mobile communication terminal.

1 is a view showing a connection state for transferring data between a computer and a mobile communication terminal,

2 is an internal block diagram of a mobile communication terminal for storing data downloaded from a computer;

3 is a diagram showing an example of the configuration of an information mobile system;

4 is an exemplary diagram of a database structure for managing a user in an infomobile base station in order to apply a read / write operation restriction method of a mobile communication terminal according to an embodiment of the present invention;

5 is an exemplary diagram of a database structure for managing a user's rating in an infomobile base station in order to apply a read / write operation restriction method of a mobile communication terminal according to an embodiment of the present invention;

6A is a diagram illustrating a format of a conventional document file;

6B is a diagram illustrating a state in which a header of a document file is changed according to an embodiment of the present invention;

7 to 9 are diagrams illustrating a process of applying a read / write restriction method of a mobile communication terminal according to an embodiment of the present invention.

In order to achieve the above objects, a read / write operation restriction method of a mobile communication terminal provided by the present invention moves a terminal number corresponding to a mobile communication terminal when a storage command for a predetermined document file downloaded from an external storage means is input. A first process of transmitting a communication terminal to a registered base station, a second process of receiving, by the mobile communication terminal, header change information of a user class corresponding to the terminal number, and a header received in the second process A third process of changing the header of the document file based on the change information, and a fourth process of comparing the changed header information with previously stored class header information to determine whether the document file can be stored in the mobile communication terminal; If it is determined in step 4 that the document file can be stored in the mobile communication terminal, If you save the file in the memory of the mobile communication terminal, and it is not characterized by a fifth step of outputting a message it can not be processed.

In addition, the processing method of the base station for limiting the read / write operation of the mobile communication terminal provided by the present invention in order to achieve the above object is a method for storing / managing the user-specific rating information and the rating management information of the registered mobile communication terminal; And a second process of receiving a terminal number from a mobile communication terminal and checking a user's grade corresponding to the terminal number by using the user's rating information, and using the rating management information. And a fourth process of reading corresponding header change information and a fourth process of delivering the header change information to the mobile communication terminal.

On the other hand, the base station is preferably an information mobile base station.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. In this case, detailed descriptions of well-known functions and configurations that may unnecessarily obscure the subject matter of the present invention will be omitted.

The present invention corresponds to a case where a base station, like an infomobile service, wants to provide a service only to users in a corresponding service area. This is because a file storage or download authorization service should be provided based on the information of users in the service area.

Infomobile service refers to providing a call service regardless of wired or wireless terminal in a specific building or a limited area, and the system built to provide the information mobile service is called an infomobile system.

3 is a diagram illustrating a configuration example of such an info mobile system. Referring to FIG. 3, the information mobile system includes an information mobile base station 400 connected to a mobile telephone network 100 and a wired telephone network 200, and a plurality of repeaters 500 installed in a specific building or a restricted area. In particular, the information mobile base station 400 is connected to the wireline telephone network 200 through a private exchange 300 that provides exchange services to a plurality of wireline telephones (700). The infomobile base station 400 provides a communication service to the terminals 600 of subscribers subscribed to the infomobile service through the repeaters 500.

If the company's information mobile system is in place, employees' mobile phones will be connected to the local telephone network while employees stay inside the company, and they will be connected to the mobile phone network when they leave the company.

Therefore, employees can convert their cell phones into on-premises wireless phones in the company, and when they leave the company, they can use their cell phones like regular mobile phones.

At this time, the information mobile base station 400 stores information about each subscriber's premises phone number and general mobile phone number so that any incoming call of the subscriber's premises phone or mobile phone is connected to the currently connected network. give.

In order to limit the read / write operation of the mobile communication terminal using the infomobile system, the user management database (DB) of the infomobile base station 400 must manage the class of each user. In addition, the information mobile base station 400 must store the grade management information for selectively allowing the read / write operation of the mobile communication terminal for each grade.

4 is an exemplary diagram illustrating a structure of a user management DB 410 managing a user in an infomobile base station 400 in order to apply a method of limiting a read / write operation of a mobile communication terminal according to an embodiment of the present invention. Referring to FIG. 4, the user management DB 410 includes a terminal number 411 / user name 412 / extension telephone number 413 / grade 414 field.

At this time, it is preferable to store the mobile phone number of the user in the terminal number field 411.

The grade 414 field stores grade information for limiting the range of use of the document file downloaded to the user's mobile communication terminal. A specific example thereof will be described with reference to FIG. 5.

5 is an exemplary diagram illustrating a structure of a rating management DB 420 for managing a user's rating in the infomobile base station 400 in order to apply a method for limiting read / write operations of a mobile communication terminal according to an embodiment of the present invention. . Referring to FIG. 5, the grade management DB 420 includes a grade 421 / terminal storage 422 / other PC download 423 / header change information 424 field.

The grade field 421 stores a grade necessary for limiting the read / write operation of the mobile communication terminal. In the example of FIG. 5, a class is divided into three stages of '1', '2', and '3'.

The terminal storage field 422 stores whether data downloaded by the user of the corresponding grade can be stored in the internal memory of the mobile communication terminal, and the other PC download field 423 downloads the user of the corresponding grade from an arbitrary PC. Whether the data stored in the internal memory can be downloaded to another PC, and the header change information field 424 stores information for changing the header information of the file downloaded to the mobile communication terminal.

At this time, the header change information stored in the header change information field 424 should be shared by the mobile communication terminal. This is to allow the mobile communication terminal to determine the extent of use of the document file in the changed header change information of the document file.

In the example of FIG. 5, a user of grade '1' may store the downloaded data in the internal memory of the mobile communication terminal and may download the data to another PC. A user of grade '2' may download the downloaded data. It can only be stored in the terminal internal memory. That is, a user of grade '2' cannot download the downloaded data to another PC. Meanwhile, a user of grade '3' may not store the downloaded data in the internal memory of the mobile communication terminal or download the data to another PC. Therefore, the user of grade '3' can only view the downloaded data on the corresponding terminal.

Therefore, in the example of FIG. 5, the header change information of the user having the grade '1' and the header change information of the user having the grade '2' are stored separately. That is, in the case of the grade '1', the header change information of type 1 is stored, and in the case of the grade '2', the header change information of type 2 is stored.

Meanwhile, in the example of FIG. 5, valid data is not stored in the header change information 424 of the user having a rank of '3'. This is because if the user of grade '3' attempts the 'save' or 'download' operation, the infomobile base station only needs to provide the user with an unprocessable message. However, in the case of class '3', the mobile terminal may generate an unprocessable message based on the type 3 header change information after storing the type 3 header change information.

For example, in the case of the infomobile system built in-house, the upper manager hierarchy (eg manager) sets the user level to '1' and the middle manager hierarchy (eg manager) sets the user class to '2'. The general staff should set the user level to '3'.

6A is a diagram illustrating a format of a typical document file. In general, the format of the document file is as illustrated in FIG. 6A, and the part corresponding to the first line of the document file is not changed. In other words, a document file created by a word processor will always have the value "D0 CF 11 E0 A1 B1 1A E1 00 00 00 00 00 00 00 00" as a hexadecimal value at 0x0, which is the Hunminjeongeum document. Otherwise, both Hangul and MS Word have the same value.

Therefore, the present invention regards the unchanged part as a kind of header, changes the header information of the file downloaded to the mobile communication terminal, and then limits the read / write operation of the mobile communication terminal by the header information. That is, in the present invention, by changing the value ('00 00 00 00 ') of the portion enlarged and displayed in FIG. 6A to a predetermined value according to the grade of the user who downloaded the document file to determine whether the document file can be stored or downloaded do.

FIG. 6B illustrates an example in which the changed value 'B1 E2 B9 D0' is stored based on the header change information 424 illustrated in FIG. 5 in the enlarged portion of FIG. 6A. If the value ('B1 E2 B9 D0') is the header change information of the user corresponding to the class '1', the mobile communication terminal of the user can store the file in the internal memory as well as save the file to another PC. You can also download it.

On the other hand, when the value ('B1 E2 B9 D0') is the header change information of the user corresponding to the class '2', the mobile communication terminal of the user may only store the file in the internal memory. In other words, you cannot download the file to another PC.

7 to 9 are diagrams illustrating a process of applying a read / write restriction method of a mobile communication terminal according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a processing procedure for a case where a user whose user level is '3' wants to store a document file downloaded from a PC in his mobile communication terminal.

Referring to FIG. 7, after the mobile communication terminal 600 downloads a predetermined document file from the PC 800 (S105), a storage key for storing the document file in a memory in the mobile communication terminal 600 is input. When (S110) mobile communication terminal 600 transmits the terminal number to the information mobile base station (400) (S115). Then, the information mobile base station 400 checks the rating of the user by pre-stored user management information (S120). User management information for managing the user in the information mobile base station 400 is preferably configured as illustrated in FIG. Accordingly, the infomobile base station 400 searches the user management DB 410 as illustrated in FIG. 4 by the terminal number received from the mobile communication terminal 600 in step S115 and confirms the rating of the corresponding user. . In addition, by searching the pre-stored grade management information in the information mobile base station 400 having the user rating and determines whether the 'save' function is allowed (S125).

In FIG. 7, an example of a case in which the user grade identified in step S120 is '3' is shown. Referring to the case in which the user grade is '3' in FIG. 5, the user may store and download a document file. Since it is impossible to all, the information mobile base station 400 delivers a 'processing impossible message' to the mobile communication terminal 600 (S130), and the mobile communication terminal 600 receiving the 'processing impossible message' is a 'processing impossible message'. Outputs (S135). At this time, the form of the 'unprocessable message' output by the mobile communication terminal 600 is preferably one of voice or text.

FIG. 8 illustrates a processing procedure for a case where a user having a user level of '2' in the example of FIG. 5 wants to download a document file downloaded from a PC to his mobile communication terminal and download the document file to another PC. Drawing.

Referring to FIG. 8, after the mobile communication terminal 600 downloads a predetermined document file from the PC 800 (S205), a storage key for storing the document file in a memory in the mobile communication terminal 600 is input. If (S210) mobile communication terminal 600 transmits the terminal number to the information mobile base station (400) (S215). Then, the information mobile base station 400 checks the rating of the user by the pre-stored user management information (S220). User management information for managing the user in the information mobile base station 400 is preferably configured as illustrated in FIG. Therefore, the infomobile base station 400 searches the user management DB 410 as illustrated in FIG. 4 by the terminal number received from the mobile communication terminal 600 in step S215 and checks the rating of the corresponding user. . Then, the grade management information previously stored in the infomobile base station 400 is searched with the user grade to determine whether the 'save' function is allowed (S225).

8 shows an example of the case where the user's grade identified in the process (S220) is '2'. Referring to the case where the user grade is '2' in FIG. 5, the user can only save the document file. Since the download is not possible, the infomobile base station 400 transmits the header change information (type 2) indicating that the document file can be stored to the mobile communication terminal 600 (S230). After receiving the header change information (type 2), the mobile communication terminal 600 changes the header of the document file based on the header change information (S235) and stores the document file in the memory (S240). At this time, examples of the document file header before and after the change are described with reference to FIGS. 6A and 6B.

On the other hand, if a request for downloading a document file stored in the mobile communication terminal 600 to another PC is input (S245), the mobile communication terminal 600 checks the header of the document file (S250). To this end, the mobile communication terminal 600 should have already stored the header information of the downloadable document file.

8 shows an example of the case where the user level is '2', the header change information (type 2) transmitted from the information mobile base station 400 to the mobile communication terminal 600 in step S230 is a corresponding document file. Only allow the storage of. Accordingly, as a result of checking the process (S250), the mobile communication terminal 600 recognizes that the document file is not downloaded to another PC and outputs a 'downloadable message' (S255). In this case, it is preferable that the form of the "downloadable non-downloadable message" output by the mobile communication terminal 600 is either voice or text.

FIG. 9 illustrates a processing procedure for a case where a user having a user grade of '1' stores a document file downloaded from a PC in his mobile communication terminal and wants to download the document file to another PC. Drawing.

9, after the mobile communication terminal 600 downloads a predetermined document file from the PC1 820 (S305), a storage key for storing the document file in a memory in the mobile communication terminal 600 is input. If (S310) mobile communication terminal 600 transmits the terminal number to the information mobile base station (400) (S315). Then, the information mobile base station 400 checks the rating of the user by the pre-stored user management information (S320). User management information for managing the user in the information mobile base station 400 is preferably configured as illustrated in FIG. Therefore, the infomobile base station 400 searches the user management DB 410 as illustrated in FIG. 4 by the terminal number received from the mobile communication terminal 600 in step S315 and confirms the rating of the corresponding user. . Then, the grade management information previously stored in the infomobile base station 400 is searched with the user grade to determine whether the 'save' function is permitted to the corresponding user (S325).

9 shows an example of the case where the user grade identified in the process (S320) is '1'. Referring to the case where the user grade is '1' in FIG. 5, the user may store and download the document file. Since all possible, the information mobile base station 400 delivers the header change information (type 1) indicating that the document file can be stored and downloaded to the mobile communication terminal 600 (S330). After receiving the header change information (type 1), the mobile communication terminal 600 changes the header of the document file based on the header change information (S335) and stores the document file in the memory (S340). At this time, examples of the document file header before and after the change are described with reference to FIGS. 6A and 6B.

On the other hand, when a request for downloading a document file stored in the mobile communication terminal 600 to another PC is input (S345), the mobile communication terminal 600 checks the header of the document file (S350). To this end, the mobile communication terminal 600 should have already stored the header information of the downloadable document file.

9 shows an example of the case where the user level is '1', the header change information (type 1) transmitted from the information mobile base station 400 to the mobile communication terminal 600 in step S330 is a corresponding document file. Allow both save and download. Therefore, as a result of checking the process (S350), the mobile communication terminal 600 recognizes that the document file is downloaded to another PC (PC 2) 830 and downloads the document file to another PC (PC2) 830 ( S355).

In the above description of the present invention, specific embodiments have been described, but various modifications may be made without departing from the scope of the present invention. Therefore, the scope of the present invention should not be defined by the described embodiments, but should be determined by the equivalent of claims and claims.

As described above, the present invention receives the header change information from the base station to which the corresponding mobile communication terminal is registered, and changes the header information of the file downloaded from the arbitrary storage device to the mobile communication terminal by using the header change information. By limiting the read / write operation of the mobile communication terminal by having the advantage that it is possible to prevent the leakage of security data using the mobile communication terminal. In addition, this has the effect of increasing the security of confidential information in a workplace that requires confidentiality.

Claims (15)

A first process of transmitting a terminal number corresponding to a mobile communication terminal to a base station to which the mobile communication terminal is registered when a storage command for a predetermined document file downloaded from an external storage means is input; A second process of receiving, by the mobile communication terminal, header change information of a user class corresponding to the terminal number from the base station; A third step of changing the header of the document file based on the header change information received in the second step; A fourth step of comparing the changed header information with previously stored class header information to determine whether the corresponding document file can be stored in the mobile communication terminal; And if the document file is determined to be stored in the mobile communication terminal in the fourth process, storing the document file in the memory of the mobile communication terminal and outputting an unprocessable message. Method of restricting read / write operation of a mobile communication terminal. The method of claim 1, When a command to download the document file is input to another storage means, the header information of the document file is compared with the previously stored class level header information to determine whether the document file stored in the mobile communication terminal can be downloaded to another storage means. The sixth process, If it is determined in step 6 that the document file stored in the mobile communication terminal can be downloaded to another storage means, the method further includes downloading the document file to another storage means and otherwise outputting a download impossible message. Read / write operation restriction method of a mobile communication terminal, characterized in that. The method of claim 1 or 2, wherein the first process is performed. Method of limiting the read / write operation of the mobile communication terminal, characterized in that for transmitting the terminal number corresponding to the mobile communication terminal to the information mobile base station. The method of claim 1 or 2, wherein the second process If the user of the mobile communication terminal is a user of the first class capable of both storing and downloading the document file, the header receiving information corresponding to the first class is received, and the user of the mobile communication terminal can only store the document file. In the case of a user of the second grade, the header change information corresponding to the second grade is received, and if the user of the mobile communication terminal is a user of the third grade that cannot store or download the document file, the header corresponding to the third grade is changed. Read / write operation restriction method of a mobile communication terminal, characterized in that for receiving information. The method of claim 4, wherein the third process is The method of claim 2, wherein the header of the document file is changed using header change information corresponding to any one of the first to third grades received in the second process. The method of claim 1 or 2, wherein the second process If the user of the mobile communication terminal is a user of the first class capable of both storing and downloading the document file, the header receiving information corresponding to the first class is received, and the user of the mobile communication terminal can only store the document file. Receive header change information corresponding to the second level when the user of the second level, and the user can not process the message when the user of the mobile communication terminal is the third class user that can not both save and download the document file. Method of restricting read / write operation of a mobile communication terminal. The method of claim 6, wherein the third process is When the header change information corresponding to any one of the first to second grades received in the second process is received, the header of the document file is changed by using the header change information, and a message that cannot be processed is received. If the read / write operation restriction method of the mobile terminal, characterized in that for outputting an unprocessable message. The method of claim 1 or 2, wherein the fourth process Method of limiting the read / write operation of the mobile communication terminal, characterized in that to use the previously stored class header information after being set to the same value as the base station in advance. A first process of storing / managing user-specific rating information of the registered mobile communication terminal and the rating management information; A second process of receiving a terminal number from a mobile communication terminal and checking a user's rating corresponding to the terminal number by using the user's rating information; A third process of reading header change information corresponding to the checked grade by using the grade management information; And a fourth process of transmitting the header change information to the mobile communication terminal. The method of claim 9, wherein the base station A base station processing method for limiting read / write operations of a mobile communication terminal, characterized in that the information mobile base station. The method of claim 9 or 10, wherein the first process is A base station processing method for limiting read / write operations of a mobile communication terminal, characterized by storing / managing user-specific rating information including a terminal number, a user name, an extension telephone number, and a rating of the mobile communication terminal. The method of claim 9 or 10, wherein the first process is A base station processing method for limiting read / write operations of a mobile communication terminal, characterized by storing / managing grade management information including a user grade, whether a document file can be stored, whether a document file can be downloaded, and header change information. The method of claim 12, wherein the rating management information A method of processing a base station for limiting read / write operations of a mobile communication terminal, characterized in that shared with all mobile communication terminals registered in the base station. The method of claim 9 or 10, wherein the second process is The method of the base station for limiting the read / write operation of the mobile communication terminal, characterized in that for reading the rating information corresponding to the received terminal number from the user-specific rating information stored in the first step. The method of claim 9 or 10, wherein the third process And a header change information corresponding to the level identified in the second process, from the class management information stored / managed in the first process.