KR20090097049A - Method for a report using smart card and terminal thereof - Google Patents

Abstract

A terminal report method using a smart card and a device thereof are provided to report a case that a password of a smart card is not inputted by a pre-registered terminal. A smart card management unit(310) determines whether a lock function of a smart card is activated. An input unit(330) receives a password. When the lock function is activated, a controller(340) determines whether the inputted password coincides with the password of the smart card. When the passwords do not coincide, the controller produces a report message. A communication unit(350) transmits the report message by a pre-registered terminal.

Description

Method for reporting a terminal using a smart card and its device {Method for a report using smart card and terminal}

The present invention relates to a terminal on which a smart card is mounted, and more particularly, to a terminal for reporting a password that does not match a password of a smart card and a method thereof.

As the use of smart cards is one of the basic specifications in the 3rd generation mobile telecommunications market, each carrier is either a Subscriber Identity Module (SIM) card or a Universal Subscriber Identity Module (USIM). The definition of card specifications and the study of the services using the same are being actively conducted.

Conventionally, the domestic mobile communication market has been mainstream in synchronous IS-95 network based on CDMA technology, but recently, Universal Mobile Telecommunication (UMTS) based on Wideband Code Division Multiple Access (WCDMA) method. System) service is being commercialized.

Therefore, roaming problems between generations and systems are developed through the development of a subscriber identity card that integrates the SIM card used for subscriber authentication in GSM (asynchronous mobile communication service used in Europe) and the UIM card used for subscriber authentication in synchronous CDMA. Research is underway to solve this problem.

In particular, in recent years to meet the needs of various subscribers. Subscriber authentication cards are being developed with Java Card, one of the open platforms. Individual value-added services can be developed into each Java Card applet, providing flexibility in providing personalized value-added services according to subscribers' needs.

In other words, the USIM card has a large-capacity, multi-functional smart card function, and can provide various communication functions, global roaming functions, and various additional service functions such as credit card, banking, stock trading, membership, and payment.

Smart cards currently provide a communication function between a terminal—for example, a terminal—and a smart card based on the ISO 7816 standard for web server functionality.

In general, smart cards have a CPU and a card operating system, so that various applications can be implemented on a single card and various application services can be integrated and used. Technology.

Considering the potential of smart card technology, smart card platform technology is expected to be developed in an evolved form that complements the convenience and functionality of users and developers to accommodate various card applications.

Such a smart card is a next-generation card equipped with various security devices to guarantee a high level of security because an unjust person cannot easily read information recorded in the card. Specifically, smart cards are recognized as the best personal information recording media because they can improve security by embedding a microprocessor to provide functions such as data storage and access control, encryption, and decryption.

In particular, in the related art, there has been a method using a password so that it cannot be used by a party user authorized to use the terminal due to the loss of the terminal. Specifically, in order to protect the right of use of a political party user, the user designates a password and inputs the password every time, thereby suppressing unauthorized use of the terminal by another unauthorized person.

However, despite the terminal security method, the prior art has a disadvantage in that a proper follow-up cannot be taken when a party user does not recognize the terminal loss. In particular, when a person without a permission to use a lost terminal to find out the password after trial and error, there is a problem that the damage caused by the loss of the terminal increases.

An object of the present invention for solving the problems of the prior art as described above is a terminal service control method and apparatus using a smart card for automatic notification of the case where the lock function of the terminal is not released (when the user authentication procedure fails). To provide.

Another object of the present invention is to provide a terminal service control method and apparatus using a smart card that reports a password to a pre-registered terminal when the password of the smart card cannot be input until a preset number of times is exceeded.

Another object of the present invention is to provide a terminal report method and a device using a smart card that informs a terminal registered in advance if the user authentication procedure fails.

Another object of the present invention is to provide a terminal notification method and apparatus using a smart card that blocks some or all of the services of the terminal when a user authentication procedure fails.

According to an aspect of the present invention, the present invention provides a terminal notification method using a smart card, (a) determining whether to activate the lock function of the smart card (b) when the lock function is activated, (C) determining whether the input password matches the password of the smart card; and (d) if the password does not match, sending a report message to a pre-registered terminal. It is possible to provide a terminal notification method using a smart card comprising the step.

In addition, the step (d) is (d-1) comparing the number of times the password is input is exceeded the reference number and (d-2) if the reference number is exceeded, the terminal registered in advance There may be a step of sending a report message.

In addition, step (d) may further include repeating steps (b) to (d) when the number of times (d-3) does not exceed the reference number of times.

The pre-registered terminal may correspond to at least one of a wired / wireless telephone number, an e-mail address, a website address, and a fax number.

The report message may include location information of the terminal or the smart card.

In addition, the position information may be collected by a global positioning system (GPS) based wireless positioning technology or a network communication network based wireless positioning technology.

In addition, the method may further include limiting some or all of the services available in the terminal.

According to another aspect of the present invention, the present invention can provide a recording medium in which instructions executable in a digital processing apparatus are implemented by the above method and in which a program can be read by the digital processing apparatus.

According to another aspect of the present invention, in the report terminal using a smart card, the input unit receiving the smart card management unit password for determining whether to activate the lock (Lock) function of the smart card is activated the lock function In the case of determining whether the input password matches the password of the smart card, and if the password does not match, a smart card including a control unit for generating a report message and a communication unit for transmitting a report message to a pre-registered terminal It can provide a reporting terminal using.

The controller may compare whether the number of times of inputting the password exceeds the reference number of times, and transmit a report message to a terminal registered in advance when the number of times of the reference number is exceeded.

The terminal registered in advance may correspond to at least one of a wired / wireless telephone number, an e-mail address, a web site address, and a fax number.

The report message may include location information of the terminal or the smart card.

In addition, the position information may be collected by a global positioning system (GPS) based wireless positioning technology or a network communication network based (cell based) wireless positioning technology.

The controller may limit some or all of the services available in the terminal.

According to the present invention, if the lock function of the terminal is not released (when a user authentication procedure fails), there is an effect of providing a terminal service control method and apparatus using a smart card for automatically reporting this.

In addition, the present invention can provide a terminal service control method and apparatus using a smart card to notify the pre-registered terminal when the password of the smart card is not input until the preset number of times is exceeded.

In addition, the present invention can provide a terminal notification method and apparatus using a smart card that informs a terminal registered in advance if the user authentication procedure fails.

In addition, the present invention can provide a terminal notification method and apparatus using a smart card to block some or all of the services of the terminal when the user authentication procedure fails.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all transformations, equivalents, and substitutes included in the spirit and scope of the present invention. In the following description of the present invention, if it is determined that the detailed description of the related known technology may obscure the gist of the present invention, the detailed description thereof will be omitted.

Terms such as first and second may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary view showing a general configuration of a terminal equipped with a USIM, and shows a structure of a terminal (UE) in a UMTS system.

In the 3GPP standard, a terminal is called a user equipment (UE), and a general base station is defined and used as a NodeB.

In the following description, for convenience of description, the terminal and the base station will be referred to as a UE and a base station, respectively.

Referring to FIG. 1, a user equipment (UE) 100 may be largely classified into a mobile equipment (ME) 110 and a UMTS subscriber identity module 120 (USIM) 120, which is a kind of a SIM card.

In general, the USIM 120 may be physically separated from the ME 110, so a standard interface Cu is defined between the two.

Here, the ME 110 includes a terminal equipment (TE) 130, a network termination (NT) 112, and a radio termination (RT) 114, and the NT 112 and the RT ( 114 may transmit and receive information via the Tu interface.

As shown in FIG. 1, NT 112 may communicate with USIM 120 and TE 130, respectively, via a Cu interface and an R interface.

In the UMTS, an interface of a radio section is called a Uu interface, and the RT 114 may transmit a radio signal to the NodeB 140 or receive a radio signal transmitted by the NodeB 140 through the Uu interface.

The USIM 120 is a component that stores a user's unique information, and is generally in the form of an integrated card (IC) card that is physically detachably mounted on one side of the UE 100. The USIM 120 may provide various applications, where various applications include a banking function, a phonebook function, a traffic function, and the like, and a communication function corresponding to various wireless access technologies. For this reason, USIM 120 is often referred to as Universal Integrated Circuit (UICC) with smart card functionality.

In general, the content included in the USIM 120 is supplied by a service provider. In addition, the USIM 120 may include unique information of a subscriber stored in a home location register (HLR) of a core network. In addition, the USIM 120 may maintain various personal information such as a phone book, a call log, and a short message.

In the following description, basic information that may be stored in the USIM 120 will be described in detail.

First, the USIM 120 may maintain encryption algorithms, international mobile subscriber identity (IMSI), access class information, and the like, which are basic information set by a USIM manufacturer and a service provider.

In addition, the USIM 120 may include a location identifier, for example, a location area identity, a routing area identity, and the like, as information for providing mobility of a terminal, an international mobile station identifier, a temporary mobile subscriber identifier ( Temporary Mobile Subscriber Identity (TMSI), encryption parameters, and may be stored, and information about a service type accessible through the corresponding USIM 120 may be maintained.

The ME 110 refers to a wireless terminal in charge of actual communication with a radio access network, and is divided into a mobile terminal (MT) 115 and a TE 130.

The MT 115 has a wireless access protocol for communicating with a mobile communication system over a wireless section. From the perspective of the UE 100, the MT 115 can communicate only in the UTRAN region using the same radio access technology as the actual physical terminal device.

TE 130 provides the control functions necessary for the operation of the radio access protocol. For example, TE 130 may provide an environment in which a wireless terminal connected to a laptop computer may operate like a wireless modem. The TE 130 also controls the termination of the terminal using a Modem Control Command Set, such as AT Command defined by ITU-T, where the termination of the terminal includes NT 112 and RT 114. can do.

2 is a diagram illustrating a general communication mechanism between a smart card and a terminal.

As shown in FIG. 2, communication between the terminal 200 and the smart card 220 generally follows a half duplex mode communication method in the form of request / response using syntax defined in the ISO 7816 standard. In general, the transmission scheme defined in the ISO 7816 standard supports low-speed data communication, eg, 9.6 kbps, using serial bidirectional transmission lines.

The ISO 7816 standard provides two transport protocols.

One of them, the T = 0 protocol, is a transmission protocol used in the early days of ISO 7816 and follows the asynchronous half-duplex byte transmission scheme.

The remaining T = 1 protocols are called block transfer protocols, and there is room for some improvement in security compared to byte transfer protocols. Since adopting T = 0 protocol in GSM 11.11 Subscriber Identification Module (SIM), next-generation credit card EMV has adopted both T = 0 and T = 1 protocols.

Referring to FIG. 2, a command is initiated by the terminal 200, and a card operating system embedded in the smart card 220 interprets a command received from the terminal 200 to execute a smart card. The status of the data stored in the 220 is updated, and a response to the received command is transmitted to the terminal 200.

ISO 7816-7 provides a command message and a response message transmitted and received between the terminal 200 and the smart card 220 using a conventional application protocol data unit (APDU).

3 is a block diagram schematically showing the configuration of a terminal for performing a report function using a smart card according to an embodiment of the present invention.

As shown in FIG. 3, the terminal 200 according to the present embodiment includes a smart card managing unit 310, an output unit 320, an input unit 330, a control unit 340, and a communication unit 350.

The smart card manager 310 detects whether the smart card 220 is connected.

When the connection of the smart card 220 is detected, the smart card manager 310 determines whether to activate the lock function of the smart card 220. Here, the lock function of the smart card is a function for restricting the operation of the smart card. For example, the smart card may be restricted only when the user authentication procedure of the registered personal identification number (PIN) is validly completed. It is a function to drive. As the most typical smart card locking function, there is a SIM lock function in a communication terminal. According to the present embodiment, the terminal 200 may release the lock state of the terminal 200 when receiving the same password as the password stored in the smart card 220 from the user.

In addition, the smart card manager 310 reads out the password stored in the smart card 220. In detail, the smart card manager 310 applies a voltage to the smart card 220 and manages password reading stored in a storage area of the smart card 220 (eg, a nonvolatile storage area, ROM). .

In addition, the smart card manager 310 may read a unique number of the smart card 220 whenever a new connection of the smart card 220 is detected or a new power of the terminal 200 is applied. Here, the password of the smart card 220 is a number that can be released if the lock function is set in the terminal 200.

The output unit 320 outputs an input request message when the terminal 200 wants to receive a password of the smart card 220 from the user. The input request message may be output visually or audibly, and the output unit 320 may include, for example, a display unit (not shown) such as a liquid crystal, such as a liquid crystal display (LCD), or an acoustic unit (such as a speaker). Not shown).

The input unit 330 receives a password of the smart card 220 from the user. The input unit 330 may include, for example, a keyboard, a keypad, a button, a mouse, or another user input tool.

 The controller 340 controls the overall function of the terminal 200. In detail, the controller 340 controls the user to request a password when the lock function of the smart card 220 is activated. Thereafter, the controller 340 compares the input password with the password read from the smart card 220 and controls to transmit a notification message to a terminal registered in advance if the password does not match.

Here, the pre-registered terminal is a communication terminal set by the user to receive a report message to the terminal 200 or the smart card 220, a wired or wireless telephone number such as a mobile phone number, UMS phone number, ARS phone number, email address, A terminal corresponding to a web site address and / or a fax number.

In addition, the report message is a message for notifying the pre-registered terminal that the user authentication procedure failed because a password that does not match the password of the smart card 220 is input. In this case, the report message may include the location information of the terminal 200 or the smart card 220 mounted on the terminal 200. Here, the location information may be grasped using, for example, a global positioning system (GPS) based wireless positioning technology and a network communication network based (cell based) wireless positioning technology.

According to another embodiment of the present invention, if the password input by the user does not match the password of the smart card 220, the control unit controls to receive the password up to the set reference number, and inputs within the set reference number A notification message can only be generated if all the passwords are incorrect. This takes into account that a privileged user may enter a password incorrectly or by mistake.

According to another embodiment of the present invention, the control unit 340 maintains a report mode for transmitting a report message if the password entered by the user does not match the password of the smart card, but is used in the terminal 200. You can block some or all of the possible services. This may prevent unauthorized use of the terminal 200 by unauthorized users.

The communicator 350 transmits a report message to a pre-registered terminal. In addition, the communication unit 350 in order to read the password of the smart card 220, the APDU command instructing the terminal 200 to read the unique number to the smart card 220 in accordance with the aforementioned communication mechanism of ISO 7816-7. A signal may be transmitted and an APDU response signal including a unique number read from its storage area (eg, a ROM as a nonvolatile storage location for storing the unique number) may be received from the smart card 220.

The storage unit 360 stores various data necessary for the terminal 200 to control a service. According to the present embodiment, the storage unit 360 may store a password read from the smart card 220. In addition, the storage unit 360 may register a terminal capable of transmitting a report message. The pre-registered terminal information may be, for example, a wired / wireless telephone number, an e-mail address, a website address, and / or a fax number. Can be.

4 is a flowchart illustrating a terminal notification process using a smart card according to an embodiment of the present invention.

First, the terminal 200 detects a smart card (410). The terminal 200 detects the smart card when the smart card 410 is newly installed or when power is applied.

Although not shown in the figure, first, the terminal 200 may check whether the pin is activated, activate the pin, and then proceed with the subsequent process. Specifically, if the pin is not activated, the pin is input from the user to activate the pin. If the pin is not activated, the next step is performed as it is.

Subsequently, the terminal 200 determines whether the lock function is enabled in the smart card 220 (420).

If the lock function of the smart card 220 is not activated as a result of the determination, the terminal 200 drives the smart card (430).

However, when the lock function is activated as a result of the determination, the terminal 200 reads the password of the smart card 220 from the mounted smart card 220 (440). In this step, as described above, the terminal 200 transmits an APDU command signal instructing to read the password to the smart card 220, and the smart card 220 responds to the APDU response including its own password. It may be performed by transmitting a signal to the terminal 200.

In addition, the terminal 200 outputs an input request message for requesting the input of the password to the user, and the terminal 200 receives the password according to the user's input (450). For example, when the terminal 200 outputs a request message "Enter a user authentication number" on the LCD screen, the user may input the number "1234" using the keypad.

At this time, the order of steps 440 and 450 may be reversed, and may be performed at the same time.

Subsequently, the terminal 200 determines whether the password received from the user matches the password of the read smart card 220 (460).

If the password of the smart card 220 is the same as the determination result, the terminal 200 releases the lock function and drives the terminal 200 smart card (430).

However, if the password of the smart card 220 does not match as a result of the determination, the terminal 200 transmits a notification message to the terminal registered in advance. At this time, although not shown, by blocking some or all of the services available in the terminal 200 in addition to the report mode for transmitting a report message, unauthorized use of an unauthorized user can be prevented.

For convenience of explanation, assume that the terminal 200 in which the lock function is set is lost, and that another person who has no permission to use the terminal 200 acquires the terminal 200.

For example, if an invalid password is input by another user without permission, and the user authentication procedure is unsuccessful, the terminal 200 sends a notification message indicating this to a terminal such as a home phone, a lost center, or a personal computer that is registered in advance. It can be sent to a party user by phone call, text message, e-mail, or the like. In this case, the report message may include location information of the terminal 200 or the smart card 220. Therefore, the party user can determine whether his terminal 200 is lost, whether it is acquired by a third party, the location of the terminal, etc., and thus, the terminal 200 can be easily recovered.

5 is a flowchart illustrating a terminal notification process using a smart card according to another embodiment of the present invention.

First, the terminal 200 detects a smart card (410). The terminal 200 detects the smart card when the smart card 510 is newly installed or when power is applied.

Thereafter, the terminal 200 may check whether the pin is activated, activate the pin, and then proceed with the subsequent process.

If the pin is activated, the terminal 200 determines whether the lock function is enabled in the smart card 220 (520).

If the lock function of the smart card 220 is not activated as a result of the determination, the terminal 200 drives the smart card (530).

However, when the lock function is activated as a result of the determination, the terminal 200 reads the password of the smart card 220 from the mounted smart card 220 (540).

The terminal 200 outputs an input request message requesting the user to input a password, and the terminal 200 receives the password according to the user's input (550).

At this time, the terminal 200 counts the number of times the password is received from the user (560). This is to check how many passwords the user is entering and how many times they have been re-entered.

Thereafter, the terminal 200 determines whether the input password matches the password of the smart card 220 (570).

As a result of the determination, if the passwords match, the terminal 200 drives the smart card 220 (530).

However, as a result of the determination, if the passwords do not match, the terminal 200 determines whether the number of times of receiving the inappropriate password exceeds the predetermined reference number (580).

As a result of the determination, when the number of receptions is within the reference number of times, the terminal 200 returns to step 550 without repeating the report message to the registered terminal and repeats subsequent steps. That is, when a password that does not match the password of the smart card 220 is received within the reference number of times, the terminal 200 may output an input request message again to give the user an opportunity to retry the password input.

However, if the determination result exceeds the reference number of times, that is, if all of the passwords input during the reference number do not match the password of the smart card 220, the notification message is transmitted to the terminal registered in advance (590).

The report message transmitted as described above may include location information of the terminal 200 or the smart card 220, and block some or all of the services available in the terminal 200 in addition to the report mode for transmitting the report message. This can prevent unauthorized use by unauthorized users.

The method of the present invention as described above may be implemented in a program and stored in a computer-readable recording medium (CD-ROM, RAM, ROM, floppy disk, hard disk, magneto-optical disk, etc.).

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

1 is an exemplary view showing a general configuration of a terminal equipped with a USIM.

2 is a diagram illustrating a general communication mechanism between a smart card and a terminal.

Figure 3 is a schematic diagram showing the configuration of a terminal performing a report function using a smart card according to an embodiment of the present invention.

4 is a flow chart for explaining a terminal notification process using a smart card according to an embodiment of the present invention.

5 is a flowchart illustrating a terminal notification process using a smart card according to another embodiment of the present invention.

<Description of Signs for Main Parts of Drawings>

200: terminal 220: smart card

320: smart card management unit 350: output unit

360: input unit 340: control unit

350: communication unit

Claims (14)

In the terminal notification method using a smart card, (a) determining whether to activate the lock function of the smart card; (b) receiving the password if the lock function is activated; (c) determining whether the input password matches the password of the smart card; (d) if the password does not match, transmitting a report message to a terminal registered in advance Terminal report method using a smart card comprising a. The method of claim 1, Step (d) is (d-1) comparing whether the number of times of inputting the password exceeds a reference number of times; and (d-2) if exceeding the reference number, transmitting a report message to a terminal registered in advance Terminal report method using a smart card comprising a. The method of claim 1, Step (d) is (d-3) repeating steps (b) to (d) if the reference number of times is not exceeded Terminal report method using a smart card further comprising. The method of claim 1, The terminal registered in advance, A method for reporting a terminal using a smart card, characterized in that it corresponds to at least one of a wired / wireless telephone number, an email address, a website address, and a fax number. The method of claim 1, The report message, Method for reporting a terminal using a smart card, characterized in that it comprises location information of the terminal or the smart card. The method of claim 5, The location information, Method for reporting a terminal using a smart card, characterized in that collected by a global positioning system (GPS) based wireless positioning technology or a network communication based wireless positioning technology. The method according to claim 1 or 2, Limiting some or all of the services available in the terminal further comprising the step of reporting a terminal using a smart card. A recording medium in which instructions executable in a digital processing apparatus are implemented by the method of any one of claims 1 to 7, and in which a program can be read by the digital processing apparatus. In the notification terminal using a smart card, Smart card management unit for determining whether to activate the lock function of the smart card Input section to input password A control unit for determining whether the input password corresponds to a password of the smart card when the lock function is activated, and generating a report message when the password does not match; Communication unit for sending a report message to the terminal registered in advance Report terminal using a smart card comprising a. The method of claim 9, The control unit Comparing whether the number of times the password has been input exceeds the reference number of times, and if the number of times the reference number is exceeded, sending a notification message to a terminal registered in advance. The method of claim 9, The terminal registered in advance, A reporting terminal using a smart card, characterized in that it corresponds to at least one of a wired / wireless telephone number, an e-mail address, a website address, and a fax number. The method of claim 9, The report message, Report terminal using a smart card, characterized in that containing the location information of the terminal or the smart card. The method of claim 12, The location information, Report terminal using a smart card, characterized in that collected by a global positioning system (GPS) based wireless positioning technology or a network communication network based (cell-based) wireless positioning technology. The method according to claim 12 or 13, The control unit, Report terminal using a smart card, characterized in that for limiting some or all of the services available in the terminal.

Images