WO2005104571A1

WO2005104571A1 - Method of providing keeping-secret function in given area

Info

Publication number: WO2005104571A1
Application number: PCT/CN2005/000533
Authority: WO
Inventors: Zhiming Li
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2004-04-20
Filing date: 2005-04-19
Publication date: 2005-11-03
Also published as: CN1691808A; CN100334907C

Abstract

A method of providing keeping-secret-function in given area, which sets the limited area information for every given area that applies the function limited of mobile terminal, and broadcasts the set limited area information in every given area, includes the following steps: a. Storing the limited area information of the given area in the mobile terminal with limited function, which is to enter the given area currently; and the limited area information stored in the mobile terminal corresponding to at least one limited are information that broadcast in the given area; b. Mobile terminal receiving the broadcast information sent from network side, when judging that it entering the given area according to the limited area information in the broadcast information and the limited area information stored in itself , canceling its limited function; c. Mobile terminal restoring the limited function when determining to leave the given area. Employing the present invention, it can cause the mobile terminal having limited function temporally forbid its limited function in given area.

Description

TECHNICAL FIELD The present invention relates to a technology for providing a security function, and in particular, to a method for providing a security function in a specific area. BACKGROUND OF THE INVENTION Currently, with the development of wireless mobile communication technology, mobile terminals with camera functions have been widely used. This mobile terminal with a camera function has both a communication function and a camera function, and can send the captured picture to a remote receiver through a communication function supported by itself, such as through a multimedia message.

This kind of mobile terminal that can take pictures and send multimedia information provides a full range of services for mobile users, but it also brings trouble to the management of some specific areas in some specific situations. For example, when a mobile terminal with a camera function is going to enter some special areas, such as the core department or laboratory of an enterprise, since some picture information about the area will involve the confidentiality of the enterprise or laboratory, the management of the area The user will be prohibited from bringing such terminals into the area.

Generally, under the supervision of the administrator of the area, the user places such a terminal in a storage place outside the area, and when the user leaves the area, he goes to the storage place to retrieve the mobile terminal. In this way, after placing the mobile terminal in a storage place, the user cannot use the terminal for communication, which brings a lot of trouble for the user to use the communication service, and the area manager also needs to set up a special storage place, which makes the management method too cumbersome, thereby increasing Unnecessary management costs.

The above is just a typical mobile terminal with a camera function to enter some specific areas. The problems brought up are explained. In some special cases, other functions of the mobile terminal may also be restricted, such as: ringing with sound, answering calls, etc. When these other functions of the mobile terminal are restricted in a specific area, there are also problems such as inconvenience to users, complicated management methods, and high management costs. SUMMARY OF THE INVENTION In view of this, the main object of the present invention is to provide a method for providing security functions in a specific area, so that the restricted functions of a mobile terminal in a specific area are temporarily disabled, but other than the restricted functions, The functions are reserved to ensure that users can use other functions normally while protecting corporate secrets.

To achieve the above object, the technical solution of the present invention is implemented as follows:

The invention discloses a method for providing a security function in a specific area, setting restricted area information for each specific area where the function of the mobile terminal is restricted, and broadcasting the set restricted area information in each specific area; The method also includes the following steps:

a. The restricted area information of the specific area is currently stored in a mobile terminal with a restricted function to enter a specific area, and the restricted area information stored in the mobile terminal and the restricted area information broadcast in the specific area are stored. At least one corresponding item;

b. The mobile terminal receives the broadcast information sent by the network side, and judges that it enters a specific area based on the restricted area information in the broadcast information and the restricted area information stored by itself, and cancels its restricted function;

c When the mobile terminal judges that it leaves a specific area, it resumes its limited functions. Wherein, the restricted area information broadcast in each specific area includes at least the restricted area information of the specific area itself.

The restricted area information set for each specific area is: a restricted area identification, or a restricted area manager identification, or a restricted area location, or any combination of the three. The restricted area information broadcasted in each specific area is: any combination of one or more pieces of the restricted area information set for each specific area.

In step a, the restricted area information stored for the mobile terminal is: any combination of one or more of the restricted area information set for the specific area to be currently entered.

Wherein, the restricted area information broadcast in the specific area to be currently entered at least includes the location of the restricted area; the step a further includes: setting terminal positioning enable parameters for the mobile terminal; the mobile terminal initiates its own positioning process to obtain The location of the area and stores it as restricted area information.

The restricted area information broadcast in the specific area to be entered currently includes at least the location of the restricted area; in step a, the restricted area information stored for the mobile terminal includes only the location of the area and is stored by the mobile terminal. The method for describing restricted area information is: setting terminal positioning enable parameters for a mobile terminal, the mobile terminal initiates its own positioning process to obtain the location of the area, and stores it as the restricted area information.

Wherein, the judgment method described in step b is: judging whether the restricted area information stored in itself and the restricted area information in the received broadcast information have the same corresponding items, and if so, it is judged to enter a specific area; otherwise, the judgment is not made. Enter a specific area.

Wherein, the judgment method described in step c is: judging whether the restricted area information broadcasted by the network side is received or received within a pre-configured time threshold, and the restricted area information and the restricted area information stored by itself are If it is the same corresponding item, it is judged that the specific area is not left; otherwise, it is judged that the specific area is left.

The restricted area information set for each specific area includes only the restricted area position, and the set restricted area position is broadcast in all specific areas; in step a, the restricted area information stored for the mobile terminal only includes The location of the area, and the method for storing the restricted area information for the mobile terminal is: setting the terminal positioning enable parameter on the network side, and setting the set terminal The terminal positioning enable parameter is broadcast in all specific areas together with the location of the restricted area. The mobile terminal receives the terminal positioning enable parameter broadcasted by the network side, initiates its own positioning process to obtain the location location, and stores it as the restricted area information. The determination in step b is: the mobile terminal judges whether it enters a specific area according to the location of the restricted area in the broadcast information and the location of the area where the restricted area information is stored.

Wherein, the judgment method described in step b is: if the location of its own stored area is the same as the location of a restricted area in the received broadcast information, it is judged to enter a specific area; the judgment method described in step c is: judge whether Received or received a restricted area location broadcasted by the network side within a pre-configured time threshold, and one of the restricted area locations is the same as the location area stored by itself, and if yes, it is judged that Leave a specific area; otherwise judge to leave a specific area.

Wherein, the application of the limited function of the mobile terminal is a limitation of the application of a photographing function of the mobile terminal; the limited function is a photography function.

In step a, the restricted area information stored for the mobile terminal is set in a universal integrated circuit card (UICC) or a mobile device (ME) of the mobile terminal.

As can be seen from the above solution, the key of the present invention lies in: before a mobile terminal with a restricted function enters a specific area, setting the restricted area information in the terminal, and at the same time, the wireless service broadcasting center broadcasts the restricted area information in the specific area ; The mobile terminal determines whether the restricted function needs to be cancelled by comparing the restricted area information in the received broadcast with the restricted area information stored by itself; and then enters the specific area when the restricted function is cancelled, And restore its limited functionality when leaving a specific area.

Therefore, the method for providing a security function in a specific area provided by the present invention enables a restricted function to be disabled when a mobile terminal with a limited function is located in a specific area, and only has functions other than the limited function, so that The confidential information in this area is protected and does not affect the user's use of other functions of the mobile terminal. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic diagram of a processing flow of a preferred embodiment of the method of the present invention. Modes for Carrying Out the Invention The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

The main design idea of the method of the present invention is: before a mobile terminal with a restricted function enters a specific area for which the function of the mobile terminal is restricted, the restricted area information is stored in the mobile terminal, and the wireless service broadcast center broadcasts in the specific area Restricted area information; The mobile terminal receives the broadcasted restricted area information and compares it with the restricted area information stored by itself to determine whether it needs to cancel its restricted function; and then enters a specific situation when the restricted function is cancelled Area and restore its limited functionality when leaving a specific area.

In practical applications, it is currently typical that the application of the photographing function of the mobile terminal is restricted in some specific areas. At this time, the restricted function is the photographing function possessed by the mobile terminal. The following is only the processing when the photographing function is restricted. As an example, the method of the present invention is described in detail.

FIG. 1 is a schematic diagram of a processing flow of a preferred embodiment of the method of the present invention. As shown in Figure 1, the specific processing steps are as follows:

Step 101: Set restricted area information for each specific area for which the photographing function is restricted. When a specific area for which the camera function is restricted is filed with a mobile communication network operator, the operator will set the restricted area information for the specific area as required by the area manager. The restricted area information includes: a restricted area identification, or a restricted area manager identification, or a restricted area location, or other information, or any combination of the foregoing. Here, the other information refers to other restricted area information set according to management needs, but the specific setting information is not limited by the present invention.

Step 102: The mobile communication network broadcasts restricted area information in each specific area. That is That is, all mobile terminals entering each specific area will receive the broadcast, and can identify the restricted area information in the broadcast, but cannot receive the broadcast in non-specific areas.

Wherein, the restricted area information broadcast in a specific area includes at least the restricted area information of the current specific area itself, and may further include: the restricted area information of one or more other specific areas may include at most all the specific areas. The restricted area information of the area; and the broadcasted restricted area information of each specific area includes: the restricted area identification set for the specific area in step 101, or the restricted area manager identification, or the restricted area location , Or other information, or any combination of the above.

In a mobile communication network, the implementation of a broadcast service is generally as follows: a cell broadcast center can be set up in the mobile communication network to authorize and initiate a cell broadcast service in the mobile network, and transmit the broadcast content according to a predetermined time schedule; A plurality of cell broadcast entities are set in the communication network. Each cell broadcast entity corresponds to one or more cells. Each cell broadcast entity first submits its own broadcast message content and broadcast parameters to the cell broadcast center. The messages of the broadcast entity are comprehensively dispatched, and then the operation command is sent to the base station controller to further initiate the cell broadcast service. After receiving the command, the base station controller interprets, stores, and sends the received command to the base station. The base station performs traffic control on the broadcast message, and then sends it to the mobile terminal.

Step 103: Before a mobile terminal with a camera function enters a specific area, the mobile terminal stores the restricted area information for the mobile terminal, and the storage process may be completed by the manager of the specific area that the mobile terminal currently enters.

The restricted area information stored for the mobile terminal includes the identification of the restricted area corresponding to the specific area in step 101, or the identification of the restricted area manager, or the location of the restricted area, or other information, or Any combination of the above items and at least one corresponding item to the restricted area information of the specific area broadcasted in step 102. In addition, you can further set the terminal positioning enable parameter for the mobile terminal to enable the mobile terminal to obtain its own area Location and store it as restricted area information. In addition, when the restricted area information broadcast in step 102 includes at least the location of the restricted area, the restricted area information stored for the mobile terminal may include only the location of the area, and the method for storing the restricted area information for the mobile terminal may be : By setting terminal positioning enable parameters for a mobile terminal, the mobile terminal obtains the location of its own area and stores it as restricted area information. Because once the terminal positioning enable parameter is set in the mobile terminal, the existing positioning process is initiated to obtain the location information of the current area, so the mobile terminal can obtain the current location location by setting the terminal positioning enable parameter for it. The location of this area is stored as restricted area information. It can be seen that the restricted area information stored in the mobile terminal is: restricted area identification, or restricted area manager identification, or restricted area location, or location and location information obtained by the terminal itself, or other information, or Any combination of the above items, and at least one of them corresponds to one of the restricted area information broadcasted in step 102. Here, both the location area location and the restricted area location stored by the mobile terminal are taken as the corresponding items of the restricted area location in the broadcast.

Here, the restricted area information and terminal positioning enable parameters can be automatically downloaded to the mobile terminal by the operator by sending a short message (SMS) or a multimedia message (MMS) to the mobile terminal through an air interface (OTA) download method, or can be limited by The area manager is manually set in the mobile terminal by means of a man-machine interface. In addition, the terminal positioning enable parameter can also be sent to the mobile terminal in a broadcast manner.

The manager of the restricted area may select one of the two schemes for setting the restricted area information for management according to the entry method and the entrance characteristics of the restricted area. For example, if there is only one entrance to the restricted area and there are not many managers required, the administrator can manually set the restricted area information in a man-machine interface; if there are multiple entrances to the restricted area, the personnel entering Mostly, it is difficult to implement with the human-machine interface and it is not easy to manage. Therefore, you can use the OTA download method to automatically enter the restricted area information. Because a mobile terminal is composed of a mobile device (ME) and a universal integrated circuit card (UICC), the restricted area information described herein may be stored in the ME of the terminal or in the UICC. If this method is applied to a CDMA network, the UICC is a universal user module (UIM) card. If it is applied to a GSM / GPRS network, the UICC is a contracted subscriber identity module (SIM) card. If it is applied to a WCDMA network, then The UICC is a Universal Subscriber Identity Module (USIM) card. Of course, the UICC can also be other smart cards according to actual needs, but it does not affect the effectiveness of the present invention.

Step 104: The mobile terminal receives the broadcast information described in step 102, and determines whether it enters a specific area, and if so, proceeds to step 105; otherwise, returns to step 104.

Step 105: The camera module in the mobile terminal automatically cancels its camera function. At the same time, the terminal displays a notification to enter a specific area to remind the end user that the camera function has been cancelled. The user can bring the terminal into the specific area.

Because a mobile terminal with a camera function is composed of other function modules such as a camera module, a communication module, and an input / output device, and turning off the camera function of the camera module does not affect the operation of other function modules such as the communication module. Therefore, at this time, the terminal It will not be able to use its camera function to take pictures, but it also has other functions such as communication, which ensures that confidential information in a specific area cannot be stolen by people, and does not affect the end user's normal use of other functions such as communication of the terminal.

In addition, while storing the restricted area information for the user terminal in step 103, the terminal may also be set to modify the password and other information. When the user enters the specific area, he attempts to identify the restricted area, the restricted area manager identification, the location of the restricted area, etc. When the information is modified, the terminal will require the user to enter a modification password, thereby protecting the restricted area information set by the manager of the specific area, preventing the user from modifying the restricted area information and turning on the camera function after the terminal is brought into the specific area. Step 106: The mobile terminal determines whether it leaves a specific area, and if so, returns to step 106; otherwise, it proceeds to step 107. Step 107: The camera module in the mobile terminal automatically resumes its camera function, and at the same time, the terminal displays a notification to leave a specific area to remind the end user that the camera function has been restored, and the user can continue to use the camera function of the mobile terminal outside the specific area. End processing.

In the above solution, the mobile terminal has obtained the restricted area information including the restricted area identification, the restricted area manager identification, the restricted area location, or the location location information in step 103. Therefore, in step 104, the mobile terminal can know whether it enters a specific area by judging whether the corresponding information in the restricted area information stored in the broadcast is consistent with that in the broadcast. The specific decision principle is: if the restricted area information stored by the mobile terminal and the restricted area information in the broadcast information received by the terminal have at least one corresponding item, the mobile terminal is judged to enter a specific area; otherwise, the mobile is judged The terminal does not enter a specific area.

Because the restricted area information is not broadcast in the unrestricted area, in step 104, the mobile terminal can determine whether it leaves the specific area according to whether the restricted area information broadcasted by the network side is received. The specific decision principle is: if the mobile terminal receives or receives the restricted area information broadcasted by the network side within a pre-configured time threshold, and the restricted area information in the broadcast is the same as the restricted area information stored by itself For the corresponding item, it is judged that the mobile terminal has not left the specific area; otherwise, it is judged that the mobile terminal has left the specific area.

As described above, at least one item of the restricted area information stored by the mobile terminal corresponds to one of the restricted information broadcasted in step 102. Therefore, this embodiment can ensure that an accurate judgment is made as to whether the mobile terminal enters or leaves a specific area.

In this embodiment, steps 103 to 107 are: processing of a mobile terminal with a camera function from entering to leaving a specific area, and processing of each mobile terminal with a camera function from preparing to enter to leaving This specific area must be processed from step 103 to step 107; and when each mobile terminal with a camera function in the mobile communication network enters and leaves each specific area, it must perform step 103 to step 107 The process described.

In addition, the present invention may also adopt another way to achieve limited photography functions in a specific area, which specifically includes:

1) The restricted area information set for a specific area on the network side includes only the restricted area location. At this time, the restricted area information stored for the mobile terminal only includes the location area, and the method for storing the restricted area information may be : The network side sets the terminal positioning enable parameters for the mobile terminal, and then continuously broadcasts the set restricted area location and terminal positioning enable parameters in all areas; the mobile terminal continuously receives the terminal positioning enable parameters and the restricted area location. Broadcast message, each time after receiving the terminal positioning enable parameter, the mobile terminal will initiate the terminal positioning process to obtain the current location location. After obtaining the current location location, the mobile terminal will use the location location obtained as the location location Restricted area information is stored.

Here, the broadcasted restricted area position may be the restricted area position of one or several restricted areas, or the restricted area positions of all restricted areas; The restricted area position includes at least the restricted area position of the restricted area itself.

2) The mobile terminal compares the location of the area as the restricted area information with the location of the restricted area carried in the broadcast information one by one, and determines whether the mobile terminal has entered a specific area according to the comparison result, and if so, cancels it The camera function is restored when the mobile terminal is judged to leave a specific area; otherwise, judgment is continued.

Here, the method for judging whether the terminal enters a specific area is: As long as the location of the restricted area information obtained by the mobile terminal positioning is the same as the location of a restricted area in the broadcast, the terminal is judged to enter the specific area; otherwise, the terminal ’s The location of the area is different from that of each restricted area, and it is determined that the terminal has not entered a specific area. The method for judging whether the terminal leaves a specific area is: if the mobile terminal receives or receives a restricted area location of a network-side broadcast within a pre-configured time threshold, and at least one of the restricted area location of the broadcast is related to itself The stored restricted area information is the same, it is judged that the mobile terminal has not left a specific Area; otherwise the mobile terminal is judged to leave a specific area.

In summary, it can be seen that when the embodiment of the method of the present invention is applied, when all mobile terminals with a camera function enter a restricted area, the camera function is cancelled and other functions such as communication are retained, making the information in the restricted area impossible. It is stolen by users by taking pictures, and it does not affect the normal use of communications and other services of such end users while providing confidentiality functions.

The method of the present invention can also be applied to a case where other functions of a mobile terminal are limited, and the other functions may be ringing with sound, answering an incoming call, etc., that is, the limited function for a mobile terminal may also be ringing with sound. Bell, incoming call and so on. When applying the method of the present invention in these specific areas with limited functions, the processing procedure is basically the same as that described in FIG. 1 except that the specific functions represented by the limited functions are different, so the application is not described in detail herein. Other functions are subject to specific processing procedures of the method of the present invention for a limited time. The present invention does not limit what kind of functions the restricted function specifically represents. As long as the manager and operator of a specific area have a need, any function of the mobile terminal can be treated as a limited function of the present invention, so that the function can be performed in a specific area. Achieve confidentiality in various ways.

The above descriptions are merely preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims

Claim

1. A method for providing a security function in a specific area, characterized in that restricted area information is set for each specific area in which a mobile terminal function is limited, and in each specific area. The restricted area set by broadcasting Information

The method further includes the following steps:

c When the mobile terminal judges that it leaves a specific area, it resumes its limited functions.

The method according to claim 1, wherein the restricted area information broadcast in each specific area includes at least restricted area information of each specific area.

3. The method according to claim 1, wherein the restricted area information set for each specific area is: a restricted area identification, or a restricted area manager identification, or a restricted area location, Or any combination of these three.

4. The method according to claim 1, wherein the restricted area information broadcast in each specific area is: one or one of the restricted area information set for each specific area. Any combination of the above information.

5. The method according to claim 1, wherein in step a, the restricted area information stored for the mobile terminal is: one of the restricted area information set for a specific area to be currently entered or Any combination of more than one piece of information.

6. The method according to claim 1, characterized in that, in the specific The restricted area information broadcasted in the area includes at least the location of the restricted area; the step a further includes: setting terminal positioning enable parameters for the mobile terminal; the mobile terminal initiates its own positioning process to obtain the location location, and uses it as Restricted area information is stored.

7. The method according to claim 1, wherein the restricted area information broadcast in the specific area to be currently entered at least includes the restricted area position;

In step a, the restricted area information stored for the mobile terminal includes only the location of the area, and the method for storing the restricted area information for the mobile terminal is: setting terminal positioning enable parameters for the mobile terminal, and the mobile terminal initiates itself The positioning process obtains the location of the area and stores it as restricted area information.

8. The method according to claim 1, wherein the method for determining in step b is: determining whether the restricted area information stored in itself and the restricted area information in the received broadcast information are the same For the corresponding item, if there is, it is judged to enter a specific area; otherwise, the judgment is not entered into a specific area.

9. The method according to claim 1, wherein the method for determining in step c is: determining whether to receive or receive the restricted area information broadcasted by the network side within a pre-configured time threshold, And the restricted area information has the same corresponding item as the restricted area information stored by itself, if it is, it is judged that the specific area is not left; otherwise, it is judged that the specific area is left.

10. The method according to claim 1, wherein the restricted area information set for each specific area includes only the restricted area position, and the set restricted area position is broadcast in all the specific areas;

In step a, the restricted area information stored for the mobile terminal includes only the location of the area, and the method for storing the restricted area information for the mobile terminal is: setting terminal positioning enable parameters on the network side, and positioning the set terminal The enabling parameter is broadcast in all specific areas together with the location of the restricted area; the mobile terminal receives the terminal positioning enable parameter broadcasted by the network side, initiates its own positioning process to obtain the location location, and stores it as the restricted area information; The determination in step b is: the mobile terminal determines whether it enters a specific area according to the location of the restricted area in the broadcast information and the location of the area where the restricted area information is stored.

11. The method according to claim 10, wherein the method of determining in step b is: if the location of the stored region is the same as the location of a restricted region in the received message, It is judged to enter a specific area;

The judgment method described in step c is: judging whether a restricted area location of a network-side broadcast is received or received within a pre-configured time threshold, and one of the restricted area locations is the 'restricted area location and its own storage The location of the region is the same. If it is, it is judged that the particular region is not left; otherwise, it is judged that the particular region is left.

12. The method according to claim 1, wherein the application of the limited function of the mobile terminal is a limitation of the application of a camera function of the mobile terminal; and the limited function is a function of the camera. '

13. The method according to any one of claims 1 to 12, wherein in step a, the restricted area information stored for the mobile terminal is set in a universal integrated circuit card UICC or a mobile device ME of the mobile terminal. .