WO2010072072A1

WO2010072072A1 - Method, device and system for locking a mobile terminal with a subscriber identity module card

Info

Publication number: WO2010072072A1
Application number: PCT/CN2009/073208
Authority: WO
Inventors: 孙东
Original assignee: 华为终端有限公司
Priority date: 2008-12-26
Filing date: 2009-08-12
Publication date: 2010-07-01
Also published as: CN101448261A

Abstract

A method, a device and a system for locking a mobile terminal with a Subscriber Identity Module (SIM) card. The method involves: when a mobile terminal is started firstly, successful startup is achieved when the default personal identification number (PIN) of the SIM card is the same as the default PIN stored in the mobile terminal by matching(S101); and a new PIN is generated after the successful startup (S102). The default PINs in the mobile terminal and the SIM card are updated respectively according to the new PIN (S103). The SIM card is the special card that the mobile terminal locks. The method achieves that the mobile terminal locks a special card by verifying a PIN, and achieves the special service by specially interlocking of the mobile terminal and the card.

Description

Method, device and system for locking mobile terminal and user identification card

This application claims priority to Chinese Patent Application No. 200810188821.7, entitled "A Method, Apparatus and System for Locking Mobile Terminals and User Identification Cards", which is filed on December 26, 2008. The entire contents are incorporated herein by reference. 5 Technical fields

The present invention relates to the field of network communication technologies, and in particular, to a method, device and system for locking a mobile terminal and a user identity card.

Background technique

The earliest mobile phones were machine-card-integrated. With the development of technology, the current mobile phones are separated by machine cards. 0 However, for some customized services of operators, operators hope to achieve machine and card integration.

The existing mobile phones lock the mobile phone and the SIM (Subscriber Identity Module lock) card by means of a SIM lock (Subscriber Identity Module lock). Customized handsets lock the public carrier mobile network (PLMN) of a particular carrier, and other carriers' numbers cannot be used to lock custom mobile phones. For example, China Mobile's PLMN number is 460-00, and 460-00 is pre-saved to the mobile phone. When booting, the PLMN number of the SIM card is read. If the PLMN number of the SIM card is also 460-00, the boot is allowed; otherwise , booting is not allowed. This achieves the effect that a customized mobile phone can only use China Mobile's SIM card.

However, the above SIM lock can only lock one type of card, such as a card that locks China Mobile or a card of China »0 Unicom, which cannot achieve the purpose of locking a specific card. For example, in order to launch a specific service, the operator wants to achieve one-to-one locking between the mobile phone and the SIM card, that is, the mobile phone locks a specific SIM card. Summary of the invention

Embodiments of the present invention provide a method, device, and system for locking a mobile terminal and a user identity card, so as to enable the mobile terminal to lock a specific user identity card.

The embodiment of the present invention provides a method for locking a mobile terminal and a user identity card, including: matching a default personal identification code in the mobile terminal and a default personal identification in the user identification card when the mobile terminal is powered on for the first time. When the default personal identification code in the mobile terminal is the same as the default personal identification number in the user identification card, the mobile terminal is powered on for the first time; after the first power on, a new personal identification code is generated; the mobile terminal and the mobile terminal are Rewriting the personal identification number in the user identification card to the new individual Identifier.

The embodiment of the present invention further provides a mobile terminal, including a matching unit, a generating unit, and an updating unit. The matching unit is configured to match a default personal identification code and a user identification card in the mobile terminal when the mobile terminal is powered on for the first time. The default personal identification number; when the default personal identification code in the mobile terminal is the same as the default personal identification number in the user identification card, the mobile terminal is powered on for the first time; the generating unit is used after the mobile terminal is powered on for the first time. And generating a new personal identification code; the updating unit, configured to update a default personal identification code in the mobile terminal and a default personal identification code in the user identification card to the new personal identification code.

The embodiment of the invention further provides a system for locking a mobile terminal and a user identification card, comprising the mobile terminal and the user identification card described in the above embodiments.

In the embodiment of the present invention, the default personal identification number (PIN) provided by the operator is encrypted and stored in the mobile terminal. When the mobile terminal is powered on for the first time, the default PIN code in the matching mobile terminal is the same as the default PIN code in the SIM card, and the power is turned on successfully. After the phone is successfully turned on, the phone generates a new PIN code, and the new PIN code updates the default PIN code in the mobile terminal. At the same time, the new PIN code updates the default PIN code in the SIM card. The SIM card is a specific card that the mobile terminal locks. The invention realizes that the mobile terminal locks a specific card by verifying the PIN code.

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description For some embodiments of the present invention, other drawings may be obtained from those skilled in the art without departing from the drawings.

1 is a flow chart of a first embodiment of a method based on the present invention;

Figure 2 is a flow chart of a second embodiment of the method according to the present invention;

3 is a structural diagram of a first embodiment of a mobile terminal based on the present invention;

4 is a structural diagram of a second embodiment of a mobile terminal based on the present invention;

Figure 5 is a structural view of a first embodiment of the system based on the present invention;

Figure 6 is a structural view of a second embodiment of the system based on the present invention;

Figure 7 is a block diagram showing a third embodiment of the system based on the present invention. detailed description

BRIEF DESCRIPTION OF THE DRAWINGS The technical solutions in the embodiments of the present invention will be described in detail below with reference to the accompanying drawings. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative work are within the scope of the present invention.

First, a method for locking a mobile terminal and a user identification card is described in the embodiment of the present invention. The method includes: when the mobile terminal is powered on for the first time, matching a default personal identification code in the user identification card and saving in the mobile The default personal identification code of the terminal, if the two are the same, the booting is successful; after the booting is successful, a new personal identification code is generated, and the default in the mobile terminal and the user identification card is updated respectively by using the new personal identification code. Personal identification number. It should be noted that the mobile terminal in the embodiment of the present invention may be a mobile phone or a data card. For convenience of description, the following embodiments all describe a specific solution by using a mobile phone as an example.

The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

Method embodiment one:

Referring to Figure 1, this figure is a flow chart based on a first embodiment of the method of the present invention.

A first embodiment of a method for locking a mobile terminal and a user identification card according to the present invention comprises the following steps:

S101: When the mobile phone is turned on for the first time, if the default PIN code matched to the SIM card is the same as the default PIN code stored in the embedded file (EFS, Embedded File System) of the mobile phone, the boot is successful.

When the PIN code in the SIM card is different from the default PIN code stored in the EFS of the mobile phone, the phone will not be activated if it is directly turned off.

It should be noted that the PIN code in the mobile phone may not be saved in the EFS, or may be saved in other files of the mobile phone.

S102: After the mobile phone is successfully booted, a new PIN code is generated.

S103: Update the default PIN stored in the EFS of the mobile phone with the new PIN code, and update the default PIN code stored in the SIM card.

The new PIN code is randomly generated by the mobile phone platform, and the purpose is to realize the locking of the specific card by the mobile phone, that is, the locking of the mobile phone and the SIM-to-one. When the mobile phone is shipped from the factory, the salesperson can use any SIM card with the default PIN code and the mobile phone to lock. When locked, the generated new PIN code updates the original default PIN code in the mobile phone and SIM to realize the mobile phone. Lock this particular card.

The method for locking the mobile terminal and the user identification card provided by the embodiment of the present invention encrypts the default PIN provided by the operator in the EFS of the mobile phone. When the phone is turned on for the first time, it is allowed to boot when the PIN code in the matching EFS is the same as the PIN in the SIM card. After booting up, a new PIN code is generated and the new PIN updates the PIN code in the SIM card in EFS. When the mobile phone is turned on later, when the PIN code in the EFS of the mobile phone is verified to be the same as the PIN code in the SIM card, the booting is allowed; at the same time, the opening is not allowed, thereby realizing the interlocking of the card through the PIN code.

The interlocking of the machine card in the embodiment of the invention realizes locking a specific card, and the operator can realize a special service through the specific interlock of the mobile phone and the card, for example, launching some experimental mobile phones, special tariffs, etc. for the user. use.

For example, China Mobile launched a new business for entertainment websites. Users can use this entertainment website to get a free mobile phone. The connection to this entertainment site is prefabricated on this phone. In order to encourage users to use this entertainment website, the Internet traffic fee of this SIM card is particularly favorable. Therefore, China Mobile does not want other mobile phones to use this SIM card. In this way, China Mobile needs to lock the phone to this specific SIM card, which cannot be used on other mobile phones.

Method Embodiment 2:

Referring to Figure 2, there is shown a flow chart of a second embodiment of the method based on the present invention.

S201: The mobile phone saves the default PIN code encrypted by the operator through the encryption algorithm in the EFS.

The default PIN code provided by the operator is stored in the EFS of the mobile phone through an encryption algorithm, which is called a default seed file.

Since the default PIN code uses an encryption algorithm, the attacker cannot see the plain text of the PIN code, thus ensuring the security of the PIN code.

S202: When the mobile phone is powered on for the first time, the default PIN code saved in the EFS is decrypted, and the default PIN code in the matching SIM card is the same as the PIN code in the EFS, and the booting is successful.

S203: After the phone is turned on, a new PIN code is generated.

S204: After encrypting the new PIN code by using the encryption algorithm, the mobile phone updates the default PIN code in the EFS and updates the default PIN code in the SIM card. S205: When the mobile phone is turned on again, when the PIN code stored in the EFS of the mobile phone is verified to be the same as the PIN code saved in the SIM, the booting is successful, and vice versa, the booting fails.

It should be noted that the PIN code stored in the mobile phone is encrypted and saved. Therefore, when the PIN code in the EFS matching phone is the same as the PIN code in the SIM card, the PIN code saved in the EFS is first decrypted.

Since the mobile phone has been interlocked with the SIM card, if the PIN code stored in the mobile phone is not the same as the PIN code stored in the SIM card, it is not allowed to be powered on.

The interlocked mobile phone does not include an interface for the user to modify the PIN code and an interface related to the PIN code. The PIN code on the phone is not visible to the user. Some mobile phone security features that require a PIN are accessed directly, without prompting the user to enter a PIN. The embodiment of the invention further provides a mobile terminal. It should be noted that the mobile terminal in the embodiment of the present invention may be a mobile phone or a data card. For convenience of description, the following embodiments all use a mobile phone as an example to describe a specific solution.

Mobile terminal embodiment 1:

Referring to FIG. 3, this figure is a structural diagram of a first embodiment of a mobile terminal based on the present invention.

A mobile terminal provided by the present invention includes a matching unit 301, a generating unit 302, and an updating unit.

303.

The matching unit 301 is configured to: when the mobile phone is first turned on, the default PIN code in the matching SIM card is the same as the default PIN code stored in the EFS of the mobile phone, and the booting succeeds; when the PIN code in the SIM card is related to the mobile phone When the default PIN code saved in EFS is different, it will be shut down directly and the phone will not start.

The generating unit 302 is configured to generate a new PIN code after the mobile phone is successfully booted.

The updating unit 303 is configured to update the default PIN code in the EFS of the mobile phone with the new PIN code; and update the default PIN code of the user identity authentication module card at the same time.

The new PIN code is randomly generated in order to enable the handset to lock a particular card. When the mobile phone is shipped from the factory, the salesperson can use any SIM card with the default PIN code and the mobile phone to lock. When locked, the generated new PIN code is saved in the mobile phone and SIM through the encryption algorithm and decryption algorithm, and updated. The original default PIN code enables the phone to lock the particular card.

The mobile terminal provided by the embodiment of the present invention encrypts the default PIN provided by the operator. In the EFS of the phone. When the phone is turned on for the first time, the PIN code in the matching EFS is the same as the PIN in the SIM card. After the boot is successful, a new PIN code is generated, and the new PIN updates the PIN code in the SIM card in the EFS. When the mobile phone is turned on again, when the PIN code in the EFS of the mobile phone is verified to be the same as the PIN code in the SIM card, the booting is successful; at the same time, the booting fails, thereby realizing the interlocking of the card through the PIN. Mobile terminal embodiment 2:

Referring to FIG. 4, the figure is a structural diagram of Embodiment 2 of a mobile terminal based on the present invention.

The second embodiment of the apparatus of the present invention differs from the first embodiment of the apparatus in that a verification unit 401 and a rejection unit 402 are added.

The verification unit 401 is configured to: when the mobile phone is turned on again, when the personal identification code stored in the embedded file system of the mobile phone is the same as the personal identification code stored in the user identity authentication module card, the booting is successful, and vice versa, the booting fails.

The reject unit 402 is configured to reject the user to modify the PIN code.

The interlocked mobile phone does not include an interface for the user to modify the PIN code and an interface related to the PIN code. The PIN code on the phone is not visible to the user. Some mobile phone security features that require a PIN are accessed directly, without prompting the user to enter a PIN. The embodiment of the invention further provides a system for locking a mobile terminal and a user identification card. The system of the embodiments of the present invention includes a mobile terminal and a subscriber identity card. It should be noted that the mobile terminal according to the embodiment of the present invention may be a mobile phone or a data card. For convenience of description, the following embodiments all describe a specific solution by using a mobile phone as an example.

System embodiment one:

Referring to Figure 5, there is shown a block diagram of a first embodiment of a system based on the present invention.

The first embodiment of the system of the present invention includes a handset 501 and a SIM card 502.

The mobile phone 501 is configured to save the default PIN code provided by the operator to itself.

For example, the PIN code can be saved in the EFS of the mobile phone. The default PIN code provided by the operator can be stored in the EFS of the mobile phone 501 by an encryption algorithm, which is called a default seed file. Since the default PIN code uses an encryption algorithm, the attacker cannot see the plaintext of the PIN code, thereby ensuring the security of the PIN code.

When the mobile phone 501 is turned on for the first time, the default PIN code in the matching SIM card 502 is the same as the default PIN code stored in the EFS of the mobile phone 501, and the power is turned on successfully. When the PIN code in the SIM card 502 is different from the default PIN code stored in the EFS of the mobile phone 501, it is directly turned off, and the mobile phone 501 cannot be started.

After the first boot is successful, the mobile phone 501 generates a new PIN code, updates the default PIN code stored in the EFS of the mobile phone 501 with the generated new PIN code, and updates the default PIN code in the SIM card 502.

When the mobile phone is turned on again, the mobile phone 501 verifies that the PIN code stored in the EFS is the same as the PIN code saved in the SIM card 502, and the booting succeeds, otherwise, the boot fails.

The new PIN code is randomly generated by the mobile phone 501 platform, and the purpose is to enable the mobile phone to lock a specific SIM card 502.

It should be noted that the mobile phone can refuse the user to modify the PIN code.

When the mobile phone is shipped from the factory, the salesperson can use any SIM card with the default PIN code and the mobile phone to lock. When locked, the generated new PIN code is saved in the mobile phone and SIM through the encryption algorithm, and the original default is updated. The PIN code that enables the phone to lock the particular card.

The system for locking the mobile terminal and the user identification card provided by the embodiment of the present invention encrypts the default PIN provided by the operator in the EFS of the mobile phone 501. When the mobile phone 501 is turned on for the first time, the PIN code in the matching EFS is the same as the PIN in the SIM card 502, and the power is turned on successfully. After the boot is successful, the mobile phone 501 generates a new PIN code, and the new PIN updates the PIN code in the SIM card 502 in the EFS. When the mobile phone is turned on again, when the PIN code in the EFS of the mobile phone 501 is verified to be the same as the PIN code in the SIM card 502, the power-on is successful; at the same time, the power-on fails, thereby realizing the interlocking of the machine card through the PIN code.

The interlocked mobile phone 501 does not include an interface for the user to modify the PIN code and an interface related to the PIN code. The PIN code on the phone is not visible to the user. Some mobile phone security features that require a PIN are accessed directly, without prompting the user for a PIN.

It should be noted that the mobile phone 501 may include the mobile terminal according to Embodiment 1 of the foregoing mobile terminal or Embodiment 2 of the mobile terminal. System Embodiment 2:

Referring to Figure 6, this figure is a block diagram of a second embodiment of a system based on the present invention.

The mobile phone 501 in this embodiment includes a matching unit 301, a generating unit 302, and an updating unit 303. The matching unit 301 is configured to: when the mobile phone is first turned on, the default PIN code in the matching SIM card is the same as the default PIN code stored in the EFS of the mobile phone, and the booting succeeds; when the PIN code in the SIM card is related to the mobile phone When the default PIN code saved in EFS is different, it will be shut down directly and the phone will not start.

The updating unit 303 is configured to update the default PIN code in the EFS of the mobile phone with the new PIN code; and update the default PIN code of the user identity authentication module card at the same time. System Embodiment 3:

Referring to Figure 7, there is shown a block diagram of a third embodiment of the system in accordance with the present invention.

In this embodiment, the mobile phone 501 adds a verification unit 401 and a rejection unit 402.

The reject unit 402 is configured to reject the user to modify the PIN code.

The interlocked mobile phone does not include an interface for the user to modify the PIN code and an interface related to the PIN code. The PIN code on the phone is not visible to the user. Some mobile phone security features that require a PIN are accessed directly, without prompting the user to enter a PIN.

In summary, a method for locking a mobile terminal and a user identity card is provided in the embodiment of the present invention, and the default PIN code provided by the operator is encrypted and stored in the mobile terminal. When the mobile terminal is powered on for the first time, the default PIN code in the matching mobile terminal is the same as the default PIN code in the SIM card, and the power is turned on successfully. After the first boot is successful, the phone generates a new PIN code, and the new PIN code updates the default PIN code in the mobile terminal. At the same time, the new PIN code updates the default PIN code in the SIM card. The SIM card is a specific card that is locked by the mobile terminal. The invention realizes that the mobile terminal locks a specific card by verifying the PIN code, and the operator can realize a certain special through the specific interlock of the mobile terminal and the card. Business. Since the PIN encryption is stored in the EFS, the attacker cannot see the PIN code and steal the PIN code.

A person skilled in the art can understand that all or part of the steps in implementing the above method embodiments can be completed by a program instructing related hardware, and the program can be stored in a computer readable storage medium. The content of each embodiment of the aforementioned communication method may be included. The storage medium referred to herein is, for example, a ROM/RAM, a magnetic disk, an optical disk, or the like.

A person skilled in the art can understand that all or part of the steps of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium, and the program is executed. The method includes the following steps: when the mobile terminal is powered on for the first time, the default personal identification code in the matching user identification card is the same as the default personal identification code stored in the mobile terminal, and the power is successfully turned on; A new personal identification number, and the default personal identification code in the mobile terminal and the user identification card are respectively updated with the new personal identification code.

Claims

Rights request

A method for locking a mobile terminal and a user identity card, comprising: matching a default personal identification code in the mobile terminal and a default personal identification code in the user identification card when the mobile terminal is powered on for the first time; ;

5 When the default personal identification code in the mobile terminal is the same as the default personal identification number in the user identification card, the mobile terminal is powered on for the first time;

After the first boot, generate a new PIN;

Updating the personal identification code in the mobile terminal and the user identification card to the new personal identification code.

The method for locking a mobile terminal and a user identity card according to claim 1, wherein the method further comprises:

When the mobile terminal is powered on again, verify the personal identification code saved in the mobile terminal and the personal identification code stored in the user identification card;

When the personal identification code stored in the mobile terminal is the same as the personal identification code 5 stored in the user identification card, the mobile terminal is powered on again, otherwise, the mobile terminal fails to boot.

The method for locking a mobile terminal and a user identity card according to claim 1 or 2, wherein the default personal identification code in the mobile terminal is stored in an embedded file system of the mobile terminal using an encryption algorithm. .

4. The method for locking a mobile terminal and a user identity card according to claim 1 or 2, characterized in that the new personal identification code is stored in the mobile terminal and the user identification card using an encryption algorithm. .

The method for locking a mobile terminal and a user identity card according to claim 1 or 2, wherein the method further comprises: setting, on the mobile terminal, rejecting the user to modify the personal identification code.

A mobile terminal, comprising: a matching unit, a generating unit, and an updating unit; » 5 the matching unit, configured to match a default personal identifier and a user identity in the mobile terminal when the mobile terminal is powered on for the first time Identifying the default personal identification number in the card; when the default personal identification code in the mobile terminal is the same as the default personal identification number in the user identification card, the mobile terminal is powered on for the first time;

The generating unit is configured to generate a new personal identification code after the mobile terminal is powered on for the first time; the updating unit is configured to use a default personal identification code and a user identification card in the mobile terminal. The default PIN is updated to the new PIN.

The mobile terminal according to claim 6, wherein the device further comprises a verification unit, configured to verify, when the mobile terminal is powered on again, the personal identification code saved in the mobile terminal and the user identification card saved in the user identity card Personal identification code; when the personal identification code stored in the mobile terminal is the same as the personal identification code stored in the user identification card, the mobile terminal is powered on again, and vice versa, the mobile terminal fails to boot.

The mobile terminal according to claim 6, wherein the device further comprises a reject modification unit, configured to reject the user to modify the personal identification code.

A system for locking a mobile terminal and a user identity card, comprising the mobile terminal and the user identity card according to any one of claims 6 to 8.