WO2011016700A2

WO2011016700A2 - Method and apparatus for providing protection service for private information of mobile communication terminal

Info

Publication number: WO2011016700A2
Application number: PCT/KR2010/005183
Authority: WO
Inventors: 김봉섭
Original assignee: 주식회사 나르샤소프트
Priority date: 2009-08-07
Filing date: 2010-08-06
Publication date: 2011-02-10
Also published as: WO2011016700A3

Abstract

The present invention relates to a technique for preventing the leak of private information stored in a mobile communication terminal through others when the mobile communication terminal is stolen and lost. More particularly, the present invention relates to a method and a system for preventing the leak of private information through others by deleting, backing up, and deleting or encrypting the private information within the mobile communication terminal or initializing the mobile communication terminal after confirming the loss of the mobile communication terminal.

Description

Method and system for providing personal information protection service of mobile communication terminal

The present invention relates to a security processing technology for protecting personal information stored in a personal mobile communication terminal in a mobile communication environment, and more particularly, to provide a service for protecting personal information stored in a terminal when the mobile communication terminal is stolen or lost. It relates to a method and a system.

With the recent rapid development of electronic engineering and communication engineering, mobile communication terminals have various functions. That is, with the rapid development of wireless communication and data processing technology, people can use not only voice calls but also Internet access, video communication and video message transmission using mobile communication terminals. In addition, due to the rapid dissemination of mobile communication terminals, mobile communication terminals have become an essential means of communication in modern life, such as a considerable amount of communication occurring in human relationships through mobile communication terminals.

As the development of the mobile communication technology and the terminal functions are diversified, the mobile communication terminal is recognized as an important information device such as a personal network computer rather than a simple communication terminal device for the user. For example, a user may take a picture, a voice, a video, and the like by using a mobile communication terminal, and may watch a movie, a broadcast, play a game, and manage his schedule while moving. In addition, a video call can be made with a counterpart in a remote place, and can be used as a navigation in a vehicle.

As described above, the user solves a large part of his / her daily life through the mobile communication terminal, and stores a large amount of personal information in the mobile communication terminal. Therefore, if the user is stolen or lost the mobile communication terminal, damages such as leakage or theft of personal information of the user may occur along with economic loss. In particular, as payment through a mobile phone or internet banking is becoming more common, a loss of a mobile communication terminal has a problem that can lead to serious damage.

Due to this problem, in the related art, when a mobile communication terminal is lost, a basic service for allowing a user to contact a corresponding communication company to limit a calling function of the lost mobile communication terminal is provided. In addition, a method of applying a password to a mobile communication terminal so that a person who acquires a lost terminal can not illegally operate the terminal. However, in this case, the security of the password is somewhat insufficient, there is a problem that is vulnerable to malicious attacks, and there is a hassle to enter a password every time you use a mobile communication terminal, most users do not use the function.

In addition, the conventional method of setting a password limits the function of the terminal or limits the transmission, but can not protect the personal information stored in the terminal, there is a problem that can only be exposed to the risk of leakage and theft.

Due to these problems, even when a mobile communication terminal is lost or stolen, a technology for ensuring the protection and security of personal information stored in the terminal is required. In addition, since the compatibility between mobile communication terminals using USIM is also available in Korea, the possibility of malicious accidents caused by loss or theft of mobile communication terminals is expected to increase significantly. It is urgently needed. In particular, when a malicious accident occurs due to theft or loss of a mobile communication terminal, personal information such as a phone number, a memo, a picture, a public certificate, and the like stored in the mobile communication terminal may be leaked.

Therefore, the present invention was devised to solve such a problem, and the information protection means provided in the mobile communication terminal is driven to automatically check whether the terminal is lost or not, and when the terminal is lost or stolen, the individual stored in the terminal. It is an object of the present invention to provide a method and system for performing security processing on information.

In addition, the present invention broadcasts the broadcast information including the terminal loss signal in the area where the mobile communication terminal is stolen or lost, the mobile communication terminal receives the connection to the information protection operation server to check whether the terminal is lost, information security It is yet another object to provide a method and a system which enable the processing to be carried out.

Other objects and advantages of the invention will be described below and will be appreciated by the practice of the invention. Furthermore, the objects and advantages of the present invention can be realized by means and combinations indicated in the appended claims.

The method for providing a personal information protection service of a mobile communication terminal according to the first aspect of the present invention provides a security processing service for protecting personal information stored in a terminal in order to prevent leakage of personal information due to theft or loss of the mobile communication terminal. A method comprising: (a) driving an information protection means provided in a mobile communication terminal to access an information protection operating server in which status information of the mobile communication terminal is registered; (b) checking, by the information security operating server, whether the terminal is lost or not; And (c) performing a preset personal information security process on the information protection means when it is determined that the terminal is in a lost state.

In order to prevent the leakage of personal information due to theft or loss of the mobile communication terminal according to the second aspect of the present invention, a system for providing a security processing service for protecting personal information stored in the terminal may include: A registered information security operation server; And a mobile communication terminal provided with information protection means for accessing the information protection operating server to check whether the terminal is lost or not, and performing a preset personal information security process when it is determined that the terminal is lost. Characterized in that.

The method for providing a personal information protection service of a mobile communication terminal according to the third aspect of the present invention provides a security processing service for protecting personal information stored in a terminal in order to prevent leakage of personal information due to theft or loss of the mobile communication terminal. A method of receiving a lost or lost report of a mobile communication terminal; (b) broadcasting a terminal loss signal through a broadcasting channel in an area in which the reported loss of mobile communication terminal is located; (c) a mobile communication terminal receiving a broadcast including the terminal loss signal, accessing an information protection operating server in which the loss status information of the mobile communication terminal is registered; And (d) checking, by the information security operating server, whether the terminal is lost or not, and if it is determined that the terminal is in a lost state, performing a preset personal information security process on the information protection means provided in the terminal. It is characterized by including.

A system for providing a security processing service to protect personal information stored in a terminal in order to prevent leakage of personal information due to theft or loss of the mobile communication terminal according to the fourth aspect of the present invention, reports a theft or loss of the mobile communication terminal An information protection operation server that receives and registers and manages whether the mobile communication terminal has lost status information, and controls a terminal lost signal to be broadcasted through a broadcast channel in a region where the reported loss of mobile communication terminal is located; And receiving a broadcast including a terminal loss signal through a broadcast channel, accesses the information protection operation server, checks whether the terminal is lost or not, and performs a preset personal information security process when the terminal is confirmed to be in a lost state. And a mobile communication terminal provided with an information protection means.

According to the present invention, the mobile communication terminal is provided with an information protection means which is always driven with the activation of the terminal, and periodically or in real time connected to the operation server that registers and manages the terminal loss status information to check whether the loss status. In case that the lost status is confirmed, the security information on the personal information stored in the terminal is performed immediately so that the terminal can recognize the lost status immediately and the security processing of the stored personal information is performed with the recognition. And more effective protection.

In addition, when the terminal is lost, even if the terminal does not take a separate action, the terminal itself accesses the operation server and checks whether the terminal is lost.In case of the lost state, information security processing is performed. Since the call does not need to be connected, there is an effect that the information protection process can be performed more efficiently.

The following drawings, which are attached to this specification, illustrate exemplary embodiments of the present invention, and together with the detailed description of the present invention serve to further understand the technical spirit of the present invention, the present invention includes matters described in such drawings. It should not be construed as limited to.

1 is a diagram showing the configuration of a system that implements a method for providing a personal information protection service of a mobile communication terminal according to a first embodiment of the present invention.

2 is a diagram illustrating a configuration of a mobile communication terminal in a system for providing personal information protection service of a mobile communication terminal according to the first embodiment of the present invention.

3 is a diagram illustrating an example of terminal lost state information stored in a database in the lost state information DB.

4 is a flowchart illustrating a procedure of a method for providing a personal information protection service of a mobile communication terminal according to the first embodiment of the present invention.

5 is a diagram illustrating a signal flow between nodes in a method of providing a personal information protection service of a mobile communication terminal according to a first embodiment of the present invention.

6 is a diagram showing the configuration of a system that implements a method for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention.

7 is a diagram illustrating a configuration of an information security operation server in a system for providing a personal information protection service for a mobile communication terminal according to a second embodiment of the present invention.

8 is a diagram illustrating a configuration of a mobile communication terminal in a system for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention.

9 is a flowchart illustrating a procedure of a method for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention.

FIG. 10 is a diagram illustrating a procedure for performing information protection processing of a lost terminal according to each node according to a method for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention.

The method for providing a personal information protection service of a mobile communication terminal according to the present invention is a method of providing a security processing service for protecting personal information stored in a terminal in order to prevent leakage of personal information due to theft or loss of the mobile communication terminal. (a) theft or loss report acceptance step of the mobile communication terminal; (b) broadcasting a terminal loss signal through a broadcasting channel in an area in which the reported loss of mobile communication terminal is located; (c) a mobile communication terminal receiving a broadcast including the terminal loss signal, accessing an information protection operating server in which the loss status information of the mobile communication terminal is registered; And (d) checking, by the information security operating server, whether the terminal is lost or not, and if it is determined that the terminal is in a lost state, performing a preset personal information security process on the information protection means provided in the terminal. It is characterized by including.

In addition, the system for providing a security processing service for protecting personal information stored in the terminal in order to prevent leakage of personal information due to theft or loss of the mobile communication terminal according to the present invention, accepts the report of theft or loss of the mobile communication terminal And an information protection operation server configured to register and manage the status information of whether the mobile communication terminal is lost, and to broadcast the terminal loss signal through a broadcast channel to an area in which the reported loss of the mobile communication terminal is located; And receiving a broadcast including a terminal loss signal through a broadcast channel, accesses the information protection operation server, checks whether the terminal is lost or not, and performs a preset personal information security process when the terminal is confirmed to be in a lost state. And a mobile communication terminal provided with an information protection means.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Prior to this, terms or words used in the specification and claims should not be construed as having a conventional or dictionary meaning, and the inventors should properly explain the concept of terms in order to best explain their own invention. Based on the principle that can be defined, it should be interpreted as meaning and concept corresponding to the technical idea of the present invention. Therefore, the embodiments described in the specification and the drawings shown in the drawings are only the most preferred embodiment of the present invention and do not represent all of the technical idea of the present invention, various modifications that can be replaced at the time of the present application It should be understood that there may be equivalents and variations.

Example 1

As shown in FIG. 1, in the system according to the first embodiment of the present invention, a mobile communication terminal 100 provided with information protection means and an information protection operation server 200 including a database 210 are provided in a mobile communication network. Connected through. Here, the customer center 310 is connected to the information protection operation server 200, the customer 400 requests the stolen or lost reception to the customer center 310 or the information protection operation server 200.

The information protection operation server 200 plays a role of storing and managing the lost state information of the terminal in the lost state information database 210 according to the loss or theft reception of the mobile communication terminal 100. The information security operation server 200 is connected to a mobile communication network, and is a server device that the mobile communication terminal 100 can access through a mobile communication network.

The information security operation server 200 is received through the customer center 310 received the accident or theft, and receives the fact that the registration of the lost state of the terminal in the database 210. Alternatively, the terminal 400 may receive a lost or stolen receipt of the terminal directly from the customer 400 through wired / wireless communication means and offline. In this case, the lost state registration process of the corresponding terminal is performed in the database 250 together with the reception.

The customer center 310 is an on / offline service center for mobile subscribers operating in a mobile communication system. The customer center 310 performs customer service, and a terminal loss and theft report reception process is included in one of these services. After receiving the loss report, the customer center 310 provides the fact of receiving the lost accident to the information protection operation server 200 to register the lost state of the terminal in the lost state information database 210 provided in the server.

The customer 400 reports the loss to the customer center 310 or the information protection operation server 200 when the mobile terminal owned by the customer is lost or stolen. At this time, the customer center 310 or the information security operation server 200 to perform the authentication process of identity verification and whether or not the user terminal, and proceed with the loss acceptance procedure.

In the lost state information database 250, whether the lost state information of the mobile communication terminal is stored as a database. 3 is a diagram illustrating an example of terminal lost state information stored and managed in the lost state information database 250. As shown in the figure, the lost state information database 250 records whether identification information for distinguishing terminals and whether the lost state information of each terminal is a normal state or a lost state. In the example of the figure, it is recorded that the identification information # 003 terminal is currently lost.

When the loss report is received, the lost state information database 250 immediately registers and stores the lost state in the lost or not state information corresponding to the identification information of the corresponding terminal by the information protection operation server 200. In addition, when the lost state of the terminal is resolved or a loss release request is received from a customer, the lost state information of the terminal is also normally recorded and stored in the lost state information database 210.

The mobile communication terminal 100 is a portable communication terminal device which is connected to a mobile communication network and receives a mobile communication service. The mobile communication terminal 100 is provided with information protection means to receive a personal information protection service by interworking with the information protection operation server 200. It is a device that can.

The mobile communication terminal 100 will be described in more detail below with reference to the drawings.

Referring to FIG. 2, the mobile communication terminal 100 according to the first embodiment of the present invention includes components of a general mobile communication terminal, including a storage module 120 in which personal information of a user is stored. In addition to the information protection module 110 further includes.

The information protection module 110 is a means for providing a personal information protection service in connection with the information protection operation server 200 through a mobile communication network. The information protection module 110 is a software program of a client or agent structure provided in the terminal and driven. In addition, the information protection module 110 is always driven together with the driving of the mobile communication terminal 100 to provide a personal information protection service. The information protection module 110 may be, for example, an idle screen service (or widget service) that is always executed on the mobile communication terminal.

The information protection module 110 includes a driving processor 111, a server connection processor 112, a loss determination unit 113, a security processor 114, a usage restriction processor 115, and the like.

The driving processor 111 performs an execution process so that the information protection module 110 is driven together with the driving of the terminal, and provides the personal information protection service together with the driving.

The server connection processing unit 112 performs a role of access processing to access the information protection operation server 200 to perform information communication. The server connection processing unit 112 is provided with an access address and an access protocol to the information security operation server 200 to process a smooth connection to the server when the information protection module 110 is driven.

In addition, the server connection processing unit 112 may always be connected to the information protection operating server 200, or may be connected at regular time intervals. When the access process is always performed, the load on the terminal, the server, and the communication network increases, but it is possible to check whether the terminal is lost in the information protection operating server 200 in real time, so that there is an advantage that can be immediately dealt with when registering the lost state. On the other hand, in the case of periodic access processing, the load on the terminal, server, and communication network can be reduced, but some time delay may occur in real time loss status check and response.

The loss status determination unit 113 checks the database 210 of the information protection operation server 200 and checks whether the current terminal is in a lost state. That is, the loss status determination unit 113 monitors whether the terminal is registered in the lost state in the operation server 200 connected through the server connection processing unit 112. In this case, when the corresponding terminal is registered in the lost state, it performs a role of informing the security processing unit 114 to be described later.

When it is determined that the terminal is in a lost state, the security processing unit 114 performs a security process for the personal information stored in the terminal. That is, the security processing unit 114 performs the personal information security processing according to a preset scenario at the moment when the loss status is confirmed by the loss determination unit 113.

The personal information security processing executes a preset security processing scenario. Examples of the security processing scenario include deletion of personal information, backup processing of personal information, encryption processing of personal information, lost location transmission processing, and peripheral information. The transfer process, the process of initializing a mobile communication terminal, etc. are mentioned. Here, the process of initializing the mobile communication terminal means resetting the mobile communication terminal to the initial release state.

The deletion process is a process of preventing the leakage of personal information by deleting the personal information 121 stored in the storage module 120 of the terminal. The backup process is a process of transmitting personal information to the information protection operation server 200 being accessed, and then deleting the personal information to prevent leakage after information backup. The encryption process is a process of receiving the encryption key from the information protection operation server 200 being connected, encrypting the personal information being stored in the storage module 120, and then re-storing it. Here, the encryption key may be stored in the terminal from the beginning. In addition, when the lost terminal is recovered, the decryption key corresponding to the encryption key is received to restore the personal information data.

In addition, the lost location transmission process is a process of transmitting the current location information of the terminal to the server that is connected after protecting the personal information in the above security processing scenario. In addition, the peripheral information transmission process is a process of driving the camera of the terminal to take information of the surrounding environment and transmit it to the operating server being connected. These processes are used to provide information that can recover lost terminals.

The usage restriction processing unit 115 performs a role of restricting the use of the terminal when the server connection processing unit 112 fails to access or access to the information security operation server 200. This prevents the leakage of personal information by restricting the use of the terminal itself in case of malicious paralysis.

The storage module 120 is a recording means capable of storing data in the terminal or storing various information. The personal information 121 is stored and managed in the storage module 120. Examples of the personal information 121 stored in the terminal are personal identification information or financial information such as social security number, bank account number, password, phone book, call log, text message, schedule information, memo, photo data, music data, anniversary information, etc. Like information, information about all users who require confidentiality to others.

Referring to FIG. 4, in the method for providing a personal information protection service according to the first embodiment of the present invention, first, when a power is applied to a terminal or starts using a terminal, a procedure of driving the terminal to start an operation is performed. (S10)

In addition to the operation of the terminal, the information protection means provided in the terminal is executed to perform a procedure of driving a function. The information protection means is driven together with the driving of the terminal and is always driven when the terminal is used.

When the information protection means is driven, a procedure of accessing the information security operation server via the mobile communication network is performed. At this time, the connection is attempted through the address and the access protocol of the information security operation server.

As a result of attempting the connection to the information security operation server, a procedure for determining whether the connection is successful or failed is performed. At this time, if it is determined that the connection has failed, a procedure of performing a terminal usage restriction process is performed. (S40, 45)

On the other hand, if the connection is successful, performs the information communication with the connected information protection operating server to query the database in the server and to check whether the terminal is lost or not (S50).

If it is confirmed that the state is normal as a result of the lost state, the procedure to maintain the normal state of the normal terminal proceeds. Along with this, the procedure from step S30 is continuously performed to monitor whether the terminal is in a lost state in real time or periodically. In this case, monitoring may be performed at all times or the procedure from step S30 may be performed at regular intervals. This is done in consideration of the load of the terminal, server and communication network. (S60, 65)

Next, when it is confirmed in the step S60 that the state is lost, a procedure for activating the security process of the information protection means is carried out. When the security processing of the information protection means is activated, the terminal enters the information security mode and the information security processing is performed according to the preset security processing scenario.

When the information security processing is performed, a process of performing the security processing of the stored personal information data is performed according to a preset scenario such as deleting personal information, backup, encryption, etc. (S80).

Here, an embodiment in which the information protection means of the mobile communication terminal periodically accesses the information protection operation server will be described. In addition, it will be described as a case where a loss or theft report is received through the customer center and provided to the information security operation server.

As shown in the drawing, first, a mobile communication terminal (hereinafter referred to as a terminal) transmits a connection request signal to an information protection operation server (hereinafter referred to as a server) in accordance with the operation of a self-contained information protection means to perform an access process. (1)

Upon connection, the terminal transmits a status check request signal to the server to check the status of the server by querying the DB of the server.

As a result of checking whether the server is lost, it has been confirmed that the loss report has not been received yet, and the normal status check information is transmitted to the terminal.

In this case, the terminal owner loses the terminal and reports the terminal loss through the customer center, and the customer center transmits a reception request signal for the loss report to the server.

The server performs a procedure of registering the lost state of the terminal in the DB according to the loss report acceptance request. (5)

The terminal transmits a connection request signal to the server again as the time elapses for a predetermined period to proceed with the connection process.

After the terminal connects to the server, the terminal transmits a status check request signal of whether the terminal is lost, and the server checks the DB to confirm the lost state of the terminal.

Here, since the state of the corresponding terminal is registered as the lost state due to the loss report reception, the corresponding terminal confirms that the lost state and transmits the lost state information to the terminal.

In the terminal, as the lost state is confirmed, a security processing process is activated in a running information protection means, and information security processing according to a security processing scenario set in advance is performed according to this security processing process.

Example 2

Hereinafter, a method and system for providing a personal information protection service according to a second embodiment of the present invention will be described with reference to FIGS. 6 to 10.

First, FIG. 6 is a diagram illustrating a configuration of a system in which a method for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention is implemented.

As shown in FIG. 6, the system according to the second embodiment of the present invention provides a mobile communication service to the mobile communication system by wirelessly connecting the mobile communication network 5000 and the base station 5010 provided in the mobile communication network 5000. A plurality of mobile communication terminals (1010, 1020, 1030) provided with an information protection means provided with the information protection operating server 2000 having a database 2500 is connected through the mobile communication network (5000). Here, the customer center 3100 is connected to the information security operation server 2000, and the customer 4000 requests the customer center 3100 or the information security operation server 2000 to accept theft or loss.

The information protection operation server 2000 stores the lost state information of the terminal in the lost state information database 2500 according to the loss or theft reception of the mobile communication terminal, and is lost through the base station 5010 in the lost region of the terminal. It plays a role of broadcasting signal information. The information security operation server 2000 is connected to a mobile communication network, and is a server device to which a mobile communication terminal can access through a mobile communication network.

The information protection operation server 2000 is received through the customer center 3100, after receiving the theft or loss incident, receives the fact of registration and registers the lost state of the terminal in the database 2500 and broadcasts the lost information. Alternatively, the terminal may receive a lost or stolen reception terminal through wire / wireless communication means and offline directly from the customer 4000. In this case, the lost state registration and broadcasting processing of the terminal is performed together with the reception.

The customer center 3100 is an on / offline service center for mobile subscribers operating in a mobile communication system. The customer center 3100 performs customer service and includes a terminal loss and theft report reception process. The customer center 3100 may provide a personal information protection service in the information protection operation server 2000 by providing a loss incident reception fact to the information protection operation server 2000 after receiving the loss report.

The customer 4000 reports a loss to the customer center 3100 or the information protection operation server 2000 when the mobile communication terminal owned by the customer 4000 is lost or stolen. At this time, the customer center 3100 or the information security operation server 2000 performs the authentication procedure of identity verification and identity terminal, and then proceeds with the loss acceptance procedure.

A more detailed description of the configuration of the information security operation server 2000 will be described later with reference to the additional drawings.

The

mobile communication terminals

1010, 1020, and 1030 are portable communication terminal devices that are connected to the mobile communication network 5000 and receive a mobile communication service. The

mobile communication terminals

1010, 1020, and 1030 are interlocked with the information protection operation server 2000 by providing information protection means. It is a device that can receive personal information protection service.

In particular, the mobile communication terminal is provided with an information protection means to receive broadcast information including a lost signal broadcasted through the base station 5010 of the mobile communication system in the information protection operating server 2000, and recognizes the lost signal After querying the lost state to the operation server 2000, information security processing is performed according to whether or not it is lost.

A more detailed description of the configuration of the mobile communication terminal will also be described later with reference to the additional drawings.

FIG. 7 is a diagram illustrating a configuration of an information protection operating server 2000 in a system for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention.

Referring to FIG. 7, the information protection operation server 2000 according to the second embodiment of the present invention includes a loss registration processing module 2100, a location information extraction module 2200, a loss signal broadcasting processing module 2300, and a loss. A state information database 2500 and the like.

The loss registration processing module 2100 receives a loss and theft report of the mobile communication terminal, and registers in the DB 2500. The loss registration processing module 2100 includes a report accepting unit 2120, a DB registering unit 2140, and the like. The report receiving unit 2120 serves to receive the information received the terminal theft and loss report from the customer center 3100. In this case, the terminal loss report may include location information of the terminal lost area directly input from the customer. In addition, the report receiving unit 2120 also serves to receive and process the loss and theft report directly from the customer 4000.

The DB registration unit 2140 stores the lost terminal information received by the report accepting unit 2120 in the lost state information DB 2500 and performs a registration process. In this case, when lost area information or lost location information directly input from a customer is included, the corresponding area information or location information may be stored together in the lost state information DB 2500.

The location information extraction module 2200 extracts a lost location of a corresponding terminal when the lost report is received by the lost registration processing module 2100. The location information extraction module 2200 includes an LBS processor 2220 and an input information processor 2240. The LBS processor 2220 extracts the location information of the lost terminal using the LBS system of the mobile communication system. The LBS system is a location based service (Location Based Service) system is a service system that provides the current location information of the terminal using the base station information, etc. when registering the location of the terminal.

The input information processing unit 2240 performs a role of inquiring a terminal lost area or location information directly inputted when a terminal loss report is received and extracting the location information. In this case, the location information to be inquired is lost location and area information input by a customer who is receiving and managing the loss registration processing module 2100 when the loss report is received and stored in the DB 2500.

The lost signal broadcast processing module 2300 performs a process of broadcasting the broadcast information including the lost signal information to the lost area of the terminal according to the terminal loss report reception. That is, the loss signal broadcast processing module 2300 controls to broadcast the loss signal to the lost area of the terminal extracted by the location information extraction module 2200 when the loss registration report is received by the loss registration processing module 2100. It plays a role. The lost signal broadcast processing module 2300 includes a base station selector 2320, a broadcast information synthesis controller 2340, and the like.

The base station selector 2320 selects a base station to broadcast a lost signal to a region where the terminal is lost. That is, it performs a role of selecting a base station to cover the area based on the lost location information and area information of the terminal. In this case, information is shared by interworking or linking with a mobile communication system, and a base station is selected.

The broadcast information synthesizing control unit 2340 plays a role of synthesizing to include a missing signal in a broadcast information message broadcasted through a selected base station through a broadcast channel. In the broadcast information message, various information is recorded in a reserved field, and the missing signal is included in any one of these fields. The lost signal is synthesized to be recorded in a specific field not reserved in the broadcast information message of the broadcast channel. In addition, this particular field is made to be mutually agreed with the mobile communication terminal 1000 provided with the information protection means. That is, it promises the mobile communication terminal equipped with the information protection means that the loss signal is recorded in the specific field. In addition, the reason why the loss signal is recorded in a specific unreserved field is to prevent the operation of the mobile communication system. Therefore, the general mobile communication terminal, i.e., the mobile communication terminal without the information protection means cannot recognize the corresponding field, and does not have any correlation even if the loss report is recorded in the corresponding field.

The lost state information DB 2500 is a database in which terminal loss status information is stored in a database. The lost state information DB 2500 may store terminal identification information and corresponding loss state information, and may further store lost region and location information. In addition, when the lost state of the terminal is resolved or a loss release request is received from the customer, the lost state information of the terminal is also normally recorded and stored in the lost state information DB 2500.

8 is a diagram illustrating a configuration of a mobile communication terminal 1000 in a system for providing a personal information protection service of a mobile communication terminal according to a second embodiment of the present invention.

Referring to FIG. 8, the mobile communication terminal 1000 according to the present invention includes components of a general mobile communication terminal, including a storage module 1200 in which user's personal information is stored, and further protects information. The module 1100 further includes.

The information protection module 1100 is a means for receiving a broadcast including a terminal loss signal through a mobile communication network, and providing a personal information protection service by interworking with the information protection operation server 2000 through a mobile communication network. The information protection module 1100 is a software program of a client or agent structure provided in the terminal and driven. In addition, the information protection module 1100 is driven together with the driving of the mobile communication terminal 1000 to provide a personal information protection service.

The information protection module 1100 includes a broadcast receiving unit 1110, a loss signal determining unit 1120, a server connection processing unit 1130, a loss determining unit 1140, a security processing unit 1150, and the like. The broadcast receiving unit 1110 receives a broadcast information message broadcasted through a base station of a mobile communication system through a broadcast channel. The broadcast receiver 1110 includes a one-way reception channel that always receives information broadcast from a base station of a surrounding area.

The lost signal determination unit 1120 determines whether a lost terminal signal is included in the received broadcast information message. In this case, it is determined whether a lost signal is recorded in the corresponding field by referring to a predetermined field in the broadcast information message. The missing signal recorded in the specific field may be in the form of a flag signal indicating two types of normal state and lost state.

When the loss signal is detected by the loss signal determination unit 1120, the server access processing unit 1130 performs a role of access processing to access the information protection operation server 2000 and perform information communication. The server connection processing unit 1130 is provided with an access address and an access protocol to the information security operation server 2000 to enable a smooth connection to the server during the connection processing.

The loss determination unit 1140 checks the database 2500 of the information protection operation server 2000 and checks whether the current terminal is in a lost state. That is, the loss determination unit 1140 checks whether the terminal is registered in the lost state in the operation server 2000 connected through the server connection processing unit 1130. In this case, when the corresponding terminal is registered in the lost state, it performs a role of informing the security processing unit 1150 to be described later.

If it is determined that the terminal is in a lost state, the security processing unit 1150 performs security processing on personal information stored in the terminal. That is, when the security processing unit 1150 confirms the loss state by the loss determination unit 1140, the security processing unit 1150 performs the personal information security processing according to a preset scenario.

The deletion process is a process of preventing the leakage of personal information by deleting the personal information 1210 stored in the storage module 1200 of the terminal. The backup process is a process of transferring personal information to the information protection operation server 2000 that is being accessed, and then deleting it to prevent leakage after information backup. The encryption process encrypts the personal information being stored in the storage module 1200 by receiving an encryption key from the information protection operation server 2000 being connected. Here, the encryption key may be stored in the terminal from the beginning. In addition, when the lost terminal is recovered, the decryption key corresponding to the encryption key is received from the operation server to restore the personal information data.

In addition, the lost location transmission process is a process of transmitting the current location information of the terminal to the server that is connected after protecting the personal information in the above security processing scenario. In addition, the peripheral information transmission process is a process of driving the camera of a terminal, photographing the surrounding environment, and transmitting it to the server which is connected. These processes are used to provide information that can recover lost terminals.

The storage module 1200 is a recording means capable of storing data in the terminal or storing various information. The personal information 1210 is stored and managed in the storage module 1200. Examples of the personal information 1210 stored in the terminal are personal identification information or financial information such as social security number, bank account number, password, phone book, call log, text message, schedule information, memo, photo data, music data, anniversary information, etc. Like information, information about all users who require confidentiality to others.

Referring to FIG. 9, in the method for providing a personal information protection service according to the second embodiment of the present invention, first, a procedure of receiving a loss report of a terminal from a customer who has lost the terminal is performed in the information protection operation server 2000. In this case, the loss protection report may be directly received from the customer in the information protection operation server, or the loss report information may be received from the customer center 3100 of the mobile communication system to process the loss receipt. In addition, the lost report can be received along with the information of the lost location or area information (S100).

Next, when the terminal loss report is received, a procedure of registering and storing the lost state of the terminal in the lost state information DB 2500 is performed. In this case, if lost area information or lost location information is received together, the location or area information is also registered and stored in the corresponding DB.

As described above, after the loss report, a procedure of registering a lost state and simultaneously extracting location information of the lost terminal is performed. At this time, the location information of the terminal is extracted by using the LBS system of the mobile communication system. Or, if the location information or area information of the lost terminal is registered in the lost state information DB 2500, the corresponding information is extracted and used.

A procedure for broadcasting a loss signal indicating a loss of a terminal to a region indicated by the extracted location information through a broadcast channel is performed. At this time, the broadcast information message including the lost signal is transmitted to a specific field previously promised to the base station corresponding to the region of the extracted lost terminal.

As such, when a broadcast including a loss signal is transmitted to a region where the terminal is lost, the mobile communication terminals located in the region receive the broadcast. Among the terminals receiving the broadcast, the terminals provided with the information protection means inquire the specific field promised in the received broadcast information message, confirm that the lost signal is recorded in the corresponding field, and return to the information protection operation server 2000. The connection procedure is in progress. That is, only the terminals operating with the information protection means may recognize the lost signal included in the broadcast information message, and the terminal which recognizes the connection may access the information protection operation server 2000 (S500).

The mobile communication terminals connected to the information protection operation server 2000 proceed with the procedure of checking the lost status information DB 2500 provided in the server to check the status. That is, it checks whether the lost state by querying the DB through its terminal identification information (S600).

If it is determined that the loss is not a lost state but a normal state, a procedure is performed to maintain the normal normal operation of the mobile communication terminal (S700, S750).

On the other hand, if it is confirmed that the state is lost, a procedure of activating the personal information security process is performed through the information protection means provided in the terminal. This is a procedure for allowing the own terminal to recognize the lost state and start the security process for the stored personal information.

When the personal information security processing is activated, the information security processing is performed to proceed the security processing of the stored personal information data according to a preset security processing scenario such as deletion of personal information, backup, encryption, etc. (S900).

Referring to the drawings, the procedure of performing the information protection process of the actual lost terminal will be described.

Here, in the present embodiment with reference to FIG. 10, it is assumed that terminal # 003 is a terminal which is provided with information protection means and is actually lost, and terminal # 002 is a terminal equipped with information protection means, and terminal # 001 is information protection. It is assumed that it is a general terminal without means.

First, a procedure of receiving a loss report of a terminal from the customer center 3100 to the information protection operation server 2000 (hereinafter, referred to as a server) is performed. At this time, the loss report may be received directly from the customer to the server.

The server receives the loss report and registers the lost state of the terminal in the lost state information DB 2500. (2)

At the same time, a procedure of extracting the location information of the lost terminal is performed. In this case, when receiving a report, the lost location and region information input by the customer may be used, or the location information may be extracted through the LBS system of the mobile communication system.

When the location information is extracted, a procedure of selecting a base station capable of transmitting a broadcast by covering a corresponding area is performed. In the example of the figure, base station A is selected. (4)

When the base station is selected, a procedure of requesting to transmit a broadcast by carrying a missing signal on the broadcast information message broadcasted to the corresponding base station A is performed.

In step B, the base station A selected according to the broadcast request including the missing signal is broadcast.

The broadcast transmitted from the base station A is received by the terminals (terminal # 001, terminal # 002, terminal # 003) located around the base station A. Among these, only the terminal # 002 which is a terminal provided with the information protection means and the terminal # 003 read and recognize a lost signal. That is, the terminal # 001 without the information protection means receives the broadcast but cannot recognize the lost signal included in the broadcast.

The terminals (terminals # 002 and # 003) that recognize the lost signal are connected to the server.

After accessing the server, the lost state information DB 2500 is queried to check whether its own terminal is in a lost state.

As a result of the lost state check, the terminal # 002 is confirmed to be in a normal state, and the terminal # 003 performs a procedure of recognizing that the lost state.

Recognizing the lost state, the terminal # 003 activates the personal information security processing through the information protection means, and proceeds to perform the personal information security processing according to the security processing scenario.

Although the present invention has been described above by means of limited embodiments and drawings, the present invention is not limited thereto and will be described below by the person skilled in the art to which the present invention pertains. Of course, various modifications and variations are possible within the scope of the claims.

The present invention can be applied to the security processing technology of the personal information and its service to prevent the personal information stored in the lost personal portable communication terminal from being leaked by another person.

Claims

In order to prevent leakage of personal information due to theft or loss of a mobile communication terminal, a method of providing a security processing service for protecting personal information stored in the terminal,

(a) driving the information protection means provided in the mobile communication terminal to access the information protection operation server in which the status information of the mobile communication terminal is registered;

(b) checking, by the information security operating server, whether the terminal is lost or not; And

(c) if it is determined that the terminal is in a lost state, performing a preset personal information security process on the information protection means; providing a personal information protection service of a mobile communication terminal.
The method of claim 1,

Before step (a) above,

And registering a lost state in the information protection operation server by receiving a terminal theft or a loss report of a mobile communication terminal using customer.
The method of claim 1,

The information protection means provided in the mobile communication terminal is always driven in conjunction with the driving of the mobile communication terminal personal information protection service providing method of the mobile communication terminal.
The method of claim 3, wherein

The information protection means is a personal information protection service providing method of a mobile communication terminal, characterized in that driven by a standby screen service that is always running on the mobile communication terminal.
The method of claim 1,

In step (a),

And the information protection means periodically connects to the information protection operation server.
The method of claim 1,

In step (a),

The information protection means is a personal information protection service providing method of a mobile communication terminal, characterized in that always connected to the information protection operating server.
The method of claim 1,

In step (a),

When the connection to the information security operation server fails or is unable to access, the process of providing a personal information protection service of a mobile communication terminal, characterized in that the processing to limit the use of the mobile communication terminal.
The method of claim 1,

In step (c),

The preset personal information security process,

Personal information protection service providing method of a mobile communication terminal, characterized in that the deletion process of the personal information stored in the storage means of the terminal.
The method of claim 1,

In step (c),

The preset personal information security process,

Personal information protection service providing method of a mobile communication terminal, characterized in that the process of transmitting and deleting the personal information stored in the storage means of the terminal to the connected information protection operating server.
The method of claim 1,

In step (c),

The preset personal information security process,

The personal information protection service providing method of the mobile communication terminal, characterized in that the process of encrypting and re-saving the personal information stored in the storage means of the terminal with the encryption key received from the connected information protection operating server.
In order to prevent leakage of personal information due to theft or loss of a mobile communication terminal, a method of providing a security processing service for protecting personal information stored in the terminal,

(a) theft or loss report acceptance step of the mobile communication terminal;

(b) broadcasting a terminal loss signal through a broadcasting channel in an area in which the reported loss of mobile communication terminal is located;

(c) a mobile communication terminal receiving a broadcast including the terminal loss signal, accessing an information protection operating server in which the loss status information of the mobile communication terminal is registered; And

(d) checking, by the information security operating server, whether the terminal is lost or not, and if it is determined that the terminal is in a lost state, performing a preset personal information security process on the information protection means provided in the terminal; Method of providing a personal information protection service of the mobile communication terminal.
The method of claim 11,

Step (b) is,

(1) extracting location information of the mobile communication terminal notified of the loss; And

(2) broadcasting a lost signal of a terminal through a broadcast channel in a region corresponding to the extracted location information of the terminal; providing a personal information protection service of a mobile communication terminal.
The method of claim 11,

Step (b) is,

(1) extracting terminal lost area information received together with the loss report; And

(2) broadcasting a lost signal of a terminal through a broadcast channel in a region corresponding to the extracted lost region information.
The method of claim 11,

Step (b) is,

(1) selecting a base station in an area in which the reported loss of mobile communication terminal is located; And

(2) controlling to include the terminal loss signal in the information broadcasted through the broadcast channel in the selected base station to control the broadcast.
The method of claim 11,

In step (b),

The terminal loss signal, the personal information protection service providing method of a mobile communication terminal, characterized in that included in the non-reserved specific field of the broadcast information message of the broadcast channel.
The method of claim 15,

And said specific field is a field promised with a mobile communication terminal equipped with information protection means.
The method of claim 16,

Step (c) is,

(c-1) receiving the broadcast information from a mobile communication terminal which is provided with information protection means;

(c-2) confirming a specific field promised in the received broadcast information message; And

(c-3) when the terminal loss information is included as a result of the check, connecting to the information protection operating server where the status information of the mobile communication terminal is registered; personal information protection service of the mobile communication terminal, comprising: How to Provide.
The method of claim 11,

In step (a),

When the report of theft or loss is received, the personal information protection service providing method of the mobile communication terminal, characterized in that the terminal is registered in the information protection operation server.
The method of claim 11,

In step (d),

The preset personal information security process,

Personal information protection service providing method of a mobile communication terminal, characterized in that the deletion process of the personal information stored in the storage means of the terminal.
The method of claim 11,

In step (d),

The preset personal information security process,

Personal information protection service providing method of a mobile communication terminal, characterized in that the process of transmitting and deleting the personal information stored in the storage means of the terminal to the connected information protection operating server.
The method of claim 11,

In step (d),

The preset personal information security process,

The personal information protection service providing method of the mobile communication terminal, characterized in that the process of encrypting and re-saving the personal information stored in the storage means of the terminal with the encryption key received from the connected information protection operating server.
In order to prevent the leakage of personal information due to theft or loss of the mobile communication terminal, a system for providing a security processing service to protect the personal information stored in the terminal,

An information protection operating server in which the status information of whether the mobile communication terminal is lost is registered; And

And a mobile communication terminal provided with information protection means for accessing the information protection operating server to check whether the terminal is in a lost state, and performing a preset personal information security process when the terminal is confirmed to be in a lost state. Personal information protection service providing system of a mobile communication terminal.
In order to prevent the leakage of personal information due to theft or loss of the mobile communication terminal, a system for providing a security processing service to protect the personal information stored in the terminal,

Receives the report of theft or loss of the mobile communication terminal, registers and manages the status information of the loss status of the mobile communication terminal, and protects the information to control to broadcast the terminal loss signal through a broadcast channel in the area where the reported mobile communication terminal is located An operational server; And

Upon receiving a broadcast including a terminal loss signal through a broadcast channel, the terminal accesses the information security operation server to check whether the terminal is lost or not and performs a preset personal information security process when the terminal is confirmed to be in a lost state. Mobile communication terminal with an information protection means; providing a personal information protection service system of a mobile communication terminal.
The method according to claim 1 or 11, wherein

And the personal information security process is an initialization process of a mobile communication terminal.