WO2013056522A1

WO2013056522A1 - Device and method for realizing network-locking of mobile terminal

Info

Publication number: WO2013056522A1
Application number: PCT/CN2012/070498
Authority: WO
Inventors: 林华; 何经纬
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-10-20
Filing date: 2012-01-17
Publication date: 2013-04-25
Also published as: CN102340768A

Abstract

Provided is a device for realizing network-locking of a mobile terminal. The device includes: a main chip of a mobile terminal, an encrypted chip and a function module of the mobile terminal. The encrypted chip is connected to the main chip of the mobile terminal and used for determining to cut off the communication between the main chip of the mobile terminal and the function module of the mobile terminal when the network currently used by the mobile terminal and the network stored thereby are different. At the same time disclosed is a method for realizing network-locking of a mobile terminal. By employing the device and method in the present invention, after the communication between the main chip of the mobile terminal and the function module of the mobile terminal is cut off, the user cannot use the mobile terminal again, whereby network-locking can be realized effectively, improving the security of the mobile terminal and protecting the rights and interests of the operators.

Description

Device and method for realizing mobile terminal lock network

The present invention relates to security technologies in the field of communications, and in particular, to an apparatus and method for implementing a mobile terminal lock network. Background technique

At present, with the rapid development of the mobile terminal market, mobile terminals have become an indispensable tool for most people, and the market for mobile terminals is booming.

In the market competition, in order to attract more customers, each operator generally uses subsidies or even sends mobile terminals to win customers. In this case, in order to ultimately protect the interests of operators, software protection is generally adopted. And the way of locking the network, so that mobile phone users can not be used on the network of other operators. Among them, the methods of adopting software protection and locking network mainly include two types. One method is that the mobile phone manufacturer adopts software encryption, for example, using some encryption algorithm pairs similar to Message Digest Algorithm MD5 (MD5). The program encrypts. This kind of algorithm consumes more resources and needs to be encrypted and decrypted every time. This will take too long. Another method is: Combine with mobile platforms such as Qualcomm platform to carry out software. Protection and lock network, specifically, the chip serial number (chipid) of the main chip and the chipid of the flash memory (Flash) are bound, and a ciphertext is encrypted and placed in the flash. This method needs to be verified every time the computer is turned on. Similarly, it can also take too long. Regarding the method of software protection and lock network, no matter how powerful the software encryption algorithm is, there will be loopholes, and if there are loopholes, it will be cracked by hackers.

Therefore, in order to solve the above problem, a technical solution using a hardware lock network is proposed. Specifically, an encryption chip is added to the mobile phone motherboard to monitor the central processing unit (CPU, Central Processing Unit) of the mobile phone and the user. Module (SIM, Subscriber Identity Module) Card communication, thus ensuring the realization of the lock network. However, this method of hardware lock network still has certain risks, for example: The hacker can directly remove the encryption chip, which will cause the entire lock network system to fail, thereby failing to effectively lock the network. Summary of the invention

In view of this, the main object of the present invention is to provide an apparatus and method for implementing a mobile terminal lock network, which can effectively implement a lock network and improve the security of the mobile terminal.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

The present invention provides a device for implementing a network lock of a mobile terminal, the device comprising: a main chip of the mobile terminal and a function module of the mobile terminal, the device further comprising: an encryption chip;

The encryption chip is connected to the main chip of the mobile terminal, and is configured to cut off a function of the main chip of the mobile terminal and the mobile terminal when the network currently used by the mobile terminal is different from the network saved by the mobile terminal. Communication between.

In the above solution, the encryption chip is further configured to perform a network lock operation when determining that the network currently used by the mobile terminal is different from the network that is saved by itself.

In the above solution, the main chip of the mobile terminal is further configured to provide the encryption chip with the network currently used by the mobile terminal.

In the above solution, the device further includes: a SIM card;

The main chip of the mobile terminal is further configured to provide a network for the encryption chip to be used by the mobile terminal; or

The SIM card is configured to provide the encryption chip with a network currently used by the mobile terminal.

In the above solution, the device further includes: a switch disposed between the main chip of the mobile terminal and a functional module of the mobile terminal, wherein a control end of the switch is connected to a pin of the encryption chip;

When the communication between the main chip of the mobile terminal and the functional module of the mobile terminal is cut off, the encryption chip is specifically configured to: close the switch. In the above solution, the switch is: a field effect transistor, or a triode, or an analog switch, or a relay.

In the above solution, the pin of the encryption chip is connected to the function module of the mobile terminal; when the communication between the main chip of the mobile terminal and the function module of the mobile terminal is disconnected, the encryption chip is specifically used for: The function module of the mobile terminal is closed.

The present invention also provides a method for implementing a mobile terminal lock network, the method comprising: adding an encryption chip to the mobile terminal;

When it is determined that the network currently used by the mobile terminal is different from the network saved by itself, the encryption chip cuts off communication between the main chip of the mobile terminal and the functional module of the mobile terminal.

In the above solution, when determining that the network currently used by the mobile terminal is not the same as the network that is saved by itself, the method further includes:

The encryption chip performs a lock network operation.

In the foregoing solution, before determining that the network currently used by the mobile terminal is different from the network saved by itself, the method further includes:

The encryption chip acquires a network currently used by the mobile terminal to the SIM card of the mobile terminal or the SIM card of the mobile terminal.

In the above solution, the determining that the network currently used by the mobile terminal is different from the network saved by itself is:

The encryption chip determines that the current mobile country code (MCC, Mobile Country Code) of the mobile terminal is different from the MCC saved by itself; or

The encryption chip determines that the current mobile network code (MNC, Mobile Network Code) of the mobile terminal is different from the MNC saved by itself; or

The encryption chip determines that the current Mobile Subscriber Identification Number (IMSI) of the mobile terminal is different from the IMSI saved by itself. In the above solution, the communication between the main chip of the mobile terminal and the functional module of the mobile terminal is:

The encryption chip turns off a switch disposed between a main chip of the mobile terminal and a function module of the mobile terminal; or

The encryption chip turns off a functional module of the mobile terminal.

In the above solution, the switch that is disposed between the main chip of the mobile terminal and the functional module of the mobile terminal is:

Stopping powering the switch, or outputting a control signal to the switch to turn off the switch; the function module for turning off the mobile terminal is:

Stopping powering the function module of the mobile terminal or outputting a control signal to the function module of the mobile terminal to close the function module of the mobile terminal.

The device and the method for implementing the mobile terminal lock network provided by the present invention, the encryption chip determines that the network currently used by the mobile terminal is different from the network saved by itself, and disconnects the communication between the main chip of the mobile terminal and the functional module of the mobile terminal, and cuts off After the communication between the main chip of the mobile terminal and the functional module of the mobile terminal, the user can no longer use the mobile terminal, so that the lock network can be effectively implemented, the security of the mobile terminal is improved, and the rights of the operator are protected.

Further, when the encryption chip cuts off communication between the main chip of the mobile terminal and the functional module of the mobile terminal, the lock operation is further performed, so that the lock network can be further effectively realized.

After the encryption chip is removed or the power is turned off, since the communication between the main chip of the mobile terminal and the functional module of the mobile terminal is also cut off, the mobile terminal cannot work normally, and thus the lock network can be further effectively realized. DRAWINGS

1 is a schematic structural diagram of an apparatus for implementing a mobile terminal lock network according to the present invention;

2 is a schematic structural diagram of an apparatus for implementing a mobile terminal lock network according to Embodiment 1;

3 is a schematic structural diagram of an apparatus for implementing a mobile terminal lock network according to Embodiment 2; FIG. 4 is a schematic flowchart of a method for implementing a mobile terminal lock network according to the present invention. detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

The device for implementing the mobile terminal lock network is as shown in FIG. 1. The device includes: a main chip 11 of the mobile terminal, an encryption chip 12, and a function module 13 of the mobile terminal;

The encryption chip 12 is connected to the main chip 11 of the mobile terminal, and is configured to cut off communication between the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal when the network currently used by the mobile terminal is different from the network saved by itself. .

The encryption chip 12 is further configured to perform a network lock operation when determining that the network currently used by the mobile terminal is different from the network that is saved by itself.

Before performing the lock operation, the encryption chip 12 can communicate with the main chip 11 of the mobile terminal by using an interface existing on the mobile terminal to acquire the network currently used by the mobile terminal; the encryption chip 12 can also be disposed on the main chip of the mobile terminal. 11 and the SIM card of the mobile terminal, if necessary, the network currently used by the mobile terminal can be obtained from the main chip 11 of the mobile terminal or the network currently used by the mobile terminal can be obtained from the SIM card; Yes: General Purpose Input/Output (GPIO), 2-wire serial bus (I2C, Inter-Integrated Circuit), parallel port, or serial port.

In order to switch the communication between the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal, a switch may be added to the mobile terminal, the switch being disposed between the main chip 11 of the mobile terminal and the functional module 13 of the mobile terminal. The control terminal of the switch is connected to the pin of the encryption chip 12. In this case, when the encryption chip 12 determines that the network currently used by the mobile terminal is different from the network saved by itself, the switch is turned off, thereby cutting off the master of the mobile terminal. The communication between the chip 11 and the function module 13 of the mobile terminal, in particular, the encryption chip 12 can be turned off by a power line or a control line, that is, to stop powering the switch, or output a control signal to turn off the switch; or, the encryption can be performed The pin of the chip 13 is connected to the functional module 13 of the mobile terminal, in which case When the encryption chip 12 determines that the network currently used by the mobile terminal is different from the network saved by itself, the function module 13 of the mobile terminal is closed, thereby disconnecting the communication between the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal, specifically The encryption module 12 can be used to shut down the function module 13 of the mobile terminal through a power line or a control line, that is, to stop powering the function module 13 of the mobile terminal, or output a control signal to turn off the function module 13 of the mobile terminal; wherein, the switch Specifically, it can be: a field effect transistor, a triode, an analog switch, or a relay.

As can be seen from the above description, the encryption chip 12 of the present invention has a function of outputting power and an interface in addition to the function of the lock network. The interface may specifically be a GPIO or the like.

In order to realize the function of the encryption chip 12, the motherboard of the mobile terminal is required to provide power supply for the encryption chip 12. When the power supply is selected, it is necessary to ensure that the function of the encryption chip 12 is implemented earlier than the time of implementation of other modules of the mobile terminal. In other words, it is necessary to ensure that the power output of the encryption chip 12 is earlier than the power output of other modules of the mobile terminal, so that the normal operation timing of the mobile terminal can be ensured. Therefore, the power supply for the encryption chip is required to be powered on. The power supply may be a power supply that supplies power to the Flash.

The function module 13 of the mobile terminal includes: Flash, liquid crystal display (LCD), keyboard, audio module, etc.; the specific composition of the function module 13 of the mobile terminal is common knowledge of those skilled in the art, and is not listed here. .

The present invention will be further described in detail below with reference to the embodiments.

Embodiment 1

The device for implementing the mobile terminal lock network is as shown in FIG. 2. The device includes: a main chip 11 of the mobile terminal, an encryption chip 12, a function module 13 of the mobile terminal, and an analog switch 24;

The main chip 11 of the mobile terminal is connected to the encryption chip 12, and the connection line between the two comprises: a data line, an address line and a control line; the main chip 11 of the mobile terminal is connected to the function module 13 of the mobile terminal through the analog switch 24. , how many functional modules are there, and how many simulations are there? The switch 24, in other words, each functional module is connected to the main chip 11 of the mobile terminal through an analog switch 24, on the connection side of the main chip 11 and the analog switch 24 of the mobile terminal, according to different functional modules, the connecting line For example, for Flash, the connection line between the main chip 11 of the mobile terminal and the analog switch 24 includes: a data line, an address line, and a control line. For the LCD, the main chip 11 of the mobile terminal and the simulation The connection line between the switch 24 includes: a data line, an address line, and a control line. For the keyboard, the connection line between the main chip 11 and the analog switch 24 of the mobile terminal includes: a row and column scan line, and for the audio module, the main body of the mobile terminal The connection line between the chip 11 and the analog switch 24 includes: an audio line, an address line, and a control line;

The control line and the power line of the encryption chip 12 are connected to the analog switch 24 for supplying power to the analog switch 24, and controlling the opening and closing of the analog switch 24;

The functional modules of the mobile terminal 13 include: i3⁄4sh, LCD, keyboard, audio module and other functional modules.

The workflow of the apparatus provided in this embodiment will be described in detail below.

After the mobile terminal is powered on, the mobile terminal system is initialized, and the encryption chip 12 starts to work. The encryption chip 12 communicates with the main chip 11 of the mobile terminal to acquire the network currently used by the mobile terminal, and saves the network currently used by the mobile terminal and itself. The network compares, when it is determined that the network currently used by the mobile terminal is the same as the network saved by itself, the analog switch 24 is powered, and the analog switch 24 is turned on, so that the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal communicate normally. The user normally uses the mobile terminal; when it is determined that the network currently used by the mobile terminal is different from the network saved by itself, the encryption chip 12 stops supplying power to the analog switch, or outputs a control signal to the analog switch to turn off the analog switch 24 or stop as an analog switch. The power is supplied 24, thereby disconnecting the communication between the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal, and the user can no longer use the mobile terminal.

In addition, after the encryption chip 12 is removed or the power is turned off, the analog switch 24 cannot work normally, so that the master chip 11 of the mobile terminal and the function module 13 of the mobile terminal cannot be performed. Communication, the user can no longer use the mobile terminal, thereby achieving the purpose of locking the network more effectively and protecting the rights and interests of the operator.

Here, it should be understood that when the switch is a field effect transistor, a triode or a relay, etc., the specific connection of the switch to the respective components is a conventional technical means by those skilled in the art.

Embodiment 2

In this embodiment, the device for locking the network of the mobile terminal is implemented. As shown in FIG. 3, the device includes: a main chip 11 of the mobile terminal, an encryption chip 12, and a function module 13 of the mobile terminal;

The main chip 11 of the mobile terminal is connected to the encryption chip 12, and the connection line between the two comprises: a data line, an address line and a control line; the main chip 11 of the mobile terminal is connected with the function module 13 of the mobile terminal, according to the function module The connection between the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal is also different. For example, the connection line between the main chip 11 and the flash of the mobile terminal includes: a data line, an address The line and the control line, the connection line between the main chip 11 and the LCD of the mobile terminal includes: a data line, an address line, and a control line, and the connection line between the main chip 11 of the mobile terminal and the keyboard module includes: a row and column scan line, The connection line between the main chip 11 and the audio module of the mobile terminal includes: an audio line, an address line, and a control line; the control line and the power line of the encryption chip 12 are both connected to the function module 13 of the mobile terminal, and are used for moving The function module 13 of the terminal supplies power and controls the opening and closing of the function module 13 of the mobile terminal.

After the mobile terminal is powered on, the mobile terminal system is initialized, and the encryption chip 12 starts to work. The encryption chip 12 communicates with the main chip 11 of the mobile terminal to acquire the network currently used by the mobile terminal, and saves the network currently used by the mobile terminal and itself. The network compares, when it is determined that the network currently used by the mobile terminal is the same as the network saved by itself, the power module 13 of the mobile terminal is powered, and the function module 13 of the mobile terminal is opened, so that the main chip 11 of the mobile terminal and the mobile terminal The function module 13 communicates normally, the user normally uses the mobile terminal; when it is determined to move When the network currently used by the terminal is different from the network saved by itself, the encryption chip 12 stops supplying power to the function module 13 of the mobile terminal, or outputs a control signal to the function module 13 of the mobile terminal to close the function module 13 of the mobile terminal or stop The function module 13 of the mobile terminal supplies power, thereby disconnecting the communication between the master chip 11 of the mobile terminal and the function module 13 of the mobile terminal, and the user can no longer use the mobile terminal.

In addition, after the encryption chip 12 is removed or powered off, the function module 13 of the mobile terminal cannot work normally, so that communication between the main chip 11 of the mobile terminal and the function module 13 of the mobile terminal is impossible, and the user can no longer use the mobile terminal. Therefore, the purpose of the lock network is more effectively achieved, and the rights and interests of the operators are protected.

Based on the foregoing apparatus, the present invention further provides a method for implementing a network lock of a mobile terminal. As shown in FIG. 4, the method includes the following steps:

Step 400: Add an encryption chip to the mobile terminal;

Step 401: When it is determined that the network currently used by the mobile terminal is different from the network saved by itself, the encryption chip cuts off communication between the main chip of the mobile terminal and the functional module of the mobile terminal.

The method may further include: when determining that the network currently used by the mobile terminal is different from the network that is saved by itself;

The encryption chip performs a lock network operation.

Before determining that the network currently used by the mobile terminal is different from the network saved by itself, the method may further include:

The encryption chip acquires a network currently used by the mobile terminal to the SIM card of the master chip or the mobile terminal.

The determining that the network currently used by the mobile terminal is different from the network that is saved by the mobile terminal is specifically: the encryption chip determines that the current MCC of the mobile terminal is different from the MCC saved by itself; or

The encryption chip determines that the current MNC of the mobile terminal is different from the MNC saved by itself; or,

The encryption chip determines that the current IMSI of the mobile terminal is different from the IMSI saved by itself.

The communication between the main chip of the mobile terminal and the functional module of the mobile terminal is specifically:

The encryption chip turns off a functional module of the mobile terminal.

The switch that is disposed between the main chip of the mobile terminal and the function module of the mobile terminal is specifically:

Stopping power supply to the switch, or outputting a control signal to the switch to turn off the switch; the function module for turning off the mobile terminal is specifically:

Here, the specific processing for outputting the control signal to close the function module of the switch and the mobile terminal is a technical means for those skilled in the art, and details are not described herein again.

The software of the mobile terminal cannot modify the information in the encryption chip. When it is required to acquire the information in the encryption chip or the information in the main chip of the mobile terminal, the main chip and the computer of the encryption chip or the mobile terminal need to be passed. The communication interface is connected, and the computer can obtain the information in the encrypted information after being authenticated by the dongle; further, when it is required to write information in the encryption chip, or when the information in the encryption chip needs to be erased Authorization is required. In other words, the encryption chip can be erased and written to the information under the premise of authorization. The communication interface may specifically be: a universal serial bus (USB, Universal Serial BUS), or RS232, etc., and the dongle can be connected to the computer through the USB.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A device for implementing a mobile terminal lock network, the device comprising: a main chip of the mobile terminal and a function module of the mobile terminal, the device further comprising: an encryption chip; wherein the encryption chip, The main chip of the mobile terminal is connected to determine that the network currently used by the mobile terminal is different from the network saved by itself, and disconnects the communication between the main chip of the mobile terminal and the functional module of the mobile terminal.

The device according to claim 1, wherein the encryption chip is further configured to perform a network lock operation when determining that the network currently used by the mobile terminal is different from the network that is saved by itself.

The device according to claim 1, wherein the main chip of the mobile terminal is further configured to provide a network for the encryption chip to be used by the mobile terminal.

4. The apparatus according to claim 1, wherein the apparatus further comprises: a subscriber identity module (SIM) card;

The device according to any one of claims 1 to 4, further comprising: a switch disposed between a main chip of the mobile terminal and a functional module of the mobile terminal, the switch The control terminal is connected to the pin of the encryption chip;

When the communication between the main chip of the mobile terminal and the functional module of the mobile terminal is cut off, the encryption chip is specifically configured to: close the switch.

6. Apparatus according to claim 5, wherein the switch is: a field effect transistor, or a triode, or an analog switch, or a relay.

The device according to any one of claims 1 to 4, wherein a pin of the encryption chip is connected to a function module of the mobile terminal; When the communication between the main chip of the mobile terminal and the function module of the mobile terminal is cut off, the encryption chip is specifically configured to: close the function module of the mobile terminal.

A method for implementing a mobile terminal lock network, the method comprising: adding an encryption chip to the mobile terminal;

The method according to claim 8, wherein when determining that the network currently used by the mobile terminal is different from the network that is saved by itself, the method further includes:

The encryption chip performs a lock network operation.

The method according to claim 8, wherein before determining that the network currently used by the mobile terminal is different from the network saved by itself, the method further includes:

The method according to claim 8, 9 or 10, wherein the determining that the network currently used by the mobile terminal is different from the network that is saved by itself is:

The encryption chip determines that the current mobile country number (MCC) of the mobile terminal is different from the MCC saved by itself; or

The encryption chip determines that the current mobile network number (MNC) of the mobile terminal is different from the MNC saved by itself; or

The encryption chip determines that the current International Mobile Subscriber Identity (IMSI) of the mobile terminal is different from the IMSI saved by itself.

The method according to claim 8, 9 or 10, wherein the communication between the main chip of the mobile terminal and the functional module of the mobile terminal is:

The encryption chip turns off a switch disposed between a main chip of the mobile terminal and a functional module of the mobile terminal; or The encryption chip turns off a functional module of the mobile terminal.

The method according to claim 12, wherein the switching between the main chip of the mobile terminal and the functional module of the mobile terminal is: