WO2016082394A1

WO2016082394A1 - Method for realizing locking of subscriber identity module card and mobile terminal

Info

Publication number: WO2016082394A1
Application number: PCT/CN2015/075095
Authority: WO
Inventors: 王徐州
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-11-24
Filing date: 2015-03-26
Publication date: 2016-06-02
Also published as: CN105704704A

Abstract

Disclosed is a method for realizing locking of a subscriber identity module card. The method comprises: when a first subscriber identity module card of a user identity module is inserted into a mobile terminal for the first time, obtaining first verification information, writing the first verification information into a switch control chip of the subscriber identity module card, controlling the switch control chip of the subscriber identity module card to be conducted at the same time, and supplying power to the first subscriber identity module card; when a second subscriber identity module card is inserted into the mobile terminal, acquiring second verification information and reading the first verification information from the switch control chip of the subscriber identity module card, and when the second verification information is inconsistent with the first verification information, controlling the switch control chip of the subscriber identity module card to be disconnected so as to switch off the power supply of the second subscriber identity module card, and locking the second subscriber identity module card. Also disclosed is a mobile terminal for realizing the locking of the subscriber identity module card.

Description

Method for realizing user identification card locking and mobile terminal

Technical field

The present invention relates to the field of mobile communications, and in particular, to a method and a mobile terminal for implementing user identification card locking.

Background technique

With the rapid development of information technology and mobile communication technology, the communication field has quickly stepped into the fourth-generation mobile communication technology stage, referred to as 4G. The mainstream mobile terminal products in the current market, such as smart phones and PADs, all support the 4G frequency band as a standard configuration. While ensuring the quality of voice calls, the uplink data rate of the terminal products is greatly improved, and the user experience satisfaction is greatly improved.

In addition to the wireless local area network (WIFI, Wireless Fidelity) access method, the mobile terminal generally needs to be inserted into the operator's user identification card to communicate normally. The user identification card, such as a SIM (Subscriber Identity Module) card, a UIM (User Identity Module) card, etc. . The subscriber identity card is provided by the operator and is used by the terminal to enable paid access to the mobile operator network.

At present, most smartphones on the market (mobile terminals include, but are not limited to, smart phones, uFi, PAD, USB Dongle, etc., followed by smart phones as an example), for the switching of different numbers of user identification cards issued by operators There is almost no limit. Some smart phones can set a password for switching different user identification cards or set a password through an application (APP, Application), so that a simple user identification card can be locked, but this method is a software encryption method, and the user can flash or decrypt the device. Software and other methods are easier to crack, and cannot meet user requirements in terms of product safety and reliability.

Summary of the invention

In order to solve the existing technical problems, an embodiment of the present invention provides a method for implementing user identification card locking and a mobile terminal.

The embodiment of the invention provides a method for implementing user identification card locking, the method comprising:

When the first user identification module user identification card is inserted for the first time in the mobile terminal, the first verification information is acquired, and the first verification information is written into the user identification card switch control chip, and the user identification card switch control chip is controlled to be turned on. Supplying power to the first user identification card;

When the second user identification card is inserted into the mobile terminal, acquiring second verification information, and reading the first verification information from the user identification card switch control chip, where the second verification information and the first When the verification information does not match, the user identification card switch control chip is turned off to turn off the power of the second user identification card, and the second user identification card is locked.

When the first user identification card is inserted for the first time in the mobile terminal and the second user identification card is inserted into the mobile terminal, the user identification card switch control chip is disconnected by default.

The method further includes: before the obtaining the first verification information, the method further includes:

Prompting whether to enable the hardware lock user identification card function, if yes, acquiring the first verification information; if no, controlling the user identification card switch control chip to be turned on, and detecting whether the first user identification card is valid, If invalid, the user identification card switch control chip is disconnected, and the mobile terminal enters the cardless operation mode. If it is valid, the control user identification card switch control chip remains conductive, and the mobile terminal recognizes the card operation.

The first verification information is a first user identification card activation password and a first user identification card number, and the second verification information is a second user identification card activation password and a second user identification card number.

The obtaining the first verification information, and writing the first verification information to the user identification card switch control chip, includes:

Obtaining a set first user identification card opening password, controlling the user identification card switch control chip to be turned on, and detecting whether the first user identification card is valid; if valid, controlling the user identification card switch control chip to maintain Turning on, and reading the first user identification card number of the first user identification card;

The obtained first user identification card opening password and the first user identification card number are written into the user identification card switch control chip.

The obtaining the second verification information, and reading the first verification information from the user identification card switch control chip, and when the second verification information does not match the first verification information, controlling the The subscriber identity card switch control chip is disconnected to turn off the power of the second subscriber identity card, including:

Obtaining an input second user identification card opening password, and reading the first user identification card opening password from the user identification card switch control chip, the second user identification card opening password and the first user identification When the card opening password does not match, the input second user identification card number is obtained, and the first user identification card number is read from the user identification card switch control chip, the second user identification card number and the first user identification When the card number does not match, the user identification card switch control chip is controlled to be turned off to turn off the power of the second user identification card.

The method further includes: when the second user identification card opening password is consistent with the first user identification card opening password, or when the second user identification card number is consistent with the first user identification card number, the method further comprises:

Controlling the user identification card switch control chip to be turned on, and detecting whether the second user identification card is valid. If invalid, controlling the user identification card switch control chip to be disconnected, and the mobile terminal enters a cardless operation mode; if valid, The user identification card switch control chip is controlled to be turned on, and the mobile terminal recognizes the card operation.

The first verification information is a first user identification card opening password, and the second verification information is a second user identification card opening password.

The first verification information is obtained, and the first verification information is written into the user identification card switch control chip, including:

Obtaining a set first user identification card opening password, controlling the user identification card switch control chip to be turned on, and detecting whether the first user identification card is valid; if valid, controlling the user identification card switch control chip to maintain Turning on, the acquired first user identification card open password is written into the user identification card switch control chip.

Wherein the obtaining the second verification information and controlling the chip from the user identification card switch Reading the first verification information, when the second verification information does not match the first verification information, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, include:

Obtaining an input second user identification card opening password, and reading the first user identification card opening password from the user identification card switch control chip, the second user identification card opening password and the first user identification When the card opening password does not match, the user identification card switch control chip is controlled to be turned off to turn off the power of the second user identification card.

The method further includes: when the second user identification card opening password is consistent with the first user identification card opening password, the method further includes:

An embodiment of the present invention provides a mobile terminal, including a baseband processing chip and a user identification module user identification card switch control chip, where

The baseband processing chip is configured to acquire first verification information when the first user identification card is first inserted in the mobile terminal, and write the first verification information into the user identification card switch control chip, and simultaneously control The user identification card switch control chip is turned on to supply power to the first user identification card;

The baseband processing chip is further configured to: when the second user identification card is inserted in the mobile terminal, acquire second verification information, and read the first verification information from the user identification card switch control chip, where When the second verification information does not match the first verification information, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, and the second user identification card is locked;

The user identification card switch control chip is configured to store the first verification information; and is further configured to be turned on or off according to control of the baseband processing chip.

The user identification card switch control chip includes: a switch control unit, a power reset unit, a communication interface control unit, and a storage unit; wherein:

The power reset unit is respectively connected to the switch control unit and the communication interface control unit, and is configured to provide power and reset functions to the switch control unit and the communication interface control unit according to the control signal of the baseband processing chip;

a switch control unit configured to be turned on or off according to a control signal of the baseband processing chip, and to provide a power supply output by the baseband processing chip to a user identification card when turned on, and to turn off the The baseband processing chip outputs power to the user identification card;

The communication interface control unit is configured to provide a baseband processing chip with a communication interface for writing or reading data to the storage unit, the communication interface being connected to a corresponding pin of the baseband processing chip; Describe the first verification information;

The storage unit is configured to store the first verification information.

Wherein, when the first user identification card is inserted for the first time in the mobile terminal, and the second user identification card is inserted into the mobile terminal, the switch control unit defaults to being disconnected.

The baseband processing chip is further configured to prompt whether to enable the hardware lock user identification card function before acquiring the first verification information, and if yes, obtain the first verification information; if no, control The switch control unit is turned on, and detects whether the first user identification card is valid. If it is invalid, the switch control unit is controlled to be disconnected, the mobile terminal enters a cardless operation mode, and if valid, the switch control unit is controlled to remain Turn on, the mobile terminal knows the card operation.

The baseband processing chip is further configured to acquire a set first user identification card open password, control the switch control unit to be turned on, and detect whether the first user identification card is valid; if valid, the control center The switch control unit remains turned on, and reads the first user identification card number of the first user identification card; and writes the acquired first user identification card open password and the first user identification card number into the storage unit.

The baseband processing chip is further configured to obtain an input second user identification card open password, and read the first user identification card open password from the storage unit, and the second user identification card opens a password. Obtaining the input second user identification card number when the first user identification card opening password does not match, and reading the first user identification card number from the storage unit, the second user identification card number and the first When a user identification card number does not match, the switch control unit is controlled to be turned off to turn off the power of the second user identification card.

When the second user identification card opening password matches the first user identification card opening password, or when the second user identification card number matches the first user identification card number,

The baseband processing chip is further configured to control the switch control unit to be turned on, and detect whether the second user identification card is valid, and if not, control the switch control unit to be disconnected, and the mobile terminal enters a cardless operation mode; If it is valid, the switch control unit is kept turned on, and the mobile terminal recognizes the card operation.

The baseband processing chip is further configured to acquire a set first user identification card open password, control the switch control unit to be turned on, and detect whether the first user identification card is valid; if valid, the control center The switch control unit remains conductive, and the acquired first user identification card open password is written into the storage unit.

The baseband processing chip is further configured to obtain an input second user identification card open password, and read the first user identification card open password from the storage unit, and the second user identification card opens a password. When the first user identification card opening password does not match, the control switch control unit is turned off to turn off the power of the second user identification card.

Wherein, when the second user identification card opening password matches the first user identification card opening password,

The baseband processing chip is further configured to control the switch control unit to be turned on, and detect whether the second user identification card is valid, and if not, control the switch control unit to be disconnected, move The terminal enters the cardless operation mode; if it is valid, the switch control unit is kept turned on, and the mobile terminal recognizes the card operation.

A method for implementing user identification card locking and a mobile terminal provided by the embodiment of the present invention are provided with a special switch chip for controlling the power on and off of the user identification card, and also storing the verification information of the user identification card. The chip is separately set up with the operating system of the mobile terminal, and then the switch chip is controlled by the baseband processing chip (operating system) to realize the function of controlling the locking of the user identification card by the hardware mode, and the security and reliability of the terminal are obtained. Great improvement.

DRAWINGS

1 is a schematic flowchart of a method for implementing user identification card locking according to Embodiment 1 of the present invention;

2 is a schematic structural diagram of a mobile terminal for implementing user identification card locking according to Embodiment 2 of the present invention;

3 is a schematic flowchart of a method for implementing user identification card locking according to Embodiment 3 of the present invention;

4 is a schematic diagram of a specific implementation process of step 301 according to Embodiment 3 of the present invention;

FIG. 5 is a schematic diagram of a specific implementation process of step 302 according to Embodiment 3 of the present invention;

6 is a schematic flowchart of a method for implementing user identification card locking according to Embodiment 7 of the present invention;

FIG. 7 is a schematic diagram of a specific implementation process of step 601 according to Embodiment 7 of the present invention;

FIG. 8 is a schematic diagram of a specific implementation process of step 602 according to Embodiment 7 of the present invention.

detailed description

The technical solutions of the present invention are further elaborated below in conjunction with the accompanying drawings and specific embodiments.

Embodiment 1

In order to improve the user security factor of the mobile terminal, the embodiment of the present invention provides a more reliable method for locking the user identification card by using a hardware control method. Based on the method, the mobile terminal obtained by illegal means is replaced. The user identification card can still be used normally. Can be effectively stopped. As shown in Figure 1, the method includes:

Step 101: When the first user identification card is inserted for the first time in the mobile terminal, the first verification information is acquired, and the first verification information is written into the user identification card switch control chip, and the user identification card switch control chip is controlled to be turned on. And supplying power to the first user identification card.

Step 102: When the second user identification card is inserted into the mobile terminal, acquiring second verification information, and reading the first verification information from the user identification card switch control chip, where the second verification information is When the first verification information does not match, the user identification card switch control chip is controlled to be turned off to turn off the power of the second user identification card, and the second user identification card is locked.

Embodiment 2

In order to implement the above method, it is necessary to improve the hardware of the mobile terminal. FIG. 2 is a schematic structural diagram of a mobile terminal according to an embodiment of the present invention. The hardware involved in the hardware control mode for locking the user identification card is highlighted, including: a baseband processing chip 10 and a subscriber identity card switch control chip 20.

The power supply VCC that supplies power to the user identification card is output from the baseband processing chip 10 via the subscriber identification card switch control chip 20 and then received by the subscriber identification card. It is noted that the electrical connection path of the power supply VCC is controlled by the subscriber identification card switch. The chip 20, so the interface between the baseband processing chip 10 and the subscriber identification card switch control chip 20 for the electrical connection of the power supply VCC, has electrical characteristics to meet the requirements of the IEC7816-3 standard.

The user identification card switch control chip 20 can be realized by a switch switch chip, and can also be a digital signal processor (DSP, Digital Signal Processor), a field-programmable gate array (FPGA), a RISC microprocessor (ARM). , Advanced RISC Machines) and other chips are implemented in combination with each other. The subscriber identity card switch control chip 20 includes a switch control unit 21, a power source reset unit 22, a communication interface control unit 23, and a storage unit 24.

The switch control unit 21 has a basic switch function for controlling the user identification card power supply VCC The communication interface control unit 23 and the storage unit 24 are configured to write/read verification information; the power reset module 22 is configured to provide power and reset functions to the user identification card switch control chip, in the embodiment of the present invention. Mainly to provide power and reset functions for the switch control unit 21 and the communication interface control unit 23.

When the baseband processing chip 10 outputs a control signal to turn on the switch control unit 21, the power source VCC can be input to the user identification card to supply power thereto. Conversely, when the baseband processing chip 10 outputs a control signal to turn off the switch control unit 21, the power source If the VCC cannot be input to the user identification card, the user identification card cannot be used, that is, locked. The storage unit 24 is configured to store the above-described verification information, and the baseband processing chip 10 writes the above-described verification information into the storage unit 24 through the communication interface control unit 23, and also reads the information from the storage unit 24 as needed. Here, the communication interface may be an Inter-Integrated Circuit (IIC), a Universal Asynchronous Receiver/Transmitter (UART), a Serial Peripheral Interface (SPI), etc., a user identification card. The communication interface of the switch control chip 20 is connected to the corresponding pin of the baseband processing chip 10.

The baseband processing chip 10 causes the power supply reset unit 22 to supply power and reset functions to the switch control unit 21 and the communication interface control unit 23 by transmitting a VDD signal and a RESET signal to the power supply reset unit 22.

The clock signal CLK, the data signal DATA, and the reset signal RST of the user identification card are directly connected by the baseband processing chip 10 and the user identification card. Thus, the baseband processing chip 10 can read the corresponding data of the user identification card, and realize the user identification card. Identification.

In the method for implementing the user identification card locking provided in the above first embodiment, the functions of each module in FIG. 2 are as follows:

The baseband processing chip 10 is configured to acquire first authentication information when the first user identification card is inserted for the first time in the mobile terminal, and write the first verification information into the user identification card switch control chip 20, Simultaneously controlling the user identification card switch control chip 20 to be turned on to supply power to the first user identification card;

The baseband processing chip 10 is further configured to acquire second verification information when the second user identification card is inserted in the mobile terminal, and read the first verification information from the user identification card switch control chip 20. And controlling, when the second verification information does not match the first verification information, the user identification card switch control chip 20 to be turned off to turn off the power of the second user identification card, the second user identification card locking;

The subscriber identity card switch control chip 20 is configured to store the first verification information; and is further configured to be turned on or off according to control of the baseband processing chip 10.

In the subscriber identity card switch control chip 20:

The power reset unit 22 is connected to the switch control unit 21 and the communication interface control unit 23, respectively, and configured to provide power to the switch control unit 21 and the communication interface control unit 23 according to a control signal of the baseband processing chip 10. Reset function

The switch control unit 21 is configured to be turned on or off according to a control signal of the baseband processing chip 10, and when turned on, provide power outputted by the baseband processing chip 10 to a user identification card, when disconnected, Turning off the power output of the baseband processing chip 10 to the user identification card;

The communication interface control unit 23 is configured to provide a baseband processing chip 10 with a communication interface for writing or reading data to the storage unit 24, the communication interface being connected to a corresponding pin of the baseband processing chip 10; The data includes the first verification information;

The storage unit 24 is configured to store the first verification information.

The baseband processing chip 10 is further configured to prompt whether to enable the hardware lock user identification card function before acquiring the first verification information, and if yes, obtain the first verification information; if no, the control station The switch control unit 21 is turned on, and detects whether the first subscriber identity card is valid. If it is invalid, the switch control unit 21 is controlled to be disconnected, the mobile terminal enters a cardless operation mode, and if valid, the switch control unit is controlled. 21 keeps on, and the mobile terminal knows the card to run.

Embodiment 3

The first verification information is a first user identification card activation password and a first user identification card number, The second verification information is a second user identification card activation password and a second user identification card number. In this case, the method for implementing the locking of the user identification card provided by the embodiment of the present invention, as shown in FIG. 3, includes:

Step 301: When the first user identification card is inserted for the first time in the mobile terminal, the first user identification card opening password and the first user identification card number of the first user identification card are obtained, and the first user identification card is obtained. The opening password and the first user identification card number are written into the subscriber identity card switch control chip, and the user identification card switch control chip is controlled to be turned on to supply power to the first subscriber identity card.

Step 302: When the second user identification card is inserted into the mobile terminal, obtain the input second user identification card opening password, and read the first user identification card opening password from the user identification card switch control chip. When the second user identification card opening password does not match the first user identification card opening password, acquiring the input second user identification card number, and reading the first user identification from the user identification card switch control chip a card number, when the second user identification card number does not match the first user identification card number, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, the second user identification The card is locked.

The user identification card number, such as the IMSI number (International Mobile Subscriber Identification Number), is the only one of the IMSI number, which is unique to the user identification card provided by the operator, and is stored in the SIM card for distinguishing the mobile user. Valid information. The total length of the IMSI number does not exceed 15 digits and consists of 0 to 9 digits. MCC is the country code of the mobile user, which is 3 digits. The MCC of China is 460. The MNC is a mobile network number, which is composed of up to two digits. It is used to identify the mobile communication network to which the mobile user belongs, such as 00 code. Corresponding to segments 135 to 139; MSIN is a mobile subscriber identity code for identifying mobile users in a mobile communication network.

Embodiment 4

The method provided in the third embodiment will be described in detail below.

The implementation process of the above step 301 is as shown in FIG. 4, and includes:

Step 401: The mobile terminal is powered on after the first user identification card is inserted for the first time. At this time, the user identification card switch control chip is turned off by default.

The user identification card switch control chip involved in the embodiment of the present invention is turned off or turned on, that is, the switch control unit therein is turned off or turned on.

Step 402: The baseband processing chip prompts whether to enable the hardware lock user identification card function through the display screen of the mobile terminal. If not, step 403 is performed; if yes, step 404 is performed.

Step 403, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the first user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal enters the cardless operation mode. If valid, the subscriber identity card switch control chip remains conductive, and the mobile terminal normally recognizes the card operation.

Since the function of locking the user identification card is not turned on at the time of power-on, in order to facilitate the user to enable the hardware to lock the user identification card function, when the computer is turned on again, the mobile terminal will prompt again whether to enable the hardware to lock the user identification card function, of course, the user also This prompt can be skipped by setting to enable subsequent booting.

Step 404, the baseband processing chip prompts to input the first user identification card to open the password through the display screen of the mobile terminal (here, a heavy password or multiple passwords may be set as needed).

Step 405: The baseband processing chip determines whether the input first user identification card opening password is valid (you can set and save the password setting rule in advance, and determine whether the input password meets the password setting rule, if it is met, the description is valid, otherwise invalid) If yes, go to step 306. If it is invalid, go back to step 304 and re-enter the first user ID card to open the password.

Step 406, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the first user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal enters the cardless operation mode; If valid, the subscriber identity card switch control chip remains conductive. At this time, the baseband processing chip reads the first subscriber identification card number of the first subscriber identity card.

Step 407: The baseband processing chip writes the acquired first user identification card opening password and the first user identification card number into the user identification card switch control chip, and the mobile terminal normally recognizes the card operation.

It should be noted that the user identification card opening password and the user identification card number are stored in the user identification card switch control chip of the mobile terminal, and the operating system is based on the baseband processing chip, and the two are set in different hardware. .

In the above process, detecting the validity of the user identification card is one of the steps for the mobile terminal to recognize the user identification card. It should be noted that the switch control unit of the user identification card switch control chip defaults each time the mobile terminal is powered on. To disconnect, the premise that the user identification card is valid is that the switch control unit is controlled to be turned on by the baseband processing chip.

In addition, the reading of the subscriber identification card number by the baseband processing chip can be implemented in the network authentication process. Taking the reading of the IMSI number as an example, the network authentication process is: a) after the mobile terminal normally recognizes the user identification card, the IMSI number is read from the user identification card; b) the mobile terminal sends the IMSI number to the operator server, and the server will Feedback to the mobile phone a set of random numbers; c) the mobile terminal sends the received random number to the user identification card, the user identification card operation unit calculates the result SRES according to the random number and Ki, and feeds back to the mobile terminal; d) the mobile terminal will SRES Passed to the server, the server finds the Ki corresponding to the IMSI from the database (the user authentication key, that is, the customer identity authentication password, which can not be read in a specific area of the user identification card, a total of 32 bits), and uses the same random number The same algorithm calculates SRES' for comparison; e) if SRES=SRES', the authentication succeeds, otherwise the authentication fails.

Based on the network authentication process, it can be confirmed that the mobile terminal interacts with the user identification card through the serial data interaction command APDU (the maximum length of each APDU is 255 bytes, which is a single-thread execution mode, that is, the previous APDU command is not executed, and may not start. The next command) reads the unique IMSI number stored in the subscriber identity card. At the same time, the IMSI number is acquired by the baseband processing chip by using a data communication interface (for example, IIC), and the acquired IMSI number is written in the storage unit of the subscriber identity card switch control chip.

The implementation process of the above step 302 is as shown in FIG. 5, and includes:

Step 501: After the second user identification card is inserted into the mobile terminal, the second and subsequent steps are turned on. At this time, the user identification card switch control chip is turned off by default.

Step 502: The baseband processing chip prompts to input a second user identification card to open a password through a display screen of the mobile terminal.

According to the above-mentioned one-fold password or multiple passwords, when multiple passwords are set, a password can be randomly selected as the password for opening the user identification card, and the user is prompted to input, or the user can be required to input the set multiple passwords in order to open User identification card.

In step 503, it is determined whether the input second user identification card is enabled to pass the password. If yes, step 504 is performed; otherwise, step 505 is performed.

It should be noted that, when the second user identification card is input to open the password, the baseband processing chip synchronously reads the set first user identification card opening password from the storage unit of the user identification card switch control chip for comparison. If it matches, it passes; otherwise it does not pass.

Step 504, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the second user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal enters the cardless operation mode. If valid, the subscriber identity card switch control chip remains conductive, and the mobile terminal normally recognizes the card operation.

It should be noted that when the second subscriber identity card is valid, the baseband processing chip reads the second subscriber identity card number of the second subscriber identity card and writes it into the storage unit of the subscriber identity card switch control chip.

Step 505: The baseband processing chip prompts to input the second user identification card number of the second user identification card through the display screen of the mobile terminal, and reads the saved first user identification card number from the storage unit of the user identification card switch control chip.

Step 506: Determine whether the second user identification card number and the first user identification card number match. If they match, the information of the second user identification card is recorded in the storage unit, and the verification is passed, and step 507 is performed; if not, step 508 is performed. .

Step 507, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the second user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control. When the chip is disconnected, the mobile terminal enters the cardless operation mode; if it is valid, the user identification card switch control chip remains conductive, and the mobile terminal normally recognizes the card operation.

Step 508, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal user identification card function is locked (at the same time, the number of password input times can be reached through the display screen).

Embodiment 5

According to the third embodiment and the fourth embodiment of the present invention, the SIM card and the IMSI number are taken as an example. When the user A inserts the SIM card a into the mobile phone for the first time and selects to enable the hardware lock SIM card function, according to the system prompt, The user sets and inputs the SIM card activation password, and the system simultaneously reads the IMSI number of the SIM card a. The information is stored in the SIM card switch control chip of the mobile phone, and is set in different hardware with the operating system of the mobile phone. If the user B obtains the mobile phone of the user A by illegal means, when the user B inserts a new SIM card b into the mobile phone, first, the system prompts the user B to input the SIM card opening password, if the user B cannot know the above. If the set SIM card is turned on, the system will prompt the user B to input the IMSI number. If the user B cannot obtain the IMSI number of the SIM card a, but enters the IMSI number of the SIM card b, since the SIM card is not recorded in the mobile phone, The IMSI number, then the system will not supply power to the SIM card b, and at the same time, the system will prompt that the SIM card function of the mobile phone is locked, then the user B cannot use the mobile phone normally. Since the SIM card activation password and the IMSI number are stored in the hardware, that is, the SIM card switch control chip, and are independently set with the operating system of the mobile phone, even if the user B flashes the mobile phone or uses the decryption software, the password cannot be unlocked. Or erase the saved SIM card activation password and IMSI number from the phone. In this way, the safety factor and reliability of the user terminal are improved.

Embodiment 6

Corresponding to the method for implementing the user identification card locking provided by the third embodiment and the fourth embodiment (the first verification information is the first user identification card opening password and the first user identification card number, and the second verification information is the second user identification card opening password and Second user identification card number), for each mobile terminal shown in FIG. The functions of the hardware are described in detail, among them,

The baseband processing chip 10 is configured to acquire a first user identification card opening password and a first user identification card number of the first user identification card when the first user identification card is inserted for the first time in the mobile terminal. And writing the first user identification card opening password and the first user identification card number into the user identification card switch control chip 20, and controlling the user identification card switch control chip 20 to be turned on, and supplying power to the first user identification card. ;

The baseband processing chip 10 is further configured to acquire an input second user identification card activation password when the second user identification card is inserted in the mobile terminal, and read the information from the user identification card switch control chip 20. The first user identification card opens a password, and when the second user identification card opening password does not match the first user identification card opening password, the input second user identification card number is obtained, and the chip is controlled from the user identification card switch. The first user identification card number is read in 20, and when the second user identification card number does not match the first user identification card number, the user identification card switch control chip 20 is controlled to be turned off to turn off the second user. Identifying the power of the card, the second user identification card is locked;

The user identification card switch control chip 20 is configured to store the first user identification card open password and the first user identification card number; and is further configured to be turned on or off according to the control of the baseband processing chip 10.

among them:

The subscriber identity card switch control chip 20 includes: a switch control unit 21, a power source reset unit 22, a communication interface control unit 23, and a storage unit 24;

The power reset unit 24 is connected to the switch control unit 21 and the communication interface control unit 23, respectively, and configured to supply power to the switch control unit 21 and the communication interface control unit 23 according to a control signal of the baseband processing chip 10. Reset function

The communication interface control unit 23 is configured to provide a baseband processing chip 10 with a communication interface for writing or reading data to the storage unit 24, the communication interface being connected to a corresponding pin of the baseband processing chip 10; The data includes the first user identification card opening password and a first user identification card number;

The storage unit 24 is configured to store the first user identification card activation password and the first user identification card number.

When the first user identification card is inserted for the first time in the mobile terminal and the second user identification card is inserted into the mobile terminal, the switch control unit 21 is turned off by default.

The baseband processing chip 10 is further configured to acquire a set first user identification card opening password, control the switch control unit 21 to be turned on, and detect whether the first user identification card is valid; if valid, the control station The switch control unit 21 is kept turned on, and reads the first user identification card number of the first user identification card, and writes the acquired first user identification card open password and the first IMSI number into the storage unit 24 .

The baseband processing chip 10 is further configured to prompt whether to enable the hardware lock user identification card function before acquiring the set first user identification card opening password, and if yes, prompting to set and input the first user identification The card opens the password; if no, the switch control unit 21 is controlled to be turned on, and detects whether the first user identification card is valid. If it is invalid, the switch control unit 21 is controlled to be disconnected, and the mobile terminal enters no card operation. The mode, if valid, controls the switch control unit 21 to remain conductive, and the mobile terminal normally recognizes the card operation.

The baseband processing chip 10 is further configured to acquire an input second user identification card open password, and read the first user identification card open password from the storage unit 24, and the second user identification card opens a password. Acquiring the input second user identification card number when the first user identification card opening password does not match, and reading the first user identification card number from the storage unit 24, the second user identification card number and the When the first subscriber identification card number does not match, the switch control unit 21 is controlled to be turned off to turn off the power of the second subscriber identity card.

When the second user identification card opening password matches the first user identification card opening password, Alternatively, when the second user identification card number matches the first user identification card number, the baseband processing chip 10 is further configured to control the switch control unit 21 to be turned on, and detect whether the second user identification card is If it is invalid, the switch control unit 21 is controlled to be disconnected, and the mobile terminal enters the cardless operation mode; if it is valid, the switch control unit 21 is controlled to be turned on, and the mobile terminal normally recognizes the card operation.

Example 7

The first verification information is a first user identification card opening password, and the second verification information is a second user identification card opening password. In this case, the method for implementing the locking of the user identification card provided by the embodiment of the present invention, as shown in FIG. 6, includes:

Step 601: When the first user identification card is inserted for the first time in the mobile terminal, the first user identification card opening password is obtained, and the first user identification card opening password is written into the user identification card switch control chip, and the control center is controlled. The subscriber identity card switch control chip is turned on to supply power to the first subscriber identity card.

Step 602: When the second user identification card is inserted into the mobile terminal, the input second user identification card opening password is obtained, and the first user identification card opening password is read from the user identification card switch control chip. When the second user identification card opening password does not match the first user identification card opening password, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, the second The user identification card is locked.

Example eight

The method provided in the seventh embodiment will be described in detail below.

The implementation process of the above step 601 is as shown in FIG. 7, and includes:

Step 701: The mobile terminal is powered on after the first user identification card is inserted for the first time. At this time, the user identification card switch control chip is turned off by default.

The user identification card switch control chip involved in the embodiment of the present invention is disconnected or turned on, that is, Refers to the switch control unit in which it is disconnected or turned on.

Step 702: The baseband processing chip prompts whether to enable the hardware lock user identification card function through the display screen of the mobile terminal. If not, step 703 is performed; if yes, step 704 is performed.

Step 703, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the first user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal enters the cardless operation mode. If valid, the subscriber identity card switch control chip remains conductive, and the mobile terminal normally recognizes the card operation.

Step 704, the baseband processing chip prompts to input the first user identification card to open the password through the display screen of the mobile terminal (here, a heavy password or multiple passwords can be set as needed).

Step 705: The baseband processing chip determines whether the input first user identification card opening password is valid (you can preset and save the password setting rule to determine whether the input password meets the password setting rule, if it is met, the description is valid, otherwise invalid) If yes, go to step 706. If it is invalid, go back to step 704, that is, re-enter the first user ID card to open the password.

Step 706, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the first user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal enters the cardless operation mode; If valid, the subscriber identity card switch control chip remains on.

Step 707: The baseband processing chip writes the acquired first user identification card open password into the user identification card switch control chip, and the mobile terminal normally recognizes the card operation.

It should be noted that the user identification card activation password is stored in the user identification card switch control chip of the mobile terminal, and the operating system is based on the baseband processing chip, and the two are respectively disposed in different hardware.

The implementation process of the above step 602 is as shown in FIG. 8, and includes:

Step 801: After the second user identification card is inserted into the mobile terminal, the second and subsequent steps are turned on. At this time, the user identification card switch control chip is turned off by default.

Step 802: The baseband processing chip prompts to input a second user identification card to open a password through a display screen of the mobile terminal.

In step 803, it is determined whether the input second user identification card is enabled to pass the password. If yes, step 804 is performed; otherwise, step 805 is performed.

Step 804, the baseband processing chip controls the user identification card switch control chip to be turned on, and detects whether the second user identification card is valid. If invalid, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal enters the cardless operation mode. If valid, the subscriber identity card switch control chip remains conductive, and the mobile terminal normally recognizes the card operation.

Step 805, the baseband processing chip controls the user identification card switch control chip to be disconnected, and the mobile terminal user identification card function is locked (at the same time, the number of password input times can be reached through the display screen).

Example nine

According to the seventh embodiment and the eighth embodiment of the present invention, the SIM card and the IMSI are taken as an example. When the user A inserts the SIM card a into the mobile phone for the first time and selects to enable the hardware lock SIM card function, according to the system prompt, the user sets and inputs the SIM card open password, and stores the SIM card open password in the SIM card switch of the mobile phone. In the control chip, the operating system of the mobile phone is set in different hardware. If the user B obtains the mobile phone of the user A by illegal means, when the user B inserts a new SIM card b into the mobile phone, first, the system prompts the user B to input the SIM card opening password, if the user B cannot know the above. The set SIM card opens the password, but enters the wrong SIM card to open the password, then the system will control the SIM card switch control chip to disconnect, does not supply power to the SIM card b, at the same time, the system will prompt the SIM card function of the mobile phone to be If it is locked, User B will not be able to use the phone normally. Since the SIM card activation password is stored in the hardware, that is, the SIM card switch control chip, and is independently set with the operating system of the mobile phone, even if the user B flashes the mobile phone or uses the decryption software, the password cannot be unlocked or Erasing the saved SIM card to open the password in the phone. In this way, the safety factor and reliability of the user terminal are improved.

Example ten

Corresponding to the method for implementing the user identification card locking provided by the seventh embodiment and the eighth embodiment (the first verification information is that the first user identification card opens the password, and the second verification information is the second user identification card opening password), as shown in FIG. 2 Detailed description of the functions of each hardware of the mobile terminal, wherein

The baseband processing chip 10 is configured to acquire a first user identification card open password when the first user identification card is inserted for the first time in the mobile terminal, and write the first user identification card open password to the user. Identifying the card switch control chip 20, and simultaneously controlling the user identification card switch control chip 20 to be turned on to supply power to the first user identification card;

The baseband processing chip 10 is further configured to acquire an input second user identification card activation password when the second user identification card is inserted in the mobile terminal, and read the information from the user identification card switch control chip 20. The first user identification card opens a password, and when the second user identification card opening password does not match the first user identification card opening password, controlling the user identification card switch control chip 20 to be turned off to turn off the second User identification card power supply, the second user identification card lock set;

The user identification card switch control chip 20 is configured to store the first user identification card open password; and is further configured to be turned on or off according to the control of the baseband processing chip 10.

among them:

The communication interface control unit 23 is configured to provide a baseband processing chip 10 with a communication interface for writing or reading data to the storage unit 24, the communication interface being connected to a corresponding pin of the baseband processing chip 10; The data includes the first user identification card opening password;

The storage unit 24 is configured to store the first user identification card open password.

The baseband processing chip 10 is further configured to acquire a set first user identification card opening password, control the switch control unit 21 to be turned on, and detect whether the first user identification card is valid; if valid, the control station The switch control unit 21 remains turned on, and the acquired first user identification card open password is written into the storage unit 24.

The baseband processing chip 10 is further configured to prompt whether to enable the hardware lock user identification card function before acquiring the set first user identification card opening password, and if yes, prompting to set and input the first user identification The card opens the password; if no, the switch control unit 21 is controlled to be turned on, and detects whether the first user identification card is valid, and if not, controls the switch The control unit 21 is disconnected, and the mobile terminal enters a cardless operation mode. If it is valid, the switch control unit 21 is controlled to be turned on, and the mobile terminal normally recognizes the card operation.

The baseband processing chip 10 is further configured to acquire an input second user identification card open password, and read the first user identification card open password from the storage unit 24, and the second user identification card opens a password. When the first user identification card opening password does not match, the switch control unit 21 is controlled to be turned off to turn off the power of the second user identification card.

When the second user identification card opening password matches the first user identification card opening password, the baseband processing chip 10 is further configured to control the switch control unit 21 to be turned on, and detect the second user identification. Whether the card is valid, if it is invalid, the switch control unit 21 is controlled to be disconnected, and the mobile terminal enters the cardless operation mode; if it is valid, the switch control unit 21 is controlled to be turned on, and the mobile terminal normally recognizes the card operation.

In summary, in the solution provided by the embodiment of the present invention, a special switch chip is set in the mobile terminal for controlling the power on and off of the user identification card, and the verification information of the user identification card is also turned on (user identification) The card opening password and the user identification card number are stored in the chip and set separately with the operating system of the mobile terminal; and based on the stored verification information, the switch chip is turned on or off by the baseband processing chip (operating system) to In this way, the user identification card is powered or powered off, and the user identification card is powered off and locked. Thus, the function of controlling the locking of the user identification card by the hardware mode is realized, and the security and reliability of the terminal are greatly improved.

The embodiment of the invention adopts a hardware method for controlling the locking of the user identification card, and has the following advantages:

1. Better than software encryption methods in terms of security and reliability;

2, can ignore the differences between different terminal operating systems, improve compatibility;

3. For terminals that support this function, the thief's motives for committing crimes can be significantly reduced, and the risk of stolen terminals is greatly reduced;

4, the terminal is lost, because the main functions such as call and data are limited, which can promote the loss and loss The main contact, to achieve the purpose of returning the phone.

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

A method for implementing user identification card locking, the method comprising:

When the first user identification module user identification card is inserted for the first time in the mobile terminal, the first verification information is acquired, and the first verification information is written into the user identification card switch control chip, and the user identification card switch control chip is controlled to be turned on. Supplying power to the first user identification card;

When the second user identification card is inserted into the mobile terminal, acquiring second verification information, and reading the first verification information from the user identification card switch control chip, where the second verification information and the first When the verification information does not match, the user identification card switch control chip is turned off to turn off the power of the second user identification card, and the second user identification card is locked.
The method for implementing user identification card locking according to claim 1, wherein when the first user identification card is inserted for the first time in the mobile terminal, and the second user identification card is inserted into the mobile terminal, the user identification card switch The control chip is off by default.
The method for implementing the user identification card locking according to claim 1, wherein before the obtaining the first verification information, the method further comprises:

Prompting whether to enable the hardware lock user identification card function, if yes, acquiring the first verification information; if no, controlling the user identification card switch control chip to be turned on, and detecting whether the first user identification card is valid, If invalid, the user identification card switch control chip is disconnected, and the mobile terminal enters the cardless operation mode. If it is valid, the control user identification card switch control chip remains conductive, and the mobile terminal recognizes the card operation.
A method of implementing user identification card locking according to claim 1, 2 or 3, wherein

The first verification information is a first user identification card activation password and a first user identification card number, and the second verification information is a second user identification card activation password and a second user identification card number.
The method for implementing the user identification card locking according to claim 4, wherein the obtaining the first verification information and writing the first verification information to the user identification card switch control chip comprises:

Obtaining a set first user identification card opening password, controlling the user identification card switch control chip to be turned on, and detecting whether the first user identification card is valid; if valid, controlling the user identification card switch control chip to maintain Turning on, and reading the first user identification card number of the first user identification card;

The obtained first user identification card opening password and the first user identification card number are written into the user identification card switch control chip.
The method for implementing user identification card locking according to claim 5, wherein said acquiring second verification information, and reading said first verification information from said user identification card switch control chip, said second verification When the information does not match the first verification information, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, including:

Obtaining an input second user identification card opening password, and reading the first user identification card opening password from the user identification card switch control chip, the second user identification card opening password and the first user identification When the card opening password does not match, the input second user identification card number is obtained, and the first user identification card number is read from the user identification card switch control chip, the second user identification card number and the first user identification When the card number does not match, the user identification card switch control chip is controlled to be turned off to turn off the power of the second user identification card.
The method for implementing user identification card locking according to claim 6, wherein when the second user identification card opening password matches the first user identification card opening password, or the second user identification card number is When the first user identification card number matches, the method further includes:

Controlling the user identification card switch control chip to be turned on, and detecting whether the second user identification card is valid. If invalid, controlling the user identification card switch control chip to be disconnected, and the mobile terminal enters a cardless operation mode; if valid, The user identification card switch control chip is controlled to be turned on, and the mobile terminal recognizes the card operation.
A method of implementing user identification card locking according to claim 1, 2 or 3, wherein

The first verification information is a first user identification card opening password, and the second verification information is a second user identification card opening password.
The method for implementing the user identification card locking according to claim 8, wherein the obtaining the first verification information and writing the first verification information to the user identification card switch control chip comprises:

Obtaining a set first user identification card opening password, controlling the user identification card switch control chip to be turned on, and detecting whether the first user identification card is valid; if valid, controlling the user identification card switch control chip to maintain Turning on, the acquired first user identification card open password is written into the user identification card switch control chip.
The method for implementing user identification card locking according to claim 9, wherein said acquiring second verification information, and reading said first verification information from said user identification card switch control chip, said second verification When the information does not match the first verification information, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, including:

Obtaining an input second user identification card opening password, and reading the first user identification card opening password from the user identification card switch control chip, the second user identification card opening password and the first user identification When the card opening password does not match, the user identification card switch control chip is controlled to be turned off to turn off the power of the second user identification card.
The method for implementing the user identification card locking according to claim 10, wherein when the second user identification card opening password is consistent with the first user identification card opening password, the method further comprises:

Controlling the user identification card switch control chip to be turned on, and detecting whether the second user identification card is valid. If invalid, controlling the user identification card switch control chip to be disconnected, and the mobile terminal enters a cardless operation mode; if valid, The user identification card switch control chip is controlled to be turned on, and the mobile terminal recognizes the card operation.
A mobile terminal includes a baseband processing chip and a user identification module user identification card switch control chip, wherein

The baseband processing chip is configured to acquire first verification information when the first user identification card is first inserted in the mobile terminal, and write the first verification information into the user identification The card switch control chip simultaneously controls the user identification card switch control chip to be turned on to supply power to the first user identification card;

The baseband processing chip is further configured to: when the second user identification card is inserted in the mobile terminal, acquire second verification information, and read the first verification information from the user identification card switch control chip, where When the second verification information does not match the first verification information, controlling the user identification card switch control chip to be turned off to turn off the power of the second user identification card, and the second user identification card is locked;

The user identification card switch control chip is configured to store the first verification information; and is further configured to be turned on or off according to control of the baseband processing chip.
The mobile terminal of claim 12, wherein the subscriber identity card switch control chip comprises: a switch control unit, a power reset unit, a communication interface control unit, and a storage unit; wherein:

The power reset unit is respectively connected to the switch control unit and the communication interface control unit, and configured to provide power and reset functions to the switch control unit and the communication interface control unit according to a control signal of the baseband processing chip;

a switch control unit configured to be turned on or off according to a control signal of the baseband processing chip, and to provide a power supply output by the baseband processing chip to a user identification card when turned on, and to turn off the The baseband processing chip outputs power to the user identification card;

The communication interface control unit is configured to provide a baseband processing chip with a communication interface for writing or reading data to the storage unit, the communication interface being connected to a corresponding pin of the baseband processing chip; Describe the first verification information;

The storage unit is configured to store the first verification information.
The mobile terminal according to claim 13, wherein the switch control unit is turned off by default when the first user identification card is inserted for the first time in the mobile terminal and the second user identification card is inserted into the mobile terminal.
The mobile terminal according to claim 13, wherein

The baseband processing chip is further configured to prompt whether to enable the hardware lock user identification card function before acquiring the first verification information, and if yes, obtain the first verification information; if no, control the The switch control unit is turned on, and detects whether the first user identification card is valid. If it is invalid, the switch control unit is controlled to be disconnected, and the mobile terminal enters a cardless operation mode. If it is valid, the switch control unit is controlled to remain conductive. , the mobile terminal knows the card to run.
A mobile terminal according to any one of claims 12 to 15, wherein

The first verification information is a first user identification card activation password and a first user identification card number, and the second verification information is a second user identification card activation password and a second user identification card number.
The mobile terminal according to claim 16, wherein

The baseband processing chip is further configured to acquire a set first user identification card open password, control the switch control unit to be turned on, and detect whether the first user identification card is valid; if valid, control the switch The control unit remains conductive, and reads the first user identification card number of the first user identification card; and writes the acquired first user identification card opening password and the first user identification card number into the storage unit.
The mobile terminal according to claim 17, wherein

The baseband processing chip is further configured to acquire an input second user identification card open password, and read the first user identification card open password from the storage unit, and the second user identification card opens a password and a Obtaining the input second user identification card number when the first user identification card opening password does not match, and reading the first user identification card number from the storage unit, the second user identification card number and the first user When the identification card number does not match, the switch control unit is controlled to be turned off to turn off the power of the second subscriber identity card.
The mobile terminal according to claim 18, wherein

When the second user identification card opening password matches the first user identification card opening password, or when the second user identification card number matches the first user identification card number,

The baseband processing chip is further configured to control the switch control unit to be turned on and detect Whether the second subscriber identity card is valid, if invalid, controlling the switch control unit to be disconnected, the mobile terminal enters a cardless operation mode; if it is valid, the switch control unit is controlled to be turned on, and the mobile terminal recognizes the card operation.
A mobile terminal according to any one of claims 12 to 15, wherein

The first verification information is a first user identification card opening password, and the second verification information is a second user identification card opening password.
The mobile terminal according to claim 20, wherein

The baseband processing chip is further configured to acquire a set first user identification card open password, control the switch control unit to be turned on, and detect whether the first user identification card is valid; if valid, control the switch The control unit remains conductive, and the acquired first user identification card open password is written into the storage unit.
The mobile terminal according to claim 21, wherein

The baseband processing chip is further configured to acquire an input second user identification card open password, and read the first user identification card open password from the storage unit, and the second user identification card opens a password and a When the first user identification card opens the password does not match, the control switch control unit is turned off to turn off the power of the second user identification card.
The mobile terminal according to claim 22, wherein when the second subscriber identity card open password matches the first subscriber identity card open password,

The baseband processing chip is further configured to control the switch control unit to be turned on, and detect whether the second user identification card is valid, and if not, control the switch control unit to be disconnected, and the mobile terminal enters a cardless operation mode; If it is valid, the switch control unit is kept turned on, and the mobile terminal recognizes the card operation.