WO2024063047A1

WO2024063047A1 - Mobile communication apparatus

Info

Publication number: WO2024063047A1
Application number: PCT/JP2023/033881
Authority: WO
Inventors: 純赤沼; 懇辰前嶋; 雅浩福田; 重徳薄井
Original assignee: 株式会社Ｎｔｔドコモ
Priority date: 2022-09-20
Filing date: 2023-09-19
Publication date: 2024-03-28

Abstract

The present invention safely retains secret information, such as secret keys, which is used for utilization of crypto-assets and which should be kept secret.　A smartphone 10 is a mobile communication terminal that is used for utilization of crypto-assets and that is capable of comprising a SIM 20 which is for use in mobile communication and which is a subscriber authentication module for storing therein subscriber information, the smartphone comprising: an acquisition unit 12 that acquires a plurality of divided information items resulting from division of secret information which is used for utilization of crypto-assets and which should be kept secret; a storage unit 13 that stores, in the SIM 20, a portion of the acquired divided information items, and stores, in a storage region 11 of the terminal other than the SIM 20, another portion of the divided information items; and a utilization unit 14 that generates secret information from the plurality of divided information items stored in various storage regions and uses the secret information for utilization of the crypto-assets.

Description

mobile communication terminal

The present invention relates to a mobile communication terminal used for utilizing cryptographic assets.

Conventionally, it has been proposed to store a private key used for the use of cryptographic assets (virtual currency) in a mobile communication terminal (for example, see Patent Document 1).

JP 2020-35106 A

If the private key is leaked, there is a risk that the crypto assets may be illegally withdrawn by someone else. Simply storing a private key in a mobile communication terminal as described above does not necessarily mean that the private key is held securely.

One embodiment of the present invention has been made in consideration of the above, and aims to provide a mobile communications terminal that can be used to utilize cryptographic assets such as private keys and can also safely store confidential information that should be kept secret.

In order to achieve the above object, a mobile communication terminal according to an embodiment of the present invention is used for the use of cryptographic assets and is equipped with a subscriber authentication module that stores subscriber information used for mobile communication. The mobile communication terminal is capable of configuring a mobile communication terminal, and includes an acquisition unit that acquires a plurality of pieces of divided information in which confidential information that is used for the use of crypto assets and that should be kept confidential is divided, and a mobile communication terminal that acquires a plurality of pieces of divided information obtained by the acquisition unit. A storage section that stores one of the divided information in the subscriber authentication module and one of the divided information in a storage area of the own terminal other than the subscriber authentication module, and a plurality of pieces of divided information that are stored in different storage areas depending on the storage section. and a utilization unit that generates confidential information from the cryptographic asset and uses it to utilize the cryptographic asset.

According to the mobile communication terminal according to an embodiment of the present invention, post-divided information can be stored in a plurality of independent storage areas. As a result, confidential information can be safely held.

According to an embodiment of the present invention, confidential information such as a private key that is used for the use of cryptographic assets and that should be kept secret can be safely held.

1 is a diagram showing the configuration of a smartphone that is a mobile communication terminal according to an embodiment of the present invention, and the configuration of a system including the smartphone. 2 is a graph showing an example of a private key and multiple shares. 2 is a flowchart showing a process executed when a share is stored in a storage area in a smartphone, which is a mobile communication terminal according to an embodiment of the present invention. 2 is a flowchart showing a process executed when a private key is used in a smartphone, which is a mobile communication terminal according to an embodiment of the present invention. FIG. 1 is a diagram showing a hardware configuration of a smartphone which is a mobile communication terminal according to an embodiment of the present invention.

Hereinafter, embodiments of a mobile communication terminal according to the present invention will be described in detail with reference to the drawings. In addition, in the description of the drawings, the same elements are denoted by the same reference numerals, and redundant description will be omitted.

FIG. 1 shows a smartphone 10 that is a mobile communication terminal according to this embodiment. The smartphone 10 is a mobile communication terminal that performs mobile communication in a mobile communication network (by connecting to the mobile communication network). Note that the mobile communication terminal according to this embodiment may be a mobile communication terminal other than the smartphone 10.

The smartphone 10 can include a SIM (Subscriber Identity Module) 20 that is a subscriber authentication module that stores subscriber information (profile) used for mobile communication. SIM20 may be detachable from smartphone 10. The subscriber information includes, for example, MSISDN (Mobile Subscriber ISDN Number, telephone number), IMSI (International Mobile Subscriber Identity), which is information provided by the carrier of the mobile communication network, and authentication information. The smartphone 10 performs mobile communication using information stored in a SIM 20 attached to the smartphone 10. As the SIM 20, a conventional SIM may be used. Furthermore, mobile communication using the information stored in the SIM 20 may be performed in the same manner as in the past. Note that the subscriber authentication module may be other than the SIM 20 as long as it is attached to a mobile communication terminal and stores subscriber information used for mobile communication.

The smartphone 10 is also used to use crypto assets (virtual currencies). Specifically, the smartphone 10 is a wallet for crypto assets. For example, a wallet application is installed and executed on the smartphone 10, so that the smartphone 10 becomes a wallet for crypto assets. The crypto assets used by the smartphone 10 may be the same as conventional ones, such as Ethereum, Solana, and Polkadot (crypto assets used on these platforms).

Confidential information is used when using crypto assets. Confidential information is information that should be kept secret from anyone other than the owner of the cryptographic asset, ie, the user of the smartphone 10. The confidential information is, for example, a private key. The private key is information for each crypto asset (for example, for each type of crypto asset or account). If the private key is leaked, there is a risk that the crypto assets will be used illegally. Since there is usually no centralized administrator for crypto assets, accounts cannot be suspended or restored by anyone other than the owner of the crypto assets. Therefore, if the private key is leaked, it is impossible to prevent unauthorized use of the cryptographic asset. As will be described later, the smartphone 10 has a function according to this embodiment for safely holding confidential information. The function may be realized by, for example, the above-mentioned wallet application, or may be realized by something else. Further, although the confidential information targeted by the function according to this embodiment is a private key, it may be confidential information other than the private key (for example, a secret recovery phrase).

Subsequently, the functions of the smartphone 10 according to the present embodiment will be explained. Note that the smartphone 10 may have functions provided in conventional mobile communication terminals such as conventional smartphones. Furthermore, the smartphone 10 may have the functions of a conventional crypto asset wallet.

The smartphone 10 implements the functions according to the present embodiment using a plurality of storage areas. One of the plurality of storage areas is SIM 20 installed in smartphone 10. For example, as shown in FIG. 1, a secure element 20a included in the SIM 20 is used for the functions according to this embodiment. Note that a storage area of the SIM 20 other than the secure element 20a may be used as a storage area used for the function according to this embodiment.

One of the multiple storage areas is a storage area provided in the main body of the smartphone 10. For example, as shown in FIG. 1, it is an application storage area 11 used for a wallet application, which is a preset part of the storage area provided in the main body of the smartphone 10. Note that a storage area provided in the main body of the smartphone 10 other than those described above may be used as a storage area used for the function according to the present embodiment. Furthermore, storage areas other than the above two may be used for the functions according to this embodiment.

As shown in FIG. 1, the smartphone 10 includes an acquisition unit 12, a storage unit 13, and a usage unit 14 as functional units.

The acquisition unit 12 is a functional unit that acquires a plurality of pieces of divided information obtained by dividing confidential information that is used for the use of cryptographic assets and is to be kept confidential. The acquisition unit 12 may acquire confidential information and divide the acquired confidential information into a plurality of pieces of divided information.

As described above, in this embodiment, the confidential information is a private key. The acquisition unit 12 acquires the private key using a conventional method. For example, when the user of the smartphone 10 uses a cryptographic asset for the first time, the user obtains a private key from a server (not shown) that is an issuer of the cryptographic asset. Note that the private key is paired with a public key, and the acquisition unit 12 also acquires the public key paired with the private key. Note that the public key may be used in the same manner as conventional public keys when using cryptographic assets.

The divided information is obtained by dividing confidential information and is used to generate confidential information. A preset number of divided information is generated by dividing the confidential information. In this embodiment, the information after the private key has been divided is called a share. The secret key can be generated (regenerated) from a preset number of different shares (note that this number does not have to match the number of post-division information). A private key cannot be generated from less than a preset number of shares. In this embodiment, as will be described later, three shares are generated from a private key, and a private key can be generated from any two of the shares.

The private key is, for example, a string of numbers and can be treated as a number. Each share is, for example, a coordinate in a two-dimensional coordinate space. FIG. 2(a) shows an example of the secret key and multiple shares in this case. With respect to the numerical value b of the private key and the predetermined numerical value a, the coordinates on a straight line represented by y=ax+b on a two-dimensional space having an x-axis and a y-axis are shares. In this case, the y-intercept, which is the y-coordinate of the coordinate (0, b) of the intersection of the above-mentioned straight line with the y-axis, becomes the numerical value b of the secret key. If the coordinates of the two shares can be known, a straight line can be calculated, and its y-intercept can be calculated as the value b of the private key.

The acquisition unit 12 generates a plurality of shares from the acquired private key using a method stored in advance. For example, the acquisition unit 12 generates a plurality of shares as follows using Shamir's threshold method (low-dimensional example). The acquisition unit 12 sets a predetermined coordinate on the two-dimensional space as a key share, which is one of the plurality of shares to be generated. The key share coordinates may be selected at random or may be calculated based on preset calculation rules. The acquisition unit 12 uses the numerical value b of the private key as the y-intercept and calculates a straight line passing through the coordinates of the key shares. That is, the acquisition unit 12 calculates a of y=ax+b from the y-intercept, which is the numerical value b of the private key, and the coordinates of the key shares. The acquisition unit 12 sets the coordinates of two different points on the calculated straight line, other than the coordinates of the key share and the y-intercept, as shares (for example, share A and share A' in FIG. 2A). The coordinates to be shared on the straight line may be selected at random, or may be calculated based on preset calculation rules.

As described above, since the private key is information for each cryptographic asset, when multiple cryptographic assets are used in the smartphone 10, the acquisition unit 12 acquires the share of the private key for each cryptographic asset. For example, when using three types of cryptographic assets, cryptographic asset A, cryptographic asset B, and cryptographic asset C on the smartphone 10, as shown in FIG. 1, the corresponding private key A, private key B, and private key Obtain the share of C.

The acquisition unit 12 outputs the generated shares (for example, the three shares of the key share, share A, and share A' in FIG. 2(a)) to the storage unit 13. Further, the acquisition unit 12 discards the private key after generating the share. For example, the usage unit 14 deletes the private key on the storage area of the smartphone 10. Prevent leakage of the private key by destroying the private key. Further, by discarding the private key, it becomes necessary to generate the private key from a plurality of shares when the private key is subsequently used, that is, when using cryptographic assets.

Note that the splitting of the private key, that is, the generation of shares, does not necessarily have to be performed as described above, and may be performed using a method other than the above. Further, the secret key and share do not need to be a string of numbers and coordinates as described above, and may be anything as long as a secret key can be generated from a plurality of shares.

The storage unit 13 is a functional unit that stores any of the divided information acquired by the acquisition unit 12 in the subscriber authentication module, and stores any of the divided information in the storage area of its own terminal other than the subscriber authentication module. be. The storage unit 13 may store any of the divided information in a device on a mobile communication network related to mobile communication using the subscriber authentication module. For example, the storage unit 13 stores shares, which are post-division information, in the storage area as follows.

The storage unit 13 inputs a plurality of shares from the acquisition unit 12. The storage unit 13 stores one of the input shares other than the key share (for example, share A shown in FIG. 1) in the secure element 20a of the SIM 20. Among the input shares, the storage unit 13 stores shares other than the key share and the share stored in the secure element 20a of the SIM 20 (for example, share A' shown in FIG. 1) in the application storage area 11. Note that when storing shares in each of the

storage areas

20a and 11, it is possible to determine which cryptographic asset's private key the stored share corresponds to (the same applies below).

Among the input shares, the storage unit 13 transmits key shares other than the shares stored in the secure element 20a of the SIM 20 and the application storage area 11 to the wallet management server 30, and stores the key shares in the wallet management server 30. Remember the share. The wallet management server 30 is a device on a mobile communication network related to mobile communication using the SIM 20.

The wallet management server 30 receives and stores the key share sent from the smartphone 10. When storing a key share in the wallet management server 30, it should be possible to determine which SIM 20 and which crypto asset's private key the stored share corresponds to. For example, the wallet management server 30 is provided by a carrier of the mobile communication network. By storing one of the shares by the wallet management server 30, user convenience can be improved as will be described later. Note that the shares stored in the wallet management server 30 do not need to be key shares, and may be shares other than key shares. Further, the key share may be stored in either the secure element 20a of the SIM 20 or the application storage area 11.

The utilization unit 14 is a functional unit that generates confidential information from a plurality of pieces of divided information stored in different storage areas by the storage unit 13 and uses it to utilize the cryptographic asset. The utilization unit 14 may discard the generated confidential information after using it for the use of the cryptographic asset. For example, the utilization unit 14 generates a private key, which is confidential information, as described below and uses it to utilize the cryptographic asset.

The use of cryptographic assets in this embodiment is, for example, payment using cryptographic assets for services, NFTs (non-fungible tokens), etc., that is, remittance to another wallet address. However, cryptographic assets may be used for purposes other than those described above.

The utilization unit 14 inputs a trigger for the use of cryptographic assets. For example, the utilization unit 14 inputs a trigger for payment using crypto assets. The trigger for the use of cryptographic assets is, for example, a user's operation on the smartphone 10. Further, the trigger may be other than that. The usage unit 14 may input information specifying the cryptographic asset to be used in conjunction with the trigger.

When the trigger is input, the usage unit 14 reads out the shares related to the cryptographic assets to be used from the secure element 20a of the SIM 20 and the application storage area 11, respectively. The utilization unit 14 generates a private key from each read share. Generating a private key from a plurality of shares may be performed using a method corresponding to the method for generating shares from a private key. For example, in the example of the private key and share shown in FIG. 2, a straight line may be calculated from the coordinates of the share, and the y-intercept of the straight line may be used as the private key. Note that the generation of a private key from a share does not necessarily have to be performed as described above, and may be performed using a method other than the above.

The usage unit 14 uses the generated private key to use the cryptographic asset. For example, the utilization unit 14 transmits the generated private key to the server 40 to which the cryptographic asset is paid. Normally, the server 40 is provided for each type of cryptographic asset used as a service of the Web 3 (for example, for each cryptographic asset A, cryptographic asset B, and cryptographic asset C shown in FIG. 1). Note that when using cryptographic assets, the usage unit 14 may use the private key in the same manner as in the past, including the above-mentioned aspects.

The usage unit 14 discards the generated private key when the use of the cryptographic asset is finished. For example, the usage unit 14 deletes the private key on the storage area of the smartphone 10. The utilization unit 14 also discards the share on the storage area of the smartphone 10 (other than the secure element 20a of the SIM 20 and the application storage area 11) that has been read out for use in generating the private key. Note that the share may be discarded at the time the private key is generated. The usage unit 14 generates a private key every time it is used. During a time period when the private key is not used, the smartphone 10 stores only the share of the secure element 20a of the SIM 20 and the application storage area 11 as information related to the private key.

In the above, the generation of the share by the acquisition unit 12 and the storage by the storage unit 13 are performed, for example, when acquiring the private key from the server of the crypto asset issuer, but they may be performed at other times. Good too. Further, the private key used to generate a new share at this time may be generated from a share that has been generated for the private key in the past and stored in the storage area.

For example, when there is a possibility that some of the shares related to the private key have been leaked (for example, when one share is stolen), the acquisition unit 12 uses the same method as the usage unit 14 to transfer the shares to the secure SIM 20. The private key is read from the element 20a and the application storage area 11, respectively, and a private key is generated and acquired. The acquisition unit 12 generates a share from the acquired private key in the same manner as described above. Note that when regenerating a share, the regenerated share is different from the old share. For example, when generating shares using the method described in FIG. 2(a), each share may be generated by generating a key share different from the old key share as shown in FIG. 2(b).

The storage unit 13 also stores the shares generated by the acquisition unit 12 in the storage area in the same manner as described above. The regeneration and re-storage of the shares may be performed, for example, in accordance with an operation by the user of the smartphone 10, an external operation, or certain conditions set in the smartphone 10. In addition, when the shares are regenerated and re-stored, all old shares are deleted from the storage area.

Furthermore, when the SIM 20 in which the share is stored is replaced with another smartphone 10 that has the same functions as the smartphone 10, the share may be regenerated in the other smartphone 10. In this case, the acquisition unit 12 of the other smartphone 10 reads the share from the secure element 20a of the SIM 20. Further, the acquisition unit 12 of the other smartphone 10 accesses the wallet management server 30 through mobile communication using the SIM 20 and reads out the key share stored in the wallet management server 30. The acquisition unit 12 of the other smartphone 10 generates and acquires a private key from the read shares and key shares. The acquisition unit 12 of the other smartphone 10 generates a share from the acquired private key in the same manner as described above. The storage unit 13 of the other smartphone 10 stores the share generated by the acquisition unit 12 in the secure element 20a of the SIM 20 of the other smartphone 10, the application storage area 11, and the wallet management server 30.

By storing the key share in the wallet management server 30 in this way, the private key can be regenerated from the key share and the share stored in the secure element 20a of the SIM 20. Therefore, as long as there is a SIM 20 in which the share is stored, even if the smartphone 10 is changed as described above, for example, due to a model change, the private key can be regenerated and the cryptographic assets can be used.

In the above, the acquisition unit 12 acquires a private key and generates and acquires a share. However, the acquisition unit 12 may acquire only the share from the outside without acquiring the private key. For example, the wallet management server 30 obtains a private key for the user of the smartphone 10 and generates a share from the private key in the same manner as described above. Wallet management server 30 transmits the generated share to smartphone 10. The acquisition unit 12 receives and acquires the transmitted shares. Note that the device that transmits shares to the smartphone 10 may be a device other than the wallet management server 30. Further, when a share is generated by the wallet management server 30, the key share may be stored in the wallet management server 30 without being sent to the smartphone 10.

In the smartphone 10, the acquired and generated private key may not be output in a format that can be recognized by the user. For example, the private key may not be displayed on the smartphone 10. If the user cannot recognize the private key in this way, it is possible to prevent the private key from being artificially leaked. The above are the functions of the smartphone 10 according to this embodiment.

Subsequently, the process executed by the smartphone 10, which is the mobile communication terminal according to the present embodiment (the operation method performed by the smartphone 10), will be explained using the flowcharts of FIGS. 3 and 4. First, the process when a share is stored in a storage area will be explained using the flowchart of FIG. For example, this process is performed when the user of the smartphone 10 uses crypto assets for the first time. In this process, first, the acquisition unit 12 acquires a plurality of shares, which are a plurality of pieces of post-division information obtained by dividing a private key, which is confidential information (S01). Acquisition of a plurality of shares may be performed by obtaining a private key and dividing the obtained private key into a plurality of shares, or may be performed by receiving a plurality of shares from the outside. Subsequently, the plurality of shares are respectively stored in different storage areas by the storage unit 13 (S02). Specifically, one share is stored in the secure element 20a of the SIM 20. Further, one share is stored in the application storage area 11. Additionally, the key share is stored in the wallet management server 30. The above is the process when shares are stored in the storage area.

Next, the process when the private key is used will be explained using the flowchart in FIG. 4. This process is performed when using a cryptographic asset, specifically when a trigger for using the cryptographic asset is input to the usage unit 14. In this process, the usage unit 14 reads out the shares related to the cryptographic assets to be used from the secure element 20a of the SIM 20 and the application storage area 11 (S11). Subsequently, the usage unit 14 generates a private key from each read share (S12). Subsequently, the usage unit 14 uses the generated private key to use the cryptographic asset (S13). Subsequently, the utilization unit 14 discards the private key used for the cryptographic asset (S14). The above is the process when the private key is used.

According to this embodiment, shares can be stored in the secure element 20a of the SIM 20 and the application storage area 11, which are a plurality of independent storage areas. Even if one share among these multiple shares is stolen, a private key cannot be generated. Storing shares in multiple physically isolated environments in this way serves as a countermeasure against hacking, etc. In this manner, according to this embodiment, the private key, which is confidential information, can be safely held.

In addition, although shares are stored in multiple physically separated environments, distributed management of shares is achieved using a single medium, the smartphone 10. Therefore, this embodiment does not require users to have multiple media for managing shares, preventing management from becoming complicated.

Note that storage of shares does not necessarily need to be performed as in this embodiment, and may be performed in the SIM 20 and a storage area on the smartphone other than the SIM 20. Furthermore, in the present embodiment, shares are stored in two storage areas, the secure element 20a of the SIM 20 and the application storage area 11, on the smartphone 10, but shares are stored in three or more different storage areas. May be stored. Further, a plurality of shares for one private key may be stored in one storage area.

Furthermore, as in this embodiment, the share may be stored in the wallet management server 30, which is a device on a mobile communication network related to mobile communication using the SIM 20. As described above, by using the share (key share) of the wallet management server 30, a private key can be generated without using all the shares stored in the smartphone 10 (including the SIM 20). In this way, the share of the wallet management server 30 can function as a safety net. Alternatively, the private key can be easily generated when the SIM 20 is replaced with another smartphone. In this way, user convenience can be enhanced. Note that the device storing the share may be a device other than the wallet management server 30 as long as it is a device on a mobile communication network related to mobile communication using the SIM 20. Further, the generated share does not necessarily need to be stored in a device on a mobile communication network related to mobile communication using the SIM 20, and may be stored only in the SIM 20 and a storage area on a smartphone other than the SIM 20. good.

Furthermore, as in this embodiment, the private key generated from the share for the use of the cryptographic asset may be discarded after being used for the use of the cryptographic asset. By generating and destroying a private key each time a cryptographic asset is used in this manner, leakage of the private key can be prevented and the private key, which is confidential information, can be held even more safely.

Furthermore, as in this embodiment, the private key may be acquired in the smartphone 10, and the acquired private key may be divided into multiple shares and acquired. According to this configuration, shares can be generated reliably without the shares being known to others, and the private key, which is confidential information, can be held even more safely. However, it is not necessary for the smartphone 10 to generate shares, and shares may be received and acquired from the outside as described above.

Note that the block diagram used to explain the above embodiment shows blocks in functional units. These functional blocks (components) are realized by any combination of at least one of hardware and software. Furthermore, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized using one physically or logically coupled device, or may be realized using two or more physically or logically separated devices directly or indirectly (e.g. , wired, wireless, etc.) and may be realized using a plurality of these devices. The functional block may be realized by combining software with the one device or the plurality of devices.

Functions include judgment, decision, judgment, calculation, calculation, processing, derivation, investigation, exploration, confirmation, reception, transmission, output, access, resolution, selection, selection, establishment, comparison, assumption, expectation, consideration, These include, but are not limited to, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, and assigning. I can't do it. For example, a functional block (configuration unit) that performs transmission is called a transmitting unit or transmitter. In either case, as described above, the implementation method is not particularly limited.

For example, the smartphone 10 in an embodiment of the present disclosure may function as a computer that performs the information processing of the present disclosure. FIG. 5 is a diagram illustrating an example of the hardware configuration of the smartphone 10 according to an embodiment of the present disclosure. The smartphone 10 described above may be physically configured as a computer device including a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, and the like. Furthermore, the hardware configurations of the wallet management server 30 and the server 40 may also be as described here.

Note that in the following description, the word "apparatus" can be read as a circuit, a device, a unit, etc. The hardware configuration of the smartphone 10 may be configured to include one or more of each device shown in the figure, or may be configured without including some of the devices.

Each function in the smartphone 10 is implemented by loading predetermined software (programs) onto hardware such as the processor 1001 and memory 1002, so that the processor 1001 performs calculations, controls communication by the communication device 1004, and controls communication between the memory 1002 and the memory 1002. This is realized by controlling at least one of reading and writing data in the storage 1003.

The processor 1001 controls the entire computer by operating an operating system, for example. The processor 1001 may be configured by a central processing unit (CPU) that includes interfaces with peripheral devices, a control device, an arithmetic unit, registers, and the like. For example, each function of the smartphone 10 described above may be realized by the processor 1001.

Furthermore, the processor 1001 reads programs (program codes), software modules, data, etc. from at least one of the storage 1003 and the communication device 1004 to the memory 1002, and executes various processes in accordance with these. As the program, a program that causes a computer to execute at least part of the operations described in the above embodiments is used. For example, each function in the smartphone 10 may be realized by a control program stored in the memory 1002 and operated in the processor 1001. Although the various processes described above have been described as being executed by one processor 1001, they may be executed by two or more processors 1001 simultaneously or sequentially. Processor 1001 may be implemented by one or more chips. Note that the program may be transmitted from a network via a telecommunications line.

The memory 1002 is a computer-readable recording medium, and includes at least one of ROM (Read Only Memory), EPROM (Erasable Programmable ROM), EEPROM (Electrically Erasable Programmable ROM), and RAM (Random Access Memory). may be done. Memory 1002 may be called a register, cache, main memory, or the like. The memory 1002 can store executable programs (program codes), software modules, and the like to implement information processing according to an embodiment of the present disclosure.

The storage 1003 is a computer-readable recording medium, such as an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, or a magneto-optical disk (for example, a compact disk, a digital versatile disk, or a Blu-ray disk). (registered trademark disk), smart card, flash memory (eg, card, stick, key drive), floppy disk, magnetic strip, etc. Storage 1003 may also be called an auxiliary storage device. The storage medium included in the smartphone 10 may be, for example, a database including at least one of the memory 1002 and the storage 1003, a server, or other appropriate medium.

The communication device 1004 is hardware (transmission/reception device) for communicating between computers via at least one of a wired network and a wireless network, and is also referred to as a network device, network controller, network card, communication module, etc., for example.

The input device 1005 is an input device (eg, keyboard, mouse, microphone, switch, button, sensor, etc.) that accepts input from the outside. The output device 1006 is an output device (for example, a display, a speaker, an LED lamp, etc.) that performs output to the outside. Note that the input device 1005 and the output device 1006 may have an integrated configuration (for example, a touch panel).

Further, each device such as the processor 1001 and the memory 1002 is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or may be configured using different buses for each device.

The smartphone 10 may also be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, the processor 1001 may be implemented using at least one of these pieces of hardware.

Each aspect/embodiment described in this disclosure is LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system). system), FRA (Future Radio Access), NR (new Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark) )), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, UWB (Ultra-WideBand), Bluetooth (registered trademark), and other appropriate systems and systems expanded based on these. It may be applied to at least one next generation system. Furthermore, a combination of a plurality of systems may be applied (for example, a combination of at least one of LTE and LTE-A and 5G).

The order of the processing procedures, sequences, flowcharts, etc. of each aspect/embodiment described in this disclosure may be changed as long as there is no contradiction. For example, the methods described in this disclosure use an example order to present elements of the various steps and are not limited to the particular order presented.

The input/output information may be stored in a specific location (for example, memory) or may be managed using a management table. Information etc. to be input/output may be overwritten, updated, or additionally written. The output information etc. may be deleted. The input information etc. may be transmitted to other devices.

Judgment may be made using a value expressed by 1 bit (0 or 1), a truth value (Boolean: true or false), or a comparison of numerical values (for example, a predetermined value). (comparison with a value).

Each aspect/embodiment described in this disclosure may be used alone, in combination, or may be switched and used in accordance with execution. In addition, notification of prescribed information (for example, notification of "X") is not limited to being done explicitly, but may also be done implicitly (for example, not notifying the prescribed information). Good too.

Although the present disclosure has been described in detail above, it is clear for those skilled in the art that the present disclosure is not limited to the embodiments described in the present disclosure. The present disclosure can be implemented as modifications and variations without departing from the spirit and scope of the present disclosure as determined by the claims. Therefore, the description of the present disclosure is for the purpose of illustrative explanation and is not intended to have any limiting meaning on the present disclosure.

Software shall be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

Software, instructions, information, etc. may also be transmitted and received via a transmission medium. For example, if the software is transmitted from a website, server, or other remote source using at least one of wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and/or wireless technologies (such as infrared, microwave), then at least one of these wired and wireless technologies is included within the definition of a transmission medium.

As used in this disclosure, the terms "system" and "network" are used interchangeably.

In addition, the information, parameters, etc. described in this disclosure may be expressed using absolute values, relative values from a predetermined value, or using other corresponding information. may be expressed.

As used in this disclosure, the terms "determining" and "determining" may encompass a wide variety of operations. "Judgment" and "decision" include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, search, and inquiry. (e.g., searching in a table, database, or other data structure), and regarding an ascertaining as a "judgment" or "decision." In addition, "judgment" and "decision" refer to receiving (e.g., receiving information), transmitting (e.g., sending information), input, output, and access. (accessing) (e.g., accessing data in memory) may include considering something as a "judgment" or "decision." In addition, "judgment" and "decision" refer to resolving, selecting, choosing, establishing, comparing, etc. as "judgment" and "decision". may be included. In other words, "judgment" and "decision" may include regarding some action as having been "judged" or "determined." Further, "judgment (decision)" may be read as "assuming", "expecting", "considering", etc.

The terms "connected", "coupled", or any variations thereof, refer to any connection or coupling, direct or indirect, between two or more elements and to each other. It may include the presence of one or more intermediate elements between two elements that are "connected" or "coupled." The bonds or connections between elements may be physical, logical, or a combination thereof. For example, "connection" may be replaced with "access." As used in this disclosure, two elements may include one or more electrical wires, cables, and/or printed electrical connections, as well as in the radio frequency domain, as some non-limiting and non-inclusive examples. , electromagnetic energy having wavelengths in the microwave and optical (both visible and non-visible) ranges.

As used in this disclosure, the phrase "based on" does not mean "based solely on" unless explicitly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

As used in this disclosure, any reference to elements using the designations "first," "second," etc. does not generally limit the amount or order of those elements. These designations may be used in this disclosure as a convenient way to distinguish between two or more elements. Thus, reference to a first and second element does not imply that only two elements may be employed or that the first element must precede the second element in any way.

Where "include", "including" and variations thereof are used in this disclosure, these terms, like the term "comprising," are inclusive. It is intended that Furthermore, the term "or" as used in this disclosure is not intended to be exclusive or.

In this disclosure, when articles are added by translation, such as a, an, and the in English, the present disclosure may include that the nouns following these articles are plural.

In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." Note that the term may also mean that "A and B are each different from C". Terms such as "separate" and "coupled" may also be interpreted similarly to "different."

The mobile communication terminal of the present disclosure has the following configuration.
[1] A mobile communication terminal that is used for the use of cryptographic assets and can be equipped with a subscriber authentication module that stores subscriber information used for mobile communication,
an acquisition unit that acquires a plurality of pieces of divided information in which confidential information that is used for the use of cryptographic assets and is to be kept secret is divided;
a storage unit that stores any of the post-divided information acquired by the acquisition unit in the subscriber authentication module, and stores any of the post-divided information in a storage area of the own terminal other than the subscriber authentication module;
a usage unit that generates confidential information from a plurality of pieces of divided information stored in different storage areas by the storage unit and uses it for the use of the cryptographic asset;
A mobile communication terminal equipped with.
[2] The mobile communication terminal according to [1], wherein the storage unit stores any of the divided information in a device on a mobile communication network related to mobile communication by the subscriber authentication module.
[3] The mobile communication terminal according to [1] or [2], wherein the usage unit uses the generated confidential information for use of the cryptographic asset and then discards it.
[4] The mobile communication terminal according to any one of [1] to [3], wherein the acquisition unit acquires confidential information and divides the acquired confidential information into a plurality of divided information.

10... Smartphone, 11... Storage area for application, 12... Acquisition unit, 13... Storage unit, 14... Usage unit, 20... SIM, 20a... Secure element, 30... Wallet management server, 40... Server for payment destination with crypto assets , 1001...processor, 1002...memory, 1003...storage, 1004...communication device, 1005...input device, 1006...output device, 1007...bus.

Claims

A mobile communication terminal that is used for the use of crypto assets and can be equipped with a subscriber authentication module that stores subscriber information used for mobile communication,
an acquisition unit that acquires a plurality of pieces of divided information in which confidential information that is used for the use of cryptographic assets and is to be kept secret is divided;
a storage unit that stores any of the post-divided information acquired by the acquisition unit in the subscriber authentication module, and stores any of the post-divided information in a storage area of the own terminal other than the subscriber authentication module;
a usage unit that generates confidential information from a plurality of pieces of divided information stored in different storage areas by the storage unit and uses it for the use of the cryptographic asset;
A mobile communication terminal equipped with.
The mobile communication terminal according to claim 1, wherein the storage unit stores any of the divided information in a device on a mobile communication network related to mobile communication by the subscriber authentication module.
The mobile communication terminal according to claim 1, wherein the utilization unit discards the generated confidential information after using it for the use of cryptographic assets.
The mobile communication terminal according to claim 1, wherein the acquisition unit acquires confidential information and acquires the acquired confidential information by dividing the acquired confidential information into a plurality of divided information.