JP2001268649A - Method for preventing unauthorized use of mobile communication terminal and system for preventing unauthorized use of mobile communication terminal - Google Patents

Abstract

(57) [Summary] [PROBLEMS] Conventionally, when a mobile communication terminal is stolen or the like, the mobile communication terminal is modified or the like, so that a password and a called number stored inside the mobile communication terminal are obtained. The list may change, and the password required by the subscriber is the same each time, so if the password is intercepted, it will not make sense, so make sure that the mobile communication terminal is not used illegally. Could not be prevented. SOLUTION: On a network side, using a transmission number as a key, it is detected whether or not a reception number is registered in a reception permission table, and when there is no reception number registration, a partial password composed of an arbitrary digit of a password is generated. The partial password is requested from the mobile communication terminal, the partial password from the mobile communication terminal is confirmed, and if the partial password is incorrect, the call connection is not performed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for preventing unauthorized use of a mobile communication terminal and a system for preventing unauthorized use of a mobile communication terminal for preventing unauthorized use of a mobile communication terminal such as a cellular phone due to theft. It is about.

[0002]

2. Description of the Related Art A conventional method for preventing unauthorized use of a mobile communication terminal is described in, for example, JP-A-11-215553. In this method for preventing unauthorized use of a mobile communication terminal, a password and a dial number list are registered and held in advance in the main body of the mobile communication terminal.
For mobile communication terminals, the called number (destination dial number)
It checks whether or not is registered in the dial number list, and if registered, performs a calling process. Conversely, if not registered, it requests input of a personal identification number (password). When the security code is input, the mobile communication terminal checks the registered security code against the registered security code, and if the check result is normal, the dialed number is additionally registered in the dial number list and the outgoing process is performed. If the collation result is abnormal, the transmission process is interrupted.

With the above-described configuration, it is rare that an unauthorized user and an authorized subscriber dial the same number, and it is rare for the unauthorized user to perform mobile communication without deteriorating the operability of the authorized user. It is possible to prevent unauthorized use of the terminal.

[0004]

However, in the above-described method for preventing unauthorized use of a mobile communication terminal, if the mobile communication terminal is stolen or copied, the mobile communication terminal is modified. By doing so, the password and dial number list stored inside the mobile communication terminal may be changed, and the password required for the subscriber is the same every time unless explicitly changed, If the password is intercepted, it is meaningless, and there has been a problem that unauthorized use of the mobile communication terminal cannot be reliably prevented.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and a method for preventing unauthorized use of a mobile communication terminal, which can surely prevent unauthorized use of the mobile communication terminal, and An object of the present invention is to obtain a system for preventing unauthorized use of a mobile communication terminal.

[0006]

According to a first aspect of the present invention, there is provided a method for preventing unauthorized use of a mobile communication terminal, wherein when a call from the mobile communication terminal is detected on the network side, the call is transmitted. Using the number as a key, the presence or absence of registration of the called number of the outgoing call in the incoming call permission table is detected, and in the case where the called number is not registered, a portion composed of an arbitrary digit of the password previously assigned to the subscriber. A password is generated, the partial password is requested from the mobile communication terminal, the partial password from the mobile communication terminal is confirmed, and if the partial password is incorrect, the call connection is not performed. .

According to a second aspect of the invention, there is provided a method for preventing unauthorized use of a mobile communication terminal, wherein the partial password is composed of any two or more digits of the password.

According to a third aspect of the invention, there is provided a method for preventing unauthorized use of a mobile communication terminal, wherein when a partial password is correct, an unregistered incoming call number is registered in an incoming call permission table.

According to a fourth aspect of the present invention, there is provided a method for preventing unauthorized use of a mobile communication terminal, wherein the registered number of the called number in the incoming call permission table is the maximum allowable number, and the called number having the oldest last access date and time. Is deleted, and the unregistered incoming call number is registered in the incoming call permission table.

According to a fifth aspect of the present invention, there is provided a system for preventing unauthorized use of a mobile communication terminal, wherein an incoming call permission table in which a plurality of incoming numbers and passwords are registered for each outgoing number is provided in advance on the network side. When a call from the mobile communication terminal is detected, the presence / absence of registration of the called number in the incoming call permission table is detected using the calling number of the call as a key. Generates a partial password consisting of any of the digits, requests the partial password from the mobile communication terminal, checks the partial password from the mobile communication terminal, and if the partial password is incorrect, An unauthorized use confirming means for processing so as not to perform a call connection.

[0011]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below. Embodiment 1 FIG. FIG. 1 is a block diagram showing a configuration of a system for preventing unauthorized use of a mobile communication terminal according to Embodiment 1 of the present invention. In FIG. 1, a mobile phone (mobile communication terminal) 10 performs a call by communicating with a base station (not shown) through a wireless communication line. The exchange 11 performs line switching (switching) to connect a transmission line.

An HLR (Home Location Register; unauthorized use confirmation means) 12 performs location management and authentication of the mobile phone 10, and the HLR 12 is connected to the exchange 11 (provided on a network). A function for confirming whether or not the incoming call number is registered in the incoming call permission table 13 in response to a request from the user, a function for generating and comparing a partial password, and a function for registering the incoming call number in the incoming call permission table 13 I have.

The incoming call permission table 13 stores information for each subscriber (each calling subscriber number) or each mobile phone 10 (each calling terminal number).
As shown in FIG. 2, a password registration memory 130 for registering a password, a called number registration number memory 131 for registering a called number registration number, a called number registration memory 132 for registering a called number, and a final number corresponding to the called number. A last access date / time registration memory 133 for registering the access date / time is provided.

[0014] PSTN (Public Switched Telephone Ne)
twork) 14 is a public switched telephone network (public network) connected to the exchange 11. The password card 15 is a card in which a password (UserID) given to the subscriber is written. As the password, for example, FIG.
As shown in FIG. This password is not recorded on the mobile phone 10. The password card 15 is a card in the form of a credit card or the like, and is passed from the telephone office to the subscriber.

Next, the operation of the system for preventing unauthorized use of a mobile communication terminal (method of preventing unauthorized use of a mobile communication terminal) will be described with reference to FIGS. Here, FIG.
FIG. 4 is a sequence diagram for explaining the operation between the nodes of the system for preventing unauthorized use of the mobile communication terminal when the called number has not been registered; FIG. 4 is a flowchart for explaining the operation of the exchange 11; 5 is a flowchart for explaining the operation of detecting the presence or absence of registration of a called number by the HLR 12 and generating a partial password. FIG.
It is a flowchart for demonstrating operation | movement of comparison of a partial password and registration of a called number by LR12.

The subscriber of the mobile phone 10 has made a contract with the telephone office to receive an unauthorized use prevention service of the mobile phone 10, and the password card 1
5 has been passed.

(1) Operation of Exchange 11 (FIGS. 3 and 4) The mobile phone 10 originates a call (dial operation) by a user (subscriber or unauthorized user) and transmits a call to the exchange 11 (FIG. 3). 3A). The exchange 11 is a mobile phone 10
(Step ST4 in FIG. 4)
1) If the outgoing call number of the detected call is a target to receive the unauthorized use prevention service of the mobile phone 10, a call number registration inquiry request is transmitted to the HLR 12 (3 in FIG. 3).
B), the HLR 12 is checked to see if the detected incoming number is registered in the incoming call permission table 13 (step ST42 in FIG. 4).

As a result of the inquiry, if the incoming call number is registered in the incoming call permission table 13 (in the case of a response with the incoming call number registration), the exchange 11 sends the incoming call to the PSTN 14.
To make a call connection (step ST43 in FIG. 4).
On the other hand, if no incoming number is registered in the incoming call permission table 13 (in the case of a response without incoming number registration), the exchange 1
1 receives the partial password request transmitted from the HLR 12 together with the response of no registration of the called number, and transmits the partial password request to the mobile phone 10 (3 in FIG. 3).
D, step ST44 in FIG. 4).

Here, the partial password request refers to the HLR 12 of the numerals written in the password card 15.
Requests a partial password consisting of two or more digits selected arbitrarily (randomly). In the password card 15 shown in FIG. 1, for example, when the fourth and tenth digits of the 16-digit password are selected as the partial password, the partial password is “40”.

When the user receives the partial password request from the exchange 11, the user inputs the partial password (for example, “40”) requested by the partial password request to the mobile phone 10.
Is dialed and input, and a partial password response is transmitted to the exchange 11 (3E in FIG. 3). If the user is an authorized subscriber, the user can input a correct partial password by referring to the password card 15.

When the exchange 11 receives the partial password from the mobile phone 10 (step ST45 in FIG. 4), it transmits a partial password inquiry request to the HLR 12 (3F in FIG. 3), and determines whether the received partial password is correct. A query is made to the HLR 12 to check (step ST46 in FIG. 4).

If the partial password is correct (in the case of a partial password OK response), the exchange 11 sends the incoming call to the PST.
N14 to make a call connection (step ST4 in FIG. 4).
7). On the other hand, if the partial password is not correct (in the case of a partial password NG response), termination processing is performed and call connection is not performed (step ST48 in FIG. 4). As a result, the user is determined to be an unauthorized user, and unauthorized use is prevented.

(2) Operation of Detecting (Retrieving) Presence or Absence of Registration of Called Number by HLR 12 and Operation of Generating Partial Password (FIGS. 3 and 5) The HLR 12 transmits a called number registration inquiry request transmitted from the exchange 11 (FIG. 3). 3B) is received and detected (step ST51 in FIG. 5), the incoming call permission table 1 is set using the outgoing number of the incoming number registration inquiry request as a key.
It is checked (searched) whether the called number registration inquiry request is registered in the called number registration memory 132 of No. 3 (step ST52 in FIG. 5).

When the corresponding incoming number is in the incoming number registration memory 132, the HLR 12 updates the last access date and time registered in the last access date and time registration memory 133 corresponding to the incoming number one-to-one ( In step ST55 in FIG. 5, a response indicating that there is a called number registration is transmitted to the exchange 11 (step ST56 in FIG. 5).

On the other hand, if the corresponding incoming number is not in the incoming number registration memory 132, the HLR 12 selects two or more digits arbitrarily (randomly) selected from the password registered in the password registration memory 130 of the incoming call permission table 13. (For example, when the second and fourth digits are selected as described above, the partial password is "40") (see FIG. 5). Step ST53), and transmits a response of no called number registration and a partial password request to the exchange 11 (FIG. 3).
3C, step ST54 in FIG. 4).

(3) Operation of HLR 12 for comparing partial passwords and registering destination number (FIGS. 3 and 6) When HLR 12 receives and detects a partial password inquiry request (3F in FIG. 3) transmitted from exchange 11, (Step ST61 in FIG. 6), of the passwords registered in the password registration memory 130 of the incoming call permission table 13, a digit corresponding to the partial password (for example, 4 digits and 10 digits) is compared with the detected partial password. It is checked whether the partial password is correct (step ST62 in FIG. 6).

If the partial password is incorrect (N
G), the HLR 12 transmits a partial password NG response to the exchange 11 (step ST63 in FIG. 6).
On the other hand, if the partial password is correct (OK), H
The LR 12 checks whether or not the number of registered incoming call numbers in the incoming call number registration number memory 131 of the incoming call permission table 13 has reached the maximum value (whether there is a free space in the table) (step ST64 in FIG. 6).

When the number of registered incoming call numbers has reached the maximum value (when there is no space in the table), the HLR 12 deletes the oldest record (the incoming call number and the last access date and time) in the last access date and time registration memory 133. Then, the current incoming call number and the last access date / time (current date / time) are registered at the position of the deleted record (step ST65 in FIG. 6). On the other hand, if the number of registered incoming numbers has not reached the maximum value (if there is a vacancy in the table), the HLR 12 registers the current incoming number and the last access date and time (current date and time) in the vacant record position. (Step ST66 in FIG. 6).

After the HLR 12 registers the record (call number and last access date and time) in the call permission table 13, the HLR 12
A password OK response is transmitted to exchange 11 (3G in FIG. 3, step ST67 in FIG. 6).

In the first embodiment, the mobile phone 10
Has been described, the present invention can also be applied to the prevention of unauthorized use of mobile communication terminals such as PHSs other than the mobile phone 10.

As described above, according to the first embodiment, after the HLR 12 confirms the presence or absence of registration of the called number and compares the partial password, the HLR 12 permits the called mobile phone 10 to accept the incoming call. Since it is configured to perform the above, it is possible to reliably prevent unauthorized use of the mobile phone 10.

That is, when the HLR 12 receives a call from the mobile phone 10 targeted for unauthorized use prevention, the HLR 12 checks whether or not the called number of the call is registered in the incoming call permission table 13 in advance. Even if the device 10 is stolen, copied, modified, or otherwise attempted to be illegally used, it is unlikely that the incoming number (destination) of the unauthorized user matches the incoming number already registered in the incoming call permission table 13. Therefore, there is a high possibility that unauthorized use can be prevented beforehand.

If the incoming call number is not registered in the incoming call permission table 13, the HLR 12 generates a partial password composed of any two or more digits of the password, and transfers the partial password to the mobile phone. A request is made to the telephone 10 to confirm whether or not the partial password is correct. However, since the partial password is different for each password request (for each communication), even if the password given to the subscriber is intercepted, When the next partial password is requested, the intercepted partial password can be used (correct)
The chances are very low.

When the partial password is two digits and the number is 0 to 9, a random response is made to the required partial password, and the possibility that the partial passwords coincide with each other by chance is 1/100. Thus, unauthorized use can be sufficiently prevented.

Embodiment 2 In the first embodiment, the functions of confirming the presence / absence of the registration of the called number, generating / comparing the partial password, and registering the called number are provided in the HLR 12, but these functions are connected to the exchange 11. S
It may be provided in a CP (Service Control Point; a device that controls various services of a telephone station provided on a network), inside the exchange 11, or the like. That is, if the above functions are provided not on the inside of the mobile phone 10 but on the network side such as the HLR 12, the SCP, and the inside of the exchange 11, unauthorized use due to the remodeling of the mobile phone 10 or the like can be prevented.

In the first embodiment, prevention of unauthorized use of the mobile communication terminal has been described. However, the present invention is not limited to this and can be applied to a case where the originator is a general telephone.

[0037]

As described above, according to the first aspect of the present invention, when a call from a mobile communication terminal is detected on the network side, an incoming call is received using the call originating number as a key. Detects whether the number is registered in the incoming call permission table,
In the case where there is no incoming number registration, a partial password composed of an arbitrary digit of the password previously assigned to the subscriber is generated, and the partial password is requested to the mobile communication terminal, and the mobile communication terminal is generated. Confirmed the partial password from and confirmed that if the partial password was incorrect, call connection was not performed, so even if the mobile communication terminal was modified or the password was intercepted, the mobile This has the effect of preventing unauthorized use of the communication terminal.

According to the second aspect of the present invention, since the partial password is composed of any two or more digits of the password, the unauthorized use of the mobile communication terminal can be more reliably prevented. This has the effect.

According to the third aspect of the invention, if the partial password is correct, the unregistered incoming call number is registered in the incoming call permission table, so that incoming call permission can be given to subsequent calls. It works.

According to the fourth aspect of the invention, when the registered number of incoming numbers in the incoming permission table is the maximum allowable number, the record of the oldest number of the last access date and time is deleted, and the unregistered unregistered number is deleted. Since the incoming call number is registered in the incoming call permission table, it is possible to give an incoming call permission to a destination required for the subscriber without increasing the memory capacity of the incoming call permission table.

According to the invention described in claim 5, an incoming call permission table in which a plurality of incoming numbers and passwords are registered in advance for each outgoing number, and a call from a mobile communication terminal provided on the network side. Is detected, using the calling number of the call as a key, the presence or absence of registration of the called number of the call in the incoming call permission table is detected, and if no called number is registered, it is composed of an arbitrary digit of the password. Generates a partial password, requests the partial password from the mobile communication terminal, confirms the partial password from the mobile communication terminal, and if the partial password is incorrect, processes to prevent call connection. Since it is provided with the confirmation means, similar to the first aspect, even if the mobile communication terminal is modified or the like,
Further, even if a password is intercepted, an effect is obtained that unauthorized use of the mobile communication terminal can be reliably prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a system for preventing unauthorized use of a mobile communication terminal according to Embodiment 1 of the present invention.

FIG. 2 is a diagram showing a configuration of an incoming call permission table.

FIG. 3 is a sequence diagram for explaining an operation between nodes in the fraud prevention system for a mobile communication terminal.

FIG. 4 is a flowchart for explaining the operation of the exchange.

FIG. 5 is a flowchart for explaining the operation of detecting whether or not a called number is registered by the HLR and generating a partial password;

FIG. 6 is a flowchart illustrating an operation of comparing partial passwords and registering a called number by the HLR.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Mobile telephone (terminal for mobile communication) 11 Exchanger 12 HLR (illegal use confirmation means) 13 Incoming call permission table 14 PSTN (Public network) 15 Password card

Continued on the front page F term (reference) 5J104 AA07 KA01 KA10 MA01 NA05 NA33 NA38 PA02 5K067 AA32 BB04 DD16 DD17 DD23 EE02 EE16 GG01 HH12 HH22 HH23

Claims (5)

[Claims] When a call from a mobile communication terminal is detected on a network side, the presence / absence of registration of the called number in a call acceptance table is detected using the calling number of the call as a key, In the case where there is no incoming number registration, a partial password composed of an arbitrary digit of a password previously given to the subscriber is generated, and the partial password is requested to the mobile communication terminal, and the mobile communication Confirm the partial password from the device for
A method for preventing unauthorized use of a mobile communication terminal, wherein a call connection is not performed when a partial password is incorrect. 2. The method for preventing unauthorized use of a mobile communication terminal according to claim 1, wherein the partial password is composed of any two or more digits of the password. 3. The method for preventing unauthorized use of a mobile communication terminal according to claim 1, wherein, when the partial password is correct, an unregistered incoming call number is registered in the incoming call permission table. 4. When the number of registered incoming numbers in the incoming call permission table is the maximum allowable number, the record of the oldest incoming call number with the last access date and time is deleted, and an unregistered incoming number is stored in the incoming call permission table. 4. The method for preventing unauthorized use of a mobile communication terminal according to claim 3, wherein registration is performed. 5. An incoming call permission table in which a plurality of incoming numbers and passwords are registered for each outgoing number in advance, and a call from a mobile communication terminal provided on the network side is detected when the outgoing call is detected. Using the outgoing number as a key, detects whether or not the incoming number of the outgoing call is registered in the incoming call permission table, and in the case of no incoming number registration, generates a partial password composed of an arbitrary digit of the password, Requesting the partial password to the mobile communication terminal, confirming the partial password from the mobile communication terminal, and, if the partial password is incorrect, an unauthorized use confirming means for processing so as not to perform a call connection. A system for preventing unauthorized use of a mobile communication terminal.