JP2004356870A - Mobile terminal and data setting method - Google Patents

Abstract

A portable terminal capable of easily encrypting and holding supply data supplied from an external device in a data writing procedure led by the external device on the portable terminal side is realized.
A storage control unit writes SO data received from an SO data read / write device to an EEPROM according to a write address. The flag setting unit 112 sets the encryption request flag 113 when the writing of the SO data is completed. The encryption unit 114 encrypts specific data included in the SO data held in the EEPROM 13 based on the encryption request flag 113.
[Selection diagram] FIG.

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a mobile terminal such as a mobile phone, and more particularly to a mobile terminal that holds data supplied from an external device and a method of setting the data.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, when a mobile phone is sold, at a store or the like, data necessary for use and maintenance of the mobile phone, for example, data called SO data is written to the mobile phone by a dedicated SO data reading and writing device. The mobile phone holds the SO data supplied from the SO data reading / writing device in a writable nonvolatile memory such as an EEPROM (Electrically Erasable Programmable ROM). Examples of the SO data include a telephone number, an authentication key, a write key, and a read key for the mobile phone. The telephone number and the authentication key are necessary when using wireless communication, for example, when a user calls. The authentication key is used in authentication processing performed with the wireless base station at the time of calling, at the time of receiving a call, at the time of location registration of a mobile phone, and the like. The write key and the read key are necessary for the SO data read / write device to again access the mobile phone to the SO data. The write key is necessary when rewriting or erasing SO data. The read key is required when reading SO data.
[0003]
At the time of setting the SO data, the conventional mobile phone is a device that depends on the SO data reading / writing device. Then, the SO data is received from the SO data read / write device together with the write destination address at the timing led by the SO data read / write device, and is written into the nonvolatile memory.
[0004]
[Patent Document 1]
JP-A-2003-69695
[Problems to be solved by the invention]
In recent years, there has been a problem that the above-mentioned SO data is illegally copied from another person's mobile phone and abused. For this reason, in order to make SO data unusable even when copied, it is conceivable to encrypt the SO data at the time of setting and write it to the nonvolatile memory. However, since the address of the write destination and the SO data are output from the SO data read / write device at the timing led by the SO data read / write device, it is difficult for the mobile phone to take the encryption timing. In addition, since a write address is specified for each data write unit, for example, for every 1 byte, it is not easy to encrypt the SO data in units of, for example, several tens of bytes and write it to the specified address.
[0006]
For such a reason, supply data supplied from an external device such as an SO data read / write device in a data write procedure (data output timing, address designation, etc.) led by the external device can be easily performed on a portable terminal side such as a cellular phone. There is a need to keep it encrypted.
[0007]
The present invention has been made in view of such circumstances, and a purpose of the present invention is to easily encrypt and hold supply data supplied from an external device in a data write procedure led by the external device on the portable terminal side. And a data setting method.
[0008]
[Means for Solving the Problems]
In order to solve the above-mentioned problem, the portable terminal according to claim 1 is a portable terminal that holds supply data supplied from an external device, and a storage unit that stores the supply data; A storage control unit that receives the supply data and writes it to the storage unit; an encryption request flag that requests encryption of specific data included in the supply data; and a storage unit that stores the supply data in the storage unit based on the encryption request flag. Encrypting means for encrypting the specified data, and releasing the encryption request flag, and flag setting means for setting the encryption request flag when the writing of the specific data to the storage means is completed. It is characterized by having.
[0009]
In the portable terminal according to the second aspect, the supply data includes an access key required for the external device to access the supply data, and the access key is not subject to encryption.
[0010]
The portable terminal according to claim 3 has a wireless communication function, and the specific data is required when using wireless communication.
[0011]
According to a fourth aspect of the present invention, in the portable terminal, the specific data is an authentication key for certifying its own validity to a wireless communication carrier.
[0012]
The portable terminal according to claim 5, wherein the authentication key is associated with its own telephone number.
[0013]
The portable terminal according to claim 6, wherein the encryption unit refers to the encryption request flag when the power of the portable terminal is turned on.
[0014]
8. The data setting method according to claim 7, wherein the data setting method is a data setting method for a portable terminal that stores supply data supplied from an external device in a storage unit, wherein the supply data is received from the external device and stored in the storage unit. A step of writing, a step of setting an encryption request flag for requesting encryption of specific data included in the supply data when the writing of the supply data to the storage unit is completed, and a step of setting the encryption request flag to Encrypting the specific data stored in the storage unit based on the encrypted request flag, and releasing the encryption request flag.
[0015]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an embodiment of the present invention will be described with reference to the drawings. The mobile terminal of the present invention includes a mobile phone, a mobile terminal called a PDA (Personal Digital Assistants: personal information equipment), and a terminal for a specific use such as a computer game machine. In the present embodiment, a mobile phone will be described as a specific example of a mobile terminal. Also, a system for writing SO data to a mobile phone using an SO data read / write device will be described as an example. SO data is data necessary for use and maintenance of the mobile phone.
[0016]
FIG. 1 is a block diagram showing a configuration of a mobile phone 1 according to one embodiment of the present invention. 1, the mobile phone 1 includes a CPU (central processing unit) 11, a memory unit 12, an EEPROM 13, a wireless communication unit 14, an operation unit 15, a display unit 16, a microphone 17, a speaker 18, and an external interface 19.
[0017]
The CPU 11 controls each section of the mobile phone 1. The memory unit 12 includes a ROM (Read Only Memory) in which programs of the CPU 11 are stored, and a RAM (Random Access Memory) for temporarily storing data. The memory unit 12 is accessed by the CPU 11.
[0018]
The EEPROM 13 is a writable nonvolatile memory used to hold recording data such as SO data. The EEPROM 13 is accessed by the CPU 11. It is also possible to use a flash memory, which is a type of EEPROM.
[0019]
The wireless communication unit 14 transmits and receives wireless signals via an antenna, and performs voice communication or data communication. The operation unit 15 has ten keys for inputting a telephone number and the like, various function keys, and the like. The operation unit 15 outputs the input data to the CPU 11. The display unit 16 includes a display panel, for example, a liquid crystal display panel, and a display control circuit. Display data is input to the display unit 16 from the CPU 11. The microphone 17 outputs the input audio signal to the CPU 11. The speaker 18 outputs an audio signal input from the CPU 11.
[0020]
The external interface 19 is for transmitting and receiving data by connecting to an external device such as an SO data read / write device. For example, as shown in FIG. 2, it is connected to the SO data read / write device 100 by a communication cable 101. Then, the external interface 19 outputs to the CPU 11 the data received from the SO data read / write device 100, for example, the SO data and the write address.
[0021]
The connection form of the external interface 19 to the external device may be a wired connection using a communication cable such as an electric cable or an optical cable, or a wireless connection such as infrared communication or short-range wireless communication. However, when transmitting highly confidential data such as SO data, it is preferable to make a wired connection.
[0022]
FIG. 3 is a functional block diagram showing the components according to the present invention among the functions of the mobile phone 1 of FIG. 3, the components according to the present invention include the above-mentioned EEPROM 13, storage control unit 111, flag setting unit 112, encryption request flag, and encryption unit 114. Among these, the storage control unit 111, the flag setting unit 112, and the encryption unit 114 are blocks obtained by developing the functions realized by the CPU 11 executing the programs stored in the memory unit 12 described above. .
[0023]
The storage control unit 111 receives the SO data and the write address from the SO data read / write device 100 via the external interface 19. Then, the received SO data is written into the EEPROM 13. This write destination address is the write address received from the SO data read / write device 100. Further, the storage control unit 111 notifies the flag setting unit 112 that the writing of the SO data from the SO data read / write device 100 has been completed. For example, when all the writing of the SO data received from the SO data reading and writing apparatus 100 is completed and the checksum for error detection of the SO data is written to the EEPROM 13, the completion of the writing of the SO data is notified to the flag setting unit 112. .
[0024]
The flag setting unit 112 sets the encryption request flag 113 when receiving the SO data write completion notification from the storage control unit 111.
The encryption request flag 113 requests encryption of specific data included in the SO data supplied from the SO data read / write device 100. The setting of the encryption request flag 113 is maintained even when the power of the mobile phone 1 is cut off. For example, the encryption request flag 113 is provided at a specific address of the EEPROM 13. Alternatively, a register using dedicated hardware may be provided. Thus, even if the power of the mobile phone 1 is cut off, the setting of the encryption request flag 113 is retained.
[0025]
The encryption unit 114 encrypts specific data included in the SO data stored in the EEPROM 13 based on the encryption request flag 113. The encryption key used for this encryption is unique to the mobile phone 1. This encryption key is set in the mobile phone 1 in advance. For example, it is recorded in a specific area on the ROM of the memory unit 12. The encryption key can be read only by internal processing closed by the CPU 11 in the mobile phone 1.
[0026]
When the encryption request flag 113 is set, the encryption unit 114 reads out specific data from the EEPROM 13 and encrypts it. Then, this encrypted data is overwritten on the read address of the EEPROM 13. Thus, the specific data included in the SO data in the EEPROM 13 is encrypted. Then, when the encryption of the specific data ends, the encryption unit 114 releases the encryption request flag 113.
[0027]
The time when the encryption unit 114 refers to the encryption request flag 113 is when the power of the mobile phone 1 is turned on. The reason for this is that, when the mobile phone 1 receives the power supply from the SO data read / write device 100 to set the SO data, the mobile phone 1 refers to the encryption request flag 113 after the SO data read from the SO data read / write device 100 is completed. This is because, when the encryption is executed, the power is cut off during the encryption, and the encryption may not be completed normally.
[0028]
Next, the specific data to be encrypted will be described. The SO data supplied from the SO data read / write device 100 to the mobile phone 1 includes a telephone number, an authentication key, a write key, a read key, and the like for the mobile phone. Among these data, at least the authentication key is included in the specific data to be encrypted. The reason for this is that the authentication key proves its legitimacy to the wireless communication carrier during the authentication process performed with the wireless base station when making a call, receiving a call, or registering the location of a mobile phone. This is because, even if the authentication key is encrypted, even if the SO data is copied, an authentication error occurs when wireless communication is used, and unauthorized use cannot be performed. Further, since the authentication key is associated with the telephone number of the mobile phone 1, even if the telephone number of another mobile phone is copied, wireless communication cannot be performed.
[0029]
However, of the SO data, the write key and the read key are excluded from encryption. The reason for this is that the write key and the read key are access keys necessary for the SO data read / write device 100 to access the mobile phone 1 with respect to the SO data again. By excluding the write key and the read key from encryption, rewriting, reading, and erasing of SO data can be performed in the same manner as in the related art.
[0030]
Next, with reference to FIGS. 4 and 5, an operation related to the setting of the SO data of the mobile phone 1 will be described. 4 and 5 are flowcharts showing the flow of the SO data setting process performed by the mobile phone 1.
First, an operation when the mobile phone 1 holds the SO data received from the SO data read / write device 100 will be described with reference to FIG.
In FIG. 4, when receiving the SO data and the write address input from the SO data read / write device 100, the storage control unit 111 of the mobile phone 1 writes the received SO data into the EEPROM 13 in accordance with the simultaneously received write address (step S1, S2).
[0031]
Next, the storage control unit 111 determines whether the writing of the SO data from the SO data read / write device 100 has been completed (step S3). As a result of this determination, when the writing of the SO data is completed, the storage control unit 111 notifies the flag setting unit 112 that the writing of the SO data is completed. Upon receiving this notification, the flag setting unit 112 sets the encryption request flag 113 (step S4).
[0032]
Next, an operation when encrypting SO data held by the mobile phone 1 will be described with reference to FIG. In this example, only the authentication key is encrypted.
First, when the power of the mobile phone 1 is turned on, the processing in FIG. 5 is started. In FIG. 5, the encryption unit 114 of the mobile phone 1 refers to the encryption request flag 113 (Step S11). Next, when the encryption request flag 113 is set, the encryption unit 114 reads out the authentication key from the EEPROM 13 and encrypts it. Then, the encryption key is overwritten on the read address to encrypt the authentication key held in the EEPROM 13 (step S13). Next, the encryption unit 114 clears the encryption request flag 113 (Step S14).
[0033]
As described above, according to the present embodiment, when the writing of SO data from the SO data read / write device 100 is completed, the encryption request flag is set. Then, the specific data (for example, only the authentication key) held in the EEPROM 13 is encrypted based on the encryption request flag. As a result, even if SO data is supplied in a data write procedure (data output timing, address designation, etc.) led by the SO data read / write device 100, the SO data is written to the EEPROM 13 at the time of supply, depending on the SO data read / write device 100. The SO data written into the EEPROM 13 after the writing of the SO data is completed can be easily encrypted. As a result, even if the SO data is copied, the SO data is encrypted, thereby preventing unauthorized use.
[0034]
Further, even after the SO data is encrypted, the SO data read / write device 100 can access the mobile phone 1 with respect to the SO data as in the related art. Thus, there is no need to change the SO data read / write device, and the conventional SO data read / write device can be used as it is. This has a very large effect on cost.
[0035]
The time at which the encrypted specific data is decrypted is, for example, when the specific data is used. For example, at the time of calling, the encrypted data of the authentication key is decrypted and used. In this case, it is preferable to erase the decrypted data after the use of the decrypted specific data and decrypt the encrypted data as necessary from the viewpoint of preventing unauthorized use of the SO data.
[0036]
Further, the time when the encrypted specific data is decrypted may be when the power of the mobile phone 1 is turned on. In this case, when the encryption request flag 113 is set, decryption is performed after encryption. Further, it is preferable that when the power of the mobile phone 1 is cut off, the decrypted data is erased, and the encrypted data is decrypted every time the power of the mobile phone 1 is turned on.
[0037]
Also, the decrypted data can be read out only by internal processing closed by the mobile phone 1 by the CPU 11.
[0038]
The data setting method of the present invention can be applied to electronic devices other than mobile terminals such as mobile phones.
[0039]
As described above, the embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes a design change or the like without departing from the gist of the present invention.
[0040]
【The invention's effect】
As described above, according to the present invention, even when data is supplied in a data writing procedure (data output timing, address designation, etc.) of an external device, the supplied data is easily encrypted and held on the portable terminal side. be able to. As a result, for example, in a system for writing SO data to a mobile phone using an SO data read / write device, even if the SO data held in the mobile phone is copied, the SO data is encrypted. Thus, unauthorized use can be prevented.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a mobile phone 1 according to an embodiment of the present invention.
FIG. 2 is a diagram showing a connection form with an external device (SO data read / write device 100) according to the embodiment;
3 is a functional block diagram showing components of the mobile phone 1 shown in FIG. 1 according to the present invention.
FIG. 4 is a first flowchart illustrating a flow of an SO data setting process performed by the mobile phone 1 according to the embodiment of the present invention.
FIG. 5 is a second flowchart showing the flow of an SO data setting process performed by the mobile phone 1 according to the embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Mobile telephone (portable terminal), 11 ... CPU, 12 ... Memory part, 13 ... EEPROM, 14 ... Wireless communication part, 15 ... Operation part, 16 ... Display part, 17 ... Microphone, 18 ... Speaker, 19 ... External interface , 100: SO data read / write device (external device), 101: communication cable, 111: storage control unit, 112: flag setting unit, 113: encryption request flag, 114: encryption unit

Claims (7)

A portable terminal that holds supply data supplied from an external device,
Storage means for storing the supply data;
A storage control unit that receives the supply data from the external device and writes the received data to the storage unit;
An encryption request flag requesting encryption of the specific data included in the supply data,
Encrypting means for encrypting the specific data stored in the storage means based on the encryption request flag, and releasing the encryption request flag;
Flag setting means for setting the encryption request flag when the writing of the specific data to the storage means is completed,
A mobile terminal comprising: The portable terminal according to claim 1, wherein the supply data includes an access key required for the external device to access the supply data, and the access key is not a target of encryption. Has a wireless communication function,
The portable terminal according to claim 1, wherein the specific data is necessary when using wireless communication. 4. The portable terminal according to claim 3, wherein the specific data is an authentication key for certifying its own validity to a wireless communication carrier. The mobile terminal according to claim 4, wherein the authentication key is associated with its own telephone number. 6. The mobile terminal according to claim 1, wherein the encryption unit refers to the encryption request flag when the power of the mobile terminal is turned on. A data setting method for a mobile terminal that stores supply data supplied from an external device in a storage unit,
Receiving the supply data from the external device and writing the storage data to the storage unit;
When the writing of the supply data to the storage unit is completed, a step of setting an encryption request flag for requesting encryption of specific data included in the supply data,
Encrypting the specific data stored in the storage unit based on the encryption request flag, and releasing the encryption request flag;
A data setting method comprising:

Images