JP2007166123A - System and method for sharing information, personal digital assistant, and information management server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow sharing a personal information even if the memory capacity of an IC card attachable on a personal digital assistant is small and various personal information cannot be held in the IC card. <P>SOLUTION: A mobile phone 3 can be attached with an SIM card 3a, and can store personal information, such as phonebook. An information management server in an authentication center 9 stores personal information which is related to IMSI of the SIM card 3a. The center 9 authenticates access to the server based on the IMSI from the terminal 3. The terminal 3 accesses the server, according to occurrence of events, such as location updating and updating of a phonebook. If the information of the server is more current than the personal information of own terminal, personal information is downloaded from the server, while the personal information in the own terminal is uploaded in the opposite case. The server, if the personal information of the terminal 3 that has accessed is more current, downloads a personal information to the terminal 3, while uploads the personal information of the terminal 3 in the opposite case. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  In the present invention, an information sharing system for sharing a subscriber's personal information between the subscriber's portable information terminal and a predetermined information management server, and an IC card storing the individual identification information of the subscriber can be mounted. The present invention relates to a portable information terminal, an information management server for managing subscriber's personal information, and an information sharing method for sharing subscriber's personal information between the subscriber's portable information terminal and a predetermined information management server.

  2. Description of the Related Art Conventionally, a so-called GSM (Global System for Mobile communications) type mobile phone terminal can be obtained by replacing an IC card (for example, a SIM card: Subscriber Identity Module card) in which subscriber information (subscriber information) is stored. Mobile phone terminals can be used as terminals of the same subscriber (that is, the same telephone number can be used). As described above, a usage mode in which a SIM card is replaced and used from one mobile phone terminal to another mobile phone terminal is also called SIM roaming. Further, the SIM card has a memory therein, and personal information such as a telephone directory can be stored in the memory. That is, when information such as a phone book is stored in the SIM card, when the SIM card is replaced from one mobile phone terminal to another mobile phone terminal (when the SIM roaming is performed), Information such as a telephone directory in the SIM card can also be used in the other mobile phone terminal.

  Conventionally, the above SIM can only be used in the GSM mobile phone service, but the third generation standard IMT-2000 can use a common SIM card between different mobile phone systems. Has been made. In this case, it is called USIM (Universal Subscriber Identity Module) or UIM (User Identity Module) to distinguish from the SIM. In the following description, these SIM, USIM, and UIM are collectively expressed as SIM.

  For example, Japanese Patent Application Laid-Open No. 2003-46634 discloses a SIM card slot, a SIM card reading unit, a control unit, a memory unit, a dial unit, a human machine interface, an alarm unit, and an information processing unit. A telephone dial-up device is disclosed in which, when a SIM card is loaded into a SIM card slot, an electronic telephone directory stored in the SIM card is acquired and used.

  Japanese Patent Laid-Open No. 2002-244986 (patent document 2) discloses that when a mobile phone model is changed, information such as an address book of the mobile phone before the model change is stored in a server. A communication system, a communication terminal, and a program for transferring information such as an address book stored in the server to a mobile phone after changing the model are disclosed.

Japanese Patent Laying-Open No. 2003-46634 (FIG. 1) JP 2002-244986 A (FIG. 1)

  By the way, the SIM card has a function of storing information such as a telephone directory as described above, but various circuits such as a CPU are mounted inside the SIM card and can be used as the information storage memory. There are not many areas. On the other hand, information to be stored, such as personal information, tends to increase year by year such as e-mail addresses and addresses as well as conventional telephone numbers. For this reason, even though the SIM card has an information storage function, many terminal manufacturers provide a separate information storage memory in the mobile phone terminal body, and the information storage memory has a telephone number and electronic Email addresses and other personal information are stored. Thus, when information such as a phone book is stored in the memory in the mobile phone terminal body, that is, when information such as a phone book is not held in the SIM card, the SIM card The information portability inherently possessed will be impaired. That is, the SIM card has information portability that allows information such as a telephone directory stored in the card to be transferred from one mobile phone terminal to another mobile phone terminal during SIM roaming, for example. When information is not originally stored in the SIM card, the information portable function itself provided in the SIM card cannot be used.

  In addition, as the infrastructure for future mobile phone services, Mobile Number Portability (MNP) is planned to be implemented. As a result, the range of model selection and operator (mobile phone service provider) selection has expanded, It is not difficult to imagine that users will frequently change models. Here, SIM is indispensable to realize the above number portability. For example, as described above, when personal information is stored only in the mobile phone terminal main body and not stored in the SIM card, the model is changed. Data porting at the time of purchase must be carried out by a user at a specialized store, or by the user himself / herself using dedicated software on a personal computer, and the convenience of number portability will be impaired. . On the other hand, the sales side must provide a service for data porting, which may be a factor in raising costs. Furthermore, when a subscriber owns a plurality of mobile phone terminals, it is necessary to share information such as a phone book between different terminals. However, as described above, in the present situation where the memory capacity of the SIM card is small, This information sharing is impossible.

  The present invention has been proposed in view of such circumstances, and is a case where the memory capacity of an IC card (SIM card) that can be attached to a portable information terminal is small and various personal information cannot be held in the IC card. However, it is an object of the present invention to provide an information sharing system, a portable information terminal, an information management server, and an information sharing method capable of sharing the personal information.

  The information sharing system of the present invention relates to a portable information terminal that can be loaded with an IC card storing individual identification information of a subscriber and that can store personal information of the subscriber, and is associated with the individual identification information of the subscriber. An information management server for storing the subscriber's personal information, and an authentication center for performing access authentication to the personal information stored in the information management server based on the individual identification information of the subscriber. The personal information of the information management server is accessed in response to the occurrence of a predetermined event, the necessity of downloading the personal information stored in the information management server and the necessity of uploading of the personal information stored by itself And download or upload the personal information according to the result of the necessity of downloading and uploading, and the information management server According to the access, the necessity of downloading the personal information stored by itself and the necessity of uploading of the personal information stored by the portable information terminal are determined. According to the result of the necessity of downloading and uploading, The above-mentioned problem is solved by executing download or upload of personal information.

  In addition, the portable information terminal of the present invention is capable of inserting an IC card storing individual identification information of a subscriber, a transmission / reception unit for connecting to a predetermined communication network, and writing / erasing subscriber's personal information. Personal information stored in the information management server by executing access to an information management server that stores personal information of the subscriber in association with the personal identification information of the subscriber in response to occurrence of a predetermined memory and a predetermined event A CPU that downloads or uploads personal information in accordance with the result of the necessity of downloading and uploading, determining whether the personal information stored therein is necessary and whether to upload personal information stored therein The above-described problems are solved.

  In addition, the information management server of the present invention includes a storage unit that stores personal information of a subscriber in association with individual identification information of the subscriber stored in an IC card loaded in the mobile information terminal, and a mobile information terminal. According to the access, the necessity of downloading the personal information stored by itself and the necessity of uploading of the personal information stored by the portable information terminal are determined, and the result of the necessity of downloading and uploading is determined. By having a CPU for downloading or uploading personal information, the above-described problems are solved.

  In addition, the information sharing method of the present invention enables a mobile information terminal that can be equipped with an IC card storing individual identification information of a subscriber and can store personal information of the subscriber to receive information in response to occurrence of a predetermined event. A step of accessing the personal information of the management server; a step of performing authentication of access to the personal information stored in the information management server by the authentication center based on the individual identification information of the subscriber; Determining whether or not the personal information stored in the information management server needs to be downloaded and whether or not the personal information stored in the information management server needs to be uploaded, and the information management server responds to an access from the portable information terminal. Determining whether the personal information stored in the mobile device needs to be downloaded and uploading the personal information stored in the mobile information terminal; Terminal information management server, in response to the download and upload necessity result in, by a step of executing the downloading or uploading of personal information, to solve the problems described above.

  That is, according to the present invention, the personal information associated with the individual identification information of the subscriber can be stored in both the portable information terminal and the information management server, and both the portable information terminal and the information management server can be stored. , Based on the personal information stored by the other party, it is determined whether or not the personal information needs to be downloaded or uploaded. Both management servers can always hold the same personal information.

  In the present invention, since the same personal information can always be stored in both the portable information terminal and the information management server, for example, the memory capacity of an IC card (SIM card) that can be attached to the portable information terminal is small, Even if personal information cannot be held in an IC card, the personal information can be shared.

  Hereinafter, embodiments of an information sharing system, a portable information terminal, an information management server, and an information sharing method according to the present invention will be described with reference to the drawings.

  In the present embodiment, a mobile phone terminal is cited as an example of the portable information terminal of the present invention. Of course, the content described here is merely an example, and it goes without saying that the present invention is not limited to this example. Yes.

[Outline of information sharing system]
FIG. 1 shows an overall configuration diagram of an information sharing system of the present invention.

  In the information sharing system according to the embodiment of the present invention, personal information such as a telephone directory and a schedule table stored in a mobile phone terminal is placed on an information management server on the network, and for example, when the model of the mobile phone terminal is changed. Makes it possible to transfer the personal information used on the terminal before the model change from the information management server to the terminal after the model change. For example, one user (subscriber) owns a plurality of mobile phone terminals. The personal information on the information management server can be shared among the plurality of terminals. In the information sharing system of the present embodiment, personal information can be shared between terminals via the information management server, so that the convenience of the user can be improved and the personal information is stored in the information management server. For example, even if the user purchases a new device due to the loss or theft of the mobile phone terminal, or if the user sends the mobile phone terminal for repair and borrows an alternative device, The new mobile phone terminal can use the personal information on the information management server without delay.

  Here, in the information sharing system of the present embodiment, the consistency of the personal information between the mobile phone terminal and the information management server, that is, the synchronization of personal information between the mobile phone terminal and the information management server, For example, a predetermined event such as a location update or a change in the contents of personal information occurs.

  The information management server is also connected to the Internet, so that the user can perform management such as changing the personal information via a personal computer, for example.

[Configuration of information sharing system]
Hereinafter, the system configuration shown in FIG. 1 will be described in detail. FIG. 1 shows a conceptual diagram of interconnections between a mobile phone terminal and a SIM card loaded in the terminal, a network operator, and the Internet.

  In FIG. 1, for example, when a call is made from the mobile phone terminal 3 to the mobile phone terminal 4, the user of the terminal 3 inputs the telephone number of the terminal 4 at the terminal 3 to make a dial call. The dial transmission may be automatically performed by the internal software of the mobile phone terminal 3.

  Here, when making a call by selecting a telephone number registered in the phone book, the user can load the phone book stored in the main body of the mobile phone terminal 3 or loaded in the terminal 3. The telephone number of the other party (in this case, the mobile phone terminal 4) is selected from the telephone directory stored in the SIM card 3a. At this time, as to whether to use the phone book in the terminal body or the phone book in the SIM card, the user may be conscious of selecting any phone book, or the terminal may be used regardless of the user's consciousness. The side may automatically select any phone book.

  As described above, the mobile phone terminal 3 that has dialed the mobile phone terminal 4 connects to the nearest mobile phone base station 1 through the air interface 5. When the mobile phone terminal 4 is registered in the mobile phone base station 2 through the air interface 7, the mobile phone terminal 3 and the mobile phone terminal 4 are connected to each other through the digital interface 6. A line connection is established via the telephone base station 1 and the mobile telephone base station 2. Thereby, the user of the mobile phone terminal 3 and the user of the mobile phone terminal 4 can talk to each other.

  The digital interface 6 is also connected to a PSTN (Public Switched Telephone Networks) station 8. Further, a general fixed telephone is connected to the PSTN station 8 by wire. Accordingly, the connection between the general fixed telephone and the mobile phone terminal 3 or the mobile phone terminal 4 is made through the digital interface 6 and the PSTN station 8.

  An authentication center (Authentication Center) 9 is connected to the mobile phone base stations 1 and 2 via a digital interface 6. For example, when the mobile phone terminal 3 is connected to the mobile phone base station 1, the authentication center 9 uses the IMSI (Subscriber Identification) stored in the SIM card 3 a of the mobile phone terminal 3. International Mpbile Subscriber Identity) is received via the mobile phone base station 1, and based on the IMSI, it is authenticated whether the mobile phone terminal 3 is a legitimate user (subscriber) terminal, Only when it is determined that the user is an authorized person, access such as a call is permitted.

  Here, in the embodiment of the present invention, an information management server for storing personal information such as a phone book and a schedule table stored in the above-described mobile phone terminal or SIM card is built in the authentication center 9. The user can manage each personal information.

  The authentication center 9 is also connected to the Internet gateway 11 via the digital interface 6 and authenticates the personal computer 13 that has requested connection via the Internet 12. When the authentication center 9 can authenticate that the connection request from the personal computer 13 is from a legitimate subscriber (a legitimate subscriber of the mobile phone terminal), it authenticates the information management server. Permit access to stored personal information (the subscriber's personal information). When access is permitted, the personal computer 13 can browse personal information, update personal information, and download and upload personal information. Of course, access to personal information stored in the information management server of the authentication center 9 is also possible from a mobile phone terminal via a mobile phone base station. Although an example in which the IMSI in the SIM card is used for subscriber identification has been described here, a telephone number can also be used for subscriber identification.

  In this way, access to the personal information stored in the information management server of the authentication center 9 can be performed via the Internet via the Internet gateway 11 and the digital interface 6 if the mobile phone terminal is a valid subscriber, This is possible via a cellular phone network via a cellular phone base station and a digital interface 6. That is, in the information sharing system of the present embodiment, a network infrastructure that can be freely accessed after authentication regardless of whether the user is in Japan or abroad is constructed.

[Configuration of mobile phone terminal]
FIG. 2 shows a schematic internal configuration of a mobile phone terminal in which a SIM card according to the present embodiment can be loaded.

  First, the configuration on the receiving side will be described.

  A signal received by the antenna 21 passes through the selector 22 and is guided to the reception RF unit 23. The reception RF unit 23 amplifies the reception signal to a level necessary for the subsequent frequency conversion and outputs the amplified signal to the mixer 24. On the other hand, a local oscillation signal necessary for converting the frequency of the received signal to an intermediate frequency is sent from the local oscillator 31 to the mixer 24. In the mixer 24, the local oscillation signal is mixed with the reception signal from the reception RF unit 23, so that the reception signal is converted into an intermediate frequency signal.

  The signal converted into the intermediate frequency in this way is input to the reception IF unit 25, where it is subjected to A / D conversion processing to obtain a sample signal with a constant bit rate.

  This digital data is input to the next reception demodulator 26, where error correction processing or the like is performed, and voice data and communication data are restored.

  The audio data is input to the audio decoding unit 27, subjected to processing such as decompression, bit rate conversion, and further converted to an analog signal by D / A conversion processing.

  This analog audio signal is amplified by the speaker amplifier 28 to power necessary for driving the speaker 29 at the subsequent stage, and is sent to the speaker 29. Thereby, sound is emitted from the speaker 29 into the air.

  On the other hand, the communication data restored by the reception demodulation unit 26 is input from the reception demodulation unit 26 to the communication data decoding unit 30.

  The communication data decoding unit 30 performs decompression of the restored communication data, error correction processing, and the like. Then, the data decoded by the communication data decoding unit 30 is sent to the CPU 44.

  Next, the configuration on the transmission side will be described.

  In the case of voice transmission, the user's voice (voice) is collected by the microphone 38. The sound signal collected by the microphone 38 is amplified to a required level by the microphone amplifier 37. The amplified audio signal is converted into a digital signal by A / D conversion processing in the audio encoding unit 36, and further subjected to processing such as compression to perform bit rate conversion.

  Then, the audio data is sent to the transmission modulation unit 35.

  On the other hand, in the case of data transmission, for example, communication data from the CPU 44 is sent to the transmission modulation unit 35 after being compressed by the communication data encoding unit 39 or added with redundant data for error correction.

  In the transmission modulation unit 35, the audio data or communication data is modulated and encoded, and then D / A converted and sent to the transmission IF unit 34 as a transmission signal.

  In the transmission IF unit 34, the frequency of the transmission signal is converted to an intermediate frequency, further amplified to a necessary level, and then sent to the mixer 33. In the mixer 33, the local oscillation signal from the local oscillator 31 is mixed with the transmission signal from the transmission IF unit 34. Thus, the intermediate frequency signal is converted into a transmission signal having a transmission frequency. Then, the transmission signal is input to the transmission RF unit 32.

  The signal whose power has been amplified by the transmission RF unit 32 is transmitted from the antenna 21 via the selector 22.

  Next, the configuration of the common part will be described.

  A keyboard 51 for the user to control the mobile phone terminal, a display 50 for visually giving various information to the user, a data I / F (interface) 52 for connecting the mobile phone terminal and an external device, A SIM I / F 53 to which the SIM card 54 is detachably connected is connected to a CPU (central processing unit) 44 via an I / O (input / output) unit 40 and a CPU bus 45.

  As described above, the SIM card 54 stores the IMSI as the subscriber information, the contents of the service contract with the operator, the personal information such as the telephone directory and the schedule, the encryption algorithm, the encryption key, and the like. This information is used as needed in various aspects of use of the mobile phone terminal.

  A timer RTC (Real Time Clock) 46 outputs time information such as the current time to the CPU 44 via the CPU bus 45. The time information from the timer RTC 46 is also used for time stamps such as data. Note that the mobile phone terminal of the present embodiment can be synchronized with the reference clock on the network side, and there is no time lag with the network side.

  The ROM 41 is a non-volatile memory, and stores all programs and the like when the CPU 44 executes various processes.

  The RAM 42 is a memory for temporarily storing data generated in the middle of processing when the CPU 44 processes certain data.

  The EEPROM 43 is an electrically erasable and erasable memory, and is a memory for storing setting conditions and the like when a user inputs via the keyboard 51 and makes personal settings to the mobile phone terminal. is there. The EEPROM 43 is also provided with a storage area related to the personal information of users (subscribers and users). By storing information in the EEPROM 43, the user does not need to set conditions every time the mobile phone terminal is turned on / off.

[Basic structure of IMSI]
FIG. 3 shows a basic data structure of the IMSI 70 stored in the SIM card 54. Note that the IMSI 70 stored in the SIM card 54 is an individual identifier given to a user (that is, a subscriber) when the user subscribes, and therefore there cannot be a plurality of the same IMSIs.

  In FIG. 3, the IMSI 70 is composed of three parts: an MCC (Mobile Cuntry Code) 71, an MNC (Mobile Network Code) 72, and an MSIN (Mobile Subscriber Identification Number) 73. The MNC 71 is a code for each country (in each region, a country having a large land area may have a plurality of these codes), and is represented by a three-digit number. The MNC 72 is an operator identification code in the country, and is usually represented by a two-digit number. The last MSIN 73 is a number unique to the subscriber, and is represented by nine to ten digits. Note that the number of MSIN 73 is not directly related to a telephone number or the like.

[Relationship between general IMSI and subscriber information]
FIG. 4 shows the relationship between a general conventional IMSI 70 and subscriber information.

  A typical conventional IMSI 70 has a structure as shown in FIG. 3. In the example of FIG. 4, the MCC 71 is “001”, the MNC 72 is “01”, and the MSIN 73 is “01234456789”. An example is given.

  When a user joins an operator, a telephone number (Telephone No.) 74 and a security key Ki (Security Ki) 77 are basically assigned according to the contents of the contract, and an association with the IMSI 70 is made. Further, a data number (Data No.) 75 and a fax number (Fax No.) 76 are given in association with the IMSI 70 according to the user's request. These associated data are basically stored in the authentication center 9 of FIG. The authentication center 9 is normally installed by each operator, and the stored data can be referred to as necessary.

  In the case of the present embodiment, an information management server for storing personal information such as a subscriber's telephone book and schedule is installed in the authentication center 9.

[Structure of personal information stored in the information management server]
Hereinafter, personal information stored in the information management server of this embodiment will be described with reference to FIG.

  Note that the structure of FIG. 5 is basically the structure shown in FIG. 4 to which personal information is added, and the description of the same parts as those in FIG. 4 is omitted. Further, in the example of FIG. 5, a telephone book is taken as an example of personal information, but it goes without saying that the same applies to other schedules, for example.

  As shown in FIG. 5, the information management server of the present embodiment has a telephone book folder associated with the subscriber's IMSI 70 as a storage area for the subscriber's telephone book (for personal information). 78 is prepared, and the telephone directory information of the subscriber is stored in the telephone directory folder 78 as a common format.

  The telephone directory folder 78 includes tags 80 and attributes 81 and data 82 relating to each tag 80.

  Each tag 80 provides an appropriate identification, such as a person's name or other name, for example. The example of FIG. 5 is an example in which 500 names and names are registered in the telephone directory folder 78, that is, an example in which 500 tags Tag1 to Tag500 exist as tags.

  The attribute 81 indicates what the data 82 associated with the tag 80 is. The attribute 81 identifies, for example, that the data 82 is a fixed phone number, a mobile phone number, a mail address, or the like.

  Data 82 is an area in which information identified by attribute 81 is stored.

  For one tag 80, a plurality of combinations of attributes 81 and data 82 can exist. FIG. 5 shows an example in which a combination of ten attributes 81 and data 82 is associated with one tag.

  In the present embodiment, for example, when the same subscriber has a plurality of mobile phone terminals, the information management server stores the personal information of each mobile phone terminal as shared information as shown in FIG. Remembered. In this case as well, a telephone book is taken as an example of personal information.

  For example, the same subscriber owns, for example, two SIM cards. As shown in FIG. 6, the IMSI stored in one SIM card is set as the IMSI 70a, and the IMSI stored in the other SIM card is set. IMSI 70b. One IMSI 70a is assigned a telephone number 74a, a data number 75a, a fax number 76a, and a security key Ki77a, and the IMSI 70b is assigned a telephone number 74b and a security key Ki77b.

  When the same subscriber owns two SIM cards as in this example, the information management server is provided with a telephone directory folder 78 that is associated with the subscriber's IMSI 70a and IMSI 70b in common, In the telephone directory folder 78, telephone directory information associated with the IMSI 70a and IMSI 70b is stored in a common format. In the IMSI 70a and the IMSI 70b, information other than the telephone directory is isolated from each other. In the example of FIG. 6, two IMSIs are taken as an example, but it goes without saying that even two or more IMSIs can be similarly associated.

[Measures to prevent information leakage when exchanging personal information]
As described above, in the present embodiment, personal information can be exchanged between the information management server and the mobile phone terminal. Therefore, as a measure for preventing leakage of personal information during the information exchange, Information encryption using the data encryption algorithm is also performed.

  Hereinafter, information leakage prevention in the present embodiment using the encryption algorithm in the SIM will be described with reference to FIGS.

  In the present embodiment, information leakage is prevented by encrypting personal information using an encryption key (usually an encryption key written as Kc) used when the mobile phone terminal accesses the network. Note that the encryption algorithm described here is an example, and other appropriate encryption algorithms may be used in the present embodiment.

  In the present embodiment, the mobile phone terminal is, for example, a RAND (pseudo random number) used for communication when a location update is performed or when the content of personal information stored in the terminal or the SIM card 90 is changed. Separately, an RAND issuance request for data protection is sent to the network side (that is, the authentication center 91 side in FIG. 7).

  Upon receiving the data protection RAND issuance request, the authentication center 91 authenticates that the mobile phone terminal that has issued the issuance request is a valid subscriber terminal, and as a result of the authentication, the authorization center 91 When it is confirmed that the terminal is a user terminal, as shown in FIG. 7, the data protection RAND is generated and returned to the mobile phone terminal.

  At this time, the cellular phone terminal acquires the data protection RAND sent from the authentication center 91 as one of the two parameters of the Kc generation algorithm installed in the SIM card 90. . The other parameter of the two parameters is the security key Ki stored in the SIM in association with the IMSI when the operator issues a SIM in advance. The storage area for the parameter Ki in the SIM card is an area that cannot be accessed from the outside.

  Further, as described with reference to FIGS. 4 to 6, the information management server of the authentication center 91 stores the parameter Ki of each subscriber in association with the IMSI of each subscriber.

  Thereafter, when data upload or download of personal information is performed, on the data transmission side, as shown in FIG. 8, the encryption key Kc calculated using the data protection RAND and the security key Ki is used as one parameter, For example, a new encryption key is generated by the encryption algorithm 92 using the data sequence number representing the data transmission sequence in the upload or download as the other parameter, and the plaintext to be transmitted is transmitted by the encryption logic 92 using the encryption key. Data (personal information data) is encrypted. Then, the encrypted data is sent to the receiving side using a communication channel.

  On the other hand, when data upload or download of personal information is performed, on the data receiving side, as shown in FIG. 8, the encryption key Kc calculated using the data protection RAND and the security key Ki is used as one parameter, Using the data sequence number representing the data transmission order as the other parameter, a new encryption key is generated by the encryption algorithm 94, and is encrypted by the decryption logic 95 using the encryption key. Decrypt (decrypt) the existing data. As a result, plaintext data (personal information data) sent by the transmission side is restored.

  According to this embodiment, personal information can be exchanged safely between the mobile phone terminal and the information management server by performing the encryption and decryption processes as described above.

  As a measure for preventing information leakage when personal information is transmitted / received between the personal computer 13 and the authentication center 9 shown in FIG. 1, data encryption such as SSL (Secure Sockets Layer) is generally used. Since processing may be used, it will not be mentioned here.

[Processing flow on the mobile phone terminal]
FIG. 9 shows a flowchart of processing performed in the mobile phone terminal of the present embodiment. Note that the processing of the flowchart shown in FIG. 9 is executed by the CPU 44 performing calculations and controlling each unit based on a program stored in the ROM 41.

  In the present embodiment, the processing of FIG. 9 is premised on the occurrence of an update event due to access to personal information, or an event such as location update when the mobile phone terminal is turned on. It shall be called from time to time.

  In FIG. 9, when the power is first turned on, the CPU 44 determines whether or not a location update event has first occurred as a process of step S2. If the CPU 44 determines that a location update event has occurred in step S2, the CPU 44 proceeds to step S3. If the CPU 44 determines that a location update event has not occurred, the CPU 44 performs steps described later. The process proceeds to S10.

  When it is determined in step S2 that a location update event has occurred and the process proceeds to step S3, the CPU 44 accesses the information management server of the authentication center 9 in FIG. A time stamp check process for comparing the time stamp of the personal information with the time stamp of the personal information stored in the information management server is performed. Next, as the process of step S4, both times Judge whether the stamps are the same. If the CPU 44 determines that both time stamps are the same in step S4, the CPU 44 ends the processing of the flowchart of FIG. 9 without doing anything, and determines that both time stamps are not the same. If so, the process proceeds to step S5.

  In step S5, the CPU 44 performs a data protection RAND issuance request process for the authentication center 9 (actually an information management server).

  Next, as a process of step S6, the CPU 44 determines which data is new among the personal information stored in the terminal itself and the personal information stored in the information management server. If the CPU 44 determines in step S6 that the personal information stored in the terminal is newer, the CPU 44 proceeds to step S12 described later, while the CPU 44 stores the personal information stored in the information management server. If it is determined that the personal information is newer, the process proceeds to step S7.

  When it is determined in step S6 that the personal information on the information management server side is newer and the process proceeds to step S7, the CPU 44 downloads the personal information encrypted by the information management server.

  Next, the CPU 44 uses the encryption key calculated from the previously acquired RAND or the like and performs data decryption for decrypting the downloaded encrypted data as the process of step S8, thereby restoring plaintext data, that is, personal information. .

  Then, the CPU 44 performs the process of storing the restored personal information in an internal storage area (such as the EEPROM 43) as the process of step S9, and then ends the process of the flowchart of FIG.

  In the flowchart of FIG. 9, if it is determined in step S2 that a location update event has not occurred and the process proceeds to step S10, the CPU 44 determines whether the user has updated personal information on the terminal. Make a decision. If the CPU 44 determines that the personal information has not been updated by the user at its own terminal, the CPU 44 ends the processing of the flowchart of FIG. 9 without doing anything. If it is determined that the personal information has been updated, the process proceeds to step S11.

  In step S11, the CPU 44 performs a data protection RAND issuance request process for the authentication center 9 (actually an information management server).

  Next, the CPU 44 encrypts the personal information stored in the terminal by using the RAND acquired from the information management server in the step S11 as the process in the step S12. Then, as the process of step S13, the CPU 44 uploads the encrypted personal information data to the information management server, and then ends the process of the flowchart of FIG.

  In the flowchart of FIG. 9, when it is determined in step S6 that the personal information stored in the terminal is newer and the process proceeds to step S12, the CPU 44 proceeds to step S5. The personal information stored in the terminal is encrypted using the RAND acquired from step S13. Next, in step S13, the encrypted personal information data is uploaded to the information management server. The process of the flowchart of FIG.

  In this embodiment, when the power of the mobile phone terminal is turned off or the SIM card is removed, it is possible to automatically delete the data such as the phone book stored in the terminal. It is also possible to leave it as it is without erasing it. When erasing the data, there is no possibility that the information is stolen by some means, and safety can be improved. On the other hand, when the terminal is left as it is without being erased, the amount of communication with the information management server can be reduced after the terminal is turned on or when the SIM card is loaded.

  The personal information stored in the mobile phone terminal may be encrypted.

  Further, in this embodiment, the timing for accessing the information management server from the mobile phone terminal is not limited to the occurrence of an update event of the personal information as described above, or the location update when the power of the mobile phone terminal is turned on. Alternatively, it may be a case where an elapsed event of an arbitrary or preset period occurs.

[Processing flow on the information management server side]
FIG. 10 shows a flowchart of processing performed on the information management server side of the present embodiment. Note that the processing of the flowchart shown in FIG. 10 is executed by the CPU in the information management server performing calculations and control of each unit.

  In the present embodiment, the flowchart of FIG. 10 assumes a processing example that is called when there is any access related to personal information from a mobile phone terminal.

  In FIG. 10, when there is an access related to personal information from a mobile phone terminal and it is authenticated that the access is from a valid subscriber terminal, the information management server first stores it in its own server as the process of step S22. Time stamp check processing for comparing the time stamp of the personal information being stored with the time stamp of the personal information stored in the accessed mobile phone terminal, and then as the processing of step S23, the time stamp check In the processing, it is determined whether or not both time stamps are the same. If the information management server determines that both time stamps are the same in step S23, the information management server proceeds to step S30 and sends a message to the mobile phone terminal that the personal information is the same for the terminal. After the transmission, the process of the flowchart of FIG. 10 is terminated. On the other hand, if it is determined that the time stamps are not the same, the process proceeds to step S24.

  In step S24, the information management server waits for a data protection RAND issuance request from the mobile phone terminal to perform the RAND issuance process.

  Next, in step S25, the information management server determines which of the personal information stored in the mobile phone terminal and the personal information stored in the server itself is new. . If the information management server determines in step S25 that the personal information stored in the mobile phone terminal is newer, the information management server proceeds to step S31 described later, while the server itself stores it. If it is determined that the personal information is newer, the process proceeds to step S26.

  In step S26, the information management server reads the personal information associated with the IMSI of the mobile phone terminal from the personal information storage area.

  Next, since the read personal information is data in a common format, the information management server converts the data in the shared format into a format dedicated to the mobile phone terminal (a model-dependent format) as a process in step S27. ).

  Then, the information management server encrypts the personal information data converted into the dedicated format as the process of step S28, and then transmits (downloads) the encrypted data to the mobile phone terminal as the process of step S29. The process of the flowchart of FIG.

  In the flowchart of FIG. 10, when it is determined in step S25 that the personal information stored in the mobile phone terminal is newer and the process proceeds to step S31, the information management server receives the information from the mobile phone terminal. Upload information data.

  Here, since the data acquired by the data upload is encrypted data, the information management server performs a decryption process for returning the encrypted data to plain text (personal information) as the process of step S32. Do.

  Next, since the decrypted personal information is data in a terminal-dedicated format (the model-dependent format), the information management server converts the data in the terminal-dedicated format into data in the common format as a process in step S33. Convert to

  After that, the information management server stores the personal information in the common format in the internal personal information storage area in association with the IMSI of the terminal SIM in the process of step S34, and then the flowchart of FIG. The process ends.

  Although the exchange between the mobile phone terminal and the information management server has been described here, the routine of FIG. 10 can also be applied when personal information is changed by a personal computer or the like via the Internet. it can.

[Summary]
As described above, according to the present embodiment, the mobile phone terminal is managed by managing personal information such as the telephone directory and schedule of the subscriber in association with the IMSI which is the subscriber identification information on the network side. The personal information can be managed in common without depending on the conditions of multiple models, contract operators, multiple contracts by the same subscriber, etc., and a system that is extremely convenient for users of mobile phone terminals has been constructed.

  That is, according to the present embodiment, when a subscriber is normally identified by the network side (authentication center) and authenticated as a valid subscriber, the subscriber can use any mobile phone terminal. It is possible to use and manage personal information such as one's own phone book regardless of whether or not the user is using.

  Further, according to the present embodiment, it is possible to connect to an information management server for personal information management via various communication paths such as via each operator's mobile phone base station, PSTN station, and Internet gateway. Therefore, for example, personal information can be used and managed in any of domestic and foreign communications by so-called SIM roaming, communications from different terminals, communications from a fixed telephone, and communications from the Internet.

  In this embodiment, downloading of personal information such as a phone book to a mobile phone terminal is performed when there is a location update at power-on or when the content of personal information is changed (a predetermined event occurs). In general, the personal information data is stored in the terminal body, and thus the retrieval of the personal information such as the telephone number can be executed as one of the functions of the terminal body as before.

  Further, according to the present embodiment, even when a subscriber owns a plurality of mobile phone terminals, personal information such as a telephone directory, subscriber identification information such as an IMSI and a telephone number in the SIM, and the like Can be registered in the information management server so that the same personal information can be shared by the plurality of mobile phone terminals. Therefore, information such as a phone book and a schedule is synchronized between the mobile phone terminals. There is no need to keep it.

  In the case of the system of this embodiment, the information management server can be constructed regardless of the operator, so that the subscriber can use his / her personal information as it is even if the operator is changed.

  In addition, according to the present embodiment, since the user can access the information management server after performing subscriber authentication even via the Internet, personal information in the telephone book can be easily obtained using a personal computer or the like. Can be managed.

  According to the present embodiment, even if the mobile phone terminal is lost or the mobile phone terminal is stolen, the mobile phone terminal lost or stolen by, for example, data operation inside the authentication center In addition, since personal information data such as a telephone directory is managed on the network side, for example, when an IMSI is newly issued, an association between the IMSI and the personal information is established in the authentication center. By having the data changed by an internal data operation, the user can immediately use the newly obtained mobile phone terminal with the same telephone number.

  In addition, according to the present embodiment, data such as personal information stored in the information management server may be encrypted data. In particular, if encrypted data is stored, high security can be maintained.

  The above description of the embodiment is an example of the present invention. For this reason, the present invention is not limited to the above-described embodiment, and it is needless to say that various modifications can be made according to the design or the like as long as the technical idea according to the present invention is not deviated.

  The portable information terminal according to the present embodiment is not limited to a cellular phone terminal, and has a function of storing various personal information and can be mounted with an IC card in which subscriber information is recorded, such as a PDA (Personal Digital Assistant). The present invention can also be applied to various portable information terminals.

1 is a schematic overall configuration diagram of an information sharing system according to an embodiment of the present invention. FIG. 2 is a block diagram showing a schematic internal circuit configuration of a mobile phone terminal in which a SIM card according to an embodiment of the present invention can be loaded. It is a figure which shows the basic data structure of IMSI memorize | stored in the SIM card. It is a figure used for the related description of general conventional IMSI and subscriber information. It is a figure used for the related description of the personal information (for example, telephone directory) memorize | stored in the information management server of this embodiment, and one IMSI. It is a figure used for the related description of the personal information (for example, telephone directory) memorize | stored in the information management server of this embodiment, and two IMSI. It is a figure used for description of the encryption key generation in a mobile telephone terminal (SIM) and an authentication center (information management server). It is a figure used for description of encryption and decoding in a mobile telephone terminal (SIM) and an authentication center (information management server). It is a flowchart which shows the flow of the update process of the personal information performed by the mobile telephone terminal of this embodiment, the upload of personal information, and a download process. It is a flowchart which shows the flow of the update process of the personal information performed by the information management server of this embodiment, the upload of personal information, and a download process.

Explanation of symbols

  1, 2 mobile phone base station, 3, 4 mobile phone terminal, 3a, 4a, 54 SIM card, 5, 7 air interface, 6 digital interface, 8 PSTN station, 9 authentication center, 11 internet gateway, 12 internet, 13 personal computer, 21 antenna, 22 selector, 23 reception RF unit, 24 mixer on reception side, 25 reception IF unit, 26 reception demodulation unit, 27 audio decoding unit, 28 speaker amplifier, 29 speaker, 30 communication data decoding unit, 31 Local oscillator, 32 transmission RF unit, 33 transmission side mixer, 34 transmission IF unit, 35 transmission modulation unit, 36 voice encoding unit, 37 microphone amplifier, 38 microphone, 39 communication data encoding unit, 40 I / O (input) /Output Parts, 41 ROM, 42 RAM, 43 EEPROM, 44 CPU, 45 RTC, 50 display, 51 keyboard, 52 data I / F (interface), 53 SIM I / F (interface)

Claims (25)

A portable information terminal capable of mounting an IC card storing individual identification information of the subscriber and capable of storing the personal information of the subscriber;
An information management server for storing personal information of the subscriber in association with the individual identification information of the subscriber;
An authentication center for performing access authentication to the personal information stored in the information management server based on the individual identification information of the subscriber;
The portable information terminal accesses the personal information of the information management server in response to the occurrence of a predetermined event, and stores the necessity of downloading the personal information stored in the information management server. Judging the necessity of uploading personal information, downloading or uploading the personal information according to the result of the necessity of downloading and uploading,
The information management server determines whether or not to download personal information stored in the mobile information terminal and whether or not to upload personal information stored in the mobile information terminal in response to access from the mobile information terminal. Judging and executing the download or upload of the personal information according to the result of the necessity of the download and upload,
An information sharing system characterized by The information sharing system according to claim 1,
The authentication center also performs access authentication from an information terminal other than the portable information terminal for the personal information of the information management server. The information sharing system according to claim 1,
The mobile information terminal encrypts personal information uploaded to the information management server, decrypts the encrypted personal information downloaded from the information management server,
The information management system, wherein the information management server encrypts personal information to be downloaded to the portable information terminal, and decrypts the encrypted personal information uploaded by the portable information terminal. The information sharing system according to claim 3,
The information sharing system, wherein the portable information terminal and the information management server perform encryption and decryption of the personal information using an encryption algorithm employed in the IC card. The information sharing system according to claim 1,
The portable information terminal accesses the personal information of the information management server in response to the occurrence of a location update event. The information sharing system according to claim 5,
The information sharing system, wherein the portable information terminal accesses personal information of the information management server in response to the occurrence of a location update event after power-on. The information sharing system according to claim 1,
The information sharing system, wherein the portable information terminal accesses the personal information of the information management server in response to the occurrence of an event in which the stored personal information is updated. The information sharing system according to claim 1,
The information management server converts personal information uploaded from the portable information terminal from the terminal-dedicated format to data in a common format, and downloads personal information to the portable information terminal from the common format to the data in the terminal-dedicated format. Information sharing system characterized by converting to The information sharing system according to claim 1,
The information management server stores personal information of one subscriber in association with a plurality of individual identification information. The information sharing system according to claim 1,
The portable information terminal stores the personal information in at least one of an internal storage area provided in the mobile information terminal and a storage area provided in the IC card. The information sharing system according to claim 10,
The portable information terminal erases the personal information when the power is turned off or when the IC card is removed. An interface on which an IC card storing individual identification information of a subscriber can be mounted;
A transmission / reception unit for connecting to a predetermined communication network;
A memory that can write and erase subscriber's personal information;
In response to the occurrence of a predetermined event, the information management server that stores the personal information of the subscriber in association with the personal identification information of the subscriber is accessed via the transmission / reception unit, and the information management server stores the information The necessity of downloading personal information and the necessity of uploading of personal information stored by the user are determined, and the personal information stored in the personal information is transmitted via the transmission / reception unit according to the result of the necessity of downloading and uploading. A CPU for executing download or upload,
A portable information terminal characterized by that. A portable information terminal according to claim 12, wherein
The mobile information terminal, wherein the CPU encrypts personal information uploaded to the information management server and decrypts the encrypted personal information downloaded from the information management server. The portable information terminal according to claim 13,
The CPU performs encryption and decryption of the personal information using an encryption algorithm employed in the IC card. A portable information terminal according to claim 12, wherein
The CPU executes access to personal information of the information management server in response to occurrence of a location update event. The portable information terminal according to claim 15, wherein
The CPU executes access to personal information of the information management server in response to occurrence of a location update event after power-on. A portable information terminal according to claim 12, wherein
The CPU executes access to the personal information of the information management server in response to the occurrence of an event in which the stored personal information is updated. A portable information terminal according to claim 12, wherein
The CPU stores the personal information in at least one of a storage area of the memory and a storage area of the IC card. The portable information terminal according to claim 18, wherein
The portable information terminal, wherein the CPU erases the personal information when the power is turned off or when the IC card is removed from the interface. A storage unit for storing the personal information of the subscriber in association with the individual identification information of the subscriber stored in the IC card loaded in the portable information terminal;
In response to access from the portable information terminal, it is determined whether or not the personal information stored in the portable information terminal is downloaded and whether or not the personal information stored in the portable information terminal is uploaded. A CPU for downloading or uploading the personal information in accordance with the result of necessity of upload,
An information management server characterized by that. An information management server according to claim 20, wherein
The information management server, wherein the CPU encrypts personal information to be downloaded to the portable information terminal and decrypts the encrypted personal information uploaded by the portable information terminal. An information management server according to claim 21, wherein
The CPU performs encryption and decryption of the personal information using an encryption algorithm adopted in the IC card. An information management server according to claim 20, wherein
The CPU converts the personal information uploaded from the portable information terminal from the terminal-dedicated format into data in a common format, and converts the personal information downloaded to the portable information terminal from the common format into data in the terminal-dedicated format An information management server characterized by: An information management server according to claim 20, wherein
The CPU stores the personal information of one subscriber in the storage unit in association with a plurality of individual identification information. Personal information stored in the information management server in response to the occurrence of a predetermined event by a portable information terminal that can be loaded with an IC card storing individual identification information of the subscriber and can store personal information of the subscriber Steps to access information;
An authentication center authenticating access to personal information stored in the information management server based on the individual identification information of the subscriber;
The portable information terminal determines whether or not it is necessary to download the personal information stored in the information management server and whether or not it is necessary to upload the personal information stored therein;
In response to an access from the portable information terminal, the information management server determines whether or not to download personal information stored therein and whether or not to upload personal information stored in the portable information terminal. A step of judging;
The portable information terminal and the information management server include a step of executing download or upload of the personal information in accordance with the result of necessity of the download and upload.

Images