KR20100002612A - Method, terminal, smart card for distinguished illegal use of the terminal and computer readable record-medium on which program for executing method thereof - Google Patents

Abstract

According to an aspect of the present invention, an illegal communication terminal identification method is disclosed. In accordance with an embodiment of the present invention, an illegal communication terminal identification method includes extracting reference terminal identification information stored in a smart card, and comparing terminal identification information with terminal identification information of the communication terminal. Generating an identifier for whether the reference terminal identification information is the same and transmitting the generated identifier to a communication network, wherein the identification check process is not identical to the terminal identification information and the reference terminal identification information. Only in the case, it is characterized by performing. According to the present invention, there is an advantage that the identification process can be selectively performed at a time other than the time of turning on the power, thereby preventing unauthorized use of the lost or stolen communication terminal.

Description

Method, terminal, smart card for distinguished illegal use of the terminal and computer readable record-medium on which program for executing method }

The present invention relates to a method of identifying illegal use of a communication terminal, and more particularly, a method for identifying the use of a stolen or lost communication terminal, a communication terminal, a smart card, and a program for executing the method. To a recorded recording medium.

Recently, with the rapid development of electronic engineering, communication engineering, and terminal technology, mobile communication terminals have various functions. That is, with the rapid development of wireless communication and wireless data processing technology, people can use not only voice calls but also message transmission using mobile communication terminals.

In addition, due to the rapid dissemination of mobile communication terminals, a considerable amount of communication occurs in human relationships through mobile communication terminals, and thus mobile communication terminals have become an essential means of communication in modern life.

In addition, as the use of smart cards is one of the basic specifications in the 3rd generation mobile communication market, research is being actively conducted for each mobile carrier to define its Universal Subscriber Identity Module (USIM) card specification and improve service using the USIM card. .

Conventionally, the domestic mobile communication market has been mainstream in synchronous IS-95 network based on CDMA technology, but recently, Universal Mobile Telecommunication (UMTS) based on Wideband Code Division Multiple Access (WCDMA) method. System) service is being commercialized.

Meanwhile, although USIM is being commercialized, USIM has not been opened yet. But sooner or later, the USIM's lock will be released. Accordingly, it will be easy to replace the mobile phone with the USIM.

However, when the USIM lock function is released, there is a problem that a person who acquires a lost mobile phone or a person who steals the mobile phone can use the mobile phone by mounting his USIM.

Accordingly, recently, the communication network checks whether the terminal is lost or not every time the terminal is turned on. However, even in this case, when the learner uses the charging terminal without using a separate cradle, that is, continuously using the terminal without turning off the power, there is a problem in that it is not possible to check whether the use of the terminal is normal.

In addition, when the power of the terminal is turned on, it is necessary to check whether or not the terminal is a normal use of every terminal, there was a problem that the network is overloaded.

Accordingly, an object of the present invention is to provide an illegal communication terminal identification method capable of performing an identification process even in a general state such as an idle state of a communication terminal.

It is still another object of the present invention to provide an illegal communication terminal identification method for selectively performing an identification process in order to reduce the load on a running communication network.

According to an aspect of the present invention, an illegal communication terminal identification method is disclosed.

In the illegal communication terminal identification method according to an embodiment of the present invention (a) extracting the reference terminal identification information stored in the smart card (b) comparing the reference terminal identification information and the terminal identification information of the communication terminal (c) generating an identifier for whether the terminal identification information and the reference terminal identification information are the same according to the comparison result; and (d) transmitting the generated identifier to a communication network. An identity check process may be performed only when the terminal identification information and the reference terminal identification information are not the same.

The identification process may include receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message. The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, receives an identification message from the equipment identifier register, and determines whether the communication terminal is illegally used. It may be characterized by. can do.

The communication terminal may deactivate all or some functions of the communication terminal if it is determined that the communication terminal is illegally used through the identification process.

The communication terminal may transmit the location information of the communication terminal to a predetermined phone number if it is determined that the communication terminal is illegally used through the identification process.

In the illegal communication terminal identification method, in step (d), the identifier is a routing area update request message, a location update request message, and a call setup request message. It may be included in any one of the transmitted to the communication network.

The identifier may be recorded in a redundant area of a ciphering key sequence number IEI (CKSN) area of the messages.

In the step (c), when the terminal identification information and the reference terminal identification information are the same, the surplus area is set to zero, and when the terminal identification information and the reference terminal identification information are not the same, the surplus area is set to one. It can be characterized by setting.

The terminal identification information may be any one of an international mobile equipment identity (IMEI), a mobile identification number (MIN), and an electronic serial number (ESN) of the communication terminal.

According to another aspect of the present invention, a method for identifying an illegal communication terminal is disclosed.

According to another embodiment of the present invention, an illegal communication terminal identification method includes (a) receiving terminal identification information from the communication terminal (b) comparing the terminal identification information with pre-stored reference terminal identification information (c) As a result of the comparison, generating an identifier for whether the terminal identification information and the reference terminal identification information is the same; and (d) transmitting the generated identifier to the communication network through the communication terminal, the communication network and An identity check process may be performed only when the terminal identification information and the reference terminal identification information are not the same.

The identification process may include receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message. The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, and receives an identification message from the equipment identifier register to determine whether the communication terminal is illegally used. It can be characterized. can do.

The smart card may deactivate all or some functions of the communication terminal if it is determined that the communication terminal is illegally used through the identification process.

The smart card may transmit the location information of the communication terminal to a predetermined phone number if it is determined that the communication terminal is illegally used through the identification process.

In the illegal communication terminal identification method, in step (d), the identifier is a routing area update request message, a location update request message, and a call setup request message. It is included in any one of which is transmitted to the communication network

According to another aspect of the present invention, a communication terminal for identifying whether an illegal communication terminal is disclosed.

The communication terminal according to another embodiment of the present invention is a short-range communication unit for receiving the reference terminal identification information from the smart card determination unit for comparing the reference terminal identification information and the terminal identification information of the communication terminal the comparison result, the terminal And a message management unit for generating an identifier for identification of the identification information and the reference terminal identification information, and a communication unit for transmitting the generated identifier to a communication network, wherein the identity check process is performed with the terminal identification information. It is characterized in that it is performed only when the reference terminal identification information is not the same.

The identification process may include receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message. The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, receives an identification message from the equipment identifier register, and determines whether the communication terminal is illegally used. It may be characterized by. can do.

The communication terminal may further include an authentication unit for deactivating all or part of the functions of the communication terminal if it is determined that the communication terminal is illegally used through the identification process.

The communication terminal may further include an authentication unit for transmitting the location information of the communication terminal to a predetermined phone number if it is determined that the communication terminal is illegally used through the identification process.

The message manager includes the identifier in one of a routing area update request message, a location update request message, and a call setup request message to the communication network. It may be characterized in that the transmission.

The identifier may be recorded in a redundant area of a ciphering key sequence number IEI (CKSN) area of the messages.

The message manager, when the terminal identification information and the reference terminal identification information is the same, sets the surplus area to 0, and sets the surplus area to 1 when the terminal identification information and the reference terminal identification information are not the same. It can be characterized by.

The terminal identification information may be any one of an international mobile equipment identity (IMEI), a mobile identification number (MIN), and an electronic serial number (ESN) of the communication terminal.

According to another aspect of the present invention, a smart card for identifying an illegal communication terminal is disclosed.

The smart card according to another embodiment of the present invention generates an identifier for whether the terminal unit that receives the terminal identification information from the communication terminal is identical to the terminal identification information and pre-stored reference terminal identification information, and generates the generated identifier. It includes a control unit for transmitting to the communication network through the communication terminal, characterized in that to perform the identity check (identity check) process and the terminal identification information and the reference terminal identification information is not the same, .

The identification process may include receiving an identity request message from the communication network, and generating an identity response message including user identification information and terminal identification information in response to the identification request message. The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, and receives an identification message from the equipment identifier register to determine whether the communication terminal is illegally used. It may be characterized by.

The control unit may deactivate all or some functions of the communication terminal if it is determined that the communication terminal is illegally used through the identification process.

The controller may be configured to transmit location information of the communication terminal to a predetermined phone number if it is determined that the communication terminal is illegally used through the identification process.

The controller may include the identifier in one of a routing area update request message, a location update request message, and a call setup request message to transmit to the communication network. It can be characterized by.

According to still another aspect of the present invention, a recording medium having recorded thereon a program for executing an illegal communication terminal identification method is disclosed.

In the recording medium on which the program for executing the illegal communication terminal identification method according to an embodiment of the present invention is recorded, a program of instructions that can be executed by the digital processing apparatus to perform the aforementioned illegal communication terminal identification methods is tangibly implemented. And a program that can be read by the digital processing apparatus is recorded.

Therefore, the present invention has the effect of performing an identification process even in a general state such as an idle state of a communication terminal.

In addition, since the present invention selectively performs an identification process using an identifier, there is an effect of reducing the load on the communication network.

In addition, even if the USIM lock function is released, there is an effect of preventing unauthorized use of a lost or stolen communication terminal.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

Terms including ordinal numbers, such as second and first, may be used to describe various components, but the components are not limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the second component may be referred to as the first component, and similarly, the first component may also be referred to as the second component. The term and / or includes a combination of a plurality of related items or any item of a plurality of related items.

When a component is referred to as being "connected" or "connected" to another component, it may be directly connected to or connected to that other component, but it may be understood that other components may be present in between. Should be. On the other hand, when a component is said to be "directly connected" or "directly connected" to another component, it should be understood that there is no other component in between.

The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In this application, the terms "comprise" or "have" are intended to indicate that there is a feature, number, step, operation, component, part, or combination thereof described in the specification, and one or more other features. It is to be understood that the present invention does not exclude the possibility of the presence or the addition of numbers, steps, operations, components, components, or a combination thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art and shall not be construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings, and the same or corresponding components will be denoted by the same reference numerals regardless of the reference numerals and redundant description thereof will be omitted.

Prior to the detailed description of the drawings, it is to be clear that the division of the components in the present specification is only divided by the main function of each component. That is, two or more components to be described below may be combined into one component, or one component may be provided divided into two or more for each function. Each of the components to be described below may additionally perform some or all of the functions of other components in addition to the main functions of the components, and some of the main functions of each of the components are different. Of course, it may be carried out exclusively by. Therefore, the existence of each component described through this specification should be interpreted functionally, and for this reason, the configuration of the components according to the smart card or communication terminal of the present invention is within the limits to achieve the object of the present invention. It will be clear from FIG. 5 that it may be different.

The present invention identifies illegal use of communication terminals. For example, suppose a user loses a communication terminal. A person who has acquired the corresponding communication terminal can use a smart card such as his SIM card on the communication terminal. In this case, according to the present invention, it is illegal for the learner to use the corresponding communication terminal, and it can be determined by the communication network.

The smart card of the present invention includes a CPU, a nonvolatile memory, an active memory, and the like. Smart cards have the ability to store information in memory, process it, or use it to perform certain operations.

Smart cards support the UICC used in a comprehensive technology including the UMTS Subscriber Identity Module (USIM) used in WCDMA technology, the UIM or R-UIM used in CDMA technology, the SIM used in GSM technology, and all three technologies. It is obvious to those skilled in the art that the name can include.

Hereinafter, the USIM will be described as a representative example.

Hereinafter, with reference to FIG. 1, a system that can prevent the use of illegal communication terminals will be described.

1 is a system diagram for identifying an illegal communication terminal 110 according to an embodiment of the present invention.

Referring to FIG. 1, a system for identifying an illegal communication terminal 110 includes a user equipment (hereinafter referred to as UE 100) and a communication network 130.

The UE 100 is a term referring to a mobile terminal in the 3GPP standard. In the present specification, the UE 100 will be described as a representative example. However, the present invention is not limited thereto, and the present invention is not limited thereto. It includes a communication terminal 110 equipped with all the smart card 120 to perform.

The UE 100 may be largely classified into a communication terminal 110 and a USIM according to a function.

In general, since the USIM can be physically separated from the communication terminal 110, a standard interface is defined between the two.

Here, the communication terminal 110 is a PDA (Personal Digital Assistant), cellular phone, PCS (Personal Communication Service) phone, WCDMA phone, CDMA-2000 phone, MBS (Mobile Broad and System) phone to communicate with the mobile communication network 130 In addition, the terminal may be a terminal for communicating with a wired or wireless Internet network such as a personal computer, a hand-held PC, a notebook PC, and the like.

Hereinafter, a description will be given on the assumption that the communication terminal 110 is a mobile terminal such as a WCDMA phone implemented to use a communication service while moving, but it is apparent to those skilled in the art that the communication terminal 110 is not limited to such a terminal type. .

In the present invention, the communication terminal 110 is equipped with a USIM. The communication terminal 110 reads out the IMSI stored in the mounted USIM and performs communication with the communication network 130.

In detail, the communication terminal 110 may perform a routing update process for securing a communication path with the communication network 130 (in particular, the base station Node B). In addition, the communication terminal 110 may perform a location update process for registering the location of the communication terminal 110. In addition, the communication terminal 110 may perform a call setup process for conducting a call (voice or video) with another communication terminal 110 through the communication network 130.

Hereinafter, the operation of the communication terminal 110 for determining whether the communication terminal 110 is illegally used will be described in detail with reference to FIG. 4.

USIM is a component that stores a user's unique information, and is generally in the form of an IC (Integrated Card) card that is physically mounted on one side of the UE (100). The USIM can provide various applications, where various applications include banking functions, phonebook functions, transportation functions, and the like, and communication functions corresponding to various wireless access technologies. For this reason, the USIM is often referred to as a universal integrated circuit (UICC) equipped with a smart card 120 function.

Generally, what is included in the USIM is supplied by a service provider. In addition, the USIM may include unique information (eg, IMSI) of a subscriber stored in a home location register (HLR) of a core network included in the communication network 130.

In the following description, basic information that can be stored in the USIM will be described in detail.

First, the USIM may be maintained by encryption algorithms, international mobile subscriber identity (IMSI), and access class information, which are basic information set by the USIM manufacturing company and the service provider.

In addition, the USIM may store location identifiers (eg, Location Area Identity, Routing Area Identity, etc.), Temporary Mobile Subscriber Identity (TMSI), and encryption parameters as information for providing mobility of the terminal. In addition, information on the types of services accessible through the corresponding USIM can be maintained.

The communication network 130 includes not only CDMA or WCDMA, but also all wired and wireless communication networks 130 capable of providing a message transmission service of contents between the calling terminal and the called terminal.

WCDMA will be described below as an example. The WCDMA network may include a radio base station Node B, a radio network controller (RNC), a Serving GPRS Support Node (SGSN), and a Gateway GPRS Support Node (GGSN). Since the WCDMA network is a known technology, detailed descriptions are omitted to clarify the gist of the present invention.

So far, a system for identifying an illegal communication terminal 110 according to an embodiment of the present invention has been described with reference to FIG. 1. Hereinafter, a communication mechanism between the communication terminal 110 and the smart card 120 will be described in detail with reference to FIG. 2.

2 is a view for explaining a communication mechanism between the communication terminal 110 and the smart card 120 applied to an embodiment of the present invention.

As shown in FIG. 3, the communication between the communication terminal 110 and the smart card 120 according to the prior art is a half duplex mode communication method in the form of request / response using a syntax defined in the ISO 7816 standard. Follow. In general, the transmission scheme defined in the ISO 7816 standard supports low-speed data communication, eg, 9.6 kbps, using serial bidirectional transmission lines.

The ISO 7816 standard provides two transport protocols.

One of them, the T = 0 protocol, is a transmission protocol used in the early days of ISO 7816 and follows the asynchronous half-duplex byte transmission scheme.

The remaining T = 1 protocols are called block transfer protocols, and there is room for some improvement in security compared to byte transfer protocols. Since adopting T = 0 protocol in GSM's 11.11 Subscriber Identification Module (SIM), next-generation credit card EMVs have adopted both T = 0 and T = 1 protocols.

Referring to FIG. 3, a command is initiated by the communication terminal 110, and a card operating system embedded in the smart card 120 interprets a command received from the communication terminal 110. After updating or extracting data stored in the smart card 120, the processing result is transmitted to the communication terminal 110 through a response message.

In ISO 7816-7, APDU (Application Protocol Data Unit) command messages and APDU response messages are defined for the transmission of control signals and data between the communication terminal 110 and the smart card 120. have.

In addition, it should be noted that the communication terminal 110 and the smart card 120 may provide a USB interface for high-speed data communication, if necessary.

For example, the control procedure between the general communication terminal 110 and the smart card 120 may use serial communication based on ISO 7816, and a USB interface may be used when high-speed data communication such as file transfer is required.

So far, the communication mechanism between the communication terminal 110 and the smart card 120 according to an embodiment of the present invention has been described. Hereinafter, the APDU command message structure defined in ISO 7816 will be described in detail with reference to FIG. 3.

3 is a diagram illustrating an APDU command message structure defined in ISO 7816 applied to an embodiment of the present invention.

As shown in FIG. 4, the APUU command message is mainly composed of a header 310 and a body 320.

The header 310 may be composed of a class, an instruction code, and a parameter.

Here, the parameter is composed of P1 and P2, P1 and P2 indicates the reference address information of the command code.

A class is an area in which class bytes are written to identify a set of instructions, such as ISO instructions, dedicated instructions, encryption, etc., described in detail in ISO 7816-4.

The instruction code is a code for identifying the instruction type in combination with the class field. The LSB of the valid instruction code is always 0, and the MSB cannot be 6 or 9. The reason is that the value is used internally by the smart card manufacturer to avoid the conflict.

Body 320 has a variable length, length of command data (Lc) indicating the length of the data included in the command message, DATA indicating the data to be recorded in the address area of the smart card 120 and smart card 120 It consists of a Length of Expected response data (Le) indicating the size of the response message to be received from.

Hereinafter, various structures of the APDU command message will be briefly described.

The first structure is a command message that does not require transmission or reception data, and is composed of a class, a command code, P1, and P2.

The second structure is a command message containing data to be sent from the terminal to the smart card 120. Consists of class, command code, P1, P2, Lc, and DATA.

The third structure is a command message that the terminal does not transmit data to the smart card 120 but requests a data reply response to the smart card 120. The third structure includes a class, a command code, P1, P2, and Le.

Lastly, the fourth structure is a command message for requesting the smart card 120 for a data reply response at the same time that the terminal transmits data to the smart card 120. The class, command code, P1, P2, Lc, DATA, Le It consists of.

So far, the APDU command message structure defined in ISO 7816 applied to an embodiment of the present invention has been described with reference to FIG. 3. Hereinafter, the communication terminal 110 and the smart card 120 will be described in detail with reference to FIG. 4.

4 is a configuration diagram of a communication terminal 110 and a smart card 120 according to an embodiment of the present invention.

The present invention compares the terminal identification number (hereinafter referred to as "reference terminal identification number") stored in the smart card 120 and the terminal identification number of the communication terminal 110 currently equipped with the smart card 120, illegal use In the case of a communication terminal 110 that may be lost or stolen, an identifier is inserted into a specific message and transmitted to the communication network 130. Thereafter, the communication network 130 receives the corresponding identifier and performs an identification process only on the communication terminal 110 which may be lost to determine whether to use illegally.

Therefore, according to the present invention, the communication network 130 does not need to perform the identification process for all the communication terminal 110 can perform a more efficient illegal communication terminal 110 management.

In addition, the present invention transmits an identifier in a routing update process, a location update process, a call setup process, and the like, unlike the conventional method of performing an identification process only when the power of the communication terminal 110 is turned on.

Therefore, according to the present invention, even if a person who has acquired the lost communication terminal 110 uses the acquired communication terminal 110 while maintaining it without turning off the power, the identification process may be performed to determine whether it is illegal use. Can be.

In the present invention, the smart card 120 and the communication terminal 110 may perform the above-described identifier generation and transmission, respectively. Hereinafter, the configuration of the smart card 120 and the communication terminal 110 will be described in detail with reference to FIG. 4, but redundant descriptions will be omitted for convenience of understanding and description. For example, the operation of comparing the reference terminal identification information and the terminal identification information may be performed by the determination unit 405 of the communication terminal 110 and may be performed by the control unit 421 of the smart card 120. In this case, the description will be given on one component, and the description of the other component may be omitted.

Referring to FIG. 4, the communication terminal 110 includes a short range communication unit 403, a communication unit 403, a determination unit 405, a message management unit 407, an authentication unit 409, an input / output unit 411, and a storage unit ( 413).

The short range communication unit 403 transmits / receives data and signals, such as reference terminal identification information, with the mounted smart card 120. Here, the short range communication unit 403 and the smart card 120 may perform communication using the APDU command message defined in ISO 7816 described with reference to FIG. 3.

The communication unit 403 transmits and receives all data and signals necessary for identifying the illegal communication terminal 110, such as a message including the communication network 130 and an identifier (to be described later).

The determination unit 405 compares the terminal identification information of the communication terminal 110 with the reference terminal identification information received from the smart card 120. Here, the terminal identification number is a unique number of the communication terminal 110. That is, the terminal identification number may be any one of an International Mobile Equipment Identity (IMEI), a Mobile Identification Number (MIN), and an Electronic Serial Number (ESN).

In addition, the reference terminal identification number is a terminal identification number stored in the smart card 120. In the present invention, the smart card 120 stores the terminal identification number of the communication terminal 110 at the time of opening the communication terminal 110. The stored terminal identification number is set as the reference terminal identification number.

Here, the reference terminal identification number may be one or more. That is, the smart card 120 may store all terminal identification numbers of the communication terminal 110 registered for the user to use legally, and set the terminal identification information as the reference terminal identification number.

In detail, the determination unit 405 extracts a unique terminal identification number of the communication terminal 110 from the storage area of the communication terminal 110. The determination unit 405 compares whether the terminal identification information (IMEI, etc.) received from the currently mounted smart card 120 is the same as the extracted terminal identification information. Alternatively, when the reference terminal identification information is plural, the determination unit 405 compares whether the terminal identification number is the same as one of the reference terminal identification numbers.

The message manager 407 generates an identifier when the comparison result of the determination unit 405 is the same as the terminal identification information and the reference terminal identification information.

Here, the identifier is information representing a comparison result of the terminal identification information and the reference terminal identification information. For example, the identifier may be represented by one bit. As a result of the above comparison, the identifier may be represented by one bit, 0 in the case of the same, and 1 in the case of the same.

In addition, the message manager 407 may generate the generated identifier as a routing update request message (Routing area update reqUE (100) st message), a location update request message (Location update reqUE (100) st message), and a call setup request message (Call setup). reqUE (100) st message) and a call setup response message. The message manager 407 may transmit the corresponding message to the communication network 130 through the communication unit 403 described above.

This will be described in detail in the description of FIG. 5.

Here, when the received identifier indicates that the reference terminal identification information is different from the terminal identification information, the communication terminal 110 may use the communication terminal 110 for illegal use, for example, loss or theft. Judging by.

In this case, in the present invention, the communication network 130 and the communication terminal 110 performs an identification process for determining whether or not illegal use. The communication terminal 110 is determined whether or not the communication terminal 110 is used illegally through the identification process from the communication network 130.

Identification process will be described in detail in the description of FIG.

If it is determined that the use of the communication terminal 110 is illegal, the authenticator 409 minimizes the damage of a legitimate user and performs an operation for finding a legitimate user.

In detail, when the authentication unit 409 determines that the communication terminal 110 that is illegally used through the identification process described above, that is, the corresponding communication terminal 110 is a lost or stolen communication terminal 110, All or some functions of the communication terminal 110 may be inactivated.

For example, if the authentication unit 409 determines that the communication terminal 110 is illegally used, the authentication unit 409 may cut off the power of the communication terminal 110 or maintain the power, but inactivate all functions. As another example, the authenticator 409 may deactivate only a function to be charged such as an outgoing function, a text message transmission function, and a wireless Internet access function. This is because when the communication terminal 110 is lost, even if the incoming function is deactivated, it may be more difficult for the user to find the communication terminal 110.

In addition, if it is determined that the communication terminal 110 is illegally used, the authenticator 409 may transmit the location information of the communication terminal 110 to a predetermined phone number. When the user sets the location information to be transmitted when the parent's phone number is lost in advance, the authenticator 409 may transmit the location information to the corresponding phone number. The location information may be collected through GPS embedded in the communication terminal 110 or may be location information received from the communication network 130.

The input / output unit 411 includes an input module such as a keypad or a touch screen for input control of a calling terminal, and an output module such as an LCD window or a speaker for outputting sound source or image data.

The storage unit 413 may store a predetermined program for controlling the overall operation of the communication terminal 110, data input and output, and various data processed. In addition, the storage unit 413 stores the terminal identification information of the communication terminal.

In the present specification, the short-range communication unit 403, the communication unit 403, the determination unit 405, the message management unit 407, the authentication unit 409, the input / output unit 411, and the storage unit 413 of the communication terminal 110 are described. Functionally expressed. That is, each functional part is represented separately. However, this is for convenience of description and may be implemented in one circuit (micro circuit as one logic unit).

Again, referring to FIG. 4, the smart card 120 may include a controller 421, an interface unit 423, and a memory unit 425.

The controller 421 performs all operations for the operation of the smart card 120. In addition, the controller 421 may perform operations performed by the determination unit 405, the message manager 407, or the authentication unit 409 of the communication terminal 110 described above.

That is, the control unit 421 is the terminal identification information (received from the communication terminal 110) of the currently mounted communication terminal 110 and the reference terminal identification information stored in the storage area of the smart card 120 (read out from the storage area). Compare The controller 421 generates an identifier according to the comparison result. Thereafter, the controller 421 transmits the generated identifier to the communication network 130 through the communication terminal 110.

Since this operation is the same as described above, a detailed description thereof will be omitted.

The interface unit 423 communicates with the communication terminal 110. In particular, the interface unit 423 is in contact with the short-range communication unit 403 of the communication terminal 110 (non-contact possible) to perform data communication, such as receiving terminal identification information. In addition, as described above, the interface unit 423 and the short-range communication unit 403 may perform communication using the APDU command message defined in ISO 7816 described with reference to FIG. 3.

The memory unit 425 stores reference terminal identification information necessary for the control unit 421 (or the determination unit 405 of the communication terminal 110) to be compared with the terminal identification information. The memory unit 425 stores information (or a program) for overall driving of the smart card 120.

Although not shown, the memory unit 425 includes a master file (MF), a dedicated file (DF), and an elementary file (EF).

The smart card 120 has a file structure having a hierarchical structure of MF, DF, and EF as defined in the ISO 7816-4 standard. MF is the root of the file structure in the UICC. There is a DF of a folder concept that bundles and classifies a plurality of files into a lower layer of the MF, and an EF stores actual data in the lower layer of the DF.

So far, the communication terminal 110 and the smart card 120 according to an embodiment of the present invention have been described with reference to FIG. 4. Hereinafter, the identification process of the illegal communication terminal 110 will be described in detail with reference to FIG. 5.

5 is a call processing diagram for the identification process of the illegal communication terminal 110 according to an embodiment of the present invention.

The present invention generates an identifier of the communication terminal 110, and transmits it to the communication network 130 to selectively perform the identification process. This series of processes (identifier generation and transmission) may be performed in the communication terminal 110. Alternatively, the smart card 120 may subjectively perform a series of processes.

Therefore, in the following description of the drawings, the subject of the operation will be described as the UE 100 described above for the convenience of understanding and explanation. It is apparent that the present invention is not limited thereto.

Hereinafter, referring to FIG. 5, the process after the UE 100 generates the above-described identifier, that is, whether the reference terminal identification information and the terminal identification information are the same will be described.

In step S510, the UE 100 transmits to the communication network 130 an identifier generated in one of a routing update request message, a location update request message, and a call setup request message.

In the first embodiment of the present invention, the UE 100 transmits the identifier to the communication network 130 by including the identifier in the routing update request message.

Here, the routing update request message is a message transmitted when a process for establishing a path between the UE 100 and the communication network 130 is performed. That is, in general, the UE 100 performing mobile communication transmits a routing update request message as a request message for establishing a path to the communication network 130 that manages the UE 100.

For example, when a handoff occurs due to the movement of the UE 100, the UE 100 transmits a routing update request message to the communication network 130.

In the second embodiment of the present invention, the UE 100 transmits the identifier to the communication network 130 by including the identifier in the location update request message.

Here, the update request message is a message transmitted for registering a periodic location from the UE 100 to the communication network 130 (in particular, the base station Node B). When the UE 100 has mobility, since the communication network 130 needs to know the location of the moving UE 100 to perform smooth communication when necessary (eg, call setup request from another UE 100). to be.

According to the third embodiment of the present invention, the UE 100 transmits the identifier to the call establishment request message to the communication network 130.

Here, the call setup request message is transmitted when the UE 100 requests the communication network 130 to set up a call for a voice or video call.

In the above-described first to third embodiments, the UE 100 assigns an identifier to a surplus area among Ciphering Key SeqUE (100) Number Number IEI (CKSN) areas of messages transmitted to the communication network 130. Can be inserted.

According to the communication standard between the UE 100 and the communication network 130 currently used, the messages in the above-described first to third embodiments include the CKSN region. The CKSN region includes one spare bit. Accordingly, the UE 100 may set a redundant region, that is, a reserved bit, in the CKSN region to 0 when the reference terminal identification information and the terminal identification number are the same, or 1 when the same is not the same.

The communication network 130 reads the corresponding reserved bit, and if it is 1, does not perform an identification process, and if it is 0, performs an identification process.

According to the first to third embodiments described above, unlike the conventional method in which the loss registration of the UE 100, that is, the identification process, is performed only at the time of turning on the power of the UE 100, Or when a specific function is performed, the UE 100 transmits an identifier to the communication network 130. Therefore, when the identifier indicates the possibility of loss (that is, when the reference terminal identification number and the terminal identification number is different), the identification process may be performed in the communication network 130.

Subsequently, in steps S520 and S530, the communication network 130 extracts an identifier from the above-described messages (step S520). The communication network 130 determines whether the extracted identifier indicates illegal use of the communication terminal 110 (S530). That is, it is determined whether the reference terminal identification information and the terminal identification information are the same.

The communication network 130 performs step S540 in the same case. Meanwhile, if the communication network 130 is not the same, the communication network 130 performs an identification process with the UE 100. Detailed description of the identification process will be described later with reference to the call processing diagram of FIG. 7.

Subsequently, in step S540, the communication network 130 transmits an accept (response) or reject message to the UE 100. Specifically, the communication network 130 may indicate that the identifier indicates that the communication terminal 110 is not an illegal use, or as a result of identification, that the communication terminal 110 is not an illegal use (that is, a legal communication terminal ( If the identification is successful at 110), one of the routing update acceptance message, the location update acceptance message, and the call setup acceptance message is transmitted to the UE 100.

So far, the identification process of the illegal communication terminal 110 according to an embodiment of the present invention has been described with reference to FIG. 5. Hereinafter, the identification process will be described in detail with reference to FIG. 6.

6 is a call processing diagram for an identification process according to an embodiment of the present invention.

Hereinafter, referring to FIG. 6, when the identifier indicates that the reference terminal identification information and the terminal identification information are inconsistent with each other in FIG. 5, the identification process performed between the communication network 130 and the UE 100 will be described in detail. do.

In step S710 and step S720, the UE 100 transmits an identification request (Identity ReqUE (100) st message) to the switching center (ie, SGSN or MSC) 131 of the communication network 130 to the UE 100 ( S710). The UE 100 transmits an identity response message in response to the received identification request.

Here, the identification response includes user identification information (IMSI, etc.) stored in the smart card 120 included in the UE 100 and identification information (ie, terminal identification information) of the communication terminal 110 included in the UE 100. ) May be included.

Subsequently, in steps S730 and S740, the SGSN 131 or the MSC 131 may identify the identification request message including identification information of the communication terminal 110 received in the equipment identity register (EIR) 133. Check IMEI). The EIR 133 receives an identification message (Check IMEI Ack) for the transmitted identification information.

Here, the EIR 133 includes a database having information related to the change and status of the communication terminal 110 using unique identification information (IMEI, etc.). EIR 133 includes three basic groups of IMEI data. One is a "white list" containing the range of valid communication terminals 110 approved for operation in the network. The other is a "black list" which contains a list of IMEI numbers reported as stolen, fraudulent, faulty, faulty or forbidden to operate in the network. The third group is called the "gray list", which is an intermediate list between "white" and "black" and includes a suspicious communication terminal 110 under current supervision to approve a black listing.

Thus, the IMEI represents the state of a particular communication terminal 110 that has been approved for operation (white list), prohibited for operation (black list), or approved but under supervision (gray list) in the network. Alternatively or additionally, IMEI may represent more detailed conditions such as fraud, theft, failure, etc. of communication terminal 110. As described in greater detail below, the location of a particular communication terminal 110 may be calculated whenever the device has a particular state identified as blacklisted or lost or stolen.

The invention can also be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored.

For example, the computer-readable recording medium may include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like.

It may also include the implementation in the form of a carrier wave (for example, transmission over the Internet).

The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

And functional programs, codes and code segments for implementing the present invention can be easily inferred by programmers in the art to which the present invention belongs.

Although the above has been described with reference to a preferred embodiment of the present invention, those skilled in the art to which the present invention pertains without departing from the spirit and scope of the present invention as set forth in the claims below It will be appreciated that modifications and variations can be made.

1 is a system diagram for illegal communication terminal identification according to an embodiment of the present invention.

2 is a view for explaining a communication mechanism between a communication terminal and a smart card applied to an embodiment of the present invention.

3 is an APDU command message structure defined in ISO 7816 applied to an embodiment of the present invention.

4 is a block diagram of a communication terminal and a smart card according to an embodiment of the present invention.

5 is a call processing diagram for an illegal communication terminal identification process according to an embodiment of the present invention.

6 is a call processing diagram for the identification process according to an embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

100: UE (User Equipment) 110: communication terminal

120: smart card 130: network

310: Header 320: Body

401: short-range communication unit 403: communication unit

405: Determination unit 407: Message management unit

409: authentication unit 411: input and output unit

413: storage unit 421: control unit

423: interface unit 425: memory unit

131: SGSN / MSC 133: EIR

Claims (27)

In a method for identifying whether the communication terminal equipped with a smart card illegal use of the communication terminal, (a) extracting reference terminal identification information stored in the smart card; (b) comparing the terminal identification information of the communication terminal with the reference terminal identification information; (c) generating an identifier for whether the terminal identification information is identical to the reference terminal identification information according to the comparison result; And (d) transmitting the generated identifier to a communication network, And performing the identity check process only when the terminal identification information and the reference terminal identification information are not the same. The method of claim 1, The identification process, Receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message, The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, receives an identification message from the equipment identifier register, and determines whether the communication terminal is illegally used. Illegal communication terminal identification method. The method of claim 1, The communication terminal, Through the identification process, if it is determined that the communication terminal is illegally used, illegal communication terminal identification method, characterized in that to deactivate all or part of the function of the communication terminal. The method of claim 1, The communication terminal, If it is determined that the communication terminal is illegally used through the identification process, illegal communication terminal identification method, characterized in that for transmitting the location information of the communication terminal to a predetermined telephone number. The method of claim 1, In step (d), The identifier may be included in one of a routing area update request message, a location update request message, and a call setup request message and transmitted to the communication network. Illegal communication terminal identification method. The method of claim 5, The identifier is The illegal communication terminal identification method of claim 5, wherein the message is recorded in a surplus area among ciphering key sequence number IEI (CKSN) areas. The method of claim 6, In step (c), When the terminal identification information and the reference terminal identification information is the same, the surplus area is set to 0, and when the terminal identification information and the reference terminal identification information is not the same, the surplus area is set to 1 How to identify illegal communication terminals. The method of claim 1, The terminal identification information, Illegal communication terminal identification method, characterized in that any one of the International Mobile Equipment Identity (IMEI), Mobile Identification Number (MIN) and Electronic Serial Number (ESN) of the communication terminal. In the method of identifying whether the smart card mounted on the communication terminal illegal use of the communication terminal, (a) receiving terminal identification information from the communication terminal; (b) comparing the terminal identification information with previously stored reference terminal identification information; (c) generating an identifier indicating whether the terminal identification information is identical to the reference terminal identification information as a result of the comparison; And (d) transmitting the generated identifier to a communication network through the communication terminal, And performing the identity check process only when the terminal identification information and the reference terminal identification information are not the same. The method of claim 9, The identification process, Receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message, The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, and receives an identification message from the equipment identifier register to determine whether the communication terminal is illegally used. Illegal communication terminal identification method. The method of claim 9, The smart card, Through the identification process, if it is determined that the communication terminal is illegally used, illegal communication terminal identification method, characterized in that to deactivate all or part of the function of the communication terminal. The method of claim 9, The smart card, If it is determined that the communication terminal is illegally used through the identification process, illegal communication terminal identification method, characterized in that for transmitting the location information of the communication terminal to a predetermined telephone number. The method of claim 9, In step (d), The identifier may be included in one of a routing area update request message, a location update request message, and a call setup request message and transmitted to the communication network. Illegal communication terminal identification method. In a communication terminal equipped with a smart card, A short range communication unit configured to receive reference terminal identification information from the smart card; A determination unit comparing the reference terminal identification information and terminal identification information of the communication terminal; A message manager for generating an identifier for whether the terminal identification information and the reference terminal identification information are the same as a result of the comparison; And Including a communication unit for transmitting the generated identifier to the communication network, And performing the identity check process only when the terminal identification information and the reference terminal identification information are not the same. The method of claim 14, The identification process, Receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message, The communication network transfers the identification response message to an equipment identifier register (EIR) included in the communication network, receives an identification message from the equipment identifier register, and determines whether the communication terminal is illegally used. Communication terminal. The method of claim 14, And an authentication unit for deactivating all or some functions of the communication terminal if it is determined that the communication terminal is illegally used through the identification process. The method of claim 14, If it is determined that the communication terminal is illegally used through the identification process, the communication terminal further comprises an authentication unit for transmitting the location information of the communication terminal to a predetermined telephone number. The method of claim 14, The message management unit, The identifier may be included in one of a routing area update request message, a location update request message, and a call setup request message to be transmitted to the communication network. Communication terminal. The method of claim 18, The identifier is And a message is recorded in a surplus area among Ciphering Key Sequence Number IEI (CKSN) areas of the messages. The method of claim 19, The message management unit, When the terminal identification information and the reference terminal identification information is the same, the surplus area is set to 0, and when the terminal identification information and the reference terminal identification information is not the same, the surplus area is set to 1 Communication terminal. The method of claim 14, The terminal identification information, And a communication terminal (IMEI), a mobile identification number (MIN), and an electronic serial number (ESN) of the communication terminal. In the smart card attached to the communication terminal, An interface unit for receiving terminal identification information from the communication terminal; And And a controller for generating an identifier for whether the terminal identification information and the pre-stored reference terminal identification information are the same and transmitting the generated identifier to the communication network through the communication terminal. Smart card, characterized in that for performing the identity check process and the terminal identification information and the terminal identification information is not the same. The method of claim 22, The identification process, Receiving an identity request message from the communication network and transmitting an identity response message including user identification information and terminal identification information in response to the identification request message, The communication network transmits the identification response message to an equipment identifier register (EIR) included in the communication network, and receives an identification message from the equipment identifier register to determine whether the communication terminal is illegally used. Smart card. The method of claim 22, The control unit, Smart card, characterized in that through the identification process, if it is determined that the communication terminal is illegally used all or part of the function of the communication terminal. The method of claim 22, The control unit, Smart card, characterized in that for transmitting the location information of the communication terminal to a predetermined phone number if it is determined that the communication terminal is illegally used through the identification process. The method of claim 22, The control unit, The identifier may be included in one of a routing area update request message, a location update request message, and a call setup request message to be transmitted to the communication network. Smart card. A program of instructions that can be executed by a digital processing apparatus for performing the illegal communication terminal identification method according to any one of claims 1 to 13 is tangibly implemented and can be read by the digital processing apparatus. The recording medium on which the program is recorded.

Images