JP2003070063A - Data protection apparatus of radio communication terminal, data protection method of radio communication terminal, and system for the method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method and apparatus which can surely protect data, when a portable telephone or the like is lost. SOLUTION: Center equipment 2 transmits a data-eliminating command in response to a reply from a radio communication terminal 1, after certification is made as to the person himself. The radio communication terminal 1 executes elimination processing of data which is determined previously, when the data eliminating command is received, and transmits a message showing normal finishing to the center equipment 2, when the elimination processing is finished in normal manner.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data protection device for a wireless communication terminal device, a data protection method for a wireless communication terminal device, and a system therefor, and more particularly to erasing data stored in the wireless communication terminal device. The present invention relates to a data protection device for a wireless communication terminal device, a data protection method for a wireless communication terminal device, and a system therefor.

[0002]

2. Description of the Related Art In recent years, mobile phones have become widespread and widely used. The mobile phone is highly functional and has not only a function of making a call but also a function of sending and receiving a mail and a function of acquiring various information by connecting to the Internet.

The function of such a mobile phone is called PDA (P
Personal data terminals such as personal data assistants have also come to be possessed. Originally, a PDA or the like stores various information and can perform various data processing. Therefore, the PDA can be said to be an information terminal device having a so-called mobile communication function.

Since various information such as names, telephone numbers, electronic mail addresses, Internet URLs, etc. of many people are stored in mobile phones (including phones such as so-called PHS), other people usually use them. It has a so-called dial lock function (a function that prevents buttons from being operated unless a password is entered) as a function for preventing unintended operation. Therefore, the mobile phone cannot be operated unless the correct personal identification number is entered. P
The DA is also authenticated by inputting a password as a function of preventing the operation.

Therefore, even if the mobile phone or the like is left behind, lost, or lost, a third party cannot operate the mobile phone or the like or see the data stored therein due to these security functions.

[0006]

However, even though the mobile phone has these security functions, if the mobile phone is lost or the like, if the third party found is a four-digit password, etc., it happens to be entered. There is a risk that the password will be broken by inputting the entered number or by inputting 10,000 different numbers in order.

Furthermore, a mobile phone is connected to a personal computer,
When the data is downloaded by the memory data editing software of the mobile phone, all the data may be read.

As described above, since the mobile phone contains not only the name and the telephone number but also the information such as the e-mail address and the URL, there is a lot of personal data, and when it is misused, it is damaged. Can be large. Further, various telephone numbers, e-mail addresses, etc. of business partners are also a customer list, that is, confidential information. Therefore, if the information is abused, the loss is great. P
The same applies to DA.

As described above, the security function of information in the case of loss or the like is not sufficient although the mobile phone or the like has such information.

[0010]

Therefore, the present invention provides an apparatus, a method and a system therefor capable of surely protecting data when a wireless communication terminal apparatus such as a mobile phone is lost. The purpose is to

A data protection device for a wireless communication terminal device according to the present invention erases stored data from the wireless communication terminal device, and erase command transmitting means for transmitting a data erase command in response to a response from the wireless communication terminal device. And a message receiving means for receiving a message to the effect.

According to this structure, when the wireless communication terminal device such as a mobile phone is lost, the data stored in the wireless communication terminal device can be surely protected.

In the data protection device for a wireless communication terminal device of the present invention, the data erasing command is a command for causing the wireless communication terminal device to execute a computer program and erasing the data stored in the wireless communication terminal device. Preferably there is.

With such a configuration, the central processing unit (CPU) of the wireless communication terminal device can be made to execute the erasing process, so that the data can be easily erased.

In the data protection device for a wireless communication terminal device of the present invention, it is preferable that the data erasing command is a command for applying an overvoltage to a predetermined circuit in the wireless communication terminal device.

According to this structure, the circuit is physically destroyed, so that the data can be surely erased.

Further, it is preferable that the data protection device for the wireless communication terminal device of the present invention further comprises a communication function stopping means for outputting a command for stopping the wireless communication function of the wireless communication terminal device.

According to this structure, the data is erased first, and then the use stop process for stopping the use of the wireless communication terminal device is performed, whereby the data can be surely protected. it can.

According to the data protection method of the wireless communication terminal device of the present invention, the center device transmits the data erasing command in response to the response from the wireless communication terminal device after the authentication processing relating to the wireless communication terminal device. When the wireless communication terminal device receives the data deletion command, the wireless communication terminal device executes a predetermined data deletion process stored in the wireless communication terminal device. Is transmitted to the center device as a message.

With such a configuration, when the wireless communication terminal device such as a mobile phone is lost, the data stored in the wireless communication terminal device can be surely protected.

Further, in the data protection method for a wireless communication terminal device of the present invention, it is preferable that the predetermined data erasing process erases the data stored in the wireless communication terminal device by executing a computer program.

With such a configuration, the central processing unit (CPU) of the wireless communication terminal device can be made to execute the erasing process, so that the data can be easily erased.

In the data protection method for a wireless communication terminal device of the present invention, it is preferable that the predetermined data erasing process applies an overvoltage to a predetermined circuit in the wireless communication terminal device.

According to this structure, the circuit is physically destroyed, so that the data can be surely erased.

In the data protection method for a wireless communication terminal device according to the present invention, it is preferable that the center device further outputs a command for stopping the wireless communication function of the wireless communication terminal device.

According to this structure, the data is erased first, and then the use stop process for stopping the use of the wireless communication terminal device is performed, whereby the data can be surely protected. it can.

A data protection system for a wireless communication terminal device according to the present invention includes an authentication processing means for performing an authentication process for the wireless communication terminal device and a data erasing command for the wireless communication terminal device according to the authentication result by the authentication processing means. Delete command transmitting means for transmitting a message, a message receiving means for receiving a message indicating that the data stored in the wireless communication terminal device has been erased, and a wireless communication of the wireless communication terminal device when the message is received by the message receiving means. It has a communication function stopping means for stopping the function.

With such a configuration, when the wireless communication terminal device such as a mobile phone is lost, the user of the wireless communication terminal device is authenticated, and then the data is erased to erase the data. After receiving the message to the effect, the use stop process for stopping the use of the wireless communication terminal device is performed, whereby the data can be surely protected.

[0029]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings.

1 to 4 show a first embodiment of the present invention. FIG. 1 is a diagram for explaining the configuration of the entire system according to the first embodiment of the present invention. Figure 2
2 is a flowchart showing a flow of operations of the center device of FIG. FIG. 3 is a flowchart showing the flow of the operation of the mobile phone. FIG. 4 is a block diagram showing a part of the circuit of the mobile phone of FIG.

First, the configuration of the entire system will be described with reference to FIG. A mobile phone 1 has not only a normal call function but also a memory in which a name, a telephone number, an e-mail address, etc. are stored. The mobile phone 1 further has a central processing unit (CPU) for executing various kinds of processing described later. Reference numeral 2 is a center device such as a personal computer. The center device 2 is a computer device used for a response process when a customer loses his or her mobile phone, and has a program and data for executing various processes described later in response to a request from the customer. ing. These programs and data are stored in the memory device 4 connected to the center device 2. The data includes customer data such as the customer's name, address, and e-mail address, and mobile phone data such as mobile phone manufacturer, model, and model number. 3 is a mobile phone network system owned by a mobile phone operator. When a call is made using the mobile phone 1, the wireless mobile phone line 5 connects to another phone (mobile phone, fixed phone) corresponding to the phone number via the mobile phone network system 3.

Further, since the mobile phone network 3 is also connected to the other communication networks 6 such as the Internet and a wired public line, the mobile phone 1 can be connected to the Internet or the like. Therefore, the computer connected to the communication network 6, for example, the center device 2 can also perform data communication with the mobile phone 1.

The center device 2 is a computer terminal device of a store that sells mobile phones, a computer terminal device in a customer service center of a mobile phone business, or the like. As will be described later, a user who has lost his or her mobile phone goes to a place where the center device 2 is, or contacts a customer service center or the like by a fixed telephone or the like to have a predetermined process described later executed.

The center device 2 may be a personal computer device of a user. In this case, the center device 2 is communicatively connected to a computer system (not shown) owned by a mobile phone operator or a dealer, and then described. Authentication processing or the like may be performed.

A user who has lost his mobile phone goes to a place where the center device 2 is located, for example, a store, or requests deletion of data stored in the mobile phone by telephone or e-mail. Upon receiving the request, the retailer or the like first performs an authentication process for the mobile phone. That is, the identity of the user is confirmed by presenting a driver's license, a passport, etc., or confirming whether the user knows a password registered in advance. In particular,
Authentication is performed by verifying whether the person who has come out is actually the user of the specified mobile phone with the data stored in the memory device 4. This identification is performed by a person such as a salesclerk or an operator of the store.

When the identity is confirmed and confirmed to be correct, the center device 2 executes the processing shown in FIG.

FIG. 2 is a flow chart showing the flow of the data erasing processing operation of the portable telephone in the center device 2.

First, the operator of the center device 2 operates the center device 2 to make a call to the number of the designated mobile phone 1 for which a data erasure request has been made (step (hereinafter
Abbreviated as S) 11). Making a call is not a call for making a normal call but a call for confirming whether or not the mobile phone 1 is receivable. Specifically, the center device 2 makes a call to the telephone number of the mobile phone 1, and if the mobile phone 1 is receivable in response to the call of the phone, the center device 2 continuously issues a unique command of the mobile phone 1 with a call command. Request transmission of a code (eg serial number etc.). If there is a response in response to the request, that is, if authentication is correctly performed by transmitting the transmitted unique code, YES is obtained in S12, and an erase command to be described later is transmitted (S13). If the mobile phone 1 is turned off when the mobile phone 1 is called, or if the mobile phone 1 is in a place where radio waves cannot be received, there is no response. After making a call to the mobile phone 1, it is determined in S12 whether or not there is a response.

If there is a response, YES is obtained in S12. S
If NO in 12, wait until there is a response. If there is no response for a long time, the center device 2 stops this process automatically or at the operator's discretion.

When there is a response from the mobile phone 1, the center device 2 receives the response and automatically responds to the reception.
Alternatively, an erase command is transmitted according to an instruction from the operator (S13).

The center device 2 has, for each user, in the memory device 4 the manufacturer and model data of the mobile phone owned by the user. Therefore, since the center device 2 has information on which area of the memory of the mobile phone 1 the telephone directory data and the like are in, the center apparatus 2 erases the telephone directory data, the e-mail address, the URL and the like based on the information data. Generate an erase command that specifies the target area data. That is, the erase command is a command executed by the mobile phone 1 to erase the data in the designated area. The erase command may take any form as long as it is an instruction that can be executed by the CPU of the mobile phone 1.

As will be described later, on the side of the mobile phone 1, when the designated erase target area data is erased after receiving the erase command, it is determined whether or not the erase command is normally executed. When the erase command is normally executed and the data in the designated area is erased, the mobile phone 1 transmits a normal end message. Therefore, the center device 2 determines whether or not the normal end message is received. Is determined (S14).

If the message of normal termination is not received within a predetermined time, NO is obtained in S14,
It is determined whether or not an abnormal termination message is received (S
15). This is because when the mobile phone 1 executes the erase command but is not executed normally and the data cannot be erased, the mobile phone 1 transmits a message of abnormal termination. When the abnormal termination message is received, S
When YES is obtained in 15, the process proceeds to the ending process.

If NO in S15, the process returns to S11, and the processes in S11 and subsequent steps are repeated. The number of times of this repetition is determined in advance, and if the normal termination message is not received even after executing the number of times, it can be deleted on the screen of the display device of the center device 2 to notify the operator of the fact. You may make it display the message that it did not exist. Then, in that case, the operator may transmit the erase command again after a while, or the center device 2 may automatically transmit the erase command again after a while.

When the center device 2 receives the normal termination message, YES is obtained in S14, and the process proceeds to S16. In S16, the record data indicating that the erase command is transmitted and the predetermined data is erased is stored in the database of the memory device 4 for the mobile phone 1. The record data includes a deletion command transmission time, a normal end message reception time, and the like. Further, when the abnormal end message is received, the reception time of the abnormal end message and the like are stored in the database.

After performing the above processing, the center device 2
May continue the mobile phone use stop processing due to loss, loss, or the like. By this use stop processing, the wireless communication function is stopped, that is, the mobile phone cannot be used for calling and the mobile phone cannot be used. Even if the mobile phone 1 cannot be used before the data is erased, a personal computer or the like may be connected to the mobile phone 1 by a cable to read the stored phonebook data or the like. Therefore, the data can be surely protected by first executing the data erasing process and then performing the telephone use stop process for stopping the use of the mobile phone 1. When this usage suspension process is executed by another computer of the mobile phone operator rather than the center device 2, the center device 2 instructs the other computer to execute the usage suspension process. Output the command. The command only needs to include information on the mobile phone to be suspended, such as a telephone number, and may be text data such as electronic mail.

Next, the processing contents on the side of the mobile phone 1 will be described with reference to FIG. A computer program for executing the processing shown in FIG. 3 is stored in advance in a memory such as a ROM of the mobile phone 1.

First, when the mobile phone 1 receives the delete command, the answer is YES in S21, the process proceeds to S22, and a predetermined or predetermined process operation is executed. If the erase command is not received, the process of S22 is not executed and the process ends. The contents of the operation of the predetermined erasing process in S22 are as follows: 1) A data erasing program stored in advance in the ROM is executed to erase telephone directory data, electronic mail address data, etc.
2) Convert phonebook data etc. into meaningless data by a program stored in ROM in advance,
3) Destruction of a memory chip in which telephone directory data and the like are stored, an interface circuit of the memory circuit, and the like by a circuit previously incorporated in the mobile phone 1.
In the methods 1) and 2), since the erasing process is executed by executing the computer program, the data can be easily erased.

FIG. 4 shows an example of a circuit for destroying the memory circuit of 3). Reference numeral 10 denotes a battery power source of the mobile phone 1. Reference numeral 11 is a booster circuit, and 12 is a voltage detection circuit. Reference numeral 13 is a switch circuit, and 14 is a memory in which telephone directory data and the like are stored, here a RAM. The circuit of FIG. 4 is mounted on the mobile phone 1.

When the erase command is received, the activation signal A is given to the booster circuit 11 by the signal from the CPU.
When the booster circuit 11 is activated in response to the activation signal A, the voltage of the power supply 10 is boosted. The voltage detection circuit 12 monitors whether or not electric charge has been charged until the voltage value of the booster circuit 11 reaches a predetermined voltage value, and when detecting that the voltage has reached the predetermined voltage value, the detection signal B is output. To do.
The CPU responds to the B signal by switching (SW) circuit 1
A signal C for closing the switch is output to 3. By closing the switch of the SW circuit 13 according to the C signal, the boosted voltage is applied from the booster circuit 11 to the RAM circuit 14. The voltage boosted by the booster circuit 11 is RA
The voltage is set to a level that destroys the M circuit 14,
The RAM circuit 14 is destroyed due to overvoltage, and as a result, data is erased. Therefore, since the circuit is physically destroyed, the data can be surely erased. Although the RAM circuit itself is destroyed here, the interface circuit or the like relating to the reading of the memory may be destroyed.

In S22 of FIG. 3, the above 1), 2),
3) When executing a predetermined erasing process such as
The mobile phone 1 determines whether the erasing process has been normally executed and ended (S23). Whether it ended normally,
For example, the data in the erased area is read, and if the data cannot be read, it is determined that the process has ended normally. When it is determined in S23 that the process has ended normally, the process proceeds to S24, and a normal end message for notifying the center device 2 of the normal end is transmitted to the center device 2 (S24). If it has not ended normally, an abnormal end message is transmitted to the center device 2 to inform that effect (S25). In addition,
Even if this abnormal termination message is not transmitted, if the normal termination message is not received within the predetermined time, the center device 2 records in the database that the data could not be erased.

The predetermined erasing process in S22 may be to change the display processing program or circuit displayed on the liquid crystal display screen of the mobile phone 1. That is,
When the telephone directory data and the like are displayed by the button operation of the mobile phone 1, the display data is displayed as meaningless contents, or the display contents are completely unrelated (for example, the entire screen is only white or Make the pattern black only, mottled white and black, etc., or adjust the applied voltage of the liquid crystal display drive circuit to change the display density of the pixel so that data cannot be displayed (for example, the screen is white only). ,
Alternatively, it is possible to display only black).

The processing from S21 is performed by the center device 2
It may be a program executed by a JAVA (registered trademark) applet transmitted from. That is, the JAVA (registered trademark) applet program that performs the above-described processing is transmitted to the mobile phone 1, and the CPU of the mobile phone 1 executes the applet program by the JAVA (registered trademark) execution program incorporated in the mobile phone 1. To do. The program sent by the applet is 1),
It is a program that executes the processes 2), 3), etc., checks whether it has been erased normally, and sends the check result as a message (S24, S25).

As described above, even if the user loses his / her mobile phone, the above-mentioned processing is executed and the data such as the telephone directory stored in the mobile phone is erased, so that the data is leaked to a third party. There is nothing to do.

Next, a second embodiment will be described.

The second embodiment has substantially the same structure as the first embodiment. Therefore, the second embodiment is
The configuration is the same as that of FIGS. 1 to 4, but FIG.
The contents shown in are different from the operation contents on the side of the center device of the first embodiment. Therefore, only different items will be described, and description of the same items as in the first embodiment will be omitted. Figure 5
9 is a flowchart showing a flow of operations of the center device according to the second embodiment.

When the user who has lost the mobile phone 1 wants to erase the data of the mobile phone 1, first, the center device 2 of the mobile phone operator or the store authenticates. Alternatively, the user may use his or her own personal computer to connect to the center apparatus 2 through a communication line and input data into a screen prepared on, for example, a homepage on the Internet for authentication. Authentication is performed by the person himself / herself entering a password or the like.

When the authentication process is performed by the center device 2 and the identity of the user is confirmed, the center device 2 performs steps S32 to S3 corresponding to steps S11 to S15 of FIG. 2 of the above-described first embodiment.
The process of 6 is executed.

The processing of S32 and thereafter is executed by the computer of the center device 2. First, the telephone number of the mobile phone 1 having the data to be deleted is called (S32), and it is determined whether or not there is a response as described in the first embodiment (S33). If there is a response, an erase command is transmitted (S34). It is determined whether the data is normally erased by the erase command and the normal termination message is received (S35). When the normal end message is not received, it is determined whether the abnormal end message is received (S36). The processing from S32 to S36 is the same as the processing content from S11 to S15 in the first embodiment.

After the normal termination message or abnormal termination message is received, termination processing is executed (S
37). In the end process, the same contents as the end process of the first embodiment are executed. In addition, in the end process, the display unit of the center device 2 displays the processing result for the deletion request (for example, a message such as "The data of the mobile phone has been deleted."). When the user requests from the hope page on the Internet from his or her computer to make a deletion request, the processing result is displayed on the screen of the home page.

When the normal termination command is not received even if the erase command is transmitted a predetermined number of times, or when the mobile phone is not connected, the center device 2
Then, after a while, the mobile phone makes a call to the mobile phone periodically and transmits an erase command. Therefore,
When the process is not normally terminated after the user authentication, the center device 2 or the like displays a screen for inputting a notification destination in order to notify the processing result later by another means of the display device of the center device 2 or a personal computer. The process is terminated after displaying on the screen and inputting or specifying the notification destination of the processing result. Therefore, the termination processing in this case is the termination of the connection processing with the center device 2 or the personal computer, and the erasing processing has not been normally terminated. Therefore, the center device 2 thereafter makes a call by a predetermined number of times periodically and transmits the delete command.

At this time, the notification destination to be inputted by the user on the screen is an electronic mail address, a telephone number or a facsimile telephone number. Later, the result of the erasing process will be notified by the designated e-mail, telephone or fax. When it is an e-mail, when it is completed normally, for example, an e-mail stating, "What time and how many times it was erased normally" is sent to the specified e-mail address. Further, in the case of a telephone, the voice response device gives a voice notification, and in the case of a facsimile, a voice notification is given. Alternatively, the user may call the designated telephone number at a later date, and the result of the execution may be known by the voice response by the designation by the touch-tone telephone. Furthermore, the erased mobile phone number may be viewed on a separately prepared home page, so that the user can always know the result of the erase request later.

Further, in the termination process, similarly to the first embodiment, the process of suspending use of the mobile phone due to loss is also executed. As a result, it is not necessary to separately perform the usage suspension process.

The authentication process (S31) and the erasing process (S31)
32 to S37), the erasing process and the use stop process described above may be executed by different computers.

According to the second embodiment, the authentication processing of the person himself / herself is performed, and after the person himself / herself is confirmed, the deletion processing is automatically executed. Therefore, when the erase command is sent and the data is erased, the user can know whether or not the data was erased at that time or later, so it is possible to easily erase the phonebook data etc. of the lost mobile phone. You can

In the first and second embodiments described above, the center device has been described as a computer device such as a mobile phone operator or a store, but the center device may be a personal computer owned by the user. In that case, the authentication process, the transmission of the erase command, and the like may be executed by the personal computer for that individual, or may be executed by another computer device.

In the above-described embodiment, the example of the mobile phone has been described, but any terminal device having a wireless communication function may be used, and the present invention can be applied to PHS, PDA and the like other than the mobile phone.

Furthermore, the present invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit of the present invention.

[0069]

As described above, according to the present invention,
It is possible to provide a device, a method and a system therefor capable of surely protecting data when a wireless communication terminal device such as a mobile phone is lost.

[Brief description of drawings]

FIG. 1 is a diagram for explaining a configuration of an entire system according to a first embodiment of the present invention.

FIG. 2 is a flowchart showing an operation flow of the center device according to the first embodiment of the present invention.

FIG. 3 is a flowchart showing an operation flow of the mobile phone according to the first embodiment of the present invention.

FIG. 4 is a block diagram showing a part of a circuit of the mobile phone according to the first embodiment of the present invention.

FIG. 5 is a flowchart showing a flow of operations of the center device according to the second embodiment.

[Explanation of symbols]

1 ... Mobile phone 2 ... Center device 3 ... Mobile phone network system owned by a mobile phone carrier 4 ... Memory device 5 ... Mobile phone line 6 ... Communication network

Claims (9)

[Claims] 1. A data protection device for a wireless communication terminal device, comprising: erase command transmitting means for transmitting a data erase command in response to a response from the wireless communication terminal device; A data protection device for a wireless communication terminal device, comprising: a message receiving means for receiving a message that data has been erased. 2. The data erasing command is a command for executing a computer program in the wireless communication terminal device to erase data stored in the wireless communication terminal device. A data protection device for a wireless communication terminal device as described. 3. The data protection device for a wireless communication terminal device according to claim 1, wherein the data erase command is a command for applying an overvoltage to a predetermined circuit in the wireless communication terminal device. . 4. The data protection device for a wireless communication terminal device according to claim 1, further comprising communication function stopping means for outputting a command for stopping the wireless communication function of the wireless communication terminal device. 5. A data protection method for a wireless communication terminal device, wherein the center device transmits a data erasing command in response to a response from the wireless communication terminal device after the authentication processing for the wireless communication terminal device, When the wireless communication terminal device receives the data erasing command, the wireless communication terminal device performs a predetermined data erasing process stored in the wireless communication terminal device, and when the erasing process is normally executed, the process ends normally. A data protection method for a wireless communication terminal device, comprising transmitting a message to the center device. 6. The erasing process of the predetermined data,
The data protection method for a wireless communication terminal device according to claim 5, wherein the data stored in the wireless communication terminal device is erased by executing a computer program. 7. The erasing process of the predetermined data comprises:
The data protection method for a wireless communication terminal device according to claim 5, wherein an overvoltage is applied to a predetermined circuit in the wireless communication terminal device. 8. The data protection method for a wireless communication terminal device according to claim 5, wherein the center device outputs a command for stopping the wireless communication function of the wireless communication terminal device. 9. An authentication processing means for performing an authentication processing on a wireless communication terminal device, and an erase command transmitting means for transmitting a data erase command to the wireless communication terminal device according to an authentication result by the authentication processing means. Message receiving means for receiving a message indicating that the data stored in the wireless communication terminal device has been deleted; and communication for stopping the wireless communication function of the wireless communication terminal device when the message is received by the message receiving means. A data protection system for a wireless communication terminal device, comprising a function stopping means.