JP2006285329A - Mobile security determination support system, method and program, mobile communication terminal device and information management operation server - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To ensure confirmation easiness while enhancing the security of a noncontact IC card. <P>SOLUTION: The mobile security determination support system comprises applications 111 and 121 supporting determination of level in use of the noncontact IC card according to the purchase frequency in the same place; a security information registration part 151b registering a plurality of user authentication methods for authenticating each user and levels by combinations of the plurality of user authentication methods; a purchase information registration part 152a registering information for purchase using the noncontact IC card; a management operation device 150 acquiring a purchase frequency from the purchase information registration part and performing authentication of authentication data to a level determined by the user according to the purchase frequency by the user authentication methods to determine an authentication result; and delivery management devices 130 and 131 transmitting identification information of the noncontact IC card, purchase information such as position information and authentication data to the management operation device via a communication network 140, and transmitting the purchase frequency information and the authentication result from the management operation device to the applications by near distance communication. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a mobile security decision support system for a contactless IC card mounted on a mobile communication terminal. In particular, the present invention relates to a mobile security decision support system, method, program, mobile communication terminal apparatus, and information management management server that reduces the complexity of authentication while enhancing the security of a non-contact IC card mounted on a mobile communication terminal About.

Conventionally, some mobile communication terminal devices are equipped with a non-contact IC card such as Felica.
Further, when using a non-contact IC card mounted on a mobile communication terminal, a password may not be used when a password is used.
When a password is not used for a non-contact IC card mounted on a mobile communication terminal, there is a problem that security becomes uneasy. On the other hand, when a password is used, there is a problem that authentication becomes complicated.

For this reason, there is a problem that it is desired to ensure the ease of authentication while enhancing the security of the contactless IC card mounted on the mobile communication terminal.
Conventionally, in order to make a secure and reliable settlement when using a taxi, customer A attaches an IC card to a customer terminal, accesses a transaction server via the network, receives a deposit balance notification, and uses an IC card. A desired amount of electronic money is received from the transaction server and filled, whereby the necessary amount of electronic money can be obtained within the range of the deposit balance. Therefore, customer A gets on taxi D, for example. There is a thing which does not need to care about the amount of payment until it arrives at the destination (for example, refer patent document 1).

However, in Patent Document 1, an IC card is mounted on a customer terminal and a transaction server is accessed via a network. However, it is easy to authenticate while strengthening the security of a contactless IC card mounted on a mobile communication terminal. It is not something to secure.
Conventionally, the card center notifies the card usage information to the mobile terminal in the Internet mail format, so that the user can check the card usage status at the same time as purchasing or cashing the product. Therefore, each time the user purchases or cashes a product using the card, the card reading device uses the card purchased or cached by the user. The information is transmitted to the card center, the card center transmits the card usage information to the registered mobile terminal and card reader, the card reader displays the card usage information, and the user displays the card usage information displayed on the mobile terminal. And check the card usage information displayed on the card reader. Is (e.g., see Patent Document 2).

However, in the above-mentioned patent document 2, the card usage information of the portable terminal and the card usage information displayed on the card reader are collated and confirmed. However, the security of the contactless IC card mounted on the mobile communication terminal is confirmed. It does not secure the ease of authentication while strengthening.
Conventionally, it is possible to collect each person's movement information accurately and efficiently, and by linking with the POS system, it enables more effective marketing activities from customer movement information and product purchase information. To provide a customer information analysis system, a non-contact type IC card that is carried by a customer and stores customer information of the individual customer; and when the non-contact type IC card carried by the customer approaches within a predetermined range, the non-contact type IC card Reader / writer device for detecting the customer information and position of the IC card; a position detection device for grasping the movement status of the customer in the store based on the customer information and position information of the non-contact IC card; A POS terminal that performs checkout processing of goods using the non-contact IC card; and management / analysis of customer movement information and purchase information based on processing results at the POS terminal And marketing analysis device; there is provided (for example, see Patent Document 3).

However, in the above-mentioned Patent Document 3, customer movement information and purchase information are managed and analyzed from the processing result at the POS terminal that performs the checkout process of the goods using the portable non-contact IC card. It does not secure the ease of authentication while enhancing the security of the contactless IC card mounted on the terminal.
In addition, in order to obtain a credit card authentication system using a mobile phone with a GPS function that can prevent unauthorized use of the credit card, a mobile phone with a GPS function and a credit card for specifying a user's position are conventionally provided. A GPS receiver is installed in the POS terminal or ATM to identify the location of the ATM of the POS terminal or bank or card loan company in each member store. When paying for the service or cashing, the user's location information is sent to the GPS service company via the carrier, and the POS terminal or ATM location information is sent via the payment agency service company. The GPS service company sends the location of the user and the POS terminal or ATM installation. Location matches, there is to be authorized to use a credit card only if they match (e.g., see Patent Document 4).

  However, in the above-mentioned Patent Document 4, the location of the mobile phone user is compared with the location of the POS terminal or ATM at the GPS service company, and the use of the credit card is authenticated only when they match, and the credit card is illegally used. However, it does not secure the ease of authentication while enhancing the security of the non-contact IC card mounted on the mobile communication terminal.

  In addition, conventionally, in order to set an authentication level according to a user's action pattern, the action area-time zone weighting table is a table showing where a user is likely to be in a certain time zone. In addition, weights (points) are set for each area on weekdays, holidays, and time zones, and the action area may be declared by the user at the time of registration, or by a system such as GPS or PHS for a period of one week, etc. It may be possible to measure where the user is in each time zone. For example, a certain user is likely to be present on the route from his home to the company during the weekday commuting time period. Is set low, and it is more likely that you will go shopping on the way than when you go to work. Is, then, determines the point by a credit card or the like area and times are utilized, there is an information processing apparatus authentication level is set (e.g., see Patent Document 5).

  However, in Patent Document 5, the authentication level is set for the user from the information processing apparatus side according to the user's behavior pattern, but the security of the contactless IC card mounted on the mobile communication terminal is enhanced. However, it does not ensure the ease of authentication.

Japanese Patent Laid-Open No. 2002-245381 JP 20032333763 A JP 2003-109123 A JP 2003-150883 A JP 2003-196666 A

  Therefore, in view of the above-described problems, the present invention provides a mobile security decision support system, method, program, and mobile communication that ensures the ease of authentication while enhancing the security of a contactless IC card mounted on a mobile communication terminal device. It aims at providing a terminal device and an information management management server.

  In order to solve the above problems, the present invention provides a mobile security terminal support system for a mobile communication terminal device equipped with a GPS and a non-contact IC card. A security management application that supports determination of a security level when using the contactless IC card mounted on a communication terminal device, a plurality of user authentication methods for authenticating each user, and a security level that combines a plurality of user authentication methods. A user security information registration unit for registration, a purchase information registration unit for accumulating information purchased using each contactless IC card and registering as a purchase log, and obtaining the purchase frequency from the purchase information registration unit, Security determined by the user according to the purchase frequency in the application Near field wireless communication from the contactless IC card via a communication network and an information management management device that performs authentication confirmation of the user authentication data for the user level using the user authentication method of the user security information registration unit and obtains an authentication result The identification information of the non-contact IC card obtained in step 1, purchase information including GPS position information, and user authentication data input by a user operation are transmitted to the information management management device, A mobile security decision support system comprising: a distribution management device that receives frequency information and the authentication result, and transmits the received purchase frequency information and the authentication result to the contactless IC card by short-range wireless communication. provide.

Furthermore, a security control application storage unit is provided, the security control application storage unit stores a security control application program, and transmits the security control program to the mobile communication terminal device in response to a download request via a communication network.
Further, the security management application registers a plurality of user authentication methods for authenticating a user and a security level combining a plurality of user authentication methods to the user security information registration unit via a communication network.

Further, when changing the information in the user identification information registration unit of the information management management device, the security supervision application also changes corresponding information of the non-contact IC card in a lump.
Further, the security supervision application changes information in a user identification information registration unit of the information management management device when the contactless IC card is used.

  In addition, a user identification information registration unit is provided, the user identification information unit registers information for identifying a user of a contactless IC card mounted on the mobile communication terminal device, and the security control application passes through a communication network. Then, information for identifying the user of the contactless IC card mounted on the mobile communication terminal device is registered in the user identification information section.

Further, the mobile communication terminal device is equipped with a contact type card, and transmits the contact type credit card identification information to the distribution management device by short-range wireless communication including Bluetooth, infrared communication, and wireless LAN. And transmission / reception between the distribution management devices.
Further, the contact card includes a credit card, a membership card, a cash card, and a video rental card.
Further, the information management and operation apparatus transmits information on the state of fraud in the contactless IC card or contact-type credit card to the security management application to assist in determining the security level.

Further, the mobile communication terminal device has a remote lock function.
Further, when the mobile communication terminal device has an authentication function for opening personal information including a telephone directory and a mail address, the security management application authenticates the personal information with user authentication data for the determined security level. Confirm.
Further, the present invention provides a mobile security terminal support method for mobile communication terminals equipped with GPS and non-contact IC cards, and a security level combining a plurality of user authentication methods and a plurality of user authentication methods for authenticating each user. A step of registering, a step of reading purchase information including identification information of the non-contact IC card and GPS position information from each non-contact IC card, and the read purchase information via a communication network Storing the received purchase information and registering it as a purchase log, obtaining the purchase frequency at the same location by the same user from the purchase log when the purchase information is received, and the communication network Reading the purchase frequency received via the non-contact IC card, and reading to the non-contact IC card The step of supporting the determination of the security level when using the non-contact IC card mounted on the mobile communication terminal device according to the purchase frequency, and the determination of the security level read from the non-contact IC card Receiving the user authentication data input by the user's operation via the communication network, and performing authentication confirmation of the user authentication data by a plurality of user authentication methods for determining the security level. Provide a mobile security decision support method.

  Furthermore, the present invention provides a plurality of user authentication methods and a plurality of user authentication methods for authenticating each user in a program for executing mobile security decision support of a mobile communication terminal device equipped with GPS and a non-contact IC card by a computer. , A procedure for executing registration of a security level in combination with each other, a procedure for reading purchase information including identification information of the non-contact IC card and GPS position information from each of the non-contact IC cards, and the read purchase information Is received via a communication network, the received purchase information is stored and registered as a purchase log, and the purchase frequency of the same user by the same user is obtained from the purchase log when the purchase information is received. Read the procedure and the purchase frequency received via the communication network into the contactless IC card Order, a procedure for supporting the determination of the security level when using the non-contact IC card mounted on the mobile communication terminal device according to the purchase frequency read into the non-contact IC card, and the non-contact IC The determination of the security level read from the card is received via the communication network together with the user authentication data input by the user's operation, and authentication of the user authentication data is confirmed by a plurality of user authentication methods for the determination of the security level. And a program for executing a mobile security decision support on a computer.

  Further, the present invention provides a mobile communication terminal device on which GPS and a non-contact IC card are mounted, and purchase information including identification information of the non-contact IC card read from the non-contact IC card and GPS position information. Each user receives, accumulates, registers as a purchase log via a communication network, and obtains the purchase frequency at the same place by the same user from the purchase log when the purchase information is received. A plurality of user authentication methods for authenticating the user, a user security information registration control unit for registering a security level combining a plurality of user authentication methods, and the purchase frequency of the server via the communication network to the contactless IC card Read and support the determination of the security level when using the non-contact IC card according to the purchase frequency, The determination of the security level is read from the contactless IC card, transmitted to the server via a communication network, and the authentication verification of the user authentication data for the security level is performed by the user authentication method registered in the server. There is provided a mobile communication terminal device comprising a user security information registration control unit.

  Furthermore, the present invention provides a plurality of user authentication methods and a plurality of user authentication methods for authenticating each user in an information management management server that performs mobile security decision support for a mobile communication terminal device equipped with GPS and a non-contact IC card. User security information registration unit for registering security levels in combination with each other, a purchase information registration unit for accumulating information purchased using each contactless IC card and registering it as a purchase log, and the purchase frequency for the purchase information registration unit And presenting the purchase frequency to the mobile communication terminal to assist in the determination of the security level, and registering user security data for the security level determined by the user according to the purchase frequency in the user security information registration Information management operation device that performs authentication confirmation using the user authentication method of the department and obtains the authentication result The information management operation includes the identification information of the non-contact IC card read from the non-contact IC card via the communication network, purchase information including GPS position information, and user authentication data input by the user's operation. A distribution management device that transmits to the device, receives the purchase frequency information and the authentication result from the information management management device, and causes the contactless IC card to read the received purchase frequency information and the authentication result. A characteristic information management server is provided.

  As described above, according to the present invention, a plurality of user authentication methods for authenticating each user and a security level combining a plurality of user authentication methods are registered, and identification information for each contactless IC card is registered. , Read the purchase information including GPS location information, received the read purchase information via the communication network, accumulated the received purchase information, registered as purchase log, received the purchase information Sometimes the purchase frequency obtained from the same user from the purchase log at the same location is read, the purchase frequency received via the communication network is read into the non-contact IC card, and the mobile communication terminal according to the purchase frequency read into the non-contact IC card Security read from the non-contact IC card, supporting the determination of the security level when using the non-contact IC card mounted on the device Since the determination of the bell is received via the communication network together with the user authentication data input by the user's operation, the authentication of the user authentication data is confirmed by a plurality of user authentication methods for the determination of the security level. It has become possible to ensure the ease of authentication while strengthening the security of contactless IC cards.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a network diagram showing a schematic configuration of a mobile security decision support system according to the present invention. As shown in the figure, the mobile security decision support system includes a plurality of mobile communication terminal devices 110 and 120 with GPS (global positioning system) and non-contact IC (integrated circuit) cards, and a plurality of distribution management devices 130. 131, a communication network 140, and an information management management device 150, which operate under program control and support the determination of the security level when using a non-contact IC card according to the purchase frequency.

The non-contact IC card mounted on the mobile communication terminal devices 110 and 120 is used for settlement at the time of purchase of goods, and the GPS position information is used to specify the location where the non-contact IC card is used.
Here, the information management management device 150 is connected to the mobile communication terminal devices 110 and 120 and the distribution management devices 130 and 131 via the communication network 140, and the registrant management device 151, the information protection management device 152, and the security management application. The storage unit 153 is operated and managed.

Furthermore, the registrant management apparatus 151 manages the user identification information registration unit 151a and the user security information registration unit 151b.
The user identification information registration unit 151a registers information for identifying the user of the contactless IC card mounted on the mobile communication terminal devices 110 and 120.
The user security information registration unit 151b registers a plurality of authentication methods for authenticating users of contactless IC cards mounted on the mobile communication terminal devices 110 and 120. The plurality of registered authentication methods are used in combination according to the security level at the request of the user.

When the registrant management device 151 determines the security level and inputs the authentication data from the information management management device 150, the registrant management device 151 checks the authentication data according to the security level and reports the result of the authentication data to the information management management device 150.
The information protection management device 152 manages the purchase information registration unit 152a, and the purchase information registration 152a purchases a product using a non-contact IC card mounted on the mobile communication terminal devices 110 and 120 and specifies purchase. Is stored and registered as a purchase log.

The information protection management device 152 receives the same location by the same user from the purchase information registration unit 152a when the information management management device 150 inputs the ID (identification information) information of the non-contact IC card and the information specifying the purchase including the location information. The past purchase frequency is obtained and reported to the information management apparatus 150.
When the security control application storage unit 153 is purchased using a non-contact IC card mounted on the mobile communication terminal devices 110 and 120, the security level when using the non-contact IC card is determined according to the purchase frequency. Is stored, and the security management application program is downloaded to the mobile communication terminal apparatuses 110 and 120 via the communication network 140.

The information management and operation apparatus 150 is prepared and operated by a contactless IC card manufacturer, various credit card management companies, stores to be used, and companies that are affiliated with the company. By using it, information for grasping the frequency of use of the user, the place of use, and the occurrence of fraud is increased.
A plurality of mobile communication terminal devices 110 and 120 on which a non-contact IC card and GPS are mounted have a call function and a communication function, and are connected to the security management application storage unit 153 of the information management management device 150 via the communication network 140. Install the security management applications 111 and 121 downloaded from.

The security management application 111 includes a user identification information registration control unit 111a and a user security information registration control unit 111b, and the security management application 121 includes a user identification information registration control unit 121a and a user security information registration control unit 121b.
The user identification information registration control units 111a and 121a perform control for registering the user identification information of the contactless IC card mounted on the mobile communication terminal devices 110 and 120 in the user identification information registration unit 151a.

The user security information registration control units 111b and 121b perform control to register a plurality of authentication methods registered in the user security information registration unit 151b, and the plurality of authentication methods are used in combination according to the security level.
When the security supervision applications 111 and 121 read the purchase frequency information into the non-contact IC card by short-range wireless communication between the non-contact IC card and the distribution management devices 130 and 131 and input the purchase frequency information, the mobile communication terminal device 110 and 120 display the purchase frequency information and the relationship between the combination of the security level and the authentication method.

The security supervision applications 111 and 121 cause the non-contact IC card to read the authentication result by short-range wireless communication between the non-contact IC card and the distribution management devices 130 and 131, and when the authentication result is input, the mobile communication terminal device 110, An authentication result is displayed at 120.
The distribution management devices 130 and 131 are provided in the store, connected to the communication network 140, and have a function of reading / writing a non-contact IC card mounted on each of the mobile communication terminal devices 110 and 120. Via the communication network 140 together with the product information and purchase time information purchased after reading the identification information (ID) of the non-contact IC card from the non-contact IC card and the location information by short-range wireless communication with the non-contact IC card at the time of purchase. To the information management system 150.

Furthermore, when the distribution management devices 130 and 131 receive the purchase frequency information from the information management management device 150, the distribution management devices 130 and 131 read the information into the contactless IC cards of the mobile communication terminal devices 110 and 120 by short-range wireless communication.
Further, the distribution management devices 130 and 131 transmit authentication data corresponding to the security level to the information management management device 150.

Further, when the distribution management devices 130 and 131 input the authentication result from the information management management device 150, the payment adjustment using the non-contact IC card mounted on the mobile communication terminal devices 110 and 120 is completed. Judge.
FIG. 2 is a diagram illustrating user identification information registration control units 111a and 121a in the security integrated applications 111 and 121 of the mobile communication terminal devices 110 and 120 in FIG. As shown in the figure, the user identification information registration control units 111a and 121a of the security supervision applications 111 and 121 input and display the user identification information to the mobile communication terminal devices 110 and 120 as follows. To do.
・ Name / Address / Age / Gender / TEL
・ Send email address button

When the user identification information registration control unit 111a, 121a presses the transmission button on the input screen, the user identification information registration control unit 111a, 121a is connected to the information management management device 150 via the communication network 140 and the user identification information registration unit 151a of the registrant management device 151. The user identification information is registered in.
Similarly, user identification information is registered in the mobile communication terminal apparatuses 110 and 120. This is for use in changing the identification information.

  FIG. 3 is a diagram illustrating user security information registration control units 111b and 121b in the security integrated applications 111 and 121 of the mobile communication terminal devices 110 and 120 in FIG. As shown in this figure, the user security information registration control units 111b and 121b of the security supervising applications 111 and 121 provide authentication data for a plurality of user authentication methods to each of the mobile communication terminal devices 110 and 120 as follows. To display a combination of multiple authentication methods with a security level. It is assumed that the mobile communication terminal devices 110 and 120 have a password authentication function, a fingerprint authentication function, and a face authentication function.

・ Authentication method ・ Password (PW) (4 digits) authentication data ・ Password (10 digits) authentication data ・ Fingerprint authentication data ・ Face authentication data ・ Security ・ Security level 1: Password (4 digits)
-Security level 2: Fingerprint authentication-Security level 3: Face authentication-Security level 4: Password (4 digits) + fingerprint authentication-Security level 5: Password (4 digits) + face authentication-Security level 6: Password (4 digits) + Face authentication + fingerprint authentication-Security level 7: Password (10 digits)
・ ...
Send button

When the user security information registration control unit 111b or 121b presses the transmission button on the input screen, the user security information registration control unit 111b or 121b is connected to the information management management device 150 via the communication network 140 and the user security information registration unit 151b of the registrant management device 151. Register user security information in.
Similarly, user security information is registered in the mobile communication terminal apparatuses 110 and 120. This is because it is displayed when the security level is determined to facilitate determination.

When the mobile communication terminal devices 110 and 120 do not have the fingerprint authentication function and the face authentication function, the fingerprint authentication data and the face authentication data input by the distribution management devices 130 and 131 are transferred from the distribution management devices 130 and 131. It may be transferred to the mobile communication terminal devices 110 and 120 for use.
FIG. 4 is a diagram for explaining the user identification information registration unit 151a of the registrant management device 151 of the information management management device 150 in FIG. As shown in the figure, user identification information is registered for each user in the user identification information registration unit 151a. Used when checking out purchases of goods.

FIG. 5 is a diagram illustrating the user security information registration unit 151b of the registrant management apparatus 151 of the information management management apparatus 150 in FIG. As shown in this figure, user security information is registered for each user in the user security information registration unit 151b.
FIG. 6 is a diagram for explaining the purchase information registration unit 152a of the information protection management device 152 of the information management management device 150 in FIG. As shown in this figure, the purchase information registration unit 152a has purchased information using a non-contact IC card up to the present, such as purchase ID (identification information), product, location, position information, time, non-contact IC card. Data including ID information and registrant ID (identification information) is accumulated and registered as a purchase log.

When the ID information, position information, product information, and purchase time information of the non-contact IC card is input from the information management management device 150, the information protection management device 152 stores the past information at the same place by the same user from the purchase information registration unit 152a. The purchase frequency is obtained, for example, 30 times / month, and is reported to the information management apparatus 150.
FIG. 7 is a flowchart for explaining the operation of the security supervision application storage unit 153 of the information management apparatus 150 in FIG. As shown in this figure, in step 201, the security supervision application storage unit 153 determines whether there is a download request from the mobile communication terminal devices 110 and 120. If there is no request, the process is terminated.

In step 201, if there is a download request, the security integrated application program is transmitted from the security integrated application storage unit 153 to the mobile communication terminal apparatuses 110 and 120, and the process is terminated.
FIG. 8 is a flowchart for explaining the operation of mobile communication terminal apparatuses 110 and 120 in FIG. As shown in this figure, in step 211, the mobile communication terminal apparatuses 110 and 120 download the security integrated application program from the security integrated application storage unit 153 and install it.

In step 212, the security supervision applications 111 and 121 of the mobile communication terminal devices 110 and 120 access the information management management device 150, and the user identification information registration control unit 111a and 121a transfer the user identification information to the user identification information registration unit 151a. Send.
In step 213, the user security information registration control units 111b and 121b transmit the user authentication method and the combination of the security level and the authentication method to the user identification information registration unit 151a.

In step 214, if there is a settlement request from the user due to the purchase of the product, the process proceeds to the next step, and if there is no settlement request, the process is terminated.
In step 215, when there is a settlement request, the mobile communication terminal apparatuses 110 and 120 write GPS position information in the non-contact IC card.
In step 216, the contactless IC card mounted on the mobile communication terminal devices 110 and 120 performs short-range wireless communication with the distribution management devices 130 and 131, and the ID information of the contactless IC card read from the contactless IC card. The position information is transmitted to the distribution management devices 130 and 131.

In step 217, the contactless IC card mounted on the mobile communication terminal devices 110 and 120 reads the purchase frequency information from the distribution management devices 130 and 131 by short-range wireless communication, and causes the mobile communication terminal devices 110 and 120 to receive them. Display the relationship between the combination of security level and authentication method.
For example, if the purchase frequency is 50 times / month, the authentication method for the security level 1 is password (4-digit) authentication, and if the purchase frequency is 30 times / month, the authentication method for the security level 3 is face authentication. If the frequency is 10 times / month, the authentication method for security level 6 is password (4 digits) + fingerprint authentication. If the purchase frequency is 0 times / month, the authentication method for security level 7 is password (10 digits), and the purchase frequency The security level is determined according to Thereby, it becomes possible to assist the user in determining the security level.
In step 218, the security level determination information by the user is written in the non-contact IC card according to the purchase frequency, read from the non-contact IC card by short-range wireless communication, and transmitted to the distribution management devices 130 and 131.

In step 219, the contactless IC card mounted on the mobile communication terminal devices 110 and 120 receives the authentication result from the distribution management devices 130 and 131 by short-range wireless communication and displays the result on the mobile communication terminal devices 110 and 120. The process ends.
FIG. 9 is a flowchart for explaining the operation of the distribution management apparatuses 130 and 131 in FIG. As shown in the figure, in step 221, the distribution management devices 130 and 131 input the product information and the purchase time information indicating what time and what the customer bought.

In step 222, a payment request is made to the user by purchasing the product.
In step 223, the distribution management devices 130 and 131 read from the contactless IC card mounted on the mobile communication terminal devices 110 and 120 by short-range wireless communication, and receive the ID information and position information of the contactless IC card. .
In step 224, ID information, position information, merchandise information, purchase time information of the non-contact IC card, that is, merchandise information indicating where, what, when and who bought the merchandise is transmitted.

In step 225, in the distribution management devices 130 and 131, the user refers to the relationship between the purchase frequency, security level and the combination of authentication methods displayed on the mobile communication terminal devices 110 and 120, and inputs the authentication data by the user. Do. For example, when the purchase frequency is high at 30 times / month, authentication data for face authentication is input at security level 3 (see FIG. 3).
In step 226, authentication data is transmitted from the distribution management devices 130 and 131 to the information management management device 150.

In step 227, the distribution management devices 130 and 131 receive the transmission result from the information management management device 150, and can be settled by purchasing the product, and the processing ends.
FIG. 10 is a flowchart for explaining the operation of the information management apparatus 150 in FIG. As shown in this figure, in step 231, the information management management device 150 determines whether or not user identification information has been received from the mobile communication terminal devices 110 and 120. If not received, the process is terminated.

In step 232, when the information management management device 150 receives the user identification information, the user identification information registration unit 151a of the registrant management device 151 registers and protects the user identification information.
In step 233, the information management management device 150 waits for reception of the user authentication method from the mobile communication terminal devices 110 and 120.

In step 234, when the information management management apparatus 150 receives the user authentication method, the user security information registration unit 151b of the registrant management apparatus 151 registers and protects the user authentication method.
In step 235, the information management management device 150 determines whether or not the ID information, position information, product information, and purchase time information of the contactless IC card has been received from the distribution management devices 130 and 131. If not received, the process is terminated.

In step 236, when the information management management device 150 receives the ID information, the position information, the product information, and the purchase time information of the non-contact IC card, the purchase information registration unit 152a of the information protection management device 152 performs the same operation by the same user. The past purchase frequency information at the place is obtained, and the purchase frequency information is transmitted to the distribution management devices 130 and 131.
In step 237, the information management management device 150 receives security level determination information and authentication data from the distribution management devices 130 and 131.
For example, security level 3 information is received as security level determination information, and face authentication data is received as authentication data.

In step 238, the information management apparatus 150 performs authentication confirmation of the authentication data based on the security level determination information. For the above example, authentication confirmation is performed between the received authentication data and the registered face authentication data.
In step 239, the authentication result of the authentication confirmation of the authentication data is transmitted from the information management management device 150 to the distribution management devices 130 and 131.
In step 240, the information management management device 150 accumulates information on where, what, and who bought it based on the ID information, position information, product information, and purchase time information of the non-contact IC card to protect the information. The purchase is registered and protected as purchase in the purchase information registration unit 152a of the management apparatus 152, and the process is terminated.

  Therefore, according to the present invention, the security level can be set according to the purchase frequency, so that it is possible to ensure the ease of authentication while enhancing the security of the non-contact IC card. .

  When each of the mobile communication terminal devices 110 and 120 is provided with infrared communication and Bluetooth communication functions as short-range communication functions, various contact-type devices mounted on each of the mobile communication terminal devices 110 and 120 are provided. The credit card information is transmitted to the corresponding distribution management devices 130 and 131 using the short-range communication function, and similarly, the security level is determined and notified from the mobile communication terminal devices 110 and 120, so that the user himself Can use the desired security system.

Furthermore, information on various membership cards including cash cards and video rental cards mounted on each of the mobile communication terminal devices 110 and 120 is transferred to the corresponding distribution management devices 130 and 131 using the short-range communication function. Similarly, by determining and notifying the security level from the mobile communication terminal devices 110 and 120, it is possible to use the security system desired by the user himself / herself.
Furthermore, the mobile communication terminal apparatuses 110 and 120 preferably have a short-range communication function of a wireless LAN (Local Area Network).

The information management management device 150 presents the occurrence status of fraudulent acts on various cards including contactless IC cards nationwide along with the purchase frequency. As a result, when the purchase location falls into an area where the fraudulent occurrence frequency is high, the user should not raise the security level even if the purchase frequency is high, avoid simple authentication, and prevent theft. It becomes possible.
For example, the state of occurrence of fraud is displayed as “very dangerous”, “dangerous”, “normal”, “somewhat safe”, “safe”.
If the purchase frequency is 50 times / month and the occurrence status of fraud is displayed as “safe”, the authentication method for security level 1 is password (4-digit) authentication, and the purchase frequency is 50 times / month. If the occurrence status is displayed as “very dangerous”, the authentication method for the security level 6 is password (4 digits) + fingerprint authentication, and the security level is determined.
In this way, it is possible to achieve a balance between security and ease of authentication.

  Each of the mobile communication terminal apparatuses 110 and 120 may be used in combination with an existing remote lock. This makes it impossible to use a non-contact IC card and various credit cards when the mobile communication terminal devices 110 and 120 are lost, thereby improving security.

  The mobile communication terminal devices 110 and 120 may preferably be a mobile phone, a PDA (personal digital assistant), or a PHS (simple mobile phone).

  The display portions of the mobile communication terminal devices 110 and 120 by the security supervision applications 111 and 121 are JAVA (registered trademark) applications.

  When the user needs to change registration information such as a moving address and TEL, the registration information after the change is transmitted from the security management application 111, 121 to the user identification information registration unit 151a of the information management management device 150. 111 and 121 can simultaneously change the contactless IC card and various credit cards by using the changed personal information.

In this case, when the user likes it, it is also possible to start up the corresponding security management applications 111 and 121 and operate the user's security decision support plan.
When changing the registration information, the user does not necessarily need to send the change contents to the information management management device 150 by e-mail. After the change is made in each of the mobile communication terminal devices 110 and 120, the contactless IC It is also possible to transmit changes when using a card or various credit cards.

  By cooperating with each company, it is possible to update the registration information of the company registered by the user when using a non-contact IC card and various credit cards.

Each of the mobile communication terminal devices 110 and 120 has personal information such as a telephone directory and an e-mail address. When such personal information is opened, each of the mobile communication terminal devices 110 and 120 has a native application. The authentication function works.
When each of the mobile communication terminal devices 110 and 120 has the same recognition ability as the information management management device 150, that is, as a recognition method, password (PW) (4 digits), (10 digits), fingerprint authentication, face authentication Each of the security supervision applications 111 and 121 holds the security level determined for the non-contact IC card and the various credit cards until it is newly determined next, Authenticate phone book and email address.

  In this way, authentication by the mobile communication terminal devices 110 and 120 can be managed collectively.

1 is a network diagram showing a schematic configuration of a mobile security decision support system according to the present invention. It is a figure explaining the user identification information registration control part 111a, 121a in the security integrated application 111,121 of the mobile communication terminal apparatuses 110,120 in FIG. It is a figure explaining the user security information registration control part 111b, 121b in the security integrated application 111,121 of the mobile communication terminal apparatuses 110,120 in FIG. It is a figure explaining the user identification information registration part 151a of the registrant management apparatus 151 of the information management management apparatus 150 in FIG. It is a figure explaining the user security information registration part 151b of the registrant management apparatus 151 of the information management management apparatus 150 in FIG. It is a figure explaining the purchase information registration part 152a of the information protection management apparatus 152 of the information management management apparatus 150 in FIG. 2 is a flowchart for explaining the operation of a security management application storage unit 153 of the information management apparatus 150 in FIG. 3 is a flowchart for explaining the operation of mobile communication terminal apparatuses 110 and 120 in FIG. 3 is a flowchart for explaining operations of distribution management apparatuses 130 and 131 in FIG. 1. It is a flowchart explaining operation | movement of the information management management apparatus 150 in FIG.

Explanation of symbols

110, 120 ... mobile communication terminal devices 111, 121 ... security integrated applications 111a, 121a ... user identification information registration control units 111b, 121b ... user security information registration control units 130, 131 ... distribution management device 140 ... communication network 150 ... information Management operation device 151 ... registrant management device 151a ... user identification information registration unit 151b ... user security information registration unit 152 ... information protection management device 152a ... purchase information registration unit 153 ... security control application storage unit

Claims (15)

In a mobile security decision support system for a mobile communication terminal device equipped with GPS and a non-contact IC card,
A security management application that supports the determination of the security level when using the non-contact IC card mounted on the mobile communication terminal device according to the purchase frequency at the same place by the same user;
A plurality of user authentication methods for authenticating each user, a user security information registration unit for registering a security level combining a plurality of user authentication methods,
A purchase information registration unit for accumulating information purchased using each contactless IC card and registering it as a purchase log;
The purchase frequency is obtained from the purchase information registration unit, and the user authentication data for the security level determined by the user according to the purchase frequency in the security management application is authenticated by the user authentication method of the user security information registration unit. And an information management and operation device for obtaining an authentication result,
Via the communication network, identification information of the non-contact IC card obtained by short-range wireless communication from the non-contact IC card, purchase information including GPS position information, user authentication data input by user operation Transmit to the information management and operation device, receive the purchase frequency information and the authentication result from the information management and operation device, and transmit the received purchase frequency information and the authentication result to the contactless IC card by short-range wireless communication A mobile security decision support system comprising a distribution management device that performs the above. Furthermore, a security control application storage unit is provided, the security control application storage unit stores a security control application program, and transmits the security control program to the mobile communication terminal device in response to a download request via a communication network. The mobile security decision support system according to claim 1, characterized in that it is characterized in that: The security management application registers a plurality of user authentication methods for authenticating a user and a security level combining a plurality of user authentication methods to the user security information registration unit via a communication network. The mobile security decision support system according to claim 1. The security management application, when changing the information in the user identification information registration unit of the information management management device, also changes the corresponding information of the non-contact IC card in a lump. The mobile security decision support system described. 5. The mobile security decision support system according to claim 4, wherein the security management application changes information in a user identification information registration unit of the information management apparatus when the contactless IC card is used. In addition, a user identification information registration unit is provided, the user identification information unit registers information for identifying a user of a contactless IC card mounted on the mobile communication terminal device, and the security control application passes through a communication network. The mobile security decision support system according to claim 1, wherein information for identifying a user of a contactless IC card mounted on the mobile communication terminal device is registered in the user identification information unit. . The mobile communication terminal device includes a contact type card, transmits identification information of the contact type credit card to the distribution management device by short-range wireless communication including Bluetooth, infrared communication, and wireless LAN. The mobile security decision support system according to claim 1, wherein transmission / reception is performed between distribution management devices. 8. The mobile security decision support system according to claim 7, wherein the contact card includes a credit card, a membership card, a cash card, and a video rental card. The information management management device transmits information on the state of fraud occurrence of a contactless IC card or a contact-type credit card to the security management application to assist in determining a security level. Item 8. The mobile security decision support system according to Item 7. 8. The mobile security decision support system according to claim 1, wherein the mobile communication terminal device has a remote lock function. When the mobile communication terminal device has an authentication function for opening personal information including a phone book and an e-mail address, the security control application verifies the authentication of the personal information with user authentication data for the determined security level. The mobile security decision support system according to claim 1, wherein: In the mobile security decision support method of a mobile communication terminal device on which GPS and a non-contact IC card are mounted,
Registering a plurality of user authentication methods for authenticating each user, a security level combining a plurality of user authentication methods, and
A step of reading purchase information including identification information of the non-contact IC card and GPS position information from each of the non-contact IC cards;
Receiving the read purchase information via a communication network, accumulating the received purchase information and registering as a purchase log; and
Obtaining the purchase frequency at the same place by the same user from the purchase log when receiving the purchase information;
Reading the purchase frequency received via the communication network into the contactless IC card;
Supporting the determination of a security level when using the non-contact IC card mounted on the mobile communication terminal device according to the purchase frequency read into the non-contact IC card;
The determination of the security level read from the contactless IC card is received via a communication network together with the authentication data of the user input by the user's operation, and the authentication data of the user by a plurality of user authentication methods for the determination of the security level And a step of confirming the authentication of the mobile security decision support method. In a program for executing mobile security decision support of a mobile communication terminal device on which GPS and a non-contact IC card are mounted by a computer,
A plurality of user authentication methods for authenticating each user, a procedure for performing security level registration combining a plurality of user authentication methods;
A procedure for reading the contact information including the identification information of the contactless IC card and the GPS position information from each contactless IC card;
Receiving the read purchase information via a communication network, accumulating the received purchase information and registering it as a purchase log; and
A procedure for obtaining a purchase frequency at the same place by the same user from the purchase log when the purchase information is received;
A procedure for reading the purchase frequency received via the communication network into the contactless IC card;
A procedure for supporting determination of a security level when using the non-contact IC card mounted on the mobile communication terminal device according to the purchase frequency read into the non-contact IC card;
The determination of the security level read from the contactless IC card is received via a communication network together with the authentication data of the user input by the user's operation, and the authentication data of the user by a plurality of user authentication methods for the determination of the security level A program for executing mobile security decision support on a computer, comprising: In a mobile communication terminal device equipped with GPS and a non-contact IC card,
The purchase information including identification information of the non-contact IC card read from the non-contact IC card and GPS position information is received via a communication network, stored, registered as a purchase log, and the purchase information To register a security level that combines a plurality of user authentication methods and a plurality of user authentication methods for authenticating each user to a server that obtains the purchase frequency of the same user at the same place from the purchase log when information is received User security information registration control unit,
The purchase frequency via the communication network from the server is read into the contactless IC card, and a security level is determined when the contactless IC card is used according to the purchase frequency. A user security information registration control unit for reading from a contact IC card, transmitting to a server via a communication network, and performing authentication confirmation of user authentication data for a security level by a user authentication method registered in the server; A mobile communication terminal apparatus comprising: In the information management management server that performs mobile security decision support for mobile communication terminal devices equipped with GPS and non-contact IC cards,
A plurality of user authentication methods for authenticating each user, a user security information registration unit for registering a security level combining a plurality of user authentication methods,
A purchase information registration unit for accumulating information purchased using each contactless IC card and registering it as a purchase log;
The purchase frequency is obtained from the purchase information registration unit, the purchase frequency is presented to the mobile communication terminal, the security level is determined to be supported, and the user for the security level determined by the user according to the purchase frequency Authentication management of the authentication data by the user authentication method of the user security information registration unit, an information management management device for obtaining an authentication result,
The information management and operation device receives the identification information of the non-contact IC card read from the non-contact IC card via the communication network, purchase information including GPS position information, and user authentication data input by user operation A distribution management device that receives the purchase frequency information and the authentication result from the information management management device, and causes the contactless IC card to read the received purchase frequency information and the authentication result. Information management management server.

Images