Patent Application
20080289018
The present invention relates to a secure device such as an IC card, terminal apparatus, gate equipment, and equipment for carrying out contact communication or non-contact communication with this secure device.
In recent years, IC cards have been broadly utilized as electronic settlement cards, commuter tickets, event tickets, and credit cards, etc. Recently, coupled with the increase in ever more miniaturized technology, IC cards having comparatively large capacity storage space are being made. It is then possible for this kind of card to be used as a multi-application card so that a single card is compatible with a plurality of applications by storing a plurality of card applications executing card services.
There are two communication schemes for such IC cards, contact communication where contact is made with the reader/writer at electrical contact points of the IC card and recording information is read out, and non-contact communication where information is exchanged by wireless communication where physical contact with a reader/writer is not necessary. In recent years, IC cards (combination cards) capable of being used for both contact communication and non-contact communication have been mounted on mobile terminal apparatus, with these mobile terminals being used as electronic wallets or in place of commuter passes.
Mobile terminal apparatus capable of rapidly and easily selecting target card functions from mounted multimedia cards are disclosed in the following Patent Document 1. Users using the apparatus display card functions of the multi-application card on a display screen of the mobile terminal as a list, and register new applications from this list and applications (priority applications) associated with the new applications for storage in the multi-application card. For example, when a commuter ticket function is registered as a parent application and an electronic money manager function is registered as a priority application, the mobile terminal is held out to the automatic ticket gate, and when it is wished to enter within the station using the commuter ticket function of the multi-application card, an application selection screen is displayed at the display screen of the mobile terminal with the display order of the electronic money function of the priority application set at the highest order.
Further, when the user uses an application function for the multi-application card, this position is detected by a current position detection section such as a GPS receiver etc. for the mobile terminal and the relationship between the used application function and the used position is stored in the mobile terminal. When the vicinity of this position is then arrived at again, an application selection screen where the display order of the application function corresponding to this position is set to the highest order is displayed at the display screen of the mobile terminal.
In this way, changing the display of the application select screen so as to correspond to this location is disclosed in Patent Document 1 but the conceptualization of limiting the card functions of an IC card depending on the location is not shown in this document. If it is possible to limit the card functions of the IC card depending on the location, new applications are then possible such as, for example, using a mobile telephone mounted with an IC card as an internal telephone within a company area or only utilizing specific data stored in an IC card within a company area, etc.
Further, in the event of limiting the card functions of the IC card according to the location, as shown in Patent Document 1, a user registration operation is necessary. This places a large processing load on the user and also causes the cost of the mobile terminal to increase because it is necessary for the mobile terminal to have a position information acquiring section.
In order to resolve these problems of the related art, it is the object of the present invention to provide a secure device such as an IC card capable of changing the card function of the secure device or the function of terminal apparatus or equipment to correlate with location or change these functions according to the communication scheme, processing that was nullified on the previous occasion, or memory capacity etc., as well as providing terminal apparatus, gate equipment, and equipment carrying out processing in cooperation with this secure device.
The security device of the present invention comprises an authentication section that performs authentication processing for a gate equipment, a terminal application installed at a terminal, and a control section that installs the terminal application designated by the gate equipment on the terminal in the event that authentication between the authentication section and the gate equipment is successful.
The secure device of the present invention adopts a configuration comprising an authentication section performing authentication processing for gate equipment, a card application, and a control section that permits the card application designated by the gate equipment to access a terminal application of a terminal in the event of successful authentication of the authentication section with the gate equipment.
Further, the secure device of the present invention adopts a configuration comprising an authentication section carrying out authentication processing with respect to a gate equipment and registering identification information for the successfully authenticated gate equipment, and a card application sending the identification information for the gate equipment to an equipment carrying out a predetermined operation under the condition that the authentication section successfully performs authentication with the gate equipment in order to provide verification of the equipment, or verifying the identification information in place of the equipment.
Further, gate equipment of the present invention adopts a configuration comprising a communication section that communicates with a secure device or a terminal holding the secure device, and a gate application carrying out authentication processing with the secure device via the communication section, and designating a terminal application to be installed at the terminal for the successfully authenticated secure device.
Moreover, gate equipment of the present invention adopts a configuration comprising a communication section that communicates with a secure device or a terminal holding the secure device, and an application carrying out authentication processing with the secure device via the communication section, and designating a card application capable of being accessed by the terminal application of the terminal for the successfully authenticated secure device.
Further, terminal apparatus of the present invention adopts a configuration where a secure device is held, and a terminal application designated by a gate equipment is installed from the secure device successfully authenticated with the gate equipment.
Further, the terminal apparatus of the present invention adopts a configuration holding a secure device, provided with a terminal application accessing a card application designated by a gate equipment in the card application held by the secure device successfully authenticated with the gate equipment.
Equipment of the present invention adopts a configuration of acquiring identification information for a gate equipment from a secure device successfully authenticated with the gate equipment and carrying out a predetermined operation in the event that verification of the identification information is successful.
The equipment of the present invention also adopts a configuration carrying out a predetermined operation in the event that information is acquired indicating successful verification of identification information of a gate equipment from a secure device successfully authenticated with the gate equipment.
By working in unison and changing card functions of a secure device and functions of terminal apparatus or equipment to correlate with location, or making changes according to the communication scheme, invalidation processing for a previous time, and memory capacity etc., it is possible for the secure device, gate equipment, terminal apparatus and equipment of the present invention to ensure greater security. For example, by switching over functions of terminal apparatus within an office and outside, it is possible to limit specific processing functions to specific areas, and if a specific entrance is not entered from, it is possible to ensure that the doors of rooms and safes cannot be opened. Further, it is possible to implement this kind of processing without inviting a user processing load or cost load.
Embodiment 1 of the present invention is now described for the case where terminal applications stored in an IC card are installed in a terminal only when an IC card at a secure device is positioned in a specific area.
There is a gate at the entrance to this specific area, and when authentication processing with the IC card is successful, the gate application designates a terminal application to be set to the terminal at the IC card. Upon receiving this, at an appropriate time, the IC card installs the designated terminal application from the held terminal applications to the terminal.
combination card 20 is provided with a non-contact communication section (3) 22 performing non-contact communication with gate 40, contact communication section (2) 21 carrying out contact communication with mobile telephone 10, authentication information database (DB) 25 storing authentication information etc., authentication application 24 performing authentication processing with other equipments 1 and 3, terminal application 27 installed at mobile telephone 10 and respectively installed terminal application/setting instructions 26, and CPU 23 controlling operation of combination card 20.
Further, mobile telephone 10 has contact communication section (1) 11 performing contact communication with combination card 20 and CPU 12 controlling operation of mobile telephone 10.
As shown in
The setting instructions may designate the following, for example, for the mobile telephone 10.
Set a company logo as a background image for a display screen.
Set a company sound as a sound (at the time of a receiving call, or at the time of executing an application).
Add an intranet application for use within a company to the main menu.
Change a default setting to an internal telephone (calls to an outside line changed to 0 calls).
Change the settings (mail server address, user ID, personal information, network settings, etc.) for the mail function.
It is only possible to access a specific mail server at the company.
It is only possible to send mail to specific addresses at the company.
It is only possible to read specific mail at the company.
Accessible application server is limited.
It is only possible to access specific sites at the company.
Further, terminal applications which are possible to install on the mobile telephone 10 are applications necessary to execute setting instructions that are not held at the mobile telephone 10 and are applications such as shown in the following, for example.
Software such as a browser etc. executing displaying based on setting instructions.
For example, in a company, it is possible to switch over to a browser that is only capable of accessing specific sites.
Switching over the mail application. For example, in a company, only specific mail applications where saving of mail is not possible, or specific mail applications where it is only possible to view saved mail inside the company may be provided. For example, saved mail may be saved in a secure memory area of combination card 20 so that access is only possible by a specific mail application.
When a user enters a specific area, the mobile telephone 10 installed with the combination card 20 is held up to the gate 40. When combination card 20 advances to within the range of communication of non-contact communication section 41, CPU 42 of gate 40 designates the authentication application ID and gate application ID at the combination card 20 and requests authentication processing (1-1). CPU 23 of combination card 20 receiving this then starts up authentication application 24, and authentication application 24 executes authentication processing (1-2) using a typical challenge response with gate application 43 using authentication information corresponding to gate application ID of authentication information DB 25. When the authentication processing is successful, gate application 43 designates the terminal application ID and makes a request for installation to the terminal of this terminal application (1-3). More than one terminal application ID may be specified.
The authentication application 24 of combination card 20 receiving this request then confirms (verifies) that this terminal application can be installed from information of authentication information DB 25 and conveys this to CPU 23. CPU 23 then sends an install request indicating the terminal application ID to mobile telephone 10 (2-1), and carries out authentication processing with the mobile telephone 10 at authentication application 24 (2-2). If authentication between both parties is already complete at the time the combination card 20 is installed at the mobile telephone 10, this authentication processing may be omitted. When authentication processing is successful, CPU 23 sends the corresponding terminal applications 26 and 27 to mobile telephone 10 (2-3) and CPU 12 of mobile telephone 10 installs this terminal application.
In this way, installation of a terminal application from combination card 20 to mobile telephone 10 is executed as a result of cooperation of the three parties of the gate 40, combination card 20 and mobile telephone 10, under the condition that authentication of the combination card 20 and the gate 40 is successful. As a result, processing utilizing the operation of the combination card 20 and the terminal application of the mobile telephone 10 is possible only within the area entered into after passing through the gate 40.
In the international standards specification for IC cards (ISO7816 for contact communication, ISO14443 for non-contact communication), exchange of data between the card application of the IC card and the terminal application of the reader/writer side is basically defined as a “command” sent to the card application from the terminal application and a “response” sent from the card application to the terminal application. An IC card satisfying this international standard specification can therefore only operate passively and such a card cannot send installation requests of (2-1) to mobile telephone 10 by itself.
For this reason, in the event that combination card 20 satisfies the international standard specification, mobile telephone 10 continues to send a polling signal to combination card 20 in order to observe the state of the non-contact communication from the time where the user puts the mobile telephone 10 up to the gate 40. When a response for completion of non-contact communication is received from combination card 20, transmission is instructed to combination card 20 if there is a request, and combination card 20 sends an installation request to mobile telephone 10 in response to this (2-1). By adopting this procedure, compatibility with IC cards satisfying international standard specifications is also possible.
A description is given here of the case where the IC card is a combination card, but as shown in
Further, when the IC card only has a non-contact communication function, communication is carried out using non-contact communication between mobile telephone 10 and gate 40. Interrogation of non-contact IC card 20 is carried out in order to observe the processing state with the gate 40 from the time where the user holds the mobile telephone 10 up to the gate 40. When processing with the gate 40 is complete, non-contact IC card 20 returns a notification of completion to mobile telephone 10. As a result, mobile telephone 10 instructs transmission to the non-contact IC card 20 if there is a request and an install request is sent to mobile telephone 10 in response to this (2-1). Further, when processing with gate 40 is complete, non-contact IC card 20 notifies mobile telephone 10 of completion and sends an installation request to mobile telephone 10 (2-1).
In a second embodiment of the present invention, a description is given of the case of permitting utilization of a card application stored in an IC card at a terminal under the condition of successful authentication of the IC card and gate. When authentication of the IC card is successful, the gate conveys an ID of a gate application allowed to be utilized at the terminal and gate PIN information specifying the gate to the IC card, and pair information for this card application ID and gate PIN is stored in the IC card. The IC card then designates the card application from the terminal, refers to this pair information when this utilization is requested, and decides whether or not to permit utilization of this card application.
As shown in
Gate application 28 capable of being utilized in the area entered to from gate 40 is, for example, an in-office extension number telephone book application capable of accessing an internal line book stored in combination card 20 from terminal application 14 executing a telephone book function of mobile telephone 10 when authentication of combination card 20 and gate 40 is successful.
When the user holds mobile telephone 10 installed with computer card 20 up to the gate 40, the gate 40 indicates the authentication application ID and the gate application ID at the combination card 20 and requests authentication processing between both parties (1-1). Authentication application 24 of combination card 20 receiving this then executes authentication processing for the gate application 43 using authentication information corresponding to the gate application ID of the authentication information DB 25 (1-2). Gate application 43 for which authentication processing is successful then designates the ID of the card application it is wished to set (or delete) the gate PIN for and requests registration (or deletion) of pair information for the card application ID and gate PIN (1-3). The number of card application IDs indicated by gate application 43 at this time may be more than one.
The authentication application 24 of the combination card 20 then sends information for the gate application ID and gate PIN to the gate application 28 corresponding to this card application ID and requests confirmation (verification) (2-1). The card application 28 then refers to the authentication information DB 25, verifies whether or not a correspondence relationship with the gate application exists (whether or not setting of the gate PIN is possible), and returns the verification results to the authentication application 24 (2-2). In the event that the authentication results are “OK”, authentication application 24 stores pair information for the verified card application ID and gate PIN (2-3), and notifies the gate application 43 of the verification results (2-4). The above is processing at the time of passing through a gate.
On the other hand, the following processing is carried out in the case where the terminal application 14 of the mobile telephone 10 utilizes the card application 24.
Terminal application 14 of mobile telephone 10 designates the card application ID and requests an access to card application 28 of combination card 20 (3-1). Card application 28 indicates the card application ID to authentication application 24 and requests verification results (3-2). Authentication application 24 refers to PINDB 29, responds with OK when pair information for the card application ID and gate PIN is registered, and responds with NG when not registered (3-3). Card application 28 permits access to terminal application 14 in the event that the response from authentication application 24 is OK (3-5).
As a result of this processing, it is possible to utilize the card application 28 only in the event that a user enters the correct gate 40 so that, for example, when a user holds mobile telephone 10 fitted with an IC card such as combination card 20 etc. up to a legitimate gate 40 so as to enter an office, an extension number telephone book application for office use stored in the IC card automatically becomes effective.
In the event that the card application ID designated by gate application 43 is recorded in the authentication information DB 25 as a card application ID canceling the PIN setting, the authentication application 24 refers to PINDB 29, and deletes pair information for the card application ID and gate PIN recorded at this location.
By doing this in conjunction with deletion processing of PINDB 29, for example, after a user carries out entrance processing and enters a certain office, in the event that entrance processing is performed and another office is entered, the extension number telephone book application for use within the previous office is invalidated, and only the extension number telephone book application for use within the office entered afterwards is made valid.
It is also possible to encrypt messages and data for each process for transmission in order to prevent eavesdropping by a third party.
Further, in
Further, IC cards such as combination card 20 etc. may also have only contact communication functions. In this case, as described in Embodiment 1 (
At authentication information DB 25 shown in
In the event that card application 28 corresponding to the gate application ID is selected from authentication information DB 25, the priority setting DB is referred to, and a card application 28 selected based upon priority is decided upon.
In Embodiment 3 of the present invention, a description is given for utilization of a card application stored in an IC card under the condition of successful authentication of the IC card and gate for the case where processing between the three parties of the CI card, gate and terminal in the configuration of Embodiment 2 providing permission to the terminal is carried out using a difference procedure to that of Embodiment 2.
Here, as shown in
When the user holds IC card 200 up to the gate 40, gate 40 indicates the authentication application ID and the gate application ID at the IC card 200 and requests mutual authentication processing (1-1). Authentication application 24 of IC card 200 receiving this then executes authentication processing for the gate application 43 using authentication information corresponding to the gate application ID of the authentication information DB 25 (1-2). The gate application 43 for which authentication processing is successful then designates an ID of a gate application setting the gate PIN, requests registration of pair information for the card application and gate PIN to the authentication application 24 (1-3), and authentication application 24 of the IC card 200 registers pair information for the card application ID and gate PIN in PINDB 29 in accordance with the request (1-4). In this registration stage, verification with the authentication information DB 25 is not complete. The above is processing at the time of passing through a gate.
On the other hand, when the user holds the IC card 200 up to the door 100, the following processing is carried out.
Terminal application 14 of the door 100 indicates the terminal application ID and card application ID and requests access to card application 28 of IC card 200 (2-1). The card application 28 requests registration information for PINDB 29 indicating the card application ID and gate application ID (2-2) to authentication application 24, and authentication application 24 acquires the pair information for the corresponding card application ID and gate PIN from the PINDB 29 for indication at the card application 28 (2-3). The card application 28 then refers to the authentication information DE 25, verifies whether there is a correspondence relationship with the gate application (whether or not setting of the gate PIN is possible) (2-4), and in the event that the verification results are OK, permits access to the terminal application 14 (2-5).
Terminal application 14 of the door 100 accessing the card application 28, for example, acquires key information from the card application 28 so that it is possible for the user to pass through the door 100.
In this way, it is possible to ensure that a door will not open if entrance does not take place from the correct entrance (gate) by ensuring that the gate 40, IC card 200 and door 100 operate in unison.
In this PIN verification (2-4), it is also possible for the card application 28 to verify the pair of the terminal application 14 and gate PIN. In this event, it is possible to perform control in such a manner that access is not permitted (i.e. a certain door will not open unless entering takes place from a specific entrance) if there is not correspondence with a specific gate PIN at a certain terminal application 14.
Further, as shown in
In Embodiment 4 of the present invention, a description is given of the case where processing of equipment is possible under the condition that authentication processing for the IC card and the gate is successful.
When authentication processing with the gate is successful, the IC card acquires the gate PIN from the gate and sends this gate PIN to the equipment. The equipment then starts processing after completion of verification of the gate PIN.
The safe 50 is provided with a non-contact communication section (5) 51 carrying out non-contact communication with the combination card 20, a key application 53 controlling opening and closing of the key of the safe 50, and a CPU 52 controlling operation of the safe 50. The configuration of the gate 40′ combination card 20 and mobile telephone 10 has not changed from that of Embodiment 2 (
When the mobile telephone 10 with combination card 20 installed is held up to the gate 40, the processing from (1-1) to (1-4) of
Key application 53 of safe 50 then indicates the card application ID and requests access to the card application 29 to the combination card 20 (3-1). Card application 29 then indicates the card application ID and key application ID, and requests a gate PIN to the authentication application 24 (3-2). Authentication application 24 then refers to PINDB 29, acquires gate PIN information corresponding to the card application ID, and returns this to the card application 29 (3-3).
Next, card application 29 makes a request to the terminal application 14 of mobile telephone 10 for a user PIN (3-4). The terminal application 14 displays a PIN input screen, and when the user inputs a PIN (3-5), this user PIN is sent to the card application 29 (3-6). The card application 29 then collates this with the user PIN information held in the PINDB 29 of the combination card 20 and verifies this (3-7). In the event that the verification results for the user PIN match, the gate PIN is sent to key application 53 of the safe (3-8). The key application 53 collates and verifies gate PIN information held in advance and a gate PIN sent from card application 29 (3-9), and in the event that the verification results match, key processing is executed (3-10).
In this way, for example, in the event that gate 40 is located at an entrance, the key for the safe 50 can only be used when entering processing at the entrance is carried out correctly.
Various changes are possible regarding the period of carrying out verification of the user PIN and gate PIN or the main body carrying out verification etc. For example, rather than the key application 53 carrying out verification of the gate PIN (3-9), it is also possible for the card application 29 to carry out verification of the gate PIN together with the user PIN verification (3-8) and convey the verification results to the key application 53.
Further, the input user pin may be sent to the key application 53 in place of the card application 29 carrying out PIN verification (3-8), with the key application 53 then performing collation with the user PIN registered in the safe 50 and carrying out user PIN verification.
Moreover, as shown in
Further, as shown in
Further,
Moreover,
Further,
Moreover,
Further,
Moreover,
Further,
In the event that the gate PIN is verified by the card application (application 2) of the combination card (equipment 2), when the gate PIN has changed, it is sufficient simply to change the gate PIN stored in the card. Further, it is also possible to carry out access control using the combination of the gate application (application 4) and the key application (application 5).
Moreover, in the event that the gate PIN is verified by the key application (application 5) of the safe (equipment 4), it is sufficient just to register gate PIN information at the safe at the time when a new safe (equipment 4) is added. Further, it is not necessary to change setting of the case when the safe is deleted.
Further, in the event that the user PIN is verified using the card application (application 2) of the combination card (equipment 2), when the user wishes to change the user PIN, it is sufficient just to change the user PIN stored in the combination card (equipment 2) and this can be completed without changing the user PIN at the equipment (for example, a safe) desiring the change. Moreover, completion is also possible without setting a user PIN at each door even in cases where a single user PIN corresponds to a plurality of equipment (doors, etc.). Further, as shown in
Moreover, in the event that the user PIN is verified by the key application (application 5) of the safe (equipment 4), the user PIN is managed at the safe. It can therefore be easily understood how many users are registered.
Further, in this embodiment, equipment 4 is assumed to be a safe, and a key application is assumed as the card application but the equipment 4 may also be a video or set top box (STB), and the card application may be assumed to be a settlement card application, fee-paying broadcast picture-recording booking application, or fee-paying broadcast receiving operation application. As a result of doing this, services are also possible where settlement processing (settlement card application) via the STB (PC) cannot be achieved, or video picture recording booking (or cancellation) (fee-paying broadcast picture recording application) cannot be achieved if the key processing for entering is not performed correctly.
Further, in the event that the equipment 4 is a vehicle security module, it is also possible to provide services where a security alarm rings if a vehicle door is opened, a vehicle engine is started, or vehicle audio equipment of a vehicle is removed without a card application correctly performing opening key closing processing or without performing check-in processing correctly at the security module (equipment 4).
Further, in this embodiment, a description is given mainly of the case where an IC card is installed at a mobile telephone but the present invention is by no means limited in this respect. For example, it is possible to use various terminal apparatus and information processing apparatus such as PDAs (Personal Digital Assistants), mail terminals, compact personal computers, game equipment etc. in place of the mobile telephone. Further, use is also possible with IC cards that do or do not satisfy international standard specifications. The form of the security device may be card-shaped or chip-shaped, and embedding in the information processing apparatus is also possible. Further, the IC card may also have only a contact communication section.
Next, a description is given of Embodiment 5 of the present invention. In Embodiment 5, terminal applications which is possible to install or delete and setting of setting instructions are changed according to the communication scheme. The configuration itself is the same as that of Embodiment 1 shown in
As shown in
In the case of Embodiment 5, the combination card 20 that is an IC card (equipment 2) has a non-contact communication section 22 having a short range wireless communication function compatible with a plurality of communication schemes, and changes terminal applications which is possible to install or delete and settings of setting instructions using the communication scheme.
Here, a description is given of an example where terminal applications and setting of setting commands are changed using different communication schemes for processing for entering and exiting a company.
In the example of
In the case of independent communication scheme B, terminal application 1 ID (mailer for company use) and terminal application 3 ID (browser for viewing extension numbers) exist as terminal application IDs that can be installed, and it is taken that setting instruction 7 ID (settings for company use: company network setting, wallpaper, extension mode) is taken as a setting instruction ID capable of being installed, terminal application 11D (mailer for individual use) and terminal application 2 ID (game) are taken as terminal application IDs for deletion, and setting instruction 5 ID (individual network settings, wallpaper, communication call mode) is taken as a setting instruction ID for deletion.
As a result, it is possible to change the settings according to the communication scheme even if an instruction comes from the same gate application 43 or regardless of the application ID.
For example, in the example in
In the case of this example, a mailer (application 1) for individual use and a game (application 2) are taken as applications for individual use, and a mailer (application 4) for company use and browser (application 3) for viewing extension telephone numbers capable of accessing extension number data stored within combination card 20 exist as applications for company use, and can be deleted or installed at the entrance (2) and exit (1).
Further, settings instructions also exist that are for company use and individual use, so that, for example, settings for networks which is possible to access, wallpaper, and talk mode etc. can be switched over.
Next, a description is given of the operation with references to the drawings.
In the case of this embodiment, non-contact communication section (3) 22 of combination card 20 that is equipment 2 carries out non-contact communication with non-contact communication section (4) 41 of gate 40 that is equipment 3, and in the event that a processing request is sent from gate 40 that is equipment 3 to the combination card 20 that is the equipment 2 (6-1), CPU 23 of the combination card 20 detects the communication scheme of this non-contact communication (6-2), carries out authentication processing with the gate 40 that is the equipment 3 (6-3), refers to the authentication information of authentication information DB 25, and confirms the authentication processing (6-4).
CPU 23 of the combination card 20 notifies gate 40 that is the equipment 3 of authentication processing in the event that authentication processing is confirmed (6-5). As a result, at the gate 40, it is possible to confirm applications installed with respect to the combination card 20 that is equipment 2 and setting instructions. This notification can of course be omitted. Gate 40 then receives this processing notification and opens a gate corresponding to gate application 43 according to the communication scheme (6-6).
On the other hand, CPU 23 of the combination card 20 sends a setting request for terminal application ID and setting instruction ID which is possible to install or delete to the mobile telephone 10 that is equipment 1 via the contact communication section (2) 21 according to the detected communication scheme (6-7) and carries out authentication processing (6-8).
In the event that authentication is achieved, CPU 23 of the combination card 20 sends a terminal application ID and setting instruction ID for which installation or deletion is possible to the mobile telephone 10 that is equipment 1 via the contact communication section (2) 21 according to the detected communication scheme (6-9). At the mobile telephone 10, a terminal application ID and setting instruction ID that can be installed or deleted according to the communication scheme between the combination card 20 and the gate 40 are installed or deleted (6-10) according to instruction from CPU 23 of equipment 2, and combination card 20 is notified of the results (6-11).
As a result, it is possible to install the terminal application ID and setting instruction ID to the mobile telephone 10 according to the communication scheme between the combination card 20 and gate 40, or delete according to the communication scheme.
Authentication processing between combination card 20 and the mobile telephone 10 that is the equipment 1 may be carried out prior to a setting request for the terminal application ID and setting instruction ID capable of being installed or deleted. Further, authentication processing between the combination card 20 and the mobile telephone 10 is not necessary in the case of authentication processing at the time of installation of the combination card 20 in the mobile telephone 10 that is the equipment 1.
According to Embodiment 5, by installing at the mobile telephone 10 according to the communication scheme, or changing terminal applications to be deleted and setting instructions from the mobile telephone 10, it is possible to change functions of mobile telephone 10 not only according to location but also according to communication scheme.
In this embodiment, CPU 23 is in possession of functions for changing terminal applications and setting instructions which is possible to install or delete according to the communication scheme, but it is also possible for authentication application 24 to have these functions.
Next, a description is given of Embodiment 6 of the present invention. In Embodiment 6, a card application is changed to be valid or invalid (use inhibited) according to the communication scheme. The structure itself is the same as Embodiment 2 shown in
In the event that combination card 20 that is equipment 2 has a non-contact communication section (3) 22 having a plurality of short range wireless communication functions, it is possible to change the card application to valid or invalid depending on the communication scheme. Here, “making the card application invalid” refers to a state where a response is not returned from the IC card even if, for example, an ISO7816 specification select command is sent to the IC card from the R/W (read/writer).
Here, there are cases where application is limited by short range wireless lines. For example, limiting may take place to applications in specific areas etc. such as ISO14443TypeA being a finance application, ISO14443TypeB being for applications directed towards the public, and JICSAP2.0 being directed towards traffic, etc.
In this way, by limiting access to the card application 28 of the combination card 20 from the terminal application 14 of the mobile telephone 10 according to the communication scheme, it is possible for the user to understand which card application 28 that is out of range is stored from the R/W (reader/writer) of the gate 40 etc. For example, the card application ID is publicly known. It is therefore possible to know the validity of the card application using the response from an IC card such as a combination card 20 etc. when an ISO7816 standard select command is sent, whatever the R/W (read/writer) is.
Namely, it is possible for an R/W (read/writer) for public service use to acquire personal information such as which credit card application this user is in possession of without the knowledge of the user.
In Embodiment 6, it is possible to set the application ID to invalid, i.e. use inhibit, according to the communication scheme.
In
Next, a description is given of the operation with reference to the drawings.
In the case of this embodiment, non-contact communication section (3) 22 of computer card 20 that is equipment 2 carries out non-contact communication with the non-contact communication section (4) 41 of gate 40 that is the equipment 3, and in the event that a request command is sent from gate 40 that is equipment 3 to combination card 20 that is equipment 2 (7-1), the CPU 23 of the combination card 20 detects the communication scheme of this non-contact communication (7-2), and in the event that the communication scheme cannot be detected, returns a response command (7-3).
In the event that a select command for the card application is then sent from the gate 40 that is equipment 3 (7-4), CPU 23 of the combination card 20 refers to authentication information DB 25 and confirms whether or not access is possible (7-5), and returns a select command response to the gate 40 that is the equipment 3 (7-6).
Namely, CPU 23 of the combination card 20 refers to the authentication information of
For example, in the event that the communication scheme between combination card 20 and gate 40 is ISO14443TypeB and the card application ID designated by gate 40 is card application 3 ID (credit card), when the content of the authentication information DB 25 shown in
With regards to this, in the event where the communication scheme for between the combination card 20 and the gate 40 is ISO14443TypeB and the card application ID designated by the gate 40 is card application 1 ID (driving license), upon referring to the content of authentication information DB 25 shown in
As a result, the card application 28 changes between effective and invalid (use-inhibited) according to the communication scheme between the combination card 20 and the gate 40. There are then cases where terminal application 14 of the mobile telephone 10 is capable of accessing the card application 20 at the combination card 20 and is not capable of access according to the communication scheme between the combination card 20 and gate 40.
According to Embodiment 6, as it is possible to set an application ID invalidating the terminal application 27 within the combination card 20 according to the communication scheme between the combination card 20 and the gate 40, it is possible to limit access to an IC card such as a combination card 20 etc. according to the communication scheme. It is therefore possible for what kind of application is stored by the user outside of the field to not be known at the R/W (reader/writer) of the gate etc.
In Embodiment 6, a description is given of designating application IDs to be invalidated according to the communication scheme. However, by combining this Embodiment 6 and Embodiment 5 described previously and using per detection and authentication processing of communication scheme between the combination card 20 that is equipment 2 and gate 40 that is equipment 3, is it possible to simultaneously change the terminal application IDs and setting instruction IDs to be installed or deleted and the application IDs to be invalidated, according to the communication scheme.
Further, in Embodiment 6, a function is provided for setting application IDs to be made invalid for the terminal application 27 within the combination card according to the communication scheme between the combination card 20 and gate 40 at the CPU of the combination card 20 that is equipment 2 but it is also possible for this function to be in the possession of the authentication application 24 etc. of combination card 20.
Next, a description is given of Embodiment 7 of the present invention. In Embodiment 7, if a setting providing validation between combination card 20 that is the equipment 2 and mobile telephone 10 that is equipment 1 is correctly invalidated on a previous occasion, then on this occasion, authentication between gate 40 that is equipment 3 and combination card 20 that is equipment 2 is permitted.
In Embodiment 7, terminal setting management section 210 is provided at combination card 20 that is equipment 2, and if a setting validating mobile telephone 10 that is equipment 1 and combination card 20 that is equipment 2 for the previous time is correctly invalidated by terminal setting management section 210, on this occasion, authentication between gate 40 that is equipment 3 and combination card 20 that is equipment 2 is permitted. Terminal setting management section 210 may be integral with authentication application 24 or may be integral with CPU 23. Other aspects of the configuration as the same as for Embodiment 1 shown in
An example of data set in the authentication information DB 25 of Embodiment 7 is shown in
Data for ID1 and ID2 is set in authentication information DB 25.
In the case of ID1, www.app.co.jp/gate1, a communication scheme of ISO14443TypeB, an effective time of 5:00 hours, an installable terminal application ID and setting instruction ID of terminal application 3 ID (extension number viewing browser) and setting instruction 7 ID (setting for company use: company network setting, wallpaper, extension mode), and a deletable terminal application ID and setting instruction ID of terminal application 2 ID (game) and setting instruction 5 ID (individual network setting, wallpaper, normal calling mode) are set.
Further, in the case of ID2, www.app.co.jp/gate2, a communication scheme of UWB (Ultra WideBand), an effective time of no limit, an installable terminal application ID and setting instruction ID of terminal application 2 ID (game) and setting instruction 5 ID (individual network setting, wallpaper, normal calling mode), a deletable terminal application ID and setting instruction ID of terminal application 3 ID (extension number viewing browser) and setting instruction 7 ID (setting for company use: network setting for a company, wallpaper, extension mode) are set.
An example of data set in the terminal setting management section 210 of Embodiment 7 is shown in
At the data set at terminal setting management section 210, data such as an ID for equipment 3 of www.app.co.jp/gateterminal1, a gate application ID of www.app.co.jp/gateappl, an equipment 1 ID of www.app.co.jp/terminal1, a time stamp at the time of setting of 2004/12/24 15:32:02, an effective time of 5:00 hours, an ID for authentication information DB 25 of 1, a terminal application ID for the time of installation of terminal application 3 ID (extension number viewing browser), an installed setting instruction ID of setting instruction 7 ID (settings for company use: company network setting, wallpaper, extension mode), a deleted terminal application ID of terminal application 2 ID (game), a deleted setting instruction ID of setting instruction 5 ID (individual network settings, wallpaper, communication call mode), and setting processing results of normal, taken as ID1 is stored from the authentication application 24 to the terminal setting management section 210 as a result of setting notification processing (8 to 14 of
Other than this, with data set in terminal setting management section 210, as shown in
Next, a description is given of the operation with reference to the drawings.
First, describing the processing from the time of installation, in the case of this embodiment, non-contact communication section (3) 22 of combination card 20 that is equipment 2 carries out non-contact communication with non-contact communication section (4) 41 of gate 40 that is equipment 3. In the event that an authentication request is sent from the gate application 43 of gate 40 that is equipment 3 to authentication application 24 of combination card 20 that is equipment 2 (8-1), authentication application 24 of combination card 20 carries out authentication processing with gate 40 that is equipment 3 (8-2).
In the event that the authentication processing is OK, authentication application 24 of combination card 20 makes a request for the results for the previous time to terminal setting management section 210 (8-3). If the results for the previous time are OK, terminal setting management section 210 replies that the results for the previous time are OK to authentication application 24 (8-4).
In doing so, authentication application 24 notifies gate application 43 of gate 40 of the result OK for the previous time (8-5), and the gate application 43 of gate 40 opens the gate (8-6). In the event that the setting of the validation for the previous time is not invalidated correctly while acquiring the results for terminal setting for the previous time during authentication using non-contact communication between combination card 20 that is the equipment 2 and gate 40 that is equipment 3, authentication is not permitted.
Further, in the event that the previous result is OK, authentication application 24 of the combination card 20 sends an installation request to the mobile terminal 10 that is the equipment 1 (8-7), and executes authentication processing with CPU 12 of mobile terminal 10 (8-8).
In the event that authentication processing is OK, authentication application 24 of the combination card 20 sends terminal application 27 to the mobile terminal 10 that is equipment 1 (8-9), and the mobile terminal 10 receives and installs this terminal application 27 (8-10).
In the event that it is possible to install the terminal application 27 received from the combination card 20, CPU 12 of the mobile terminal 10 gives notification of the installation results of OK to the authentication application 24 of the combination card 20 (8-11), and the authentication application 24 provides setting notification on the terminal setting management section 210 (8-13).
Terminal setting management section 210, using the setting notification from authentication application 24, stores an ID shown in
On the other hand, at mobile terminal 10, timer management is carried out (8-16) after notifying the authentication application 24 of the combination card 20 of the installation results of OK (8-11). Here, in place of carrying out this timer management, after the terminal setting management section 210 of the combination card 20 notifies the authentication application 24 of the storage results (8-15), the authentication application 24 carries out timer management, and a restoration instruction is carried out from the authentication application 24 of equipment for the CPU 12 of equipment 1 before restoration processing (3-17) at the mobile terminal 10 of equipment 1 described later. The processing at the time of installation is then complete.
On the other hand, at the mobile terminal 10 that is equipment 1, in the event that restoration processing, i.e. deletion processing for installed terminal applications and setting instructions is carried out (8-17), CPU 12 of the mobile terminal 10 gives notification that the restoration results are OK to authentication application 24 of the combination card 20 (8-18).
Here, during processing at the time of restoration, the installed terminal application is deleted but, for example, in cases where exit processing is performed within an effective time, etc., there are cases where the installed terminal applications are already deleted. In such cases, restoration results of OK or deletion complete is carried out for the authentication application 24 of the combination card 20.
The authentication application 24 of the combination card 20 that is equipment 2 receives notification of the restoration results of OK from the CPU 12 of the mobile terminal 10 and transmits the restoration results notification to the terminal setting management section 210 (8-19).
At terminal setting management section 210, when restoration results notification is received from the authentication application 19, for example, a time stamp for the time of restoration notification shown in
In order to bring about greater security, it is also possible to enter authentication processing before or after notification processing (8-18) of the restoration results of OK for the authentication application 24 of the combination card 20 that is the equipment 2 from the CPU 12 of the mobile terminal 10.
According to Embodiment 7, if, on the previous occasion, validation settings between the combination card 20 that is the equipment 2 and the mobile telephone 10 that is the equipment 1 is correctly invalidated, on this occasion, on the one hand, authentication of the gate 40 that is equipment 3 and the combination card 20 that is equipment 2 is permitted, while on the previous occasion, a setting of validation between the combination card that is the equipment 2 and the mobile telephone 10 that is the equipment 1 is not correctly invalidated, on this occasion, it is ensured that authentication of the gate 40 that is equipment 3 and the combination card 20 that is equipment 2 is not permitted. This means that on every occasion it is possible to permit authentication between the equipment 3 and the equipment 2 from confirming whether or not validation settings between the equipment 1 and the equipment 2 have been correctly invalidated.
Further, in this Embodiment 7, terminal setting management section 210 stores the setting instructions and installation that are the set content in the authentication information while managing the results of the terminal setting for the previous time, outputs a deletion (invalidation) instruction to confirm deletion after an effective time, receives deletion management notification based on this effective time for which the timer is managed by the mobile terminal 10 that is the terminal 1, and stores setting content etc. indicated in
In this Embodiment 7, a description is given where the terminal setting management section 210 is provided separately from the authentication application 24 but the terminal setting management section 210 may also be provided integrally with, i.e. as a function of, the authentication application 24 or may be provided integrally with the CPU 23, i.e. as one function of the CPU 23.
Next, a description is given of Embodiment 8 of the present invention. In Embodiment 8, in order to ensure the memory capacity etc. of a mobile telephone that is equipment 1, in the event that the terminal application of the mobile telephone is suspended, the combination card that is equipment 2 is reinstalled during the setting cancellation processing with regards to this terminal application.
In
Namely, in Embodiment 8, in the event of suspension of the terminal application from the mobile telephone 10, at the time of receiving an installation request from the combination card 20 that is the equipment 2, in the event that there is little capacity at terminal memory (not shown) of mobile telephone 10 or the new terminal application 27 cannot be installed, authentication is carried out using the terminal setting management section 220 and the terminal application suspension management section 120. If this authentication is successful, the terminal application installed at the mobile telephone 10 and the data held by this terminal application are stored in a secure area that the terminal setting management section 220 can only access from the terminal application suspension management section 120 of the equipment 1, for example, a tamper region of IC card 20 or an encrypted flash memory area of the IC card 20, etc. Further, it is also possible to generate a key at the time of authentication, and encrypt and save based on this key information.
Assigning and holding an order of priority to the terminal applications at equipment 1 or designating applications to be saved, for example, contained in installation requests from the combination card 20 that is the equipment 2 exist as methods for selecting terminal applications to save at the mobile telephone 10 that is equipment 1.
On the other hand, at the time of restoration, at the time of a setting interruption instruction from the combination card 20 that is the equipment 2, if there is an application that has been saved to the combination card 20, after setting terminal processing confirmation, a restoration instruction for the saved terminal application is sent and authentication processing for the restoration is carried out. Authentication is then carried out between the terminal setting management section 220 and the terminal application suspension management section 120, and if this authentication is successful, the saved terminal application and this data are sent to the terminal application suspension management section 120, the terminal application suspension management section 120 re-installs this terminal application, and the terminal application data is restored.
In this Embodiment 8 also, as with Embodiment 7, results for terminal settings for the previous time are acquired at the time of authentication using non-contact communication between the combination card 20 that is the equipment 2 and the gate that is the equipment 3, and it is then of course also possible to ensure that authentication between the combination card 20 that is the equipment 2 and the gate that is the equipment 3 is permitted on this occasion only in the event that the setting of validation between equipment 1 and equipment 2 the previous time has been correctly invalidated.
Next, a description is given of the operation with reference to the drawings.
First, describing the processing from the time of suspension of the terminal application and its data, in the case of this embodiment, non-contact communication section (3) 22 of combination card 20 that is equipment 2 carries out non-contact communication with non-contact communication section (4) 41 of gate 40 that is equipment 3. In the event that an authentication request is sent from the gate application 43 of gate 40 that is equipment 3 to authentication application 24 of combination card 20 that is equipment 2 (9-1), CPU 23 of combination card 20 carries out authentication processing with gate 40 that is equipment 3 (9-2).
In the event that the authentication processing is OK, authentication application 24 of combination card 20 makes a request for the results for the previous time to terminal setting management section 220 (9-3). If the results for the previous time are OK, terminal setting management section 220 replies that the results for the previous time are OK to authentication application 24 (9-4).
In doing so, authentication application 24 notifies gate application 43 of gate 40 of the result OK for the previous time (9-5), and the gate application 43 of gate 40 opens the gate (9-6). In the event that the setting of the validation for the previous time is not invalidated correctly while acquiring the results for terminal setting for the previous time during authentication using non-contact communication between combination card 20 that is the equipment 2 and gate 40 that is equipment 3, authentication is not permitted.
Further, in the event that it is determined that the previous result is OK, authentication application 24 of the combination card 20 sends an installation request to the mobile terminal 10 that is the equipment 1 (9-7).
In doing so, CPU 12 of mobile terminal 10 interrogates terminal application suspension management section 120 as to whether or not installation is possible (9-8), and determines whether installation is possible or not for the terminal application suspension management section 120. In the event that installation is possible, terminal application suspension management section 120 sends an application suspension request to the terminal setting management section 220 of the combination card 20 (9-10) and carries out authentication processing between the terminal application suspension management section 120 and the terminal setting management section 220 (9-11).
In the event that the authentication results are OK, terminal application suspension management section 120 sends the terminal application to be saved and its data from the mobile telephone 10 to, for example, terminal setting management section 220 on the side of the combination card 20 (9-12), and the terminal application to be saved and its data are stored at the terminal setting management section 220 (9-13).
In the event that this storage processing finishes safely, terminal setting management section 220 of the combination card 20 sends notification results of storage OK to terminal application suspension management section 120 of mobile terminal 10 (9-14), and terminal application suspension management section 120 returns a response that this is possible to CPU 12 (9-15).
In doing so, CPU 12 of mobile terminal 10 executes authentication processing with the authentication application 24 of the computer card 20 (9-16), and in the event that the authentication processing is OK, the terminal application to be newly installed is sent from authentication application 24 of the combination card 20 to CPU 12 of the mobile telephone 10 (9-17), and the transmitted terminal application is received and installed (9-18).
In the event that it is possible to install the terminal application 27 received from the combination card 20, CPU 12 of the mobile telephone 10 gives notification of the installation results of OK to the authentication application 24 of the combination card 20 (9-19), and the authentication application 24 provides setting notification on the terminal setting management section 220 (9-20).
Terminal setting management section 220, as in Embodiment 7, using the setting notification from authentication application 24, stores an ID shown in
After storing this data, terminal setting management section 220 gives notification that the storage results are OK to authentication application 24 (9-22). Here, at mobile telephone 10, processing at the time of saving a previously saved terminal application to combination card 20 and installing a new terminal application is complete. As in Embodiment 7, at combination card 20, the terminal setting management section 220 may of course be integral with the authentication application 24 or CPU 23.
Next, a description is given of processing at the time of restoration.
Processing at the time of restoration is such that the CPU 12 of the mobile terminal 10 that is the equipment 1 first carries out processing to delete a terminal application installed by timer management (9-23), and in the event that this deletion processing is complete, the terminal application suspension management section 120 carries out interrogation as to whether restoration is necessary or unnecessary (9-24).
Terminal application suspension management section 120 then receives this interrogation and determines whether restoration is necessary or unnecessary (9-25), and in the event that the terminal application is saved and restoration is necessary, a restoration request is sent to terminal setting management section 220 of the combination card 20 (9-26) and authentication processing is carried out between the terminal application suspension management section 120 and terminal setting management section 220 (9-27).
In the event that the result of this authentication processing is that authentication is OK, terminal setting management section 220 sends saved data for the terminal application and this terminal data to terminal application suspension management section 120 (9-28), the terminal application suspension management section 120 then receives data for this saved terminal application and terminal data, installs this in memory etc. and performs restoration (9-29), and sends the degeneration results to the terminal setting management section 220 (9-30).
In doing so, terminal setting management section 220 stores restoration results from terminal application suspension management section 120, for example, in authentication information etc. shown in
Authentication processing for between terminal application suspension management section 120 and terminal setting management section 220 (9-11) may be before an application suspension request (9-10) from the terminal application suspension management section 120 to the terminal setting management section 220, and authentication processing (9-16) between CPU 12 of mobile telephone 10 and authentication application 24 of combination card 20 may also be before an installation request (9-7) from the authentication application 24 to the CPU 12 of the mobile telephone 10. Authentication processing for between the terminal application management section 120 and authentication application 24 in processing at the time of restoration (9-24) may also be executed before receiving an interrogation as to whether or not restoration is necessary from CPU 12. Further, in the event that an authenticated state is adopted at the time where combination card 20 that is equipment 2 is installed in mobile telephone 10 that is equipment 1, the authentication processing (9-11 and 9-27) for between the terminal application suspension management section 220 and the terminal setting management section and the authentication processing (9-16) for between CPU 12 of mobile telephone 10 and authentication application 24 is not necessary and may be omitted.
Further, in the event that a timer function is present at combination card 20 that is equipment 2, time management is carried out at combination card 20, and upon the setting time, before deletion processing (9-23) by time management due to the CPU 12 of equipment 1, a deletion instruction is sent from equipment 2 to equipment 1 based on the timer function, and deletion processing may then be carried out using this deletion instruction at equipment 1. In this case, authentication processing (9-25) between terminal setting management section 220 of equipment 2 and terminal application suspension management section 120 of equipment 1 may also be carried out before a deletion instruction from equipment 2 to equipment 1, or may also be carried out before deletion processing (9-23) using timer management by CPU 12 of equipment 1.
A flowchart showing detailed processing occurring in a terminal application suspension management section 120 of Embodiment 8 is shown in
At terminal application suspension management section 120, first, a determination is made as to whether or not there is an interrogation as to whether or not installation of a terminal application is possible from CPU 12 (step 1000). In the event that installation is possible (step 1000 “YES”), the application management table (not shown) etc. is confirmed (step 1100), and a determination is made as to whether or not installation is possible without suspending the terminal application (step 1200).
For example, the application management table (not shown) etc. is confirmed, and in the event that the maximum number of terminal applications which is possible to store is ten, and there are already ten terminal applications stored, it is determined that a new installation is not possible without interrupting the terminal application. An example may also be considered as an installation possibility inquiry where, for example, terminal application of application ID3 is deleted as possibility inquiry ID1, and two terminal applications of application ID1 and application ID2 are installed.
In the event where it is determined that installation is possible without interrupting the terminal application (step 1200 “YES”), the terminal application suspension management section 120 notifies the CPU 12 that installation is possible, and installation can be executed without interrupting the terminal application (step 1250).
On the other hand, in the event that it is determined that installation is not possible without interrupting the terminal application (step 1200 “NO”) terminal application suspension management section 120 first determines the terminal application to be interrupted at the combination card 20 that is equipment 2 (step 1300). For example, the interruption priority table (not shown) of the terminal application etc. is referred to, and it is decided to interrupt the terminal application etc. of the game for the application ID8.
When the terminal application to be interrupted is decided, terminal application suspension management section 120 sends an interrupt request to terminal setting management section 220 of equipment 2, application interruption processing is implemented (step 1400), the interruption results are stored in the management table etc. (step 1500), and the start is returned to. For example, in the event of carrying out interruption processing of the terminal application of the game of application ID8, the interrogation ID1 for whether or not this terminal application is possible, time stamp for the time or interruption, interruption results of OK, interrupted application ID (application ID8), and information for authenticating with equipment 2 etc. are stored in a management table etc.
On the other hand, in step 3700, in the event that it is determined that there is not an interrogation for whether or not installation is possible (step S1000 “NO”)), but rather it is determined that there is an interrogation for whether or not restoration is necessary (step 1600 “YES”), whether or not restoration processing is necessary is confirmed with reference to the application management table (not shown) (step 1700).
As the interrogation of whether or not restoration is necessary, for example, because the setting of possibility inquiry ID1 for an inquiry as to whether or not installation is possible is terminated, if restoration processing is necessary, ID2 inquiring the necessity of restoration for execution of restoration processing etc. can be considered. Further, in the event that inquiry processing for the terminal application for the game of the application IDS is implemented at the possibility inquiry ID1, etc. is disclosed for during confirmation of whether or not restoration processing is necessary by referring to an application management table (not shown) etc., it is determined that restoration processing is necessary.
Here, in the event that restoration is determined not to be necessary (step 1800 “NO”), CPU 12 is notified of completion (step 1850). The start is then returned to, and in the event that restoration is determined to be necessary (step 1800 “YES”), terminal application suspension management section 120 sends a restoration request to terminal setting management section 220 of equipment 2, and implements restoration processing for the terminal application that has been terminated at the second terminal setting management section 220 (step 1900). The results of restoration processing are stored in an application management table (not shown) etc., CPU 12 is notified of these results (step 1950) and the beginning is returned to. Results of restoration processing may be, for example, possibility inquiry ID1, time stamp for the time of interruption, interruption result OK, necessity inquiry ID2, time stamp for the time of restoration, restoration results of OK, interrupted/regenerated application ID (application ID 8), and information for authentication with equipment 2, etc.
According to Embodiment 8, in the event that a new terminal application is installed at the mobile telephone 10 that is equipment 1, in order to guarantee the memory capacity of the mobile telephone 10 that is equipment 1, the terminal application of mobile telephone 10 is interrupted at the combination card 20, the new terminal application is installed at the mobile telephone 10, and in the event that release of the settings of the terminal application newly installed is carried out as a result of timer management etc., as the suspended terminal application was installed at the mobile telephone, it is possible to limit the area where the card application functions and apparatus functions etc. are presented without further increasing the memory capacity of the mobile telephone 10.
As described above, in an aspect of the present invention, an authentication section performing authentication processing for gate equipment, terminal applications installed at a terminal, and a control section installing terminal applications designated by the gate equipment at the terminal in the event that authentication of the authentication section with the gate equipment is successful are provided at a secure device. It is therefore possible for the secure device to be held up to gate equipment and for terminal applications to then be installed to the terminal only for an area passed into in a normal manner. The gate application for the gate equipment is designated to be an application functioning in a specific area. Registration operations of a user etc. are therefore not necessary, and providing of a GPS receiver at the terminal is therefore not necessary.
Moreover, in a further aspect of the present invention, an authentication section performing authentication processing for gate equipment, and a card application are provided at a secure device. In the event that authentication of the authentication section with the gate equipment is successful, a card application designated by the gate equipment is permitted to access a terminal application of the terminal. It is then possible for the terminal device to be held up to the gate equipment, and for the terminal application to utilize the card application only in areas passed into in a normal manner.
In another aspect of the present invention, an authentication section carrying out authentication processing with respect to gate equipment and registering identification information for successfully authenticated gate equipment, and a card application sending the identification information for the gate equipment to equipment carrying out predetermined operations under the condition that the authentication section successfully performs authentication with the gate equipment in order to provide verification of the equipment, and verifying the identification information in place of the equipment are provided at the security device. It is therefore possible to ensure that equipment does not operate if entering does not take place from the appropriate entrance where the gate equipment is installed.
Further, in a further aspect of the present invention, the security device sets terminal applications to be installed at a terminal or deleted from a terminal according to the communication scheme with the gate equipment. It is therefore possible to change the terminal application etc. installed at the terminal readily according to the communication scheme and security can therefore be ensured readily.
In a still further aspect of the present invention, the secure device determines whether or not settings with the terminal that were valid for the previous time have been correctly invalidated during authentication with the gate equipment, with authentication with the gate equipment then only being permitted in the event of correct invalidation. It is therefore possible to permit authentication with the gate equipment for this time based on whether or not invalidation processing for the previous time has been carried out correctly, and it is therefore possible to ensure greater security.
In a yet further aspect of the present invention, the secure device sets validity or invalidity of card applications according to the communication scheme with the gate equipment. It is therefore possible to ensure security readily according to the communication scheme.
In another aspect of the present invention, a communication section communicating with a secure device or a terminal holding the secure device and a gate application carrying out authentication processing with the secure device via the communication section, and designating a terminal application to be installed at the terminal for the successfully authenticated secure device, or a communication section communicating with a secure device or a terminal holding the secure device and an application carrying out authentication processing with the secure device via the communication section, and designating a card application that the terminal application of the terminal is capable of accessing for the successfully authenticated secure device, are provided at gate equipment. It is therefore possible to designate terminal applications to be installed at the terminal or card applications capable of being accessed by the terminal applications for secure devices for which authentication is successful.
In a further aspect of the present invention, the terminal apparatus holds a secure device, and installs a terminal application designated by the gate equipment from the secure device successfully authenticated with gate equipment, or the terminal apparatus holds a terminal device and is provided with a terminal application accessing a card application designated by gate equipment during a card application held by the secure device successfully authenticated with the gate equipment. It is therefore possible to have special functions of the terminal apparatus operation only in specific areas where gate equipment is arranged at an entrance.
In a further aspect of the present invention, in the event that a terminal application cannot be installed due to there being too little memory capacity at the time of receiving an install request for a new terminal application from the security device, the terminal apparatus installs the new terminal application from suspending a held terminal application in the secure device, then deletes the installed new terminal application, and regenerates the saved terminal application. It is therefore possible to implement anew terminal application even in cases where the memory capacity for suspending the terminal application is small.
In a further aspect of the present invention, equipment acquires identification information for gate equipment from a secure device successfully authenticated with the gate equipment and carries out predetermined operations in the event that authentication of this identification information is successful, or equipment carries out predetermined operations in the event that information indicating successful authentication of identification information of the gate equipment is acquired from a secure device that has been successfully authenticated with the gate equipment. It is therefore possible to ensure that the equipment does not operate if the user in possession of the secure device does not enter from the appropriate entrance.
This present application is based on Japanese Patent Application No. 2004-19461, filed on Jan. 28, 2004, the entire content of which is expressly incorporated by reference herein.
The present invention can be utilized in cases of changing functions of each type of secure device, and the functions of each type of terminal, apparatus, and equipment etc. in connection with location, path, position, communication scheme, invalidation processing for the previous time, and memory capacity etc., and is capable of being utilized in various fields such as in offices, homes, medical locations, and places of learning, etc.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2004-019461 | Jan 2004 | JP | national |
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/JP05/01232 | 1/28/2005 | WO | 00 | 7/27/2006 |
