JP2002216099A - Portable data recording terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a portable data recording terminal capable of spontaneously and autonomously detecting any abnormality such as the loss or robbery of the portable data recording terminal, and securing the inside data from others even when the loss or robbery is not noticed by the user himself or herself. SOLUTION: This portable data recording terminal is provided with a recording means for recording secret data such as the ID of a user himself or herself and a user confirming means for judging whether or not the present user who is using the portable data recording terminal is the user himself or herself based on information related with the user such as the operation contents of the present user or the biological information of the present user. Then, when it is judged that the present user is not the user himself or herself based on an output from the user confirming means, the operation by the user to the equipment is automatically stopped.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to an ID of a user himself / herself.
Mobile phones, personal digital assistants, I
The present invention relates to a portable data recording terminal such as a C card, which has enhanced data security capability.

[0002]

2. Description of the Related Art In recent mobile phones, the ID of the user is used.
, Bank account number and other secret information are recorded in a built-in recording device. On the other hand, mobile terminals such as mobile phones are often lost or stolen due to misplacement,
If the mobile phone is lost or stolen, there is a problem that important confidential information recorded therein is stolen or copied illegally by others.

Conventionally, when a mobile phone is lost or stolen, a predetermined command signal is wirelessly transmitted from the user to erase data in a recording device built in the mobile phone, It has been proposed to transmit data of a recording device built in a mobile phone to a recording device at a center (for example, JP-A-2000-151798).
JP, JP-A-2000-224660, JP-A-9-1
No. 82158).

[0004]

However, in the conventional proposals as described above, in any case, the mobile phone receives a command signal transmitted from the user or the center who noticed that the mobile phone was lost or stolen. For the first time, a mobile phone erases internal data or transmits internal data to the center, so that anyone who illegally acquires the mobile phone without the user or the center noticing can be used. It is impossible to prevent data from being stolen or illegally copied.

The present invention has been made in view of such problems of the prior art, and it has been described that a portable wireless terminal such as a portable telephone, an IC card and other portable data recording terminals have been lost or stolen. Even if the user or the center side has not yet noticed the fact, a portable wireless terminal such as a mobile phone, an IC card or other portable data recording terminal voluntarily and autonomously judges an abnormality such as loss or theft. It is another object of the present invention to provide a portable wireless terminal such as a portable telephone, an IC card and other portable data recording terminals capable of protecting internal data from others.

[0006]

A portable data recording terminal according to the present invention for solving the problems of the prior art is as follows.

[0007] 1. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and biometric information of the current user using the portable data recording terminal; Based on the information, personal identification means for determining whether or not the current user is the principal, and when the personal identification means determines that the current user is not the principal, A portable data recording terminal having a built-in operation stopping means for automatically not accepting an operation input from the user based on an output from an identification means.

[0008] 2. Recording means for recording the secret data such as the user's own ID, and information on the user such as the operation contents of the current user using the portable data recording terminal and the biometric information of the current user. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, A portable data recording terminal having a built-in encrypting means for automatically encrypting data recorded in said recording means based on an output from an identification means.

3. Recording means for recording the secret data such as the user's own ID, and information on the user such as the operation contents of the current user using the portable data recording terminal and the biometric information of the current user. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, A portable data recording terminal comprising a built-in data erasing means for automatically erasing data recorded in the recording means based on an output from an identification means.

[0010] 4. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, Based on the output from the identity verification means, automatically, the data recorded in the recording means, data transfer means for wirelessly transferring to a center or other predetermined external destination,
A portable data recording terminal characterized by incorporating therein.

5. A recording means composed of a semiconductor chip or the like for recording secret data such as the ID of the user himself / herself, and the operation contents of the current user using the portable data recording terminal and the current user. Based on information about the user such as biological information, personal identification means for determining whether or not the current user is the identity, and the identity verification means that the current user is not the identity When the determination is made, based on an output from the identity verification means, a destruction means for automatically destroying the recording means by an electric method or another method is incorporated. Portable data recording terminal.

6. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and biometric information of the current user using the portable data recording terminal; Based on the information, personal identification means for determining whether or not the current user is the principal, and when the personal identification means determines that the current user is not the principal, Based on the output from the identity verification means, for automatically transmitting the current user's existence, the contents of use thereof, or the details of how the device deals with it to a center or other predetermined destination. And a report transmission means.

7. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, User information transmission for automatically transmitting information such as the face image, voice, or current position of the current user to a center or other predetermined destination based on the output from the personal identification means. Means, and a portable data recording terminal.

8. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When the occurrence of the abnormality is detected in the device body, based on the output from the abnormality detecting means, an operation stopping means for automatically not accepting an operation input from the user And a portable data recording terminal characterized by incorporating:

9. Recording means for recording secret data such as the ID of the user; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device main body, based on the output from the abnormality detection means, automatically, encrypting means for encrypting the data recorded in the recording means, , A portable data recording terminal characterized by having a built-in.

10. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
And a data erasing means for automatically erasing data recorded in the recording means.

11. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
Data transfer means for automatically transferring the data recorded in the recording means to a center or another predetermined external destination wirelessly; Recording terminal.

[12] Recording means composed of a semiconductor chip or the like for recording secret data such as the user's own ID, and abnormality detection for portable data recording terminals for detecting abnormalities such as removal of a main battery or destruction of a device body. Means, when the abnormality detecting means detects that the abnormality has occurred in the device main body, the recording means is automatically set to an electric method or another method based on an output from the abnormality detecting means. And a destruction means for destruction by a portable data recording terminal.

13. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A report transmitting means for automatically transmitting the current user presence, the contents of use thereof, or the details of measures taken on the device side to the center, or another predetermined destination. A portable data recording terminal, characterized in that:

[14] Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
User information transmitting means for automatically transmitting information such as the face image, voice, or current position of the current user to a center or other predetermined destination. Characteristic portable data recording terminal.

15. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is the principal; and when the personal identification means determines that the current user is not the principal, Operation stopping means for automatically not accepting the operation input from the user based on the output from the personal identification means; and A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery for the portable telephone".

16. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is the principal; and when the personal identification means determines that the current user is not the principal, On the basis of the output from the identity verification means, an encryption means for automatically encrypting the data recorded in the recording means is incorporated. A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery."

17. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, A data erasing means for automatically erasing data recorded in the recording means based on an output from the personal identification means; and The portable data recording terminal is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery".

18. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is the principal; and when the personal identification means determines that the current user is not the principal, Based on the output from the identity verification means, automatically incorporates data recorded in the recording means, data transfer means for wirelessly transferring to a center or other predetermined external destination, The data transfer means is configured to be independently driven by a power supply from a `` dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body ''. Features and Portable data recording terminal that.

19. A recording means composed of a semiconductor chip or the like for recording secret data such as the ID of the user himself / herself, and the operation contents of the current user using the portable data recording terminal and the current user. Based on information about the user such as biological information, personal identification means for determining whether or not the current user is the identity, and the identity verification means that the current user is not the identity When it is determined, based on the output from the identity verification means, the recording means automatically includes a destruction means for destroying the recording means by an electric method or another method, and the destruction means comprises: Portable data recording characterized by being independently driven by power from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body" Terminal.

20. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, Based on the output from the identity verification means, for automatically transmitting the current user's existence, the contents of use thereof, or the details of how the device deals with it to a center or other predetermined destination. Built-in report transmission means, wherein the report transmission means is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body" Like Going on, and wherein the portable data recording device.

21. Recording means for recording secret data such as the user's own ID and information relating to the current user's operation contents and the current user's biometric information using the portable data recording terminal. Based on the information, personal identification means for determining whether or not the current user is a principal, and when the personal identification means determines that the current user is not a principal, User information transmission for automatically transmitting information such as a face image, a voice, or a current position of the current user to a center or other predetermined destination based on an output from the personal identification means. Means, and the user information transmitting means is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body" like Are I, portable data recording device, characterized in that.

22. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
Operation stopping means for automatically not accepting an operation input from the user, wherein the operation stopping means comprises a housing separately from a main battery for normal use of the device body. A portable data recording terminal that is independently driven by a power supply from a "dedicated power supply fixed inside".

23. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
Automatically incorporating encryption means for encrypting data recorded in the recording means, the encryption means,
Portable data characterized by being independently driven by power from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body" Recording terminal.

24. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A data erasing means for automatically erasing data recorded in the recording means, wherein the data erasing means is provided inside the housing separately from a main battery for normal use of the device main body. A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed to the power supply".

25. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A data transfer unit for automatically transferring the data recorded in the recording unit to a center or another predetermined external destination by wireless; and the data transfer unit includes: A portable data recording terminal characterized by being independently driven by a power supply from a "dedicated power supply fixed inside a housing separately from a main battery for normal use".

26. Recording means composed of a semiconductor chip or the like for recording secret data such as the user's own ID, and abnormality detection for portable data recording terminals for detecting abnormalities such as removal of a main battery or destruction of a device body. Means, when the abnormality detecting means detects that the abnormality has occurred in the device main body, the recording means is automatically set to an electric method or another method based on an output from the abnormality detecting means. And a destruction means for destruction, and the destruction means is independently provided by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body". A portable data recording terminal adapted to be driven.

27. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A report transmitting means for automatically transmitting the current user's presence, the content of use thereof, or the content of the device to cope with the current user to a center or another predetermined destination, and The transmission means is independently driven by a power supply from `` a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body '', Portable data recording terminal.

28. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
Automatically incorporating a user image transmitting means for transmitting information such as a face image, a voice, or a current position of the current user to a center or another predetermined destination, wherein the user information The transmission means is independently driven by a power supply from `` a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body '', Portable data recording terminal.

29. Recording means for recording confidential data such as the user's own ID and the like, which is constituted by a semiconductor chip, and operation contents of a current user using a portable data recording terminal Identification means for determining whether or not the current user is the person based on information about the user such as the user and the biometric information of the current user, and removal of the main battery for the portable data recording terminal Or, abnormality detection means for detecting the occurrence of an abnormality such as destruction of the device main body, and the identity confirmation means determines that the current user is not the principal, and the abnormality detection means generates the abnormality in the device main body. When it is detected that the recording has been performed, the semiconductor chip constituting the recording means is automatically configured based on the output from the personal identification means and the output from the abnormality detecting means. Destruction means for electrically destructing the semiconductor chip, comprising a destruction power supply for supplying a current exceeding an allowable current of the semiconductor chip, an output from the identity verification means, and an output from the abnormality detection means. And a switch for conducting the destruction power supply to the semiconductor chip based on the destruction power.

30. Recording means for recording secret data such as the user's own ID; and stopping current operation of the device by the user to protect the secret data recorded in the recording means. Data protection operations such as encryption of recorded data, erasure of data recorded in the recording means, wireless transfer of data recorded in the recording means to a predetermined destination, or destruction of the recording means. Data protection means for performing, a dedicated power supply for driving the data protection means independently of the main battery used for normal use of the device body, for the normal use of the device body A dedicated power supply fixed inside a housing separately from a main battery to be used; and a portable data recording terminal.

The above inventions 1 to 7 and 8 to 14 can be combined (combined) with each other. In addition, the invention of the above 15 to 21 and the above 22 to 2
The invention of the eighth aspect can be combined (combined) with each other.

[0038]

Embodiments of the present invention will be described below. FIG. 1 is a schematic block diagram showing the electrical configuration of the mobile phone according to the present embodiment. In FIG. 1, parts necessary for a call built in a conventional mobile phone are not shown, and parts necessary for realizing a new function according to the present invention are mainly shown.

In FIG. 1, reference numeral 1 denotes a transmitting and receiving unit for transmitting and receiving a voice signal and data for a normal call wirelessly to and from the outside;
Reference numeral 11 denotes a data recording unit for recording the user's name, address, ID, credit card number, bank account number, and other secret information. In the present embodiment, the data recording unit 11 is configured by a semiconductor chip such as a flash memory or a ROM (read only memory).

In FIG. 1, reference numeral 2 denotes a principal database, which is information on a legitimate user, for example, a password used only by the principal, a facial image of the principal, image data of the iris of the principal's eyes, and fingerprints of the principal. It is for recording image data, characteristics of the voice of the user, data on the habit of operating the keyboard and the pointing device such as the rhythm when the user operates the keyboard and the like, and the like.

In FIG. 1, reference numeral 3 denotes a CCD camera provided in the mobile phone for imaging the face, iris of the eyes, etc. of the user of the mobile phone, and 4 denotes an image of a fingerprint of the user of the mobile phone. Fingerprint input unit (for example, configured by a close-up CCD camera capable of capturing a fingerprint), 5
Is a keyboard (numeric keypad) for the user of the mobile phone to input a telephone number, an e-mail address, etc., and 6 is one of a plurality of icons displayed on the liquid crystal screen of the mobile phone by the user of the mobile phone. Pointing device (such as AccuPoint) used at times. In FIG. 1, reference numeral 21 denotes a microphone for inputting a user's voice, and reference numeral 22 denotes a GP for acquiring the current position of the user (that is, the current position of the portable data recording terminal).
S receiver.

In FIG. 1, reference numeral 7 denotes an identity confirmation unit for confirming whether the person using the mobile phone is a legitimate identity. The identity verification unit 7 collates data input from the camera 3, the fingerprint input unit 4, the keyboard 5, the pointing device 6, and the like with the data from the identity database 2, and according to a predetermined rule, It is determined whether or not the user is the user.

In the present embodiment, various determination methods can be employed as a method for the identity confirmation unit 7 to confirm whether the user is the identity. For example, the simplest is to display on the screen a message requesting the user to input a password from the keyboard 5 at predetermined time intervals, such as every 15 minutes, or to output a message by voice. It is possible to prompt the user to input a password, and if a correct password is not input within a predetermined time in response to this request, a method of determining that the user is not a legitimate user is possible.

In addition, a message requesting the user to input his / her fingerprint from the fingerprint input unit 4 at predetermined time intervals such as every 15 minutes is displayed on the screen or output by voice. Prompts the user to input a fingerprint. If the fingerprint is not input within a predetermined time in response to this request, or if the input does not match the fingerprint data recorded in the personal database 2, the user A method of determining that the person is not a legitimate person is possible.

When the user is operating the mobile phone, the mobile phone acquires the rhythm and the like of the operation of the keyboard 5 and the pointing device 6, and the operation habit is recorded in the personal database 2. If the habit data of the subject is significantly different from that of the subject, a method of determining that the subject is not the subject is also possible. Further, when the user is using the mobile phone, the face image and the iris image of the user are automatically captured by the camera 3 and the face image and the iris image of the user and the personal face image and the iris image of the personal database 2 are compared. , And when the similarity is lower than a predetermined value, it is possible to determine that the user is not the user. In addition, the user's voice input from the voice input microphone 21 can be compared with voice information in the personal database 2 to confirm whether the user is the user.

In FIG. 1, reference numeral 8 denotes an abnormality detection unit for detecting that an abnormal situation has occurred in the mobile phone (an abnormality has been added to the mobile phone);
Reference numeral 9 denotes an impact sensor (consisting of a piezoelectric element or the like) for detecting an impact given to the mobile phone. .

The abnormality detecting section 8 receives signals from the shock sensor 9 and the optical sensor 10 and determines whether or not an abnormal situation has occurred in the mobile phone. For example, the abnormality detection unit 8 is configured to
When an impact greater than a predetermined value set on the mobile phone occurs, it is determined that an abnormality has occurred. In addition, the abnormality detection unit 8 detects, based on a signal from the optical sensor 10, that an “abnormality that a case or a battery pack has been opened or removed” has occurred in a mobile phone (case or case). When the battery pack is opened or removed, light radiates into the inside of the housing or the lower side of the battery pack. Therefore, according to a signal from the optical sensor 10, the housing or the battery pack is opened or removed. It should be noted that means other than the optical sensor 10, for example, a magnetic sensor or the like can be used to detect whether the housing or the battery pack is opened or removed.) Although not shown, the abnormality detection unit 8
Can be determined to be abnormal when another sensor, such as a current sensor, detects that an abnormal current has flowed through the internal substrate of the mobile phone.

In FIG. 1, reference numeral 12 performs a predetermined control based on the outputs from the identity verification unit 7 and the abnormality detection unit 8 to protect the secret data recorded in the data recording unit 11. A control unit 13 for preventing the current user from receiving the operation input of the terminal of the present embodiment, and 14 an operation stopping unit for determining that the current user is not the user or that the current user A report transmission unit for transmitting the usage status by the control unit and the content of the response to the control unit 12 to a predetermined destination such as a center.
5 is an encryption unit for encrypting the data in the data recording unit 15 so that the data cannot be decrypted without predetermined key data;
16 is a data erasing unit for erasing data in the data recording unit 11, 17 is a data transferring unit for transferring data recorded in the data recording unit 11 to a predetermined destination such as a center, 18 Is the data recording unit 11
A destruction instructing unit for outputting a destruction instruction signal for electrically destroying the (semiconductor chip) to destroy data. In FIG. 1, reference numeral 23 denotes a user's face image from the camera 3, user's voice information (conversation information) from the microphone 21, and the GPS receiver 22.
A user information transmitting unit for transmitting user information including the current position information of the user from a user to a predetermined transmission destination such as a center or a person via the transmitting / receiving unit 1.

The control section 12 controls the operation stopping section 1 based on the outputs from the identity verification section 7 and the abnormality detection section 8.
3. Report transmission unit 14, encryption unit 15, data erasure unit 1
6. Control the data transfer section 17, the destruction instructing section 18, and the like.

That is, when the control unit 12 determines that the current user is not the user himself and determines that there is no particular abnormality in the mobile phone or that the abnormality is relatively minor. Then, the operation stopping unit 13 is controlled to stop the current user from operating the device (for example, access to the data recording unit 11 or the like is required unless a predetermined password is input). At this time, the control unit 12 informs the report transmitting unit 14 by e-mail or the like that the current user is not the user himself and that the current user has stopped operating the device.
, And transmits it to the center or the person via the transmitting / receiving unit 1. Further, at this time, the control unit 12 controls the user information transmitting unit 23 so that the user's face image, voice information,
Alternatively, the current position information or the like is transmitted to the center or the person via the transmission / reception unit 1.

Further, the control unit 12 determines that the current user is not the user himself and that the abnormality to the mobile phone is to some extent serious (for example, occurrence of abnormality such as removal of the battery pack). When it is determined, the encryption unit 14 is controlled to encrypt part or all of the data in the data recording unit 11. At this time, the control unit 12 sends, by e-mail or the like, from the report transmission unit 14 to the transmission / reception unit 1
To the center, the person, etc.

Further, the control unit 12 determines that the current user is not the user and that the abnormality in the portable telephone is quite serious (for example, the occurrence of an abnormality such as opening of the housing). When it is determined that the data transfer is performed, first, the data transfer unit 17 is controlled to transfer a part or all of the data of the data recording unit 11 to a center or the like. In parallel with the above operation, the data erasing unit 16 is controlled to erase a part or all of the data in the data recording unit 11. At this time, the control unit 12 sends an e-mail message indicating that the current user is not the user, that the data in the data recording unit 11 has been transferred to a center or the like, and that the data in the data recording unit 11 has been deleted. For example, the report is transmitted from the report transmitting unit 14 to the center or the person via the transmitting and receiving unit 1.

The control unit 12 determines that the current user is not the user himself and that the mobile phone has an extremely serious abnormality (for example, removal of the housing, destruction of the housing, When it is determined that the data recording section 11 (semiconductor chip) is broken, the data recording section 11 (semiconductor chip) is electrically broken.

That is, in the present embodiment, as shown in FIG. 1, the data recording unit (semiconductor chip) 11 has a large current (electrical power for the semiconductor chip) that can electrically destroy the data recording unit 11 as the semiconductor chip. Data recording unit 1
1 is connected via an electromagnetic switch 19 to a destruction power supply 20 which generates an unacceptably large current. The electromagnetic switch 19 is normally kept OFF. Now, when a destruction instruction signal (predetermined electrical output) is sent from the destruction instruction unit 18 to the electromagnetic switch 19 by the control unit 12, the electromagnetic switch 19 is switched from OFF to ON, and the destruction power supply 20 is turned on. Is sent to the data recording unit 11 as the semiconductor chip, and the data recording unit 11 is electrically destroyed. At this time, the control unit 12 informs the report transmitting unit 1 by e-mail or the like that the current user is not the user and that the data recording unit 11 has been electrically destroyed.
4 to the center or the person via the transmitting / receiving unit 1.

As described above, in the present embodiment, when the identity verification unit 7 determines that the current user is not the identity, the control unit 12 determines whether or not there is an abnormality in the mobile phone. Depending on the degree of abnormality, the operation of the data recording unit 11 is stopped, the data of the data recording unit 11 is encrypted, the data of the data recording unit 11 is erased, the data of the data recording unit 11 is transferred to the center, and the semiconductor chip is used. Electrical destruction of the data recording unit 11 of the
To prevent leakage of confidential information recorded in the server. Further, in the present embodiment, the content of the determination by the identity verification unit 7 that the user is not the identity and the content of the data protection processing by the control unit 12 are held by the report transmission unit at the center (or owned by the identity). Since the wireless transmission is performed to a terminal such as a personal computer, the center side or the person can know at an early stage that the mobile phone has been stolen or found by another person.

In the above-described embodiment, the identity confirmation unit 7, the abnormality detection unit 8, the control unit 12, and the operation stop unit 1 are used.
3. Report transmission unit 14, encryption unit 15, data erasure unit 1
6. The data transfer unit 17, the destruction instructing unit 18, the electromagnetic switch 19, and the like are provided with a main battery (a battery pack in the form of a battery pack so that the user can easily remove and replace it) used for ordinary mobile phone calls. A dedicated power supply (such as a battery or a capacitor) that is built into the housing of the mobile phone and is usually fixed so that the user cannot remove it. Even when the main power supply is turned off or turned off, the power supply can be independently supplied independently of the power supply. Thus, for example, even if another person who has found the lost mobile phone or stolen the mobile phone removes the main battery of the mobile phone, the above-mentioned identity verification unit 7, abnormality detection unit 8, control unit 1 can be used.
2, operation stop unit 13, report transmission unit 14, encryption unit 15,
Data erasure unit 16, data transfer unit 17, destruction instruction unit 1
8. The electromagnetic switch 19 and the like operate normally, and can perform operations such as personal identification and necessary data protection.

Further, in the above-described embodiment, the data protection when the mobile phone is lost or stolen has been described. However, the present invention is not limited to this.
The present invention can be similarly applied to protect data recorded therein when a personal digital assistant (PDA), an IC card, or the like is lost.

[0058]

As described above, according to the present invention, when the person using the portable data recording terminal is not a legitimate person, the current operation contents of the user (input of password, keyboard, etc.) The portable data recording terminal itself automatically and autonomously (without waiting for a command from the person or the center) from the habit of the operation of the user) and its biological information (face image, iris image, fingerprint image, voice, etc.) ), Stop the operation of the device by the current user (for example, if the current user Access is prohibited), data encryption, data erasure, data transfer, usage report by the user, transmission of user information, and the like are performed. Therefore, according to the present invention, even when the portable data recording terminal is lost or stolen, and the person or the center is unaware of the loss or theft, the portable data recording terminal can be used. Because it performs processing for data protection automatically and autonomously (without waiting for instructions from the person or the center), it is possible to reliably prevent leakage of secret data, and Information and usage details can be obtained quickly by the person and the center.

According to the present invention, if the person using the portable data recording terminal is not the authorized person,
The portable data recording terminal itself automatically and autonomously (without waiting for a command from the person or the center) senses the fact, and transfers the secret data recorded in the data recording means to the center or the person. Since the data is wirelessly transferred to a predetermined destination, the data recorded in the data recording means can be securely stored and secured by the center or the person (especially, as described above, the portable data Even if the recording terminal deletes the data to prevent data leakage or if the data is illegally destroyed by another person, the center or the person can securely store and secure the data. ).

Further, in the present invention, when the person using the portable data recording terminal is not an authorized person (in particular, the electronic circuit (substrate) for the portable data recording terminal due to the destruction of the housing. In the event of an abnormality such as exposure of the device), the portable data recording terminal itself automatically and autonomously (without waiting for a command from the person or the center) to detect the situation, and In order to prevent the data from being stolen by a user, the data recording means constituted by a semiconductor chip or the like is destroyed by an electric method or another method. Therefore, according to the present invention, even when the portable data recording terminal is lost or stolen, and the person or the center is unaware of the lost or stolen situation (and especially, Even if a person who possesses a lost or stolen portable data recording terminal illegally tries to illegally read the data inside it and opens the housing to expose the internal electronic circuit (substrate), etc. ), The portable data recording terminal itself destroys the data recording means automatically and autonomously (without waiting for a command from the person or the center) for data protection. Leakage can be more reliably prevented.

According to the present invention, if the person using the portable data recording terminal is not an authorized person,
The portable data recording terminal itself automatically and autonomously (without waiting for a command from the person or the center) senses the fact, and the other person who is not a legitimate person illegally records the portable data. The report transmission means informs the device that the terminal is being used) and the details of measures taken by the device (such as stopping operations on the device, data encryption, data transfer, and data erasure). The side autonomously transmits radio data to a predetermined destination such as the center or the person, so that the center or the person loses or stolen the portable data recording terminal while the person or the center does not notice. Even if you are, you will be able to know them early. Further, in the present invention, information about the user, such as the user's face image, voice (conversation content), and current position information, is autonomously transmitted from the device side to the center or the user by the user information transmitting means. Since transmission is performed to a predetermined transmission destination, the center and the individual can quickly obtain information on the current user.

In the present invention, the operation stopping means, the encrypting means, the data erasing means, the data transferring means, the destructing means, the report transmitting means, the user information transmitting means, etc. are provided in the portable data recording terminal. A dedicated power supply (battery or capacitor) built in and fixed inside the housing separately from the main battery used for normal use (which can be easily removed and replaced by the user) Independently operated, a person who possesses a lost or stolen portable data recording terminal illegally removes the main battery to illegally read data inside it. Even if the electronic circuit (substrate) inside is opened by opening the housing with, the portable data recording terminal itself will immediately
Suspension of operation to equipment, data encryption, data transfer to centers, etc., data erasure, semiconductor chip destruction, transmission of reports of illegal use by others other than the person to the center or person, transmission of user information, Actions such as transmission can be immediately and autonomously taken.

[Brief description of the drawings]

FIG. 1 is a schematic block diagram showing an internal configuration of a mobile phone according to an embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Transmission / reception part 2 Identity database 3 CCD camera 4 Fingerprint input part 5 Keyboard 6 Pointing device 7 Identity confirmation part 8 Abnormality detection part 11 Data recording part (semiconductor chip) 12 Control part 13 Operation stop part 14 Report transmission part 15 Encryption part 16 Data deletion unit 17 Data transfer unit 18 Destruction instruction unit 19 Electromagnetic switch 20 Destruction power supply 21 Microphone 22 GPS receiver 23 User information transmission unit

────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] April 20, 2001 (2001.4.2
0)

[Procedure amendment 1]

[Document name to be amended] Statement

[Correction target item name] Claims

[Correction method] Change

[Correction contents]

[Claims]

[Procedure amendment 2]

[Document name to be amended] Statement

[Correction target item name] 0007

[Correction method] Change

[Correction contents]

[0007] 1. Recording means for recording secret data such as the user's ID, abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal, and said abnormality detecting means. When it is detected that the abnormality has occurred in the device main body, based on an output from the abnormality detecting means, automatically, operation stop means for preventing operation input from the user is accepted. The operation stopping means is independently driven by a power supply from "a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body". A portable data recording terminal.

[Procedure amendment 3]

[Document name to be amended] Statement

[Correction target item name] 0008

[Correction method] Change

[Correction contents]

[0008] 2. Recording means for recording secret data such as the user's ID, abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal, and said abnormality detecting means. When it is detected that the abnormality has occurred in the device main body, based on an output from the abnormality detection unit, automatically encrypts data recorded in the recording unit. Built-in, the encryption means is independently driven by a power supply from `` a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body '', A portable data recording terminal, characterized in that:

[Procedure amendment 4]

[Document name to be amended] Statement

[Correction target item name] 0009

[Correction method] Change

[Correction contents]

[0009] 3. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A data erasing means for automatically erasing data recorded in the recording means, wherein the data erasing means is provided inside the housing separately from a main battery for normal use of the device main body. A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed to the power supply".

[Procedure amendment 5]

[Document name to be amended] Statement

[Correction target item name] 0010

[Correction method] Change

[Correction contents]

[0010] 4. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A data transfer unit for automatically transferring the data recorded in the recording unit to a center or another predetermined external destination by wireless; and the data transfer unit includes: A portable data recording terminal characterized by being independently driven by a power supply from a "dedicated power supply fixed inside a housing separately from a main battery for normal use".

[Procedure amendment 6]

[Document name to be amended] Statement

[Correction target item name] 0011

[Correction method] Change

[Correction contents]

[0011] 5. Recording means composed of a semiconductor chip or the like for recording secret data such as the user's own ID, and abnormality detection for portable data recording terminals for detecting abnormalities such as removal of a main battery or destruction of a device body. Means, when the abnormality detecting means detects that the abnormality has occurred in the device main body, the recording means is automatically set to an electric method or another method based on an output from the abnormality detecting means. And a destruction means for destruction, and the destruction means is independently provided by a power supply from a “dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body”. A portable recording terminal adapted to be driven.

[Procedure amendment 7]

[Document name to be amended] Statement

[Correction target item name] 0012

[Correction method] Change

[Correction contents]

[0012] 6. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A report transmitting means for automatically transmitting the present user's presence, the content of use thereof, or the content of the device's response thereto to a center or another predetermined destination, and The transmission means is independently driven by a power supply from `` a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body '', Portable data recording terminal.

[Procedure amendment 8]

[Document name to be amended] Statement

[Correction target item name] 0013

[Correction method] Change

[Correction contents]

[0013] 7. Recording means for recording secret data such as the user's own ID; abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal; When it is detected that the abnormality has occurred in the device body, based on the output from the abnormality detection means,
A user information transmitting means for automatically transmitting information such as a face image, a voice, or a current position of the current user to a center or another predetermined destination; The transmission means is independently driven by a power supply from `` a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body '', Portable data recording terminal.

[Procedure amendment 9]

[Document name to be amended] Statement

[Correction target item name] 0014

[Correction method] Change

[Correction contents]

[0014]

Embodiments of the present invention will be described below. FIG. 1 is a schematic block diagram showing the electrical configuration of the mobile phone according to the present embodiment. In FIG. 1, parts necessary for a call built in a conventional mobile phone are not shown, and parts necessary for realizing a new function according to the present invention are mainly shown.

[Procedure amendment 10]

[Document name to be amended] Statement

[Correction target item name] 0015

[Correction method] Change

[Correction contents]

In FIG. 1, reference numeral 1 denotes a transmitting / receiving unit for wirelessly transmitting and receiving voice symbols and data for ordinary calls to and from the outside, 11 denotes a user's name, address, ID, credit card number, bank account number, A data recording unit for recording other secret information. In the present embodiment, the data recording unit 11 is, for example, a flash memory or a ROM.
(Read only memory).

[Procedure amendment 11]

[Document name to be amended] Statement

[Correction target item name] 0016

[Correction method] Change

[Correction contents]

In FIG. 1, reference numeral 2 denotes a principal database, which is information about a legitimate user, such as a password used only by the principal, a facial image of the principal, image data of the iris of the principal's eye, and a fingerprint image of the principal. This is for recording data, characteristics of the voice of the user, data on the habit of operating the keyboard and the pointing device such as the rhythm when the user operates the keyboard and the like, and the like.

[Procedure amendment 12]

[Document name to be amended] Statement

[Correction target item name] 0017

[Correction method] Change

[Correction contents]

In FIG. 1, reference numeral 3 denotes a CCD camera provided in the mobile phone for imaging the face, eye iris, etc. of the mobile phone user, and 4 denotes an image of a fingerprint of the mobile phone user. Fingerprint input unit (for example, configured by a close-up CCD camera capable of capturing a fingerprint)
Reference numeral 5 denotes a keyboard (numeric keypad) for the user of the mobile phone to input a telephone number, an e-mail address, and the like, and 6 denotes one of a plurality of icons displayed on the liquid crystal screen of the mobile phone. Pointing device (such as AccuPoint) used when In FIG. 1, reference numeral 21 denotes a microphone for inputting a user's voice, and reference numeral 22 denotes a GP for acquiring the current position of the user (that is, the current position of the portable data recording terminal).
S receiver.

[Procedure amendment 13]

[Document name to be amended] Statement

[Correction target item name] 0018

[Correction method] Change

[Correction contents]

In FIG. 1, reference numeral 7 denotes an identification unit for confirming whether the person using the mobile phone is a legitimate person. The identity verification unit 7 collates data input from the camera 3, the fingerprint input unit 4, the keyboard 5, the pointing device 6, and the like with the data from the identity database 2, and according to a predetermined rule, It is determined whether or not the user is the user.

[Procedure amendment 14]

[Document name to be amended] Statement

[Correction target item name] 0019

[Correction method] Change

[Correction contents]

In the present embodiment, various determination methods can be adopted as a method for the personal identification unit 7 to confirm whether the user is the principal. For example, the simplest is to display on the screen a message requesting the user to input a password from the keyboard 5 at predetermined time intervals, such as every 15 minutes, or to output a message by voice. It is possible to prompt the user to input a password, and if a correct password is not input within a predetermined time in response to this request, a method of determining that the user is not a legitimate user is possible.

[Procedure amendment 15]

[Document name to be amended] Statement

[Correction target item name] 0020

[Correction method] Change

[Correction contents]

In addition, a message requesting the user to input his / her own fingerprint from the fingerprint input unit 4 at predetermined time intervals such as every 15 minutes for use is displayed on the screen or output by voice. In response to this request, if the fingerprint is not input within a predetermined time or if the fingerprint does not match the fingerprint data recorded in the personal database 2, the user is authenticated. It is possible to use a method of determining that the user is not the person in question.

[Procedure amendment 16]

[Document name to be amended] Statement

[Correction target item name] 0021

[Correction method] Change

[Correction contents]

When the user is operating the mobile phone, the mobile phone acquires the rhythm of the operation of the keyboard 5 and the pointing device 6 on the mobile phone side, and records the operation quirks in the personal database 2. If the habit data of the subject is significantly different from that of the subject, a method of determining that the subject is not the subject is also possible. Further, when the user is using the mobile phone, the face image and the iris image of the user are automatically captured by the camera 3 and the face image and the iris image of the user and the personal face image and the iris image of the personal database 2 are compared. , And when the similarity is lower than a predetermined value, it is possible to determine that the user is not the user. In addition, the user's voice input from the voice input microphone 21 can be compared with voice information in the personal database 2 to confirm whether the user is the user.

[Procedure amendment 17]

[Document name to be amended] Statement

[Correction target item name] 0022

[Correction method] Change

[Correction contents]

In FIG. 1, reference numeral 8 denotes an abnormality detection unit for detecting that an abnormal situation has occurred in the mobile phone (an abnormality has been added to the mobile phone); An impact sensor (consisting of a piezoelectric element or the like) 10 for detecting an applied impact is an optical sensor for detecting that the housing of the mobile phone or the battery pack has been removed.

[Procedure amendment 18]

[Document name to be amended] Statement

[Correction target item name] 0023

[Correction method] Change

[Correction contents]

The abnormality detecting section 8 includes the shock sensor 9
And a signal from the optical sensor 10 or the like is received to determine whether an abnormal situation has occurred in the mobile phone. For example, based on a signal from the impact sensor 9, the abnormality detecting unit 8 determines that an abnormality has occurred when an impact greater than a predetermined value set in the mobile phone occurs. Also,
The abnormality detection unit 8 detects, based on a signal from the optical sensor 10, that an “abnormality that a case or a battery pack has been opened or removed” has occurred in a mobile phone (case or battery pack). When the battery is opened or removed, light shines into the inside of the housing or the lower side of the battery pack. Therefore, a signal from the optical sensor 10 indicates that the housing or the battery pack has been opened or removed. Note that the optical sensor 1 is used to detect that the housing or the battery pack has been opened or removed.
It is also possible to use means other than 0, such as a magnetic sensor). Although not shown, the abnormality detection unit 8 may also determine that an abnormality has occurred when, for example, detecting that an abnormal current has been applied to the internal substrate of the mobile phone by another sensor, for example, a current sensor. Can be determined.

[Procedure amendment 19]

[Document name to be amended] Statement

[Correction target item name] 0024

[Correction method] Change

[Correction contents]

Also, in FIG. 1, reference numeral 12 performs predetermined control based on outputs from the identity verification unit 7 and the abnormality detection unit 8 in order to protect secret data recorded in the data recording unit 11. A control unit 13 for preventing the current user from receiving the operation input of the terminal of the present embodiment, and 14 an operation stopping unit for determining that the current user is not the user or that the current user A report transmission unit for transmitting the usage status by the user and the contents of the response to the control unit 12 to a predetermined destination such as a center,
Reference numeral 15 denotes an encryption unit for encrypting data of the data recording unit 15 so that the data cannot be decrypted without predetermined key data, 16 denotes a data erasing unit for erasing data of the data recording unit 11, and 17 denotes a data erasing unit. A data transfer unit 18 for transferring the data recorded in the data recording unit 11 to a predetermined destination such as a center. The data transfer unit 18 electrically destroys the data recording unit 11 (semiconductor chip) to transfer the data. And a destruction instruction unit for outputting a destruction instruction signal for destruction. In FIG. 1, reference numeral 23 denotes a face image of the user from the camera 3, voice information (conversation information) of the user from the microphone 21, and current position information of the user from the GPS receiver 22. A user information transmitting unit for transmitting user information to a predetermined destination such as a center or a person via the transmitting / receiving unit 1.

[Procedure amendment 20]

[Document name to be amended] Statement

[Correction target item name] 0025

[Correction method] Change

[Correction contents]

The control unit 12 controls the operation stop unit 13, the report transmission unit 14, the encryption unit 15, and the data deletion unit 1 based on the output from the identification unit 7 and the abnormality detection unit 8.
6. Control the data transfer section 17, the destruction instructing section 18, and the like.

[Procedure amendment 21]

[Document name to be amended] Statement

[Correction target item name] 0026

[Correction method] Change

[Correction contents]

That is, when the control unit 12 determines that the current user is not the user himself and determines that there is no particular abnormality in the mobile phone or that the abnormality is relatively small, Then, the operation stopping unit 13 is controlled to stop the current user from operating the device (for example, access to the data recording unit 11 or the like is required unless a predetermined password is input). At this time, the control unit 12 informs the report transmitting unit 14 by e-mail or the like that the current user is not the user himself and that the current user has stopped operating the device.
, And transmits it to the center or the person via the transmitting / receiving unit 1. Further, at this time, the control unit 12 controls the user information transmitting unit 23 so that the user's face image, voice information,
Alternatively, the current position information or the like is transmitted to the center or the person via the transmission / reception unit 1.

[Procedure amendment 22]

[Document name to be amended] Statement

[Correction target item name] 0027

[Correction method] Change

[Correction contents]

In addition, the control unit 12 determines that the current user is not the user himself and that the abnormality to the mobile phone is to some extent serious (for example, an abnormality such as removal of a battery pack has occurred). When it is determined, the encryption unit 14 is controlled to encrypt part or all of the data in the data recording unit 11. At this time, the control unit 12 sends, by e-mail or the like, from the report transmission unit 14 to the transmission / reception unit 1
To the center, the person, etc.

[Procedure amendment 23]

[Document name to be amended] Statement

[Correction target item name] 0028

[Correction method] Change

[Correction contents]

In addition, the control unit 12 determines that the current user is not the user himself and that the abnormality to the mobile phone is quite serious (for example, occurrence of an abnormality such as opening of the housing). When it is determined that the data transfer is performed, the data transfer unit 17 is controlled to transfer a part or all of the data of the data recording unit 11 to a center or the like. In parallel with the above operation, the data erasing unit 16 is controlled to erase a part or all of the data in the data recording unit 11. At this time, the control unit 12 sends an e-mail message indicating that the current user is not the user, that the data in the data recording unit 11 has been transferred to a center or the like, and that the data in the data recording unit 11 has been deleted. For example, the report is transmitted from the report transmitting unit 14 to the center or the person via the transmitting and receiving unit 1.

[Procedure amendment 24]

[Document name to be amended] Statement

[Correction target item name] 0029

[Correction method] Change

[Correction contents]

Further, the control unit 12 determines that the current user is not the user and that the mobile phone has an extremely serious abnormality (for example, removal of the housing, destruction of the housing, If it is determined that the data recording section 11 (semiconductor chip) is broken, the data recording section 11 (semiconductor chip) is electrically broken.

[Procedure amendment 25]

[Document name to be amended] Statement

[Correction target item name] 0030

[Correction method] Change

[Correction contents]

That is, in the present embodiment, as shown in FIG. 1, the data recording unit (semiconductor chip) 11 has a large current (electrical power as a semiconductor chip) capable of electrically destroying the data recording unit 11 as the semiconductor chip. The data recording unit 11 is connected via an electromagnetic switch 19 to a destruction power supply 20 which generates an unacceptably large current. The electromagnetic switch 19 is normally kept OFF. Now, the destruction instruction signal (predetermined electrical output) is output from the destruction instruction unit 18 by the control unit 12 to the electromagnetic switch 19.
The electromagnetic switch 19 is turned on from OFF.
And the large current from the destruction power supply 20 is sent to the data recording unit 11 as the semiconductor chip, so that the data recording unit 11 is electrically destroyed. At this time, the control unit 12 informs the report transmission unit 14 by e-mail or the like that the current user is not the user himself and that the data recording unit 11 has been electrically destroyed.
Then, the information is transmitted to the center, the person, and the like via the transmission / reception unit 1.

[Procedure amendment 26]

[Document name to be amended] Statement

[Correction target item name] 0031

[Correction method] Change

[Correction contents]

As described above, in the present embodiment, when the identity verification unit 7 determines that the current user is not the identity, the control unit 12 determines whether or not there is an abnormality in the mobile phone. The data recording unit 11 according to the degree of abnormality
Operation, data encryption of the data recording unit 11, erasure of data of the data recording unit 11, transfer of data of the data recording unit 11 to the center, electrical destruction of the data recording unit 11 as a semiconductor chip, and the like. Go to data recording unit 1
1 is prevented from leaking the secret information recorded therein. Further, in the present embodiment, the content of the determination by the identity verification unit 7 that the user is not the identity and the content of the data protection processing by the control unit 12 are held by the report transmission unit at the center (or owned by the identity). Since the wireless transmission is performed to a terminal such as a personal computer, the center side or the person can know at an early stage that the mobile phone has been stolen or found by another person.

[Procedure amendment 27]

[Document name to be amended] Statement

[Correction target item name] 0032

[Correction method] Change

[Correction contents]

In the above-described embodiment, the personal identification unit 7, the abnormality detection unit 8, the control unit 12, and the operation stop unit 1 are used.
3. Report transmission unit 14, encryption unit 15, data erasure unit 1
6. The data transfer unit 17, the destruction instructing unit 18, the electromagnetic switch 19, and the like are provided with a main battery (a battery pack in the form of a battery pack so that the user can easily remove and replace it) used for ordinary mobile phone calls. A dedicated power supply (such as a battery or a capacitor) that is built into the housing of the mobile phone and is usually fixed so that the user cannot remove it. Even when the main power supply is turned off or turned off, the power supply can be independently supplied independently of the power supply. Thus, for example, even if another person who has found the lost mobile phone or stolen the mobile phone removes the main battery of the mobile phone, the above-mentioned identity verification unit 7, abnormality detection unit 8, control unit 1 can be used.
2, operation stop unit 13, report transmission unit 14, encryption unit 15,
Data erasure unit 16, data transfer unit 17, destruction instruction unit 1
8. The electromagnetic switch 19 and the like operate normally, and can perform operations such as personal identification and necessary data protection.

[Procedure amendment 28]

[Document name to be amended] Statement

[Correction target item name] 0033

[Correction method] Change

[Correction contents]

Further, in the above-described embodiment, data protection when a mobile phone is lost or stolen has been described. However, the present invention is not limited to this. For example, a mobile information terminal (PDA), When an IC card or the like is lost, the present invention can be similarly applied to protect data recorded therein.

[Procedure amendment 29]

[Document name to be amended] Statement

[Correction target item name] 0034

[Correction method] Change

[Correction contents]

[0034]

As described above, according to the present invention, when the person using the portable data recording terminal is not a legitimate person, the current operation contents of the user (input of password, keyboard, etc.) The portable data recording terminal itself automatically and autonomously (without waiting for a command from the person or the center) from the habit of the operation of the user) and its biological information (face image, iris image, fingerprint image, voice, etc.) ), Stop the operation of the device by the current user (for example, if the current user Access is prohibited), data encryption, data erasure, data transfer, usage report by the user, transmission of user information, and the like are performed. Therefore, according to the present invention, even when the portable data recording terminal is lost or distressed, and the person or the center is unaware of the loss or theft, the portable data recording terminal can be used. Because it performs processing for data protection automatically and autonomously (without waiting for a command from the person or the center), it is possible to reliably prevent leakage of confidential data and to prevent current users Information and usage details can be obtained quickly by the person and the center.

[Procedure amendment 30]

[Document name to be amended] Statement

[Correction target item name] 0035

[Correction method] Change

[Correction contents]

Also, in the present invention, when the person using the portable data recording terminal is not the authorized person, the portable data recording terminal itself automatically and autonomously (from the person or the center). (Without waiting for a command), and by detecting this, the secret data recorded in the data recording means is wirelessly transferred to a predetermined transmission destination such as a center or a person. The center or the person himself / herself can surely save the data recorded in the server. (Especially, as described above, even if the portable data recording terminal itself deletes data to prevent data leakage, or if data is illegally destroyed by another person, Data can be stored and secured without fail).

[Procedure amendment 31]

[Document name to be amended] Statement

[Correction target item name] 0036

[Correction method] Change

[Correction contents]

In the present invention, when the person who uses the portable data recording terminal is not an authorized person (especially, the electronic circuit (substrate) for the portable data recording terminal due to the destruction of the housing. In the case of an abnormality such as exposure of the device), the portable data recording terminal itself automatically and autonomously (without waiting for a command from the person or the center) to detect the situation, In order to prevent the data from being stolen from the data, the data recording means constituted by a semiconductor chip or the like is destroyed by an electric method or another method. Therefore, according to the present invention, even when the portable data recording terminal is lost or stolen, and the person or the center is unaware of the lost or stolen situation (and especially, Even if a person who possesses a lost or stolen portable data recording terminal illegally tries to illegally read the data inside it and opens the housing to expose the internal electronic circuit (substrate), etc. ), The portable data recording terminal itself destroys the data recording means automatically and autonomously (without waiting for a command from the person or the center) for data protection. Leakage can be more reliably prevented.

[Procedure amendment 32]

[Document name to be amended] Statement

[Correction target item name] 0037

[Correction method] Change

[Correction contents]

Also, in the present invention, when the person using the portable data recording terminal is not a legitimate person, the portable data recording terminal itself automatically and autonomously (from the person or the center). (Without waiting for the order), detect it, and make sure that (an unauthorized person is using the portable data recording terminal illegally) and what the device is doing to deal with it (e.g. The device-side measures such as operation stop, data encryption, data transfer, and data erasure) are automatically transmitted from the device side to a predetermined transmission destination such as a center or a person by the report transmission means. The center and the person in charge will be able to know about the loss or theft of the portable data recording terminal early, even if the person or the center is unaware of it. become. Further, in the present invention, information about the user, such as a user's face image, voice (conversation content), and current position information, is transmitted by the user information transmitting means,
Since the apparatus side autonomously transmits the information to a predetermined destination such as the center or the person, the center and the person can quickly obtain information on the current user.

[Procedure amendment 33]

[Document name to be amended] Statement

[Correction target item name] 0038

[Correction method] Change

[Correction contents]

Further, in the present invention, the operation stopping means, the encrypting means, the data erasing means, the data transferring means,
What is the main battery (which can be easily removed and replaced by the user) used for the normal use of the portable data recording terminal, such as destruction means, report transmission means, user information transmission means, etc. Separately, a dedicated power supply (battery or capacitor) built in and fixed inside the housing operates independently of the main battery, so that a lost or stolen portable data recording terminal can be illegally used. Even if the possessor tries to illegally read the data inside, removes the main battery, opens the case and exposes the internal electronic circuit (board), the portable data recording terminal itself will not Immediately, stop operation to equipment, encrypt data, transfer data to the center, etc., erase data, destroy semiconductor chips, illegal by someone other than yourself The transmission of the report to the such as the fact of the centers and the person of use, the behavior, such as the transmission of user information, you become possible to immediately take to the autonomous.

[Procedure amendment 34]

[Document name to be amended] Statement

[Correction target item name] 0039

[Correction method] Deleted

[Procedure amendment 35]

[Document name to be amended] Statement

[Correction target item name] 0040

[Correction method] Deleted

[Procedure amendment 36]

[Document name to be amended] Statement

[Correction target item name] 0041

[Correction method] Deleted

[Procedure amendment 37]

[Document name to be amended] Statement

[Correction target item name] 0042

[Correction method] Deleted

[Procedure amendment 38]

[Document name to be amended] Statement

[Correction target item name] 0043

[Correction method] Deleted

[Procedure amendment 39]

[Document name to be amended] Statement

[Correction target item name] 0044

[Correction method] Deleted

[Procedure amendment 40]

[Document name to be amended] Statement

[Correction target item name] 0045

[Correction method] Deleted

[Procedure amendment 41]

[Document name to be amended] Statement

[Correction target item name] 0046

[Correction method] Deleted

[Procedure amendment 42]

[Document name to be amended] Statement

[Correction target item name] 0047

[Correction method] Deleted

[Procedure amendment 43]

[Document name to be amended] Statement

[Correction target item name] 0048

[Correction method] Deleted

[Procedure amendment 44]

[Document name to be amended] Statement

[Correction target item name] 0049

[Correction method] Deleted

[Procedure amendment 45]

[Document name to be amended] Statement

[Correction target item name] 0050

[Correction method] Deleted

[Procedure amendment 46]

[Document name to be amended] Statement

[Correction target item name] 0051

[Correction method] Deleted

[Procedure amendment 47]

[Document name to be amended] Statement

[Correction target item name] 0052

[Correction method] Deleted

[Procedure amendment 48]

[Document name to be amended] Statement

[Correction target item name] 0053

[Correction method] Deleted

[Procedure amendment 49]

[Document name to be amended] Statement

[Correction target item name] 0054

[Correction method] Deleted

[Procedure amendment 50]

[Document name to be amended] Statement

[Correction target item name] 0055

[Correction method] Deleted

[Procedure amendment 51]

[Document name to be amended] Statement

[Correction target item name] 0056

[Correction method] Deleted

[Procedure amendment 52]

[Document name to be amended] Statement

[Correction target item name] 0057

[Correction method] Deleted

[Procedure amendment 53]

[Document name to be amended] Statement

[Correction target item name] 0058

[Correction method] Deleted

[Procedure amendment 54]

[Document name to be amended] Statement

[Correction target item name] 0059

[Correction method] Deleted

[Procedure amendment 55]

[Document name to be amended] Statement

[Correction target item name] 0060

[Correction method] Deleted

[Procedure amendment 56]

[Document name to be amended] Statement

[Correction target item name] 0061

[Correction method] Deleted

[Procedure amendment 57]

[Document name to be amended] Statement

[Correction target item name] 0062

[Correction method] Deleted

Claims (30)

[Claims] 1. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Operation stop means for automatically not accepting an operation input from the user based on an output from the personal identification means. Type data recording terminal. 2. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity And a encrypting means for automatically encrypting data recorded in the recording means on the basis of an output from the personal identification means. Data recording terminal. 3. A recording means for recording secret data such as an ID of a user himself / herself, operation contents of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether the current user is the identity, and the identity verification means determines that the current user is not the identity And a data erasing means for automatically erasing data recorded in the recording means based on an output from the personal identification means. Recording terminal. 4. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Data transfer means for automatically transferring the data recorded in the recording means to a center or another predetermined external destination based on the output from the personal identification means. And a built-in portable data recording terminal. 5. A recording means composed of a semiconductor chip or the like for recording secret data such as an ID of a user himself / herself, and an operation content of a current user using a portable data recording terminal. Identification means for determining whether or not the current user is an individual based on information about the user such as the biometric information of the current user; and the identification of the current user by the identification means When it is determined that the user is not the principal, based on the output from the identity verification means, automatically includes a destruction means for destroying the recording means by an electric method or another method. A portable data recording terminal. 6. A recording means for recording secret data such as a user's own ID and the like, operation contents of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Automatically, based on the output from the personal identification means, automatically determines the presence of the current user, the contents of the use or the contents of the device to cope with it, at a center or other predetermined destination. A portable data recording terminal comprising: a report transmitting means for transmitting to a portable data recording terminal. 7. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Automatically send information such as the face image, voice or current position of the current user to a center or another predetermined destination based on the output from the identity verification means. And a user information transmitting means. 8. A recording means for recording secret data such as an ID of a user, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device main body, automatically stops accepting an operation input from the user based on an output from the abnormality detection unit. Portable data recording terminal, characterized in that the portable data recording terminal has a built-in operation stopping means. 9. Recording means for recording secret data such as an ID of a user himself / herself, and abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device main body with respect to a portable data recording terminal. When the abnormality detecting means detects that the abnormality has occurred in the device body, based on an output from the abnormality detecting means, automatically encrypts data recorded in the recording means. A portable data recording terminal, wherein the portable data recording terminal comprises: 10. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detecting unit detects that the abnormality has occurred in the device body, based on an output from the abnormality detecting unit, automatically deletes data recorded in the recording unit. And a data erasing means. 11. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device body, based on an output from the abnormality detection unit, automatically records the data recorded in the recording unit to a center or other device. A portable data recording terminal having a built-in data transfer means for wirelessly transferring data to a predetermined external destination. 12. A recording means composed of a semiconductor chip or the like for recording secret data such as an ID of a user, and abnormalities such as removal of a main battery and destruction of a device main body with respect to a portable data recording terminal. Abnormality detecting means for detecting the occurrence of the abnormality in the main body of the device by the abnormality detecting means, automatically based on an output from the abnormality detecting means, automatically connects the recording means And a destruction means for destruction by a method or another method. 13. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device main body, based on the output from the abnormality detection unit, automatically, the presence of the current user and its use content or A portable data recording terminal having a built-in report transmitting means for transmitting contents of measures taken on the device side to the center and other predetermined destinations. 14. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device main body, based on the output from the abnormality detection unit, automatically, the face image, voice, or current A portable data recording terminal having a built-in user information transmitting means for transmitting information such as a position to a center or another predetermined destination. 15. A recording means for recording secret data such as a user's own ID and the like, operation contents of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity And an operation stopping means for automatically not accepting an operation input from the user, based on an output from the personal identification means, wherein the operation stopping means comprises: A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from a main battery for normal use of the main body" . 16. A recording means for recording secret data such as a user's own ID and the like, operation contents of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity And an encryption unit for automatically encrypting data recorded in the recording unit based on an output from the personal identification unit. A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from a main battery for normal use." 17. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity And a data erasing means for automatically erasing data recorded in the recording means, based on an output from the personal identification means, wherein the data erasing means comprises: A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from a main battery for normal use". 18. A recording means for recording secret data such as a user's own ID and the like, operation contents of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Data transfer means for automatically transferring the data recorded in the recording means to a center or another predetermined external destination based on the output from the personal identification means. The data transfer means is independently driven by a power supply from a “dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body”. And A portable data recording terminal. 19. A recording means comprising a semiconductor chip or the like for recording secret data such as an ID of a user himself / herself; Identification means for determining whether or not the current user is an individual based on information about the user such as the biometric information of the current user; and the identification of the current user by the identification means When it is determined that the user is not the principal, based on the output from the personal identification means, automatically includes a destruction means for destroying the recording means by an electric method or another method, The destruction means is uniquely driven by a power supply from `` a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body '', Portable Data recording terminal. 20. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Automatically, based on the output from the personal identification means, automatically determines the presence of the current user, the contents of the use or the contents of the device to cope with it, at a center or other predetermined destination. Built-in report transmission means for transmitting to the device, wherein the report transmission means is powered by a power supply from a `` dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body '' Original A portable data recording terminal, characterized in that the portable data recording terminal is driven. 21. A recording means for recording secret data such as an ID of a user himself / herself, an operation content of a current user using a portable data recording terminal, and biometric information of a current user. Based on information about the user such as, the identity verification means for determining whether or not the current user is the identity, the identity verification means determines that the current user is not the identity Automatically send information such as the face image, voice or current position of the current user to a center or another predetermined destination based on the output from the identity verification means. Built-in user information transmitting means, wherein the user information transmitting means is powered by a power supply from a `` dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body '' Uniquely A portable data recording terminal adapted to be driven. 22. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detecting unit detects that the abnormality has occurred in the device main body, automatically stops accepting an operation input from the user based on an output from the abnormality detecting unit. Operation stop means, and the operation stop means is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body" A portable data recording terminal characterized in that it is adapted to be used. 23. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detecting means detects that the abnormality has occurred in the device body, based on an output from the abnormality detecting means, automatically encrypts the data recorded in the recording means. The encryption means is independently driven by a power supply from a “dedicated power supply that is fixed inside the housing separately from the main battery for normal use of the device body”. A portable data recording terminal characterized by the following. 24. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device body, based on an output from the abnormality detection unit, automatically deletes data recorded in the recording unit. Data erasing means, and the data erasing means is independently driven by a power supply from a "dedicated power supply fixed inside the housing separately from the main battery for normal use of the device body" A portable data recording terminal characterized by the following. 25. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device body, based on the output from the abnormality detection unit, automatically records the data recorded in the recording unit to a center or other device. A data transfer unit for wirelessly transferring to a predetermined external destination, wherein the data transfer unit is fixed inside the housing separately from a main battery for normal use of the device main body. A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply". 26. A recording means composed of a semiconductor chip or the like for recording secret data such as an ID of a user himself / herself, and an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal. Abnormality detecting means for detecting the occurrence of the abnormality in the main body of the device by the abnormality detecting means, automatically based on an output from the abnormality detecting means, automatically connects the recording means And a destruction means for destruction by a method or another method, wherein the destruction means is a dedicated power supply fixed inside the housing separately from the main battery for normal use of the device main body. A portable data recording terminal, which is independently driven by a power supply. 27. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a device body with respect to a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device body, based on the output from the abnormality detection unit, automatically, the presence of the current user and the contents of use or A report transmitting means for transmitting the contents of the response to the device side to the center or other predetermined destinations is built-in, and the report transmitting means includes a `` main battery for normal use of the device body and a main battery. A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing." 28. A recording means for recording secret data such as an ID of a user himself / herself, and an abnormality detecting means for detecting an abnormality such as removal of a main battery or destruction of a main body of a portable data recording terminal. When the abnormality detection unit detects that the abnormality has occurred in the device main body, based on the output from the abnormality detection unit, automatically, the face image, the voice, or the current Built-in user information transmitting means for transmitting information such as a position to a center or another predetermined destination, the user information transmitting means comprising: `` a main battery for normal use of the device body; A portable data recording terminal, which is independently driven by a power supply from a "dedicated power supply fixed inside the housing." 29. Recording means for recording confidential data such as an ID of a user himself, said recording means comprising a semiconductor chip, and a current means using a portable data recording terminal. Personal identification means for determining whether or not the current user is the user based on information about the user, such as the operation content of the user and the biometric information of the current user, and a portable data recording terminal Abnormality detection means for detecting the occurrence of an abnormality such as removal of the main battery or destruction of the apparatus main body, and the identity verification means determines that the current user is not the principal and the abnormality detection means When the occurrence of the abnormality is detected, the recording unit is automatically set based on the output from the personal identification unit and the output from the abnormality detection unit. Destruction means for electrically destroying a constituent semiconductor chip, comprising: a destruction power supply for supplying a current exceeding an allowable current of the semiconductor chip to electrically destroy the semiconductor chip; And a switch for conducting a current from the destruction power supply to the semiconductor chip based on an output from the abnormality detection unit and an output from the abnormality detection unit. Portable data recording terminal. 30. Recording means for recording secret data such as a user's own ID and the like, and current operation of a device by a user to stop the secret data recorded in said recording means. Encryption of data recorded in the recording means, erasure of data recorded in the recording means, wireless transmission of data recorded in the recording means to a predetermined destination, or destruction of the recording means, etc. A data protection unit for performing a data protection operation of the device, a dedicated power supply for independently driving the data protection unit from a main battery used for normal use of the device main body, And a dedicated power supply fixed inside the housing separately from the main battery used for use in the portable data recording terminal.